Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00002000	0x001138ec	0x00113a00	5.24830991838
.rsrc	0x00116000	0x0000059c	0x00000600	4.03993768935
.reloc	0x00118000	0x0000000c	0x00000200	0.101910425663

Name	Offset	Size	Language	Sub-language	File type
RT_VERSION	0x00116090	0x0000030c	LANG_NEUTRAL	SUBLANG_NEUTRAL	data
RT_MANIFEST	0x001163ac	0x000001ea	LANG_NEUTRAL	SUBLANG_NEUTRAL	XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

!This program cannot be run in DOS mode.

`.rsrc

@.reloc

v4.0.30319

#Strings

System.IO

mscorlib

Thread

extractResource

IDisposable

Console

set_FileName

embeddedFileName

ReadLine

WriteLine

Dispose

OpenWrite

GuidAttribute

DebuggableAttribute

ComVisibleAttribute

AssemblyTitleAttribute

AssemblyTrademarkAttribute

TargetFrameworkAttribute

AssemblyFileVersionAttribute

AssemblyConfigurationAttribute

AssemblyDescriptionAttribute

CompilationRelaxationsAttribute

AssemblyProductAttribute

AssemblyCopyrightAttribute

AssemblyCompanyAttribute

RuntimeCompatibilityAttribute

set_UseShellExecute

extract.exe

extract.try.exe

System.Threading

System.Runtime.Versioning

String

destinationPath

EndsWith

extract.VERSION.dll

GetManifestResourceStream

FileStream

Program

System

System.Reflection

CopyTo

get_StartInfo

ProcessStartInfo

ToUpper

StreamWriter

TextWriter

System.Diagnostics

System.Runtime.InteropServices

System.Runtime.CompilerServices

DebuggingModes

GetManifestResourceNames

Process

Concat

extract

Object

get_StandardInput

set_RedirectStandardInput

set_RedirectStandardOutput

set_CreateNoWindow

GetExecutingAssembly

WrapNonExceptionThrows

extract

2021

$cbf37f35-4d13-461e-9c33-6ea810491bb7

1.0.0.0

.NETFramework,Version=v4.7.2

FrameworkDisplayName

.NET Framework 4.7.2

!This program cannot be run in DOS mode.

`.rdata

@.data

.pdata

@.rsrc

@.reloc

@USVWATAVAWH

fE9$Au

0A_A^A\_^[]

fA9<Au

!\$ E3

VWATAUAWH

D9l$`v2D

A_A]A\_^

` UAVAWH

H USWH

fD9DDPt&A

u*9Q<|%

LcA<E3

u HcA<H

H3E H3E

SLGetWindowsInformationDWORD

RSDS!C|

FXSUNATD.pdb

.text$mn

.text$mn$00

.text$x

.rdata$brc

.idata$5

.00cfg

.CRT$XCA

.CRT$XCAA

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIY

.CRT$XIZ

.gehcont

.gfids

.rdata

.rdata$zzzdbg

.xdata

.idata$2

.idata$3

.idata$4

.idata$6

.data$brc

.pdata

.rsrc$01

.rsrc$02

RegQueryValueExW

RegCloseKey

ADVAPI32.dll

GetLastError

HeapSetInformation

KERNEL32.dll

_XcptFilter

_amsg_exit

__wgetmainargs

__set_app_type

_cexit

__setusermatherr

_initterm

__C_specific_handler

_fmode

_commode

?terminate@@YAXXZ

msvcrt.dll

FaxSetPortExW

FaxSetExtensionDataW

FaxClose

FaxEnumPortsExW

FaxConnectFaxServerW

FaxFreeBuffer

FXSAPI.dll

EnumPrintersW

ClosePrinter

GetPrinterW

SetPrinterW

OpenPrinterW

WINSPOOL.DRV

RegOpenKeyExW

RegSetValueExW

TraceMessage

RegCreateKeyExW

SetUnhandledExceptionFilter

GetModuleHandleW

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

GetTickCount

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

SetLastError

GetVersionExW

LoadLibraryW

GetProcAddress

FreeLibrary

HeapFree

HeapAlloc

GetProcessHeap

OutputDebugStringW

_vsnwprintf

memset

wcscmp

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<assemblyIdentity

name="FXSUNATD"

processorArchitecture="amd64"

type="win32"

version="1.0.0.0"

Fax Unattanded Setup

</description>

<requestedExecutionLevel

level="requireAdministrator"

uiAccess="false"

</requestedPrivileges>

</security>

</trustInfo>

<asmv3:application>

<asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">

</asmv3:windowsSettings>

</asmv3:application>

</assembly>

!This program cannot be run in DOS mode.

=SRicha

`.rdata

@.data

.pdata

@.idata

@.msvcjmc$

.00cfg

@_RDATA

@.reloc

D$PH9D$Hv

HcD$$H;D$(v1H

?HcD$$H;D$(u)H

HcD$$H

A9D$(t

D$pHc@

D$8HcD$ H

@UVWAVH

VATAUAWH

(A_A]A\^

@SUWATAUAVAWH

A_A^A]A\_][

D$H9D$ s"

H3D$0H

H9D$ u

H9D$Hr

H9D$Hs

$Hc@<H

D$ H9D$(u

D$ Hc@<H

H;D$@v

D$PfA9

fD9TDPt

USVWATAUAVH

u+L95^

te+}o;>r^

A^A]A\_^[]

5Genu

5Auth

H9D$Xrd

H9D$XsL

H9D$Xu

D$8H9D$0u

D$(Hc@

L$(HcI

D$(Hc@

|$ RCC

|$ MOC

|$ csm

D$@Hc@

H9D$(r

H9D$(v

H9D$(r

H9D$(v

H9D$0u

HcD$PE3

D$,9D$0t$H

HcD$@H

HcD$ H

t)HcD$hHk

DHcD$hHk

|$ Zt$

|$ 2tC

|$ 5tX

HcD$DH

HcD$LH

HcD$HH

H;D$(r

D$(H9D$8s

H9D$8r

|$X@t

|$0Xt)

HcD$ H

|$ Btu

|$ )uyH

L$XH9H

H+D$XH

HcD$@H

HcD$DH

HcD$8H

HcD$8Hk

|$$0t1

|$H0t2

HcD$<H

&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&

&&&&&&&

!"#$&&&&%y

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

!%"#%%%%%$

|$0Bt,

HcD$4H

HcD$8H

D$PHcD$PE3

t.HcD$PH

H9D$ sNH

hHcD$xHk

|$ @u&H

D$ 9D$X~

HcD$XH

|$$$td

|$$Ut0

|$$Vt=

|$$Zt/

HcD$0H

|$$FtD

|$$Ht\

|$$It/

|$(Rt"

