popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

PE Compile Time

2009-07-14 08:55:16

PDB Path

mblctr.pdb

PE Imphash

de5ffdef0b7fe6105bfe44941d62fcd6

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00023bfe 0x00023c00 6.56764087559
.data 0x00025000 0x000017d8 0x00000a00 3.63900602124
.pdata 0x00027000 0x00000d38 0x00000e00 5.06264550347
.rsrc 0x00028000 0x000c3000 0x000c3000 6.02054346986
.reloc 0x000eb000 0x00000b94 0x00000c00 1.48706013313

Resources

Name Offset Size Language Sub-language File type
MUI 0x0002ad4c 0x000000f8 LANG_ENGLISH SUBLANG_ENGLISH_US data
WEVT_TEMPLATE 0x0002ae44 0x00000272 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x000e8d70 0x000010a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x000ea9f8 0x00000022 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x000eaa1c 0x0000040d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library ADVAPI32.dll:
• 0x100001000 TraceMessage
• 0x100001008 TraceEvent
• 0x100001010 RegOpenKeyExW
• 0x100001018 RegQueryValueExW
• 0x100001020 RegSetValueExW
• 0x100001028 RegDeleteValueW
• 0x100001030 RegCloseKey
• 0x100001038 RegQueryInfoKeyW
• 0x100001040 RegEnumKeyExW
• 0x100001048 RegCreateKeyExW
• 0x100001050 RegGetValueW
• 0x100001058 GetTraceLoggerHandle
• 0x100001060 GetTraceEnableLevel
• 0x100001068 GetTraceEnableFlags
• 0x100001070 RegisterTraceGuidsW
• 0x100001078 UnregisterTraceGuids
• 0x100001080 EventRegister
• 0x100001088 EventWrite
• 0x100001090 EventUnregister
Library KERNEL32.dll:
• 0x100001218 LocalAlloc
• 0x100001220 GetSystemPowerStatus
• 0x100001228 FormatMessageW
• 0x100001230 SetEvent
• 0x100001238 CreateEventW
• 0x100001240 DeleteCriticalSection
• 0x100001250 LocalFree
• 0x100001258 GlobalUnlock
• 0x100001260 GlobalLock
• 0x100001268 GlobalAlloc
• 0x100001270 SizeofResource
• 0x100001278 LockResource
• 0x100001280 LoadResource
• 0x100001288 FindResourceW
• 0x100001290 CreateProcessW
• 0x100001298 Sleep
• 0x1000012a8 VirtualAlloc
• 0x1000012b0 InterlockedPopEntrySList
• 0x1000012b8 GetProcessHeap
• 0x1000012c0 VirtualFree
• 0x1000012c8 HeapFree
• 0x1000012d0 HeapAlloc
• 0x1000012d8 GetVersionExA
• 0x1000012e0 GetSystemDirectoryW
• 0x1000012e8 CreateThread
• 0x1000012f0 lstrcmpW
• 0x1000012f8 GetCommandLineW
• 0x100001300 SetLastError
• 0x100001308 CloseHandle
• 0x100001318 ReleaseMutex
• 0x100001320 CreateMutexW
• 0x100001330 GetModuleHandleW
• 0x100001338 HeapSetInformation
• 0x100001340 GetCurrentThreadId
• 0x100001348 FlushInstructionCache
• 0x100001350 GetCurrentProcess
• 0x100001360 LoadLibraryW
• 0x100001368 LeaveCriticalSection
• 0x100001370 EnterCriticalSection
• 0x100001378 WaitForSingleObject
• 0x100001380 GetLastError
• 0x100001388 QueryPerformanceCounter
• 0x100001390 GetTickCount
• 0x100001398 GetCurrentProcessId
• 0x1000013a0 GetSystemTimeAsFileTime
• 0x1000013a8 TerminateProcess
• 0x1000013b0 UnhandledExceptionFilter
• 0x1000013b8 OutputDebugStringA
• 0x1000013c0 MulDiv
• 0x1000013c8 RaiseException
• 0x1000013d0 GetStartupInfoW
Library GDI32.dll:
• 0x100001128 GetDeviceCaps
• 0x100001130 SetBkColor
• 0x100001138 GetBkColor
• 0x100001140 GetTextExtentPoint32W
• 0x100001148 BitBlt
• 0x100001150 SetBrushOrgEx
• 0x100001158 SetViewportOrgEx
• 0x100001160 SetLayout
• 0x100001168 GetLayout
• 0x100001170 SelectClipRgn
• 0x100001178 CreateRectRgn
• 0x100001180 GdiGradientFill
• 0x100001188 LineTo
• 0x100001190 MoveToEx
• 0x100001198 SetDCPenColor
• 0x1000011a0 CreateDIBSection
• 0x1000011a8 SetTextColor
• 0x1000011b0 DeleteObject
• 0x1000011b8 CreateFontIndirectW
• 0x1000011c0 CreateCompatibleDC
• 0x1000011c8 SelectObject
• 0x1000011d0 GetTextMetricsW
• 0x1000011d8 DeleteDC
• 0x1000011e0 CreateSolidBrush
• 0x1000011e8 GetObjectW
• 0x1000011f0 GetStockObject
• 0x1000011f8 SetBkMode
• 0x100001200 GdiAlphaBlend
• 0x100001208 Polygon
Library USER32.dll:
• 0x1000014d8 EnumDisplaySettingsExW
• 0x1000014e0 SystemParametersInfoW
• 0x1000014e8 GetSysColor
• 0x1000014f0 QueryDisplayConfig
• 0x100001500 EndPaint
• 0x100001508 DrawEdge
• 0x100001510 BeginPaint
• 0x100001518 PtInRect
• 0x100001520 SetRect
• 0x100001528 GetWindowLongW
• 0x100001530 ValidateRect
• 0x100001538 LoadStringW
• 0x100001540 UnregisterClassA
• 0x100001548 SetClassLongPtrW
• 0x100001550 UnhookWindowsHookEx
• 0x100001558 GetWindowLongPtrW
• 0x100001560 GetActiveWindow
• 0x100001568 UpdateWindow
• 0x100001570 ScrollWindow
• 0x100001578 GetScrollInfo
• 0x100001580 SetScrollInfo
• 0x100001588 SetWindowsHookExW
• 0x100001590 GetWindowInfo
• 0x100001598 CopyRect
• 0x1000015a0 GetWindowRect
• 0x1000015a8 GetMonitorInfoW
• 0x1000015b0 GetSysColorBrush
• 0x1000015b8 GetSystemMetrics
• 0x1000015c0 LoadCursorW
• 0x1000015c8 SetWindowLongPtrW
• 0x1000015f0 GetClassLongPtrW
• 0x1000015f8 FrameRect
• 0x100001600 MonitorFromRect
• 0x100001608 GetWindowPlacement
• 0x100001610 GetNextDlgTabItem
• 0x100001618 InvalidateRect
• 0x100001620 GetFocus
• 0x100001628 MapWindowPoints
• 0x100001630 GetClientRect
• 0x100001638 CreateWindowExW
• 0x100001640 GetParent
• 0x100001648 OffsetRect
• 0x100001650 ChangeDisplaySettingsExW
• 0x100001658 PostMessageW
• 0x100001660 GetDlgItem
• 0x100001668 CallWindowProcW
• 0x100001670 SetWindowTextW
• 0x100001678 EnumChildWindows
• 0x100001680 EnableWindow
• 0x100001688 GetWindowTextW
• 0x100001690 SetDlgItemTextW
• 0x100001698 KillTimer
• 0x1000016a0 ReleaseDC
• 0x1000016a8 GetDC
• 0x1000016b0 NotifyWinEvent
• 0x1000016b8 CallNextHookEx
