Static | ZeroBOX

PE Compile Time

2021-02-23 04:05:54

PDB Path

C:\fodixiw\yadilayuxawu\xumis\kog dorikomobe\95\wowulaw.pdb

PE Imphash

df9601abec2416ae7ecc0dd0d7272e84

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00015260 0x00015400 7.39118135296
.rdata 0x00017000 0x000044b6 0x00004600 4.10895665113
.data 0x0001c000 0x02ac41a0 0x00001800 2.99266872325
.rukina 0x02ae1000 0x00000272 0x00000400 0.0
.rsrc 0x02ae2000 0x0001e6f8 0x0001e800 6.30852743184

Resources

Name Offset Size Language Sub-language File type
AFX_DIALOG_LAYOUT 0x02afe550 0x00000002 LANG_NEUTRAL SUBLANG_NEUTRAL data
AFX_DIALOG_LAYOUT 0x02afe550 0x00000002 LANG_NEUTRAL SUBLANG_NEUTRAL data
AFX_DIALOG_LAYOUT 0x02afe550 0x00000002 LANG_NEUTRAL SUBLANG_NEUTRAL data
AFX_DIALOG_LAYOUT 0x02afe550 0x00000002 LANG_NEUTRAL SUBLANG_NEUTRAL data
AFX_DIALOG_LAYOUT 0x02afe550 0x00000002 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_CURSOR 0x02aff548 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x02aff548 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x02aff548 0x000008a8 LANG_NEUTRAL SUBLANG_NEUTRAL dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x02afe038 0x00000468 None SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_STRING 0x02b00390 0x00000362 LANG_BULGARIAN SUBLANG_DEFAULT data
RT_STRING 0x02b00390 0x00000362 LANG_BULGARIAN SUBLANG_DEFAULT data
RT_STRING 0x02b00390 0x00000362 LANG_BULGARIAN SUBLANG_DEFAULT data
RT_GROUP_CURSOR 0x02affdf0 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_CURSOR 0x02affdf0 0x00000022 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x02af7c78 0x00000068 None SUBLANG_DEFAULT data
RT_GROUP_ICON 0x02af7c78 0x00000068 None SUBLANG_DEFAULT data
RT_GROUP_ICON 0x02af7c78 0x00000068 None SUBLANG_DEFAULT data
RT_GROUP_ICON 0x02af7c78 0x00000068 None SUBLANG_DEFAULT data
RT_GROUP_ICON 0x02af7c78 0x00000068 None SUBLANG_DEFAULT data
RT_VERSION 0x02affe18 0x000001b4 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library KERNEL32.dll:
0x417008 EndUpdateResourceW
0x417010 SetEvent
0x417014 FlushViewOfFile
0x417018 ReadConsoleW
0x41701c GlobalAlloc
0x417020 Sleep
0x417024 InitAtomTable
0x417028 HeapCreate
0x41702c WriteConsoleW
0x417030 GetAtomNameW
0x417034 GetModuleFileNameW
0x417038 CreateActCtxA
0x41703c SetConsoleTitleA
0x417044 DeactivateActCtx
0x417048 SetLastError
0x41704c GetProcAddress
0x417050 VirtualAlloc
0x417058 LoadLibraryA
0x417060 GetModuleFileNameA
0x417064 GetOEMCP
0x41706c GetCPInfoExA
0x417074 Module32Next
0x417078 ReleaseMutex
0x41707c GetVersionExA
0x417080 FindNextVolumeA
0x417084 lstrcpyW
0x417088 LCMapStringW
0x41708c SetTapePosition
0x417090 HeapReAlloc
0x417098 RaiseException
0x41709c EncodePointer
0x4170a0 DecodePointer
0x4170a4 GetModuleHandleW
0x4170a8 ExitProcess
0x4170ac GetCommandLineW
0x4170b0 HeapSetInformation
0x4170b4 GetStartupInfoW
0x4170c0 IsDebuggerPresent
0x4170c4 TerminateProcess
0x4170c8 GetCurrentProcess
0x4170cc TlsAlloc
0x4170d0 TlsGetValue
0x4170d4 TlsSetValue
0x4170d8 TlsFree
0x4170e0 GetCurrentThreadId
0x4170e4 GetLastError
0x4170ec HeapAlloc
0x4170f0 ReadFile
0x4170fc HeapFree
0x417100 SetHandleCount
0x417104 GetStdHandle
0x41710c GetFileType
0x417114 SetFilePointer
0x417118 GetCPInfo
0x41711c GetACP
0x417120 IsValidCodePage
0x417124 CloseHandle
0x417128 LoadLibraryW
0x41712c WriteFile
0x417138 GetTickCount
0x41713c GetCurrentProcessId
0x417144 WideCharToMultiByte
0x417148 GetConsoleCP
0x41714c GetConsoleMode
0x417150 MultiByteToWideChar
0x417154 RtlUnwind
0x417158 SetStdHandle
0x41715c FlushFileBuffers
0x417160 GetStringTypeW
0x417164 HeapSize
0x417168 CreateFileW
Library USER32.dll:
0x417170 ClientToScreen
Library GDI32.dll:
0x417000 GetBitmapBits
Library WINHTTP.dll:
0x417178 WinHttpQueryOption

