Trojan-Dropper.Win32.Dapato.dxmy (Kaspersky), Trojan.GenericKD.1604858 (B) (Emsisoft), Trojan.GenericKD.1604858 (AdAware), Trojan.MSIL.Bladabindi.2.FD, GenericInjector.YR (Lavasoft MAS)Behaviour: Trojan-Dropper, Trojan
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 686d2b67d3fcf700aabd7b850461c433
SHA1: 2133dcd4fd2f78f173ee55eed79023d303499259
SHA256: 4dbfd7894859668baacd6cab60aa7bfeeee95e5618721ac18cf7ad0c1ecc69b2
SSDeep: 6144:H2 b8x d2VzAalK7d1GNU8fykJxDFkMcuDXOgfrf0i7RSn:T8Yd2d4riUyXdmMcSXOgT8C
Size: 247808 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, NETexecutable, UPolyXv05_v6
Company: no certificate found
Created at: 2014-03-11 02:51:22
Analyzed on: WindowsXP SP3 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):
mscorsvw.exe:1912
WScript.exe:1736
%original file name%.exe:2024
%original file name%.exe:544
nt32.exe:1316
The Trojan injects its code into the following process(es):
cvtres.exe:432
nt32.exe:1560
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:2024 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\NTKernel\nt32.exe (1281 bytes)
The process nt32.exe:1560 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (133 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar7F.tmp (2712 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 (18 bytes)
%Documents and Settings%\All Users\Application Data\load32.vbs (873 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 (933 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\E8974A4669383843486E5AFDB09650F5 (224 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 (408 bytes)
%Documents and Settings%\%current user%\My Documents\315load32.exe (1281 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\C554DCF706A5AAB8B360FAD227EAB9C7 (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab7E.tmp (49 bytes)
%System%\wbem\Logs\wbemprox.log (76 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Startup\Update.Microsoft.com.url (46 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\E8974A4669383843486E5AFDB09650F5 (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar81.tmp (2712 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\C554DCF706A5AAB8B360FAD227EAB9C7 (176 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\0797C381B2F87EB5A1D5573BD15BA4F4 (240 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 (164 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\0797C381B2F87EB5A1D5573BD15BA4F4 (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab80.tmp (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar83.tmp (2712 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 (54 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)
C:\NTKernel\load32 (7972 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 (408 bytes)
%Documents and Settings%\All Users\Application Data\load32.exe (1281 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab82.tmp (54 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\Tar81.tmp (0 bytes)
%Documents and Settings%\All Users\Application Data\load32.vbs (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab7E.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar7F.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab82.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab80.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar83.tmp (0 bytes)
Registry activity
The process mscorsvw.exe:1912 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGenService\State]
"AccumulatedWaitIdleTime" = "2340000"
The process WScript.exe:1736 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "1C EF 75 65 9B 5D 02 77 6F 77 36 2E 02 E1 5D 91"
The process cvtres.exe:432 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E7 8A 01 A4 8F EA 19 E7 2B 87 62 1C 2F 30 1A 9E"
The process %original file name%.exe:2024 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "62 BE 49 BD CF 9F 00 3C 64 E9 39 00 FF 4E EB 54"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\NTKernel]
"nt32.exe" = " Offlin e Files Mig ration Plu gin."
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
"IntranetName" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
The process %original file name%.exe:544 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9D 14 30 C3 3D 2D 6E 74 00 E1 CB B6 4A 48 2B D8"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
The process nt32.exe:1560 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wireshark.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bdagent.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msseces.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ComboFix.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgidsagent.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSASCui.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbamservice.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgwdsvc.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconfig.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVP.EXE]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spybotsd.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbampt.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccuac.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastUI.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nt32.exe]
"DisableExceptionChainValidation" = ""
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbamscheduler.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgui.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msmpeng.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows Script Host\Settings]
"REG_DWORD" = "1"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbam.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgcsrvx.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mbamgui.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AVGNT.EXE]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avastSvc.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avguard.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ShowSuperHidden" = "0"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "3C FD AD DB 77 45 E4 2C 33 83 8E 90 DE A6 F0 CE"
[HKCU\Software\VB and VBA Program Settings\Microsoft\Sysinternals]
"bk" = "active"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zlclient.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MpCmdRun.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgrsx.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\keyscrambler.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avscan.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\VB and VBA Program Settings\Microsoft\Sysinternals]
"Version" = "-a scrypt -o stratum tcp://idhash.com:3333 -O ming.5:5 -t THREADS"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avcenter.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"load" = "C:\NTKernel\nt32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HijackThis.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\instup.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rstrui.exe]
"debugger" = "%Documents and Settings%\%current user%\My Documents\315load32.exe"
The following service is disabled:
[HKLM\System\CurrentControlSet\Services\Schedule]
"Start" = "4"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NT Kernel Service" = "C:\NTKernel\nt32.exe -rundll32 /SYSTEM32 C:\Windows\System32\taskmgr.exe %Program Files%\Microsoft\Windows"
The Trojan adds the reference to itself to be executed when a user logs on:
[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell" = "explorer.exe,%Documents and Settings%\All Users\Application Data\load32.exe"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following value(s) in system registry:
The Trojan disables automatic startup of the application by deleting the following autorun value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"
"VMware User Process"
"Adobe ARM"
"SunJavaUpdateSched"
The process nt32.exe:1316 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "15 76 B6 DF 8B 60 D0 20 30 9C 40 8E 33 8D E0 EA"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
mscorsvw.exe:1912
WScript.exe:1736
%original file name%.exe:2024
%original file name%.exe:544
nt32.exe:1316 - Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
C:\NTKernel\nt32.exe (1281 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\62B5AF9BE9ADC1085C3C56EC07A82BF6 (133 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar7F.tmp (2712 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 (18 bytes)
%Documents and Settings%\All Users\Application Data\load32.vbs (873 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 (933 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\E8974A4669383843486E5AFDB09650F5 (224 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 (408 bytes)
%Documents and Settings%\%current user%\My Documents\315load32.exe (1281 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\C554DCF706A5AAB8B360FAD227EAB9C7 (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab7E.tmp (49 bytes)
%System%\wbem\Logs\wbemprox.log (76 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Startup\Update.Microsoft.com.url (46 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\E8974A4669383843486E5AFDB09650F5 (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar81.tmp (2712 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\C554DCF706A5AAB8B360FAD227EAB9C7 (176 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F (176 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\0797C381B2F87EB5A1D5573BD15BA4F4 (240 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 (164 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\0797C381B2F87EB5A1D5573BD15BA4F4 (37 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab80.tmp (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Tar83.tmp (2712 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 (54 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F (533 bytes)
C:\NTKernel\load32 (7972 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 (408 bytes)
%Documents and Settings%\All Users\Application Data\load32.exe (1281 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\CryptnetUrlCache\MetaData\62B5AF9BE9ADC1085C3C56EC07A82BF6 (224 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Cab82.tmp (54 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NT Kernel Service" = "C:\NTKernel\nt32.exe -rundll32 /SYSTEM32 C:\Windows\System32\taskmgr.exe %Program Files%\Microsoft\Windows" - Remove the references to the Trojan by modifying the following registry value(s) (How to Work with System Registry):
[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell" = "explorer.exe,%Documents and Settings%\All Users\Application Data\load32.exe" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name:
Product Name:
Product Version:
Legal Copyright:
Legal Trademarks:
Original Filename:
Internal Name:
File Version:
File Description: Offlin e Files Mig ration Plu gin.
Comments:
Language: Hungarian (Hungary)
Company Name: Product Name: Product Version: Legal Copyright: Legal Trademarks: Original Filename: Internal Name: File Version: File Description: Offlin e Files Mig ration Plu gin. Comments: Language: Hungarian (Hungary)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 8192 | 244996 | 245248 | 5.36039 | f9d51a4540a1f3e42237042f4c09fa72 |
.rsrc | 253952 | 1536 | 1536 | 2.33762 | 81eadcd472e05fbf7d37f29b23ebb0a1 |
.reloc | 262144 | 12 | 512 | 0.056519 | 20cde55600486539501929554b1d8b93 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://dota2id.org/panel/gate.php | 108.160.152.134 |
hxxp://dota2id.org/panel/mining/CPUMiner.files | 108.160.152.134 |
hxxp://e6845.ce.akamaiedge.net/pca3-g2.crl | |
hxxp://e6845.ce.akamaiedge.net/CSC3-2009.crl | |
hxxp://e6845.ce.akamaiedge.net/pca3.crl | |
hxxp://e6845.ce.akamaiedge.net/CSC3-2009-2.crl | |
hxxp://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl | 23.9.117.163 |
hxxp://crl.verisign.com/pca3.crl | 23.9.117.163 |
hxxp://crl.verisign.com/pca3-g2.crl | 23.9.117.163 |
hxxp://csc3-2009-crl.verisign.com/CSC3-2009.crl | 23.9.117.163 |
idhash.com | 128.199.193.246 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /CSC3-2009.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: csc3-2009-crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
HTTP/1.1 200 OK
Server: Apache
ETag: "dee4c8c0f47e0b062f31548f63623031:1407186311"
Last-Modified: Mon, 04 Aug 2014 21:05:11 GMT
Date: Tue, 05 Aug 2014 02:49:38 GMT
Content-Length: 2249
Connection: keep-alive
Content-Type: application/pkix-crl
0...0......0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at hXXps://VVV.verisign.com/rpa (c)091.0,..U...%VeriSign Class 3 Code Signing 2009 CA..140804210003Z..140818210003Z0...0!.....zOR.D...,oMa...090525061903Z0!......t.o=(..(..G...090520231844Z0!... ....M...m.Q.&...090517075442Z0!...T.Ay(..U...:_|...090608072333Z0!... .(.....F..9.....090805090059Z0!.......P..._}..;.x..090714150126Z0!.....5=.qOV[.cyg.&..090528172131Z0!...K...=$.6.........090521015930Z0!...-H...D...tDXUN...090527062050Z0!.......-.'@..<B{....090525110212Z0!......x..m*[.7.h#"..090702070220Z0!.....%.o.....kT.....090527062152Z0!..!.*;....)..Ef..k..090529084018Z0!..#.}h..."..........090527050204Z0!..$.I^./@.:7.p.,v...090521201736Z0!..&.5{.....Q;D......090521184343Z0!..&...T[.~y.........090903081104Z0!...q..m...G..i^.....090521025017Z0!../a.nS..[lA.lCB....090527045238Z0!..0.....R..iX.px....090605052910Z0!..2.h..).n......p;..090713144756Z0!..:.............. ..090605052934Z0!..;.0.*.v..*....P...090601001940Z0!..?..}p 2I..o.\..u..090527061825Z0!..?....@.Z`......l..090527022214Z0!..B..h~a..]..L.2....100512125735Z0!..B.U..ZF...........090527041620Z0!..F'....?xxnx.6Q....090528003453Z0!..F|A..r....#.@.&...090527062259Z0!..L.r....F..^..i.t..090608130549Z0!..Q...Y...Exm.._7...090520225737Z0!..TH..~.. ..({......090723115618Z0!..U.59Z..[.G.RmyR1..090527071534Z0!..V ].h.../".V<8-...090611075746Z0!..gHT...j5zdG....K..090521205535Z0!..mje.......;.......090521012215Z0!..p^..E.{.>.........09
<<< skipped >>>
POST /panel/gate.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: dota2id.org
Content-Length: 194
Expect: 100-continue
Connection: Keep-Alive
HTTP/1.1 100 Continue
....
GET /pca3-g2.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
HTTP/1.1 200 OK
Server: Apache
ETag: "5722759b9289b36163a5ef7a94def647:1403746213"
Last-Modified: Thu, 26 Jun 2014 01:30:13 GMT
Accept-Ranges: bytes
Content-Length: 1415
Date: Tue, 05 Aug 2014 02:49:38 GMT
Connection: keep-alive
Content-Type: application/pkix-crl
0...0...0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1<0:..U...3Class 3 Public Primary Certification Authority - G21:08..U...1(c) 1998 VeriSign, Inc. - For authorized use only1.0...U....VeriSign Trust Network..140617000000Z..140930235959Z0...0!...=...X.FL...3..I..080403173458Z0!...SJs|.."E.G.......070412172616Z0!....E........W6.n...140129192923Z0!.......jvO..!....]..040401180422Z0!......\*....bO-.....080403173459Z0!....I..:.<....9..m..070412172523Z0!.........R.E!..=t...070522172634Z0!....}.....}.}.(q.C..040401180606Z0!...`.6..,...u.~x.:..080403173459Z0!.........wX.....~...080606171636Z0!..$.Jn>.t..d_j..."..040401180518Z0!.. ..N*(.}H..j......070412172308Z0!.. ..3.J......d..9..070522172711Z0!..50.h.:....s.K"....040401180542Z0!..7_f...s...........080403173459Z0!..<.J..y..)..~x7.e..080606171735Z0!..NS.c.f......7.p...070412172213Z0!..N.k;..-...9J..-...070522172748Z0!..Q..2pRv.WC.:..f...030109181346Z0!..Tq..m..*..........140129192925Z0!..^..CX4.3... F.R...070522172548Z0!..^..)..P3...7...L..080403173459Z0!..e........O.^.S....080403173457Z0!..jP....Wv..[.v.5H..070412172102Z0!..nk.l.!y.~...7G@...070412171752Z0!..r.q.I-Ln./........080403173458Z0!..t8....D...........080606171524Z0!..t.xn.tS....O_.....070412171951Z0!..v......Qnw..W.g...140129192921Z0...*.H............-.../)a)....K..^..o..(......Z.{b<n.........d..\%.|._"~.Nm..f..[n.0.`.....7.z....G.%I.>N...T.{...k...G.,#.Z.v~a&.......y.....}.......
<<< skipped >>>
GET /pca3.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
HTTP/1.1 200 OK
Server: Apache
ETag: "6eb6550a090577f2ae45953ce2c8a47b:1403747414"
Last-Modified: Thu, 26 Jun 2014 01:50:14 GMT
Accept-Ranges: bytes
Content-Length: 933
Date: Tue, 05 Aug 2014 02:49:38 GMT
Connection: keep-alive
Content-Type: application/pkix-crl
0...0...0...*.H........0_1.0...U....US1.0...U....VeriSign, Inc.1705..U....Class 3 Public Primary Certification Authority..140617000000Z..140930235959Z0..x0!...v....a_>..2......020924164823Z0!.....A.....{2..Y.#..140129175709Z0!...,.|.|...<...j ...080605174907Z0!...`y..q.......fh...020923171400Z0!...?A....a.nF`.P....020923171548Z0!............R.e.53..010207212458Z0!..!......Y...ISi....010706171411Z0!..$-..I{r....u<._...080403172226Z0!..&.."?..y..51}..1..010706172118Z0!..4....2....{W......080605175030Z0!..B....c............070411175910Z0!..H.Py...N....* ....010207212031Z0!..N....-.1Gq.@...C..040401175251Z0!..Y......w`G........070411175657Z0!..Z`..H.@B....Z.*q..080403172017Z0!..l....I...Y..] .c..010706171749Z0"......T=deQ...1u.]...010207212247Z0".....p..1..7<.....e..010207211822Z0...*.H............N...wS...d.....f..8j......).-..z.^...F..K.(|.4Wa&?.....GQ...59Wg%.P..@...i.Y.....Dmv.ct........C. .....4Shn...#.....\q...(...#5 ..
GET /CSC3-2009-2.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: csc3-2009-2-crl.verisign.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
HTTP/1.1 200 OK
Server: Apache
ETag: "e3a9ed37247caa7391c0c49e246a368b:1407186311"
Last-Modified: Mon, 04 Aug 2014 21:05:11 GMT
Date: Tue, 05 Aug 2014 02:49:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Connection: Transfer-Encoding
Content-Type: application/pkix-crl
00006000..0...0......0...*.H........0..1.0...U....US1.0...U....VeriSign, Inc.1.0...U....VeriSign Trust Network1;09..U...2Terms of use at https://VVV.verisign.com/rpa (c)09100...U...'VeriSign Class 3 Code Signing 2009-2 CA..140804210002Z..140818210002Z0...0!.....V..t..'.F(z....121202220203Z0!.... .;...9.7.......090826054212Z0!...\.)../F..^p..s...100722072726Z0!......P....A.x......100708154305Z0!.......O#.`n.5j.9...100930040708Z0!..../..8~p...h......091006052837Z0!.....(../L....--aK..091029040207Z0!...aW.....B.!.0..t..090909121104Z0!...g,..4(vv....mJ_..100514054218Z0!.....V.....(..-..p..090826162211Z0!....O..,J.N.n...Ly..091028032204Z0!....42r...I.Y@...3..100526162150Z0!.........}..Dt...!..090922192227Z0!.......2l....7i..?..101109030426Z0!.....p%...l,AogP....100523060224Z0!...,.P.C......*.....100303082219Z0!...NRPL.............100413090225Z0!....1w....d.&..8....091026111702Z0!......F....e........090608081352Z0!.....6..d6.7..4.....100924123027Z0!....$..*...s..&s....100219210742Z0!......Q_.G..|.......091009145530Z0!........>..O...=72..100616160934Z0!....Xlm$|".su.......090619194406Z0!......J)..E......C..100922142243Z0!...D......u.y.Iy{k..101026130323Z0!...El...)>..W..<K...101004225456Z0!...p..wy.i.zc...X...091117001921Z0!.....,{..^..........091203194409Z0!....B....d...*.P.@..100705023431Z0!.......m. .V.....~..101111134216Z0!...2.R.i.{..........091029071123Z0!...`F..q2..O.:......100602074221Z0!...a{.-...@...'.....100723194022Z0!........fW.y.,s.....101011182226Z0!....Um..}.8)........100324085953Z0!....,u.box
<<< skipped >>>
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
nt32.exe_1560:
.text
.text
`.rsrc
`.rsrc
@.reloc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
wHN`?-G}
wHN`?-G}
@%u.:
@%u.:
@.kAt
@.kAt
Mdk.cH
Mdk.cH
/%SE5y
/%SE5y
fv-n}
fv-n}
I.raf
I.raf
ku%X)k
ku%X)k
0Gs%D
0Gs%D
@.OyQ
@.OyQ
,X%uv
,X%uv
yF%3X
yF%3X
.Xc3rf
.Xc3rf
U8;%dy
U8;%dy
V.GRxSN&$
V.GRxSN&$
v2.0.50727
v2.0.50727
a.exe
a.exe
System.Windows.Forms
System.Windows.Forms
stub_2.netrsrc.resources
stub_2.netrsrc.resources
System.IO
System.IO
.ctor
.ctor
System.Resources
System.Resources
System.Globalization
System.Globalization
System.Reflection
System.Reflection
System.CodeDom.Compiler
System.CodeDom.Compiler
System.Diagnostics
System.Diagnostics
.cctor
.cctor
System.Runtime.InteropServices
System.Runtime.InteropServices
System.Text
System.Text
System.Text.RegularExpressions
System.Text.RegularExpressions
System.Threading
System.Threading
stub_2.Properties
stub_2.Properties
System.Configuration
System.Configuration
System.Runtime.CompilerServices
System.Runtime.CompilerServices
3System.Resources.Tools.StronglyTypedResourceBuilder
3System.Resources.Tools.StronglyTypedResourceBuilder
2.0.0.0
2.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
9.0.0.0
9.0.0.0
1.0.0.0
1.0.0.0
$ac045e25-5d9e-42b8-a1ce-4c3a95960eae
$ac045e25-5d9e-42b8-a1ce-4c3a95960eae
_CorExeMain
_CorExeMain
mscoree.dll
mscoree.dll
stub_2.netrsrc
stub_2.netrsrc
nt32.exe_1560_rwx_00400000_0002A000:
.text
.text
`.rsrc
`.rsrc
@.reloc
@.reloc
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
lSystem.Resources.ResourceReader, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
wHN`?-G}
wHN`?-G}
@%u.:
@%u.:
@.kAt
@.kAt
Mdk.cH
Mdk.cH
/%SE5y
/%SE5y
fv-n}
fv-n}
I.raf
I.raf
ku%X)k
ku%X)k
0Gs%D
0Gs%D
@.OyQ
@.OyQ
,X%uv
,X%uv
yF%3X
yF%3X
.Xc3rf
.Xc3rf
U8;%dy
U8;%dy
V.GRxSN&$
V.GRxSN&$
v2.0.50727
v2.0.50727
a.exe
a.exe
System.Windows.Forms
System.Windows.Forms
stub_2.netrsrc.resources
stub_2.netrsrc.resources
System.IO
System.IO
.ctor
.ctor
System.Resources
System.Resources
System.Globalization
System.Globalization
System.Reflection
System.Reflection
System.CodeDom.Compiler
System.CodeDom.Compiler
System.Diagnostics
System.Diagnostics
.cctor
.cctor
System.Runtime.InteropServices
System.Runtime.InteropServices
System.Text
System.Text
System.Text.RegularExpressions
System.Text.RegularExpressions
System.Threading
System.Threading
stub_2.Properties
stub_2.Properties
System.Configuration
System.Configuration
System.Runtime.CompilerServices
System.Runtime.CompilerServices
3System.Resources.Tools.StronglyTypedResourceBuilder
3System.Resources.Tools.StronglyTypedResourceBuilder
2.0.0.0
2.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
9.0.0.0
9.0.0.0
1.0.0.0
1.0.0.0
$ac045e25-5d9e-42b8-a1ce-4c3a95960eae
$ac045e25-5d9e-42b8-a1ce-4c3a95960eae
_CorExeMain
_CorExeMain
mscoree.dll
mscoree.dll
stub_2.netrsrc
stub_2.netrsrc
cvtres.exe_432:
.text
.text
``.data
``.data
.rdata
.rdata
`@.bss
`@.bss
.idata
.idata
.main
.main
.bxpck
.bxpck
66665\\\\
66665\\\\
\\\\5\\\\
\\\\5\\\\
666656666
666656666
libgcj-12.dll
libgcj-12.dll
JSON decode of %s failed
JSON decode of %s failed
http://
http://
https://
https://
stratum tcp://
stratum tcp://
http://%s
http://%s
cpuminer 2.3.2
cpuminer 2.3.2
accepted: %lu/%lu (%.2f%%), %s khash/s %s
accepted: %lu/%lu (%.2f%%), %s khash/s %s
DEBUG: reject reason: %s
DEBUG: reject reason: %s
DEBUG: job_id='%s' extranonce2=%s ntime=x
DEBUG: job_id='%s' extranonce2=%s ntime=x
Starting Stratum on %s
Starting Stratum on %s
...terminating workio thread
...terminating workio thread
...retry after %d seconds
...retry after %d seconds
JSON decode failed(%d): %s
JSON decode failed(%d): %s
{"method": "mining.submit", "params": ["%s", "%s", "%s", "%s", "%s"], "id":4}
{"method": "mining.submit", "params": ["%s", "%s", "%s", "%s", "%s"], "id":4}
{"method": "getwork", "params": [ "%s" ], "id":1}
{"method": "getwork", "params": [ "%s" ], "id":1}
JSON key '%s' not found
JSON key '%s' not found
JSON key '%s' is not a string
JSON key '%s' is not a string
CURL initialization failed
CURL initialization failed
%s%s%s
%s%s%s
Long-polling activated for %s
Long-polling activated for %s
json_rpc_call failed, retry after %d seconds
json_rpc_call failed, retry after %d seconds
DEBUG: got new work in %d ms
DEBUG: got new work in %d ms
Binding thread %d to cpu %d
Binding thread %d to cpu %d
thread %d: %lu hashes, %s khash/s
thread %d: %lu hashes, %s khash/s
Total: %s khash/s
Total: %s khash/s
work retrieval failed, exiting mining thread %d
work retrieval failed, exiting mining thread %d
http://127.0.0.1:9332/
http://127.0.0.1:9332/
%s: unsupported non-option argument '%s'
%s: unsupported non-option argument '%s'
JSON option %s invalid
JSON option %s invalid
https:
https:
%s:%s
%s:%s
thread %d create failed
thread %d create failed
%d miner threads started, using '%s' algorithm.
