Static | ZeroBOX

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x0004c3fa	0x0004c400	6.61929420007
.rdata	0x0004e000	0x000107c4	0x00010800	5.4012865504
.data	0x0005f000	0x0012b554	0x0012a200	2.35283899818
.rsrc	0x0018b000	0x000001e0	0x00000200	4.71229819329
.reloc	0x0018c000	0x00003914	0x00003a00	6.62483061725

Name	Offset	Size	Language	Sub-language	File type
RT_MANIFEST	0x0018b060	0x0000017d	LANG_ENGLISH	SUBLANG_ENGLISH_US	XML 1.0 document text

!This program cannot be run in DOS mode.

`.rdata

@.data

@.reloc

tRf;7tMj

t>h xE

tNh8xE

t-hPxE

9t(9^

D$ PQQQ

QQQQQQQPQQQ

uVh,yE

uMSSSSSSS

uHSSSSSSS

90u&!u

Q(_[^]

f;A,s6

;L$$t9

D$4YPxK

;L$ t3

uWWWh

t[SVWj

L$,_^[3

;D$$rzw

f9P uV

L$HQPR

tH97t&

9>u(Sh

G,;w0|

QQSVWd

tH9] uC

u PWQR

URPQQhp=A

tJ<_t<<$t8<<t4<>t0<-t,<a|

<z~$<A|

<0|O<9

<A|2<P

9t2j(

t4<A|)<P

<0|*<9

<0|]<8

;t$,v-

UQPXY]Y[

F4_^[]

<ItC<Lt3<Tt#<h

A<lt'<tt

<ItC<Lt3<Tt#<h

A<lt'<tt

<ItC<Lt3<Tt#<h

A<lt'<tt

<ItC<Lt3<Tt#<h

A<lt'<tt

<ItC<Lt3<Tt#<h

A<lt'<tt

<ItC<Lt3<Tt#<h

A<lt'<tt

Tt)jhZf;

Jjl^f;

Tt)jhZf;

Jjl^f;

Tt)jhZf;

Jjl^f;

Tt)jhZf;

Jjl^f;

Tt)jhZf;

Jjl^f;

Tt)jhZf;

Jjl^f;

V2jx_f;

F2jgYf;

jg[BjG_

F2jgYf;

jg[BjG_

F2jgYf;

x!j$Xf9

SWt@jU

@s1PVj@W

>Cu2f9V

u9jAXf;

u-jAXf;

<xt<Xt

SVh,!E

Wj0XPV

SPjdVQ

tlj*Yf

zSSSSj

SSVWh

f9:t!V

QQSVj8j@

7ARPRQh

NX9^`t1

;V\uYW

u2Vj@h

9C`u99C\t4

u29K\t-

WHPh 4E

PPPPPWS

PP9E u<PPVWP

7;1u"3

PPPPPPPP

tHSVWP

23L\M4<H

'+?2LF

atlthunk.dll

AtlThunk_AllocateData

AtlThunk_InitData

AtlThunk_DataToCode

AtlThunk_FreeData

InitializeConditionVariable

SleepConditionVariableCS

WakeAllConditionVariable

Unknown exception

bad allocation

bad array new length

bad exception

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

InitializeCriticalSectionEx

__based(

__cdecl

__pascal

__stdcall

__thiscall

__fastcall

__vectorcall

__clrcall

__eabi

__swift_1

__swift_2

__ptr64

__restrict

__unaligned

restrict(

delete

operator

`vftable'

`vbtable'

`vcall'

`typeof'

`local static guard'

`string'

`vbase destructor'

`vector deleting destructor'

`default constructor closure'

`scalar deleting destructor'

`vector constructor iterator'

`vector destructor iterator'

`vector vbase constructor iterator'

`virtual displacement map'

`eh vector constructor iterator'

`eh vector destructor iterator'

`eh vector vbase constructor iterator'

`copy constructor closure'

`udt returning'

`local vftable'

`local vftable constructor closure'

new[]

delete[]

`omni callsig'

`placement delete closure'

`placement delete[] closure'

`managed vector constructor iterator'

`managed vector destructor iterator'

`eh vector copy constructor iterator'

`eh vector vbase copy constructor iterator'

`dynamic initializer for '

`dynamic atexit destructor for '

`vector copy constructor iterator'

`vector vbase copy constructor iterator'

`managed vector copy constructor iterator'

`local static thread guard'

operator ""

operator co_await

Type Descriptor'

Base Class Descriptor at (

Base Class Array'

Class Hierarchy Descriptor'

Complete Object Locator'

template-parameter-

generic-type-

`anonymous namespace'

`non-type-template-parameter

`template-parameter

`template-type-parameter-

`generic-class-parameter-

`generic-method-parameter-

`vtordispex{

`vtordisp{

`adjustor{

`local static destructor helper'

`template static data member constructor helper'

`template static data member destructor helper'

static

virtual

private:

protected:

public:

[thunk]:

extern "C"

short

unsigned

volatile

std::nullptr_t

,<ellipsis>

noexcept

double

__int8

__int16

__int32

__int64

__int128

char16_t

char32_t

wchar_t

__w64

UNKNOWN

signed

volatile

`unknown ecsu'

union

struct

class

coclass

cointerface

volatile

const

cli::array<

cli::pin_ptr<

{flat}

`h````

xpxxxx

`h`hhh

xwpwpp

(null)

CorExitProcess

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~

AreFileApisANSI

CompareStringEx

EnumSystemLocalesEx

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

GetActiveWindow

GetDateFormatEx

GetEnabledXStateFeatures

GetLastActivePopup

GetLocaleInfoEx

GetProcessWindowStation

GetSystemTimePreciseAsFileTime

GetTimeFormatEx

GetUserDefaultLocaleName

GetUserObjectInformationW

GetXStateFeaturesMask

InitializeCriticalSectionEx

IsValidLocaleName

LCMapStringEx

LCIDToLocaleName

LocaleNameToLCID

LocateXStateFeature

MessageBoxA

MessageBoxW

RoInitialize

RoUninitialize

AppPolicyGetProcessTerminationMethod

AppPolicyGetThreadInitializationType

AppPolicyGetShowDeveloperDiagnostic

AppPolicyGetWindowingModel

SetThreadStackGuarantee

SystemFunction036

NAN(SNAN)

nan(snan)

NAN(IND)

nan(ind)

Sunday

Monday

Tuesday

Wednesday

Thursday

Friday

Saturday

January

February

August

September

October

November

December

MM/dd/yy

dddd, MMMM dd, yyyy

HH:mm:ss

!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~

!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~

[aOni*{

~ $s%r

@b;zO]

v2!L.2

1#QNAN

1#SNAN

?5Wg4p

%S#[k=

"B <1=

_hypot

_nextafter

atlTraceGeneral

atlTraceCOM

atlTraceQI

atlTraceRegistrar

atlTraceRefcount

atlTraceWindowing

atlTraceControls

atlTraceHosting

atlTraceDBClient

atlTraceDBProvider

atlTraceSnapin

atlTraceNotImpl

atlTraceAllocation

atlTraceException

atlTraceTime

atlTraceCache

atlTraceStencil

atlTraceString

atlTraceMap

atlTraceUtil

atlTraceSecurity

atlTraceSync

atlTraceISAPI

Advapi32.dll

RegOpenKeyTransactedA

RegCreateKeyTransactedA

RegDeleteKeyTransactedA

RegDeleteKeyExA

ForceRemove

NoRemove

Delete

Component Categories

FileType

Interface

Hardware

SECURITY

SYSTEM

Software

TypeLib

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

CLSID\

\Required Categories

\Implemented Categories

UnRegisterTypeLibForUser

RegisterTypeLibForUser

ATL:%p

DISPLAY

SearchPathW

C:\Users\W7H64\Desktop\VCSamples-master\VC2010Samples\ATL\General\DispSink\DispClient\Free real estate.pdb

