Static | ZeroBOX

PE Compile Time

2014-12-02 19:07:13

PDB Path

d:\Projects\WinRAR\rar\build\rar32\Release\RAR.pdb

PE Imphash

1324fa350b5f878451cc28b429b96e9b

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000640d0 0x00064200 6.58789271607
.rdata 0x00066000 0x0000688c 0x00006a00 4.85745861351
.data 0x0006d000 0x0001fe04 0x00002000 3.72047406211
.rsrc 0x0008d000 0x00007918 0x00007a00 3.54036695293
.reloc 0x00095000 0x000036fa 0x00003800 5.42739882562

Resources

Name Offset Size Language Sub-language File type
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00094748 0x000001cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x0008dfb8 0x000002b8 LANG_ENGLISH SUBLANG_ENGLISH_US COM executable for DOS
RT_MANIFEST 0x0008d9f0 0x000005c1 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x466038 GetLastError
0x46603c LocalFree
0x466040 FormatMessageW
0x466044 CreateFileW
0x466048 CloseHandle
0x46604c BackupRead
0x466050 GetCurrentProcess
0x466054 BackupSeek
0x466058 CreateHardLinkW
0x46605c SetFileTime
0x466060 DeviceIoControl
0x466064 FindClose
0x466068 FindFirstFileW
0x46606c DeleteFileW
0x466070 RemoveDirectoryW
0x466074 CreateDirectoryW
0x466078 MoveFileW
0x46607c GetShortPathNameW
0x466080 GetLongPathNameW
0x466084 SetFilePointer
0x466088 SetEndOfFile
0x46608c GetFileTime
0x466090 ReadFile
0x466094 FlushFileBuffers
0x466098 GetDriveTypeW
0x46609c GetDiskFreeSpaceExW
0x4660a4 GetFileAttributesW
0x4660a8 SetFileAttributesW
0x4660b0 FindNextFileW
0x4660b4 GetVersionExW
0x4660b8 GetModuleFileNameW
0x4660c0 GetFullPathNameW
0x4660c4 SetErrorMode
0x4660c8 FreeLibrary
0x4660cc LoadLibraryW
0x4660d0 LoadLibraryExW
0x4660d4 GetCurrentProcessId
0x4660d8 CompareStringA
0x4660dc Sleep
0x4660e0 GetCurrentThread
0x4660e4 SetPriorityClass
0x4660ec GetFullPathNameA
0x466100 CreateThread
0x466104 WaitForSingleObject
0x46610c CreateEventW
0x466110 CreateSemaphoreW
0x466114 ReleaseSemaphore
0x466118 ResetEvent
0x46611c SetEvent
0x466124 GetSystemTime
0x46613c WideCharToMultiByte
0x466140 MultiByteToWideChar
0x466144 CompareStringW
0x466148 IsDBCSLeadByte
0x46614c GetCPInfo
0x466150 CreateFileA
0x466154 GetConsoleOutputCP
0x466158 WriteConsoleA
0x466160 GetLocaleInfoA
0x466164 GetStringTypeW
0x466168 WriteFile
0x46616c WriteConsoleW
0x466170 SetConsoleMode
0x466174 ReadConsoleW
0x466178 GetStdHandle
0x46617c GetFileType
0x466180 GetConsoleMode
0x466184 GetCommandLineW
0x466188 GetModuleHandleW
0x46618c GetProcAddress
0x466194 SetThreadPriority
0x466198 SetLastError
0x46619c GetStringTypeA
