pedump 0.5.1 → 0.6.1

data/lib/pedump/loader/minidump.rb

@@ -110,7 +110,34 @@ class PEdump
         16 => :MemoryInfoListStream,         # MINIDUMP_MEMORY_INFO_LIST
         17 => :ThreadInfoListStream,
         18 => :HandleOperationListStream,
-    0xffff => :LastReservedStream
+    0xffff => :LastReservedStream,
+
+    # Special types saved by google breakpad
+    # https://chromium.googlesource.com/breakpad/breakpad/+/846b6335c5b0ba46dfa2ed96fccfa3f7a02fa2f1/src/google_breakpad/common/minidump_format.h#311
+    0x47670001 => :BreakpadInfoStream,
+    0x47670002 => :BreakpadAssertionInfoStream,
+    0x47670003 => :BreakpadLinuxCpuInfo,
+    0x47670004 => :BreakpadLinuxProcStatus,
+    0x47670005 => :BreakpadLinuxLsbRelease,
+    0x47670006 => :BreakpadLinuxCmdLine,
+    0x47670007 => :BreakpadLinuxEnviron,
+    0x47670008 => :BreakpadLinuxAuxv,
+    0x47670009 => :BreakpadLinuxMaps,
+    0x4767000A => :BreakpadLinuxDsoDebug,
+
+    # Saved by crashpad
+    # https://chromium.googlesource.com/crashpad/crashpad/+/doc/minidump/minidump_extensions.h#95
+    0x43500001 => :CrashpadInfo,
+
+    # Saved by Syzyasan
+    # https://github.com/google/syzygy/blob/c8bb4927f07fec0de8834c4774ddaafef0bc099f/syzygy/kasko/api/client.h#L28
+    # https://github.com/google/syzygy/blob/master/syzygy/crashdata/crashdata.proto
+    0x4B6B0001 => :SyzyasanCrashdata,
+
+    # Saved by Chromium
+    0x4B6B0002 => :ChromiumStabilityReport,
+    0x4B6B0003 => :ChromiumSystemProfile,
+    0x4B6B0004 => :ChromiumGwpAsanData,
   }
 
   class Loader
@@ -134,9 +161,16 @@ class PEdump
           end
       end
 
+      def stream_by_name(name)
+        type = MINIDUMP_STREAM_TYPE.invert[name]
+        raise "Unknown type symbol #{name}!" if !type
+
+        streams.find { |s| s.StreamType == type }
+      end
+
       def memory_info_list
         # MINIDUMP_MEMORY_INFO_LIST
-        stream = streams.find{ |s| s.StreamType == 16 }
+        stream = stream_by_name(:MemoryInfoListStream)
         return nil unless stream
         io.seek stream.Location.Rva
         MINIDUMP_MEMORY_INFO_LIST.read io
@@ -144,7 +178,7 @@ class PEdump
 
       def memory_list
         # MINIDUMP_MEMORY_LIST
-        stream = streams.find{ |s| s.StreamType == 5 }
+        stream = stream_by_name(:MemoryListStream)
         return nil unless stream
         io.seek stream.Location.Rva
         MINIDUMP_MEMORY_LIST.read io
@@ -152,7 +186,7 @@ class PEdump
 
       def memory64_list
         # MINIDUMP_MEMORY64_LIST
-        stream = streams.find{ |s| s.StreamType == 9 }
+        stream = stream_by_name(:Memory64ListStream)
         return nil unless stream
         io.seek stream.Location.Rva
         MINIDUMP_MEMORY64_LIST.read io
@@ -216,21 +250,102 @@ end # module PEdump
 
 if $0 == __FILE__
   require 'pp'
+  require 'optparse'
+
+  options = {}
+  opt_parse = OptionParser.new do |opts|
+    opts.banner = "Usage: #{$0} [options] <minidump>"
+
+    opts.on("--all", "Print all of the following sections") do
+      options[:all] = true
+    end
+    opts.on("--header", "Print minidump header") do
+      options[:header] = true
+    end
+    opts.on("--streams", "Print out the streams present") do
+      options[:streams] = true
+    end
+    opts.on("--memory-ranges", "Print out memory ranges included in the minidump") do
+      options[:memory_ranges] = true
+    end
+    opts.on("--breakpad", "Print out breakpad text sections if present") do
+      options[:breakpad] = true
+    end
+    opts.separator ''
+
+    opts.on("--memory <address>", "Print the memory range beginning at address") do |m|
+      options[:memory] = m.hex
+    end
+    opts.separator ''
+
+    opts.on("-h", "--help", "Help") do
+      puts opts
+      exit 0
+    end
+  end
+
+  opt_parse.parse!
 
-  raise "gimme a fname" if ARGV.empty?
-  io = open(ARGV.first,"rb")
+  if ARGV.empty?
+    $stderr.puts opt_parse.help
+    exit 1
+  end
 
+  io = open(ARGV.first, "rb")
   md = PEdump::Loader::Minidump.new io
-  pp md.hdr
-  puts
-  puts "[.] #{md.memory_ranges.size} memory ranges"
-  puts "[.] #{md.memory_ranges(:merge => true).size} merged memory ranges"
-  puts
 
-#  pp md.memory_info_list
-#  pp md.memory_list
+  if options[:all] || options[:header]
+    pp md.hdr
+    puts
+  end
+
+  if options[:all] || options[:streams]
+    puts "[.] Streams present in the minidump:"
+    md.streams.each do |s|
+      if PEdump::MINIDUMP_STREAM_TYPE[s.StreamType]
+        puts "[.] #{PEdump::MINIDUMP_STREAM_TYPE[s.StreamType]}"
+      else
+        puts "[.] Unknown stream type #{s.StreamType}"
+      end
+    end
+    puts
+  end
+
+  if options[:all] || options[:breakpad]
+    [ :BreakpadLinuxCpuInfo, :BreakpadLinuxProcStatus, :BreakpadLinuxMaps,
+      :BreakpadLinuxCmdLine, :BreakpadLinuxEnviron ].each { |name|
+      stream = md.stream_by_name(name)
+      next if !stream
+
+      io.seek stream.Location.Rva
+      contents = io.read(stream.Location.DataSize)
+
+      if contents !~ /[^[:print:][:space:]]/
+        puts "[.] Section #{name}:"
+        puts contents
+      else
+        puts "[.] Section #{name}: #{contents.inspect}"
+      end
+      puts
+    }
+  end
+
+  if options[:all] || options[:memory_ranges]
+    puts "[.] #{md.memory_ranges.size} memory ranges"
+    puts "[.] #{md.memory_ranges(:merge => true).size} merged memory ranges"
+    puts
+
+    printf "[.] %16s %8s\n", "addr", "size"
+    md.memory_ranges(:merge => true).sort_by { |mr| mr.va }.each do |mr|
+      printf "[.] %16x %8x\n", mr.va, mr.size
+    end
+  end
+
+  if options[:memory]
+    mr = md.memory_ranges(:merge => true).find { |r| r.va == options[:memory] }
+    raise "Could not find the specified region" if !mr
 
-  md.memory_ranges(:merge => true).each do |mr|
-    printf "[.] %8x %8x %8x\n", mr.file_offset, mr.va, mr.size
+    io.seek(mr.file_offset)
+    print io.read(mr.size)
   end
 end

data/lib/pedump/loader/section.rb

@@ -10,15 +10,16 @@ class PEdump::Loader
         @hdr = x.dup
       end
       @data = EMPTY_DATA.dup
+      @delta = args[:delta] || 0
       @deferred_load_io   = args[:deferred_load_io]
-      @deferred_load_pos  = args[:deferred_load_pos]  || (@hdr && @hdr.PointerToRawData)
+      @deferred_load_pos  = args[:deferred_load_pos]  || (@hdr && (@hdr.PointerToRawData - @delta))
       @deferred_load_size = args[:deferred_load_size] || (@hdr && @hdr.SizeOfRawData)
       @image_base = args[:image_base] || 0
     end
 
     def name;  @hdr.Name; end
-    def va  ;  @hdr.VirtualAddress + @image_base; end
-    def rva ;  @hdr.VirtualAddress; end
+    def va  ;  @hdr.VirtualAddress + @image_base - @delta; end
+    def rva ;  @hdr.VirtualAddress - @delta; end
     def vsize; @hdr.VirtualSize; end
     def flags; @hdr.Characteristics; end
     def flags= f; @hdr.Characteristics= f; end
@@ -51,6 +52,7 @@ class PEdump::Loader
         @data.size > 0 ? @data.size.to_s(16) : (@deferred_load_io ? "<defer>" : 0)
       ]
       r << (" dlpos=%8x" % @deferred_load_pos) if @deferred_load_pos
+      r << (" delta=%3x" % @delta) if @delta != 0
       r << ">"
     end
   end

data/lib/pedump/ne.rb

@@ -405,7 +405,7 @@ class PEdump
       begin
         ne_offset = mz(f) && mz(f).lfanew
         if ne_offset.nil?
-          logger.fatal "[!] NULL NE offset (e_lfanew)."
+          logger.debug "[!] NULL NE offset (e_lfanew)."
           nil
         elsif ne_offset > f.size
           logger.fatal "[!] NE offset beyond EOF."