%d miner threads started, using '%s' algorithm.
cert
cert
userpass
userpass
-o, --url=URL URL of mining server (default: http://127.0.0.1:9332/)
-o, --url=URL URL of mining server (default: http://127.0.0.1:9332/)
-O, --userpass=U:P username:password pair for mining server
-O, --userpass=U:P username:password pair for mining server
-p, --pass=PASSWORD password for mining server
-p, --pass=PASSWORD password for mining server
--cert=FILE certificate for mining server using SSL
--cert=FILE certificate for mining server using SSL
-x, --proxy=[PROTOCOL://]HOST[:PORT] connect through a proxy
-x, --proxy=[PROTOCOL://]HOST[:PORT] connect through a proxy
--no-longpoll disable X-Long-Polling support
--no-longpoll disable X-Long-Polling support
--no-stratum disable X-Stratum support
--no-stratum disable X-Stratum support
[%d-d-d d:d:d] %s
[%d-d-d d:d:d] %s
User-Agent: cpuminer/2.3.2
User-Agent: cpuminer/2.3.2
HTTP request failed: %s
HTTP request failed: %s
JSON-RPC call failed: %s
JSON-RPC call failed: %s
hex2bin failed on '%s'
hex2bin failed on '%s'
DEBUG: %s
DEBUG: %s
Hash: %s
Hash: %s
Target: %s
Target: %s
http%s
http%s
http_proxy
http_proxy
Stratum connection failed: %s
Stratum connection failed: %s
{"id": 1, "method": "mining.subscribe", "params": []}
{"id": 1, "method": "mining.subscribe", "params": []}
{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.3.2", "%s"]}
{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.3.2", "%s"]}
{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.3.2"]}
{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.3.2"]}
mining.notify
mining.notify
Stratum session id: %s
Stratum session id: %s
mining.set_difficulty
mining.set_difficulty
client.reconnect
client.reconnect
stratum tcp://%s:%d
stratum tcp://%s:%d
Server requested reconnection to %s
Server requested reconnection to %s
client.get_version
client.get_version
cpuminer/2.3.2
cpuminer/2.3.2
client.show_message
client.show_message
MESSAGE FROM SERVER: %s
MESSAGE FROM SERVER: %s
{"id": 2, "method": "mining.authorize", "params": ["%s", "%s"]}
{"id": 2, "method": "mining.authorize", "params": ["%s", "%s"]}
%s near '%s'
%s near '%s'
%s near end of file
%s near end of file
unable to decode byte 0x%x at position %d
unable to decode byte 0x%x at position %d
control character 0x%x
control character 0x%x
invalid Unicode '\uX\uX'
invalid Unicode '\uX\uX'
invalid Unicode '\uX'
invalid Unicode '\uX'
end == saved_text lex->saved_text.length
end == saved_text lex->saved_text.length
unable to open %s: %s
unable to open %s: %s
\ux
\ux
\ux\ux
\ux\ux
mingwm10.dll
mingwm10.dll
__mingwthr_remove_key_dtor
__mingwthr_remove_key_dtor
__mingwthr_key_dtor
__mingwthr_key_dtor
VirtualQuery failed for %d bytes at address %p
VirtualQuery failed for %d bytes at address %p
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
Unknown pseudo relocation bit size %d.
%s: option requires an argument -- %c
%s: option requires an argument -- %c
%s: unrecognised option `-%s'
%s: unrecognised option `-%s'
%s: invalid option -- %c
%s: invalid option -- %c
option `%s%s' doesn't accept an argument
option `%s%s' doesn't accept an argument
option `%s%s' requires an argument
option `%s%s' requires an argument
%s: option `%s' is ambiguous
%s: option `%s' is ambiguous
%s: unrecognised option `%s'
%s: unrecognised option `%s'
0123456789
0123456789
curl_easy_cleanup
curl_easy_cleanup
curl_easy_init
curl_easy_init
curl_easy_perform
curl_easy_perform
curl_easy_reset
curl_easy_reset
curl_easy_setopt
curl_easy_setopt
curl_global_init
curl_global_init
curl_slist_append
curl_slist_append
curl_slist_free_all
curl_slist_free_all
curl_version
curl_version
pthread_join
pthread_join
libcurl-4.dll
libcurl-4.dll
KERNEL32.dll
KERNEL32.dll
msvcrt.dll
msvcrt.dll
pthreadGC2.dll
pthreadGC2.dll
WS2_32.dll
WS2_32.dll
zcÁ
zcÁ
KERNEL32.DLL
KERNEL32.DLL
USER32.DLL
USER32.DLL
EnumChildWindows
EnumChildWindows
kernel32.dll
kernel32.dll
ntdll.dll
ntdll.dll
mscoree.dll
mscoree.dll
.mixcrt
.mixcrt
Please contact the application's support team for more information.
Please contact the application's support team for more information.
- Attempt to initialize the CRT more than once.
- Attempt to initialize the CRT more than once.
- CRT not initialized
- CRT not initialized
- floating point support not loaded
- floating point support not loaded
GetProcessWindowStation
GetProcessWindowStation
operator
operator
USER32.dll
USER32.dll
SHELL32.dll
SHELL32.dll
OLEAUT32.dll
OLEAUT32.dll
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
GetConsoleOutputCP
GetConsoleOutputCP
EXEPackerHost32.exe
EXEPackerHost32.exe
?m_IID@@3RCU_IMAGE_IMPORT_DESCRIPTOR@@C
?m_IID@@3RCU_IMAGE_IMPORT_DESCRIPTOR@@C
`.rdata
`.rdata
@.data
@.data
.rsrc
.rsrc
@.reloc
@.reloc
.\BoxedAppSDK_StaticLib.cpp
.\BoxedAppSDK_StaticLib.cpp
BoxedAppSDK_TryCreateProcessForVirtualEXE_AnotherBitnessPartHelper
BoxedAppSDK_TryCreateProcessForVirtualEXE_AnotherBitnessPartHelper
BoxedAppSDK_AttachMixedBitnessProcessHelper
BoxedAppSDK_AttachMixedBitnessProcessHelper
BoxedAppSDK_EnumVirtualRegKeysA
BoxedAppSDK_EnumVirtualRegKeysA
BoxedAppSDK_EnumVirtualRegKeysW
BoxedAppSDK_EnumVirtualRegKeysW
BoxedAppSDK_ExecuteDotNetApplicationA
BoxedAppSDK_ExecuteDotNetApplicationA
BoxedAppSDK_ExecuteDotNetApplicationW
BoxedAppSDK_ExecuteDotNetApplicationW
BoxedAppSDK_DeleteVirtualRegKeyByHandle
BoxedAppSDK_DeleteVirtualRegKeyByHandle
BoxedAppSDK_DeleteVirtualRegKeyW
BoxedAppSDK_DeleteVirtualRegKeyW
BoxedAppSDK_DeleteVirtualRegKeyA
BoxedAppSDK_DeleteVirtualRegKeyA
BoxedAppSDK_CreateVirtualRegKeyW
BoxedAppSDK_CreateVirtualRegKeyW
BoxedAppSDK_CreateVirtualRegKeyA
BoxedAppSDK_CreateVirtualRegKeyA
C62E2B35-E4B3-4019-A7C4-F50AC7F78470
C62E2B35-E4B3-4019-A7C4-F50AC7F78470
Get exe dir...
Get exe dir...
Get exe dir...done
Get exe dir...done
Get the extension...done
Get the extension...done
Get current dir...done
Get current dir...done
Get old args...done
Get old args...done
The command line overriding: %s
The command line overriding: %s
GetCommandLineW preparing to intercept...done
GetCommandLineW preparing to intercept...done
GetCommandLineA preparing to intercept...done
GetCommandLineA preparing to intercept...done
The embedding BoxedApp into child processes: %s
The embedding BoxedApp into child processes: %s
GetWindowsDirectoryW
GetWindowsDirectoryW
RegCreateKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteKeyW
RegCloseKey
RegCloseKey
ADVAPI32.dll
ADVAPI32.dll
ole32.dll
ole32.dll
EXEPackerStub32.dll
EXEPackerStub32.dll
d:\build_area\boxedapp_src\src\boxedappsolution\exepackerstub\!output\exepackerstub32\release_full\EXEPackerStub32.pdb
d:\build_area\boxedapp_src\src\boxedappsolution\exepackerstub\!output\exepackerstub32\release_full\EXEPackerStub32.pdb
l$D9.tO
l$D9.tO
FTPSW
FTPSW
uÂ$D
uÂ$D
<p></p><pre>TryCreateProcessForVirtualEXE, template exe found:</pre><pre>CBoxedAppCore::My_NtDeleteKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtEnumerateValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtFlushKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtNotifyChangeKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtQueryKey, KeyHandle =</pre><pre>CBoxedAppCore::My_NtQueryMultipleValueKey, KeyHandle =</pre><pre>CBoxedAppCore::My_NtSetInformationKey, KeyHandle = 0x</pre><pre>KernelBase.dll</pre><pre>0x%x%x</pre><pre>CBoxedAppCore::My_NtCreateKey, ObjectAttributes = '</pre><pre>CBoxedAppCore::My_NtDeleteValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtLoadKey, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtQueryValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtReplaceKey, BackupHiveFileName = '</pre><pre>CBoxedAppCore::My_NtSetValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtUnloadKey, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtRenameKey, KeyHandle =</pre><pre>BoxedAppSDK::CBoxedAppCore::TryCreateProcessForVirtualEXE_AnotherBitnessPart</pre><pre>: Can't create process of rundll32.exe, last error =</pre><pre>{4F95F74C-9713-4181-ACDD-8A50195FBC0F}</pre><pre>BoxedAppSDK::CBoxedAppCore::AttachToProcess_WithProcessHelper</pre><pre>BoxedAppSDK::CBoxedAppCore::AttachMixedBitnessProcessHelper</pre><pre>CBoxedAppCore::My_NtLoadKey2, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtRestoreKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtSaveKey, KeyHandle = 0x</pre><pre>:\VirtualDllWithSameImport.dll</pre><pre>:\VirtualDllWithTls.dll</pre><pre>VirtualDllWithTls.dll</pre><pre>VirtualDllWithSameImport.dll</pre><pre>WinExec</pre><pre>advapi32.dll</pre><pre>NtRenameKey</pre><pre>NtUnloadKey</pre><pre>NtSetValueKey</pre><pre>NtSetInformationKey</pre><pre>NtSaveKey</pre><pre>NtRestoreKey</pre><pre>NtReplaceKey</pre><pre>NtQueryValueKey</pre><pre>NtQueryMultipleValueKey</pre><pre>NtQueryKey</pre><pre>NtOpenKeyEx</pre><pre>NtOpenKey</pre><pre>NtNotifyChangeKey</pre><pre>NtLoadKey2</pre><pre>NtLoadKey</pre><pre>NtFlushKey</pre><pre>NtEnumerateValueKey</pre><pre>NtEnumerateKey</pre><pre>NtDeleteValueKey</pre><pre>NtDeleteKey</pre><pre>NtCreateKey</pre><pre>[BOXEDAPP][pid:%d][tid:%d][ %.2d:%.2d:%.2d.%.3d]</pre><pre>FILE_EXECUTE</pre><pre>GENERIC_EXECUTE</pre><pre>KEY_WOW64_64KEY</pre><pre>KEY_WOW64_32KEY</pre><pre>KEY_NOTIFY</pre><pre>KEY_CREATE_LINK</pre><pre>KEY_ENUMERATE_SUB_KEYS</pre><pre>KEY_CREATE_SUB_KEY</pre><pre>KEY_SET_VALUE</pre><pre>KEY_QUERY_VALUE</pre><pre>SECTION_MAP_EXECUTE</pre><pre>PAGE_EXECUTE_WRITECOPY</pre><pre>PAGE_EXECUTE_READWRITE</pre><pre>PAGE_EXECUTE_READ</pre><pre>PAGE_EXECUTE</pre><pre>STATUS_PRIMARY_TRANSPORT_CONNECT_FAILED</pre><pre>STATUS_LOCAL_USER_SESSION_KEY</pre><pre>STATUS_NULL_LM_PASSWORD</pre><pre>STATUS_IMAGE_MACHINE_TYPE_MISMATCH_EXE</pre><pre>STATUS_CARDBUS_NOT_SUPPORTED</pre><pre>STATUS_INVALID_PORT_ATTRIBUTES</pre><pre>STATUS_PORT_MESSAGE_TOO_LONG</pre><pre>STATUS_PORT_DISCONNECTED</pre><pre>STATUS_PORT_CONNECTION_REFUSED</pre><pre>STATUS_INVALID_PORT_HANDLE</pre><pre>STATUS_PORT_ALREADY_SET</pre><pre>STATUS_EAS_NOT_SUPPORTED</pre><pre>STATUS_CTL_FILE_NOT_SUPPORTED</pre><pre>STATUS_WRONG_PASSWORD</pre><pre>STATUS_ILL_FORMED_PASSWORD</pre><pre>STATUS_PASSWORD_RESTRICTION</pre><pre>STATUS_PASSWORD_EXPIRED</pre><pre>STATUS_FLOAT_DENORMAL_OPERAND</pre><pre>STATUS_FLOAT_INVALID_OPERATION</pre><pre>STATUS_PIPE_NOT_AVAILABLE</pre><pre>STATUS_INVALID_PIPE_STATE</pre><pre>STATUS_PIPE_BUSY</pre><pre>STATUS_PIPE_DISCONNECTED</pre><pre>STATUS_PIPE_CLOSING</pre><pre>STATUS_PIPE_CONNECTED</pre><pre>STATUS_PIPE_LISTENING</pre><pre>STATUS_NOT_SUPPORTED</pre><pre>STATUS_PIPE_EMPTY</pre><pre>STATUS_WRONG_PASSWORD_CORE</pre><pre>STATUS_PIPE_BROKEN</pre><pre>STATUS_DISK_OPERATION_FAILED</pre><pre>STATUS_KEY_DELETED</pre><pre>STATUS_KEY_HAS_CHILDREN</pre><pre>STATUS_NO_USER_SESSION_KEY</pre><pre>STATUS_PASSWORD_MUST_CHANGE</pre><pre>STATUS_PORT_UNREACHABLE</pre><pre>STATUS_LOGIN_TIME_RESTRICTION</pre><pre>STATUS_LOGIN_WKSTA_RESTRICTION</pre><pre>STATUS_UNSUPPORTED_COMPRESSION</pre><pre>STATUS_NO_USER_KEYS</pre><pre>STATUS_NOT_EXPORT_FORMAT</pre><pre>STATUS_TRANSPORT_FULL</pre><pre>STATUS_WMI_NOT_SUPPORTED</pre><pre>STATUS_SAM_NEED_BOOTKEY_PASSWORD</pre><pre>STATUS_SAM_NEED_BOOTKEY_FLOPPY</pre><pre>STATUS_STRONG_CRYPTO_NOT_SUPPORTED</pre><pre>STATUS_NOT_SUPPORTED_ON_SBS</pre><pre>STATUS_CSS_KEY_NOT_PRESENT</pre><pre>STATUS_CSS_KEY_NOT_ESTABLISHED</pre><pre>STATUS_NO_KERB_KEY</pre><pre>STATUS_UNSUPPORTED_PREAUTH</pre><pre>STATUS_PORT_NOT_SET</pre><pre>STATUS_INVALID_IMPORT_OF_NON_DLL</pre><pre>STATUS_SMARTCARD_NO_KEY_CONTAINER</pre><pre>STATUS_SMARTCARD_NO_CERTIFICATE</pre><pre>STATUS_SMARTCARD_NO_KEYSET</pre><pre>STATUS_SMARTCARD_CERT_REVOKED</pre><pre>STATUS_SMARTCARD_CERT_EXPIRED</pre><pre>STATUS_SXS_KEY_NOT_FOUND</pre><pre>STATUS_CLUSTER_JOIN_IN_PROGRESS</pre><pre>STATUS_CLUSTER_JOIN_NOT_IN_PROGRESS</pre><pre>RegDeleteKeyExW</pre><pre>NtRequestWaitReplyPort</pre><pre>NtConnectPort</pre><pre>NtReplyPort</pre><pre>NtCompleteConnectPort</pre><pre>NtAcceptConnectPort</pre><pre>NtReplyWaitReceivePort</pre><pre>NtCreateWaitablePort</pre><pre>Imported function,</pre><pre>.data</pre><pre>It's impossible to create virtual file: parent file is virtual, but passed pBehavior is not NULL</pre><pre>It's impossible to create virtual file: passed pBehavior doesn't support Behavior::IVirtualFileStream</pre><pre>It's impossible to create virtual file: parent node is virtual, but passed pBehavior is not NULL</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetAllChildsKeys</pre><pre>NtEnumerateKey() returned unexpected error, status =</pre><pre>, RegTree::IEnumKeyNode::GetNext() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::EnumVirtualRegKeys</pre><pre>, RegTree::IKeyNode::EnumKeys() failed, hr =</pre><pre>: RegTree::IEnumKeyNode::GetNext() failed, hr =</pre><pre>: GetAllChildsKeys() failed, status =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtQueryKeyInternal</pre><pre>: RegTree::IKeyNode::EnumKeys() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetFullRegKeyPath</pre><pre>error, IVirtualKeyHandle_GetFullPath() returned</pre><pre>Invalid key information class:</pre><pre>KeySetHandleTagsInformation is not supported for virtual handle</pre><pre>KeySetDebugInformation is not supported for virtual handle</pre><pre>KeySetVirtualizationInformation is not supported for virtual handle</pre><pre>KeyControlFlagsInformation is not supported for virtual handle</pre><pre>KeyWow64FlagsInformation is not supported for virtual handle</pre><pre>We still don't process NtQueryObject / ObjectBasicInformation for virtual key handles</pre><pre>We still don't process NtQueryObject / ObjectTypeInformation for virtual key handles</pre><pre>: IVirtualKeyHandle::Rename() failed, hr =</pre><pre>: RegTree::IKeyNode::Remove() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtRenameKeyInternal</pre><pre>: RegTree::IKeyNode::AddKey() failed, hr =</pre><pre>: result hkey =</pre><pre>: IVirtualKey::CreateKey() failed, hr =</pre><pre>: we can't create a virtual key with its own behavior under another virtual key</pre><pre>: Handles::CreateVirtualKeyHandle() failed, hr =</pre><pre>: IVirtualKey::OpenKey() failed, hr =</pre><pre>: RegImpl::CreateKeyOnSharedMem() failed, hr =</pre><pre>: GetFullRegKeyPath() failed for the hKey =</pre><pre>: Handles::IVirtualKeyHandle::CreateKey() failed and returned</pre><pre>: passed pBehavior is not NULL, but parent key is virtual, so we can't create a key</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::CreateVirtualRegKey</pre><pre>: lpSubKey: "</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::SearchStartingFromRealKey</pre><pre>: Handles::CreateVirtualKeyHandle() failed</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtCreateKeyInternal</pre><pre>: SearchStartingFromRealKey() failed</pre><pre>: RegTree::IKeyNode::FindValue() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtDeleteValueKeyInternal</pre><pre>: IVirtualKeyHandle::put_Value() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetRealKeyLastWriteTime</pre><pre>: NtQueryKey() failed, status =</pre><pre>: NtOpenKey() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::HasRealKeySubKeys</pre><pre>: NtEnumerateValueKey() failed when we tried to get name of the node, status =</pre><pre>: IKeyNode::EnumValues() failed, hr =</pre><pre>: Behavior::IVirtualKeyHandle::EnumKeys() failed, hr =</pre><pre>: Behavior::IVirtualKeyHandle::EnumValues() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtEnumerateValueKeyInternal</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtOpenKeyInternal</pre><pre>: invalid KeyInformationClass passed:</pre><pre>: IVirtualKeyHandle_GetFullPath() failed, hr =</pre><pre>: Behavior::IEnumVirtualKey::GetNext() failed, hr =</pre><pre>: IVirtualKeyHandle::EnumValues() failed, hr =</pre><pre>: IVirtualKeyHandle::EnumKeys() failed, hr =</pre><pre>: IVirtualKeyHandle::get_LastWriteTime() failed, hr =</pre><pre>reg:NtQueryMultipleValueKey(</pre><pre>: IKeyNode::FindValue() failed, hr =</pre><pre>: IVirtualKeyHandle::get_Value() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtQueryValueKeyInternal</pre><pre>: IVirtualKeyHandle::get_ValueType() failed, hr =</pre><pre>reg:NtSetInformationKey(</pre><pre>RegTree::IKeyNode::RemoveValue() failed, hr</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtSetValueKeyInternal</pre><pre>reg:NtRenameKey(</pre><pre>RegTree::IEnumKeyNode::GetNext(), hr =</pre><pre>RegTree::IKeyNode::EnumKeys(), hr =</pre><pre>: IEnumVirtualKey::GetNext() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtDeleteKeyInternal</pre><pre>reg:NtDeleteValueKey(</pre><pre>: NtEnumerateKey() failed when we tried to get name of the node, status =</pre><pre>, Behavior::IVirtualKeyHandle::get_Prop() failed, hr =</pre><pre>, Behavior::IVirtualKey::OpenKey() failed, hr =</pre><pre>: IKeyNode::EnumKeys() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtEnumerateKeyInternal</pre><pre>reg:NtEnumerateValueKey(</pre><pre>reg:NtQueryKey(</pre><pre>reg:NtQueryValueKey(</pre><pre>reg:NtSetValueKey(</pre><pre>reg:NtCreateKey(</pre><pre>reg:NtDeleteKey(</pre><pre>reg:NtEnumerateKey(</pre><pre>reg:NtOpenKey(</pre><pre>RegOpenKeyExW</pre><pre>RegOpenKeyW</pre><pre>bxsdk32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\bxsdk32.pdb</pre><pre>`.rsrc</pre><pre>v2.0.50727</pre><pre>BoxedAppSDK_AppDomainManager.dll</pre><pre>System.Security</pre><pre>.ctor</pre><pre>System.Security.Policy</pre><pre>System.Reflection</pre><pre>System.Runtime.InteropServices</pre><pre>System.Diagnostics</pre><pre>System.Runtime.CompilerServices</pre><pre>System.Collections</pre><pre>System.Security.Permissions</pre><pre>System.IO</pre><pre>DllImportAttribute</pre><pre>shell32.dll</pre><pre>lpCmdLine</pre><pre>1.0.0.0</pre><pre>$87cd9ac9-2a94-4a9b-aee1-8d25d6a19f78</pre><pre>D:\build_area\boxedapp_src\src\BoxedAppSolution\DotNetAppDomainManager\obj\x86\Release_Full\BoxedAppSDK_AppDomainManager.pdb</pre><pre>BoxedAppSDKThunk32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\BoxedAppSDKThunk32.pdb</pre><pre>.reloc</pre><pre>TLSSupport32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\TLSSupport32.pdb</pre><pre>9 9$9(9,909</pre><pre>4!40484}4</pre><pre>:$:,:5:::{:</pre><pre>?