0x4661a0 GetTickCount
0x4661b0 HeapFree
0x4661b4 HeapReAlloc
0x4661b8 HeapAlloc
0x4661bc RtlUnwind
0x4661c0 RaiseException
0x4661c8 ExitProcess
0x4661cc GetCommandLineA
0x4661d0 TerminateProcess
0x4661dc IsDebuggerPresent
0x4661e0 HeapCreate
0x4661e4 VirtualFree
0x4661e8 VirtualAlloc
0x4661ec TlsGetValue
0x4661f0 TlsAlloc
0x4661f4 TlsSetValue
0x4661f8 TlsFree
0x466200 GetCurrentThreadId
0x466208 GetACP
0x46620c GetOEMCP
0x466210 IsValidCodePage
0x466214 GetModuleFileNameA
0x466218 SetHandleCount
0x46621c GetStartupInfoA
0x466220 SetStdHandle
0x466224 GetConsoleCP
0x466228 LoadLibraryA
0x466230 HeapSize
0x466234 LCMapStringA
0x466238 LCMapStringW
Library USER32.dll:
0x46625c CharUpperW
0x466260 CharLowerW
0x466264 MessageBeep
0x466268 ExitWindowsEx
0x46626c CharLowerA
0x466270 LoadStringW
0x466274 CharToOemBuffW
0x466278 CharToOemBuffA
0x46627c OemToCharBuffA
0x466280 OemToCharA
0x466284 CharToOemA
Library ADVAPI32.dll:
0x466000 RegQueryValueExW
0x466004 RegCloseKey
0x466008 SetFileSecurityW
0x46600c GetFileSecurityW
0x466014 OpenProcessToken
0x466024 CryptGenRandom
0x466028 CryptReleaseContext
0x46602c RegOpenKeyExW
Library SHELL32.dll:
0x466248 SHGetMalloc
0x466254 SHFileOperationW

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
SUWPSUWP
u18^Lu,
t$ ;t$
D$ ;D$
9L$Dr"
vg9D$lra)L$l3
A9H0u0V
T$DSUVWj
T$h_^]
VjdVjd
u28\$lu,
t6h`!@
D$,,zF
l$ 9\$
9t$HvN
F;t$Hr
D$\,zF
\$,9\$H
U<PSQR
8\$'tE
PVhddF
D$,;D$H
9\$ ~;j
9\$(ut9\$`unhF
t+9n,t
O8;N8s
SSSSSj
_P;>vAU
f9t/f9_
D$ SUVW
D$,SUVW
D$(RPP
D$08D$
BRWWPj
D$,,zF
D$P+L$
|$$VUS
\$ GWSU
t$$VSU
3t$83|$<3\$@3
T$$3T$D_1Q
T$$3T$D^1Q
L$$3L$D
\$tUVW
D$XPj,
L$<;L$
j@hxfF
#8\$<u
QSUVWj
_^][uh
T$ RHPUV
L$$PQh
T$ WPQ
RPh0iF
L$xQRW
D$XPQR
L$8_^][3
L$0_^[3
\$XVWjLj
|$`jLj
_^][u$
;D$,sc
f9tMj
D$49\$
|$XPWW
Wu&h(kF
u&h(kF
u&h(kF
|$\WhV
PQhddF
u'hxeF
sAWCSUV
L$ RPVQ
l$4r@w
D$ _^][
T$ Rh@
L$`;L$,u
T$p;T$<u
D$t;D$@t
T$ hdlF
L$|_^[3
T$,PRQh
9l$(v$h
@;D$ v
L$P^]3
u5;t$,v
\$$VSW
t$(GVSW
L$LRPQ
l$,VVUSW
VWh@RB
T$(RQP
D$PPQR
RhhmF
L$XQhPmF
T$|Rh@mF
PWhpqF
PWhpqF
PWhpqF
PWhpqF
PVhpqF
tUhTqF
t)UWSV
L$ UV+
+u,;D$
wF;D$4w@
;D$ s$
;T< ~
D$(8D$
L$(8L$
D$ +D$
|$4+|$
;\$<s]
;\$<s9
D$<9D$
L$49L$
,;D$ v
u-9T$,s'9T$0s!9T$4s
D$$;D$T
|$(F;t$\
L$PUPQ
T$(_^][;
D$0;\$$sn
T44G;|$
+u,;D$
;l$$}#
wF;D$4w@
l$ ;D$
9\$ u`3
(;T<(~
L$$9)t
L$$WSR
L$ UWS
D$$8D$
L$$8L$
D$ +D$
D$ UPV
L$$9L$@
|$H+|$$
T$ J9T$(u
D$L8D$
;\$PsW
;t$Ps6
;D$Ps
D$(;D$
L$H9L$$
VWj;P3
L$$QUVCS
|$8SWU
L$0RPQh0sF
|$(9|$
D$<;|$
L$@PUQ
D$ QRj
RPh0sF
L$$9L$
L$@PQU
;L$ uk
;T$$ub9x
:[u(UWj
l$0t3j
D$ ;D$,
L$$A;L$0
T$(_^]
;L$ sZ
)|$ )FH
t;~8w.