data/lib/pedump/pe.rb

@@ -24,78 +24,87 @@ class PEdump
       signature + ifh.pack + ioh.pack
     end
 
-    def self.read f, args = {}
+    def self.read_sections f, nToRead, args = {}
       force = args[:force]
 
+      if nToRead > 0xffff
+        if force.is_a?(Numeric) && force > 1
+          PEdump.logger.warn "[!] too many sections (#{nToRead}). forced. reading all"
+        else
+          PEdump.logger.warn "[!] too many sections (#{nToRead}). not forced, reading first 65535"
+          nToRead = 65535
+        end
+      end
+
+      sections = []
+      nToRead.times do
+        break if f.eof?
+        sections << IMAGE_SECTION_HEADER.read(f)
+      end
+
+      if sections.any?
+        # zero all missing values of last section
+        sections.last.tap do |last_section|
+          last_section.each_pair do |k,v|
+            last_section[k] = 0 if v.nil?
+          end
+        end
+      end
+
+      sections
+    end
+
+    def self.read f, args = {}
       pe_offset = f.tell
       pe_sig = f.read 4
       #logger.error "[!] 'NE' format is not supported!" if pe_sig == "NE\x00\x00"
       if pe_sig != "PE\x00\x00"
-        if force
+        if args[:force]
           logger.warn  "[?] no PE signature (want: 'PE\\x00\\x00', got: #{pe_sig.inspect})"
         else
           logger.debug "[?] no PE signature (want: 'PE\\x00\\x00', got: #{pe_sig.inspect}). (not forced)"
           return nil
         end
       end
-      PE.new(pe_sig).tap do |pe|
-        pe.image_file_header = IMAGE_FILE_HEADER.read(f)
-        ioh_offset = f.tell # offset to IMAGE_OPTIONAL_HEADER
-        if pe.ifh.SizeOfOptionalHeader.to_i > 0
-          if pe.x64?
-            pe.image_optional_header = IMAGE_OPTIONAL_HEADER64.read(f, pe.ifh.SizeOfOptionalHeader)
-          else
-            pe.image_optional_header = IMAGE_OPTIONAL_HEADER32.read(f, pe.ifh.SizeOfOptionalHeader)
-          end
+      pe = PE.new(pe_sig)
+      pe.image_file_header = IMAGE_FILE_HEADER.read(f)
+      ioh_offset = f.tell # offset to IMAGE_OPTIONAL_HEADER
+      if pe.ifh.SizeOfOptionalHeader.to_i > 0
+        if pe.x64?
+          pe.image_optional_header = IMAGE_OPTIONAL_HEADER64.read(f, pe.ifh.SizeOfOptionalHeader)
+        else
+          pe.image_optional_header = IMAGE_OPTIONAL_HEADER32.read(f, pe.ifh.SizeOfOptionalHeader)
         end
+      end
 
-        if (nToRead=pe.ifh.NumberOfSections.to_i) > 0xffff
-          if force.is_a?(Numeric) && force > 1
-            logger.warn "[!] too many sections (#{pe.ifh.NumberOfSections}). forced. reading all"
-          else
-            logger.warn "[!] too many sections (#{pe.ifh.NumberOfSections}). not forced, reading first 65535"
-            nToRead = 65535
-          end
-        end
+      nToRead=pe.ifh.NumberOfSections.to_i
 
-        # The Windows loader expects to find the PE section headers after the optional header. It calculates the address of the first section header by adding SizeOfOptionalHeader to the beginning of the optional header.
-        # // http://www.phreedom.org/research/tinype/
-        f.seek( ioh_offset + pe.ifh.SizeOfOptionalHeader.to_i )
-        pe.sections = []
-        nToRead.times do
-          break if f.eof?
-          pe.sections << IMAGE_SECTION_HEADER.read(f)
-        end
+      # The Windows loader expects to find the PE section headers after the optional header. It calculates the address of the first section header by adding SizeOfOptionalHeader to the beginning of the optional header.
+      # // http://www.phreedom.org/research/tinype/
+      f.seek( ioh_offset + pe.ifh.SizeOfOptionalHeader.to_i )
+      pe.sections = read_sections(f, nToRead, args)
 
-        if pe.sections.any?
-          # zero all missing values of last section
-          pe.sections.last.tap do |last_section|
-            last_section.each_pair do |k,v|
-              last_section[k] = 0 if v.nil?
-            end
-          end
-        end
+      pe_end = f.tell
+      if s=pe.sections.find{ |s| (pe_offset...pe_end).include?(s.va) }
+        if args[:pass2]
+          # already called with CompositeIO ?
+          PEdump.logger.error "[!] section with va=0x#{s.va.to_s(16)} overwrites PE header! 2nd time?!"
 
-        pe_end = f.tell
-        if s=pe.sections.find{ |s| (pe_offset...pe_end).include?(s.va) }
-          if args[:pass2]
-            # already called with CompositeIO ?
-            logger.error "[!] section with va=0x#{s.va.to_s(16)} overwrites PE header! 2nd time?!"
-
-          elsif pe_end-pe_offset < 0x100_000
-            logger.warn "[!] section with va=0x#{s.va.to_s(16)} overwrites PE header! trying to rebuild..."
-            f.seek pe_offset
-            data = f.read(s.va-pe_offset)
-            f.seek s.PointerToRawData
-            io = CompositeIO.new(StringIO.new(data), f)
-            args1 = args.dup
-            args1[:pass2] = true
-            return PE.read(io, args1)
-          else
-            logger.error "[!] section with va=0x#{s.va.to_s(16)} overwrites PE header! too big to rebuild!"
-          end
+        elsif pe_end-pe_offset < 0x100_000
+          PEdump.logger.warn "[!] section with va=0x#{s.va.to_s(16)} overwrites PE header! trying to rebuild..."
+          f.seek pe_offset
+          data = f.read(s.va-pe_offset)
+          f.seek s.PointerToRawData
+          io = CompositeIO.new(StringIO.new(data), f)
+          args1 = args.dup
+          args1[:pass2] = true
+          return PE.read(io, args1)
+        else
+          PEdump.logger.error "[!] section with va=0x#{s.va.to_s(16)} overwrites PE header! too big to rebuild!"
         end
       end
+
+      pe
     end
 
     def self.logger; PEdump.logger; end
@@ -106,7 +115,7 @@ class PEdump
       begin
         pe_offset = mz(f) && mz(f).lfanew
         if pe_offset.nil?
-          logger.fatal "[!] NULL PE offset (e_lfanew). cannot continue."
+          logger.debug "[!] NULL PE offset (e_lfanew). cannot continue."
           nil
         elsif pe_offset > f.size
           logger.fatal "[!] PE offset beyond EOF. cannot continue."