• 0x1000016c0 GetDlgCtrlID
• 0x1000016c8 GetKeyState
• 0x1000016d0 DrawIconEx
• 0x1000016d8 InflateRect
• 0x1000016e0 DestroyWindow
• 0x1000016e8 CreateDialogParamW
• 0x1000016f0 SendMessageW
• 0x1000016f8 DestroyIcon
• 0x100001700 LoadImageW
• 0x100001708 AllowSetForegroundWindow
• 0x100001710 GetIconInfo
• 0x100001718 PostQuitMessage
• 0x100001720 EnumDisplayDevicesW
• 0x100001728 FindWindowW
• 0x100001730 SetForegroundWindow
• 0x100001738 GetForegroundWindow
• 0x100001740 IsIconic
• 0x100001748 DrawFocusRect
• 0x100001750 DrawTextW
• 0x100001758 ShowWindow
• 0x100001760 GetClassInfoW
• 0x100001768 IsWindowEnabled
• 0x100001770 FillRect
• 0x100001778 DefWindowProcW
• 0x100001780 SetTimer
• 0x100001788 SetWindowPos
• 0x100001790 SendDlgItemMessageW
• 0x100001798 MoveWindow
• 0x1000017a0 RegisterClassW
• 0x1000017a8 LoadIconW
• 0x1000017b0 GetMessageW
• 0x1000017b8 IsDialogMessageW
• 0x1000017c0 TranslateMessage
• 0x1000017c8 DispatchMessageW
• 0x1000017d0 UnregisterClassW
Library msvcrt.dll:
• 0x1000019f8 ceilf
• 0x100001a00 ?terminate@@YAXXZ
• 0x100001a08 _onexit
• 0x100001a10 _lock
• 0x100001a18 __dllonexit
• 0x100001a20 _unlock
• 0x100001a28 _errno
• 0x100001a30 realloc
• 0x100001a38 ??1type_info@@UEAA@XZ
• 0x100001a40 __set_app_type
• 0x100001a48 _fmode
• 0x100001a50 _commode
• 0x100001a58 __setusermatherr
• 0x100001a60 _amsg_exit
• 0x100001a68 _acmdln
• 0x100001a70 exit
• 0x100001a78 _cexit
• 0x100001a80 _ismbblead
• 0x100001a88 _exit
• 0x100001a90 _XcptFilter
• 0x100001a98 __getmainargs
• 0x100001aa0 __C_specific_handler
• 0x100001aa8 memset
• 0x100001ab0 _purecall
• 0x100001ab8 __RTDynamicCast
• 0x100001ac0 wcstok
• 0x100001ac8 wcscspn
• 0x100001ad0 wcstol
• 0x100001ad8 _wcsicmp
• 0x100001ae0 free
• 0x100001ae8 memmove_s
• 0x100001af0 ??_U@YAPEAX_K@Z
• 0x100001af8 _vsnwprintf
• 0x100001b00 ??2@YAPEAX_K@Z
• 0x100001b08 ??_V@YAXPEAX@Z
• 0x100001b10 ??3@YAXPEAX@Z
• 0x100001b18 _initterm
• 0x100001b20 memcpy
Library OLEAUT32.dll:
• 0x1000013e0 SafeArrayGetElement
• 0x1000013e8 SysAllocString
• 0x1000013f0 SysFreeString
• 0x1000013f8 VariantClear
• 0x100001400 VariantInit
Library POWRPROF.dll:
• 0x100001418 PowerSettingAccessCheck
• 0x100001420 PowerReadDCValue
• 0x100001428 PowerSetActiveScheme
• 0x100001430 PowerGetActiveScheme
• 0x100001438 PowerReadFriendlyName
• 0x100001440 GetPwrCapabilities
Library BatMeter.dll:
• 0x1000010a0 CleanupBatteryData
• 0x1000010b0 CreateBatteryData
• 0x1000010c0 BatMeterOnDeviceChange
• 0x1000010c8 UpdateBatteryDataAsync
• 0x1000010d0 QueryBatteryData
• 0x1000010d8 GetBatteryStatusText
• 0x1000010e0 SetBatteryLevel
Library WINMM.dll:
• 0x100001858 waveOutGetNumDevs
• 0x100001860 PlaySoundW
Library SHELL32.dll:
• 0x100001460 ShellExecuteW
• 0x100001468 None
• 0x100001470 SHGetKnownFolderIDList
• 0x100001478 None
• 0x100001480 DuplicateIcon
• 0x100001488 ShellExecuteExW
Library SHLWAPI.dll:
• 0x100001498 PathFileExistsW
• 0x1000014a0 None
• 0x1000014a8 None
• 0x1000014b0 StrTrimW
• 0x1000014b8 None
• 0x1000014c0 PathGetArgsW
• 0x1000014c8 PathRemoveBlanksW
Library ole32.dll:
• 0x100001b58 CLSIDFromString
• 0x100001b60 CoCreateInstance
• 0x100001b68 CoSetProxyBlanket
• 0x100001b70 CreateStreamOnHGlobal
• 0x100001b78 CoInitializeSecurity
• 0x100001b80 CoUninitialize
• 0x100001b88 CoInitialize
Library ntdll.dll:
• 0x100001b30 EtwTraceMessage
• 0x100001b38 RtlVirtualUnwind
• 0x100001b40 RtlLookupFunctionEntry
• 0x100001b48 RtlCaptureContext
Library slc.dll:
Library RPCRT4.dll:
• 0x100001450 UuidFromStringW
Library gdiplus.dll:
• 0x100001920 GdipCloneImage
• 0x100001928 GdipDisposeImage
• 0x100001930 GdipAlloc
• 0x100001938 GdiplusShutdown
• 0x100001940 GdiplusStartup
• 0x100001948 GdipGetImageWidth
• 0x100001950 GdipCreateFromHDC
• 0x100001958 GdipDrawLine
• 0x100001960 GdipFillPath
• 0x100001968 GdipCreatePath
• 0x100001970 GdipCreatePen1
• 0x100001978 GdipBitmapUnlockBits
• 0x100001980 GdipBitmapLockBits
• 0x100001988 GdipGetImageHeight
• 0x100001990 GdipFillRectangle
• 0x100001998 GdipImageRotateFlip
• 0x1000019a0 GdipFree
• 0x1000019b0 GdipCreateSolidFill
• 0x1000019b8 GdipDeletePath
• 0x1000019c0 GdipAddPathLine
• 0x1000019c8 GdipDeleteBrush
• 0x1000019d0 GdipDeleteGraphics
• 0x1000019d8 GdipCreateLineBrush
• 0x1000019e0 GdipSetSmoothingMode
• 0x1000019e8 GdipDeletePen
Library UxTheme.dll:
• 0x1000017e0 OpenThemeData
• 0x1000017e8 BufferedPaintInit
• 0x1000017f0 BufferedPaintUnInit
• 0x1000017f8 BeginBufferedPaint
• 0x100001800 DrawThemeTextEx
• 0x100001808 EndBufferedPaint
• 0x100001810 BufferedPaintSetAlpha
• 0x100001818 GetThemePartSize
• 0x100001828 GetThemeTextExtent
• 0x100001830 DrawThemeText
• 0x100001838 GetThemeColor
• 0x100001840 CloseThemeData
• 0x100001848 DrawThemeBackground
Library Wlanapi.dll:
• 0x1000018c0 WlanCloseHandle
• 0x1000018d0 WlanSetInterface
• 0x1000018d8 WlanFreeMemory
• 0x1000018e0 WlanOpenHandle
• 0x1000018e8 WlanRegisterNotification
• 0x1000018f0 WlanQueryInterface
• 0x1000018f8 WlanEnumInterfaces
Library WMI.dll:
• 0x100001870 WmiOpenBlock
• 0x100001878 WmiExecuteMethodW
• 0x100001888 WmiCloseBlock
• 0x100001890 WmiQueryAllDataW
• 0x100001898 WmiQuerySingleInstanceW
Library COMCTL32.dll:
• 0x1000010f0 ImageList_Create
• 0x1000010f8 ImageList_ReplaceIcon
• 0x100001100 ImageList_DrawIndirect
• 0x100001108 ImageList_Destroy
• 0x100001110 None
• 0x100001118 None
Library dwmapi.dll:
• 0x100001908 DwmIsCompositionEnabled
Library WTSAPI32.dll:
!This program cannot be run in DOS mode.