.text$di

.text$mn

.text$x

.text$yd

.idata$5

.00cfg

.CRT$XCA

.CRT$XCAA

.CRT$XCL

.CRT$XCU

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIAC

.CRT$XIC

.CRT$XIZ

.CRT$XLA

.CRT$XLZ

.CRT$XPA

.CRT$XPX

.CRT$XPXA

.CRT$XPZ

.CRT$XTA

.CRT$XTZ

.rdata

.rdata$T

.rdata$r

.rdata$sxdata

.rdata$zzzdbg

.rtc$IAA

.rtc$IZZ

.rtc$TAA

.rtc$TZZ

.tls$ZZZ

.xdata$x

ATL$__a

ATL$__m

ATL$__z

.idata$2

.idata$3

.idata$4

.idata$6

.data$r

.rsrc$01

.rsrc$02

AcquireSRWLockExclusive

AssignProcessToJobObject

CloseHandle

CompareStringW

ConnectNamedPipe

CreateDirectoryW

CreateEventW

CreateFileMappingW

CreateFileW

CreateIoCompletionPort

CreateJobObjectW

CreateMutexW

CreateNamedPipeW

CreateProcessW

CreateRemoteThread

CreateSemaphoreW

CreateThread

DebugBreak

DeleteCriticalSection

DeleteFileW

DisconnectNamedPipe

DuplicateHandle

EncodePointer

EnterCriticalSection

EnumSystemLocalesEx

EnumSystemLocalesW

ExitProcess

ExpandEnvironmentStringsW

FileTimeToSystemTime

FindClose

FindFirstFileExW

FindNextFileW

FlushFileBuffers

FlushViewOfFile

FormatMessageA

FreeEnvironmentStringsW

FreeLibrary

GetACP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetComputerNameExW

GetConsoleCP

GetConsoleMode

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetDriveTypeW

GetEnvironmentStringsW

GetExitCodeProcess

GetFileAttributesW

GetFileInformationByHandle

GetFileInformationByHandleEx

GetFileSizeEx

GetFileType

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoW

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleExW

GetModuleHandleW

GetNativeSystemInfo

GetOEMCP

GetProcAddress

GetProcessHandleCount

GetProcessHeaps

GetProcessId

GetProcessTimes

GetQueuedCompletionStatus

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemDefaultLCID

GetSystemDirectoryW

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadContext

GetThreadId

GetThreadLocale

GetThreadPriority

GetTickCount

GetTimeFormatW

GetTimeZoneInformation

GetUserDefaultLCID

GetUserDefaultLangID

GetUserDefaultLocaleName

GetVersion

GetVersionExW

GetWindowsDirectoryW

HeapAlloc

HeapCreate

HeapDestroy

HeapFree

HeapReAlloc

HeapSetInformation

HeapSize

InitOnceExecuteOnce

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InitializeSListHead

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

IsWow64Process

K32GetPerformanceInfo

K32GetProcessMemoryInfo

K32QueryWorkingSetEx

LCMapStringW

LeaveCriticalSection

LoadLibraryExA

LoadLibraryExW

LoadLibraryW

LocalFree

LockFileEx

MapViewOfFile

MoveFileW

MultiByteToWideChar

OpenProcess

OutputDebugStringA

OutputDebugStringW

PeekNamedPipe

PostQueuedCompletionStatus

ProcessIdToSessionId

QueryDosDeviceW

QueryPerformanceCounter

QueryPerformanceFrequency

QueryThreadCycleTime

RaiseException

ReadConsoleW

ReadFile

ReadProcessMemory

RegisterWaitForSingleObject

ReleaseSRWLockExclusive

ReleaseSemaphore

RemoveDirectoryW

ReplaceFileW

ResetEvent

ResumeThread

RtlCaptureContext

RtlCaptureStackBackTrace

RtlUnwind

SearchPathW

SetConsoleCtrlHandler

SetCurrentDirectoryW

SetEndOfFile

SetEnvironmentVariableW

SetEvent

SetFileAttributesW

SetFilePointerEx

SetHandleInformation

SetInformationJobObject

SetLastError

SetNamedPipeHandleState

SetProcessShutdownParameters

SetStdHandle

SetThreadPriority

SetUnhandledExceptionFilter

SignalObjectAndWait

SleepConditionVariableSRW

SleepEx

SuspendThread

SwitchToThread

SystemTimeToTzSpecificLocalTime

TerminateJobObject

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

TransactNamedPipe

TryAcquireSRWLockExclusive

UnhandledExceptionFilter

UnlockFileEx

UnmapViewOfFile

UnregisterWaitEx

VirtualAlloc

VirtualAllocEx

VirtualFree

VirtualFreeEx

VirtualProtect

VirtualProtectEx

VirtualQuery

VirtualQueryEx

WaitForSingleObject

WaitForSingleObjectEx

WaitNamedPipeW

WakeAllConditionVariable

WideCharToMultiByte

Wow64GetThreadContext

WriteConsoleW

WriteFile

WriteProcessMemory

lstrlenW

GetModuleFileNameA

SizeofResource

SetThreadLocale

InitializeCriticalSectionEx

FindResourceA

lstrlenA

GlobalAlloc

FreeConsole

IsDBCSLeadByte

LoadResource

DecodePointer

GlobalLock

lstrcmpiA

GlobalUnlock

MulDiv

KERNEL32.dll

AllowSetForegroundWindow

CloseDesktop

CloseWindowStation

CreateDesktopW

CreateWindowExW