data/lib/pedump/rich.rb

@@ -0,0 +1,562 @@
+class PEdump
+  # data from https://raw.githubusercontent.com/dishather/richprint/master/comp_id.txt
+  RICH_IDS = {
+    0x00010000 => "[---] Unmarked objects",
+    0x00000000 => "[---] Unmarked objects (old)",
+    0x01047086 => "[ C ] VS2019 v16.6.2 build 28806",
+    0x01037086 => "[ASM] VS2019 v16.6.2 build 28806",
+    0x01057086 => "[C++] VS2019 v16.6.2 build 28806",
+    0x00ff7086 => "[RES] VS2019 v16.6.2 build 28806",
+    0x01027086 => "[LNK] VS2019 v16.6.2 build 28806",
+    0x01007086 => "[EXP] VS2019 v16.6.2 build 28806",
+    0x01017086 => "[IMP] VS2019 v16.6.2 build 28806",
+    0x01047085 => "[ C ] VS2019 v16.6.0 build 28805",
+    0x01037085 => "[ASM] VS2019 v16.6.0 build 28805",
+    0x01057085 => "[C++] VS2019 v16.6.0 build 28805",
+    0x00ff7085 => "[RES] VS2019 v16.6.0 build 28805",
+    0x01027085 => "[LNK] VS2019 v16.6.0 build 28805",
+    0x01007085 => "[EXP] VS2019 v16.6.0 build 28805",
+    0x01017085 => "[IMP] VS2019 v16.6.0 build 28805",
+    0x01046fc6 => "[ C ] VS2019 v16.5.5 build 28614",
+    0x01036fc6 => "[ASM] VS2019 v16.5.5 build 28614",
+    0x01056fc6 => "[C++] VS2019 v16.5.5 build 28614",
+    0x00ff6fc6 => "[RES] VS2019 v16.5.5 build 28614",
+    0x01026fc6 => "[LNK] VS2019 v16.5.5 build 28614",
+    0x01006fc6 => "[EXP] VS2019 v16.5.5 build 28614",
+    0x01016fc6 => "[IMP] VS2019 v16.5.5 build 28614",
+    0x01046fc4 => "[ C ] VS2019 v16.5.2 build 28612 (*)",
+    0x01036fc4 => "[ASM] VS2019 v16.5.2 build 28612 (*)",
+    0x01056fc4 => "[C++] VS2019 v16.5.2 build 28612 (*)",
+    0x00ff6fc4 => "[RES] VS2019 v16.5.2 build 28612 (*)",
+    0x01026fc4 => "[LNK] VS2019 v16.5.2 build 28612 (*)",
+    0x01016fc4 => "[IMP] VS2019 v16.5.2 build 28612 (*)",
+    0x01006fc4 => "[EXP] VS2019 v16.5.2 build 28612 (*)",
+    0x01046fc3 => "[ C ] VS2019 v16.5.1 build 28611 (*)",
+    0x01036fc3 => "[ASM] VS2019 v16.5.1 build 28611 (*)",
+    0x01056fc3 => "[C++] VS2019 v16.5.1 build 28611 (*)",
+    0x00ff6fc3 => "[RES] VS2019 v16.5.1 build 28611 (*)",
+    0x01026fc3 => "[LNK] VS2019 v16.5.1 build 28611 (*)",
+    0x01016fc3 => "[IMP] VS2019 v16.5.1 build 28611 (*)",
+    0x01006fc3 => "[EXP] VS2019 v16.5.1 build 28611 (*)",
+    0x01046fc2 => "[ C ] VS2019 v16.5.0 build 28610 (*)",
+    0x01036fc2 => "[ASM] VS2019 v16.5.0 build 28610 (*)",
+    0x01056fc2 => "[C++] VS2019 v16.5.0 build 28610 (*)",
+    0x00ff6fc2 => "[RES] VS2019 v16.5.0 build 28610 (*)",
+    0x01026fc2 => "[LNK] VS2019 v16.5.0 build 28610 (*)",
+    0x01016fc2 => "[IMP] VS2019 v16.5.0 build 28610 (*)",
+    0x01006fc2 => "[EXP] VS2019 v16.5.0 build 28610 (*)",
+    0x01046e9f => "[ C ] VS2019 v16.4.6 build 28319 (*)",
+    0x01036e9f => "[ASM] VS2019 v16.4.6 build 28319 (*)",
+    0x01056e9f => "[C++] VS2019 v16.4.6 build 28319 (*)",
+    0x00ff6e9f => "[RES] VS2019 v16.4.6 build 28319 (*)",
+    0x01026e9f => "[LNK] VS2019 v16.4.6 build 28319 (*)",
+    0x01006e9f => "[EXP] VS2019 v16.4.6 build 28319 (*)",
+    0x01016e9f => "[IMP] VS2019 v16.4.6 build 28319 (*)",
+    0x01046e9c => "[ C ] VS2019 v16.4.4 build 28316 (*)",
+    0x01036e9c => "[ASM] VS2019 v16.4.4 build 28316 (*)",
+    0x01056e9c => "[C++] VS2019 v16.4.4 build 28316 (*)",
+    0x00ff6e9c => "[RES] VS2019 v16.4.4 build 28316 (*)",
+    0x01026e9c => "[LNK] VS2019 v16.4.4 build 28316 (*)",
+    0x01006e9c => "[EXP] VS2019 v16.4.4 build 28316 (*)",
+    0x01016e9c => "[IMP] VS2019 v16.4.4 build 28316 (*)",
+    0x01046e9b => "[ C ] VS2019 v16.4.3 build 28315",
+    0x01036e9b => "[ASM] VS2019 v16.4.3 build 28315",
+    0x01056e9b => "[C++] VS2019 v16.4.3 build 28315",
+    0x00ff6e9b => "[RES] VS2019 v16.4.3 build 28315",
+    0x01026e9b => "[LNK] VS2019 v16.4.3 build 28315",
+    0x01006e9b => "[EXP] VS2019 v16.4.3 build 28315",
+    0x01016e9b => "[IMP] VS2019 v16.4.3 build 28315",
+    0x01046e9a => "[ C ] VS2019 v16.4.0 build 28314 (*)",
+    0x01036e9a => "[ASM] VS2019 v16.4.0 build 28314 (*)",
+    0x01056e9a => "[C++] VS2019 v16.4.0 build 28314 (*)",
+    0x00ff6e9a => "[RES] VS2019 v16.4.0 build 28314 (*)",
+    0x01026e9a => "[LNK] VS2019 v16.4.0 build 28314 (*)",
+    0x01016e9a => "[IMP] VS2019 v16.4.0 build 28314 (*)",
+    0x01006e9a => "[EXP] VS2019 v16.4.0 build 28314 (*)",
+    0x01046dc9 => "[ C ] VS2019 v16.3.2 build 28105 (*)",
+    0x01036dc9 => "[ASM] VS2019 v16.3.2 build 28105 (*)",
+    0x01056dc9 => "[C++] VS2019 v16.3.2 build 28105 (*)",
+    0x00ff6dc9 => "[RES] VS2019 v16.3.2 build 28105 (*)",
+    0x01026dc9 => "[LNK] VS2019 v16.3.2 build 28105 (*)",
+    0x01016dc9 => "[IMP] VS2019 v16.3.2 build 28105 (*)",
+    0x01006dc9 => "[EXP] VS2019 v16.3.2 build 28105 (*)",
+    0x01046d01 => "[ C ] VS2019 v16.2.3 build 27905 (*)",
+    0x01036d01 => "[ASM] VS2019 v16.2.3 build 27905 (*)",
+    0x01056d01 => "[C++] VS2019 v16.2.3 build 27905 (*)",
+    0x00ff6d01 => "[RES] VS2019 v16.2.3 build 27905 (*)",
+    0x01026d01 => "[LNK] VS2019 v16.2.3 build 27905 (*)",
+    0x01016d01 => "[IMP] VS2019 v16.2.3 build 27905 (*)",
+    0x01006d01 => "[EXP] VS2019 v16.2.3 build 27905 (*)",
+    0x01046c36 => "[ C ] VS2019 v16.1.2 build 27702 (*)",
+    0x01036c36 => "[ASM] VS2019 v16.1.2 build 27702 (*)",
+    0x01056c36 => "[C++] VS2019 v16.1.2 build 27702 (*)",
+    0x00ff6c36 => "[RES] VS2019 v16.1.2 build 27702 (*)",
+    0x01026c36 => "[LNK] VS2019 v16.1.2 build 27702 (*)",