`.data
.pdata
@.rsrc
@.reloc
ADVAPI32.dll
ntdll.DLL
KERNEL32.dll
GDI32.dll
USER32.dll
msvcrt.dll
OLEAUT32.dll
POWRPROF.dll
BatMeter.dll
WINMM.dll
SHELL32.dll
SHLWAPI.dll
ole32.dll
slc.dll
RPCRT4.dll
gdiplus.dll
UxTheme.dll
Wlanapi.dll
WMI.dll
COMCTL32.dll
dwmapi.dll
WTSAPI32.dll
Delete
NoRemove
ForceRemove
Invalid parameter passed to C runtime function.
]$C9"D
305.1i
z+z' K
nMH!&}a=b(@
;@5d8xW
g@#q@"X%
/@9}R[4K
qn*sWE
#bdMlH
Q1khLN
H-9&v^^
okIm&@
:qq;\C
qOk'0\
X7UcWV
7+rgSFD
FgkWsO
W(SH"^W
H$l%%u;
"txgm~n
ys}ZJk2SI
}"!TB
HBRSDS%
mblctr.pdb
UVWATAUAVAWH
$D9|$0
\$0fD;
@A_A^A]A\_^]
9\$8t+H
L$ SUVWH
D$@t_A
H!t$hH
D$(H!\$ E3
UVWATAUAVAWH
pA_A^A]A\_^]
t$ WATAUAVAWH
A_A^A]A\_
[ UVWH
|$ ATAUAVH
A^A]A\
` AUAVAWH
fD;?s4H
A_A^A]
t$ WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
f;9s(H
0A_A^A]A\_
VWATAUAVH
A^A]A\_^
l$ WATAUAVAWH
fD;|$`tEI
fD;|$`
A_A^A]A\_
SUVWATAUAWH
tmf;)thH
A_A]A\_^][
SUVWATAUAVH
tcfD;1t]H
tgfD;1taH
tIfE;3tCH
tXfD;0tRH
A^A]A\_^][
x ATAUAVH
9,urE;
A^A]A\
tgfD;!taH
t$ WATAUH
VWATAUAVH
L9k(uW
A^A]A\_^
WATAUH
A]A\_
WATAUH
H!t$XH
D$PH!t$H
l$xtCH
x ATAVAWH
A_A^A\
WATAWH
A_A\_
+D$TE3
D$d;D$Tt
t$ WATAUAVAWH
T$0E9eXt5L
D$P+D$H
+t$ D+d$$H
A_A^A]A\_
\$P+|$D
T$<+T$@
T$<+T$@
D$09D$ }
D$89D$(~
D$49D$$}
D$<9D$,~
f;)s(H
WATAVH
@A^A\_
t4H9o@t.
f;(s&H
VWATAUAVH
A^A]A\_^
UVWATAUAVAWH
l$lD+l$dD
D+d$`E+
D9d$x~+H
A_A^A]A\_^]
ATAUAVH
A^A]A\
WATAUAVAWH
0A_A^A]A\_
` AUAVAWH
A_A^A]
x ATAUAVH
A^A]A\
WATAUAVAWH
A_A^A]A\_
@SVWATAVH
0A^A\_^[
VWATAUAVH
A^A]A\_^
UVWATAWH
L!d$hD!
0A_A\_^]
WATAVH
3GIHE:u
jMPQ3O
>aSV>[TdSdk3
_ehUdf
i[`[`Wf
_W_Ubk
H[dfgS^3^^aU
;`fWd`WfAbW`3
;`fWd`WfAbW`Gd^3
;`fWd`WfDWSV8[^W
;`fWd`Wf5^aeW:S`V^W
:FFBD736
Zffbe,!!l ```SS\\\YU Ua_!efe![_SYV \bY
3H3GIHE:u
MPQ3O3P
:}2":}
VWATAUAWH
A_A]A\_^
D$(+D$ L
WATAUAVAWH
0A_A^A]A\_
LcL$@E3
H9K@t'H
H!{0H!{
WATAUH
WATAUH
p WATAUAVAWH
A_A^A]A\_
p WATAUH
0A]A\_
x ATAUAVH
A^A]A\
H UVWATAUAVAWH
A_A^A]A\_^]
x ATAUAVH
D+L$`E3
A^A]A\
WAVAWH
!\$8!\$0H
D9\$tD
WATAUH
A]A\_
UVWATAUAVAWH
9D$|t$;
A_A^A]A\_^]
l$ VWATAUAVH
A^A]A\_^
WATAUAVAWH
0A_A^A]A\_
WATAUH
@A]A\_
@SUVWATH
0A\_^][
tKH!D$
u5!D$@H
\$ UVWATAUAVAWH
|$pD9!
A_A^A]A\_^]
UVWATAUH
A]A\_^]
x ATAUAVH
A^A]A\
t$H!\$(D
VWATAUAVH
9qLt%H
A^A]A\_^
@SUVWATH
0A\_^][
UVWATAUH
|KfD;l$PuCD9d$Xu
A]A\_^]
f;t$`t;@
H!t$(H
H!t$ L
H!t$(H
H!t$ L
H!t$ L
f9D$Hua
9y@~(3
x`;{@}[H
LcA<E3
u*9Q<|%
TraceMessage
TraceEvent
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegGetValueW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
EventRegister
EventWrite
EventUnregister
ADVAPI32.dll
RaiseException
GetLastError
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
ExpandEnvironmentStringsW
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
HeapSetInformation
CreateMutexW
ReleaseMutex
RegisterApplicationRestart
CloseHandle
SetLastError
GetCommandLineW
lstrcmpW
CreateThread
GetSystemDirectoryW
CreateProcessW
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
SetEvent
FormatMessageW
GetSystemPowerStatus
LocalAlloc
KERNEL32.dll
DeleteObject
CreateFontIndirectW
CreateCompatibleDC
SelectObject
GetTextMetricsW
DeleteDC
CreateSolidBrush
GetObjectW
GetStockObject
SetBkMode
GdiAlphaBlend
SetTextColor
CreateDIBSection
SetDCPenColor
MoveToEx
LineTo
GdiGradientFill
CreateRectRgn
SelectClipRgn
GetLayout
SetLayout
SetViewportOrgEx
SetBrushOrgEx
BitBlt
GetTextExtentPoint32W
GetBkColor
SetBkColor
GDI32.dll
SetWindowLongPtrW
LoadCursorW
GetSystemMetrics
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplaySettingsExW
LoadStringW
ChangeDisplaySettingsExW
PostMessageW
GetDlgItem
SendMessageW
DestroyIcon
LoadImageW
AllowSetForegroundWindow
GetIconInfo
PostQuitMessage
EnumDisplayDevicesW
FindWindowW
SetForegroundWindow
GetForegroundWindow
IsIconic
ShowWindow
GetClassInfoW
RegisterClassW
LoadIconW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
CreateDialogParamW
DestroyWindow
OffsetRect
GetParent
CreateWindowExW
GetClientRect
MapWindowPoints
GetFocus
InvalidateRect
GetNextDlgTabItem
GetWindowPlacement
MonitorFromRect
GetMonitorInfoW
GetWindowRect
CopyRect
GetWindowInfo
MoveWindow
SetScrollInfo
GetScrollInfo
ScrollWindow
UpdateWindow
GetActiveWindow
GetWindowLongPtrW
UnhookWindowsHookEx
SetClassLongPtrW
SetWindowsHookExW
NotifyWinEvent
SendDlgItemMessageW
SetWindowPos
SetTimer
DefWindowProcW
FillRect
IsWindowEnabled
DrawTextW
DrawFocusRect
InflateRect
DrawIconEx
GetKeyState
GetDlgCtrlID
CallNextHookEx
ReleaseDC
KillTimer
SetDlgItemTextW
GetWindowTextW
EnableWindow
EnumChildWindows
SetWindowTextW
CallWindowProcW
FrameRect
GetClassLongPtrW
RegisterDeviceNotificationW
UnregisterDeviceNotification
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