#?2?9?@?</pre><pre>1 1$1(1,1014181</pre><pre>9$=(=,=0=4=8=<=@=</pre><pre>6 6$6(6,6064686<6><pre>1"26233'4</pre><pre>4 40454:4</pre><pre>:":2:7:>;</pre><pre>,1014181</pre><pre>8 8$8(8,8</pre><pre>P`.data</pre><pre>.edata</pre><pre>0@.idata</pre><pre>SShPi</pre><pre>SSh}i</pre><pre>purl/</pre><pre>j.RPj</pre><pre>libgcj_s.dll</pre><pre>Couldn't open file %s</pre><pre>Can't open %s for writing</pre><pre>Can't get the size of %s</pre><pre>Last-Modified: %s, d %s M d:d:d GMT</pre><pre>%c%c==</pre><pre>%c%c%c=</pre><pre>%c%c%c%c</pre><pre>%s:%d</pre><pre>%5[^:]:%d:%5s</pre><pre>Resolve %s found illegal!</pre><pre>Added %s:%d:%s to DNS cache</pre><pre>timeout on name lookup is not supported</pre><pre>%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s</pre><pre>; filename="%s"</pre><pre>%s; boundary=%s</pre><pre>Content-Type: multipart/mixed, boundary=%s</pre><pre>Content-Type: %s</pre><pre>couldn't open file "%s"</pre><pre>--%s--</pre><pre>p.jpg</pre><pre>p.jpeg</pre><pre>p.txt</pre><pre>p.html</pre><pre>p.xml</pre><pre>#HttpOnly_</pre><pre>23[^;</pre><pre>=]=I99[^;</pre><pre>httponly</pre><pre>skipped cookie with illegal dotcount domain: %s</pre><pre>skipped cookie with bad tailmatch domain: %s</pre><pre>%s cookie %s="%s" for domain %s, path %s, expire %lld</pre><pre># Netscape HTTP Cookie File</pre><pre># http://curl.haxx.se/docs/http-cookies.html</pre><pre># This file was generated by libcurl! Edit at your own risk.</pre><pre># Fatal libcurl error</pre><pre>WARNING: failed to save cookies in %s</pre><pre>Avoided giant realloc for header (max is %d)!</pre><pre>HTTP/</pre><pre>The requested URL returned error: %d</pre><pre>%s, d %s M d:d:d GMT</pre><pre>If-Modified-Since: %s</pre><pre>If-Unmodified-Since: %s</pre><pre>Last-Modified: %s</pre><pre>%sAuthorization: Basic %s</pre><pre>%s auth using %s with user '%s'</pre><pre>Referer: %s</pre><pre>Accept-Encoding: %s</pre><pre>%s, TE</pre><pre>Chunky upload is not supported by HTTP 1.0</pre><pre>Host: %s%s%s</pre><pre>Host: %s%s%s:%hu</pre><pre>ftp://</pre><pre>;type=%c</pre><pre>Range: bytes=%s</pre><pre>Content-Range: bytes %s%lld/%lld</pre><pre>Content-Range: bytes %s/%lld</pre><pre>ftp://%s:%s@%s</pre><pre>%s HTTP/%s</pre><pre>%s%s%s%s%s%s%s%s%s%s%s</pre><pre>%s%s=%s</pre><pre>Internal HTTP POST error!</pre><pre>Content-Type: application/x-www-form-urlencoded</pre><pre>Failed sending HTTP POST request</pre><pre>Failed sending HTTP request</pre><pre>HTTP error before end of send, stop sending</pre><pre>HTTP/%d.%d =</pre><pre>HTTP =</pre><pre>RTSP/%d.%d =</pre><pre>The requested URL returned error: %s</pre><pre>HTTP 1.0, assume close after body</pre><pre>HTTP/1.0 proxy connection set to keep alive!</pre><pre>HTTP/1.1 proxy connection set close!</pre><pre>HTTP/1.0 connection set to keep alive!</pre><pre>[%s %s %s]</pre><pre>Recv failure: %s</pre><pre>Send failure: %s</pre><pre>/etc/ssl/certs/ca-certificates.crt</pre><pre>IDN support not present, can't parse Unicode domains</pre><pre>Connected to %s (%s) port %ld (#%ld)</pre><pre>%5[^:@]:%5[^@]</pre><pre>[%*45[0123456789abcdefABCDEF:.]%c</pre><pre>%s://%s%s%s:%hu%s%s%s</pre><pre>Port number too large: %lu</pre><pre>Couldn't resolve host '%s'</pre><pre>Couldn't resolve proxy '%s'</pre><pre>User-Agent: %s</pre><pre>About to connect() to %s%s port %ld (#%ld)</pre><pre>Curl_addHandleToPipeline: length: %d</pre><pre>Closing connection %d</pre><pre>Connection #%ld to host %s left intact</pre><pre>Found bundle for host %s: %p</pre><pre>Server doesn't support pipelining</pre><pre>Connection %d seems to be dead!</pre><pre>[^:]:%[^</pre><pre>:]://%[^</pre><pre><url> malformed</url></pre><pre>:%5[^@]</pre><pre>Protocol %s not supported or disabled in libcurl</pre><pre>%s://%s</pre><pre>Couldn't find host %s in the _netrc file; using defaults</pre><pre>ftp@example.com</pre><pre>Found connection %d, with requests in the pipe (%d)</pre><pre>Re-using existing connection! (#%ld) with host %s</pre><pre>CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!</pre><pre>Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds</pre><pre>zlib/%s</pre><pre>7.30.0</pre><pre>%%X</pre><pre>login</pre><pre>password</pre><pre>[^?&/:]://%c</pre><pre>Issue another request to this URL: '%s'</pre><pre>Violate RFC 2616/10.3.2 and switch from POST to GET</pre><pre>Violate RFC 2616/10.3.3 and switch from POST to GET</pre><pre>Disables POST, goes with %s</pre><pre>No URL set!</pre><pre>seek callback returned error %d</pre><pre>the ioctl callback returned %d</pre><pre>ioctl callback returned error %d</pre><pre>operation aborted by callback</pre><pre>Rewinding stream by : %zd bytes on url %s (zero-length body)</pre><pre>Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)</pre><pre>HTTP server doesn't seem to support byte ranges. Cannot resume.</pre><pre>Problem (%d) in the Chunked-Encoded data</pre><pre>Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)</pre><pre>Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld</pre><pre>Unrecognized content encoding type. libcurl understands `identity', `deflate' and `gzip' content encodings.</pre><pre>Operation timed out after %ld milliseconds with %lld out of %lld bytes received</pre><pre>Operation timed out after %ld milliseconds with %lld bytes received</pre><pre>pUnrecognized content encoding type. libcurl understands `identity', `deflate' and `gzip' content encodings.</pre><pre>psa_addr inet_ntop() failed with errno %d: %s</pre><pre>Trying %s...</pre><pre>Could not set TCP_NODELAY: %s</pre><pre>TCP_NODELAY set</pre><pre>Failed to set SO_KEEPALIVE on fd %d</pre><pre>Failed to set SIO_KEEPALIVE_VALS on fd %d: %d</pre><pre>Couldn't bind to interface '%s'</pre><pre>Local Interface %s is ip %s using address family %i</pre><pre>Name '%s' family %i resolved to '%s' family %i</pre><pre>Couldn't bind to '%s'</pre><pre>getsockname() failed with errno %d: %s</pre><pre>Local port: %hu</pre><pre>Bind to local port %hu failed, trying next</pre><pre>bind failed with errno %d: %s</pre><pre>Failed to connect to %s: %s</pre><pre>couldn't connect to %s at %s:%d</pre><pre>getpeername() failed with errno %d: %s</pre><pre>ssrem inet_ntop() failed with errno %d: %s</pre><pre>ssloc inet_ntop() failed with errno %d: %s</pre><pre>Failed connect to %s:%ld; %s</pre><pre>pInternal error clearing splay node = %d</pre><pre>Internal error removing splay node = %d</pre><pre>pPipe broke: handle 0x%p, url = %s</pre><pre>In state %d with no easy_conn, bail out!</pre><pre>Error while processing content unencoding: %s</pre><pre>1.2.8</pre><pre>1.2.0.4</pre><pre>px</pre><pre>%s:%s:%s</pre><pre>%s:%.*s</pre><pre>%s:%s:x:%s:%s:%s</pre><pre>%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop=%s, response="%s"</pre><pre>%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"</pre><pre>%s, opaque="%s"</pre><pre>%s, algorithm="%s"</pre><pre>Unsupported protocol</pre><pre>URL using bad/illegal format or missing URL</pre><pre>A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.</pre><pre>FTP: weird server reply</pre><pre>FTP: The server failed to connect to data port</pre><pre>FTP: Accepting server connect has timed out</pre><pre>FTP: The server did not accept the PRET command.</pre><pre>FTP: unknown PASS reply</pre><pre>FTP: unknown PASV reply</pre><pre>FTP: unknown 227 response format</pre><pre>FTP: can't figure out the host in the PASV response</pre><pre>FTP: couldn't set file type</pre><pre>FTP: couldn't retrieve (RETR failed) the specified file</pre><pre>HTTP response code said error</pre><pre>FTP: command PORT failed</pre><pre>FTP: command REST failed</pre><pre>Operation was aborted by an application callback</pre><pre>A libcurl function was given a bad argument</pre><pre>An unknown option was passed in to libcurl</pre><pre>SSL peer certificate or SSH remote key was not OK</pre><pre>Problem with the local SSL certificate</pre><pre>Peer certificate cannot be authenticated with given CA certificates</pre><pre>Problem with the SSL CA cert (path? access rights?)</pre><pre>Unrecognized or bad HTTP Content or Transfer-Encoding</pre><pre>Invalid LDAP URL</pre><pre>Issuer check against peer certificate failed</pre><pre>Login denied</pre><pre>TFTP: File Not Found</pre><pre>TFTP: Access Violation</pre><pre>TFTP: Illegal operation</pre><pre>TFTP: Unknown transfer ID</pre><pre>TFTP: No such user</pre><pre>Caller must register CURLOPT_CONV_ callback options</pre><pre>Error in the SSH layer</pre><pre>Unable to parse FTP file list</pre><pre>Please call curl_multi_perform() soon</pre><pre>CURLSHcode unknown</pre><pre>Protocol option is unsupported</pre><pre>Protocol is unsupported</pre><pre>Socket is unsupported</pre><pre>Operation not supported</pre><pre>Address family not supported</pre><pre>Protocol family not supported</pre><pre>Winsock version not supported</pre><pre>Unknown error %d (%#x)</pre><pre>Curl_ipv4_resolve_r failed for %s</pre><pre>%d.%d.%d.%d</pre><pre>d:d:d</pre><pre>d:d</pre><pre>User was rejected by the SOCKS5 server (%d %d).</pre><pre>SOCKS5 GSSAPI per-message authentication is not supported.</pre><pre>No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)</pre><pre>Failed to resolve "%s" for SOCKS5 connect.</pre><pre>Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)</pre><pre>Can't complete SOCKS5 connection to %s:%d. (%d)</pre><pre>Can't complete SOCKS5 connection to xx:xx:xx:xx:xx:xx:xx:xx:%d. (%d)</pre><pre>Failed to resolve "%s" for SOCKS4 connect.</pre><pre>SOCKS4%s request granted.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.</pre><pre>Establish HTTP proxy tunnel to %s:%hu</pre><pre>%s:%hu</pre><pre>%s%s%s:%hu</pre><pre>Host: %s</pre><pre>CONNECT %s HTTP/%s</pre><pre>%s%s%s%s</pre><pre>HTTP/1.%d %d</pre><pre>TUNNEL_STATE switched to: %d</pre><pre>Received HTTP code %d from proxy after CONNECT</pre><pre>%s/%s</pre><pre>username="%s",realm="%s",nonce="%s",cnonce="%s",nc="%s",digest-uri="%s",response=%s</pre><pre>00000001</pre><pre>12345678</pre><pre>%s xxxxxxxxxxxxxxxx</pre><pre>- Conn %d (%p) send_pipe: %d, recv_pipe: %d</pre><pre>Server %s is blacklisted</pre><pre>Server %s is not blacklisted</pre><pre>Site %s:%d is pipeline blacklisted</pre><pre>Adding handle: send: %d</pre><pre>Adding handle: recv: %d</pre><pre>Conn: %d (%p) Receive pipe weight: (%d/%d), penalized: %d</pre><pre>curl_easy_duphandle</pre><pre>curl_easy_escape</pre><pre>curl_easy_getinfo</pre><pre>curl_easy_pause</pre><pre>curl_easy_recv</pre><pre>curl_easy_send</pre><pre>curl_easy_strerror</pre><pre>curl_easy_unescape</pre><pre>curl_escape</pre><pre>curl_formadd</pre><pre>curl_formfree</pre><pre>curl_formget</pre><pre>curl_free</pre><pre>curl_getdate</pre><pre>curl_getenv</pre><pre>curl_global_cleanup</pre><pre>curl_global_init_mem</pre><pre>curl_maprintf</pre><pre>curl_mfprintf</pre><pre>curl_mprintf</pre><pre>curl_msnprintf</pre><pre>curl_msprintf</pre><pre>curl_multi_add_handle</pre><pre>curl_multi_assign</pre><pre>curl_multi_cleanup</pre><pre>curl_multi_fdset</pre><pre>curl_multi_info_read</pre><pre>curl_multi_init</pre><pre>curl_multi_perform</pre><pre>curl_multi_remove_handle</pre><pre>curl_multi_setopt</pre><pre>curl_multi_socket</pre><pre>curl_multi_socket_action</pre><pre>curl_multi_socket_all</pre><pre>curl_multi_strerror</pre><pre>curl_multi_timeout</pre><pre>curl_multi_wait</pre><pre>curl_mvaprintf</pre><pre>curl_mvfprintf</pre><pre>curl_mvprintf</pre><pre>curl_mvsnprintf</pre><pre>curl_mvsprintf</pre><pre>curl_share_cleanup</pre><pre>curl_share_init</pre><pre>curl_share_setopt</pre><pre>curl_share_strerror</pre><pre>curl_strequal</pre><pre>curl_strnequal</pre><pre>curl_unescape</pre><pre>curl_version_info</pre><pre>ADVAPI32.DLL</pre><pre>WS2_32.DLL</pre><pre>zlib1.dll</pre><pre>8 8$8(8,808</pre><pre>2 2$2(2,2024282</pre><pre>DllMainCRTStartup</pre><pre>GNU C 4.2.1-sjlj (mingw32-2)</pre><pre>/home/ron/devel/debian/mingw32-runtime/mingw32-runtime-3.13/build_dir/src/mingw-runtime-3.13-20070825-1/dllcrt1.c</pre><pre> DllMainCRTStartup@12</pre><pre>dllcrt1.c</pre><pre>.file</pre><pre>http.c</pre><pre>ftp.c</pre><pre>url.c</pre><pre>_Curl_do</pre><pre>curl_fnmatch.c</pre><pre>ftplistparser.c</pre><pre>http_chunks.c</pre><pre>http_digest.c</pre><pre>curl_rand.c</pre><pre>http_negotiate.c</pre><pre>tftp.c</pre><pre>ssh.c</pre><pre>curl_addrinfo.c</pre><pre>curl_sspi.c</pre><pre>curl_memrchr.c</pre><pre>smtp.c</pre><pre>curl_threads.c</pre><pre>curl_rtmp.c</pre><pre>curl_gethostname.c</pre><pre>http_proxy.c</pre><pre>curl_gssapi.c</pre><pre>curl_ntlm.c</pre><pre>curl_ntlm_wb.c</pre><pre>curl_ntlm_core.c</pre><pre>curl_ntlm_msgs.c</pre><pre>curl_sasl.c</pre><pre>curl_schannel.c</pre><pre>curl_multibyte.c</pre><pre>curl_darwinssl.c</pre><pre>pipeline.c</pre><pre>.idata$7</pre><pre>.idata$5</pre><pre>.idata$48</pre><pre>.idata$6</pre><pre>.idata$4(</pre><pre>.idata$4,</pre><pre>.idata$44</pre><pre>.idata$40</pre><pre>.idata$4</pre><pre>.idata$7`</pre><pre>.idata$7\</pre><pre>.idata$7l</pre><pre>.idata$4</pre><pre>.idata$7x</pre><pre>.idata$6|</pre><pre>.idata$6T</pre><pre>.idata$7|</pre><pre>.idata$7d</pre><pre>.idata$7t</pre><pre>.idata$6d</pre><pre>.idata$6D</pre><pre>.idata$64</pre><pre>.idata$7h</pre><pre>.idata$7p</pre><pre>.idata$6l</pre><pre>.idata$6$</pre><pre>.idata$2P</pre><pre>.idata$5|</pre><pre>.idata$4$</pre><pre>.idata$6(</pre><pre>.idata$6P</pre><pre>.idata$60</pre><pre>.idata$68</pre><pre>.idata$2(</pre><pre>.idata$4`</pre><pre>.idata$6h</pre><pre>.idata$4L</pre><pre>.idata$6\</pre><pre>.idata$5@</pre><pre>.idata$7(</pre><pre>.idata$5P</pre><pre>.idata$7H</pre><pre>.idata$5p</pre><pre>.idata$6t</pre><pre>.idata$7D</pre><pre>.idata$5l</pre><pre>.idata$5<</pre><pre>.idata$4@</pre><pre>.idata$4H</pre><pre>.idata$6,</pre><pre>.idata$5</pre><pre>.idata$4l</pre><pre>.idata$4T</pre><pre>.idata$7<</pre><pre>.idata$5d</pre><pre>.idata$74</pre><pre>.idata$5\</pre><pre>.idata$6<</pre><pre>.idata$4<</pre><pre>.idata$5D</pre><pre>.idata$7,</pre><pre>.idata$5T</pre><pre>.idata$5,</pre><pre>.idata$4x</pre><pre>.idata$5$</pre><pre>.idata$4p</pre><pre>.idata$78</pre><pre>.idata$5`</pre><pre>.idata$6H</pre><pre>.idata$4h</pre><pre>.idata$5(</pre><pre>.idata$4t</pre><pre>.idata$7</pre><pre>.idata$5H</pre><pre>.idata$7@</pre><pre>.idata$5h</pre><pre>.idata$6`</pre><pre>.idata$70</pre><pre>.idata$5X</pre><pre>.idata$4X</pre><pre>.idata$58</pre><pre>.idata$4D</pre><pre>.idata$4P</pre><pre>.idata$50</pre><pre>.idata$4|</pre><pre>.idata$7$</pre><pre>.idata$5L</pre><pre>.idata$4\</pre><pre>.idata$4d</pre><pre>.idata$7L</pre><pre>.idata$5t</pre><pre>.idata$54</pre><pre>.idata$2<</pre><pre>.idata$5x</pre><pre>.idata$7P</pre><pre>.idata$6p</pre><pre>.idata$7T</pre><pre>.idata$2</pre><pre>.idata$7X</pre><pre>.idata$6X</pre><pre>.idata$6</pre><pre>.idata$2d</pre><pre>.debug_aranges</pre><pre>.debug_pubnames</pre><pre>.debug_info</pre><pre>.debug_abbrev</pre><pre>.debug_line</pre><pre>.debug_frame</pre><pre>.debug_loc</pre><pre>_DllMainCRTStartup@12</pre><pre>_curlx_tvdiff</pre><pre>_curlx_tvdiff_secs</pre><pre>_Curl_tvlong</pre><pre>_curlx_tvnow</pre><pre>_Curl_base64_encode</pre><pre>_Curl_base64_decode</pre><pre>_Curl_num_addresses</pre><pre>_Curl_resolv_unlock</pre><pre>_Curl_hostcache_clean</pre><pre>_Curl_hostcache_destroy</pre><pre>_Curl_mk_dnscache</pre><pre>_Curl_hostcache_prune</pre><pre>_Curl_cache_addr</pre><pre>_Curl_loadhostpairs</pre><pre>_Curl_resolv</pre><pre>_Curl_resolv_timeout</pre><pre>_Curl_printable_address</pre><pre>_Curl_global_host_cache_dtor</pre><pre>_Curl_global_host_cache_init</pre><pre>_Curl_pgrsSetDownloadCounter</pre><pre>_Curl_pgrsSetUploadCounter</pre><pre>_Curl_pgrsSetDownloadSize</pre><pre>_Curl_pgrsSetUploadSize</pre><pre>_Curl_pgrsResetTimesSizes</pre><pre>_Curl_pgrsStartNow</pre><pre>_Curl_pgrsUpdate</pre><pre>_Curl_pgrsDone</pre><pre>_Curl_pgrsTime</pre><pre>_Curl_formclean</pre><pre>_curl_formfree</pre><pre>_Curl_FormInit</pre><pre>_Curl_formpostheader</pre><pre>_Curl_FormReader</pre><pre>_Curl_getformdata</pre><pre>_curl_formget</pre><pre>_curl_formadd</pre><pre>_Curl_cookie_freelist</pre><pre>_Curl_cookie_clearall</pre><pre>_Curl_cookie_clearsess</pre><pre>_Curl_cookie_cleanup</pre><pre>_Curl_cookie_list</pre><pre>_Curl_cookie_getlist</pre><pre>_Curl_cookie_add</pre><pre>_Curl_cookie_init</pre><pre>_Curl_cookie_loadfiles</pre><pre>_Curl_flush_cookies</pre><pre>_http_should_fail</pre><pre>_Curl_add_buffer_init</pre><pre>_http_getsock_do</pre><pre>_use_http_1_1</pre><pre>_Curl_add_buffer</pre><pre>_checkhttpprefix</pre><pre>_Curl_checkheaders</pre><pre>_Curl_compareheader</pre><pre>_http_perhapsrewind</pre><pre>_Curl_http_auth_act</pre><pre>_Curl_http_done</pre><pre>_Curl_http_connect</pre><pre>_Curl_add_bufferf</pre><pre>_Curl_add_timecondition</pre><pre>_Curl_add_custom_headers</pre><pre>_Curl_add_buffer_send</pre><pre>_Curl_http_input_auth</pre><pre>_Curl_http_output_auth</pre><pre>_Curl_http</pre><pre>_Curl_http_readwrite_headers</pre><pre>_Curl_write</pre><pre>_Curl_debug</pre><pre>_Curl_read</pre><pre>_Curl_read_plain</pre><pre>_Curl_sendf</pre><pre>_Curl_failf</pre><pre>_Curl_client_write</pre><pre>_Curl_recv_plain</pre><pre>_Curl_send_plain</pre><pre>_Curl_write_plain</pre><pre>_Curl_infof</pre><pre>_Curl_freeset</pre><pre>_Curl_init_userdefined</pre><pre>_Curl_protocol_getsock</pre><pre>_Curl_doing_getsock</pre><pre>_Curl_protocol_connecting</pre><pre>_Curl_protocol_doing</pre><pre>_Curl_reset_reqproto</pre><pre>_Curl_do_more</pre><pre>_Curl_verboseconnect</pre><pre>_Curl_isPipeliningEnabled</pre><pre>_IsPipeliningPossible</pre><pre>_parse_remote_port</pre><pre>_Curl_open</pre><pre>_Curl_protocol_connect</pre><pre>_Curl_connected_proxy</pre><pre>_Curl_setup_conn</pre><pre>_Curl_removeHandleFromPipeline</pre><pre>_Curl_getoff_all_pipelines</pre><pre>_Curl_addHandleToPipeline</pre><pre>_signalPipeClose</pre><pre>_Curl_disconnect</pre><pre>_Curl_done</pre><pre>_Curl_handler_dummy</pre><pre>_Curl_connect</pre><pre>_Curl_setopt</pre><pre>_Curl_close</pre><pre>_Curl_dupset</pre><pre>_Curl_if_is_interface_name</pre><pre>_Curl_if2ip</pre><pre>_Curl_speedcheck</pre><pre>_Curl_speedinit</pre><pre>_curl_version_info</pre><pre>_curl_version</pre><pre>_curl_getenv</pre><pre>_curl_free</pre><pre>_Curl_urldecode</pre><pre>_curl_easy_unescape</pre><pre>_curl_unescape</pre><pre>_curl_easy_escape</pre><pre>_curl_escape</pre><pre>_curl_msnprintf</pre><pre>_curl_mvfprintf</pre><pre>_curl_mvprintf</pre><pre>_curl_mvsprintf</pre><pre>_curl_mfprintf</pre><pre>_curl_mprintf</pre><pre>_curl_msprintf</pre><pre>_curl_mvaprintf</pre><pre>_curl_maprintf</pre><pre>_curl_mvsnprintf</pre><pre>_Curl_parsenetrc</pre><pre>_Curl_initinfo</pre><pre>_Curl_getinfo</pre><pre>_Curl_single_getsock</pre><pre>_Curl_sleep_time</pre><pre>_Curl_posttransfer</pre><pre>_strlen_url</pre><pre>_strcpy_url</pre><pre>_Curl_setup_transfer</pre><pre>_Curl_meets_timecondition</pre><pre>_Curl_reconnect_request</pre><pre>_Curl_follow</pre><pre>_Curl_pretransfer</pre><pre>_Curl_readrewind</pre><pre>_Curl_retry_request</pre><pre>_Curl_fillreadbuffer</pre><pre>_Curl_readwrite</pre><pre>_curl_strnequal</pre><pre>_curl_strequal</pre><pre>_Curl_easy_addmulti</pre><pre>_curl_easy_send</pre><pre>_curl_easy_recv</pre><pre>_curl_easy_pause</pre><pre>_Curl_easy_initHandleData</pre><pre>_curl_easy_reset</pre><pre>_curl_easy_duphandle</pre><pre>_curl_easy_getinfo</pre><pre>_curl_easy_cleanup</pre><pre>_curl_easy_perform</pre><pre>_curl_easy_setopt</pre><pre>_curl_global_cleanup</pre><pre>_curl_global_init</pre><pre>_curl_easy_init</pre><pre>_curl_global_init_mem</pre><pre>_Curl_fnmatch</pre><pre>_Curl_fileinfo_dtor</pre><pre>_Curl_fileinfo_alloc</pre><pre>_Curl_wildcard_dtor</pre><pre>_Curl_wildcard_init</pre><pre>_Curl_httpchunk_init</pre><pre>_Curl_httpchunk_read</pre><pre>_Curl_strtok_r</pre><pre>_Curl_persistconninfo</pre><pre>_Curl_socket</pre><pre>_Curl_closesocket</pre><pre>_Curl_getconnectinfo</pre><pre>_Curl_timeleft</pre><pre>_Curl_sndbufset</pre><pre>_Curl_connecthost</pre><pre>_Curl_updateconninfo</pre><pre>_Curl_is_connected</pre><pre>_Curl_llist_alloc</pre><pre>_Curl_llist_insert_next</pre><pre>_Curl_llist_remove</pre><pre>_Curl_llist_destroy</pre><pre>_Curl_llist_count</pre><pre>_Curl_llist_move</pre><pre>_Curl_hash_pick</pre><pre>_Curl_hash_str</pre><pre>_Curl_hash_start_iterate</pre><pre>_Curl_hash_next_element</pre><pre>_Curl_str_key_compare</pre><pre>_Curl_hash_clean_with_criterium</pre><pre>_Curl_hash_delete</pre><pre>_Curl_hash_clean</pre><pre>_Curl_hash_destroy</pre><pre>_Curl_hash_add</pre><pre>_Curl_hash_init</pre><pre>_Curl_hash_alloc</pre><pre>_fd_key_compare</pre><pre>_multi_freeamsg</pre><pre>_Curl_multi_pipeline_enabled</pre><pre>_Curl_multi_handlePipeBreak</pre><pre>_Curl_multi_set_easy_connection</pre><pre>_Curl_multi_max_host_connections</pre><pre>_Curl_multi_max_total_connections</pre><pre>_Curl_multi_max_pipeline_length</pre><pre>_Curl_multi_content_length_penalty_size</pre><pre>_Curl_multi_chunk_length_penalty_size</pre><pre>_Curl_multi_pipelining_site_bl</pre><pre>_Curl_multi_pipelining_server_bl</pre><pre>_curl_multi_assign</pre><pre>_Curl_expire</pre><pre>_Curl_multi_process_pending_handles</pre><pre>_curl_multi_timeout</pre><pre>_curl_multi_fdset</pre><pre>_curl_multi_setopt</pre><pre>_curl_multi_info_read</pre><pre>_curl_multi_cleanup</pre><pre>_curl_multi_perform</pre><pre>_curl_multi_socket_all</pre><pre>_curl_multi_socket_action</pre><pre>_curl_multi_socket</pre><pre>_curl_multi_wait</pre><pre>_curl_multi_remove_handle</pre><pre>_curl_multi_add_handle</pre><pre>_curl_multi_init</pre><pre>_Curl_unencode_cleanup</pre><pre>_Curl_unencode_gzip_write</pre><pre>_Curl_unencode_deflate_write</pre><pre>_curl_share_init</pre><pre>_Curl_share_lock</pre><pre>_Curl_share_unlock</pre><pre>_curl_share_cleanup</pre><pre>_curl_share_setopt</pre><pre>_Curl_digest_cleanup</pre><pre>_Curl_output_digest</pre><pre>_Curl_input_digest</pre><pre>_Curl_MD5_init</pre><pre>_Curl_MD5_update</pre><pre>_Curl_MD5_final</pre><pre>_Curl_md5it</pre><pre>_Curl_rand</pre><pre>_Curl_srand</pre><pre>_Curl_inet_pton</pre><pre>_curl_easy_strerror</pre><pre>_curl_multi_strerror</pre><pre>_curl_share_strerror</pre><pre>_Curl_strerror</pre><pre>_Curl_ipvalid</pre><pre>_Curl_ipv4_resolve_r</pre><pre>_Curl_getaddrinfo</pre><pre>_Curl_set_dns_servers</pre><pre>_Curl_inet_ntop</pre><pre>_Curl_gmtime</pre><pre>_curl_getdate</pre><pre>_Curl_wait_ms</pre><pre>_Curl_poll</pre><pre>_Curl_socket_check</pre><pre>_Curl_clone_ssl_config</pre><pre>_Curl_free_ssl_config</pre><pre>_Curl_ssl_config_matches</pre><pre>_Curl_splay</pre><pre>_Curl_splayinsert</pre><pre>_KEY_NOTUSED.17658</pre><pre>_Curl_splaygetbest</pre><pre>_Curl_splayremovebyaddr</pre><pre>_Curl_blockread_all</pre><pre>_Curl_SOCKS5</pre><pre>_Curl_SOCKS4</pre><pre>_Curl_raw_toupper</pre><pre>_Curl_raw_equal</pre><pre>_Curl_raw_nequal</pre><pre>_Curl_strntoupper</pre><pre>_Curl_freeaddrinfo</pre><pre>_Curl_he2ai</pre><pre>_Curl_ip2addr</pre><pre>_Curl_str2addr</pre><pre>_curl_slist_append</pre><pre>_curl_slist_free_all</pre><pre>_Curl_slist_duplicate</pre><pre>_curlx_nonblock</pre><pre>_Curl_memrchr</pre><pre>_curlx_ultous</pre><pre>_curlx_ultouc</pre><pre>_curlx_ultosi</pre><pre>_curlx_uztosi</pre><pre>_curlx_uztoul</pre><pre>_curlx_uztoui</pre><pre>_curlx_sltosi</pre><pre>_curlx_sltoui</pre><pre>_curlx_sltous</pre><pre>_curlx_uztosz</pre><pre>_curlx_sotouz</pre><pre>_curlx_sztosi</pre><pre>_curlx_sitouz</pre><pre>_curlx_sktosi</pre><pre>_curlx_sitosk</pre><pre>_Curl_HMAC_init</pre><pre>_Curl_HMAC_update</pre><pre>_Curl_HMAC_final</pre><pre>_Curl_gethostname</pre><pre>http_negotiate_sspi.c</pre><pre>_Curl_proxyCONNECT</pre><pre>_Curl_proxy_connect</pre><pre>_Curl_sasl_cleanup</pre><pre>_Curl_sasl_create_login_message</pre><pre>_sasl_digest_get_key_value</pre><pre>_Curl_sasl_create_digest_md5_message</pre><pre>_Curl_sasl_create_cram_md5_message</pre><pre>_Curl_sasl_create_plain_message</pre><pre>_Curl_bundle_remove_conn</pre><pre>_Curl_bundle_add_conn</pre><pre>_Curl_bundle_destroy</pre><pre>_Curl_bundle_create</pre><pre>_Curl_conncache_find_first_connection</pre><pre>_Curl_conncache_foreach</pre><pre>_Curl_conncache_remove_conn</pre><pre>_Curl_conncache_find_bundle</pre><pre>_Curl_conncache_add_conn</pre><pre>_Curl_conncache_destroy</pre><pre>_Curl_conncache_init</pre><pre>_print_pipeline</pre><pre>_Curl_pipeline_set_server_blacklist</pre><pre>_Curl_pipeline_server_blacklisted</pre><pre>_Curl_pipeline_set_site_blacklist</pre><pre>_Curl_pipeline_site_blacklisted</pre><pre>_Curl_move_handle_from_send_to_recv_pipe</pre><pre>_Curl_add_handle_to_pipeline</pre><pre>_Curl_pipeline_penalized</pre><pre>.weak.__Jv_RegisterClasses.___gcc_register_frame</pre><pre>__libmsvcrt_a_iname</pre><pre>_Curl_handler_http</pre><pre>___crt_xl_start__</pre><pre>___crt_xi_start__</pre><pre>___crt_xi_end__</pre><pre>_Curl_crealloc</pre><pre>_Curl_cfree</pre><pre>_Curl_HMAC_MD5</pre><pre>_Curl_wkday</pre><pre>___crt_xp_start__</pre><pre>_Curl_handler_file</pre><pre>___crt_xp_end__</pre><pre>__head_libmsvcrt_a</pre><pre>_Curl_ccalloc</pre><pre>___crt_xc_end__</pre><pre>___crt_xc_start__</pre><pre>_Curl_DIGEST_MD5</pre><pre>_Curl_cmalloc</pre><pre>_Curl_month</pre><pre>_Curl_cstrdup</pre><pre>___crt_xt_start__</pre><pre>_Curl_cwcsdup</pre><pre>___crt_xt_end__</pre><pre>_Curl_ack_eintr</pre><pre>0`.data</pre><pre>0@.bss</pre><pre>%XQIb</pre><pre>%dQIb</pre><pre>%DQIb</pre><pre>%xQIb</pre><pre>libgcc_s_dw2-1.dll</pre><pre>\QUSEREX.DLL</pre><pre>pthread_key_create</pre><pre>pthread_key_delete</pre><pre>7(8.898?8</pre><pre>_CRT_MT</pre><pre>___w64_mingwthr_add_key_dtor</pre><pre>___w64_mingwthr_remove_key_dtor</pre><pre>__mingwthr_key_t</pre><pre>__mingwthr_key</pre><pre>GNU C 4.5.2</pre><pre>../mingw/dllcrt1.c</pre><pre>C:\MinGW\msys\1.0\src\mingwrt</pre><pre>-DllMainCRTStartup@12</pre><pre>__report_error</pre><pre>../mingw/crtst.c</pre><pre>__mingwthr_run_key_dtors</pre><pre>keyp</pre><pre>new_key</pre><pre>prev_key</pre><pre>cur_key</pre><pre>key_dtor_list</pre><pre>c:/mingw/bin/../lib/gcc/mingw32/4.5.2/include</pre><pre>crtst.c</pre><pre>cygming-crtbegin.c</pre><pre>.tls$AAA</pre><pre>.tls$ZZZ</pre><pre>.CRT$XLA</pre><pre>.CRT$XLZ</pre><pre>.CRT$XLC</pre><pre>.CRT$XLD</pre><pre>.CRT$XDA</pre><pre>.CRT$XDZ</pre><pre>.idata$6N</pre><pre>.idata$6j</pre><pre>.idata$62</pre><pre>.idata$6V</pre><pre>.idata$6~</pre><pre>.idata$6*</pre><pre>.idata$6f</pre><pre>.idata$6@</pre><pre>.idata$6></pre><pre>cygming-crtend.c</pre><pre>__CRT_MT</pre><pre>.eh_frame</pre><pre>.debug_pubtypes</pre><pre>.debug_str</pre><pre>.debug_ranges</pre><pre>_pthread_key_create</pre><pre>_pthread_key_delete</pre><pre>_ptw32_processTerminate.part.1</pre><pre>_pthread_join</pre><pre>___report_error</pre><pre>___mingwthr_run_key_dtors</pre><pre>_key_dtor_list</pre><pre>____w64_mingwthr_add_key_dtor</pre><pre>____w64_mingwthr_remove_key_dtor</pre><pre>.text.startup</pre><pre>.ctors.65535</pre><pre>.weak.___register_frame_info.___gcc_register_frame</pre><pre>_ptw32_selfThreadKey</pre><pre>_ptw32_cleanupKey</pre><pre>.weak.___deregister_frame_info.___gcc_register_frame</pre><pre>deflate 1.2.8 Copyright 1995-2013 Jean-loup Gailly and Mark Adler</pre><pre>b<fd:%d></fd:%d></pre><pre>inflate 1.2.8 Copyright 1995-2013 Mark Adler</pre><pre>%9X9i9z9</pre><pre>"@"@"@"@</pre><pre>This EXE is created by the demo version of BoxedApp Packer</pre><pre>Visit our web-site at: http://boxedapp.com/boxedapppacker/order.html</pre><pre>WBoxedAppLog_%d.txt</pre><pre>BoxedAppVar:ExeFileName</pre><pre>BoxedAppVar:ExeFileExtension</pre><pre>BoxedAppVar:ExeFileNameWithoutExtension</pre><pre>BoxedAppVar:ExeFullPath</pre><pre>BoxedAppVar:OldCmdLine</pre><pre>HKEY_CLASSES_ROOT</pre><pre>HKEY_CURRENT_USER</pre><pre>HKEY_LOCAL_MACHINE</pre><pre>HKEY_CURRENT_CONFIG</pre><pre>HKEY_USERS</pre><pre>%s\%s</pre><pre>%s\winsxs\tempBxDir\virtualAsm</pre><pre>:\tempManifest.manifest</pre><pre>%s_%.8x_%.8x_%.8x</pre><pre>\KernelBase.dll</pre><pre>\.NETFramework\assembly\GAC\BoxedAppSDK_AppDomainManager\1.0.0.0__ef07ce3257ee81c1\BoxedAppSDK_AppDomainManager.dll</pre><pre>\assembly\GAC\BoxedAppSDK_AppDomainManager\1.0.0.0__ef07ce3257ee81c1\BoxedAppSDK_AppDomainManager.dll</pre><pre>%d-%d-%p</pre><pre>:\TLSSupport310D39B571B74d36B95451DD240D8758</pre><pre>",BoxedAppSDK_TryCreateProcessForVirtualEXE_AnotherBitnessPartHelper</pre><pre>\rundll32.exe"</pre><pre>DotNetAppDomainManager.CManagedHost</pre><pre>BoxedAppSDK_AppDomainManager, Version=1.0.0.0, Culture=neutral, PublicKeyToken=ef07ce3257ee81c1</pre><pre>DotNetAppDomainManager.CAppDomainManager</pre><pre>.config</pre><pre>.manifest</pre><pre>",BoxedAppSDK_AttachMixedBitnessProcessHelper</pre><pre>Attempt to launch not executable file:</pre><pre>Unable to find appropriate template exe</pre><pre>comdlg32.dll</pre><pre>\dllhost.exe</pre><pre>hh.exe</pre><pre>find.exe</pre><pre>help.exe</pre><pre>winver.exe</pre><pre>regsvr32.exe</pre><pre>dllhost.exe</pre><pre>ntvdm.exe</pre><pre>tcpsvcs.exe</pre><pre>mpr.dll</pre><pre>Wadvapi32.dll</pre><pre>sxs.dll</pre><pre>Obtain a full version, purchase a license at http://boxedapp.com/boxedappsdk/order.html</pre><pre>%s_%.8x_%.8x</pre><pre>%s_%.8x</pre><pre>boxedapp_msg_process</pre><pre>boxedapp_event_newmsg</pre><pre>boxedapp_msg_global</pre><pre>bxsdk64.dll</pre><pre>:\{9019ACD6-BC11-4308-8C49-92E0601DF38D}\temp\</pre><pre>\DosDevices\pipe\</pre><pre>\Device\NamedPipe\</pre><pre>\??\pipe\</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Gre_Initialize</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontDpi</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Console</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony\Locations</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates</pre><pre>publicKeyToken</pre><pre>Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\</pre><pre>!"#$%&'()* ,-./0123456789:;<=>?@</pre><pre>3, 3, 5, 0</pre><pre>BoxedApp, BoxedApp SDK, BoxedApp Packer, BoxedApp.com and some others are trademarks (some of them are registered) of Virtualization Technologies Ltd.</pre><pre>BoxedAppSDK.dll</pre><pre><BoxedAppVar:OldCmdLine></BoxedAppVar:OldCmdLine></pre><pre><ExeDir></ExeDir></pre><pre><ExeDir>\libcurl-4.dll</ExeDir></pre><pre>!"#$%&'()* ,-./0123456789:</pre><pre>pthreadgc2.dll</pre><pre><ExeDir>\pthreadgc2.dll</ExeDir></pre><pre>POSIX Threads for Windows LPGL</pre><pre>2, 9, 1, 0</pre><pre>pthreadGC2.DLL</pre><pre>http://sourceware.org/pthreads-win32/</pre><pre><ExeDir>\zlib1.dll</ExeDir></pre><pre>For more information visit http://www.zlib.net/</pre><b>nt32.exe_1560_rwx_00CE0000_00010000:</b><pre>u.iD$</pre><b>WScript.exe_1736:</b><pre>.text</pre><pre>`.data</pre><pre>.rsrc</pre><pre>@.reloc</pre><pre>ADVAPI32.dll</pre><pre>KERNEL32.dll</pre><pre>NTDLL.DLL</pre><pre>USER32.dll</pre><pre>msvcrt.dll</pre><pre>OLEAUT32.dll</pre><pre>ole32.dll</pre><pre>VERSION.dll</pre><pre>wscript.exe</pre><pre>advapi32.dll</pre><pre>kernel32.dll</pre><pre>%s%s.DLL</pre><pre>wintrust.dll</pre><pre>%d.%d</pre><pre>Invalid parameter passed to C runtime function.</pre><pre>SOFTWARE\Classes\%s\%s</pre><pre>0x%8X</pre><pre>CreateURLMonikerEx</pre><pre>urlmon.dll</pre><pre>@@8X%u</pre><pre>RegCreateKeyA</pre><pre>RegCloseKey</pre><pre>RegOpenKeyA</pre><pre>RegDeleteKeyA</pre><pre>RegCreateKeyExW</pre><pre>RegCreateKeyExA</pre><pre>RegOpenKeyExW</pre><pre>ReportEventW</pre><pre>RegEnumKeyExA</pre><pre>RegOpenKeyExA</pre><pre>GetProcessHeap</pre><pre>GetCPInfo</pre><pre>MsgWaitForMultipleObjects</pre><pre>EnumThreadWindows</pre><pre>wscript.pdb</pre><pre>stdole2.tlbWWW</pre><pre>.ObjectWW</pre><pre>KeyW</pre><pre>WindowsFolderWWW4</pre><pre>%CopyFolderWWL</pre><pre>Windows Script Host (Ver 5.6)W)</pre><pre>Windows Script Host Application InterfaceW%</pre><pre>Windows Script Host Object</pre><pre>ebstrCmdLineW</pre><pre>7Â8t8x8</pre><pre>5Q5F5</pre><pre>Software\Microsoft\Windows Script Host\Settings</pre><pre>Windows Script Host</pre><pre>WScript.CreateObject</pre><pre>WSHRemote.Execute</pre><pre>Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383}</pre><pre>.