HcD$PH

HcD$TH

HcD$0H

|$$3tD

|$$4tg

|$@@t?H

(HcD$0Hk

D$HH9D$ t"H

H9D$8u

H9D$@t:H

D$0H9D$Ht:H

ffffff

fffffff

L$@HcI

D$(9D$ s6H

D$x9D$,u

D$pHc@

D$0Hc@

L$8HcD

H;D$Ht

9D$ s(

L$8HcD

D$,9D$

@XH9D$@s

@XH9D$@u

D$ H9D$@u

D$@Hc@

D$PHc@

D$@Hc@

D$$9D$ sAH

D$@Hc@

H9D$Ps

D$@Hc@

D$,9D$ s?H

H9D$`s

D$pHc@

L$xHcI

L$xH9A

L$`HcI

L$xH9A

L$`HcI

L$pHcI

L$xHcI

H9D$8tl

L$xHcI

L$pHcI

L$xHcI

H9D$8tl

L$xHcI

L$pHcI

D$xHc@

I(H9H(u

HcL$ HcD

9D$ ~/D

L$hHcI

HcL$$Hk

L$PHcI

HcL$ Hk

L$PHcI

HcL$ Hk

L$@HcI H

9D$$}Z

D$x9D$$u

D$H9D$ s

H9D$Xs

H9D$hs

H9D$xs

H9D$Xs

H9D$hs

H9D$xs

H9D$pt

|:HcD$0H;

H9D$pu

H9D$puDH

H9D$pt

|:HcD$0H;

H9D$pu

H9D$puA3

H9D$pt

|:HcD$0H;

H9D$pu

H9D$puDH

H9D$pt

|:HcD$0H;

H9D$pu

H9D$puA3

H9D$pt

|:HcD$0H;

H9D$pu

H9D$puDH

H9D$pt

|:HcD$0H;

H9D$pu

H9D$puA3

H9D$Ps

H9D$`s

H9D$Ps

H9D$`s

H9D$Xv

H9D$(w

?H9D$Xv

H9D$(w

D$P9D$ }"L

D$P9D$ }&f

D$P9D$ }"L

D$P9D$ }&f

D$09D$4t

H9D$(s

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

|$ t@

|$ #tJ

|$ +t!

|$ 0tF

HcD$0H

HcD$DH

D$`Hc@(H

HcD$$H

(HcD$8H

D$H9D$ }DH

HcD$0Hk

#HcD$0Hk

HcD$0Hk

#HcD$0Hk

HcD$0Hk

#HcD$0Hk

HcD$0Hk

#HcD$0Hk

HcD$0Hk

#HcD$0Hk

HcD$0Hk

#HcD$0Hk

HcD$0Hk

#HcD$0Hk

HcD$0Hk

#HcD$0Hk

D$PH9D$@

@P9D$4

HcD$8H

@P9D$4

HcD$8H

@P9D$4

HcD$8H

@P9D$4

HcD$8H

@P9D$4

HcD$8H

@P9D$4

HcD$8H

D$(HcD$`H9D$(s

HcD$`H

+HcD$`H9D$ t

D$(HcD$`H9D$(s

HcD$`H

+HcD$`H9D$ t

HcD$`H

D$(H9D$ tZH

HcD$`H

D$(H9D$ t\H

H9D$@toH

D$H9D$@t

D$P9D$@t

D$HH9D$ t'H

D$XH9D$(t8H

H9D$hs

H9D$xs

H9D$ps

|$0csm

D$XH9D$@t

D$ Hc@<H

H9D$pr

H9D$xr

H+D$@H;D$8w

x ATAVAWH

0A_A^A\

x ATAVAWH

fA94@u

fA94nu

0A_A^A\

D$`H9D$H

D$PH9D$@rf

D$`H9D$ht

D$0H9D$(r

D$0H9D$(s

D$@H9D$`u

D$HH9D$ht(H

H9D$ t

H9D$8s

D$8H9D$0r

H9D$hs

D$8H9D$0r

H9D$hs

HcD$$H

HcD$(H

HcD$,H

HcD$0H

HcD$$H

HcD$(H

HcD$,H

HcD$0H

D$L9D$P

D$T9D$X

D$\9D$`uPH

D$d9D$h

D$8H9D$@

H9H(w*

H9H8w*

H9H(w*

D$L9D$P

D$T9D$X

D$\9D$`uPH

D$d9D$h

D$8H9D$@

H9H(w*

H9H8w*

H9H(w*

D$L9D$P

D$T9D$X

D$\9D$`uPH

D$d9D$h

D$8H9D$@

H9H(w*

H9H8w*

H9H(w*

D$L9D$P

D$T9D$X

D$\9D$`uPH

D$d9D$h

D$8H9D$@

H9H(w*

H9H8w*

H9H(w*

H9D$ s

H9D$hs

H9D$xs

D$`H9D$@

D$ H9D$8s

D$,HcD$,H

D$ HcD$,H

D$8H9D$ t"

D$XH9D$H

D$@HkL$H

D$XH9D$Ht:H

D$XH9D$Ht

D$HH9D$@u4H

L$(H9A t

HcD$0HcL$0H

HcL$0H

0HcD$0HcL$0H

HcL$0H

HcD$0H

H+D$@H

H+D$`H

t$hH;D$ps

D$0H9D$8s*H

t$@H;D$Hs

HcL$0H

t$hH;D$ps

D$0H9D$8s*H

H9D$8v

D$P9D$8r

D$P9D$8u

D$\9D$@v

D$X9D$<r

D$X9D$<u

D$d9D$Hv

D$XH9D$@r!H

D$XH9D$@u

D$`H9D$Hr!H

D$`H9D$Hu

H+D$PH

D$@H9D$8t

H+D$HH

D$@H9D$8t

H+D$PH

D$@H9D$8t

D$(H9D$ u

H9D$ u

H#D$ H

D$pH9D$`tAH

|$hd|IH

H+D$pH

HcL$DH

HcT$HH

HcD$HH

HcL$PH

|$8d|4

HcL$0H

9D$0ucH

HcD$0H

HcL$4H

HcD$<L

HcD$HH

9D$D|QH

H9D$xs

H9D$xv

HcL$HH

HcD$TH

D$49D$0}-

HcD$4Hk

HcL$4H

HcD$4Hk

t7HcD$ H

HcD$ H

H9D$0u

H9D$ t

|$8@sbH

|$8@s[

D$HH9D$@t'H

L$0H9A

D$p9D$0

D$0HcD$0Hk

HcL$0Hk

HcD$0Hk

H9D$@u

HcD$0Hk

D$T9D$@

HcD$@H

t6HcD$@H

HcD$@H

<HcD$@H

HcD$@H

D$T9D$@

D$PHcD$PH

s!HcD$P

HcL$Pf

D$`HkD$8

D$HH9D$ s'