USER32.dll
??3@YAXPEAX@Z
??_V@YAXPEAX@Z
??2@YAPEAX_K@Z
_vsnwprintf
??_U@YAPEAX_K@Z
memmove_s
_wcsicmp
wcstol
wcscspn
wcstok
__RTDynamicCast
_purecall
memset
__C_specific_handler
__getmainargs
_XcptFilter
_ismbblead
_cexit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
msvcrt.dll
??1type_info@@UEAA@XZ
realloc
_errno
_unlock
__dllonexit
_onexit
?terminate@@YAXXZ
OLEAUT32.dll
PowerDeterminePlatformRole
GetPwrCapabilities
PowerReadFriendlyName
PowerGetActiveScheme
PowerSetActiveScheme
PowerReadDCValue
PowerSettingAccessCheck
POWRPROF.dll
SetBatteryLevel
CleanupBatteryData
SubscribeBatteryUpdateNotification
CreateBatteryData
UnsubscribeBatteryUpdateNotification
BatMeterOnDeviceChange
UpdateBatteryDataAsync
QueryBatteryData
GetBatteryStatusText
BatMeter.dll
waveOutGetNumDevs
PlaySoundW
WINMM.dll
ShellExecuteW
SHGetKnownFolderIDList
ShellExecuteExW
DuplicateIcon
SHELL32.dll
PathRemoveBlanksW
PathGetArgsW
StrTrimW
PathFileExistsW
SHLWAPI.dll
CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString
CoInitializeSecurity
CreateStreamOnHGlobal
ole32.dll
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ntdll.dll
SLGetWindowsInformationDWORD
slc.dll
UuidFromStringW
RPCRT4.dll
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageRotateFlip
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipBitmapUnlockBits
gdiplus.dll
GetThemeColor
CloseThemeData
OpenThemeData
BufferedPaintInit
BufferedPaintUnInit
BeginBufferedPaint
DrawThemeTextEx
EndBufferedPaint
BufferedPaintSetAlpha
GetThemePartSize
GetThemeBackgroundContentRect
GetThemeTextExtent
DrawThemeText
UxTheme.dll
WlanCloseHandle
WlanEnumInterfaces
WlanGetInterfaceCapability
WlanSetInterface
WlanFreeMemory
WlanOpenHandle
WlanRegisterNotification
WlanQueryInterface
Wlanapi.dll
WmiNotificationRegistrationW
WMI.dll
ImageList_Create
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_Destroy
COMCTL32.dll
DwmIsCompositionEnabled
DwmExtendFrameIntoClientArea
dwmapi.dll
DrawThemeBackground
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
WTSAPI32.dll
GetVersionExA
HeapAlloc
HeapFree
VirtualFree
GetProcessHeap
InterlockedPopEntrySList
VirtualAlloc
InterlockedPushEntrySList
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
OutputDebugStringA
MulDiv
GetDeviceCaps
Polygon
UnregisterClassA
ValidateRect
GetWindowLongW
SetRect
PtInRect
BeginPaint
DrawEdge
EndPaint
GetDisplayConfigBufferSizes
QueryDisplayConfig
CoSetProxyBlanket
EtwTraceMessage
GdipDeleteBrush
GdipDeletePen
GdipDeleteGraphics
GdipCreateLineBrush
GdipSetSmoothingMode
GdipCreateSolidFill
GdipAddPathLine
GdipDeletePath
GdipFillRectangle
GdipCreateFromHDC
GdipDrawLine
GdipFillPath
GdipCreatePath
GdipCreatePen1
WmiCloseBlock
WmiQueryAllDataW
WmiOpenBlock
WmiExecuteMethodW
WmiQuerySingleInstanceW
memcpy
.?AVCMessageMap@ATL@@
.?AVCWindow@ATL@@
.?AV?$CWindowImplRoot@VCWindow@ATL@@@ATL@@
.?AV?$CDialogImplBaseT@VCWindow@ATL@@@ATL@@
.?AV?$CDialogImpl@VCTile@@VCWindow@ATL@@@ATL@@
.?AVCTile@@
.?AVCBrightnessTile@@
.?AVCDisplayOrientationTile@@
.?AVCExtensibleTile@@
.?AUIUnknown@@
.?AUISyncMgrStatusAdviseCallback@@
.?AVCSyncTile@@
.?AVCExternalDisplayTile@@
.?AV?$CDialogImpl@VCMobilityCenter@@VCWindow@ATL@@@ATL@@
.?AVCMobilityCenter@@
.?AVCPresentationTile@@
.?AVGdiplusBase@Gdiplus@@
.?AVImage@Gdiplus@@
.?AVBitmap@Gdiplus@@
.?AV?$CWindowImplBaseT@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@2@@ATL@@
.?AV?$CWindowImpl@VCMCSlider@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@
.?AVCMCSlider@@
.?AVCVolumeTile@@
.?AVCPowerTile@@
.?AUIMMNotificationClient@@
.?AUIAudioEndpointVolumeCallback@@
.?AV?$CWindowImpl@VCVolumeTrackBar@@VCWindow@ATL@@V?$CWinTraits@$0FGAAAAAA@$0A@@3@@ATL@@
.?AVCVolumeTrackBar@@
.?AVCMCVolumeSlider@@
.?AVCWirelessTile@@
vTeiFmjv
wwwxvd
a@pp`p
BRC@pq`
wuaaaa`
e%`pugwacp
wg5!Guwagp
wvwsCaw7g
wwwwwwwwwxF|V
ll|l||
|l|l~x
xv|||||
xwwxww
wwwwwwwwwwwwwwwwwp
wpBPpqt0
t4446Weg
sGGwSa'7wp
wwpaett
wwwwwwed
wwxxww
NK4>=;(}
PJ4>=;;;'':;\
SL64<:''::::'':==F
T644%""##)<<<AAA<?>>=>
U!!!!$$$)4)4<4AEE@BBBB>
!%&&$$%%%)<%<WFFGGGHHB
%44444%&4)?)@Y`Y`____H
46666%44???@Eayyy
67IIC55C?C@@Y
MIXX75CCD@E@`
tVcX7CDDEEEW
X|XIDVEWW^^
Z|XIVWW^^^`
U|VVW[[``^b
UZVX[Y[a`b
UXX[Z]dbbb
tVZZ]dbdf
XZdddd
qqqqqqqqqqqqqqqqqqqqqqq
qqqqqqq
`@FRt
/)(!cF=KI:9:^
..........
+aAEL4;;JMRMMNR
031156LLV\Z[[S
1BB758LOlpoxx_
BbGCCPQTt
bkjDUVZ\
isbUX\\y
sjXlnw
kXrryw
bqr{{{
/2222222/
,DDDBB
""!!"!!
,DD@DD
&#76===
,DDDDDBBBBBB
,11100000011
,??????
,,,,,,,,,,,,'
7D8],16
Yh~Sop
~[%Qba6
S bsjY
bv5uxs7`
/F\QAV
W>ab/vJ05
4_?gH"
pZIp\6
|[d'c7
#;it "
,Hg`xQ
M%xIyU
P@BJX6
]A&Qty4!g
)im$mJ(6
L02ocJ
*~P)W/
5m4B:
|:CYUI!