PQSUVW
P8T$t`
;t$$t
|$$E;l$
D$0H9D$(u
|$HQRUW
u ;t$4t
T$<QRUWh
9n$vP3
D$8SUVW
;~,si
9n$v@3
tOh tF
;l$4tK
L$4hXkF
u ;t$<t
L$@PQUWh
D$0H9D$,u
9\$$~d
C;\$$|
L$,9M$
D$ +D$4
D$0SVP
t$,;u$
t$4QRWV
u ;\$<t
T$ QRWVh
9M,v=3
\$(9^$
u.8D$#u
D$(;F$
9^,v?3
D$8+D$0
D$8+D$0
D$,RUP
D$(;F$r
\$0RPUS
u ;|$,t
D$DRPUSh
|$@;t$<
L$(;D$$u
;T$(tO
D$ 9\$
D$4;D$<
T$ _^][
RPh4tF
8\$Xt1
D$ )D$8
|$L+|$
D$<SUVW
T$XRPQ
D$d+D$h
L$$RPQ
RPh4tF
RPh4tF
L$8PQj
D$(Vji
;D$ds]
t'hXkF
L$4+L$\
RPh4tF
UjdUjd
RPh4tF
D$DPWS
T$HRWS
RWQPRW
RPh4tF
9D$8sW
|$0@G;D$T
D$,;D$<r
WjdWjd
RPh4tF
L$DWWj
D$,;D$<r
L$$PQU
RPh4tF
D8,QRP
RPh4tF
D$$SUV
L$4_^][3
L$0_^[3
~ 3|$<
~$3|$@
3Y 3i$
3t$L3|$P3\$T3l$X
u[9~$t*
L$(Qh@rF
tBSSSj
T$,3l$X
T$<3l$P
T$ 3l$T
T$T3l$X
\$X3|$
|$T3|$P
l$X3|$D
\$T3|$0
l$\3|$H
3|$43l$\3|$,#l$T
|$$3|$8
\$X3|$0
|$(3|$<
\$\3|$4
\$T3|$<3x
\$P3|$@
|$H3l$\
|$ 3|$
|$$3|$
|$(3|$
3|$(3l$\3x$
|$\3P4
3|$X3|$\
l$X#l$\#|$P
#\$\#l$T
\$T3P8
l$T#l$P
\$X3P(#\$T
l$P#l$X
|$X3P8
l$X#l$\
\$\3P0
#\$\#l$T
\$P3P8
l$T#l$P
\$P3P(
l$P#l$X
l$X#l$\
#\$\#l$T
\$T3P8
l$T#l$P
\$P3P$
l$P#l$X
|$\3P(#|$P
l$X#l$\
t$T3P
3P4#t$
\$T#\$P
\$T3|$\
\$X3P(
\$P3P4
l$X3P0
L$$_^][3
T$,VWR
D$$;|$(si
L$t_^3
"u'f9M
t%h@wF
D$@9|$$
9.vrSW
T$8PQh@yF
T$4PQh
V QRhr
F QRPh
F QRPh
V Rh,cF
UQRPVS
L$ _^[3
~L9FPs
D$ ,zF
C;l$(s4
D$ ,zF
B#T$ E
t$\Wj@3
D;D$`s
PQSUVW
@v4;E
@v3;E
D$ Pt"W
D$$PSU
Wp9oTs]
Gp+D$
_p9T$ sQ
F;t$Lr
!Vp;F||z
Vp9nTsW
9T$,sX
9l$ vf
!Fp;N|~
QQSVWd
u)jAXf;
PPPPPPPP
0SSSSS
HtHu4j
s[S;7|G;w
tR99u2
0A@@Ju
j@j ^V
HHtXHHt
>If90t
t"SS9]
>=Yt1j
URPQQh
;t$,v-
UQPXY]Y[
0SSSSS
PPPPPPPP
0SSSSS
^SSSSS
j"^SSSSS
t+WWVPV
0WWWWW
AAFFf;
bad allocation
CompareStringOrdinal
DateMax:
VersMax:
Version:
70c2441db366d92ea7be1342b3bf629026ba92bb675f06e684bdd34511097434
0123456789abcdef
*<-?->
?*<>|"
Protect+
Protect!