D$@HcD$(H

D$$9D$

HcD$$H

HcD$PH

yHcD$PH

HcL$PH

HcD$PH

HcD$`H

*HcD$`H

D$@HcD$`H

|$\Pta

H9D$8v H

(HcD$0Hk

HcD$4H

H9D$ht

D$XH9D$0t$H

D$09D$<t:H

H9D$8v H

H9D$ht

H9D$`t

H9D$Hv

H9D$8t2H

H9D$8tL

H9D$pu(

H9D$8t2H

H9D$8tL

H9D$pu(

H9D$ t

H9D$@v

t$HiD$

|$PArO

|$PZwH

|$ParO

|$PzwH

H9D$ thH

H9D$ t

9D$ w@

9D$ w(

D$hH9D$X

D$hH9D$Xr

fD94Fu

WATAUAVAWH

9t$htBH95

x}I96txI

0A_A^A]A\_

WATAUAVAWH

fB94`t

x~I96tyI

fC94wu

0A_A^A]A\_

WAVAWH

0A_A^_

fD94pt

D$HH9D$ t"H

H9D$8u

H9D$@t:H

D$0H9D$Ht:H

D$8H9D$(t

D$8H9D$ t<H

D$XH9D$Pu

D$XH9D$ t0H

D$XH9D$ u

D$PH9D$ t7H

D$HH9D$@u

D$@H9D$ t+H

H9D$ps

D$XH9D$Pw

D$`H9D$0t!H

HcD$0H9

D$@HcD$0H

HcD$0H

H9D$Ps

H9D$hs

H9D$xs

HcD$PH

9D$xr:H

HcD$ Hk

T$@H9L

(t/HcD$ Hk

HcD$ Hk

t/HcD$ Hk

HcD$ Hk

HcD$0Hk

T$PH9L

(tmHcD$0Hk

HcD$0Hk

ufHcD$0Hk

HcD$0Hk

tQHcD$0Hk

HcD$0Hk

H9D$0u

HcD$ Hk

T$@H9L

(t/HcD$ Hk

HcD$ Hk

t/HcD$ Hk

HcD$ Hk

D$HH9D$ u

H9D$ t

D$hH9D$@u

D$89D$lv

D$p9D$<}

HcL$<H

;D$8w#

H9D$`v8

D$49D$H

D$49D$Xsx

D$H9D$,

D$L9D$4t]

|$$stV

|$$stb

|$$su!H

|$0sv$H

D$(9D$,t

D$hH9D$X

D$hH9D$Xr

D$49D$8u

D$@H9D$Hu

HcD$ H

t'HcD$ H

D$$HcD$ H

HcD$ H

D$HH9D$0

#D$H;D$Hu

D$$9D$ t

HHcD$PH

H9D$ t

H9D$ps

H9D$xs

HcD$0H

t>HcD$0H

HcD$0H

D$0Hc@

D$H9D$(

D$$HcD$$Hk

HcD$$Hk

D$0Hc@

D$$9D$Pt1

D$H9D$$

D$ HcD$ Hk

u!HcD$ Hk

D$XH9D$8

D$0HcD$0H

HcD$0H

D$0H9D$ t

9D$`|XH

HcD$ H

HcL$ H

HcD$ H

D$HH9D$8

HHcD$PH

H9D$Ps

D$HH9D$Xr

H9D$Ps

D$HH9D$Xr

H9D$@s

D$0H9D$Xr

H9D$@s

D$0H9D$Xr

H9D$Xs

HcD$@H9

H9D$Xs

HcD$@H9

H9D$Xs

HcD$@H9

H9D$Xs

HcD$@H9

H9D$hs

H9D$0w

HcD$LH

D$L9D$P}eHcD$PH

H9D$Xs

H9D$xs

D$`H9D$h

D$hH9D$(w/H

D$(H9D$ t`H

D$HH9D$@vPH

D$@H9D$Hs,H

D$HH9D$@wPH

D$XH9D$Hw,H

D$@H9D$8v,H

D$HH9D$8s

D$8H9D$@u

D$8H9D$@sPH

D$@H9D$8v,H

D$8H9D$@rPH

D$PH9D$8v,H

D$8H9D$Ps.HcD$0H

HcD$0H

D$XH9D$Hs

D$XH9D$Hs.HcD$0H

HcD$0H

D$8H9D$Ps

HcD$0H

D$PHcD$0H

|$ }%HcD$ H

H+L$XH;

HcD$TH

tAHcD$TH

9D$P~!

D$`HcD$`H

tAHcD$`H

H9D$8v H

D$$9D$(

D$ HcD$ Hk

HcD$ Hk

HcD$0Hk

D$p9D$@|

JHcD$pL

HcD$ H=

HcD$ Hk

@9D$(s

D$4HcD$4H

HcD$@H

t>HcD$@H

HcL$0L

ffffff

fffffff

D$0H9D$ t

HcD$(H

@CH9D$0r5H

H9D$0v

?H9D$0sZH

D$ H9D$Pu

f9D$ u

D$p9D$@|:H

D$xHcD$xH

D$@9D$X}C

HcL$XHcT$X

D$x9D$\}&HcD$\

D$@9D$l}7

HcD$hL

HcD$@H

D$`HcD$`H;

}OHcD$`

HcD$|H;

HcD$hL

D$dHcD$dH;

}EHcD$d

HcT$dH

D$0H9D$(

D$PH9D$H

D$XH9D$8siH

D$PH9D$Hs]H

D$@9D$Ds!H

D$PH9D$H

D$XH9D$8stH

D$PH9D$HshH

D$@9D$Ds!H

D$pH9D$X

D$xH9D$HsiH

D$pH9D$Xs]H

D$P9D$D

XHcD$`H

HcD$XH

XHcD$`H

D$0H9D$Hu

#HcD$0H

u.HcD$0H

YHcD$0H

D$@HcD$0H

HcD$0H

8HcD$0H9

%HcD$0L

HcD$0H

D$hH9D$X

D$hH9D$Xr

HcD$0H

H9D$Xs

H9D$ps

H9D$0w

HcD$\H

tAHcD$\H

HcD$XH

tAHcD$XH

D$49D$8u

D$HH9D$@

H;D$HsaH

D$xH9D$8u

D$HH9D$@

H;D$HsjH

D$xH9D$8u

HcD$8H

D$hH9D$Hr

=HcD$<H

XHcD$`H

HcL$8H

|$Pmu#

HcL$8H

tBHcD$83

@HcD$83

XHcD$`H

D$PH9D$0

D$0Hc@<H

H9D$8r H

H9D$8s

$Hc@<H

:cD$ @

argList

Stack pointer corruption

Cast to smaller type causing loss of data

Stack memory corruption

Local variable used before initialization

Stack around _alloca corrupted

Stack around the variable '

' was corrupted.