CreateWindowStationW

DefWindowProcW

DestroyWindow

DispatchMessageW

FindWindowExW

GetMessageW

GetProcessWindowStation

GetThreadDesktop

GetUserObjectInformationW

GetWindowThreadProcessId

IsWindow

PostMessageW

RegisterClassW

SendMessageTimeoutW

SetProcessDPIAware

SetProcessWindowStation

TranslateMessage

UnregisterClassW

EndPaint

BeginPaint

ReleaseDC

InvalidateRect

RegisterClassExA

PtInRect

GetParent

UnregisterClassA

GetClientRect

CharNextW

SetFocus

IntersectRect

CreateWindowExA

DefWindowProcA

MessageBoxA

GetWindowLongA

IsChild

CallWindowProcA

SetWindowLongA

OffsetRect

GetClassInfoExA

ShowWindow

UnionRect

SetWindowRgn

EqualRect

SetWindowPos

LoadCursorA

GetFocus

GetKeyState

CharNextA

USER32.dll

DeleteMetaFile

SetTextAlign

SetMapMode

CreateDCA

LPtoDP

RestoreDC

SetViewportOrgEx

Rectangle

TextOutA

CreateMetaFileA

DeleteDC

GetDeviceCaps

SetWindowExtEx

CreateRectRgnIndirect

SetWindowOrgEx

CloseMetaFile

SaveDC

GDI32.dll

AccessCheck

ConvertSidToStringSidW

ConvertStringSecurityDescriptorToSecurityDescriptorW

ConvertStringSidToSidW

CopySid

CreateProcessAsUserW

CreateRestrictedToken

CreateWellKnownSid

DuplicateToken

DuplicateTokenEx

EqualSid

EventRegister

EventUnregister

EventWrite

FreeSid

GetAce

GetKernelObjectSecurity

GetLengthSid

GetNamedSecurityInfoW

GetSecurityDescriptorSacl

GetSecurityInfo

GetSidSubAuthority

GetTokenInformation

ImpersonateLoggedOnUser

ImpersonateNamedPipeClient

InitializeSid

IsValidSid

LookupPrivilegeValueW

MapGenericMask

OpenProcessToken

RegCloseKey

RegCreateKeyExW

RegDeleteValueW

RegDisablePredefinedCache

RegOpenKeyExW

RegQueryValueExW

RegSetValueExW

RevertToSelf

SetEntriesInAclW

SetKernelObjectSecurity

SetSecurityInfo

SetThreadToken

SetTokenInformation

SystemFunction036

RegEnumKeyExA

RegDeleteValueA

RegOpenKeyExA

RegQueryInfoKeyA

RegSetValueExA

RegCreateKeyExA

RegDeleteKeyA

RegQueryInfoKeyW

ADVAPI32.dll

CommandLineToArgvW

SHGetFolderPathW

SHGetKnownFolderPath

SHELL32.dll

OleSaveToStream

ReadClassStm

CoTaskMemAlloc

StringFromGUID2

CoCreateInstance

CreateOleAdviseHolder

CoTaskMemFree

WriteClassStm

CreateDataAdviseHolder

OleRegGetMiscStatus

OleRegEnumVerbs

CoTaskMemRealloc

OleRegGetUserType

ole32.dll

OLEAUT32.dll

PathMatchSpecW

SHLWAPI.dll

CreateEnvironmentBlock

DestroyEnvironmentBlock

USERENV.dll

GetFileVersionInfoSizeW

GetFileVersionInfoW

VerQueryValueW

VERSION.dll

timeGetTime

WINMM.dll

GetProcessHeap

InterlockedPopEntrySList

InterlockedPushEntrySList

FlushInstructionCache

InterlockedFlushSList

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

.?AV_com_error@@

.?AVtype_info@@

.?AVbad_alloc@std@@

.?AVexception@std@@

.?AVbad_array_new_length@std@@

.?AVbad_exception@std@@

.?AVDNameNode@@

.?AVcharNode@@

.?AVpcharNode@@

.?AVpDNameNode@@

.?AVDNameStatusNode@@

.?AVpairNode@@

.?AUIViewObject2@@

.?AV?$IOleControlImpl@VCDispCtl@@@ATL@@

.?AUIQuickActivate@@

.?AV?$IDispEventSimpleImpl@$00VCDispCtl@@$1?DIID__IDispServEvents@@3U_GUID@@B@ATL@@

.?AUIClassFactory@@

.?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@

.?AV?$IPersistStreamInitImpl@VCDispCtl@@@ATL@@

.?AV?$IViewObjectExImpl@VCDispCtl@@@ATL@@

.?AUIOleWindow@@

.?AUIViewObject@@

.?AV?$_IDispEventLocator@$00$1?DIID__IDispServEvents@@3U_GUID@@B@ATL@@

.?AUIUnknown@@

.?AUIRegistrarBase@@

.?AVCComControlBase@ATL@@

.?AVCAtlException@ATL@@

.?AV?$IProvideClassInfo2Impl@$1?CLSID_DispCtl@@3U_GUID@@B$0A@$1?LIBID_DISPCLIENTLib@@3U2@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@

.?AV?$CComObject@VCDispCtl@@@ATL@@

.?AUIOleControl@@

.?AUIPersistStorage@@

.?AUIDispatch@@

.?AU?$CAtlValidateModuleConfiguration@$00VCDispClientModule@@@ATL@@

.?AVCDispClientModule@@

.?AV?$CComAggObject@VCDispCtl@@@ATL@@

.?AUIPersist@@

.?AV?$IOleInPlaceActiveObjectImpl@VCDispCtl@@@ATL@@

.?AV?$CComControl@VCDispCtl@@V?$CWindowImpl@VCDispCtl@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@@ATL@@

.?AVCMessageMap@ATL@@

.?AUIProvideClassInfo@@

.?AV?$CComCoClass@VCDispCtl@@$1?CLSID_DispCtl@@3U_GUID@@B@ATL@@

.?AV?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@

.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@

.?AUIDataObject@@

.?AV?$CWindowImpl@VCDispCtl@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@