*messages***
CryptUnprotectMemory
CryptProtectMemory
SetDllDirectoryW
MAPIFreeBuffer
MAPIResolveName
MAPISendMail
Z2fQ`1
Unknown exception
CorExitProcess
bad exception
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
(null)
`h````
xpxxxx
`h`hhh
xppwpp
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
d:\Projects\WinRAR\rar\build\rar32\Release\RAR.pdb
SetLastError
GetFileInformationByHandle
GetProcAddress
GetModuleHandleW
GetCommandLineW
GetConsoleMode
GetFileType
GetStdHandle
ReadConsoleW
SetConsoleMode
WriteConsoleW
WriteFile
SetConsoleCtrlHandler
GetLastError
LocalFree
FormatMessageW
CreateFileW
CloseHandle
BackupRead
GetCurrentProcess
BackupSeek
CreateHardLinkW
SetFileTime
DeviceIoControl
FindClose
FindFirstFileW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
MoveFileW
GetShortPathNameW
GetLongPathNameW
SetFilePointer
SetEndOfFile
GetFileTime
ReadFile
FlushFileBuffers
GetDriveTypeW
GetDiskFreeSpaceExW
GetVolumeInformationW
GetFileAttributesW
SetFileAttributesW
ExpandEnvironmentStringsW
FindNextFileW
GetVersionExW
GetModuleFileNameW
GetCurrentDirectoryW
GetFullPathNameW
SetErrorMode
FreeLibrary
LoadLibraryW
LoadLibraryExW
GetCurrentProcessId
CompareStringA
SetThreadPriority
GetCurrentThread
SetPriorityClass
SetCurrentDirectoryW
GetFullPathNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
WaitForSingleObject
GetProcessAffinityMask
CreateEventW
CreateSemaphoreW
ReleaseSemaphore
ResetEvent
SetEvent
SystemTimeToFileTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
GetCPInfo
KERNEL32.dll
OemToCharA
OemToCharBuffA
CharToOemA
CharToOemBuffA
CharToOemBuffW
LoadStringW
CharLowerA
ExitWindowsEx
MessageBeep
CharLowerW
CharUpperW
USER32.dll
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GetSecurityDescriptorLength
GetFileSecurityW
SetFileSecurityW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ADVAPI32.dll
SHFileOperationW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
SHELL32.dll
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
SetStdHandle
GetConsoleCP
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapSize
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
CreateFileA
.?AVbad_alloc@std@@
.?AVexception@std@@

upTXzF
.?AW4RAR_EXIT@@
FFF))EE
FFFF))))))
(08@P`p
(08@P`p
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="1.0.0.0"
processorArchitecture="*"
name="WinRAR"
type="win32"/>
<description>WinRAR archiver</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"/>
</dependentAssembly>
</dependency>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!--The ID below indicates application support for Windows Vista -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!--The ID below indicates application support for Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<!--The ID below indicates application support for Windows 8 -->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!--The ID below indicates application support for Windows 8.1 -->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
</application>
</compatibility>
</assembly>
0{1d2q2
3"353d4,5054585
6"646u6
6b7S8e8w8
7S;i;{;
<(<;<B>m>
9R:Z:o:u:~:
;O<T<a<
< =.=;=
#090g0
9G93:F:
>C?R?a?
C0U0S1e1v1
536I6Z6s7
3&4c4y4
4O5f5s5
1S2i2{2y3
;C>Y>k>
=S>i>{>
=p?t?x?|?
182L2g4
;8;,<c<
5'7>7w7
9*989N9S9k9w9
::+:6:J:<;+<:<?<G<b<s<
0>1t3{3
5 646@6
>8>S>s>
4_5f546Q6
637a8h8
< =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
><>@>D>H>L>`>d>h>l>p>t>x>
>H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0\0`0d0h0l0p0t0x0|0
1 1$1(1,101c1y1
2J3Q3$4]4d4k5
7(7Q7s7
<#=5=G=x=
55$5*5C5H5b5i5
9 9,9=9G9^9o9
;!;-;S;
<'=Z>a>h>
1$1.171A1G1T1Z1
4 4.484>4K4R4\4b4o4v4
5%5\5c5r5y5
213:3U3_3v3
/0n0z0
2S3t4x4|4
9(9<9E9q9x9
=>5>W>
343B3o3v3
5#696J6
<O=Y=h=}=
>1>8>G>M>X>
0&1.1=1C1N1U1l1
1#292K2a2{2
273@3J3c4y4
898@8G8
>M?c?v?
<3<I<Z<
<.<J<Z<{<
> >*>?>I>N>x>
>0>7>N>e>x>
?"?T?n?s?
1(1,1014181C1Y1k1R2
33383R3[3l3
464?4P4m4t4
6*6:6e6r6
8O9T9a9
9#:9:K:r;%<c<
=D>H>L>P>T>X>
>1[1N2
>0?4?8?<?
H0^0?1
S9c9|9
1C2S2x2M9
p0t0x0|0
9*9@9T9l9
:m<{=s>
1#292J2
$0C1Y1k1
:@;c=v=
0:0J0T0Z0d0i0
0*181`1u1{1
:P;T;X;\;`;d;h;l;p;t;x;|;
g2l2{2
4!4f436I6[6
:C<Y<j<
?$?+?:?
I0P0W0^0
3I6Y6|63:I:[:
2&2A2G2
5'539E9W9
<S<)=/=
1#393J3
9<:$;T;u<|<
=d=h=l=p=t=x=
>,>3>:>
)00060<0[0
21282>2D2{2
5;5K5[5k5
6(737>7I7]7d7o7y7
959<9C9J9i9p9w9~9
:%:,:H:O:V:]:d:k:r:y:
='=6=@=S=d=p=z=
=D>K>Z>d>w>
0/0?0R0`0q0
2"212C2T2a2k2w2
3$3.3H3O3c3q3
4&464K4`4p4~4
0&050K0S0
3+3N3$5
21272@2G2Z2
5)5o51686x6
8 8%8+848;8D8
:%:G:{:
; ;2;8;=;E;x;};
<(<g<n<
==I=V=a=f=s=
3J5Q5y5
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686R6`6h6r6
041L1W1
00>0K0
3O6T6a6
4!5h5m5
E:L:u;|;
8F=M=v>}>
5 5\6c6
8(8W83;I;[;
S0s172
=?=s=y=
5V6\6d6q6
8989?9G9L9P9T9}9
9.:4:8:<:@:
;+;];d;h;l;p;t;x;|;
Y0a0v0
3*3?3Q3
:=:O:]:r:|:
<:=N=W=
>B?J?]?h?m?}?