The variable '

' is being used without being initialized.

The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.

A cast to a smaller data type has caused a loss of data. If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example:

char c = (i & 0xFF);

Changing the code in this way will not affect the quality of the resulting optimized code.

Stack memory was corrupted

A local variable was used before it was initialized

Stack memory around _alloca was corrupted

Unknown Runtime Check Error

Unknown Filename

Unknown Module Name

Run-Time Check Failure #%d - %s

Stack corrupted near unknown variable

Stack area around _alloca memory reserved by this function is corrupted

Data: <

Allocation number within this function:

Size:

Address: 0x

Stack area around _alloca memory reserved by this function is corrupted

%s%s%p%s%zd%s%d%s%s%s%s%s

A variable is being used without being initialized.

RegOpenKeyExW

RegQueryValueExW

RegCloseKey

PDBOpenValidate5

d:\agent\_work\4\s\src\vctools\crt\vcruntime\src\eh\std_type_info.cpp

d:\agent\_work\4\s\src\vctools\crt\vcruntime\src\internal\per_thread_data.cpp

__based(

__cdecl

__pascal

__stdcall

__thiscall

__fastcall

__vectorcall

__clrcall

__eabi

__swift_1

__swift_2

__ptr64

__restrict

__unaligned

restrict(

delete

operator

`vftable'

`vbtable'

`vcall'

`typeof'

`local static guard'

`string'

`vbase destructor'

`vector deleting destructor'

`default constructor closure'

`scalar deleting destructor'

`vector constructor iterator'

`vector destructor iterator'

`vector vbase constructor iterator'

`virtual displacement map'

`eh vector constructor iterator'

`eh vector destructor iterator'

`eh vector vbase constructor iterator'

`copy constructor closure'

`udt returning'

`local vftable'

`local vftable constructor closure'

new[]

delete[]

`omni callsig'

`placement delete closure'

`placement delete[] closure'

`managed vector constructor iterator'

`managed vector destructor iterator'

`eh vector copy constructor iterator'

`eh vector vbase copy constructor iterator'

`dynamic initializer for '

`dynamic atexit destructor for '

`vector copy constructor iterator'

`vector vbase copy constructor iterator'

`managed vector copy constructor iterator'

`local static thread guard'

operator ""

operator co_await

operator<=>

Type Descriptor'

Base Class Descriptor at (

Base Class Array'

Class Hierarchy Descriptor'

Complete Object Locator'

`anonymous namespace'

template-parameter-

`template-parameter-

generic-type-

`generic-type-

`non-type-template-parameter

`template-type-parameter-

`generic-class-parameter-

`generic-method-parameter-

nullptr

`template-parameter

`vtordispex{

`vtordisp{

`adjustor{

`local static destructor helper'

`template static data member constructor helper'

`template static data member destructor helper'

static

virtual

private:

protected:

public:

[thunk]:

extern "C"

short

unsigned

volatile

std::nullptr_t

,<ellipsis>

noexcept

double

__int8

__int16

__int32

__int64

__int128

char8_t

char16_t

char32_t

wchar_t

decltype(auto)

__w64

UNKNOWN

signed

volatile

`unknown ecsu'

union

struct

class

coclass

cointerface

const

cli::array<

cli::pin_ptr<

{flat}

Cannot access value of empty optional

d:\agent\_work\4\s\src\vctools\crt\github\stl\inc\optional

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

InitializeCriticalSectionEx

Unknown exception

bad exception

(null)

minkernel\crts\ucrt\inc\corecrt_internal_stdio_output.h

minkernel\crts\ucrt\src\appcrt\misc\dbgrpt.cpp

CorExitProcess

minkernel\crts\ucrt\src\appcrt\startup\argv_parsing.cpp

minkernel\crts\ucrt\src\desktopcrt\env\environment_initialization.cpp

minkernel\crts\ucrt\src\appcrt\startup\onexit.cpp

Normal

Ignore

Client

Client hook allocation failure at file %hs line %d.

Client hook allocation failure.

Error: memory allocation: bad memory block type.

Client hook re-allocation failure at file %hs line %d.

Client hook re-allocation failure.

Error: memory allocation: bad memory block type.

Memory allocated at %hs(%d).

The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()

Error: possible heap corruption at or near 0x%p

The Block at 0x%p was allocated by aligned routines, use _aligned_free()

Client hook free failure.

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory before start of heap buffer.

Memory allocated at %hs(%d).

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory before start of heap buffer.

HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory after end of heap buffer.

Memory allocated at %hs(%d).

HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory after end of heap buffer.

DAMAGED

HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.

CRT detected that the application wrote to a heap buffer that was freed.

Memory allocated at %hs(%d).

HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.

CRT detected that the application wrote to a heap buffer that was freed.

%hs located at 0x%p is %Iu bytes long.

Memory allocated at %hs(%d).

%hs located at 0x%p is %Iu bytes long.

Cycle in block list detected while processing block located at 0x%p.

Heap validation failed.

Bad memory block found at 0x%p.

Memory allocated at %hs(%d).

Bad memory block found at 0x%p.

Data: <%s> %s

Dumping objects ->

#File Error#(%d) :

%hs(%d) :

{%ld}

client block at 0x%p, subtype %x, %Iu bytes long.

normal block at 0x%p, %Iu bytes long.

crt block at 0x%p, subtype %x, %Iu bytes long.

Object dump complete.

Detected memory leaks!

%Id bytes in %Id %hs Blocks.

Largest number used: %Id bytes.

Total allocations: %Id bytes.

The block at 0x%p was not allocated by _aligned routines, use realloc()

Damage before 0x%p which was allocated by aligned routine

The block at 0x%p was not allocated by _aligned routines, use free()

minkernel\crts\ucrt\src\appcrt\internal\per_thread_data.cpp

NAN(SNAN)

nan(snan)

NAN(IND)

nan(ind)

minkernel\crts\ucrt\src\appcrt\stdio\_file.cpp

minkernel\crts\ucrt\src\appcrt\stdio\_sftbuf.cpp

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~

minkernel\crts\ucrt\src\appcrt\locale\wsetlocale.cpp

Sunday

Monday

Tuesday

Wednesday

Thursday

Friday

Saturday

January

February

August

September

October

November

December

MM/dd/yy

dddd, MMMM dd, yyyy

HH:mm:ss

Second Chance Assertion Failed: File

, Line

_CrtDbgReport: String too long or IO Error

Assertion failed:

Assertion failed!