+    0x01016c36 => "[IMP] VS2019 v16.1.2 build 27702 (*)",
+    0x01006c36 => "[EXP] VS2019 v16.1.2 build 27702 (*)",
+    0x01046b74 => "[ C ] VS2019 v16.0.0 build 27508",
+    0x01036b74 => "[ASM] VS2019 v16.0.0 build 27508",
+    0x01056b74 => "[C++] VS2019 v16.0.0 build 27508",
+    0x00ff6b74 => "[RES] VS2019 v16.0.0 build 27508",
+    0x01026b74 => "[LNK] VS2019 v16.0.0 build 27508",
+    0x01006b74 => "[EXP] VS2019 v16.0.0 build 27508",
+    0x01016b74 => "[IMP] VS2019 v16.0.0 build 27508",
+    0x01046996 => "[ C ] VS2017 v15.9.11 build 27030 (*)",
+    0x01036996 => "[ASM] VS2017 v15.9.11 build 27030 (*)",
+    0x01056996 => "[C++] VS2017 v15.9.11 build 27030 (*)",
+    0x00ff6996 => "[RES] VS2017 v15.9.11 build 27030 (*)",
+    0x01026996 => "[LNK] VS2017 v15.9.11 build 27030 (*)",
+    0x01016996 => "[IMP] VS2017 v15.9.11 build 27030 (*)",
+    0x01006996 => "[EXP] VS2017 v15.9.11 build 27030 (*)",
+    0x01046993 => "[ C ] VS2017 v15.9.7 build 27027 (*)",
+    0x01036993 => "[ASM] VS2017 v15.9.7 build 27027 (*)",
+    0x01056993 => "[C++] VS2017 v15.9.7 build 27027 (*)",
+    0x00ff6993 => "[RES] VS2017 v15.9.7 build 27027 (*)",
+    0x01026993 => "[LNK] VS2017 v15.9.7 build 27027 (*)",
+    0x01016993 => "[IMP] VS2017 v15.9.7 build 27027 (*)",
+    0x01006993 => "[EXP] VS2017 v15.9.7 build 27027 (*)",
+    0x01046992 => "[ C ] VS2017 v15.9.5 build 27026 (*)",
+    0x01036992 => "[ASM] VS2017 v15.9.5 build 27026 (*)",
+    0x01056992 => "[C++] VS2017 v15.9.5 build 27026 (*)",
+    0x00ff6992 => "[RES] VS2017 v15.9.5 build 27026 (*)",
+    0x01026992 => "[LNK] VS2017 v15.9.5 build 27026 (*)",
+    0x01016992 => "[IMP] VS2017 v15.9.5 build 27026 (*)",
+    0x01006992 => "[EXP] VS2017 v15.9.5 build 27026 (*)",
+    0x01046991 => "[ C ] VS2017 v15.9.4 build 27025 (*)",
+    0x01036991 => "[ASM] VS2017 v15.9.4 build 27025 (*)",
+    0x01056991 => "[C++] VS2017 v15.9.4 build 27025 (*)",
+    0x00ff6991 => "[RES] VS2017 v15.9.4 build 27025 (*)",
+    0x01026991 => "[LNK] VS2017 v15.9.4 build 27025 (*)",
+    0x01016991 => "[IMP] VS2017 v15.9.4 build 27025 (*)",
+    0x01006991 => "[EXP] VS2017 v15.9.4 build 27025 (*)",
+    0x0104698f => "[ C ] VS2017 v15.9.1 build 27023 (*)",
+    0x0103698f => "[ASM] VS2017 v15.9.1 build 27023 (*)",
+    0x0105698f => "[C++] VS2017 v15.9.1 build 27023 (*)",
+    0x00ff698f => "[RES] VS2017 v15.9.1 build 27023 (*)",
+    0x0102698f => "[LNK] VS2017 v15.9.1 build 27023 (*)",
+    0x0101698f => "[IMP] VS2017 v15.9.1 build 27023 (*)",
+    0x0100698f => "[EXP] VS2017 v15.9.1 build 27023 (*)",
+    0x0104686c => "[ C ] VS2017 v15.8.5 build 26732 (*)",
+    0x0103686c => "[ASM] VS2017 v15.8.5 build 26732 (*)",
+    0x0105686c => "[C++] VS2017 v15.8.5 build 26732 (*)",
+    0x00ff686c => "[RES] VS2017 v15.8.5 build 26732 (*)",
+    0x0102686c => "[LNK] VS2017 v15.8.5 build 26732 (*)",
+    0x0101686c => "[IMP] VS2017 v15.8.5 build 26732 (*)",
+    0x0100686c => "[EXP] VS2017 v15.8.5 build 26732 (*)",
+    0x0104686a => "[ C ] VS2017 v15.8.9? build 26730 (*)",
+    0x0103686a => "[ASM] VS2017 v15.8.9? build 26730 (*)",
+    0x0105686a => "[C++] VS2017 v15.8.9? build 26730 (*)",
+    0x00ff686a => "[RES] VS2017 v15.8.9? build 26730 (*)",
+    0x0102686a => "[LNK] VS2017 v15.8.9? build 26730 (*)",
+    0x0101686a => "[IMP] VS2017 v15.8.9? build 26730 (*)",
+    0x0100686a => "[EXP] VS2017 v15.8.9? build 26730 (*)",
+    0x01046869 => "[ C ] VS2017 v15.8.4 build 26729 (*)",
+    0x01036869 => "[ASM] VS2017 v15.8.4 build 26729 (*)",
+    0x01056869 => "[C++] VS2017 v15.8.4 build 26729 (*)",
+    0x00ff6869 => "[RES] VS2017 v15.8.4 build 26729 (*)",
+    0x01026869 => "[LNK] VS2017 v15.8.4 build 26729 (*)",
+    0x01016869 => "[IMP] VS2017 v15.8.4 build 26729 (*)",
+    0x01006869 => "[EXP] VS2017 v15.8.4 build 26729 (*)",
+    0x01046866 => "[ C ] VS2017 v15.8.0 build 26726 (*)",
+    0x01036866 => "[ASM] VS2017 v15.8.0 build 26726 (*)",
+    0x01056866 => "[C++] VS2017 v15.8.0 build 26726 (*)",
+    0x00ff6866 => "[RES] VS2017 v15.8.0 build 26726 (*)",
+    0x01026866 => "[LNK] VS2017 v15.8.0 build 26726 (*)",
+    0x01016866 => "[IMP] VS2017 v15.8.0 build 26726 (*)",
+    0x01006866 => "[EXP] VS2017 v15.8.0 build 26726 (*)",
+    0x01046741 => "[ C ] VS2017 v15.7.5 build 26433 (*)",
+    0x01036741 => "[ASM] VS2017 v15.7.5 build 26433 (*)",
+    0x01056741 => "[C++] VS2017 v15.7.5 build 26433 (*)",
+    0x00ff6741 => "[RES] VS2017 v15.7.5 build 26433 (*)",
+    0x01026741 => "[LNK] VS2017 v15.7.5 build 26433 (*)",
+    0x01016741 => "[IMP] VS2017 v15.7.5 build 26433 (*)",
+    0x01006741 => "[EXP] VS2017 v15.7.5 build 26433 (*)",
+    0x0104673f => "[ C ] VS2017 v15.7.4 build 26431 (*)",
+    0x0103673f => "[ASM] VS2017 v15.7.4 build 26431 (*)",
+    0x0105673f => "[C++] VS2017 v15.7.4 build 26431 (*)",
+    0x00ff673f => "[RES] VS2017 v15.7.4 build 26431 (*)",
+    0x0102673f => "[LNK] VS2017 v15.7.4 build 26431 (*)",
+    0x0101673f => "[IMP] VS2017 v15.7.4 build 26431 (*)",
+    0x0100673f => "[EXP] VS2017 v15.7.4 build 26431 (*)",
+    0x0104673e => "[ C ] VS2017 v15.7.3 build 26430 (*)",
+    0x0103673e => "[ASM] VS2017 v15.7.3 build 26430 (*)",
+    0x0105673e => "[C++] VS2017 v15.7.3 build 26430 (*)",
+    0x00ff673e => "[RES] VS2017 v15.7.3 build 26430 (*)",
+    0x0102673e => "[LNK] VS2017 v15.7.3 build 26430 (*)",
+    0x0101673e => "[IMP] VS2017 v15.7.3 build 26430 (*)",
+    0x0100673e => "[EXP] VS2017 v15.7.3 build 26430 (*)",