0q1~1z2
333Q3X3\3`3d3h3l3p3t3
364A4\4c4h4l4p4
5Z5`5d5h5l5
=0>5>?>y>~>
??&?-?4?;?B?I?P?X?`?h?t?}?
2h2z2L3V3c3~3
;+<Q<9>
g0k0o0s0w0{0
10171P1d1j1s1
1?2_2m2r2
5*5=5H5N5T5Y5b5
6%666<6M6
?%?2?f?s?
N0t1m2
<%<1<F<M<a<h<
=(=.=7=C=Q=W=c=i=v=
= >`>f>
!0(0C0H0P0V0]0c0j0p0x0
1 1-1;1A1N1n1t1
2.292u3*444T4Y4
9#9-9;9D9N9
9(:]:p:
;E<Q<d<v<
=@=i=z=
070H0
2P2U2}2
8%9U9g9
=T=]=i=
>(>5>:>H>
7#7j7o7
7@8I8O8
; ;2;a;s;
0d2u2}2
3!383D3Q3X3
3#4<4P4s4
4)565O5m5
797Z7|7
:!:-;k;
=#=*=Z=
3,323@3I3X3]3g3u3
3.454;4
>$?2?:?G?e?o?x?
0W0z0
9K9a9w9
010A0Q0a0
2054585<5@50<4<8<<<@<
2 2$2(2,2024282<2
:(:,:0:T:X:
P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
4`4d4t4x4
5,5<5@5P5T5X5`5x5
8 8@8L8l8t8
9,949X9d9l9
:$:0:T:t:|:
;$;0;T;t;|;
<(<4<T<`<
=$=0=P=\=|=
>(>H>T>t>|>
?$?D?P?p?x?
0(040T0`0
141T1\1d1l1t1|1
2 2@2L2l2t2
3 3<3D3P3p3x3
484@4L4l4t4|4
5<5D5P5p5x5
6(606<6\6d6p6
747@7`7h7p7x7
80888D8d8l8x8
949<9H9h9p9|9
:(:0:8:D:d:l:x:
; ;(;@;H;P;X;h;t;
<<<H<h<t<
=,=L=T=\=d=l=t=|=
>(>H>P>X>d>
?<?H?h?t?
0$0D0P0t0
1,181X1d1
2$2H2h2p2x2
3 3(30383@3H3P3X3`3h3t3
484X4x4
5 5@5\5`5
6@6H6L6d6h6
7,707L7P7l7p7
808P8p8
909P9p9
0 0<0@0
5(5P5T5X5\5`5d5h5l5p5t5x5
:(:8:H:X:|:
;$;,;4;<;D;L;T;\;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
Salt Lake City1
The USERTRUST Network1!0
http://www.usertrust.com1
UTN-USERFirst-Object0
100510000000Z
150510235959Z0~1
Greater Manchester1
Salford1
COMODO CA Limited1$0"
COMODO Time Stamping Signer0
GS@(YC
1http://crl.usertrust.com/UTN-USERFirst-Object.crl05
http://ocsp.usertrust.com0
Salt Lake City1
The USERTRUST Network1!0
http://www.usertrust.com1
UTN-USERFirst-Object0
110824000000Z
200530104838Z0{1
Greater Manchester1
Salford1
COMODO CA Limited1!0
COMODO Code Signing CA 20
1http://crl.usertrust.com/UTN-USERFirst-Object.crl0t
1http://crt.usertrust.com/UTNAddTrustObject_CA.crt0%
http://ocsp.usertrust.com0
Greater Manchester1
Salford1
COMODO CA Limited1!0
COMODO Code Signing CA 20
130613000000Z
150613235959Z0
101171
Berlin1
Berlin1
Schumannstr. 171
win.rar GmbH1
win.rar GmbH0
https://secure.comodo.net/CPS0A
0http://crl.comodoca.com/COMODOCodeSigningCA2.crl0r
0http://crt.comodoca.com/COMODOCodeSigningCA2.crt0$
http://ocsp.comodoca.com0
info@win-rar.com0
lFF~.M
Greater Manchester1
Salford1
COMODO CA Limited1!0
COMODO Code Signing CA 2
Salt Lake City1
The USERTRUST Network1!0
http://www.usertrust.com1
UTN-USERFirst-Object
141202121411Z0#
;%%0%du
Maximum allowed array size (%u) is exceeded
%12s %s
%12s %s
%7d
kernel32.dll
$default
rarfiles.lst
__rar_
rarreg.*
%d.%02d
default.sfx
7z;ace;arj;bz2;cab;gz;jpeg;jpg;lha;lzh;mp3;rar;taz;tgz;xz;z;zip
rar.log
FUADPXETK
Rswitches_%s=
switches=
rar.ini
%02d:%02d:%02d %s
-------- %2d %s %d
[%c]%ls
SeRestorePrivilege
SeSecurityPrivilege
SeBackupPrivilege
SeCreateSymbolicLinkPrivilege
%.*ls(%u)%ls
rtmp%d
BFAT32
%u.%03u
__rar_tmp
%c%c%c%c%c%c%c
%c%c%c%c%c%c%c%c%c
%-12ls
????????