%s(%d) : %s

_CrtDbgReport: String too long or Invalid characters in String

minkernel\crts\ucrt\src\appcrt\misc\signal.cpp

minkernel\crts\ucrt\inc\corecrt_internal_win32_buffer.h

minkernel\crts\ucrt\src\appcrt\startup\argv_wildcards.cpp

minkernel\crts\ucrt\src\appcrt\mbstring\mbctype.cpp

minkernel\crts\ucrt\src\desktopcrt\env\get_environment_from_os.cpp

minkernel\crts\ucrt\src\desktopcrt\env\setenv.cpp

AreFileApisANSI

CompareStringEx

EnumSystemLocalesEx

GetActiveWindow

GetDateFormatEx

GetEnabledXStateFeatures

GetLastActivePopup

GetLocaleInfoEx

GetProcessWindowStation

GetSystemTimePreciseAsFileTime

GetTimeFormatEx

GetUserDefaultLocaleName

GetUserObjectInformationW

GetXStateFeaturesMask

IsValidLocaleName

LCMapStringEx

LCIDToLocaleName

LocaleNameToLCID

LocateXStateFeature

MessageBoxA

MessageBoxW

RoInitialize

RoUninitialize

AppPolicyGetProcessTerminationMethod

AppPolicyGetThreadInitializationType

AppPolicyGetShowDeveloperDiagnostic

AppPolicyGetWindowingModel

SetThreadStackGuarantee

SystemFunction036

minkernel\crts\ucrt\src\appcrt\locale\initctype.cpp

[aOni*{

~ $s%r

@b;zO]

v2!L.2

1#QNAN

1#SNAN

minkernel\crts\ucrt\src\appcrt\locale\initmon.cpp

minkernel\crts\ucrt\src\appcrt\locale\initnum.cpp

minkernel\crts\ucrt\src\appcrt\locale\inittime.cpp

!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~

minkernel\crts\ucrt\src\appcrt\locale\getstringtypea.cpp

minkernel\crts\ucrt\src\appcrt\lowio\osfinfo.cpp

minkernel\crts\ucrt\src\appcrt\locale\lcmapstringa.cpp

minkernel\crts\ucrt\src\appcrt\locale\getlocaleinfoa.cpp

UUUUUU

minkernel\crts\ucrt\src\appcrt\stdio\_getbuf.cpp

minkernel\crts\ucrt\src\appcrt\locale\comparestringa.cpp

=imb;D

/>58d%

VM>cQ6

>jtm}S

)>6{1n

+f)>0'

;H9>&X

*StO9>T

n03>Pu

K~Je#>!

bp(=>?g

BC?>6t9^

K&>.yC

.xJ>Hf

y\PD>!

|b=})>

c [1>H'

uzKs@>

3>N;kU

kE>fvw

V6E>`"(5

?UUUUUU

?7zQ6$

log10f

minkernel\crts\ucrt\src\appcrt\lowio\read.cpp

minkernel\crts\ucrt\src\appcrt\stdio\stream.cpp

_hypot

_nextafter

C:\Users\osama\Desktop\New folder (5)\prxdll_templates-master\prxdll_version\bin\Debug\x64\version.pdb

version.dll

GetFileVersionInfoA

GetFileVersionInfoByHandle

GetFileVersionInfoExW

GetFileVersionInfoSizeA

GetFileVersionInfoSizeExW

GetFileVersionInfoSizeW

GetFileVersionInfoW

VerFindFileA

VerFindFileW

VerInstallFileA

VerInstallFileW

VerLanguageNameA

VerLanguageNameW

VerQueryValueA

VerQueryValueW

cmd.exe

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

.?AVbad_alloc@std@@

.?AVbad_exception@std@@

.?AVexception@std@@

.?AVDNameNode@@

.?AVcharNode@@

.?AVpcharNode@@

.?AVpDNameNode@@

.?AVDNameStatusNode@@

.?AVpairNode@@

.?AVtype_info@@

DisableThreadLibraryCalls

WinExec

GetSystemDirectoryW

FreeLibrary

GetProcAddress

LoadLibraryExW

KERNEL32.dll

GetCurrentThreadId

IsDebuggerPresent

RaiseException

MultiByteToWideChar

WideCharToMultiByte

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetSystemTimeAsFileTime

InitializeSListHead

GetStartupInfoW

GetModuleHandleW

GetLastError

HeapAlloc

HeapFree

GetProcessHeap

VirtualQuery

RtlUnwindEx

InterlockedPushEntrySList

InterlockedFlushSList

GetModuleFileNameW

SetLastError

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

EncodePointer

RtlPcToFileHeader

GetModuleHandleExW

ExitProcess

HeapSize

HeapValidate

GetSystemInfo

GetCurrentThread

GetStdHandle

GetFileType

WriteFile

OutputDebugStringW

WriteConsoleW

SetConsoleCtrlHandler

FindClose

FindFirstFileExW

FindNextFileW

IsValidCodePage

GetACP

GetOEMCP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEnvironmentVariableW

GetDateFormatW

GetTimeFormatW

CompareStringW

LCMapStringW

GetLocaleInfoW

IsValidLocale

GetUserDefaultLCID

EnumSystemLocalesW

HeapReAlloc

HeapQueryInformation

GetFileSizeEx

SetFilePointerEx

GetStringTypeW

SetStdHandle

GetConsoleOutputCP

GetConsoleMode

FlushFileBuffers

ReadFile

ReadConsoleW

CloseHandle

CreateFileW

RtlUnwind

C:\Users\black\Desktop\New folder (4)\extract\obj\Debug\extract.pdb

_CorExeMain

mscoree.dll

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

</requestedPrivileges>

</security>

</trustInfo>

</assembly>

cmd.exe

md "\?C: Windows System32

C:\Windows \System32\

VERSION.dll

try.exe

Extracted.

Running.

Executed.

Software\Microsoft\Windows NT\CurrentVersion\UnattendSettings\Fax

FaxPrinterIsShared

RouteToFolder

RouteFolderName

RouteToPrinter

RoutePrinterName

ReceiveFaxes

SendFaxes

Software\Microsoft\Fax\Setup\Original Setup Data

{aacc65ec-0091-40d6-a6f3-a2ed6057e1fa}

{aec1b37c-9af2-11d0-abf7-00c04fd91a4e}

{92041a90-9af2-11d0-abf7-00c04fd91a4e}

RegCreateKeyEx() failed, ec=%d

Created new fax registry key, ec=%d

RegOpenKeyEx() failed, ec=%d

RegSetValueEx() failed[%s], ec=%d

Microsoft-Windows-Fax-Common-EnableServerPolicy

slc.dll

Microsoft Shared Fax Driver

MemAlloc() failed, size=%d

Software\Microsoft\Fax\Client

DebugLevel

VS_VERSION_INFO

StringFileInfo

040904B0

CompanyName

Microsoft Corporation

FileDescription

Microsoft Fax Unattend Setup Program

FileVersion

10.0.19041.804 (WinBuild.160101.0800)

InternalName

FXSUNATD.EXE

LegalCopyright

OriginalFilename

FXSUNATD.EXE

ProductName

Microsoft

Windows

Operating System

ProductVersion

10.0.19041.804

VarFileInfo

Translation

Runtime Check Error.