\%s.mui</pre><pre>.\%s\%s.mui</pre><pre>%s\%s.mui</pre><pre>%s\%s\%s.mui</pre><pre>%s\%s</pre><pre>Microsoft (R) Windows Based Script Host</pre><pre>5.7.0.16599</pre><pre>Microsoft (R) Windows Script Host</pre><pre>(Windows Script Host (debugging disabled)</pre><pre>Windows Script Host Error</pre><pre>Windows Script Host Input Error</pre><pre>This Unicode version of Windows Script Host will only execute under Windows NT.</pre><pre>Please use the ANSI version of Windows Script Host."</pre><pre>WScript execution time was exceeded on script "%1!ls!".</pre><pre>Script execution was terminated.1Could not locate automation class named "%1!ls!".</pre><pre>Could not connect object.'Could not create object named "%1!ls!".1Initialization of the Windows Script Host failed.6Can't find script engine "%2!ls!" for script "%1!ls!".!Can't change default script host.=An attempt at saving your settings via the //S option failed.(Loading script "%1!ls!" failed (%2!ls!).</pre><pre>Loading your settings failed.,Execution of the Windows Script Host failed.,Unexpected error of the Windows Script Host._Windows Script Host access is disabled on this machine. Contact your administrator for details.<Attempt to execute Windows Script Host while it is disabled><pre>Missing job name.*Unicode is not supported on this platform.</pre><pre><The Windows Script Host settings have been reset to default><pre>Command line options are saved.4The default script host is now set to "wscript.exe".4The default script host is now set to "cscript.exe".,Successful execution of Windows Script Host.3Successful remote execution of Windows Script Host.</pre><pre>Win32 Error 0x%X</pre><pre>Windows Script Host(Windows Script Host (debugging disabled)</pre><pre>Usage: WScript scriptname.extension [option...] [arguments...]</pre><pre>Use engine for executing script</pre><pre>Changes the default script host to CScript.exe</pre><pre>Changes the default script host to WScript.exe (default)</pre><pre>Prevent logo display: No banner will be shown at execution time</pre><pre>#WScript Error - Windows Script Host!Input Error - Windows Script HostlThis Unicode version of WScript will only execute under Windows NT.</pre><pre>%6!ls! WScript - Script Execution Error!Windows Script Host Remote Script/Remote script object can only be executed once. Unable to execute remote script.</pre><b>nt32.exe_1560_rwx_675A6000_00003000:</b><pre>.Qg<-Qg><pre>*Rg`.Rg|)RgL Rg</pre><b>cvtres.exe_432_rwx_00400000_00177000:</b><pre>.text</pre><pre>``.data</pre><pre>.rdata</pre><pre>`@.bss</pre><pre>.idata</pre><pre>.main</pre><pre>.bxpck</pre><pre>66665\\\\</pre><pre>\\\\5\\\\</pre><pre>666656666</pre><pre>libgcj-12.dll</pre><pre>JSON decode of %s failed</pre><pre>http://</pre><pre>https://</pre><pre>stratum tcp://</pre><pre>http://%s</pre><pre>cpuminer 2.3.2</pre><pre>accepted: %lu/%lu (%.2f%%), %s khash/s %s</pre><pre>DEBUG: reject reason: %s</pre><pre>DEBUG: job_id='%s' extranonce2=%s ntime=x</pre><pre>Starting Stratum on %s</pre><pre>...terminating workio thread</pre><pre>...retry after %d seconds</pre><pre>JSON decode failed(%d): %s</pre><pre>{"method": "mining.submit", "params": ["%s", "%s", "%s", "%s", "%s"], "id":4}</pre><pre>{"method": "getwork", "params": [ "%s" ], "id":1}</pre><pre>JSON key '%s' not found</pre><pre>JSON key '%s' is not a string</pre><pre>CURL initialization failed</pre><pre>%s%s%s</pre><pre>Long-polling activated for %s</pre><pre>json_rpc_call failed, retry after %d seconds</pre><pre>DEBUG: got new work in %d ms</pre><pre>Binding thread %d to cpu %d</pre><pre>thread %d: %lu hashes, %s khash/s</pre><pre>Total: %s khash/s</pre><pre>work retrieval failed, exiting mining thread %d</pre><pre>http://127.0.0.1:9332/</pre><pre>%s: unsupported non-option argument '%s'</pre><pre>JSON option %s invalid</pre><pre>https:</pre><pre>%s:%s</pre><pre>thread %d create failed</pre><pre>%d miner threads started, using '%s' algorithm.</pre><pre>cert</pre><pre>userpass</pre><pre>-o, --url=URL URL of mining server (default: http://127.0.0.1:9332/)</pre><pre>-O, --userpass=U:P username:password pair for mining server</pre><pre>-p, --pass=PASSWORD password for mining server</pre><pre>--cert=FILE certificate for mining server using SSL</pre><pre>-x, --proxy=[PROTOCOL://]HOST[:PORT] connect through a proxy</pre><pre>--no-longpoll disable X-Long-Polling support</pre><pre>--no-stratum disable X-Stratum support</pre><pre>[%d-d-d d:d:d] %s</pre><pre>User-Agent: cpuminer/2.3.2</pre><pre>HTTP request failed: %s</pre><pre>JSON-RPC call failed: %s</pre><pre>hex2bin failed on '%s'</pre><pre>DEBUG: %s</pre><pre>Hash: %s</pre><pre>Target: %s</pre><pre>http%s</pre><pre>http_proxy</pre><pre>Stratum connection failed: %s</pre><pre>{"id": 1, "method": "mining.subscribe", "params": []}</pre><pre>{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.3.2", "%s"]}</pre><pre>{"id": 1, "method": "mining.subscribe", "params": ["cpuminer/2.3.2"]}</pre><pre>mining.notify</pre><pre>Stratum session id: %s</pre><pre>mining.set_difficulty</pre><pre>client.reconnect</pre><pre>stratum tcp://%s:%d</pre><pre>Server requested reconnection to %s</pre><pre>client.get_version</pre><pre>cpuminer/2.3.2</pre><pre>client.show_message</pre><pre>MESSAGE FROM SERVER: %s</pre><pre>{"id": 2, "method": "mining.authorize", "params": ["%s", "%s"]}</pre><pre>%s near '%s'</pre><pre>%s near end of file</pre><pre>unable to decode byte 0x%x at position %d</pre><pre>control character 0x%x</pre><pre>invalid Unicode '\uX\uX'</pre><pre>invalid Unicode '\uX'</pre><pre>end == saved_text lex->saved_text.length</pre><pre>unable to open %s: %s</pre><pre>\ux</pre><pre>\ux\ux</pre><pre>mingwm10.dll</pre><pre>__mingwthr_remove_key_dtor</pre><pre>__mingwthr_key_dtor</pre><pre>VirtualQuery failed for %d bytes at address %p</pre><pre>Unknown pseudo relocation protocol version %d.</pre><pre>Unknown pseudo relocation bit size %d.</pre><pre>%s: option requires an argument -- %c</pre><pre>%s: unrecognised option `-%s'</pre><pre>%s: invalid option -- %c</pre><pre>option `%s%s' doesn't accept an argument</pre><pre>option `%s%s' requires an argument</pre><pre>%s: option `%s' is ambiguous</pre><pre>%s: unrecognised option `%s'</pre><pre>0123456789</pre><pre>curl_easy_cleanup</pre><pre>curl_easy_init</pre><pre>curl_easy_perform</pre><pre>curl_easy_reset</pre><pre>curl_easy_setopt</pre><pre>curl_global_init</pre><pre>curl_slist_append</pre><pre>curl_slist_free_all</pre><pre>curl_version</pre><pre>pthread_join</pre><pre>libcurl-4.dll</pre><pre>KERNEL32.dll</pre><pre>msvcrt.dll</pre><pre>pthreadGC2.dll</pre><pre>WS2_32.dll</pre><pre>zcÁ</pre><pre>KERNEL32.DLL</pre><pre>USER32.DLL</pre><pre>EnumChildWindows</pre><pre>kernel32.dll</pre><pre>ntdll.dll</pre><pre>mscoree.dll</pre><pre>.mixcrt</pre><pre>Please contact the application's support team for more information.</pre><pre>- Attempt to initialize the CRT more than once.</pre><pre>- CRT not initialized</pre><pre>- floating point support not loaded</pre><pre>GetProcessWindowStation</pre><pre>operator</pre><pre>USER32.dll</pre><pre>SHELL32.dll</pre><pre>OLEAUT32.dll</pre><pre>GetProcessHeap</pre><pre>GetCPInfo</pre><pre>GetConsoleOutputCP</pre><pre>EXEPackerHost32.exe</pre><pre>?m_IID@@3RCU_IMAGE_IMPORT_DESCRIPTOR@@C</pre><pre>`.rdata</pre><pre>@.data</pre><pre>.rsrc</pre><pre>@.reloc</pre><pre>.\BoxedAppSDK_StaticLib.cpp</pre><pre>BoxedAppSDK_TryCreateProcessForVirtualEXE_AnotherBitnessPartHelper</pre><pre>BoxedAppSDK_AttachMixedBitnessProcessHelper</pre><pre>BoxedAppSDK_EnumVirtualRegKeysA</pre><pre>BoxedAppSDK_EnumVirtualRegKeysW</pre><pre>BoxedAppSDK_ExecuteDotNetApplicationA</pre><pre>BoxedAppSDK_ExecuteDotNetApplicationW</pre><pre>BoxedAppSDK_DeleteVirtualRegKeyByHandle</pre><pre>BoxedAppSDK_DeleteVirtualRegKeyW</pre><pre>BoxedAppSDK_DeleteVirtualRegKeyA</pre><pre>BoxedAppSDK_CreateVirtualRegKeyW</pre><pre>BoxedAppSDK_CreateVirtualRegKeyA</pre><pre>C62E2B35-E4B3-4019-A7C4-F50AC7F78470</pre><pre>Get exe dir...</pre><pre>Get exe dir...done</pre><pre>Get the extension...done</pre><pre>Get current dir...done</pre><pre>Get old args...done</pre><pre>The command line overriding: %s</pre><pre>GetCommandLineW preparing to intercept...done</pre><pre>GetCommandLineA preparing to intercept...done</pre><pre>The embedding BoxedApp into child processes: %s</pre><pre>GetWindowsDirectoryW</pre><pre>RegCreateKeyExW</pre><pre>RegDeleteKeyW</pre><pre>RegCloseKey</pre><pre>ADVAPI32.dll</pre><pre>ole32.dll</pre><pre>EXEPackerStub32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\exepackerstub\!output\exepackerstub32\release_full\EXEPackerStub32.pdb</pre><pre>l$D9.tO</pre><pre>FTPSW</pre><pre>uÂ$D</pre><pre><p></p><pre>TryCreateProcessForVirtualEXE, template exe found:</pre><pre>CBoxedAppCore::My_NtDeleteKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtEnumerateValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtFlushKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtNotifyChangeKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtQueryKey, KeyHandle =</pre><pre>CBoxedAppCore::My_NtQueryMultipleValueKey, KeyHandle =</pre><pre>CBoxedAppCore::My_NtSetInformationKey, KeyHandle = 0x</pre><pre>KernelBase.dll</pre><pre>0x%x%x</pre><pre>CBoxedAppCore::My_NtCreateKey, ObjectAttributes = '</pre><pre>CBoxedAppCore::My_NtDeleteValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtLoadKey, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtQueryValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtReplaceKey, BackupHiveFileName = '</pre><pre>CBoxedAppCore::My_NtSetValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtUnloadKey, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtRenameKey, KeyHandle =</pre><pre>BoxedAppSDK::CBoxedAppCore::TryCreateProcessForVirtualEXE_AnotherBitnessPart</pre><pre>: Can't create process of rundll32.exe, last error =</pre><pre>{4F95F74C-9713-4181-ACDD-8A50195FBC0F}</pre><pre>BoxedAppSDK::CBoxedAppCore::AttachToProcess_WithProcessHelper</pre><pre>BoxedAppSDK::CBoxedAppCore::AttachMixedBitnessProcessHelper</pre><pre>CBoxedAppCore::My_NtLoadKey2, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtRestoreKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtSaveKey, KeyHandle = 0x</pre><pre>:\VirtualDllWithSameImport.dll</pre><pre>:\VirtualDllWithTls.dll</pre><pre>VirtualDllWithTls.dll</pre><pre>VirtualDllWithSameImport.dll</pre><pre>WinExec</pre><pre>advapi32.dll</pre><pre>NtRenameKey</pre><pre>NtUnloadKey</pre><pre>NtSetValueKey</pre><pre>NtSetInformationKey</pre><pre>NtSaveKey</pre><pre>NtRestoreKey</pre><pre>NtReplaceKey</pre><pre>NtQueryValueKey</pre><pre>NtQueryMultipleValueKey</pre><pre>NtQueryKey</pre><pre>NtOpenKeyEx</pre><pre>NtOpenKey</pre><pre>NtNotifyChangeKey</pre><pre>NtLoadKey2</pre><pre>NtLoadKey</pre><pre>NtFlushKey</pre><pre>NtEnumerateValueKey</pre><pre>NtEnumerateKey</pre><pre>NtDeleteValueKey</pre><pre>NtDeleteKey</pre><pre>NtCreateKey</pre><pre>[BOXEDAPP][pid:%d][tid:%d][ %.2d:%.2d:%.2d.%.3d]</pre><pre>FILE_EXECUTE</pre><pre>GENERIC_EXECUTE</pre><pre>KEY_WOW64_64KEY</pre><pre>KEY_WOW64_32KEY</pre><pre>KEY_NOTIFY</pre><pre>KEY_CREATE_LINK</pre><pre>KEY_ENUMERATE_SUB_KEYS</pre><pre>KEY_CREATE_SUB_KEY</pre><pre>KEY_SET_VALUE</pre><pre>KEY_QUERY_VALUE</pre><pre>SECTION_MAP_EXECUTE</pre><pre>PAGE_EXECUTE_WRITECOPY</pre><pre>PAGE_EXECUTE_READWRITE</pre><pre>PAGE_EXECUTE_READ</pre><pre>PAGE_EXECUTE</pre><pre>STATUS_PRIMARY_TRANSPORT_CONNECT_FAILED</pre><pre>STATUS_LOCAL_USER_SESSION_KEY</pre><pre>STATUS_NULL_LM_PASSWORD</pre><pre>STATUS_IMAGE_MACHINE_TYPE_MISMATCH_EXE</pre><pre>STATUS_CARDBUS_NOT_SUPPORTED</pre><pre>STATUS_INVALID_PORT_ATTRIBUTES</pre><pre>STATUS_PORT_MESSAGE_TOO_LONG</pre><pre>STATUS_PORT_DISCONNECTED</pre><pre>STATUS_PORT_CONNECTION_REFUSED</pre><pre>STATUS_INVALID_PORT_HANDLE</pre><pre>STATUS_PORT_ALREADY_SET</pre><pre>STATUS_EAS_NOT_SUPPORTED</pre><pre>STATUS_CTL_FILE_NOT_SUPPORTED</pre><pre>STATUS_WRONG_PASSWORD</pre><pre>STATUS_ILL_FORMED_PASSWORD</pre><pre>STATUS_PASSWORD_RESTRICTION</pre><pre>STATUS_PASSWORD_EXPIRED</pre><pre>STATUS_FLOAT_DENORMAL_OPERAND</pre><pre>STATUS_FLOAT_INVALID_OPERATION</pre><pre>STATUS_PIPE_NOT_AVAILABLE</pre><pre>STATUS_INVALID_PIPE_STATE</pre><pre>STATUS_PIPE_BUSY</pre><pre>STATUS_PIPE_DISCONNECTED</pre><pre>STATUS_PIPE_CLOSING</pre><pre>STATUS_PIPE_CONNECTED</pre><pre>STATUS_PIPE_LISTENING</pre><pre>STATUS_NOT_SUPPORTED</pre><pre>STATUS_PIPE_EMPTY</pre><pre>STATUS_WRONG_PASSWORD_CORE</pre><pre>STATUS_PIPE_BROKEN</pre><pre>STATUS_DISK_OPERATION_FAILED</pre><pre>STATUS_KEY_DELETED</pre><pre>STATUS_KEY_HAS_CHILDREN</pre><pre>STATUS_NO_USER_SESSION_KEY</pre><pre>STATUS_PASSWORD_MUST_CHANGE</pre><pre>STATUS_PORT_UNREACHABLE</pre><pre>STATUS_LOGIN_TIME_RESTRICTION</pre><pre>STATUS_LOGIN_WKSTA_RESTRICTION</pre><pre>STATUS_UNSUPPORTED_COMPRESSION</pre><pre>STATUS_NO_USER_KEYS</pre><pre>STATUS_NOT_EXPORT_FORMAT</pre><pre>STATUS_TRANSPORT_FULL</pre><pre>STATUS_WMI_NOT_SUPPORTED</pre><pre>STATUS_SAM_NEED_BOOTKEY_PASSWORD</pre><pre>STATUS_SAM_NEED_BOOTKEY_FLOPPY</pre><pre>STATUS_STRONG_CRYPTO_NOT_SUPPORTED</pre><pre>STATUS_NOT_SUPPORTED_ON_SBS</pre><pre>STATUS_CSS_KEY_NOT_PRESENT</pre><pre>STATUS_CSS_KEY_NOT_ESTABLISHED</pre><pre>STATUS_NO_KERB_KEY</pre><pre>STATUS_UNSUPPORTED_PREAUTH</pre><pre>STATUS_PORT_NOT_SET</pre><pre>STATUS_INVALID_IMPORT_OF_NON_DLL</pre><pre>STATUS_SMARTCARD_NO_KEY_CONTAINER</pre><pre>STATUS_SMARTCARD_NO_CERTIFICATE</pre><pre>STATUS_SMARTCARD_NO_KEYSET</pre><pre>STATUS_SMARTCARD_CERT_REVOKED</pre><pre>STATUS_SMARTCARD_CERT_EXPIRED</pre><pre>STATUS_SXS_KEY_NOT_FOUND</pre><pre>STATUS_CLUSTER_JOIN_IN_PROGRESS</pre><pre>STATUS_CLUSTER_JOIN_NOT_IN_PROGRESS</pre><pre>RegDeleteKeyExW</pre><pre>NtRequestWaitReplyPort</pre><pre>NtConnectPort</pre><pre>NtReplyPort</pre><pre>NtCompleteConnectPort</pre><pre>NtAcceptConnectPort</pre><pre>NtReplyWaitReceivePort</pre><pre>NtCreateWaitablePort</pre><pre>Imported function,</pre><pre>.data</pre><pre>It's impossible to create virtual file: parent file is virtual, but passed pBehavior is not NULL</pre><pre>It's impossible to create virtual file: passed pBehavior doesn't support Behavior::IVirtualFileStream</pre><pre>It's impossible to create virtual file: parent node is virtual, but passed pBehavior is not NULL</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetAllChildsKeys</pre><pre>NtEnumerateKey() returned unexpected error, status =</pre><pre>, RegTree::IEnumKeyNode::GetNext() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::EnumVirtualRegKeys</pre><pre>, RegTree::IKeyNode::EnumKeys() failed, hr =</pre><pre>: RegTree::IEnumKeyNode::GetNext() failed, hr =</pre><pre>: GetAllChildsKeys() failed, status =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtQueryKeyInternal</pre><pre>: RegTree::IKeyNode::EnumKeys() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetFullRegKeyPath</pre><pre>error, IVirtualKeyHandle_GetFullPath() returned</pre><pre>Invalid key information class:</pre><pre>KeySetHandleTagsInformation is not supported for virtual handle</pre><pre>KeySetDebugInformation is not supported for virtual handle</pre><pre>KeySetVirtualizationInformation is not supported for virtual handle</pre><pre>KeyControlFlagsInformation is not supported for virtual handle</pre><pre>KeyWow64FlagsInformation is not supported for virtual handle</pre><pre>We still don't process NtQueryObject / ObjectBasicInformation for virtual key handles</pre><pre>We still don't process NtQueryObject / ObjectTypeInformation for virtual key handles</pre><pre>: IVirtualKeyHandle::Rename() failed, hr =</pre><pre>: RegTree::IKeyNode::Remove() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtRenameKeyInternal</pre><pre>: RegTree::IKeyNode::AddKey() failed, hr =</pre><pre>: result hkey =</pre><pre>: IVirtualKey::CreateKey() failed, hr =</pre><pre>: we can't create a virtual key with its own behavior under another virtual key</pre><pre>: Handles::CreateVirtualKeyHandle() failed, hr =</pre><pre>: IVirtualKey::OpenKey() failed, hr =</pre><pre>: RegImpl::CreateKeyOnSharedMem() failed, hr =</pre><pre>: GetFullRegKeyPath() failed for the hKey =</pre><pre>: Handles::IVirtualKeyHandle::CreateKey() failed and returned</pre><pre>: passed pBehavior is not NULL, but parent key is virtual, so we can't create a key</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::CreateVirtualRegKey</pre><pre>: lpSubKey: "</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::SearchStartingFromRealKey</pre><pre>: Handles::CreateVirtualKeyHandle() failed</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtCreateKeyInternal</pre><pre>: SearchStartingFromRealKey() failed</pre><pre>: RegTree::IKeyNode::FindValue() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtDeleteValueKeyInternal</pre><pre>: IVirtualKeyHandle::put_Value() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetRealKeyLastWriteTime</pre><pre>: NtQueryKey() failed, status =</pre><pre>: NtOpenKey() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::HasRealKeySubKeys</pre><pre>: NtEnumerateValueKey() failed when we tried to get name of the node, status =</pre><pre>: IKeyNode::EnumValues() failed, hr =</pre><pre>: Behavior::IVirtualKeyHandle::EnumKeys() failed, hr =</pre><pre>: Behavior::IVirtualKeyHandle::EnumValues() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtEnumerateValueKeyInternal</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtOpenKeyInternal</pre><pre>: invalid KeyInformationClass passed:</pre><pre>: IVirtualKeyHandle_GetFullPath() failed, hr =</pre><pre>: Behavior::IEnumVirtualKey::GetNext() failed, hr =</pre><pre>: IVirtualKeyHandle::EnumValues() failed, hr =</pre><pre>: IVirtualKeyHandle::EnumKeys() failed, hr =</pre><pre>: IVirtualKeyHandle::get_LastWriteTime() failed, hr =</pre><pre>reg:NtQueryMultipleValueKey(</pre><pre>: IKeyNode::FindValue() failed, hr =</pre><pre>: IVirtualKeyHandle::get_Value() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtQueryValueKeyInternal</pre><pre>: IVirtualKeyHandle::get_ValueType() failed, hr =</pre><pre>reg:NtSetInformationKey(</pre><pre>RegTree::IKeyNode::RemoveValue() failed, hr</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtSetValueKeyInternal</pre><pre>reg:NtRenameKey(</pre><pre>RegTree::IEnumKeyNode::GetNext(), hr =</pre><pre>RegTree::IKeyNode::EnumKeys(), hr =</pre><pre>: IEnumVirtualKey::GetNext() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtDeleteKeyInternal</pre><pre>reg:NtDeleteValueKey(</pre><pre>: NtEnumerateKey() failed when we tried to get name of the node, status =</pre><pre>, Behavior::IVirtualKeyHandle::get_Prop() failed, hr =</pre><pre>, Behavior::IVirtualKey::OpenKey() failed, hr =</pre><pre>: IKeyNode::EnumKeys() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtEnumerateKeyInternal</pre><pre>reg:NtEnumerateValueKey(</pre><pre>reg:NtQueryKey(</pre><pre>reg:NtQueryValueKey(</pre><pre>reg:NtSetValueKey(</pre><pre>reg:NtCreateKey(</pre><pre>reg:NtDeleteKey(</pre><pre>reg:NtEnumerateKey(</pre><pre>reg:NtOpenKey(</pre><pre>RegOpenKeyExW</pre><pre>RegOpenKeyW</pre><pre>bxsdk32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\bxsdk32.pdb</pre><pre>`.rsrc</pre><pre>v2.0.50727</pre><pre>BoxedAppSDK_AppDomainManager.dll</pre><pre>System.Security</pre><pre>.ctor</pre><pre>System.Security.Policy</pre><pre>System.Reflection</pre><pre>System.Runtime.InteropServices</pre><pre>System.Diagnostics</pre><pre>System.Runtime.CompilerServices</pre><pre>System.Collections</pre><pre>System.Security.Permissions</pre><pre>System.IO</pre><pre>DllImportAttribute</pre><pre>shell32.dll</pre><pre>lpCmdLine</pre><pre>1.0.0.0</pre><pre>$87cd9ac9-2a94-4a9b-aee1-8d25d6a19f78</pre><pre>D:\build_area\boxedapp_src\src\BoxedAppSolution\DotNetAppDomainManager\obj\x86\Release_Full\BoxedAppSDK_AppDomainManager.pdb</pre><pre>BoxedAppSDKThunk32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\BoxedAppSDKThunk32.pdb</pre><pre>.reloc</pre><pre>TLSSupport32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\TLSSupport32.pdb</pre><pre>9 9$9(9,909</pre><pre>4!40484}4</pre><pre>:$:,:5:::{:</pre><pre>?#?2?9?@?</pre><pre>1 1$1(1,1014181</pre><pre>9$=(=,=0=4=8=<=@=</pre><pre>6 6$6(6,6064686<6><pre>1"26233'4</pre><pre>4 40454:4</pre><pre>:":2:7:>;</pre><pre>,1014181</pre><pre>8 8$8(8,8</pre><pre>P`.data</pre><pre>.edata</pre><pre>0@.idata</pre><pre>SShPi</pre><pre>SSh}i</pre><pre>purl/</pre><pre>j.RPj</pre><pre>libgcj_s.dll</pre><pre>Couldn't open file %s</pre><pre>Can't open %s for writing</pre><pre>Can't get the size of %s</pre><pre>Last-Modified: %s, d %s M d:d:d GMT</pre><pre>%c%c==</pre><pre>%c%c%c=</pre><pre>%c%c%c%c</pre><pre>%s:%d</pre><pre>%5[^:]:%d:%5s</pre><pre>Resolve %s found illegal!</pre><pre>Added %s:%d:%s to DNS cache</pre><pre>timeout on name lookup is not supported</pre><pre>%3lld %s %3lld %s %3lld %s %s %s %s %s %s %s</pre><pre>; filename="%s"</pre><pre>%s; boundary=%s</pre><pre>Content-Type: multipart/mixed, boundary=%s</pre><pre>Content-Type: %s</pre><pre>couldn't open file "%s"</pre><pre>--%s--</pre><pre>p.jpg</pre><pre>p.jpeg</pre><pre>p.txt</pre><pre>p.html</pre><pre>p.xml</pre><pre>#HttpOnly_</pre><pre>23[^;</pre><pre>=]=I99[^;</pre><pre>httponly</pre><pre>skipped cookie with illegal dotcount domain: %s</pre><pre>skipped cookie with bad tailmatch domain: %s</pre><pre>%s cookie %s="%s" for domain %s, path %s, expire %lld</pre><pre># Netscape HTTP Cookie File</pre><pre># http://curl.haxx.se/docs/http-cookies.html</pre><pre># This file was generated by libcurl! Edit at your own risk.</pre><pre># Fatal libcurl error</pre><pre>WARNING: failed to save cookies in %s</pre><pre>Avoided giant realloc for header (max is %d)!</pre><pre>HTTP/</pre><pre>The requested URL returned error: %d</pre><pre>%s, d %s M d:d:d GMT</pre><pre>If-Modified-Since: %s</pre><pre>If-Unmodified-Since: %s</pre><pre>Last-Modified: %s</pre><pre>%sAuthorization: Basic %s</pre><pre>%s auth using %s with user '%s'</pre><pre>Referer: %s</pre><pre>Accept-Encoding: %s</pre><pre>%s, TE</pre><pre>Chunky upload is not supported by HTTP 1.0</pre><pre>Host: %s%s%s</pre><pre>Host: %s%s%s:%hu</pre><pre>ftp://</pre><pre>;type=%c</pre><pre>Range: bytes=%s</pre><pre>Content-Range: bytes %s%lld/%lld</pre><pre>Content-Range: bytes %s/%lld</pre><pre>ftp://%s:%s@%s</pre><pre>%s HTTP/%s</pre><pre>%s%s%s%s%s%s%s%s%s%s%s</pre><pre>%s%s=%s</pre><pre>Internal HTTP POST error!</pre><pre>Content-Type: application/x-www-form-urlencoded</pre><pre>Failed sending HTTP POST request</pre><pre>Failed sending HTTP request</pre><pre>HTTP error before end of send, stop sending</pre><pre>HTTP/%d.%d =</pre><pre>HTTP =</pre><pre>RTSP/%d.%d =</pre><pre>The requested URL returned error: %s</pre><pre>HTTP 1.0, assume close after body</pre><pre>HTTP/1.0 proxy connection set to keep alive!</pre><pre>HTTP/1.1 proxy connection set close!</pre><pre>HTTP/1.0 connection set to keep alive!</pre><pre>[%s %s %s]</pre><pre>Recv failure: %s</pre><pre>Send failure: %s</pre><pre>/etc/ssl/certs/ca-certificates.crt</pre><pre>IDN support not present, can't parse Unicode domains</pre><pre>Connected to %s (%s) port %ld (#%ld)</pre><pre>%5[^:@]:%5[^@]</pre><pre>[%*45[0123456789abcdefABCDEF:.]%c</pre><pre>%s://%s%s%s:%hu%s%s%s</pre><pre>Port number too large: %lu</pre><pre>Couldn't resolve host '%s'</pre><pre>Couldn't resolve proxy '%s'</pre><pre>User-Agent: %s</pre><pre>About to connect() to %s%s port %ld (#%ld)</pre><pre>Curl_addHandleToPipeline: length: %d</pre><pre>Closing connection %d</pre><pre>Connection #%ld to host %s left intact</pre><pre>Found bundle for host %s: %p</pre><pre>Server doesn't support pipelining</pre><pre>Connection %d seems to be dead!</pre><pre>[^:]:%[^</pre><pre>:]://%[^</pre><pre><url> malformed</url></pre><pre>:%5[^@]</pre><pre>Protocol %s not supported or disabled in libcurl</pre><pre>%s://%s</pre><pre>Couldn't find host %s in the _netrc file; using defaults</pre><pre>ftp@example.com</pre><pre>Found connection %d, with requests in the pipe (%d)</pre><pre>Re-using existing connection! (#%ld) with host %s</pre><pre>CURLOPT_SSL_VERIFYHOST no longer supports 1 as value!</pre><pre>Operation too slow. Less than %ld bytes/sec transferred the last %ld seconds</pre><pre>zlib/%s</pre><pre>7.30.0</pre><pre>%%X</pre><pre>login</pre><pre>password</pre><pre>[^?&/:]://%c</pre><pre>Issue another request to this URL: '%s'</pre><pre>Violate RFC 2616/10.3.2 and switch from POST to GET</pre><pre>Violate RFC 2616/10.3.3 and switch from POST to GET</pre><pre>Disables POST, goes with %s</pre><pre>No URL set!</pre><pre>seek callback returned error %d</pre><pre>the ioctl callback returned %d</pre><pre>ioctl callback returned error %d</pre><pre>operation aborted by callback</pre><pre>Rewinding stream by : %zd bytes on url %s (zero-length body)</pre><pre>Excess found in a non pipelined read: excess = %zd url = %s (zero-length body)</pre><pre>HTTP server doesn't seem to support byte ranges. Cannot resume.</pre><pre>Problem (%d) in the Chunked-Encoded data</pre><pre>Rewinding stream by : %zu bytes on url %s (size = %lld, maxdownload = %lld, bytecount = %lld, nread = %zd)</pre><pre>Excess found in a non pipelined read: excess = %zu, size = %lld, maxdownload = %lld, bytecount = %lld</pre><pre>Unrecognized content encoding type. libcurl understands `identity', `deflate' and `gzip' content encodings.</pre><pre>Operation timed out after %ld milliseconds with %lld out of %lld bytes received</pre><pre>Operation timed out after %ld milliseconds with %lld bytes received</pre><pre>pUnrecognized content encoding type. libcurl understands `identity', `deflate' and `gzip' content encodings.</pre><pre>psa_addr inet_ntop() failed with errno %d: %s</pre><pre>Trying %s...</pre><pre>Could not set TCP_NODELAY: %s</pre><pre>TCP_NODELAY set</pre><pre>Failed to set SO_KEEPALIVE on fd %d</pre><pre>Failed to set SIO_KEEPALIVE_VALS on fd %d: %d</pre><pre>Couldn't bind to interface '%s'</pre><pre>Local Interface %s is ip %s using address family %i</pre><pre>Name '%s' family %i resolved to '%s' family %i</pre><pre>Couldn't bind to '%s'</pre><pre>getsockname() failed with errno %d: %s</pre><pre>Local port: %hu</pre><pre>Bind to local port %hu failed, trying next</pre><pre>bind failed with errno %d: %s</pre><pre>Failed to connect to %s: %s</pre><pre>couldn't connect to %s at %s:%d</pre><pre>getpeername() failed with errno %d: %s</pre><pre>ssrem inet_ntop() failed with errno %d: %s</pre><pre>ssloc inet_ntop() failed with errno %d: %s</pre><pre>Failed connect to %s:%ld; %s</pre><pre>pInternal error clearing splay node = %d</pre><pre>Internal error removing splay node = %d</pre><pre>pPipe broke: handle 0x%p, url = %s</pre><pre>In state %d with no easy_conn, bail out!</pre><pre>Error while processing content unencoding: %s</pre><pre>1.2.8</pre><pre>1.2.0.4</pre><pre>px</pre><pre>%s:%s:%s</pre><pre>%s:%.*s</pre><pre>%s:%s:x:%s:%s:%s</pre><pre>%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", cnonce="%s", nc=x, qop=%s, response="%s"</pre><pre>%sAuthorization: Digest username="%s", realm="%s", nonce="%s", uri="%s", response="%s"</pre><pre>%s, opaque="%s"</pre><pre>%s, algorithm="%s"</pre><pre>Unsupported protocol</pre><pre>URL using bad/illegal format or missing URL</pre><pre>A requested feature, protocol or option was not found built-in in this libcurl due to a build-time decision.</pre><pre>FTP: weird server reply</pre><pre>FTP: The server failed to connect to data port</pre><pre>FTP: Accepting server connect has timed out</pre><pre>FTP: The server did not accept the PRET command.</pre><pre>FTP: unknown PASS reply</pre><pre>FTP: unknown PASV reply</pre><pre>FTP: unknown 227 response format</pre><pre>FTP: can't figure out the host in the PASV response</pre><pre>FTP: couldn't set file type</pre><pre>FTP: couldn't retrieve (RETR failed) the specified file</pre><pre>HTTP response code said error</pre><pre>FTP: command PORT failed</pre><pre>FTP: command REST failed</pre><pre>Operation was aborted by an application callback</pre><pre>A libcurl function was given a bad argument</pre><pre>An unknown option was passed in to libcurl</pre><pre>SSL peer certificate or SSH remote key was not OK</pre><pre>Problem with the local SSL certificate</pre><pre>Peer certificate cannot be authenticated with given CA certificates</pre><pre>Problem with the SSL CA cert (path? access rights?)</pre><pre>Unrecognized or bad HTTP Content or Transfer-Encoding</pre><pre>Invalid LDAP URL</pre><pre>Issuer check against peer certificate failed</pre><pre>Login denied</pre><pre>TFTP: File Not Found</pre><pre>TFTP: Access Violation</pre><pre>TFTP: Illegal operation</pre><pre>TFTP: Unknown transfer ID</pre><pre>TFTP: No such user</pre><pre>Caller must register CURLOPT_CONV_ callback options</pre><pre>Error in the SSH layer</pre><pre>Unable to parse FTP file list</pre><pre>Please call curl_multi_perform() soon</pre><pre>CURLSHcode unknown</pre><pre>Protocol option is unsupported</pre><pre>Protocol is unsupported</pre><pre>Socket is unsupported</pre><pre>Operation not supported</pre><pre>Address family not supported</pre><pre>Protocol family not supported</pre><pre>Winsock version not supported</pre><pre>Unknown error %d (%#x)</pre><pre>Curl_ipv4_resolve_r failed for %s</pre><pre>%d.%d.%d.%d</pre><pre>d:d:d</pre><pre>d:d</pre><pre>User was rejected by the SOCKS5 server (%d %d).</pre><pre>SOCKS5 GSSAPI per-message authentication is not supported.</pre><pre>No authentication method was acceptable. (It is quite likely that the SOCKS5 server wanted a username/password, since none was supplied to the server on this connection.)</pre><pre>Failed to resolve "%s" for SOCKS5 connect.</pre><pre>Can't complete SOCKS5 connection to %d.%d.%d.%d:%d. (%d)</pre><pre>Can't complete SOCKS5 connection to %s:%d. (%d)</pre><pre>Can't complete SOCKS5 connection to xx:xx:xx:xx:xx:xx:xx:xx:%d. (%d)</pre><pre>Failed to resolve "%s" for SOCKS4 connect.</pre><pre>SOCKS4%s request granted.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected or failed.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because SOCKS server cannot connect to identd on the client.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), request rejected because the client program and identd report different user-ids.</pre><pre>Can't complete SOCKS4 connection to %d.%d.%d.%d:%d. (%d), Unknown.</pre><pre>Establish HTTP proxy tunnel to %s:%hu</pre><pre>%s:%hu</pre><pre>%s%s%s:%hu</pre><pre>Host: %s</pre><pre>CONNECT %s HTTP/%s</pre><pre>%s%s%s%s</pre><pre>HTTP/1.%d %d</pre><pre>TUNNEL_STATE switched to: %d</pre><pre>Received HTTP code %d from proxy after CONNECT</pre><pre>%s/%s</pre><pre>username="%s",realm="%s",nonce="%s",cnonce="%s",nc="%s",digest-uri="%s",response=%s</pre><pre>00000001</pre><pre>12345678</pre><pre>%s xxxxxxxxxxxxxxxx</pre><pre>- Conn %d (%p) send_pipe: %d, recv_pipe: %d</pre><pre>Server %s is blacklisted</pre><pre>Server %s is not blacklisted</pre><pre>Site %s:%d is pipeline blacklisted</pre><pre>Adding handle: send: %d</pre><pre>Adding handle: recv: %d</pre><pre>Conn: %d (%p) Receive pipe weight: (%d/%d), penalized: %d</pre><pre>curl_easy_duphandle</pre><pre>curl_easy_escape</pre><pre>curl_easy_getinfo</pre><pre>curl_easy_pause</pre><pre>curl_easy_recv</pre><pre>curl_easy_send</pre><pre>curl_easy_strerror</pre><pre>curl_easy_unescape</pre><pre>curl_escape</pre><pre>curl_formadd</pre><pre>curl_formfree</pre><pre>curl_formget</pre><pre>curl_free</pre><pre>curl_getdate</pre><pre>curl_getenv</pre><pre>curl_global_cleanup</pre><pre>curl_global_init_mem</pre><pre>curl_maprintf</pre><pre>curl_mfprintf</pre><pre>curl_mprintf</pre><pre>curl_msnprintf</pre><pre>curl_msprintf</pre><pre>curl_multi_add_handle</pre><pre>curl_multi_assign</pre><pre>curl_multi_cleanup</pre><pre>curl_multi_fdset</pre><pre>curl_multi_info_read</pre><pre>curl_multi_init</pre><pre>curl_multi_perform</pre><pre>curl_multi_remove_handle</pre><pre>curl_multi_setopt</pre><pre>curl_multi_socket</pre><pre>curl_multi_socket_action</pre><pre>curl_multi_socket_all</pre><pre>curl_multi_strerror</pre><pre>curl_multi_timeout</pre><pre>curl_multi_wait</pre><pre>curl_mvaprintf</pre><pre>curl_mvfprintf</pre><pre>curl_mvprintf</pre><pre>curl_mvsnprintf</pre><pre>curl_mvsprintf</pre><pre>curl_share_cleanup</pre><pre>curl_share_init</pre><pre>curl_share_setopt</pre><pre>curl_share_strerror</pre><pre>curl_strequal</pre><pre>curl_strnequal</pre><pre>curl_unescape</pre><pre>curl_version_info</pre><pre>ADVAPI32.DLL</pre><pre>WS2_32.DLL</pre><pre>zlib1.dll</pre><pre>8 8$8(8,808</pre><pre>2 2$2(2,2024282</pre><pre>DllMainCRTStartup</pre><pre>GNU C 4.2.1-sjlj (mingw32-2)</pre><pre>/home/ron/devel/debian/mingw32-runtime/mingw32-runtime-3.13/build_dir/src/mingw-runtime-3.13-20070825-1/dllcrt1.c</pre><pre> DllMainCRTStartup@12</pre><pre>dllcrt1.c</pre><pre>.file</pre><pre>http.c</pre><pre>ftp.c</pre><pre>url.c</pre><pre>_Curl_do</pre><pre>curl_fnmatch.c</pre><pre>ftplistparser.c</pre><pre>http_chunks.c</pre><pre>http_digest.c</pre><pre>curl_rand.c</pre><pre>http_negotiate.c</pre><pre>tftp.c</pre><pre>ssh.c</pre><pre>curl_addrinfo.c</pre><pre>curl_sspi.c</pre><pre>curl_memrchr.c</pre><pre>smtp.c</pre><pre>curl_threads.c</pre><pre>curl_rtmp.c</pre><pre>curl_gethostname.c</pre><pre>http_proxy.c</pre><pre>curl_gssapi.c</pre><pre>curl_ntlm.c</pre><pre>curl_ntlm_wb.c</pre><pre>curl_ntlm_core.c</pre><pre>curl_ntlm_msgs.c</pre><pre>curl_sasl.c</pre><pre>curl_schannel.c</pre><pre>curl_multibyte.c</pre><pre>curl_darwinssl.c</pre><pre>pipeline.c</pre><pre>.idata$7</pre><pre>.idata$5</pre><pre>.idata$48</pre><pre>.idata$6</pre><pre>.idata$4(</pre><pre>.idata$4,</pre><pre>.idata$44</pre><pre>.idata$40</pre><pre>.idata$4</pre><pre>.idata$7`</pre><pre>.idata$7\</pre><pre>.idata$7l</pre><pre>.idata$4</pre><pre>.idata$7x</pre><pre>.idata$6|</pre><pre>.idata$6T</pre><pre>.idata$7|</pre><pre>.idata$7d</pre><pre>.idata$7t</pre><pre>.idata$6d</pre><pre>.idata$6D</pre><pre>.idata$64</pre><pre>.idata$7h</pre><pre>.idata$7p</pre><pre>.idata$6l</pre><pre>.idata$6$</pre><pre>.idata$2P</pre><pre>.idata$5|</pre><pre>.idata$4$</pre><pre>.idata$6(</pre><pre>.idata$6P</pre><pre>.idata$60</pre><pre>.idata$68</pre><pre>.idata$2(</pre><pre>.idata$4`</pre><pre>.idata$6h</pre><pre>.idata$4L</pre><pre>.idata$6\</pre><pre>.idata$5@</pre><pre>.idata$7(</pre><pre>.idata$5P</pre><pre>.idata$7H</pre><pre>.idata$5p</pre><pre>.idata$6t</pre><pre>.idata$7D</pre><pre>.idata$5l</pre><pre>.idata$5<</pre><pre>.idata$4@</pre><pre>.idata$4H</pre><pre>.idata$6,</pre><pre>.idata$5</pre><pre>.idata$4l</pre><pre>.idata$4T</pre><pre>.idata$7<</pre><pre>.idata$5d</pre><pre>.idata$74</pre><pre>.idata$5\</pre><pre>.idata$6<</pre><pre>.idata$4<</pre><pre>.idata$5D</pre><pre>.idata$7,</pre><pre>.idata$5T</pre><pre>.idata$5,</pre><pre>.idata$4x</pre><pre>.idata$5$</pre><pre>.idata$4p</pre><pre>.idata$78</pre><pre>.idata$5`</pre><pre>.idata$6H</pre><pre>.idata$4h</pre><pre>.idata$5(</pre><pre>.idata$4t</pre><pre>.idata$7</pre><pre>.idata$5H</pre><pre>.idata$7@</pre><pre>.idata$5h</pre><pre>.idata$6`</pre><pre>.idata$70</pre><pre>.idata$5X</pre><pre>.idata$4X</pre><pre>.idata$58</pre><pre>.idata$4D</pre><pre>.idata$4P</pre><pre>.idata$50</pre><pre>.idata$4|</pre><pre>.idata$7$</pre><pre>.idata$5L</pre><pre>.idata$4\</pre><pre>.idata$4d</pre><pre>.idata$7L</pre><pre>.idata$5t</pre><pre>.idata$54</pre><pre>.idata$2<</pre><pre>.idata$5x</pre><pre>.idata$7P</pre><pre>.idata$6p</pre><pre>.idata$7T</pre><pre>.idata$2</pre><pre>.idata$7X</pre><pre>.idata$6X</pre><pre>.idata$6</pre><pre>.idata$2d</pre><pre>.debug_aranges</pre><pre>.debug_pubnames</pre><pre>.debug_info</pre><pre>.debug_abbrev</pre><pre>.debug_line</pre><pre>.debug_frame</pre><pre>.debug_loc</pre><pre>_DllMainCRTStartup@12</pre><pre>_curlx_tvdiff</pre><pre>_curlx_tvdiff_secs</pre><pre>_Curl_tvlong</pre><pre>_curlx_tvnow</pre><pre>_Curl_base64_encode</pre><pre>_Curl_base64_decode</pre><pre>_Curl_num_addresses</pre><pre>_Curl_resolv_unlock</pre><pre>_Curl_hostcache_clean</pre><pre>_Curl_hostcache_destroy</pre><pre>_Curl_mk_dnscache</pre><pre>_Curl_hostcache_prune</pre><pre>_Curl_cache_addr</pre><pre>_Curl_loadhostpairs</pre><pre>_Curl_resolv</pre><pre>_Curl_resolv_timeout</pre><pre>_Curl_printable_address</pre><pre>_Curl_global_host_cache_dtor</pre><pre>_Curl_global_host_cache_init</pre><pre>_Curl_pgrsSetDownloadCounter</pre><pre>_Curl_pgrsSetUploadCounter</pre><pre>_Curl_pgrsSetDownloadSize</pre><pre>_Curl_pgrsSetUploadSize</pre><pre>_Curl_pgrsResetTimesSizes</pre><pre>_Curl_pgrsStartNow</pre><pre>_Curl_pgrsUpdate</pre><pre>_Curl_pgrsDone</pre><pre>_Curl_pgrsTime</pre><pre>_Curl_formclean</pre><pre>_curl_formfree</pre><pre>_Curl_FormInit</pre><pre>_Curl_formpostheader</pre><pre>_Curl_FormReader</pre><pre>_Curl_getformdata</pre><pre>_curl_formget</pre><pre>_curl_formadd</pre><pre>_Curl_cookie_freelist</pre><pre>_Curl_cookie_clearall</pre><pre>_Curl_cookie_clearsess</pre><pre>_Curl_cookie_cleanup</pre><pre>_Curl_cookie_list</pre><pre>_Curl_cookie_getlist</pre><pre>_Curl_cookie_add</pre><pre>_Curl_cookie_init</pre><pre>_Curl_cookie_loadfiles</pre><pre>_Curl_flush_cookies</pre><pre>_http_should_fail</pre><pre>_Curl_add_buffer_init</pre><pre>_http_getsock_do</pre><pre>_use_http_1_1</pre><pre>_Curl_add_buffer</pre><pre>_checkhttpprefix</pre><pre>_Curl_checkheaders</pre><pre>_Curl_compareheader</pre><pre>_http_perhapsrewind</pre><pre>_Curl_http_auth_act</pre><pre>_Curl_http_done</pre><pre>_Curl_http_connect</pre><pre>_Curl_add_bufferf</pre><pre>_Curl_add_timecondition</pre><pre>_Curl_add_custom_headers</pre><pre>_Curl_add_buffer_send</pre><pre>_Curl_http_input_auth</pre><pre>_Curl_http_output_auth</pre><pre>_Curl_http</pre><pre>_Curl_http_readwrite_headers</pre><pre>_Curl_write</pre><pre>_Curl_debug</pre><pre>_Curl_read</pre><pre>_Curl_read_plain</pre><pre>_Curl_sendf</pre><pre>_Curl_failf</pre><pre>_Curl_client_write</pre><pre>_Curl_recv_plain</pre><pre>_Curl_send_plain</pre><pre>_Curl_write_plain</pre><pre>_Curl_infof</pre><pre>_Curl_freeset</pre><pre>_Curl_init_userdefined</pre><pre>_Curl_protocol_getsock</pre><pre>_Curl_doing_getsock</pre><pre>_Curl_protocol_connecting</pre><pre>_Curl_protocol_doing</pre><pre>_Curl_reset_reqproto</pre><pre>_Curl_do_more</pre><pre>_Curl_verboseconnect</pre><pre>_Curl_isPipeliningEnabled</pre><pre>_IsPipeliningPossible</pre><pre>_parse_remote_port</pre><pre>_Curl_open</pre><pre>_Curl_protocol_connect</pre><pre>_Curl_connected_proxy</pre><pre>_Curl_setup_conn</pre><pre>_Curl_removeHandleFromPipeline</pre><pre>_Curl_getoff_all_pipelines</pre><pre>_Curl_addHandleToPipeline</pre><pre>_signalPipeClose</pre><pre>_Curl_disconnect</pre><pre>_Curl_done</pre><pre>_Curl_handler_dummy</pre><pre>_Curl_connect</pre><pre>_Curl_setopt</pre><pre>_Curl_close</pre><pre>_Curl_dupset</pre><pre>_Curl_if_is_interface_name</pre><pre>_Curl_if2ip</pre><pre>_Curl_speedcheck</pre><pre>_Curl_speedinit</pre><pre>_curl_version_info</pre><pre>_curl_version</pre><pre>_curl_getenv</pre><pre>_curl_free</pre><pre>_Curl_urldecode</pre><pre>_curl_easy_unescape</pre><pre>_curl_unescape</pre><pre>_curl_easy_escape</pre><pre>_curl_escape</pre><pre>_curl_msnprintf</pre><pre>_curl_mvfprintf</pre><pre>_curl_mvprintf</pre><pre>_curl_mvsprintf</pre><pre>_curl_mfprintf</pre><pre>_curl_mprintf</pre><pre>_curl_msprintf</pre><pre>_curl_mvaprintf</pre><pre>_curl_maprintf</pre><pre>_curl_mvsnprintf</pre><pre>_Curl_parsenetrc</pre><pre>_Curl_initinfo</pre><pre>_Curl_getinfo</pre><pre>_Curl_single_getsock</pre><pre>_Curl_sleep_time</pre><pre>_Curl_posttransfer</pre><pre>_strlen_url</pre><pre>_strcpy_url</pre><pre>_Curl_setup_transfer</pre><pre>_Curl_meets_timecondition</pre><pre>_Curl_reconnect_request</pre><pre>_Curl_follow</pre><pre>_Curl_pretransfer</pre><pre>_Curl_readrewind</pre><pre>_Curl_retry_request</pre><pre>_Curl_fillreadbuffer</pre><pre>_Curl_readwrite</pre><pre>_curl_strnequal</pre><pre>_curl_strequal</pre><pre>_Curl_easy_addmulti</pre><pre>_curl_easy_send</pre><pre>_curl_easy_recv</pre><pre>_curl_easy_pause</pre><pre>_Curl_easy_initHandleData</pre><pre>_curl_easy_reset</pre><pre>_curl_easy_duphandle</pre><pre>_curl_easy_getinfo</pre><pre>_curl_easy_cleanup</pre><pre>_curl_easy_perform</pre><pre>_curl_easy_setopt</pre><pre>_curl_global_cleanup</pre><pre>_curl_global_init</pre><pre>_curl_easy_init</pre><pre>_curl_global_init_mem</pre><pre>_Curl_fnmatch</pre><pre>_Curl_fileinfo_dtor</pre><pre>_Curl_fileinfo_alloc</pre><pre>_Curl_wildcard_dtor</pre><pre>_Curl_wildcard_init</pre><pre>_Curl_httpchunk_init</pre><pre>_Curl_httpchunk_read</pre><pre>_Curl_strtok_r</pre><pre>_Curl_persistconninfo</pre><pre>_Curl_socket</pre><pre>_Curl_closesocket</pre><pre>_Curl_getconnectinfo</pre><pre>_Curl_timeleft</pre><pre>_Curl_sndbufset</pre><pre>_Curl_connecthost</pre><pre>_Curl_updateconninfo</pre><pre>_Curl_is_connected</pre><pre>_Curl_llist_alloc</pre><pre>_Curl_llist_insert_next</pre><pre>_Curl_llist_remove</pre><pre>_Curl_llist_destroy</pre><pre>_Curl_llist_count</pre><pre>_Curl_llist_move</pre><pre>_Curl_hash_pick</pre><pre>_Curl_hash_str</pre><pre>_Curl_hash_start_iterate</pre><pre>_Curl_hash_next_element</pre><pre>_Curl_str_key_compare</pre><pre>_Curl_hash_clean_with_criterium</pre><pre>_Curl_hash_delete</pre><pre>_Curl_hash_clean</pre><pre>_Curl_hash_destroy</pre><pre>_Curl_hash_add</pre><pre>_Curl_hash_init</pre><pre>_Curl_hash_alloc</pre><pre>_fd_key_compare</pre><pre>_multi_freeamsg</pre><pre>_Curl_multi_pipeline_enabled</pre><pre>_Curl_multi_handlePipeBreak</pre><pre>_Curl_multi_set_easy_connection</pre><pre>_Curl_multi_max_host_connections</pre><pre>_Curl_multi_max_total_connections</pre><pre>_Curl_multi_max_pipeline_length</pre><pre>_Curl_multi_content_length_penalty_size</pre><pre>_Curl_multi_chunk_length_penalty_size</pre><pre>_Curl_multi_pipelining_site_bl</pre><pre>_Curl_multi_pipelining_server_bl</pre><pre>_curl_multi_assign</pre><pre>_Curl_expire</pre><pre>_Curl_multi_process_pending_handles</pre><pre>_curl_multi_timeout</pre><pre>_curl_multi_fdset</pre><pre>_curl_multi_setopt</pre><pre>_curl_multi_info_read</pre><pre>_curl_multi_cleanup</pre><pre>_curl_multi_perform</pre><pre>_curl_multi_socket_all</pre><pre>_curl_multi_socket_action</pre><pre>_curl_multi_socket</pre><pre>_curl_multi_wait</pre><pre>_curl_multi_remove_handle</pre><pre>_curl_multi_add_handle</pre><pre>_curl_multi_init</pre><pre>_Curl_unencode_cleanup</pre><pre>_Curl_unencode_gzip_write</pre><pre>_Curl_unencode_deflate_write</pre><pre>_curl_share_init</pre><pre>_Curl_share_lock</pre><pre>_Curl_share_unlock</pre><pre>_curl_share_cleanup</pre><pre>_curl_share_setopt</pre><pre>_Curl_digest_cleanup</pre><pre>_Curl_output_digest</pre><pre>_Curl_input_digest</pre><pre>_Curl_MD5_init</pre><pre>_Curl_MD5_update</pre><pre>_Curl_MD5_final</pre><pre>_Curl_md5it</pre><pre>_Curl_rand</pre><pre>_Curl_srand</pre><pre>_Curl_inet_pton</pre><pre>_curl_easy_strerror</pre><pre>_curl_multi_strerror</pre><pre>_curl_share_strerror</pre><pre>_Curl_strerror</pre><pre>_Curl_ipvalid</pre><pre>_Curl_ipv4_resolve_r</pre><pre>_Curl_getaddrinfo</pre><pre>_Curl_set_dns_servers</pre><pre>_Curl_inet_ntop</pre><pre>_Curl_gmtime</pre><pre>_curl_getdate</pre><pre>_Curl_wait_ms</pre><pre>_Curl_poll</pre><pre>_Curl_socket_check</pre><pre>_Curl_clone_ssl_config</pre><pre>_Curl_free_ssl_config</pre><pre>_Curl_ssl_config_matches</pre><pre>_Curl_splay</pre><pre>_Curl_splayinsert</pre><pre>_KEY_NOTUSED.17658</pre><pre>_Curl_splaygetbest</pre><pre>_Curl_splayremovebyaddr</pre><pre>_Curl_blockread_all</pre><pre>_Curl_SOCKS5</pre><pre>_Curl_SOCKS4</pre><pre>_Curl_raw_toupper</pre><pre>_Curl_raw_equal</pre><pre>_Curl_raw_nequal</pre><pre>_Curl_strntoupper</pre><pre>_Curl_freeaddrinfo</pre><pre>_Curl_he2ai</pre><pre>_Curl_ip2addr</pre><pre>_Curl_str2addr</pre><pre>_curl_slist_append</pre><pre>_curl_slist_free_all</pre><pre>_Curl_slist_duplicate</pre><pre>_curlx_nonblock</pre><pre>_Curl_memrchr</pre><pre>_curlx_ultous</pre><pre>_curlx_ultouc</pre><pre>_curlx_ultosi</pre><pre>_curlx_uztosi</pre><pre>_curlx_uztoul</pre><pre>_curlx_uztoui</pre><pre>_curlx_sltosi</pre><pre>_curlx_sltoui</pre><pre>_curlx_sltous</pre><pre>_curlx_uztosz</pre><pre>_curlx_sotouz</pre><pre>_curlx_sztosi</pre><pre>_curlx_sitouz</pre><pre>_curlx_sktosi</pre><pre>_curlx_sitosk</pre><pre>_Curl_HMAC_init</pre><pre>_Curl_HMAC_update</pre><pre>_Curl_HMAC_final</pre><pre>_Curl_gethostname</pre><pre>http_negotiate_sspi.c</pre><pre>_Curl_proxyCONNECT</pre><pre>_Curl_proxy_connect</pre><pre>_Curl_sasl_cleanup</pre><pre>_Curl_sasl_create_login_message</pre><pre>_sasl_digest_get_key_value</pre><pre>_Curl_sasl_create_digest_md5_message</pre><pre>_Curl_sasl_create_cram_md5_message</pre><pre>_Curl_sasl_create_plain_message</pre><pre>_Curl_bundle_remove_conn</pre><pre>_Curl_bundle_add_conn</pre><pre>_Curl_bundle_destroy</pre><pre>_Curl_bundle_create</pre><pre>_Curl_conncache_find_first_connection</pre><pre>_Curl_conncache_foreach</pre><pre>_Curl_conncache_remove_conn</pre><pre>_Curl_conncache_find_bundle</pre><pre>_Curl_conncache_add_conn</pre><pre>_Curl_conncache_destroy</pre><pre>_Curl_conncache_init</pre><pre>_print_pipeline</pre><pre>_Curl_pipeline_set_server_blacklist</pre><pre>_Curl_pipeline_server_blacklisted</pre><pre>_Curl_pipeline_set_site_blacklist</pre><pre>_Curl_pipeline_site_blacklisted</pre><pre>_Curl_move_handle_from_send_to_recv_pipe</pre><pre>_Curl_add_handle_to_pipeline</pre><pre>_Curl_pipeline_penalized</pre><pre>.weak.__Jv_RegisterClasses.___gcc_register_frame</pre><pre>__libmsvcrt_a_iname</pre><pre>_Curl_handler_http</pre><pre>___crt_xl_start__</pre><pre>___crt_xi_start__</pre><pre>___crt_xi_end__</pre><pre>_Curl_crealloc</pre><pre>_Curl_cfree</pre><pre>_Curl_HMAC_MD5</pre><pre>_Curl_wkday</pre><pre>___crt_xp_start__</pre><pre>_Curl_handler_file</pre><pre>___crt_xp_end__</pre><pre>__head_libmsvcrt_a</pre><pre>_Curl_ccalloc</pre><pre>___crt_xc_end__</pre><pre>___crt_xc_start__</pre><pre>_Curl_DIGEST_MD5</pre><pre>_Curl_cmalloc</pre><pre>_Curl_month</pre><pre>_Curl_cstrdup</pre><pre>___crt_xt_start__</pre><pre>_Curl_cwcsdup</pre><pre>___crt_xt_end__</pre><pre>_Curl_ack_eintr</pre><pre>0`.data</pre><pre>0@.bss</pre><pre>%XQIb</pre><pre>%dQIb</pre><pre>%DQIb</pre><pre>%xQIb</pre><pre>libgcc_s_dw2-1.dll</pre><pre>\QUSEREX.DLL</pre><pre>pthread_key_create</pre><pre>pthread_key_delete</pre><pre>7(8.898?8</pre><pre>_CRT_MT</pre><pre>___w64_mingwthr_add_key_dtor</pre><pre>___w64_mingwthr_remove_key_dtor</pre><pre>__mingwthr_key_t</pre><pre>__mingwthr_key</pre><pre>GNU C 4.5.2</pre><pre>../mingw/dllcrt1.c</pre><pre>C:\MinGW\msys\1.0\src\mingwrt</pre><pre>-DllMainCRTStartup@12</pre><pre>__report_error</pre><pre>../mingw/crtst.c</pre><pre>__mingwthr_run_key_dtors</pre><pre>keyp</pre><pre>new_key</pre><pre>prev_key</pre><pre>cur_key</pre><pre>key_dtor_list</pre><pre>c:/mingw/bin/../lib/gcc/mingw32/4.5.2/include</pre><pre>crtst.c</pre><pre>cygming-crtbegin.c</pre><pre>.tls$AAA</pre><pre>.tls$ZZZ</pre><pre>.CRT$XLA</pre><pre>.CRT$XLZ</pre><pre>.CRT$XLC</pre><pre>.CRT$XLD</pre><pre>.CRT$XDA</pre><pre>.CRT$XDZ</pre><pre>.idata$6N</pre><pre>.idata$6j</pre><pre>.idata$62</pre><pre>.idata$6V</pre><pre>.idata$6~</pre><pre>.idata$6*</pre><pre>.idata$6f</pre><pre>.idata$6@</pre><pre>.idata$6></pre><pre>cygming-crtend.c</pre><pre>__CRT_MT</pre><pre>.eh_frame</pre><pre>.debug_pubtypes</pre><pre>.debug_str</pre><pre>.debug_ranges</pre><pre>_pthread_key_create</pre><pre>_pthread_key_delete</pre><pre>_ptw32_processTerminate.part.1</pre><pre>_pthread_join</pre><pre>___report_error</pre><pre>___mingwthr_run_key_dtors</pre><pre>_key_dtor_list</pre><pre>____w64_mingwthr_add_key_dtor</pre><pre>____w64_mingwthr_remove_key_dtor</pre><pre>.text.startup</pre><pre>.ctors.65535</pre><pre>.weak.___register_frame_info.___gcc_register_frame</pre><pre>_ptw32_selfThreadKey</pre><pre>_ptw32_cleanupKey</pre><pre>.weak.___deregister_frame_info.___gcc_register_frame</pre><pre>deflate 1.2.8 Copyright 1995-2013 Jean-loup Gailly and Mark Adler</pre><pre>b<fd:%d></fd:%d></pre><pre>inflate 1.2.8 Copyright 1995-2013 Mark Adler</pre><pre>%9X9i9z9</pre><pre>"@"@"@"@</pre><pre>This EXE is created by the demo version of BoxedApp Packer</pre><pre>Visit our web-site at: http://boxedapp.com/boxedapppacker/order.html</pre><pre>WBoxedAppLog_%d.txt</pre><pre>BoxedAppVar:ExeFileName</pre><pre>BoxedAppVar:ExeFileExtension</pre><pre>BoxedAppVar:ExeFileNameWithoutExtension</pre><pre>BoxedAppVar:ExeFullPath</pre><pre>BoxedAppVar:OldCmdLine</pre><pre>HKEY_CLASSES_ROOT</pre><pre>HKEY_CURRENT_USER</pre><pre>HKEY_LOCAL_MACHINE</pre><pre>HKEY_CURRENT_CONFIG</pre><pre>HKEY_USERS</pre><pre>%s\%s</pre><pre>%s\winsxs\tempBxDir\virtualAsm</pre><pre>:\tempManifest.manifest</pre><pre>%s_%.8x_%.8x_%.8x</pre><pre>\KernelBase.dll</pre><pre>\.NETFramework\assembly\GAC\BoxedAppSDK_AppDomainManager\1.0.0.0__ef07ce3257ee81c1\BoxedAppSDK_AppDomainManager.dll</pre><pre>\assembly\GAC\BoxedAppSDK_AppDomainManager\1.0.0.0__ef07ce3257ee81c1\BoxedAppSDK_AppDomainManager.dll</pre><pre>%d-%d-%p</pre><pre>:\TLSSupport310D39B571B74d36B95451DD240D8758</pre><pre>",BoxedAppSDK_TryCreateProcessForVirtualEXE_AnotherBitnessPartHelper</pre><pre>\rundll32.exe"</pre><pre>DotNetAppDomainManager.CManagedHost</pre><pre>BoxedAppSDK_AppDomainManager, Version=1.0.0.0, Culture=neutral, PublicKeyToken=ef07ce3257ee81c1</pre><pre>DotNetAppDomainManager.CAppDomainManager</pre><pre>.config</pre><pre>.manifest</pre><pre>",BoxedAppSDK_AttachMixedBitnessProcessHelper</pre><pre>Attempt to launch not executable file:</pre><pre>Unable to find appropriate template exe</pre><pre>comdlg32.dll</pre><pre>\dllhost.exe</pre><pre>hh.exe</pre><pre>find.exe</pre><pre>help.exe</pre><pre>winver.exe</pre><pre>regsvr32.exe</pre><pre>dllhost.exe</pre><pre>ntvdm.exe</pre><pre>tcpsvcs.exe</pre><pre>mpr.dll</pre><pre>Wadvapi32.dll</pre><pre>sxs.dll</pre><pre>Obtain a full version, purchase a license at http://boxedapp.com/boxedappsdk/order.html</pre><pre>%s_%.8x_%.8x</pre><pre>%s_%.8x</pre><pre>boxedapp_msg_process</pre><pre>boxedapp_event_newmsg</pre><pre>boxedapp_msg_global</pre><pre>bxsdk64.dll</pre><pre>:\{9019ACD6-BC11-4308-8C49-92E0601DF38D}\temp\</pre><pre>\DosDevices\pipe\</pre><pre>\Device\NamedPipe\</pre><pre>\??