%02x%02x..%02x
%8.8X
%ls
%9ls %4ls
%c%10ls %9ls
Unix owner
%12ls: %u
%12ls:
%12ls: RAR %ls(v%d) -m%d -md=%d%s
Windows
BLAKE2
Pack-BLAKE2
BLAKE2 MAC
%12ls: %8.8X
Pack-CRC32
CRC32 MAC
%12ls: %ls
%12s: %s
----------- --------- -------- ----- ----
----------- --------- -------- ----- -------- ----- -------- ----
Mac OS
%21ls %16s %lu
%21ls %9ls %3d%% %26ls %u
%21ls %-14ls %u
%21ls %9ls %3d%% %-25ls %u
%.10ls %d
RAR 1.4
%s: %s
rarinfo.log
WinRAR
?*<>|"
AppData
Software\WinRAR\Paths
YMDHISWAEN
yyyymmddhhmmss
rar.lng
Too large block header.
%ls%0*d_%0*d_%0*d.rev
%ls%0*d.rev
rebuilt.
fixed.
*messages***
LanguageFolder
Software\WinRAR\General
rarlng.dll
System Volume Information\
Crypt32.dll
CryptUnprotectMemory failed
CryptProtectMemory failed
SeShutdownPrivilege
kernel32
MAPI32.DLL
CreateThread failed
WaitForMultipleObjects error %d, GetLastError %d
Thread pool initialization failed.
??-??-?? ??:??
??-??-???? ??:??
%02u-%02u-%02u %02u:%02u
%02u-%02u-%u %02u:%02u
%u-%02u-%02u %02u:%02u,%03u
%s
%ls
%ls%ls%ls
mscoree.dll
KERNEL32.DLL
(null)
((((( H
h(((( H
H
VS_VERSION_INFO
StringFileInfo
040904E4
ProductName
WinRAR
CompanyName
Alexander Roshal
FileDescription
Command line RAR
FileVersion
5.20.0
ProductVersion
5.20.0
InternalName
Command line RAR
LegalCopyright
Copyright
Alexander Roshal 1993-2014
VarFileInfo
Translation
_Yes_No
_Yes_No_All
_Yes_No_All_nEver_Quit
_Yes_No_All_nEver_Rename_Quit
_Continue_Quit
_Retry_Abort
RAR %s Copyright (c) 1993-%d Alexander Roshal %d %s %d
Registered to %s
Trial version Type RAR -? for help
UNRAR %s freeware Copyright (c) 1993-%d Alexander Roshal
Usage: rar <command> -<switch 1> -<switch N> <archive> <files...>
Usage: unrar <command> -<switch 1> -<switch N> <archive> <files...>
<@listfiles...> <path_to_extract\>
<Commands>
a Add files to archive
c Add archive comment
ch Change archive parameters
cw Write archive comment to file
d Delete files from archive
e Extract files without archived paths
f Freshen files in archive
i[par]=<str> Find string in archives
k Lock archive
l[t[a],b] List archive contents [technical[all], bare]
m[f] Move to archive [files only]
p Print file to stdout
r Repair archive
rc Reconstruct missing volumes
rn Rename archived files
rr[N] Add data recovery record
rv[N] Create recovery volumes
s[name|-] Convert archive to or from SFX
t Test archive files
u Update files in archive
v[t[a],b] Verbosely list archive contents [technical[all],bare]
x Extract files with full path
<Switches>
- Stop switches scanning
@[+] Disable [enable] file lists
ac Clear Archive attribute after compression or extraction
ad Append archive name to destination path
ag[format] Generate archive name using the current date
ai Ignore file attributes
ao Add files with Archive attribute set
ap<path> Set path inside archive
as Synchronize archive contents
c- Disable comments show
cfg- Disable read configuration
cl Convert names to lower case
cu Convert names to upper case
df Delete files after archiving
dh Open shared files
dr Delete files to Recycle Bin
ds Disable name sort for solid archive
dw Wipe files after archiving
e[+]<attr> Set file exclude and include attributes
ed Do not add empty directories
en Do not put 'end of archive' block
ep Exclude paths from names
ep1 Exclude base directory from names
ep2 Expand paths to full
ep3 Expand paths to full including the drive letter
f Freshen files
hp[password] Encrypt both file data and headers
ht[b|c] Select hash type [BLAKE2,CRC32] for file checksum
id[c,d,p,q] Disable messages
ieml[addr] Send archive by email
ierr Send all messages to stderr
ilog[name] Log errors to file (registered versions only)
inul Disable all messages
ioff Turn PC off after completing an operation
isnd Enable sound
k Lock archive
kb Keep broken extracted files
log[f][=name] Write names to log file