ICc#MB^
jla4-*"
hi4cd}P
IF&J>(5M@
!hh(L8`
1VA[1`
4@DOIH
bi3Z_}
PN~Y(n
'0YW)}
I#$5mrj
ozdbF]>
lg'<uXCB
"X8=ACI
NXbh;,
x<BYVzq
GGG8<<
ef?#K6
)PU%UU5*
g?{www
w`f4u
`Lay B
a8a'vh
soN>:^`
StMTDQ
NC&hA~o
*G "<x
!JTse@d
uQ/uS<Q
.*T<<T4
@D8?_ s
SR3@TxY<
/z[7^C
q3>_4Gf
raCb""<y|
b@JlGB
6`Ui)8d
x]+[t
8GF)Nk(
_O31)Wi
o-7"9M
j"^O.f
")32>cL
hb)I&&@B
'c,WK<z
PB\6q8
G0)[$
mGxrt&EN(<$
,qv>FJ"Z
DF]JpN
\yncX;
#`4jqrr
LR#02J
I6PjS3R
,ga BJ
+;=n]'t=0
M3H5sa
iK)#.I
bZLC<s
#@j*7?
f!=)14
fXZZdqq
c2)#[m,<
F##Ym@&
n&SX?<<b4R
3u6>%0
He5M34M
O8o6Y]Yf4
''g_;;;
h8bbZ3
WVX[[C
_=::{i<V
6Rz U~G
(W* a7
,-.aO&
P*dY]]!eh =
X^Yekk
GGG1;P
D>_bee
mvww8<<"
7j,,,r/&
uMHUX_
Dx:*0{]
P.WXXX@J
,w>_dmu
p8a42q
5VWWX\\
F!Og8!]
7XYYfmm
XYYe}cC
5vvvYY^
LK@7,6
KKlmm!
tu6aY>
]Wz|pP
<U8vl!
{%Iba~
3ST&2(
H,,,N^
<88x[Q
3;{lfv
?>=;wbb
<#""}gcd
MHHA>>FBBB
9<=yLUW
689A@CCeJLM>QTU
QTU>@A<'&'b=88
EGHYQTU
HJK'234L.,-lMKK
::;wQTU(QTU
FII.,,-V=;;
JLMEQTU
8;;;234cDDD
;>>iQTU
JMN.QTU
wooGEF>CJM{KST
DLLLLDD
LLLLLG
|LLLLLO
LLLLLLLLLD
77777777777
#TkLLLi1
!@&\\\\\\\&(j
tP\\\;;(j1j;;\\\\Ps
p>\;;;;>#
W;;;;\\@S$
$j\;;;;;^R
O;;;;;\\P%
$P;;;;;:::V
3::^;;;;\L%
j;;;;:::::R9
l::::^;;;\P$
p;;;^::::::+5
W::::::^;;;\S
(;;^::::::::+p
/]::::::::;;;@s
j;;::::::::::::::::::::::::;;;P
Z^;^:::]::::::`bbb<:::::::::^;;;s
S;^::]]::::::+#
::::::::::^;;P
B^:]]]]::::::+9
:::::::::::;;(%
^:]]]]]::::::+9
`:::::::]:::;;W
3:]==]]:::::::`5
g:::::::]]::^;S
/]==']]::::::::"
6b::::::]]]:^^P
M=`<<']::::::::J9
uB:::::]]]]:^g
g`<<<']:::::::::k9
u-::::]]]]]:g
M<__<<]::::::::::k
ub:::]]===:g
O_**_<]:::::::::::k
4=::]=<<==g
0???)<']:::::::::::R
n::]<<<`=O
qa,a?_<]::::::::::::o
6`]'<<<<`2
DAA,?<']:::::::::::B
e]<<__<<u
hCCc,)<-l1WXn::::::=
O'<))*_e
YFFCca_i
[-:::::+
O<)???b0
IddFcae
:::::l
%e)?aaa,8
ffGECa#
,aAAA,
mxx.dCM
2,cCCDH
yzKfE|
wCFEFF8
%QdGGGdr
uN.xxx.r
mUXttttXmzyyyyy
%9TJLJjp
pB\\&PB\\\P
%P\\\(#
M\\\&p
>\;;:k
u;;;\\j
>;;:::+
p:::;;\S
P;^:::::P4p:::::;;\
X\;:::::::::::::::^;B
P;:]]::::SXX-::::::;\
$^:]]]::::9
O;::::::\P
;]']:::::9
0:::::]:;B$
3:=']:::::R
M::::]]:>%
1]<<]:::::>5
M:::]]:=}
0<_<]::::::^9
M::]=]=
_?_':::::::^
~`:'<]+v
7aA?<]:::::::B
O:<_]M
HCA_`T3
X;::B$
sssssssss
$p@\+L\&Ps
B;:::^pue:::;\p
3\:]:::=*:::::\(
-;]]::>s
O;::::\3
:]]:::>
W:::::\i
X:=]::::#
M:::]:-
X:<]::::(
M:]]:-
r_*<:::::>
A?_]:::::B
V"~$$v~5
T\\W\\1
n\::=M::\\Z
;\:\Pv'\:\B
::::\3
['::\\\
I'j e\l
c``,][Z/][Z.][Z.][Z.][Z.][Z.][Z.][Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.][Z.^[Z.][Z.][Z1][Z1][Z
@?>I][Z
hedN*)(
][Z.4o
CBA3'&&
c``,][Z/][Z.][Z.][Z.][Z.][Z.][Z.][Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.][Z.^[Z.][Z.][Z1][Z1][Z
@?>I][Z
hedN*)(
][Z.4o
CBA3'&&
c``,][Z/][Z.][Z.][Z.][Z.][Z.][Z.][Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.][Z.^[Z.][Z.][Z1][Z1][Z
@?>I][Z
hedN*)(
][Z.4o
CBA3'&&
c``,][Z/][Z.][Z.][Z.][Z.][Z.][Z.][Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.^[Z.][Z.^[Z.][Z.][Z1][Z1][Z
@?>I][Z
hedN*)(
][Z.4o
CBA3'&&
:+++8000%
222"ZZZm
KKK<}}}
???*```Ozzzx
puvwX]^^$
N++,K**+0
222-[[Z
JJLP||
?>@8__ajxy|
222-[[Z
JJLP||
?>@8__ajxy|
322/ihi
##$#XX[Iy}
322/ihi
##$#XX[Iy}
nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-khg ife
khg\ife!
nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-nkj-khg ife
khg\ife!
PHHHNi
iNHHHHNf
KHHHHNi
KHHHHNd#cQ43222@n
yKHHHHNyQE6432Aq
KHHHHHHEE64Cq
yKHHHHHHEERq
yKHHHHHHQ_
cJHHHHHHD
}TPKHHK
|rUQMW|YSPLUvQM
7.++38*
V<.002+
xrrvrLxxxxv
WwA/0000)\x
zYYYYLxvvrv
Wxc200.9zx
xWWWWLxrrrrLvvvvv
Yd1<>;:5
zUWUUMzrrrrLvvvvr
a"CCH3HHG1]
|xrWQYzYYYYLvrrrv
xWWWWMxrrrr ggj3a
b'onn1
zWWWWMzrYrY"\l'^rKru'oo"
zUUUUPxYYYYO'
^rrLvuu""
|zvWSYzYYYYPxbrrrMxrrvr
zWWWWQzYYYYNxrrrrL
xWWWWSxYYYYQzrrrrM
zWWWUSzYYYYQxrYYrM
xUUUUUxWWWWSxYrYYQ
}xzxrxzWWYWSzYYYYQ
xWWWWUxYYWYQ
zUUUUWzWWYWU
xUUUUYxWWWWU
}zxzvzzWWWWW
xWWWWY
zUUUUY
xUUUUr
}zxzx|
<<d2RR
BBo7UU
==f>SS
88HZKK
 """"
"""!"