Unable to display RTC Message.

Run-Time Check Failure #%d - %s

bin\amd64\MSPDB140.DLL

VCRUNTIME140D.dll

api-ms-win-core-registry-l1-1-0.dll

advapi32.dll

SOFTWARE\Wow6432Node\Microsoft\VisualStudio\14.0\Setup\VC

ProductDir

MSPDB140

d:\agent\_work\4\s\src\vctools\crt\github\stl\inc\optional

std::optional<unsigned __int64>::operator *

"Cannot access value of empty optional"

api-ms-win-core-fibers-l1-1-1

api-ms-win-core-synch-l1-2-0

kernel32

api-ms-

cached_handle == INVALID_HANDLE_VALUE

d:\agent\_work\4\s\src\vctools\crt\vcruntime\src\internal\winapi_downlevel.cpp

cached_handle == new_handle

cached_fp == invalid_function_sentinel()

cached_fp == new_fp

to->_What == nullptr && to->_DoFree == false

d:\agent\_work\4\s\src\vctools\crt\vcruntime\src\eh\std_exception.cpp

( (_Stream.is_string_backed()) || (fn = _fileno(_Stream.public_stream()), ((_textmode_safe(fn) == __crt_lowio_text_mode::ansi) && !_tm_unicode_safe(fn))))

minkernel\crts\ucrt\inc\corecrt_internal_stdio.h

__acrt_stdio_char_traits<char>::validate_stream_is_ansi_if_required

stream != nullptr

minkernel\crts\ucrt\src\appcrt\stdio\output.cpp

common_vfprintf

format != nullptr

common_vsprintf

buffer_count == 0 || buffer != nullptr

common_vsprintf_s

buffer != nullptr && buffer_count > 0

("Buffer too small", 0)

common_vsnprintf_s

_format_it != nullptr

minkernel\crts\ucrt\inc\corecrt_internal_stdio_output.h

__crt_stdio_output::output_processor<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t>,class __crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> > >::process

("Incorrect format specifier", 0)

__crt_stdio_output::output_processor<char,class __crt_stdio_output::string_output_adapter<char>,class __crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> > >::process

__crt_stdio_output::output_processor<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t>,class __crt_stdio_output::standard_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> > >::process

__crt_stdio_output::output_processor<char,class __crt_stdio_output::string_output_adapter<char>,class __crt_stdio_output::standard_base<char,class __crt_stdio_output::string_output_adapter<char> > >::process

__crt_stdio_output::output_processor<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t>,class __crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> > >::process

__crt_stdio_output::output_processor<char,class __crt_stdio_output::stream_output_adapter<char>,class __crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> > >::process

__crt_stdio_output::output_processor<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t>,class __crt_stdio_output::format_validation_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> > >::process

__crt_stdio_output::output_processor<char,class __crt_stdio_output::stream_output_adapter<char>,class __crt_stdio_output::format_validation_base<char,class __crt_stdio_output::stream_output_adapter<char> > >::process

__crt_stdio_output::output_processor<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t>,class __crt_stdio_output::standard_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> > >::process

__crt_stdio_output::output_processor<char,class __crt_stdio_output::stream_output_adapter<char>,class __crt_stdio_output::standard_base<char,class __crt_stdio_output::stream_output_adapter<char> > >::process

("N length modifier not specifier", false)

_length == length_modifier::none

state_case_normal_common()

_type_index >= 0 && *end_pointer == '$' && _type_index < _ARGMAX

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::validate_and_update_state_at_beginning_of_format_character

("Missing position in the format string", 0)

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::validate_and_update_state_at_end_of_format_string

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> >::validate_and_update_state_at_beginning_of_format_character

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> >::validate_and_update_state_at_end_of_format_string

_context != nullptr

__crt_stdio_output::string_output_adapter<wchar_t>::validate

__crt_stdio_output::string_output_adapter<char>::validate

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::validate_and_update_state_at_beginning_of_format_character

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::validate_and_update_state_at_end_of_format_string

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> >::validate_and_update_state_at_beginning_of_format_character

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> >::validate_and_update_state_at_end_of_format_string

_state == state::normal || _state == state::type

__crt_stdio_output::format_validation_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::validate_and_update_state_at_end_of_format_string

__crt_stdio_output::format_validation_base<char,class __crt_stdio_output::stream_output_adapter<char> >::validate_and_update_state_at_end_of_format_string

_stream.valid()

__crt_stdio_output::stream_output_adapter<wchar_t>::validate

__crt_stdio_output::stream_output_adapter<char>::validate

__crt_stdio_output::format_validation_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::validate_and_update_state_at_end_of_format_string

("'n' format specifier disabled", 0)

("Invalid integer length modifier", 0)

precision_index >= 0 && *end_pointer == '$' && precision_index < _ARGMAX

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::update_precision

width_index >= 0 && *end_pointer == '$' && width_index < _ARGMAX

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::update_field_width

__crt_stdio_output::format_validation_base<char,class __crt_stdio_output::string_output_adapter<char> >::validate_and_update_state_at_end_of_format_string

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> >::update_precision

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> >::update_field_width

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::update_precision

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::update_field_width

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> >::update_precision

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> >::update_field_width

(null)

is_positional_parameter_reappearance_consistent( parameter, actual_type, format_type, length )

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::validate_and_store_parameter_data

_type_index >= 0 && _type_index < _ARGMAX

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::validate_state_for_type_case_a

_format_char != '\0'

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> >::validate_and_store_parameter_data

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> >::validate_state_for_type_case_a

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::validate_and_store_parameter_data

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::validate_state_for_type_case_a

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> >::validate_and_store_parameter_data

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> >::validate_state_for_type_case_a

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> >::extract_argument_from_va_list

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::string_output_adapter<char> >::extract_argument_from_va_list

__crt_stdio_output::positional_parameter_base<wchar_t,class __crt_stdio_output::stream_output_adapter<wchar_t> >::extract_argument_from_va_list

__crt_stdio_output::positional_parameter_base<char,class __crt_stdio_output::stream_output_adapter<char> >::extract_argument_from_va_list

__crt_stdio_output::output_processor<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t>,class __crt_stdio_output::format_validation_base<wchar_t,class __crt_stdio_output::string_output_adapter<wchar_t> > >::process

__crt_stdio_output::output_processor<char,class __crt_stdio_output::string_output_adapter<char>,class __crt_stdio_output::format_validation_base<char,class __crt_stdio_output::string_output_adapter<char> > >::process

Warning

Assertion Failed

For information on how your program can cause an assertion

failure, see the Visual C++ documentation on asserts.