!This program cannot be run in DOS mode.
`.rdata
@.data
.rukina
@.rsrc
SSSSSS
uTVWhqb@
HHtXHHt
?If90t
j@j ^V
<+t"<-t
+t HHt
^SSSSS
QQSVWh
tRHtCHt4Ht%HtFHHt
URPQQh
t"SS9] u
;t$,v-
UQPXY]Y[
PPPPPPPP
PPPPPPPP
iIDJ+L?
>:8A>l
K-usyU
g%~d%/u\
x$PHC%B
t6P>xkO
V~WBp>'O
>$Mu61V
"+d<~N
7:UjAJ
b"G2w{9
*~e?KPa?j
EL/BMq
`8{\h!
@n*hp'
x];!@1
k3FOA*W
#'hiLZ
9MF3=~
a$c, CE
3y\<ne
:8d08=
w?='/\
I@veYv
k1HhRq
a0=lWx
<3L|9)
,T1<^%9
_K5W:],M
wHLSb
Ab i,G
PA\q{?
:DXXbm
L^yFH[
5YCjT{
kuV_rK!
|D}MhA
9}}|om0
V)bI:X e
&5^*e'
.peRd_
y\@\bp
+H;9V<
;%xO0|al
v*Yxw@N
G>+eQ-?\
f,6+A!H
+8%?q*'
9kY$Wf
jQj#W'
I2>+V.c
QQSVWd
t=MOC
HtHu4j
t*=RCC
;7|G;p
tR99u2
CorExitProcess
(null)
`h````
xpxxxx
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
`h`hhh
xppwpp
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
_nextafter
_hypot
1#QNAN
1#SNAN
rofaxecapetototogodeyavakazazeyamezitakisasadikilisacuwohobuhalopoponofaxizixeyukokefeziturubilajuyubavaganutayona
cehiwah manamuxezexemuwetesaxuzaduzawor
LocalAlloc
darujuwihunuyun zabebedidez zizofokajitaxipogejipubowexo gifitutatopumiduc deguvofagebifut
VirtualProtect
kernel32.dll
%s %f %c
bad exception
Unknown exception
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
C:\fodixiw\yadilayuxawu\xumis\kog dorikomobe\95\wowulaw.pdb
HeapReAlloc
SetProcessAffinityMask
EndUpdateResourceW
GetEnvironmentStringsW
SetEvent
FlushViewOfFile
ReadConsoleW
GlobalAlloc
InitAtomTable
HeapCreate
WriteConsoleW
GetAtomNameW
GetModuleFileNameW
CreateActCtxA
SetConsoleTitleA
SetTapePosition
DeactivateActCtx
SetLastError
GetProcAddress
VirtualAlloc
BeginUpdateResourceW
LoadLibraryA
SetEnvironmentVariableA
GetModuleFileNameA
GetOEMCP
CreateIoCompletionPort
GetCPInfoExA
SetProcessShutdownParameters
Module32Next
ReleaseMutex
GetVersionExA
FindNextVolumeA
lstrcpyW
LCMapStringW
KERNEL32.dll
ClientToScreen
USER32.dll
GetBitmapBits
GDI32.dll
WinHttpQueryOption
WINHTTP.dll
EncodePointer
DecodePointer
GetModuleHandleW
ExitProcess
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapAlloc
ReadFile
EnterCriticalSection
LeaveCriticalSection
HeapFree
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
GetCPInfo
GetACP
IsValidCodePage
CloseHandle
LoadLibraryW
WriteFile
FreeEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
RtlUnwind
SetStdHandle
FlushFileBuffers
GetStringTypeW
HeapSize
RaiseException
IsProcessorFeaturePresent
CreateFileW
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVtype_info@@
b;;:b:;;
::::;:::;:;:;:;;_;;:;::s?N
yywRR6y
>7 L< !6
,<<asc
Qo L<-;
"r>t\|
i+~i~~>
ppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp
pppppppppppppp
pppppppppppppp
oppppppppppppp
Lppppppppppppp
qppppppppppppp
W4974r9
pppppppppppppp
pppppppppppppp
pppppppppppppef6K
ppppppppppppp
ppppppppppppp~Z
ppppppppppppp
ppppppppppppp~@z
bppppppppppppp/
ppppppppppppp/ZW
bppppppppppppp
ppppppppppppp
ppppppppppppplZG
ppppppppppppp
4JpppppppppppppY&\
ppppppppppp
ppppppppppY}
pppppppppp
pppppppppp
pppppppppp
Jpppppppppp
pppppppppp
ppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp
yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyO1
yyyyyyyyyyyyyO
yyyyyyyyyyyyu
yyyyyyyyyyA8C7
yyyyyyyyyy
yyyyyyyyyy
yyyyyyyyyy
yyyyyyyyyy
yyyyyyyyyy
yyyyyyyyyy
&yyyyyyyyyyU
yyyyyyyyyy
z^&yyyyyyyyyy
9HyyyyyyyyyyU
)'9:yyyyyyyyyy
yyyyyyyyyyO
yyyyyyyy1
yyyyyyyyu
yyyyyyyyu
yyyyyyyyy1
ayyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
D9o%Z7b1
A~d>dIm
$yeA~>AI
Q^~~OU
=cs~iK;
4lx~mLS
Osv~YJJ
=kt~_ED
}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}o
p}}}}}}}}}}}}}}}}}}}}
}}}}}}}}}}}}}}}}}})[
}}}}}}}}}}}}}}}}
5}}}}}}}}}}}}}}}&f
m}}}}}}}}}}}}}}
Mz}}}}}}}}}}}}}}}
}}}}}}}}}}}}}}}
}}}}}}}}}}}\
}}}}}}}}}}?$D
}}}}}}}}}}@
h7jN]j
}}}}}}}}}}}}
}}}}}}}}}}}}
xb.}}}}}}}}}}}}}C
}}}}}}}}}}}}:
1}}}A/
BKq}}}}}}}}}}}}@
}}}}}?%b
A}}}}}}}}}}}}}}}}}}T
}}}}}}}}}}}}}}}}}}
q}}}}}}}}}}}}}}}}}}
}}}}}}}}}}}}}}}}}}q
Y}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
ffpsIq
0N.5+
4+-``Dg`>
XQE=\^jK
ccccccccccccccccccccccccccccccccccccccccccccccccc_
ccccc8
cccccc}
ccccccc
$ccccccc
cccccccc
zcccccccccc
cccccccc
Cg~P8}
+Lmx`B
'm~~<S_
+2ROac
jjZjiA
dl:fdBz`
///$1s
$$sssp
MMGGGMMMGGMG
PDhGha
cc:@^z@@@B
(t%##=t
VjBjBBBj
<C2;ruz~~
Zd~$Fd
P`M<y|{
iiiiii
iiiiii
iiiiiiiiiiii
iiiiiiiiii
iiiiii
iiiiiiiii
iiiiiiiiiiiii
iiiiiiii