\pipe\</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Gre_Initialize</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontDpi</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Console</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony\Locations</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates</pre><pre>publicKeyToken</pre><pre>Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\</pre><pre>!"#$%&'()* ,-./0123456789:;<=>?@</pre><pre>3, 3, 5, 0</pre><pre>BoxedApp, BoxedApp SDK, BoxedApp Packer, BoxedApp.com and some others are trademarks (some of them are registered) of Virtualization Technologies Ltd.</pre><pre>BoxedAppSDK.dll</pre><pre><BoxedAppVar:OldCmdLine></BoxedAppVar:OldCmdLine></pre><pre><ExeDir></ExeDir></pre><pre><ExeDir>\libcurl-4.dll</ExeDir></pre><pre>!"#$%&'()* ,-./0123456789:</pre><pre>pthreadgc2.dll</pre><pre><ExeDir>\pthreadgc2.dll</ExeDir></pre><pre>POSIX Threads for Windows LPGL</pre><pre>2, 9, 1, 0</pre><pre>pthreadGC2.DLL</pre><pre>http://sourceware.org/pthreads-win32/</pre><pre><ExeDir>\zlib1.dll</ExeDir></pre><pre>For more information visit http://www.zlib.net/</pre><b>cvtres.exe_432_rwx_00B20000_000AE000:</b><pre>.text</pre><pre>`.rdata</pre><pre>@.data</pre><pre>.rsrc</pre><pre>@.reloc</pre><pre>l$D9.tO</pre><pre>FTPSW</pre><pre>uÂ$D</pre><pre><p></p><pre>TryCreateProcessForVirtualEXE, template exe found:</pre><pre>CBoxedAppCore::My_NtDeleteKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtEnumerateValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtFlushKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtNotifyChangeKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtQueryKey, KeyHandle =</pre><pre>CBoxedAppCore::My_NtQueryMultipleValueKey, KeyHandle =</pre><pre>CBoxedAppCore::My_NtSetInformationKey, KeyHandle = 0x</pre><pre>KernelBase.dll</pre><pre>kernel32.dll</pre><pre>0x%x%x</pre><pre>CBoxedAppCore::My_NtCreateKey, ObjectAttributes = '</pre><pre>CBoxedAppCore::My_NtDeleteValueKey, KeyHandle = 0x</pre><pre>C62E2B35-E4B3-4019-A7C4-F50AC7F78470</pre><pre>CBoxedAppCore::My_NtLoadKey, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtQueryValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtReplaceKey, BackupHiveFileName = '</pre><pre>CBoxedAppCore::My_NtSetValueKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtUnloadKey, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtRenameKey, KeyHandle =</pre><pre>BoxedAppSDK::CBoxedAppCore::TryCreateProcessForVirtualEXE_AnotherBitnessPart</pre><pre>: Can't create process of rundll32.exe, last error =</pre><pre>BoxedAppSDK_TryCreateProcessForVirtualEXE_AnotherBitnessPartHelper</pre><pre>BoxedAppSDK_AttachMixedBitnessProcessHelper</pre><pre>BoxedAppSDK_EnumVirtualRegKeysA</pre><pre>BoxedAppSDK_EnumVirtualRegKeysW</pre><pre>BoxedAppSDK_ExecuteDotNetApplicationA</pre><pre>BoxedAppSDK_ExecuteDotNetApplicationW</pre><pre>BoxedAppSDK_DeleteVirtualRegKeyByHandle</pre><pre>BoxedAppSDK_DeleteVirtualRegKeyW</pre><pre>BoxedAppSDK_DeleteVirtualRegKeyA</pre><pre>BoxedAppSDK_CreateVirtualRegKeyW</pre><pre>BoxedAppSDK_CreateVirtualRegKeyA</pre><pre>{4F95F74C-9713-4181-ACDD-8A50195FBC0F}</pre><pre>BoxedAppSDK::CBoxedAppCore::AttachToProcess_WithProcessHelper</pre><pre>BoxedAppSDK::CBoxedAppCore::AttachMixedBitnessProcessHelper</pre><pre>CBoxedAppCore::My_NtLoadKey2, DestinationKeyName = '</pre><pre>CBoxedAppCore::My_NtRestoreKey, KeyHandle = 0x</pre><pre>CBoxedAppCore::My_NtSaveKey, KeyHandle = 0x</pre><pre>:\VirtualDllWithSameImport.dll</pre><pre>:\VirtualDllWithTls.dll</pre><pre>VirtualDllWithTls.dll</pre><pre>VirtualDllWithSameImport.dll</pre><pre>ole32.dll</pre><pre>WinExec</pre><pre>advapi32.dll</pre><pre>NtRenameKey</pre><pre>NtUnloadKey</pre><pre>NtSetValueKey</pre><pre>NtSetInformationKey</pre><pre>NtSaveKey</pre><pre>NtRestoreKey</pre><pre>NtReplaceKey</pre><pre>NtQueryValueKey</pre><pre>NtQueryMultipleValueKey</pre><pre>NtQueryKey</pre><pre>NtOpenKeyEx</pre><pre>NtOpenKey</pre><pre>NtNotifyChangeKey</pre><pre>NtLoadKey2</pre><pre>NtLoadKey</pre><pre>NtFlushKey</pre><pre>NtEnumerateValueKey</pre><pre>NtEnumerateKey</pre><pre>NtDeleteValueKey</pre><pre>NtDeleteKey</pre><pre>NtCreateKey</pre><pre>ntdll.dll</pre><pre>[BOXEDAPP][pid:%d][tid:%d][ %.2d:%.2d:%.2d.%.3d]</pre><pre>FILE_EXECUTE</pre><pre>GENERIC_EXECUTE</pre><pre>KEY_WOW64_64KEY</pre><pre>KEY_WOW64_32KEY</pre><pre>KEY_NOTIFY</pre><pre>KEY_CREATE_LINK</pre><pre>KEY_ENUMERATE_SUB_KEYS</pre><pre>KEY_CREATE_SUB_KEY</pre><pre>KEY_SET_VALUE</pre><pre>KEY_QUERY_VALUE</pre><pre>SECTION_MAP_EXECUTE</pre><pre>PAGE_EXECUTE_WRITECOPY</pre><pre>PAGE_EXECUTE_READWRITE</pre><pre>PAGE_EXECUTE_READ</pre><pre>PAGE_EXECUTE</pre><pre>STATUS_PRIMARY_TRANSPORT_CONNECT_FAILED</pre><pre>STATUS_LOCAL_USER_SESSION_KEY</pre><pre>STATUS_NULL_LM_PASSWORD</pre><pre>STATUS_IMAGE_MACHINE_TYPE_MISMATCH_EXE</pre><pre>STATUS_CARDBUS_NOT_SUPPORTED</pre><pre>STATUS_INVALID_PORT_ATTRIBUTES</pre><pre>STATUS_PORT_MESSAGE_TOO_LONG</pre><pre>STATUS_PORT_DISCONNECTED</pre><pre>STATUS_PORT_CONNECTION_REFUSED</pre><pre>STATUS_INVALID_PORT_HANDLE</pre><pre>STATUS_PORT_ALREADY_SET</pre><pre>STATUS_EAS_NOT_SUPPORTED</pre><pre>STATUS_CTL_FILE_NOT_SUPPORTED</pre><pre>STATUS_WRONG_PASSWORD</pre><pre>STATUS_ILL_FORMED_PASSWORD</pre><pre>STATUS_PASSWORD_RESTRICTION</pre><pre>STATUS_PASSWORD_EXPIRED</pre><pre>STATUS_FLOAT_DENORMAL_OPERAND</pre><pre>STATUS_FLOAT_INVALID_OPERATION</pre><pre>STATUS_PIPE_NOT_AVAILABLE</pre><pre>STATUS_INVALID_PIPE_STATE</pre><pre>STATUS_PIPE_BUSY</pre><pre>STATUS_PIPE_DISCONNECTED</pre><pre>STATUS_PIPE_CLOSING</pre><pre>STATUS_PIPE_CONNECTED</pre><pre>STATUS_PIPE_LISTENING</pre><pre>STATUS_NOT_SUPPORTED</pre><pre>STATUS_PIPE_EMPTY</pre><pre>STATUS_WRONG_PASSWORD_CORE</pre><pre>STATUS_PIPE_BROKEN</pre><pre>STATUS_DISK_OPERATION_FAILED</pre><pre>STATUS_KEY_DELETED</pre><pre>STATUS_KEY_HAS_CHILDREN</pre><pre>STATUS_NO_USER_SESSION_KEY</pre><pre>STATUS_PASSWORD_MUST_CHANGE</pre><pre>STATUS_PORT_UNREACHABLE</pre><pre>STATUS_LOGIN_TIME_RESTRICTION</pre><pre>STATUS_LOGIN_WKSTA_RESTRICTION</pre><pre>STATUS_UNSUPPORTED_COMPRESSION</pre><pre>STATUS_NO_USER_KEYS</pre><pre>STATUS_NOT_EXPORT_FORMAT</pre><pre>STATUS_TRANSPORT_FULL</pre><pre>STATUS_WMI_NOT_SUPPORTED</pre><pre>STATUS_SAM_NEED_BOOTKEY_PASSWORD</pre><pre>STATUS_SAM_NEED_BOOTKEY_FLOPPY</pre><pre>STATUS_STRONG_CRYPTO_NOT_SUPPORTED</pre><pre>STATUS_NOT_SUPPORTED_ON_SBS</pre><pre>STATUS_CSS_KEY_NOT_PRESENT</pre><pre>STATUS_CSS_KEY_NOT_ESTABLISHED</pre><pre>STATUS_NO_KERB_KEY</pre><pre>STATUS_UNSUPPORTED_PREAUTH</pre><pre>STATUS_PORT_NOT_SET</pre><pre>STATUS_INVALID_IMPORT_OF_NON_DLL</pre><pre>STATUS_SMARTCARD_NO_KEY_CONTAINER</pre><pre>STATUS_SMARTCARD_NO_CERTIFICATE</pre><pre>STATUS_SMARTCARD_NO_KEYSET</pre><pre>STATUS_SMARTCARD_CERT_REVOKED</pre><pre>STATUS_SMARTCARD_CERT_EXPIRED</pre><pre>STATUS_SXS_KEY_NOT_FOUND</pre><pre>STATUS_CLUSTER_JOIN_IN_PROGRESS</pre><pre>STATUS_CLUSTER_JOIN_NOT_IN_PROGRESS</pre><pre>RegDeleteKeyExW</pre><pre>NtRequestWaitReplyPort</pre><pre>NtConnectPort</pre><pre>NtReplyPort</pre><pre>NtCompleteConnectPort</pre><pre>NtAcceptConnectPort</pre><pre>NtReplyWaitReceivePort</pre><pre>NtCreateWaitablePort</pre><pre>Imported function,</pre><pre>.data</pre><pre>.idata</pre><pre>It's impossible to create virtual file: parent file is virtual, but passed pBehavior is not NULL</pre><pre>It's impossible to create virtual file: passed pBehavior doesn't support Behavior::IVirtualFileStream</pre><pre>It's impossible to create virtual file: parent node is virtual, but passed pBehavior is not NULL</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetAllChildsKeys</pre><pre>NtEnumerateKey() returned unexpected error, status =</pre><pre>, RegTree::IEnumKeyNode::GetNext() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::EnumVirtualRegKeys</pre><pre>, RegTree::IKeyNode::EnumKeys() failed, hr =</pre><pre>: RegTree::IEnumKeyNode::GetNext() failed, hr =</pre><pre>: GetAllChildsKeys() failed, status =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtQueryKeyInternal</pre><pre>: RegTree::IKeyNode::EnumKeys() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetFullRegKeyPath</pre><pre>error, IVirtualKeyHandle_GetFullPath() returned</pre><pre>Invalid key information class:</pre><pre>KeySetHandleTagsInformation is not supported for virtual handle</pre><pre>KeySetDebugInformation is not supported for virtual handle</pre><pre>KeySetVirtualizationInformation is not supported for virtual handle</pre><pre>KeyControlFlagsInformation is not supported for virtual handle</pre><pre>KeyWow64FlagsInformation is not supported for virtual handle</pre><pre>We still don't process NtQueryObject / ObjectBasicInformation for virtual key handles</pre><pre>We still don't process NtQueryObject / ObjectTypeInformation for virtual key handles</pre><pre>: IVirtualKeyHandle::Rename() failed, hr =</pre><pre>: RegTree::IKeyNode::Remove() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtRenameKeyInternal</pre><pre>: RegTree::IKeyNode::AddKey() failed, hr =</pre><pre>: result hkey =</pre><pre>: IVirtualKey::CreateKey() failed, hr =</pre><pre>: we can't create a virtual key with its own behavior under another virtual key</pre><pre>: Handles::CreateVirtualKeyHandle() failed, hr =</pre><pre>: IVirtualKey::OpenKey() failed, hr =</pre><pre>: RegImpl::CreateKeyOnSharedMem() failed, hr =</pre><pre>: GetFullRegKeyPath() failed for the hKey =</pre><pre>: Handles::IVirtualKeyHandle::CreateKey() failed and returned</pre><pre>: passed pBehavior is not NULL, but parent key is virtual, so we can't create a key</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::CreateVirtualRegKey</pre><pre>: lpSubKey: "</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::SearchStartingFromRealKey</pre><pre>: Handles::CreateVirtualKeyHandle() failed</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtCreateKeyInternal</pre><pre>: SearchStartingFromRealKey() failed</pre><pre>: RegTree::IKeyNode::FindValue() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtDeleteValueKeyInternal</pre><pre>: IVirtualKeyHandle::put_Value() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::GetRealKeyLastWriteTime</pre><pre>: NtQueryKey() failed, status =</pre><pre>: NtOpenKey() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::HasRealKeySubKeys</pre><pre>: NtEnumerateValueKey() failed when we tried to get name of the node, status =</pre><pre>: IKeyNode::EnumValues() failed, hr =</pre><pre>: Behavior::IVirtualKeyHandle::EnumKeys() failed, hr =</pre><pre>: Behavior::IVirtualKeyHandle::EnumValues() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtEnumerateValueKeyInternal</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtOpenKeyInternal</pre><pre>: invalid KeyInformationClass passed:</pre><pre>: IVirtualKeyHandle_GetFullPath() failed, hr =</pre><pre>: Behavior::IEnumVirtualKey::GetNext() failed, hr =</pre><pre>: IVirtualKeyHandle::EnumValues() failed, hr =</pre><pre>: IVirtualKeyHandle::EnumKeys() failed, hr =</pre><pre>: IVirtualKeyHandle::get_LastWriteTime() failed, hr =</pre><pre>reg:NtQueryMultipleValueKey(</pre><pre>: IKeyNode::FindValue() failed, hr =</pre><pre>: IVirtualKeyHandle::get_Value() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtQueryValueKeyInternal</pre><pre>: IVirtualKeyHandle::get_ValueType() failed, hr =</pre><pre>reg:NtSetInformationKey(</pre><pre>RegTree::IKeyNode::RemoveValue() failed, hr</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtSetValueKeyInternal</pre><pre>reg:NtRenameKey(</pre><pre>RegTree::IEnumKeyNode::GetNext(), hr =</pre><pre>RegTree::IKeyNode::EnumKeys(), hr =</pre><pre>: IEnumVirtualKey::GetNext() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtDeleteKeyInternal</pre><pre>reg:NtDeleteValueKey(</pre><pre>: NtEnumerateKey() failed when we tried to get name of the node, status =</pre><pre>, Behavior::IVirtualKeyHandle::get_Prop() failed, hr =</pre><pre>, Behavior::IVirtualKey::OpenKey() failed, hr =</pre><pre>: IKeyNode::EnumKeys() failed, hr =</pre><pre>BoxedAppSDK::Registry::Impl::CRegistry::NtEnumerateKeyInternal</pre><pre>reg:NtEnumerateValueKey(</pre><pre>reg:NtQueryKey(</pre><pre>reg:NtQueryValueKey(</pre><pre>reg:NtSetValueKey(</pre><pre>reg:NtCreateKey(</pre><pre>reg:NtDeleteKey(</pre><pre>reg:NtEnumerateKey(</pre><pre>reg:NtOpenKey(</pre><pre>GetProcessHeap</pre><pre>GetWindowsDirectoryW</pre><pre>KERNEL32.dll</pre><pre>USER32.dll</pre><pre>RegCloseKey</pre><pre>RegOpenKeyExW</pre><pre>RegDeleteKeyW</pre><pre>RegOpenKeyW</pre><pre>ADVAPI32.dll</pre><pre>OLEAUT32.dll</pre><pre>bxsdk32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\bxsdk32.pdb</pre><pre>`.rsrc</pre><pre>v2.0.50727</pre><pre>BoxedAppSDK_AppDomainManager.dll</pre><pre>System.Security</pre><pre>.ctor</pre><pre>System.Security.Policy</pre><pre>System.Reflection</pre><pre>System.Runtime.InteropServices</pre><pre>System.Diagnostics</pre><pre>System.Runtime.CompilerServices</pre><pre>System.Collections</pre><pre>System.Security.Permissions</pre><pre>System.IO</pre><pre>DllImportAttribute</pre><pre>shell32.dll</pre><pre>lpCmdLine</pre><pre>1.0.0.0</pre><pre>$87cd9ac9-2a94-4a9b-aee1-8d25d6a19f78</pre><pre>D:\build_area\boxedapp_src\src\BoxedAppSolution\DotNetAppDomainManager\obj\x86\Release_Full\BoxedAppSDK_AppDomainManager.pdb</pre><pre>mscoree.dll</pre><pre>BoxedAppSDKThunk32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\BoxedAppSDKThunk32.pdb</pre><pre>.reloc</pre><pre>TLSSupport32.dll</pre><pre>d:\build_area\boxedapp_src\src\boxedappsolution\release_full\TLSSupport32.pdb</pre><pre>9 9$9(9,909</pre><pre>4!40484}4</pre><pre>:$:,:5:::{:</pre><pre>?#?2?9?@?</pre><pre>1 1$1(1,1014181</pre><pre>9$=(=,=0=4=8=<=@=</pre><pre>6 6$6(6,6064686<6><pre>1"26233'4</pre><pre>4 40454:4</pre><pre>:":2:7:>;</pre><pre>,1014181</pre><pre>8 8$8(8,8</pre><pre>%s_%.8x_%.8x_%.8x</pre><pre>\KernelBase.dll</pre><pre>\.NETFramework\assembly\GAC\BoxedAppSDK_AppDomainManager\1.0.0.0__ef07ce3257ee81c1\BoxedAppSDK_AppDomainManager.dll</pre><pre>\assembly\GAC\BoxedAppSDK_AppDomainManager\1.0.0.0__ef07ce3257ee81c1\BoxedAppSDK_AppDomainManager.dll</pre><pre>%d-%d-%p</pre><pre>:\TLSSupport310D39B571B74d36B95451DD240D8758</pre><pre>",BoxedAppSDK_TryCreateProcessForVirtualEXE_AnotherBitnessPartHelper</pre><pre>\rundll32.exe"</pre><pre>DotNetAppDomainManager.CManagedHost</pre><pre>BoxedAppSDK_AppDomainManager, Version=1.0.0.0, Culture=neutral, PublicKeyToken=ef07ce3257ee81c1</pre><pre>DotNetAppDomainManager.CAppDomainManager</pre><pre>.config</pre><pre>.manifest</pre><pre>",BoxedAppSDK_AttachMixedBitnessProcessHelper</pre><pre>Attempt to launch not executable file:</pre><pre>Unable to find appropriate template exe</pre><pre>comdlg32.dll</pre><pre>\dllhost.exe</pre><pre>hh.exe</pre><pre>find.exe</pre><pre>help.exe</pre><pre>winver.exe</pre><pre>regsvr32.exe</pre><pre>dllhost.exe</pre><pre>ntvdm.exe</pre><pre>tcpsvcs.exe</pre><pre>mpr.dll</pre><pre>Wadvapi32.dll</pre><pre>sxs.dll</pre><pre>Obtain a full version, purchase a license at http://boxedapp.com/boxedappsdk/order.html</pre><pre>%s_%.8x_%.8x</pre><pre>%s_%.8x</pre><pre>boxedapp_msg_process</pre><pre>boxedapp_event_newmsg</pre><pre>boxedapp_msg_global</pre><pre>bxsdk64.dll</pre><pre>:\{9019ACD6-BC11-4308-8C49-92E0601DF38D}\temp\</pre><pre>\DosDevices\pipe\</pre><pre>\Device\NamedPipe\</pre><pre>\??\pipe\</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Gre_Initialize</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontDpi</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Console</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony\Locations</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates</pre><pre>\REGISTRY\MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates</pre><pre>publicKeyToken</pre><pre>Software\Microsoft\Windows\CurrentVersion\SideBySide\Winners\</pre><pre>!"#$%&'()* ,-./0123456789:;<=>?@</pre><pre>3, 3, 5, 0</pre><pre>BoxedApp, BoxedApp SDK, BoxedApp Packer, BoxedApp.com and some others are trademarks (some of them are registered) of Virtualization Technologies Ltd.</pre><pre>BoxedAppSDK.dll</pre><b>cvtres.exe_432_rwx_10000000_00001000:</b><pre>.text</pre><pre>`.rdata</pre><pre>@.reloc</pre><b>cvtres.exe_432_rwx_62480000_00001000:</b><pre>.text</pre><pre>0`.data</pre><pre>.rdata</pre><pre>0@.bss</pre><pre>.edata</pre><pre>0@.idata</pre><pre>.rsrc</pre><pre>.reloc</pre><b>cvtres.exe_432_rwx_62E80000_00001000:</b><pre>.text</pre><pre>P`.data</pre><pre>.rdata</pre><pre>`@.bss</pre><pre>.edata</pre><pre>0@.idata</pre><pre>.rsrc</pre><pre>.reloc</pre></6></pre></pre></pre></pre></pre></pre></pre></6></pre></pre></-Qg></pre></The></pre></Attempt></pre></pre></pre></pre></pre></pre></6></pre>