""""
"""""
"!"""
" 
"
"
" " "!
 

" ""
" """
" " !!

"
" "


!







#" "
aoqqqq[
diiiiig
Siiiiih
Oiiiiih
Ohiiiii
mbmmkmZ
dhiiiig
Siiiiih
Qiiiiih
Oiiiiii
n`````4
dhiihhe
Yiiiiih
Qiiiiih
Qiiiiii
o\[[[[#
dhhhhhd
Yhhihhg
Qiiiiih
Qiiiiii
q53333!
dhggggd
Yhhhhhg
Sihhhhg
Sihihih
q"
gdgdgdd
Yhhhhgg
Sihhhhg
Sihhihh
ddddddY
dgggggd
Yhhhhhg
Yhhhhhh
gdddddY
dggdggd
Ygggggd
Whhhhhh
dYdYYYS
ddgdgdd
Ygggggg
Yhggggh
qm`[2M
gYSYYYW
dddddgd
Ygdgdgd
dgggggg
dYYWWYSA
gdddddY
dggdgdd
dgggggg
gQSSSSSA
ddddddY
dddgdgd
dgdeeeg
gSSWSWRA
gYdYdYY
ddddddd
egegegd
dQSRRRQE
gYYYYYY
gdddddd
gdeeeee
gQRRRRQJ
gYYYYYS
ddddddY
gdeeeee
thgcSQO
gSYSYYSA
gYdYYdY
gdedede
gSYWSYSC
gYYdYYY
hdddddd
gSSYSWSC
gYYYYYY
hddddddA
gSSSWTSD
hYYYYYSA
hdYcccdA
gSWTSSTD
gSYSYYSC
hYdccccC
gQRSRSRE
hYWYWWWA
hYYYYYYD
gQSRRRRI
hSWSWWSD
iYYYYYYD
gSWSSRRQ
hSWWSWWD
iYYYYYYD
siifeW
hSSWTTTE
hYSYSYYJ
hTTTTSSJ
hWYWYSYJ
fSRSRSRJ
hSYSYWSK
hRRRSRRI
hSYSSWWK
hQSRRRRL
iSWWWSWN
hQRRRRRO
hSSSSSSO
tiihecSg
iSSSWSSQ
hSSSTSTQ
iTSTRSRR
hQSRRRSR
hSRRRRRW
hQRRRRRW
uiiiifei
J3/+'0@,(
B333>'@>@@>
.B3331'@>>>@
B1131(B>>3>'@>>>>
C1111(B33>3(@>>>>'>@>@>
B0000(C3333(B>>>>'@>>>@
JC@1/>B3333+C3333(@>>>>
B1111,C3>3>(B>>>>'
B1111/B3333+B3>3>'
C1111/B1313,B3333+
B00000B1311/B3>33+
JCBB>@C1111/C3333,
B11110B1313,
B00001C11310
B00003B11110
JCBB@CC11111
B11113
B00003
B0000>
JCBBBC
xvvvvN>
RKKKKEC
G/////I
vvvvvt
NRRNRN
KHKHKG
222221
++++++
$$$$wuuuw
yudud
!yddddXyuuuu
$yddddXyuuuu
qh=^yaaadZyddddXyuuuu
yadaa[yddddXyuudu
zaaaa_ydaddZyddduX
y````_yadadZyddddX
y`````yadaa_yddddZ
yyyuwzaaaa_yadadZ
ya`aa`zdada_
y````ayaaaa_
y````dyaaad`
yyywyyaaaaa
zaaa`d
y````d
y````u
\UUUUPR
S99999T
WWWW\W
UUUUSS
9P99P9
888888
\\\\\W
WWWWWW
UUUUUS
PPPPPP
999999
8888888
b\\\\UY
Z<<<<<Y
b]]]b]
Z\Z\ZZ
<U<U<<
;;;;;;
bbbbbb
]]]]]]
\Z\Z\Z
UUUUUU
<<<U<<;
]]b]]]
;<;;;;;
]]\]]\
ZZZZZZ;
ZZZZZZ
U<U<U<<
<;<;<<;
;;;;;;<
`____V\
]99999^
`g``g`
_]_]]]
V9VVV9
877777
gggggg
``````
__]_]_
VVVVVV
999R998
`g````
8888888
__``_`
__]_]]7
VVVVV]7
gggggg7
VVVVV98
``_```8
8888899
______9
888888V
]]_]]_V
]VVV]VV
VRVVVV]
8R888V_
988988`
777887`
PHHHNi
iNHHHHNf
KHHHHNi
KHHHHNd#cQ43222@n
yKHHHHNyQE6432Aq
KHHHHHHEE64Cq
yKHHHHHHEERq
yKHHHHHHQ_
cJHHHHHHD
}TPKHHK
|rUQMW|YSPLUvQM
7.++38*
V<.002+
xrrvrLxxxxv
WwA/0000)\x
zYYYYLxvvrv
Wxc200.9zx
xWWWWLxrrrrLvvvvv
Yd1<>;:5
zUWUUMzrrrrLvvvvr
a"CCH3HHG1]
|xrWQYzYYYYLvrrrv
xWWWWMxrrrr ggj3a
b'onn1
zWWWWMzrYrY"\l'^rKru'oo"
zUUUUPxYYYYO'
^rrLvuu""
|zvWSYzYYYYPxbrrrMxrrvr
zWWWWQzYYYYNxrrrrL
xWWWWSxYYYYQzrrrrM
zWWWUSzYYYYQxrYYrM
xUUUUUxWWWWSxYrYYQ
}xzxrxzWWYWSzYYYYQ
xWWWWUxYYWYQ
zUUUUWzWWYWU
xUUUUYxWWWWU
}zxzvzzWWWWW
xWWWWY
zUUUUY
xUUUUr
}zxzx|
<<d2RR
BBo7UU
==f>SS
88HZKK
 """"
"""!"
""""
"""""
"!"""
" 
"
"
" " "!
 

" ""
" """
" " !!

"
" "


!







#" "
vjb"b&fh
wvbb&&bf'#(
gbb&&&&&&
"&&&jf
&&jjjg
wv\LDFLlLh
wtDDDLDD
vDDDDDDDD
Ll||||h
DDDDDDLD
Lv\||l|
DFDDDdFLD
t\tddLdLd
telVDD
LFLLLl
wvzbf"cf
wDDDDD
DDdDDDd
tDDDLg
|TLDxw
LLMMNNRRTYy
LLNNNSTTT]]]^ba
JLNNSTT]^cmnieeggggM
qJRT]_``
}hhhhhzkc
K`eegk{
{hgghkojiVO
ighhhgggghhhjmlUML
`^^TTVVSM
|f__SL
' ''''
"))))++++..%
"=+---//.000(
->>>>>??B??C,
>B@BBCCCCDDD1
CECGCGDDDGIGA
+GGGGIIG
'' '''
**!!!!
9'')--..%
<-./000B(
0?BBB?C1
CCDDDDIA
#$%%$&
###%&&$1
#%%%&$A
###%&&&&
#%%%&$&
#%%&&&1
##%%&&$1
%%$%&$
##%%&&&
##$#$$$$A
H@-(&$1
#$#$$D
####$$$A
`ddhhhj
cccedaajrrsuwwp
`ikkru
zyyzzu
op~tk`
$$$1-D
$6$7777798
688Q:;;R;9
QQTRTTVVW;
1VVVZVZZZZS
D7:::9;
M;RRSR;
NWZZZZS
(++0*_
((,,00
(+,000
((+,0*<
+,,0*[
((+00*
(+,000
()*)**
&&''*>
xOVYc}vmjlfZ
eklnqrkhU
yz^dcXQ
BBCCC2
1HGHGMI
----"""""""----
@@@@$$$$$$$@@@@
9999###$"##9999
==;;;888
&21;'*))
CCCABA==
A==;886.