Debug %ls!

Program: %hs%ls%ls%hs%ls%hs%ls%hs%ls%ls%hs%ls

(Press Retry to debug the application)

Debug %ls!

Program: %ls%ls%ls%ls%ls%ls%ls%ls%ls%ls%ls%ls

(Press Retry to debug the application)

("The hook function is not in the list!", 0)

minkernel\crts\ucrt\src\appcrt\misc\dbgrpt.cpp

mode == _CRT_RPTHOOK_INSTALL || mode == _CRT_RPTHOOK_REMOVE

common_set_report_hook

new_hook != nullptr

common_message_window

traits::tcscpy_s(program_name, (sizeof(*__countof_helper(program_name)) + 0), get_program_name_unknown_text(Character()))

Expression:

Line:

File:

Module:

(*_errno())

wcscpy_s(message_buffer, 4096, L"_CrtDbgReport: String too long or IO Error")

_CrtDbgReport: String too long or IO Error

Microsoft Visual C++ Runtime Library

((destination)) != NULL && ((size_in_elements)) > 0

minkernel\crts\ucrt\inc\corecrt_internal_string_templates.h

common_tcscpy_s

(((source))) != NULL

Buffer is too small

(L"Buffer is too small" && 0)

common_tcscat_s

String is not null terminated

(L"String is not null terminated" && 0)

mscoree.dll

mode == _crt_argv_expanded_arguments || mode == _crt_argv_unexpanded_arguments

minkernel\crts\ucrt\src\appcrt\startup\argv_parsing.cpp

common_configure_argv

minkernel\crts\ucrt\src\desktopcrt\env\environment_initialization.cpp

create_environment

traits::tcscpy_s(variable.get(), required_count, source_it)

((result_buffer)) != NULL && ((result_count)) > 0

minkernel\crts\ucrt\src\appcrt\filesystem\makepath.cpp

common_makepath_s

cleanup_after_error

minkernel\crts\ucrt\src\appcrt\filesystem\splitpath.cpp

common_splitpath_internal

_CrtCheckMemory()

minkernel\crts\ucrt\src\appcrt\heap\debug_heap.cpp

_CrtIsValidHeapPointer(block)

old_head->_line_number == line_number_for_ignore_blocks && old_head->_request_number == request_number_for_ignore_blocks

reallocation_is_allowed || (!reallocation_is_allowed && new_head == old_head)

__acrt_last_block == old_head

__acrt_first_block == old_head

block != nullptr

_expand_dbg

is_block_type_valid(header->_block_use)

header->_line_number == line_number_for_ignore_blocks && header->_request_number == request_number_for_ignore_blocks

header->_block_use == block_use || header->_block_use == _CRT_BLOCK && block_use == _NORMAL_BLOCK

__acrt_last_block == header

__acrt_first_block == header

_msize_dbg

new_bits == _CRTDBG_REPORT_FLAG || new_bits_have_only_valid_flags

_CrtSetDbgFlag

callback != nullptr

_CrtDoForAllClientObjects

state != nullptr

_CrtMemCheckpoint

_CrtMemDifference

old_state != nullptr

new_state != nullptr

print_block_data

_CrtMemDumpStatistics

IS_2_POW_N(alignment)

_aligned_offset_malloc_dbg

offset == 0 || offset < size

_aligned_offset_realloc_dbg

_aligned_msize_dbg

abort() has been called

minkernel\crts\ucrt\inc\corecrt_internal_strtox.h

base == 0 || (2 <= base && base <= 36)

__crt_strtox::parse_integer

c == '\0' || *_p == c

__crt_strtox::c_string_character_source<wchar_t>::unget

_p != nullptr

__crt_strtox::c_string_character_source<wchar_t>::validate

__crt_strtox::c_string_character_source<char>::unget

__crt_strtox::c_string_character_source<char>::validate

result != nullptr

minkernel\crts\ucrt\src\appcrt\misc\errno.cpp

_get_errno

_get_doserrno

_loc_update.GetLocaleT()->locinfo->_public._locale_mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->_public._locale_mb_cur_max == 2

minkernel\crts\ucrt\src\appcrt\convert\mbtowc.cpp

UTF-8 isn't supported in this _mbtowc_l function yet!!!

_loc_update.GetLocaleT()->locinfo->_public._locale_lc_codepage != CP_UTF8 && L"UTF-8 isn't supported in this _mbtowc_l function yet!!!"

_loc_update.GetLocaleT()->locinfo->_public._locale_mb_cur_max > 1

destination_count <= INT_MAX

minkernel\crts\ucrt\src\appcrt\convert\wctomb.cpp

_wctomb_s_l

destination_count > 0

minkernel\crts\ucrt\src\appcrt\convert\cvt.cpp

fp_format_nan_or_infinity

strcpy_s( result_buffer, result_buffer_count, strings[row][column + !long_string_will_fit])

result_buffer_count > static_cast<size_t>(3 + (precision > 0 ? precision : 0) + 5 + 1)

fp_format_e_internal

strcpy_s( p, result_buffer_count == (static_cast<size_t>(-1)) ? result_buffer_count : result_buffer_count - (p - result_buffer), "e+000")

result_buffer_count > static_cast<size_t>(1 + 4 + precision + 6)

fp_format_a

result_buffer != nullptr

__acrt_fp_format

result_buffer_count > 0

scratch_buffer != nullptr

scratch_buffer_count > 0

("Unsupported format specifier", 0)

minkernel\crts\ucrt\src\appcrt\stdio\fputwc.cpp

fputwc

stream.valid()

minkernel\crts\ucrt\src\appcrt\stdio\fileno.cpp

_fileno

public_stream != nullptr

minkernel\crts\ucrt\src\appcrt\stdio\_file.cpp

_get_stream_buffer_pointers

minkernel\crts\ucrt\src\appcrt\stdio\fputc.cpp

minkernel\crts\ucrt\src\appcrt\stdio\_sftbuf.cpp

LC_ALL

LC_COLLATE

LC_CTYPE

LC_MONETARY

LC_NUMERIC

LC_TIME

("Invalid parameter for _configthreadlocale",0)

minkernel\crts\ucrt\src\appcrt\locale\wsetlocale.cpp

_configthreadlocale

LC_MIN <= _category && _category <= LC_MAX

_wsetlocale

_wsetlocale_nolock

wcsncpy_s(lctemp, (sizeof(*__countof_helper(lctemp)) + 0), s, len)

_wsetlocale_set_cat

wcscpy_s(pch_cat_locale, cch, lctemp)