+    0x0104673d => "[ C ] VS2017 v15.7.2 build 26429 (*)",
+    0x0103673d => "[ASM] VS2017 v15.7.2 build 26429 (*)",
+    0x0105673d => "[C++] VS2017 v15.7.2 build 26429 (*)",
+    0x00ff673d => "[RES] VS2017 v15.7.2 build 26429 (*)",
+    0x0102673d => "[LNK] VS2017 v15.7.2 build 26429 (*)",
+    0x0101673d => "[IMP] VS2017 v15.7.2 build 26429 (*)",
+    0x0100673d => "[EXP] VS2017 v15.7.2 build 26429 (*)",
+    0x0104673c => "[ C ] VS2017 v15.7.1 build 26428 (*)",
+    0x0103673c => "[ASM] VS2017 v15.7.1 build 26428 (*)",
+    0x0105673c => "[C++] VS2017 v15.7.1 build 26428 (*)",
+    0x00ff673c => "[RES] VS2017 v15.7.1 build 26428 (*)",
+    0x0102673c => "[LNK] VS2017 v15.7.1 build 26428 (*)",
+    0x0101673c => "[IMP] VS2017 v15.7.1 build 26428 (*)",
+    0x0100673c => "[EXP] VS2017 v15.7.1 build 26428 (*)",
+    0x01046614 => "[ C ] VS2017 v15.6.7 build 26132 (*)",
+    0x01036614 => "[ASM] VS2017 v15.6.7 build 26132 (*)",
+    0x01056614 => "[C++] VS2017 v15.6.7 build 26132 (*)",
+    0x00ff6614 => "[RES] VS2017 v15.6.7 build 26132 (*)",
+    0x01026614 => "[LNK] VS2017 v15.6.7 build 26132 (*)",
+    0x01016614 => "[IMP] VS2017 v15.6.7 build 26132 (*)",
+    0x01006614 => "[EXP] VS2017 v15.6.7 build 26132 (*)",
+    0x01046613 => "[ C ] VS2017 v15.6.6 build 26131 (*)",
+    0x01036613 => "[ASM] VS2017 v15.6.6 build 26131 (*)",
+    0x01056613 => "[C++] VS2017 v15.6.6 build 26131 (*)",
+    0x00ff6613 => "[RES] VS2017 v15.6.6 build 26131 (*)",
+    0x01026613 => "[LNK] VS2017 v15.6.6 build 26131 (*)",
+    0x01016613 => "[IMP] VS2017 v15.6.6 build 26131 (*)",
+    0x01006613 => "[EXP] VS2017 v15.6.6 build 26131 (*)",
+    0x01046611 => "[ C ] VS2017 v15.6.3 build 26129 (*)",
+    0x01036611 => "[ASM] VS2017 v15.6.3 build 26129 (*)",
+    0x01056611 => "[C++] VS2017 v15.6.3 build 26129 (*)",
+    0x00ff6611 => "[RES] VS2017 v15.6.3 build 26129 (*)",
+    0x01026611 => "[LNK] VS2017 v15.6.3 build 26129 (*)",
+    0x01016611 => "[IMP] VS2017 v15.6.3 build 26129 (*)",
+    0x01006611 => "[EXP] VS2017 v15.6.3 build 26129 (*)",
+    0x01046610 => "[ C ] VS2017 v15.6.0 build 26128 (*)",
+    0x01036610 => "[ASM] VS2017 v15.6.0 build 26128 (*)",
+    0x01056610 => "[C++] VS2017 v15.6.0 build 26128 (*)",
+    0x00ff6610 => "[RES] VS2017 v15.6.0 build 26128 (*)",
+    0x01026610 => "[LNK] VS2017 v15.6.0 build 26128 (*)",
+    0x01016610 => "[IMP] VS2017 v15.6.0 build 26128 (*)",
+    0x01006610 => "[EXP] VS2017 v15.6.0 build 26128 (*)",
+    0x010464eb => "[ C ] VS2017 v15.5.6 build 25835 (*)",
+    0x010364eb => "[ASM] VS2017 v15.5.6 build 25835 (*)",
+    0x010564eb => "[C++] VS2017 v15.5.6 build 25835 (*)",
+    0x00ff64eb => "[RES] VS2017 v15.5.6 build 25835 (*)",
+    0x010264eb => "[LNK] VS2017 v15.5.6 build 25835 (*)",
+    0x010164eb => "[IMP] VS2017 v15.5.6 build 25835 (*)",
+    0x010064eb => "[EXP] VS2017 v15.5.6 build 25835 (*)",
+    0x010464ea => "[ C ] VS2017 v15.5.4 build 25834",
+    0x010364ea => "[ASM] VS2017 v15.5.4 build 25834",
+    0x010564ea => "[C++] VS2017 v15.5.4 build 25834",
+    0x00ff64ea => "[RES] VS2017 v15.5.4 build 25834",
+    0x010264ea => "[LNK] VS2017 v15.5.4 build 25834",
+    0x010064ea => "[EXP] VS2017 v15.5.4 build 25834",
+    0x010164ea => "[IMP] VS2017 v15.5.4 build 25834",
+    0x010464e7 => "[ C ] VS2017 v15.5.2 build 25831 (*)",
+    0x010364e7 => "[ASM] VS2017 v15.5.2 build 25831 (*)",
+    0x010564e7 => "[C++] VS2017 v15.5.2 build 25831 (*)",
+    0x00ff64e7 => "[RES] VS2017 v15.5.2 build 25831 (*)",
+    0x010264e7 => "[LNK] VS2017 v15.5.2 build 25831 (*)",
+    0x010164e7 => "[IMP] VS2017 v15.5.2 build 25831 (*)",
+    0x010064e7 => "[EXP] VS2017 v15.5.2 build 25831 (*)",
+    0x010463cb => "[ C ] VS2017 v15.4.5 build 25547 (*)",
+    0x010363cb => "[ASM] VS2017 v15.4.5 build 25547 (*)",
+    0x010563cb => "[C++] VS2017 v15.4.5 build 25547 (*)",
+    0x00ff63cb => "[RES] VS2017 v15.4.5 build 25547 (*)",
+    0x010263cb => "[LNK] VS2017 v15.4.5 build 25547 (*)",
+    0x010163cb => "[IMP] VS2017 v15.4.5 build 25547 (*)",
+    0x010063cb => "[EXP] VS2017 v15.4.5 build 25547 (*)",
+    0x010463c6 => "[ C ] VS2017 v15.4.4 build 25542 (*)",
+    0x010363c6 => "[ASM] VS2017 v15.4.4 build 25542 (*)",
+    0x010563c6 => "[C++] VS2017 v15.4.4 build 25542 (*)",
+    0x00ff63c6 => "[RES] VS2017 v15.4.4 build 25542 (*)",
+    0x010263c6 => "[LNK] VS2017 v15.4.4 build 25542 (*)",
+    0x010163c6 => "[IMP] VS2017 v15.4.4 build 25542 (*)",
+    0x010063c6 => "[EXP] VS2017 v15.4.4 build 25542 (*)",
+    0x010463a3 => "[ C ] VS2017 v15.3.3 build 25507 (*)",
+    0x010363a3 => "[ASM] VS2017 v15.3.3 build 25507 (*)",
+    0x010563a3 => "[C++] VS2017 v15.3.3 build 25507 (*)",
+    0x00ff63a3 => "[RES] VS2017 v15.3.3 build 25507 (*)",
+    0x010263a3 => "[LNK] VS2017 v15.3.3 build 25507 (*)",
+    0x010163a3 => "[IMP] VS2017 v15.3.3 build 25507 (*)",
+    0x010063a3 => "[EXP] VS2017 v15.3.3 build 25507 (*)",
+    0x010463a2 => "[ C ] VS2017 v15.3 build 25506 (*)",
+    0x010363a2 => "[ASM] VS2017 v15.3 build 25506 (*)",
+    0x010563a2 => "[C++] VS2017 v15.3 build 25506 (*)",
+    0x00ff63a2 => "[RES] VS2017 v15.3 build 25506 (*)",
+    0x010263a2 => "[LNK] VS2017 v15.3 build 25506 (*)",
+    0x010163a2 => "[IMP] VS2017 v15.3 build 25506 (*)",
+    0x010063a2 => "[EXP] VS2017 v15.3 build 25506 (*)",
+    0x010461b9 => "[ C ] VS2017 v15.0 build 25017 (*)",