'42-K_\Pv
))*AQUMqayO
>L/x501Mhf\
+/)LYcQ
((-%NHY<
'&-"NIW;
&$+QF`3
hf^Xih`.ED?
2/-'\`]P
db\h21.K
=,)!`xuk
i[^vI,
(>??Ahhhu
'degU}}~
{|~Bxxx
z|}[bbb)
MJ?FRMBt
-)/6MSGwRt:
4@&j-')Dli^
#&!AP^G{
+5'LK[:
&1"MG_2
mtph:MKG
G;8/r|xh
;8*zmfT
ywmfgd^9
MMP%rqsK
%{}}Auvv
HGG:Ji3h
9E44?Q5s
Lc;JXsB
Dz#-=}
$/..4iijf
0/1YWZ=uuvr
X@%%%0X
]%0;bb=%&f
qTfkft
fkkfkfv
M%%)0@
m@%)%)30b
vH))&%30,b
v33;3=;0,z
T,X``b`=,
v@MXX;
0Mzmzmb
b)(888%%3
]]mmm];0
\OsbZP
Otttbbs
-Mn=ZbbzzzzzzzG
\=sttbbtz}z;
MOzzzzzttsU&
b&=OzzM
0MMM0*
=*;khwwH
T=11Chw{
#/T;=;;Xww{
bYFXWFFhw{
` T3YXcXFWkXOOY
;QY*FX`hXX4(
=;WXXOXh(
FFXc^^`=
AWhwkhwX
h&&O3HQ&
wwpcF/
vUahwwhchp
bAXXcXY
TvIHJv
#QTTT#
OXbwhX3
7fv#Fa
Ob~RDc
)R=}$R=h
cS~]GR
-RXYbav
BooowEkSH(
;*\ Rn+
^8Ivh+
0t"Qo V
)WjTjMj
$!#)&s
.UTEAQ
*B(f%
P4AOO/
<{tc}m
=b` $A$
e3N+$
J&QC!+
J4DoOo
X/"Rl7@8@`ZG{f
IDATt]gqi
C#[PCa
4KKK,-.p
BH!$)d
EFQTT5d*
,STTEA
{NUVUVf~
/$$j5!
4#8>:B
X]]GUI??
[[[X__
ae~3V9
eQ P{_
,zQI(Be
P.PQii
e)VGI+
Zr $@
lll`ee
LV\3)9
4A+B2!
%=0V*ff
MI4-UUe
}<zp_
bBB1X!
nll`yy
fP>~bc+ `T
=eQ`}kY
jPXCH#
Gn%~;Y
EQ MS
J!C~aRw
+W1ZZA
-4^[[CUd
ff$W{(
XZZAQT8<<
.7Z}R}
4MUf*`ye
ggc,--)
'-m1?+
3|lllb4
p:\XQ{
9d&Dy!
D~={|!
/22=hkk
4]bQ o0
/!qd?Q
toI3*>;Q
*\koGo_
IDAT#]\
H$|xhh(
fGAQ)b<E
,{{{088
+@u$Ju
e;<Y^M
dmkXrk
H$VyRBH
!>A84
qD#!u6
U)&Edn
5koCQi
Hw{U"T
KkV,64
yq hom
;6E`r
0Sa&V@<>
m,(*S}heQ
&\hnB{
hINoi@g
jU ;;{
HiE%22
RS-,er
Acc#\i
&333^XX8[UU5
hmmESS
<)&$sU$
GZZ:>
TT,AEE
hNNN0//o<''
rssQ^^
\(**BII
=(,.B$
d*$JG@A
@`:++kb
d"mhanE
/EAq%"
$%)IIJR
$%)IIJR
$%)IIJR
$%)IIJR
$%)IIJR
$%)IIJR
$%)IIJR
$%)IIJR
$%)IIJR
$%)IIJR
<@BB@<
F________@
&JQJOq
aZZ_Z_
jGCB<$
mLSJkO
xYfffXRLk
B,221+(
49:]id:1*'
X2-Z+(
qk KSVaa__PD
xqrnnm
r'"27#2'
r:zzb;
jzzszr{
:zszzs
z:zz:2
s#cc&:z*z2#j7
:r67''
2zzj:b8
*r#663
"2cb&:#
c###&28
*rr"r6'
"cc'''8
r#&rs*2
''r(2z#
6:zzzzw
:zzzzw
"733"zs'
"zzzr8
62626:jzr&28
sb7""2
2c*:b8
##"'"8
br6"z'
'"'#b8
"2rr:(
2rrw'#
82r8#c
#cjz:zz6
zzzzzzzs{
63c*zz2"3
862czrz#37
z:zrj'
:zzzz7
rsb{ "
"*277'
B'#r2{
ssr*r"{
mmmmmjmmP
"ijjjL
9ijmjmiimiijjjjjjjjjQ
QiihhhhihiihhhhhjiiiiH
}EQQQQ
)JQQNNSNShhhhhhhhhYYUUUhH!
677776
67666[6[ SUUUUUUUUUU:
NSUSUSUSSU
9SSSSSSSSS
9QNNSNNSSS
9LQNNNNNNE
.9Z"EEE
EENEENEEN
FEEEEEEEE
#9FQEQEQENE
NNAN""
#9LQNNNNNNN
#9LNNNNNNNN
#9NVSSSSSSS
d9SS9_
#?SSUSUSUSU
#9WhUUhUUUU>s
?hhUhhhhhYU
tttttxxx{
yyuyyb
9iihhhhiihhhhhhhhELLHLLLI
EHLHHE~
9jjiijijjjiijjmijijjjmH5
nQllll
jmmmmmmmmmmmjmmP
hjjjhj
<hhhhhhhhhhhhhhhjM
,JQIM\
QQISQSfffWfhffefffL
a888878&SWfffSffV<
2LSSSSSSSm
2<IOOKKKKm
2;JJKKKKKm
2;LKKKCKK
]!K;q
CCCCCCC
3ILKCKCK
)&\BJ
3IJKKKKK!p
0;ISSKKKOp
0;SSSSSSVn
3<WffSVVVAn
<ffWWffffS7777779
!ShfjhhhjhjfjffSSSfL(
jjjjjjjjj
+Zyyyyyyyy
BRtwtwttttttw\
I\_Y_ptpptppppZ
EEEEB5Y_`````I
BZ```Y`#
E&YUUUU#
E&UUUUU#
E&YUUUU#
E$YUUYU#|
:&_____&~
EI`````L~
Jqtpptp`BBAGBh
Uttttttttt_n__I
_yyywyww
L_vnR+
?[aaaU!
!J]]]]J!
dCUU?4$
Q]]JYhh
v?]aaaaUM
y@_|||T
"Yx}fge_1
Mto3(444
NvvutwC
IffgccP
FFF-']fO)
2svvtozY$
g3'"z(
g"7"'"2
8wwww3'"r"'"x
"r"#rz3
r#cbr2b
6*7*c'
''r(663
*rx&:r:zr8
":zzz62ss;w8
rz6zr:v:z::b"
:zzzzzzzzzz+
"2s6"zz6
r"""www
2r:rwww
"8"z2:x
8:":rzr3#7
zzzzzzz'
#zzzzzr{
r6dfa"(
sr#r2{
-\^:#;
c`ckuyw{x}
A([]],
buuyz{{w
/^]:*R
cy}zzzww
fou}yzywv
`uuuuyvvq
~jouummml
booommll
A-Y[[*Q
`nnnkkkr
hjnnkiaj
Q$::ZY
bnjjiad
I(::Y:
Q#::Z::
::::*Q
#::::::K
/9:9:0:F
A),8,,
*8,--,8.4"
-,..BP
-,,,,,D
-),,,,),+
,))))',))
-),,,,,,)
#,,,,,,,,,
-,-,.,,,,
#-...,.,..