mscoree.dll
(null)
KERNEL32.DLL
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
@runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
AMicrosoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
((((( H
h(((( H
H
WUSER32.DLL
pCONOUT$
nohacekadavinanaruze
xa xogegewe xejaxegexakeboxa nuworewurekihevab
AFX_DIALOG_LAYOUT
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
StringFileInform
080824a0
InternalName
natgpiamizu.iwa
Copyright
Copyrighz (C) 2021, fudkagat
ProductVersion
91.40.21.87
VarFileInfo
Translation
9Wedopabase guze mahucugawo gep wofi nujuvo jujanarocavifa1Xujenuxiwihudi meyi xigokamileyo lak guyomini gumCCujepogotujoded povafegubim royarudora fatic danihusu taravisoyijes
Vuzotuzul vujelu
Masepucec rajetofojeyezuw+Gawus mogojijorozar kedoha dirob kemaduyihoAWisirucayozo modutezehivuje lirud popimebakido gamum hidiharikozo
JijerepotuvNHetudu jebigimefixiful vodaxehaxoxuluv katayorazaj hibe renudixu lugujijeyovob
Jexapize lajemuzuhoj xexadur zuy
KujoxijodemWehawe datubu wolaloziz lohumaruxebac legagokif kuduhoyatoluz letutih tahebamuwomajug bokobesoxac menavijowem#Soxusefejig jujerosigetobe yute suy
Cofucub
Hegikugakehikaj
3Niworezilob zoxajahi fet lozaxu feneye hibocabobopoWTupebenetituk xeciva cucoloyo doxigo boxebozofilifom herukav dijavepiveyacet giwoja bopETujecivaxig lewekerutefa jor nozax keruwehowageg ruruyab gaped zehama
Neruvosodoxe toxe texazadimut
No antivirus signatures available.
No IRMA results available.