m<0..5> Set compression level (0-store...3-default...5-maximal)
ma[4|5] Specify a version of archiving format
mc<par> Set advanced compression parameters
md<n>[k,m,g] Dictionary size in KB, MB or GB
ms[ext;ext] Specify file types to store
mt<threads> Set the number of threads
n<file> Additionally filter included files
n@ Read additional filter masks from stdin
n@<list> Read additional filter masks from list file
o[+|-] Set the overwrite mode
oc Set NTFS Compressed attribute
oh Save hard links as the link instead of the file
oi[0-4][:min] Save identical files as references
ol Save symbolic links as the link instead of the file
or Rename files automatically
os Save NTFS streams
ow Save or restore file owner and group
p[password] Set password
p- Do not query password
qo[-|+] Add quick open information [none|force]
r Recurse subdirectories
r- Disable recursion
r0 Recurse subdirectories for wildcard names only
ri<P>[:<S>] Set priority (0-default,1-min..15-max) and sleep time in ms
rr[N] Add data recovery record
rv[N] Create recovery volumes
s[<N>,v[-],e] Create solid archive
s- Disable solid archiving
sc<chr>[obj] Specify the character set
sfx[name] Create SFX archive
si[name] Read data from standard input (stdin)
sl<size> Process files with size less than specified
sm<size> Process files with size more than specified
t Test files after archiving
tk Keep original archive time
tl Set archive time to latest file
tn<time> Process files newer than <time>
to<time> Process files older than <time>
ta<date> Process files modified after <date> in YYYYMMDDHHMMSS format
tb<date> Process files modified before <date> in YYYYMMDDHHMMSS format
ts<m,c,a>[N] Save or restore file time (modification, creation, access)
u Update files
v Create volumes with size autodetection or list all volumes
v List all volumes
v<size>[k,b] Create volumes with size=<size>*1000 [*1024, *1]
vd Erase disk contents before creating volume
ver[n] File version control
vn Use the old style volume naming scheme
vp Pause before each volume
w<path> Assign work directory
x<file> Exclude specified file
x@ Read file names to exclude from stdin
x@<list> Exclude files listed in specified list file
y Assume Yes on all queries
z[file] Read archive comment from file
ERROR: Bad archive %s
#Enter password (will not be echoed)
Enter password (will not be echoed) for %s:
Reenter password:
ERROR: Passwords do not match
Write error in the file %s
Read error in the file %s
Seek error in the file %s
Cannot close the file %s
Not enough memory
&Corrupt archive - use 'Repair' command
Program aborted
Cannot rename %s to %s
Cannot find volume %s
User break
Create next volume ?
Disk full. Insert next
Creating %sarchive %s
Insert disk with %s
Testing archive %s
Extracting from %s
Converting %s
Convert archives to SFX
Removing SFX module
%s is not SFX archive
%s is not RAR archive
%s is not the first volume
%s - cannot convert to SFX archive with old format
Cannot create %s
Cannot open %s
Unknown method in %s
Unsupported archive format. Please update RAR to a newer version.
Locking archive
ERROR: Cannot modify old format archive
ERROR: Locked archive
ERROR: Cannot modify volume
Evaluation copy. Please register.
Creating %sarchive %s
Updating %sarchive %s
solid
Adding %-58s
Updating %-58s
... %-58s
Deleting files %s...
and directories
Deleting %-30s
deleted
NOT DELETED
Clearing attributes...
Deleting directory %-30s
WARNING: Cannot open %d %s
WARNING: No files
%s: encrypted
Cannot modify solid archive containing encrypted files
Analyzing archived files:
Repacking archived files:
%-20s - checksum error
Testing archive %s
Extracting from %s
%s - use current password ?
Creating %-56s
Skipping %-56s
Testing %-56s
Extracting %-56s
... %-56s
Cannot create directory %s
------ Printing %s
Checksum error in the encrypted file %s. Corrupt file or wrong password.