+    0x010361b9 => "[ASM] VS2017 v15.0 build 25017 (*)",
+    0x010561b9 => "[C++] VS2017 v15.0 build 25017 (*)",
+    0x00ff61b9 => "[RES] VS2017 v15.0 build 25017 (*)",
+    0x010261b9 => "[LNK] VS2017 v15.0 build 25017 (*)",
+    0x010161b9 => "[IMP] VS2017 v15.0 build 25017 (*)",
+    0x010061b9 => "[EXP] VS2017 v15.0 build 25017 (*)",
+    0x01045e97 => "[ C ] VS2015 UPD3.1 build 24215",
+    0x01055e97 => "[C++] VS2015 UPD3.1 build 24215",
+    0x01025e97 => "[LNK] VS2015 UPD3.1 build 24215",
+    0x01005e97 => "[EXP] VS2015 UPD3.1 build 24215",
+    0x01015e97 => "[IMP] VS2015 UPD3.1 build 24215",
+    0x01045e95 => "[ C ] VS2015 UPD3 build 24213",
+    0x01035e92 => "[ASM] VS2015 UPD3 build 24210",
+    0x01055e95 => "[C++] VS2015 UPD3 build 24213",
+    0x00ff5e92 => "[RES] VS2015 UPD3 build 24210",
+    0x01025e95 => "[LNK] VS2015 UPD3 build 24213",
+    0x01005e95 => "[EXP] VS2015 UPD3 build 24213",
+    0x01015e95 => "[IMP] VS2015 UPD3 build 24213",
+    0x01045e92 => "[ C ] VS2015 Update 3 [14.0] build 24210 (*)",
+    0x01055e92 => "[C++] VS2015 Update 3 [14.0] build 24210 (*)",
+    0x01025e92 => "[LNK] VS2015 Update 3 [14.0] build 24210 (*)",
+    0x01015e92 => "[IMP] VS2015 Update 3 [14.0] build 24210 (*)",
+    0x01005e92 => "[EXP] VS2015 Update 3 [14.0] build 24210 (*)",
+    0x01045d6e => "[ C ] VS2015 UPD2 build 23918",
+    0x01035d6e => "[ASM] VS2015 UPD2 build 23918",
+    0x01055d6e => "[C++] VS2015 UPD2 build 23918",
+    0x00ff5d6e => "[RES] VS2015 UPD2 build 23918",
+    0x01025d6e => "[LNK] VS2015 UPD2 build 23918",
+    0x01005d6e => "[EXP] VS2015 UPD2 build 23918",
+    0x01015d6e => "[IMP] VS2015 UPD2 build 23918",
+    0x01045bd2 => "[ C ] VS2015 UPD1 build 23506",
+    0x01035bd2 => "[ASM] VS2015 UPD1 build 23506",
+    0x01055bd2 => "[C++] VS2015 UPD1 build 23506",
+    0x00ff5bd2 => "[RES] VS2015 UPD1 build 23506",
+    0x01025bd2 => "[LNK] VS2015 UPD1 build 23506",
+    0x01005bd2 => "[EXP] VS2015 UPD1 build 23506",
+    0x01015bd2 => "[IMP] VS2015 UPD1 build 23506",
+    0x010459f2 => "[ C ] VS2015 [14.0] build 23026",
+    0x010359f2 => "[ASM] VS2015 [14.0] build 23026",
+    0x010559f2 => "[C++] VS2015 [14.0] build 23026",
+    0x00ff59f2 => "[RES] VS2015 [14.0] build 23026",
+    0x010259f2 => "[LNK] VS2015 [14.0] build 23026",
+    0x010059f2 => "[EXP] VS2015 [14.0] build 23026",
+    0x010159f2 => "[IMP] VS2015 [14.0] build 23026",
+    0x00e0527a => "[ C ] VS2013 Nobemver CTP [12.0] build 21114 (*)",
+    0x00df527a => "[ASM] VS2013 Nobemver CTP [12.0] build 21114 (*)",
+    0x00e1527a => "[C++] VS2013 Nobemver CTP [12.0] build 21114 (*)",
+    0x00db527a => "[RES] VS2013 Nobemver CTP [12.0] build 21114 (*)",
+    0x00de527a => "[LNK] VS2013 Nobemver CTP [12.0] build 21114 (*)",
+    0x00dd527a => "[IMP] VS2013 Nobemver CTP [12.0] build 21114 (*)",
+    0x00dc527a => "[EXP] VS2013 Nobemver CTP [12.0] build 21114 (*)",
+    0x00e09eb5 => "[ C ] VS2013 UPD5 build 40629",
+    0x00e19eb5 => "[C++] VS2013 UPD5 build 40629",
+    0x00db9eb5 => "[RES] VS2013 Update 5 [12.0] build 40629 (*)",
+    0x00de9eb5 => "[LNK] VS2013 UPD5 build 40629",
+    0x00dc9eb5 => "[EXP] VS2013 UPD5 build 40629",
+    0x00dd9eb5 => "[IMP] VS2013 UPD5 build 40629",
+    0x00df9eb5 => "[ASM] VS2013 UPD5 build 40629",
+    0x00e0797d => "[ C ] VS2013 UPD4 build 31101 (*)",
+    0x00e1797d => "[C++] VS2013 UPD4 build 31101 (*)",
+    0x00db797d => "[RES] VS2013 UPD4 build 31101 (*)",
+    0x00de797d => "[LNK] VS2013 UPD4 build 31101 (*)",
+    0x00dc797d => "[EXP] VS2013 UPD4 build 31101 (*)",
+    0x00dd797d => "[IMP] VS2013 UPD4 build 31101 (*)",
+    0x00df797d => "[ASM] VS2013 UPD4 build 31101 (*)",
+    0x00e07803 => "[ C ] VS2013 UPD3 build 30723 (*)",
+    0x00e17803 => "[C++] VS2013 UPD3 build 30723 (*)",
+    0x00db7803 => "[RES] VS2013 UPD3 build 30723 (*)",
+    0x00de7803 => "[LNK] VS2013 UPD3 build 30723 (*)",
+    0x00dc7803 => "[EXP] VS2013 UPD3 build 30723 (*)",
+    0x00dd7803 => "[IMP] VS2013 UPD3 build 30723 (*)",
+    0x00df7803 => "[ASM] VS2013 UPD3 build 30723 (*)",
+    0x00e07725 => "[ C ] VS2013 UPD2 build 30501",
+    0x00e17725 => "[C++] VS2013 UPD2 build 30501",
+    0x00db7725 => "[RES] VS2013 Update 2 [12.0] build 30501 (*)",
+    0x00de7725 => "[LNK] VS2013 UPD2 build 30501",
+    0x00dc7725 => "[EXP] VS2013 UPD2 build 30501",
+    0x00dd7725 => "[IMP] VS2013 UPD2 build 30501",
+    0x00df7725 => "[ASM] VS2013 UPD2 build 30501",
+    0x00e07674 => "[ C ] VS2013 Update2 RC [12.0] build 30324 (*)",
+    0x00df7674 => "[ASM] VS2013 Update2 RC [12.0] build 30324 (*)",
+    0x00e17674 => "[C++] VS2013 Update2 RC [12.0] build 30324 (*)",
+    0x00db7674 => "[RES] VS2013 Update2 RC [12.0] build 30324 (*)",
+    0x00de7674 => "[LNK] VS2013 Update2 RC [12.0] build 30324 (*)",
+    0x00dd7674 => "[IMP] VS2013 Update2 RC [12.0] build 30324 (*)",
+    0x00dc7674 => "[EXP] VS2013 Update2 RC [12.0] build 30324 (*)",
+    0x00e0520d => "[ C ] VS2013 build 21005",
+    0x00e1520d => "[C++] VS2013 build 21005",
+    0x00db520d => "[RES] VS2013 build 21005",
+    0x00de520d => "[LNK] VS2013 build 21005",
+    0x00dc520d => "[EXP] VS2013 build 21005",
+    0x00dd520d => "[IMP] VS2013 build 21005",
+    0x00df520d => "[ASM] VS2013 build 21005",
+    0x00e0515b => "[ C ] VS2013 RC [12.0] build 20827 (*)",
+    0x00df515b => "[ASM] VS2013 RC [12.0] build 20827 (*)",
+    0x00e1515b => "[C++] VS2013 RC [12.0] build 20827 (*)",