_wsetlocale_get_all

wcscat_s(pch, cch, L";")

parse_bcp47_language

wcsncpy_s(names->szLanguage, (sizeof(*__countof_helper(names->szLanguage)) + 0), section.ptr, section.length)

wcsncpy_s(names->szLocaleName, (sizeof(*__countof_helper(names->szLocaleName)) + 0), section.ptr, section.length)

parse_bcp47_script

wcsncat_s(names->szLocaleName, (sizeof(*__countof_helper(names->szLocaleName)) + 0), L"-", 1)

wcsncat_s(names->szLocaleName, (sizeof(*__countof_helper(names->szLocaleName)) + 0), section.ptr, section.length)

parse_bcp47_region

wcsncpy_s(names->szCountry, (sizeof(*__countof_helper(names->szCountry)) + 0), section.ptr, section.length)

parse_bcp47_code_page

wcsncpy_s(names->szCodePage, (sizeof(*__countof_helper(names->szCodePage)) + 0), section.ptr, section.length)

_expandlocale_locale_name_cache::_expandlocale_locale_name_cache

wcsncpy_s(localeNameOutput, localeNameSizeInChars, psetloc_data->_cacheLocaleName, (sizeof(*__countof_helper(psetloc_data->_cacheLocaleName)) + 0))

_expandlocale_locale_name_cache::~_expandlocale_locale_name_cache

wcsncpy_s(_psetloc_data->_cacheLocaleName, (sizeof(*__countof_helper(_psetloc_data->_cacheLocaleName)) + 0), _localeNameOutput, _localeNameSizeInChars)

_expandlocale_locale_name_cache::commit_locale_name

wcsncpy_s(_psetloc_data->_cacheLocaleName, (sizeof(*__countof_helper(_psetloc_data->_cacheLocaleName)) + 0), new_locale_name, new_locale_name_length)

_expandlocale_locale_name_cache::commit_locale_name_cache_already_updated

wcsncpy_s(_localeNameOutput, _localeNameSizeInChars, new_locale_name, new_locale_name_length)

_expandlocale

wcscpy_s(output, sizeInChars, L"C")

wcsncpy_s(cacheout, cacheoutLen, expr, charactersInExpression + 1)

wcsncpy_s(cachein, cacheinLen, expr, charactersInExpression + 1)

wcscpy_s(output, sizeInChars, cacheout)

_wcscats

wcscat_s(outstr, numberOfElements, ((sizeof(wchar_t *) > sizeof(__int64) || (sizeof(wchar_t *) & (sizeof(wchar_t *) - 1)) != 0) ? **(wchar_t ***)((substr += sizeof(__int64)) - sizeof(__int64)) : *(wchar_t ** )((substr += sizeof(__int64)) - sizeof(__int64))))

__lc_wcstolc

wcsncpy_s(names->szCodePage, (sizeof(*__countof_helper(names->szCodePage)) + 0), &wlocale[1], 16-1)

wcsncpy_s(names->szLanguage, (sizeof(*__countof_helper(names->szLanguage)) + 0), wlocale, len)

wcsncpy_s(names->szCountry, (sizeof(*__countof_helper(names->szCountry)) + 0), wlocale, len)

wcsncpy_s(names->szCodePage, (sizeof(*__countof_helper(names->szCodePage)) + 0), wlocale, len)

__lc_lctowcs

wcscpy_s(locale, numberOfElements, names->szLanguage)

__acrt_copy_locale_name

wcsncpy_s(localeNameCopy, cch+1, localeName, cch+1)

Sunday

Monday

Tuesday

Wednesday

Thursday

Friday

Saturday

January

February

August

September

October

November

December

MM/dd/yy

dddd, MMMM dd, yyyy

HH:mm:ss

nRptType >= 0 && nRptType < _CRT_ERRCNT

minkernel\crts\ucrt\src\appcrt\misc\dbgrptt.cpp

_CrtSetReportMode

fMode == _CRTDBG_REPORT_MODE || (fMode & ~(_CRTDBG_MODE_FILE | _CRTDBG_MODE_DEBUG | _CRTDBG_MODE_WNDW)) == 0

_CrtSetReportFile

_VCrtDbgReportA

_itoa_s(nLine, szLineMessage, 4096, 10)

strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")

strcpy_s(szLineMessage, 4096, szFormat ? "Assertion failed: " : "Assertion failed!")

strcat_s(szLineMessage, 4096, szUserMessage)

strcat_s(szLineMessage, 4096, "\r")

strcat_s(szLineMessage, 4096, "\n")

strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")

strcpy_s(szOutMessage, 4096, szLineMessage)

e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1))

wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")

_CrtDbgReport: String too long or Invalid characters in String

_VCrtDbgReportW

_itow_s(nLine, szLineMessage, 4096, 10)

Second Chance Assertion Failed: File

Antivirus	Signature
Bkav	Clean
Lionic	Clean
Elastic	Clean
MicroWorld-eScan	Clean
FireEye	Generic.mg.902bf3ec932ad1d2
CAT-QuickHeal	Clean
McAfee	Artemis!902BF3EC932A
Cylance	Clean
VIPRE	Clean
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Clean
BitDefender	Clean
K7GW	Clean
Cybereason	malicious.91b5fa
Baidu	Clean
Cyren	Clean
Symantec	Clean
ESET-NOD32	Clean
APEX	Malicious
Paloalto	Clean
ClamAV	Clean
Kaspersky	Clean
Alibaba	Clean
NANO-Antivirus	Clean
SUPERAntiSpyware	Clean
Rising	Clean
Ad-Aware	Clean
Sophos	Mal/Generic-R
Comodo	Clean
F-Secure	Clean
DrWeb	Clean
Zillya	Clean
TrendMicro	Clean
McAfee-GW-Edition	Artemis!Trojan
CMC	Clean
Emsisoft	Clean
Ikarus	Clean
GData	Clean
Jiangmin	Clean
Webroot	Clean
Avira	Clean
MAX	Clean
Antiy-AVL	Clean
Kingsoft	Clean
Gridinsoft	Clean
Arcabit	Clean
ViRobot	Clean
ZoneAlarm	Clean
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Clean
AhnLab-V3	Clean
Acronis	Clean
BitDefenderTheta	Gen:NN.ZemsilF.34058.fn0@aeINbaj
ALYac	Clean
TACHYON	Clean
VBA32	Clean
Malwarebytes	Clean
Panda	Clean
Zoner	Clean
TrendMicro-HouseCall	Clean
Tencent	Clean
Yandex	Clean
SentinelOne	Static AI - Suspicious PE
eGambit	Clean
Fortinet	Clean
AVG	FileRepMalware
Avast	FileRepMalware
CrowdStrike	Clean
Qihoo-360	Win32/Heur.Generic.HwMAueAA

Static Analysis

PE Compile Time

PDB Path

PE Imphash

Sections

Resources

Imports