No files to extract
All OK
Total errors: %ld
Would you like to replace the existing file %s
%6s bytes, modified on %s
with a new one
%6s bytes, modified on %s
Overwrite %s ?
Enter new name:
Corrupt header is found
Main archive header is corrupt
%s - the file header is corrupt
#The data recovery header is corrupt
Reading comment from stdin
Reading comment from %s
Deleting comment from %s
Adding comment to %s
Adding file comments
Reading comment for %s : %s from stdin
The archive comment is corrupt
Press 'Enter' to continue or 'Q' to quit:
Write comment to %s
Comment is not present
Deleting from %s
Deleting %s
Erasing empty archive %s
No files to delete
-------- %2d %s %d, archive %s
ERROR: Path too long
Archive
Details
volume
recovery record
encrypted
encrypted headers
+ Attributes Size Date Time Name
D Attributes Size Packed Ratio Date Time Checksum Name
Directory
Unix symbolic link
Windows symbolic link
NTFS junction point
Hard link
File copy
NTFS alternate data stream
Target
Packed size
Attributes
Compression
Host OS
File version
Service
OS/2 extended attributes
Unix Owner/Group data: %-14s %-14s
BeOS extended attributes
NTFS security data
NTFS stream: %s
Unknown subheader type: 0x%04x
Comment:
0 files
Reconstructing %s
Building %s
Cannot repair archive with old format
Found %s
The archive header is corrupt. Mark archive as solid ?
No files found
Unexpected end of archive
Reconstruct archive structure ?
Scanning...
Data recovery record not found
Data recovery record found
Sector %ld (offsets %lX...%lX) damaged
- data recovered
- cannot recover data
Adding data recovery record
Erasing contents of drive %c:
WARNING: Cannot get %s owner and group
WARNING: Cannot get owner %s ID
WARNING: Cannot get group %s ID
ERROR: %s group and owner data are corrupt
WARNING: Cannot set %s owner and group
WARNING: Cannot read symbolic link %s
WARNING: Symbolic link %s already exists
Cannot create %s. Retry ?
Mac OS file type: %c%c%c%c ;
file creator: %c%c%c%c
%-20s : packed data checksum error in volume %s
%s is read-only
WARNING: Cannot get %s security data
WARNING: Cannot set %s security data
ERROR: %s security data are corrupt
WARNING: Unknown format of %s security data
ERROR: %s stream data are corrupt
WARNING: Unknown format of %s stream data
ERROR: Invalid file name %s
ERROR: %s extended attributes are corrupt
WARNING: %s - unknown format of extended attributes
WARNING: cannot set extended attributes to %s
ERROR: Cannot get extended attributes of %s
(+EA)
...skipping extended attributes
Processing archive %s
File search errors, cannot synchronize archive
WARNING: Attempting to correct the invalid file name
WARNING: You need to start extraction from a previous volume to unpack %s
ERROR: Unknown option: %s
ERROR: Corrupt data header found, ignored
WARNING: Unknown data header format, ignored
ERROR: Corrupt %s data block
Data header type: %s
Cannot read contents of %s
%s is not volume
ERROR: %s and %s belong to different sets
%d volumes missing
%d recovery volumes found
Nothing to reconstruct
Reconstruction impossible
Reconstructing...
Creating %s
Renaming %s to %s
Write error: only NTFS file system supports files larger than 4 GB
WARNING: FAT32 file system does not support 4 GB or larger files
WARNING: Cannot change attributes of %s
ERROR: default SFX module does not support RAR %d.%d archives
Cannot encrypt archive already contained encrypted files
Cannot email the file %s
RAR SFX archive
<Commands>
-x Extract from archive (default)
-t Test archive files
-v Verbosely list contents of archive
Total number of usual and recovery volumes must not exceed %d
volume %d
Cannot delete %s
Calculating the checksum
WARNING: Too large SFX archive. Windows cannot run the executable file exceeding 4 GB.
Calculating checksums of all volumes.
ERROR: Not enough disk space for %s.
You may need a newer version of RAR.
Unknown encryption method in %s
The specified password is incorrect.
Repairing
Corrupt %d bytes at %08x %08x
%d blocks recovered.
Recovery record is corrupt.
Testing the recovery record
Failed
%s switch is not supported for RAR %d.x archive format.
Searching for identical files
%d found.
Unknown extra field in %s.
Cannot copy %s to %s.
You need to unpack the entire archive to create file copy entries.
Copying data
Cannot create symbolic link %s
Cannot create hard link %s
You may need to run RAR as administrator
Not enough memory for %d MB compression dictionary, changed to %d MB.
Please use a smaller compression dictionary.
<<<Obsolete>>
No antivirus signatures available.
No IRMA results available.