.?AV?$CWindowImplRoot@VCWindow@ATL@@@ATL@@

.?AV?$IOleObjectImpl@VCDispCtl@@@ATL@@

.?AV?$IQuickActivateImpl@VCDispCtl@@@ATL@@

.?AVCDispCtl@@

.?AU_ATL_MODULE70@ATL@@

.?AV?$CAtlModuleT@VCDispClientModule@@@ATL@@

.?AUISpecifyPropertyPages@@

.?AVCWindow@ATL@@

.?AV?$IDispEventImpl@$00VCDispCtl@@$1?DIID__IDispServEvents@@3U_GUID@@B$1?GUID_NULL@@3U3@B$0A@$0A@VCComTypeInfoHolder@ATL@@@ATL@@

.?AV?$CAtlDllModuleT@VCDispClientModule@@@ATL@@

.?AV?$ISpecifyPropertyPagesImpl@VCDispCtl@@@ATL@@

.?AUIProvideClassInfo2@@

.?AV_IDispEvent@ATL@@

.?AUIViewObjectEx@@

.?AVCAtlModule@ATL@@

.?AV?$IDispatchImpl@UIDispCtl@@$1?IID_IDispCtl@@3U_GUID@@B$1?LIBID_DISPCLIENTLib@@3U3@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@

.?AVCRegObject@ATL@@

.?AV?$IDataObjectImpl@VCDispCtl@@@ATL@@

.?AV?$IOleInPlaceObjectWindowlessImpl@VCDispCtl@@@ATL@@

.?AUIOleInPlaceObjectWindowless@@

.?AVCComClassFactory@ATL@@

.?AUIDispCtl@@

.?AV?$CComContainedObject@VCDispCtl@@@ATL@@

.?AUIOleObject@@

.?AVCComObjectRootBase@ATL@@

.?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@

.?AUIOleInPlaceObject@@

.?AUIOleInPlaceActiveObject@@

.?AV?$IPersistStorageImpl@VCDispCtl@@@ATL@@

.?AUIPersistStreamInit@@

<?xml version='1.0' encoding='UTF-8' standalone='yes'?>

</requestedPrivileges>

</security>

</trustInfo>

</assembly>

0(060;0I0N0Z0d0E1S1

34.4!5?5I5X5b5{5

6717=7l7x7

9(:::W:r:

>$?7?R?V?Z?^?b?f?

1!1(1h1

2#2'2-212@2I2R2]2i2

3*373D3W3^3d3k3u3

9\:v:P;

;c<+=F=m=

&010H0[0k0

2^2u2o3

8$8)8k8v8

5'6<6D6J6

9&:.:4:=:D:P:

<9<J<Z<c<

=#=R=^=

>#>8>B>H>X>#?(?2?7?A?G?b?k?q?{?

0J1]1i1{1

4'545E5{5

7<8V8b8

151A1p1|1

2!242f2:4G4M4

4B5O5m5

8*969e9q9

<2=:=E=X=

?>?J?v?

999~9A:

;5;Y;n;

<Z<e<k<

="='===

>%?8?=?P?

1'1,1Y1h1

1'292S2

:V;\;e<k<

?!?H?k?q?

737@7T7Z7

8$8T8b8v8|8

8)9B9H9O9V9]9d9k9r9|9

;L<T<\<d<l<t<|<

=2=N=_=o=

>4?<?m?

1#1/1C1r1

;&;d;n;

>#>)>/>5>;>A>G>M>S>Y>_>e>k>q>w>}>

??%?+?1?7?=?C?I?O?U?[?a?g?m?s?y?

0$0*00060<0B0H0N0T0Z0`0f0l0r0x0~0

1 1&1,12181>1D1J1P1V1\1b1h1n1t1z1

2"2(2.242:2@2F2L2R2X2^2d2j2p2v2|2

3$3*30363<3B3H3N3T3Z3`3f3l3r3x3~3

4 4&4,42484>4D4J4P4V4\4b4h4n4t4z4

5"5(5.545:5@5F5L5R5X5^5d5j5p5v5|5

6$6*60666<6B6H6N6T6Z6`6f6l6r6x6~6

7$7-7>7L7[7a7l7q7

8!83888J8O8a8f8

949=9V9e9

:):6:<:O:`:f:

;!;(;9;@;P;m;

<$<+<Z<w<

=\=&>>>X>

2(2?2K2g2{2

3-3K3^3o3

8@9G9c9t9x9|9

;3;I;T;a;~;

= =&=5=<=A=J=O=X=l=t=z=

> >&>0>?>G>S>d>k>

?$?,?3?;?D?K?V?\?c?q?z?

00(0-030=0G0W0g0w0

1#1(1.181B1U1Z1

202?2g2n2

6+676G6X6n6

6)767]7e7~7

9+:_;g;u<

= >.>I>T>

>5?I?P?