+    0x00db515b => "[RES] VS2013 RC [12.0] build 20827 (*)",
+    0x00de515b => "[LNK] VS2013 RC [12.0] build 20827 (*)",
+    0x00dd515b => "[IMP] VS2013 RC [12.0] build 20827 (*)",
+    0x00dc515b => "[EXP] VS2013 RC [12.0] build 20827 (*)",
+    0x00e05089 => "[ C ] VS2013 Preview [12.0] build 20617 (*)",
+    0x00df5089 => "[ASM] VS2013 Preview [12.0] build 20617 (*)",
+    0x00e15089 => "[C++] VS2013 Preview [12.0] build 20617 (*)",
+    0x00db5089 => "[RES] VS2013 Preview [12.0] build 20617 (*)",
+    0x00de5089 => "[LNK] VS2013 Preview [12.0] build 20617 (*)",
+    0x00dd5089 => "[IMP] VS2013 Preview [12.0] build 20617 (*)",
+    0x00dc5089 => "[EXP] VS2013 Preview [12.0] build 20617 (*)",
+    0x00ceee66 => "[ C ] VS2012 UPD4 build 61030",
+    0x00cfee66 => "[C++] VS2012 UPD4 build 61030",
+    0x00cdee66 => "[ASM] VS2012 UPD4 build 61030",
+    0x00c9ee66 => "[RES] VS2012 UPD4 build 61030",
+    0x00ccee66 => "[LNK] VS2012 UPD4 build 61030",
+    0x00caee66 => "[EXP] VS2012 UPD4 build 61030",
+    0x00cbee66 => "[IMP] VS2012 UPD4 build 61030",
+    0x00ceecc2 => "[ C ] VS2012 UPD3 build 60610 (*)",
+    0x00cfecc2 => "[C++] VS2012 UPD3 build 60610 (*)",
+    0x00cdecc2 => "[ASM] VS2012 UPD3 build 60610 (*)",
+    0x00c9ecc2 => "[RES] VS2012 UPD3 build 60610 (*)",
+    0x00ccecc2 => "[LNK] VS2012 UPD3 build 60610 (*)",
+    0x00caecc2 => "[EXP] VS2012 UPD3 build 60610 (*)",
+    0x00cbecc2 => "[IMP] VS2012 UPD3 build 60610 (*)",
+    0x00ceeb9b => "[ C ] VS2012 UPD2 build 60315 (*)",
+    0x00cfeb9b => "[C++] VS2012 UPD2 build 60315 (*)",
+    0x00cdeb9b => "[ASM] VS2012 UPD2 build 60315 (*)",
+    0x00c9eb9b => "[RES] VS2012 UPD2 build 60315 (*)",
+    0x00cceb9b => "[LNK] VS2012 UPD2 build 60315 (*)",
+    0x00caeb9b => "[EXP] VS2012 UPD2 build 60315 (*)",
+    0x00cbeb9b => "[IMP] VS2012 UPD2 build 60315 (*)",
+    0x00cec7a2 => "[ C ] VS2012 UPD1 build 51106 (*)",
+    0x00cfc7a2 => "[C++] VS2012 UPD1 build 51106 (*)",
+    0x00cdc7a2 => "[ASM] VS2012 UPD1 build 51106 (*)",
+    0x00c9c7a2 => "[RES] VS2012 UPD1 build 51106 (*)",
+    0x00ccc7a2 => "[LNK] VS2012 UPD1 build 51106 (*)",
+    0x00cac7a2 => "[EXP] VS2012 UPD1 build 51106 (*)",
+    0x00cbc7a2 => "[IMP] VS2012 UPD1 build 51106 (*)",
+    0x00cec751 => "[ C ] VS2012 November CTP [11.0] build 51025 (*)",
+    0x00cdc751 => "[ASM] VS2012 November CTP [11.0] build 51025 (*)",
+    0x00cfc751 => "[C++] VS2012 November CTP [11.0] build 51025 (*)",
+    0x00c9c751 => "[RES] VS2012 November CTP [11.0] build 51025 (*)",
+    0x00ccc751 => "[LNK] VS2012 November CTP [11.0] build 51025 (*)",
+    0x00cbc751 => "[IMP] VS2012 November CTP [11.0] build 51025 (*)",
+    0x00cac751 => "[EXP] VS2012 November CTP [11.0] build 51025 (*)",
+    0x00cec627 => "[ C ] VS2012 build 50727",
+    0x00cfc627 => "[C++] VS2012 build 50727",
+    0x00c9c627 => "[RES] VS2012 build 50727",
+    0x00cdc627 => "[ASM] VS2012 build 50727",
+    0x00cac627 => "[EXP] VS2012 build 50727",
+    0x00cbc627 => "[IMP] VS2012 build 50727",
+    0x00ccc627 => "[LNK] VS2012 build 50727",
+    0x00aa9d1b => "[ C ] VS2010 SP1 build 40219",
+    0x00ab9d1b => "[C++] VS2010 SP1 build 40219",
+    0x009d9d1b => "[LNK] VS2010 SP1 build 40219",
+    0x009a9d1b => "[RES] VS2010 SP1 build 40219",
+    0x009b9d1b => "[EXP] VS2010 SP1 build 40219",
+    0x009c9d1b => "[IMP] VS2010 SP1 build 40219",
+    0x009e9d1b => "[ASM] VS2010 SP1 build 40219",
+    0x00aa766f => "[ C ] VS2010 build 30319",
+    0x00ab766f => "[C++] VS2010 build 30319",
+    0x009d766f => "[LNK] VS2010 build 30319",
+    0x009a766f => "[RES] VS2010 build 30319",
+    0x009b766f => "[EXP] VS2010 build 30319",
+    0x009c766f => "[IMP] VS2010 build 30319",
+    0x009e766f => "[ASM] VS2010 build 30319",
+    0x00aa520b => "[ C ] VS2010 Beta 2 [10.0] build 21003 (*)",
+    0x009e520b => "[ASM] VS2010 Beta 2 [10.0] build 21003 (*)",
+    0x00ab520b => "[C++] VS2010 Beta 2 [10.0] build 21003 (*)",
+    0x009a520b => "[RES] VS2010 Beta 2 [10.0] build 21003 (*)",
+    0x009d520b => "[LNK] VS2010 Beta 2 [10.0] build 21003 (*)",
+    0x009c520b => "[IMP] VS2010 Beta 2 [10.0] build 21003 (*)",
+    0x009b520b => "[EXP] VS2010 Beta 2 [10.0] build 21003 (*)",
+    0x00aa501a => "[ C ] VS2010 Beta 1 [10.0] build 20506 (*)",
+    0x009e501a => "[ASM] VS2010 Beta 1 [10.0] build 20506 (*)",
+    0x00ab501a => "[C++] VS2010 Beta 1 [10.0] build 20506 (*)",
+    0x009a501a => "[RES] VS2010 Beta 1 [10.0] build 20506 (*)",
+    0x009d501a => "[LNK] VS2010 Beta 1 [10.0] build 20506 (*)",
+    0x009c501a => "[IMP] VS2010 Beta 1 [10.0] build 20506 (*)",
+    0x009b501a => "[EXP] VS2010 Beta 1 [10.0] build 20506 (*)",
+    0x00837809 => "[ C ] VS2008 SP1 build 30729",
+    0x00847809 => "[C++] VS2008 SP1 build 30729",
+    0x00947809 => "[RES] VS2008 SP1 [9.0] build 30729 (*)",
+    0x00957809 => "[ASM] VS2008 SP1 build 30729",
+    0x00927809 => "[EXP] VS2008 SP1 build 30729",
+    0x00937809 => "[IMP] VS2008 SP1 build 30729",
+    0x00917809 => "[LNK] VS2008 SP1 build 30729",
+    0x0083521e => "[ C ] VS2008 build 21022",
+    0x0084521e => "[C++] VS2008 build 21022",
+    0x0091521e => "[LNK] VS2008 build 21022",
+    0x0094521e => "[RES] VS2008 build 21022",
+    0x0092521e => "[EXP] VS2008 build 21022",
+    0x0093521e => "[IMP] VS2008 build 21022",
+    0x0095521e => "[ASM] VS2008 build 21022",
+    0x008350e2 => "[ C ] VS2008 Beta 2 [9.0] build 20706 (*)",