0K0T0m0s0y0

1$2>2O2`2w2

;&<k<p<t<x<|<

>(?-?K?e?m?

44$4(4,404

9.:D;b;

<9<a<u<

;K<P<{<

>%>H>W>\>d>

?'?m?r?w?

0+070C0W0m0

0+1D1f1

2*23282=2X2b2n2s2x2

3"3*3/3:3]3o3{3

506?6V6[6c6k6r6w6|6

<,<T<Z<~=

2/2I2R2]2

8(969D9R9`9n9|9

:3:A:P:a:o:z:

;&;E;Z;

<%<.<3<H<

0F0P0Z0d0n0

1 1n1u1

2I2M2Q2U2Y2]2

3)303e3{3

5'6L6W6

;!;&;>;N;h;y;

<"<4<U<m<

<K=Z=m=s=

?>?E?]?

04090@0G0N0[0d0

1/2_2x2}2

3K4U4n4s4

8N8p8u8

<<S<`<h<{=

>">,>I>T>j>

?0?4?8?L?j?

D0t0~0

1(1>1Z1_1l1

4D4K4_4

;";6;J;b;

<"<1<h<n<

=0=R=_=

>!>7>d>q>

1$171T1

2$2*262B2P2

3 4>4V4

9$9N9Y9

:#:=:[:g:t:

;.;7;W;

<1=<=F=K=b>

?(?-?2?J?h?{?

171Y1m1

=!=5=J=c=w=

>&>:>L>e>{>

?.?D?Y?r?

/656;6A6G6M6S6Y6_6e6k6q6v<

="=&=*=

=>>B>F>J>N>R>V>Z>

>R?V?Z?^?b?f?j?n?

v0z0~0

5"5&5*5.525

52666:6>6B6F6J6N6

6Z7^7b7f7j7n7r7v7

7!8(8E8I8M8Q8U8'9

<?<E<K<Q<W<]<c<i<o<u<{<

78<N<a<

3.3A3T3

4$4+474O4T4`4e4y4

6&676I6p6

879@9y9

?)?/?9?R?[?e?~?

<O<f<q<y<

=8===i=z=

=+>Z>h>r>

?1?T?b?n?

3!3'3-33393?3f3

5!6<8B8J8V8

8,9`9k9u9

7[7k7@9

=#=P=Y=_=j=

>)>4>`>{>

>%?7?P?[?

=?=D=J=P=V=a=f=k={=

>!>1>6>;>K>P>U>e>j>o>

? ?%?5?:???O?T?Y?i?n?s?

00$0)090>0C0S0X0]0m0r0w0

1 1,1@1V1|1

2,2F2h2

3+3D3I3N3k3

55:5I5T5Y5^5y5

6)6.636K6z6

777I7_7d7i7

:+:0:5:P:

;.;<;A;L;o;{;

<&<2<z<

<1=7=N=

1+1P1e1

2,2K2`2|2

5)6l6>7X7

8'898L8f8

9$9E9n9

:.:>:K:t:{:

;#;-;O;`;j;p;

4'4"6S6

9*9?9U9b9p9~9

;P<b<h<c=

=$>[>m>

161=1H1V1]1c1~1

7%8@8J8

97:>:E:L:l:{:

041:1@1F1L1R1

1.2D2L2j2u2

2%3-3L3i3{3

7+858;8E8U8u8

8W9q9v9

]0t0o1

3D3K3b3x3

454H4R4k4

4"585s5z5

7v8}9{<

=0=B=T=f=x=

2,2>2z244;4C4K4S4

+0d0{0

8;9f97:

:N;W;z;

0=0N0W0

:":==2>:>q>x>

52*323i3p3p6

?4?;?R?h?u?z?

485w5-7

9c:=;j;

4 5)5\5y5

7J8l8P9

7%8D8P8

;';4;d;

?I?S?}?

0n1Q2w3

748H8k8

0@0a0u0

0C1j234;4

2)3+4Q4V4i4x4

6*626O6_6k6z6

878T8h8s8

:6;V;f;z;

>->X>s>

?$?H?}?

J0}0L1

6#616B6Z6`6l6

9q:B;U;

;F=L=R=X=^=d=j=p=

989[9~9

<&<A<\<f<

=$=G=b=}=

>>:>U>p>

?2?M?h?

60Q0l0

1%1H1k1

2$2.2O2r2

3'3B3]3x3

86@6D6H6L6P6T6X6d6h6l6p6t6x6

7 7$7(7<7@7D7`7

9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9

: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:

P4T4X4\4`4d4h4l4p4t4x4|4

8 8(8,8084888<8@8D8L8P8T8X8\8`8d8h8t8|8

; ;$;(;,;0;4;

4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4

5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5

1(141@1L1X1d1p1|1

2$202<2H2T2`2l2x2

3 3,383D3P3\3h3t3

4 4,484D4P4\4h4t4

?$?,?4?<?D?L?T?\?d?l?t?|?