+    0x009550e2 => "[ASM] VS2008 Beta 2 [9.0] build 20706 (*)",
+    0x008450e2 => "[C++] VS2008 Beta 2 [9.0] build 20706 (*)",
+    0x009450e2 => "[RES] VS2008 Beta 2 [9.0] build 20706 (*)",
+    0x009150e2 => "[LNK] VS2008 Beta 2 [9.0] build 20706 (*)",
+    0x009350e2 => "[IMP] VS2008 Beta 2 [9.0] build 20706 (*)",
+    0x009250e2 => "[EXP] VS2008 Beta 2 [9.0] build 20706 (*)",
+    0x006dc627 => "[ C ] VS2005 build 50727",
+    0x006ec627 => "[C++] VS2005 build 50727",
+    0x0078c627 => "[LNK] VS2005 build 50727",
+    0x007cc627 => "[RES] VS2005 build 50727",
+    0x007ac627 => "[EXP] VS2005 build 50727",
+    0x007bc627 => "[IMP] VS2005 build 50727",
+    0x007dc627 => "[ASM] VS2005 build 50727",
+    0x006dc490 => "[ C ] VS2005 [8.0] build 50320 (*)",
+    0x007dc490 => "[ASM] VS2005 [8.0] build 50320 (*)",
+    0x006ec490 => "[C++] VS2005 [8.0] build 50320 (*)",
+    0x007cc490 => "[RES] VS2005 [8.0] build 50320 (*)",
+    0x0078c490 => "[LNK] VS2005 [8.0] build 50320 (*)",
+    0x007bc490 => "[IMP] VS2005 [8.0] build 50320 (*)",
+    0x007ac490 => "[EXP] VS2005 [8.0] build 50320 (*)",
+    0x006dc427 => "[ C ] VS2005 Beta 2 [8.0] build 50215 (*)",
+    0x007dc427 => "[ASM] VS2005 Beta 2 [8.0] build 50215 (*)",
+    0x006ec427 => "[C++] VS2005 Beta 2 [8.0] build 50215 (*)",
+    0x007cc427 => "[RES] VS2005 Beta 2 [8.0] build 50215 (*)",
+    0x0078c427 => "[LNK] VS2005 Beta 2 [8.0] build 50215 (*)",
+    0x007bc427 => "[IMP] VS2005 Beta 2 [8.0] build 50215 (*)",
+    0x007ac427 => "[EXP] VS2005 Beta 2 [8.0] build 50215 (*)",
+    0x006d9e9f => "[ C ] VS2005 Beta 1 [8.0] build 40607 (*)",
+    0x007d9e9f => "[ASM] VS2005 Beta 1 [8.0] build 40607 (*)",
+    0x006e9e9f => "[C++] VS2005 Beta 1 [8.0] build 40607 (*)",
+    0x007c9e9f => "[RES] VS2005 Beta 1 [8.0] build 40607 (*)",
+    0x00789e9f => "[LNK] VS2005 Beta 1 [8.0] build 40607 (*)",
+    0x007b9e9f => "[IMP] VS2005 Beta 1 [8.0] build 40607 (*)",
+    0x007a9e9f => "[EXP] VS2005 Beta 1 [8.0] build 40607 (*)",
+    0x006d9d76 => "[ C ] Windows Server 2003 SP1 DDK (for AMD64) build 40310 (*)",
+    0x007d9d76 => "[ASM] Windows Server 2003 SP1 DDK (for AMD64) build 40310 (*)",
+    0x006e9d76 => "[C++] Windows Server 2003 SP1 DDK (for AMD64) build 40310 (*)",
+    0x007c9d76 => "[RES] Windows Server 2003 SP1 DDK (for AMD64) build 40310 (*)",
+    0x00789d76 => "[LNK] Windows Server 2003 SP1 DDK (for AMD64) build 40310 (*)",
+    0x007b9d76 => "[IMP] Windows Server 2003 SP1 DDK (for AMD64) build 40310 (*)",
+    0x007a9d76 => "[EXP] Windows Server 2003 SP1 DDK (for AMD64) build 40310 (*)",
+    0x005f178e => "[ C ] VS2003 (.NET) SP1 build 6030",
+    0x0060178e => "[C++] VS2003 (.NET) SP1 build 6030",
+    0x005a178e => "[LNK] VS2003 (.NET) SP1 build 6030",
+    0x000f178e => "[ASM] VS2003 (.NET) SP1 build 6030",
+    0x005e178e => "[RES] VS.NET 2003 SP1 [7.1] build 6030 (*)",
+    0x005c178e => "[EXP] VS2003 (.NET) SP1 build 6030",
+    0x005d178e => "[IMP] VS2003 (.NET) SP1 build 6030",
+    0x005f0fc3 => "[ C ] Windows Server 2003 SP1 DDK build 4035 (*)",
+    0x000f0fc3 => "[ASM] Windows Server 2003 SP1 DDK build 4035 (*)",
+    0x00600fc3 => "[C++] Windows Server 2003 SP1 DDK build 4035 (*)",
+    0x005e0fc3 => "[RES] Windows Server 2003 SP1 DDK build 4035 (*)",
+    0x005a0fc3 => "[LNK] Windows Server 2003 SP1 DDK build 4035 (*)",
+    0x005d0fc3 => "[IMP] Windows Server 2003 SP1 DDK build 4035 (*)",
+    0x005c0fc3 => "[EXP] Windows Server 2003 SP1 DDK build 4035 (*)",
+    0x005f0c05 => "[ C ] VS2003 (.NET) build 3077",
+    0x00600c05 => "[C++] VS2003 (.NET) build 3077",
+    0x000f0c05 => "[ASM] VS2003 (.NET) build 3077",
+    0x005e0bec => "[RES] VS2003 (.NET) build 3052",
+    0x005c0c05 => "[EXP] VS2003 (.NET) build 3077",
+    0x005d0c05 => "[IMP] VS2003 (.NET) build 3077",
+    0x005a0c05 => "[LNK] VS2003 (.NET) build 3077",
+    0x005e0c05 => "[RES] VS.NET 2003 [7.1] build 3077 (*)",
+    0x001c24fa => "[ C ] VS2002 (.NET) build 9466",
+    0x001d24fa => "[C++] VS2002 (.NET) build 9466",
+    0x004024fa => "[ASM] VS2002 (.NET) build 9466",
+    0x003d24fa => "[LNK] VS2002 (.NET) build 9466",
+    0x004524fa => "[RES] VS2002 (.NET) build 9466",
+    0x003f24fa => "[EXP] VS2002 (.NET) build 9466",
+    0x001924fa => "[IMP] VS2002 (.NET) build 9466",
+    0x001c23d8 => "[ C ] Windows XP SP1 DDK build 9176 (*)",
+    0x004023d8 => "[ASM] Windows XP SP1 DDK build 9176 (*)",
+    0x001d23d8 => "[C++] Windows XP SP1 DDK build 9176 (*)",
+    0x004523d8 => "[RES] Windows XP SP1 DDK build 9176 (*)",
+    0x003d23d8 => "[LNK] Windows XP SP1 DDK build 9176 (*)",
+    0x001923d8 => "[IMP] Windows XP SP1 DDK build 9176 (*)",
+    0x003f23d8 => "[EXP] Windows XP SP1 DDK build 9176 (*)",
+    0x000a2636 => "[ C ] VS98 (6.0) SP6 build 8804",
+    0x000b2636 => "[C++] VS98 (6.0) SP6 build 8804",
+    0x00152306 => "[ C ] VC++ 6.0 SP5 build 8804",
+    0x00162306 => "[C++] VC++ 6.0 SP5 build 8804",
+    0x000420ff => "[LNK] VC++ 6.0 SP5 imp/exp build 8447",
+    0x000606c7 => "[RES] VS98 (6.0) SP6 cvtres build 1736",
+    0x000a1fe8 => "[ C ] VS98 (6.0) build 8168",
+    0x000b1fe8 => "[C++] VS98 (6.0) build 8168",
+    0x000606b8 => "[RES] VS98 (6.0) cvtres build 1720",
+    0x00041fe8 => "[LNK] VS98 (6.0) imp/exp build 8168",
+    0x00060684 => "[RES] VS97 (5.0) SP3 cvtres 5.00.1668",
+    0x00021c87 => "[IMP] VS97 (5.0) SP3 link 5.10.7303",
+  }
+end