0$0,040<0D0L0T0\0d0l0t0|0

1$1,141<1D1L1T1\1d1l1t1|1

2$2,242<2D2L2T2\2d2l2t2|2

3$3,343<3D3L3T3\3d3l3t3|3

4$4,444<4D4L4T4\4d4l4t4|4

5$5,545<5D5L5T5\5d5l5t5|5

0 0(00080@0H0P0X0`0h0p0x0

1 1(10181@1H1P1X1`1h1p1x1

2 2(20282@2H2P2X2`2h2p2x2

3 3(30383@3H3P3X3`3h3p3x3

4 4(40484@4H4P4X4`4h4p4x4

5 5(50585@5H5P5X5`5h5p5x5

6 6(60686@6H6P6X6`6h6p6x6

5$5,545<5D5L5T5\5d5

;@<D<d<h<

= =$=(=,=0=4=H=L=P=T=X=\=`=d=h=l=p=

=P>T>X>\>`>t>x>|>

? ?$?(?,?0?4?8?<?P?T?X?\?`?d?h?l?p?t?x?|?

0 0$0(0,0004080<0P0T0X0\0`0d0h0l0p0t0x0|0

1 1$1(1,1014181<1@1D1H1L1P1T1X1`1h1p1x1

2 2$2(2,2024282<2D2L2t2x2|2

203<3H3T3`3l3x3

4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4

5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5

6 6$6@6

7(8,80848L8P8`8d8l8

9(9,9<9@9D9H9P9h9x9|9

: :$:(:0:H:X:\:l:p:t:|:

;,;<;@;P;T;X;`;x;|;

<(<8<<<@<X<\<`<d<h<p<t<x<

=,=<=@=D=H=L=T=l=p=

>4>D>T>X>h>l>p>t>x>

?$?4?8?H?L?d?t?x?|?

0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0l0t0

1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1

2 2$2<2L2P2T2X2l2p2

3(383H3X3\3`3h3

444D4T4X4h4l4|4

545D5T5X5\5t5x5

6 6(6@6D6\6l6|6

7 7$7(7,74787<7@7D7X7\7t7x7|7

8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8

9 9094989<9@9D9X9\9t9x9

:0:4:L:\:l:p:

;,;0;8;<;D;\;`;x;|;

<4<8<P<T<l<p<

= =8=H=L=P=h=x=|=

> >$>8><>T>X>p>t>x>|>

? ?0?4?8?<?P?T?l?p?

0,00040L0\0`0t0x0

1,101H1X1\1`1x1

20242L2P2h2l2

3 383H3L3P3h3x3|3

4 484<4@4D4H4P4h4l4

5,5054585<5@5H5`5d5h5l5t5

6$64686<6T6X6\6d6|6

>8>D>d>l>x>

?,?8?X?d?

0(040T0`0

4 4@4L4l4P5p5x5

787X7d7

8,888@8`8|8

9$9D9t9

:<:D:L:T:h:

: ;<;@;\;`;

<0<L<P<p<x<|<

=4=8=@=H=P=T=\=p=

>8>X>x>

?8?X?d?

0 0@0`0

1 1@1`1

2 2@2`2

3 3@3\3`3

4 4@4\4`4p4x4

1H1X1h1x1

187<7@7D7H7L7P7T7X7\7`7d7p7t7x7|7

303L3d3

4,4H4h4

> ?L?p?

Greater Manchester1

Salford1

Comodo CA Limited1!0

AAA Certificate Services0

040101000000Z

281231235959Z0{1

Greater Manchester1

Salford1

Comodo CA Limited1!0

AAA Certificate Services0

2http://crl.comodoca.com/AAACertificateServices.crl06

0http://crl.comodo.net/AAACertificateServices.crl0

DigiCert Inc1

www.digicert.com110/

(DigiCert SHA2 Assured ID Timestamping CA0

210101000000Z

310106000000Z0H1

DigiCert, Inc.1 0

DigiCert Timestamp 20210

http://www.digicert.com/CPS0

,http://crl3.digicert.com/sha2-assured-ts.crl02

,http://crl4.digicert.com/sha2-assured-ts.crl0

http://ocsp.digicert.com0O

Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0

QJxy6z'

dwc_#Ri

DigiCert Inc1

www.digicert.com1$0"

DigiCert Assured ID Root CA0

160107120000Z

310107120000Z0r1

DigiCert Inc1

www.digicert.com110/

(DigiCert SHA2 Assured ID Timestamping CA0

fnVa')

http://ocsp.digicert.com0C

7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0

4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:

4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P

https://www.digicert.com/CPS0

8aMbF$

V3"/"6

Greater Manchester1

Salford1

Comodo CA Limited1!0

AAA Certificate Services0

210525000000Z

281231235959Z0V1

Sectigo Limited1-0+

$Sectigo Public Code Signing Root R460

H/(@Bp 6

2http://crl.comodoca.com/AAACertificateServices.crl04

http://ocsp.comodoca.com0

Sectigo Limited1-0+

$Sectigo Public Code Signing Root R460

210322000000Z

360321235959Z0T1

Sectigo Limited1+0)

"Sectigo Public Code Signing CA R360

FFlCx@

H/(@Bp 6

:http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0{

:http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#

http://ocsp.sectigo.com0

ts7!:o

n0PPd}

Sectigo Limited1+0)

"Sectigo Public Code Signing CA R360

210908000000Z

220908235959Z0r1

Victoria1'0%

SAN MARINO INVESTMENTS PTY LTD1'0%

SAN MARINO INVESTMENTS PTY LTD0

https://sectigo.com/CPS0

8http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y

8http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#

http://ocsp.sectigo.com0

T48T[A

HBu7Pml

Sectigo Limited1+0)

"Sectigo Public Code Signing CA R36

DigiCert Inc1

www.digicert.com110/

(DigiCert SHA2 Assured ID Timestamping CA

210922081953Z0/

N`3^]O

ERROR : Unable to initialize critical section in CAtlBaseModule

EForceRemove

ENoRemove

EDelete

api-ms-win-core-synch-l1-2-0.dll

kernel32.dll

Eapi-ms-win-core-fibers-l1-1-1

api-ms-win-core-synch-l1-2-0

kernel32

api-ms-

ext-ms-

(null)

mscoree.dll

BRuntime Error!

Program:

Microsoft Visual C++ Runtime Library

CLC_ALL

LC_COLLATE

LC_CTYPE

LC_MONETARY

LC_NUMERIC

LC_TIME

Eapi-ms-win-core-datetime-l1-1-1

api-ms-win-core-fibers-l1-1-1

api-ms-win-core-file-l1-2-2

api-ms-win-core-localization-l1-2-1

api-ms-win-core-localization-obsolete-l1-2-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-xstate-l2-1-0

api-ms-win-rtcore-ntuser-window-l1-1-0

api-ms-win-security-systemfunctions-l1-1-0

ext-ms-win-ntuser-dialogbox-l1-1-0

ext-ms-win-ntuser-windowstation-l1-1-0

advapi32

kernel32

api-ms-win-appmodel-runtime-l1-1-2

user32

api-ms-

ext-ms-

Sunday

Monday

Tuesday

Wednesday

Thursday

Friday

Saturday

January

February

August

September

October

November

December

MM/dd/yy

dddd, MMMM dd, yyyy

HH:mm:ss

Eja-JP

((((( H

(

american

american english

american-english

australian

belgian

canadian

chinese

chinese-hongkong

chinese-simplified

chinese-singapore

chinese-traditional

dutch-belgian

english-american

english-aus

english-belize

english-can

english-caribbean

english-ire

english-jamaica

english-nz

english-south africa

english-trinidad y tobago

english-uk

english-us

english-usa

french-belgian

french-canadian

french-luxembourg

french-swiss

german-austrian

german-lichtenstein

german-luxembourg

german-swiss

irish-english

italian-swiss

norwegian

norwegian-bokmal

norwegian-nynorsk

portuguese-brazilian

spanish-argentina

spanish-bolivia

spanish-chile

spanish-colombia

spanish-costa rica

spanish-dominican republic

spanish-ecuador

spanish-el salvador

spanish-guatemala

spanish-honduras

spanish-mexican

spanish-modern

spanish-nicaragua

spanish-panama

spanish-paraguay

spanish-peru

spanish-puerto rico

spanish-uruguay

spanish-venezuela

swedish-finland

america

britain

england

great britain

holland

hong-kong

new-zealand

pr china

pr-china

puerto-rico

slovak

south africa

south korea

south-africa

south-korea

trinidad & tobago

united-kingdom

united-states

zh-CHS

az-AZ-Latn

uz-UZ-Latn

kok-IN

syr-SY

div-MV

quz-BO

sr-SP-Latn

az-AZ-Cyrl

uz-UZ-Cyrl

quz-EC

sr-SP-Cyrl

quz-PE

smj-NO

bs-BA-Latn

smj-SE

sr-BA-Latn

sma-NO

sr-BA-Cyrl

sma-SE

sms-FI

smn-FI

zh-CHT

az-az-cyrl

az-az-latn

bs-ba-latn

div-mv

kok-in

quz-bo

quz-ec

quz-pe

sma-no

sma-se

smj-no

smj-se

smn-fi

sms-fi

sr-ba-cyrl

sr-ba-latn

sr-sp-cyrl

sr-sp-latn

syr-sy

uz-uz-cyrl

uz-uz-latn

zh-chs

zh-cht

CONOUT$

Software

Classes

Module

Module_Raw

REGISTRY

sOLEAUT32.DLL

YDisconnected

WAPPID

Contents

Static Analysis

PE Compile Time

PDB Path

PE Imphash

Sections

Resources

Imports