#-........
#//0.0.0.0)=
$0900000000
=====R?R?
S&9:0/:90:9:0:0:00,,,,,*)#
******E
H#:::::::::::::::::::::*
<.::::&
3&::::::::::Y:Y:Y::::,
,:YYYYYYYY:Y:YYYYY.
#YYYY)I
3*YYYYYYYYYYYYYYY,
Q$:Z[[[[[[[[Y[Y.
)[[[[)
8[[[[[[[[[[,
:[[[.1
8:\\\[:.
;.\\\9
=,\\\Y
,]]]Y,
=.\]]:
5,^^^0
(7LLL`
b0<@@@Y
(3B@@@@5P
4KLKKLK@'''''F
>LLLLLLLLL@@JJ0
@NNNjNNNjNjN1P
=jjjjjjjjj7H
8jkkkkkL7P
<=MMMMM3
b3NOOOOOOO<P
b3Mhhhhh=H
:US IHED
Vqv-DexeHDB
ftg: HxexeH
Mmh/% HHHHxe
DHHHHx"
Noonmp>
DFFD
Jua_[[P
AAA*$ZuO&
.lmlpisV
lkl8lklzlkl
lklylkl8
2wwwwwwwwwwwp
zzz:zzx
r2(3gr3
"r#""'"
#c&2bc8
#cc'"28
662cs&
:cr8#b(
#j62cr8
#'r(r:s
':2#jzzzrssss{
zzzzzz:v:ss
6zzzz(
2zzzzzzzs(
r"3333333;
''7762r&#
862czsz'3c
z:cj67
#zzzzs
w2z6:2"{
c71b"(
2'#r2{
rsr*r#{
,`aaa44a
?psK5L
S;orr>,
ArrK<c
S?moo>\
Ioooool
6KnKommmo
b5KnKoKKoKKg
Y:KKmK
\6nKnKKnKKmKK
KKKK<b
KKKKKKKKKKKK[
AKJJKJKBKJKBKKj
S;>@>@
<?>@>@>ABBBBBBBJ
))))))
)))(((((
@ABBBBBAe
>A@@@@@@B
5@@@@?@@@?V
5?>>>>>>>>
5;>>>>>>>>
5;>>>>>>>>
;>;;;;;;;
>>;>;>>>;
5>>>>?>>>>
5>??>?>>>>
6@;#Y5X
5?@?>@>@@@
H5@A5E
8AA@@@@@@@
8AABABB@B@;N
8JJBBBBBBBB
NNNQNPQPQ
OOOOO'
d5BKKAKJKBKBKBKKBK;>>9<><9
x9><<<<T
X5KKKKKKKKKKKKKKKKKKKKK<F
L@KKKK8
E9KKKKKKKKKKKKKKKKKKKI
)<mmmmmmmmmmmmmmmmmA
5nnnK>Y
E6mmmmmmmmmmmmmmmI
+BnnnK
b6KooooooooooooI
6oono;
>oooooooooo6
Koop@C
IKpppoKI
L@pppK
N>pppm
cIpprm;
Q>prsK
DIpssB
Isso?#
@osrA
$Pjjjjj>
<PhhihihO
{EUXUYhggg6
<<<<9+VYYYM
<PXXXX3
<IZYXYYJo
FghggggX79:::b
VhhhhhhhhgYXYfE
XjjjjjjjjjjjPm
PUifP#
WAeee7
v@PPbbR
9988NST6
vNLN!=
uFFFm
u!NLLk
6!0'YYY
u!NOO!k
!yu?TTSDk
#IKb``bb@
|@deeeeeeeHh
F_dP"i
OZZHVgg
u=Z^^^^QO
v>\yyyQ
KSSSSSSW
B.QnpK
[PnpmVrnf
8/%OqY
*klYk)
III4'{~d0
r#"27#2w
r6627x
ss'"z(
sc#"'##
wwss"66"&28
##j2b7
62#"r6'
"cr(2r#
#z"6:s
:czzzzr:s
2zzzzzzzz7
3:zzs'
"2w3"zr'
63ccxx
"j6"8www22#"x
862czr:c63
w2z:r2"{
8z6zzzs
#9q2"(
&'#r68
ssr*r2{
7lnI-A
{vvuuw
Q2kmm6
vqquuww
9nmI4b
vqqquuuw
Q7kkk6\
ywwwwuz
a.IIiI+
~puuuuuz
W2JIJF
\.IIIII)
tpuuuu
FFGG4a
.HIGJGJ[
DEEF:FFX
Q36868
477776D7>,
!!!!!!
<!!!!!!!
-7686T`
-666676T)
266666665&*
263633333
666363363
727666666
776666866
.D76888888
C-88-=
988888888
.:998F8:8:1M
2E:E:F8F:F8
M\\O\OOO
NNNNN
c-FFF8EFEFFFFFFFF:6466666.
444444T
X-FFJFFJFFFFGGFFGGIIIHI.?
L6JIII/
=4JJIIJJJIJGJJJJJGIII6
!4iiiJiIiiiJiJJJiJi8
-JJiJ6W
=4Iiiiiiiiiiiiiii8
"HiiiI
a4Fkkkkkkkkkkkk8
.ikkk3
Dkkkkkkkkki4
Gkkk8;
DIlllkJ8
A8lllG
\6llli
b6mmmi2
M8lmmJ
<DmnnE
Dnnk6;
vqlqs{lu
'9NMNO.
^2?CCCLW
<<<<B(
'5@@@@@
'2DLDDL7Q
6LLLLLL@&&&%$H
<MMMMMMMMMCCKC2
COOOOOOOOggO6Q
?ggghggggg8H
<ghhhhhO9Q
?@NMMMM7
_7NOOOOOOO8P
_7Meeeee@H
KVVDR``
n:VZZZZLK
o;XrrrL
8quWINNBH
U[__RF
g{~}yxm
???)#w~l%
lkl8lklxlkl
lklxlkl8
Antivirus Signature
Bkav W32.Common.388B0D59
Lionic Trojan.Win32.Fabookie.4!c
tehtris Clean
MicroWorld-eScan Trojan.GenericKD.69589446
CMC Clean
CAT-QuickHeal Clean
ALYac Trojan.GenericKD.69589446
Malwarebytes Malware.AI.152705008
VIPRE Trojan.GenericKD.69589446
Sangfor Clean
K7AntiVirus Clean
BitDefender Trojan.GenericKD.69589446
K7GW Clean
CrowdStrike win/malicious_confidence_100% (W)
BitDefenderTheta Clean
VirIT Trojan.Win64.Agent.XD
Cyren W64/ABRisk.VDXE-4132
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/GenKryptik.GMMZ
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky Trojan.Win32.Fabookie.bvu
Alibaba Trojan:Win64/GenKryptik.90bcf2b0
NANO-Antivirus Trojan.Win64.Fabookie.kbtvtx
ViRobot Clean
Rising Downloader.Agent!8.B23 (TFE:2:EmnL0dJ0FNC)
TACHYON Clean
Sophos Mal/Generic-S
Baidu Clean
F-Secure Trojan.TR/AD.Swrort.vmdvv
DrWeb Trojan.DownLoader45.63815
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition RDN/Generic Downloader.x
Trapmine Clean
FireEye Trojan.GenericKD.69589446
Emsisoft Trojan.GenericKD.69589446 (B)
Ikarus Trojan.SuspectCRC
GData Trojan.GenericKD.69589446
Jiangmin Clean
Webroot Clean
Google Detected
Avira TR/AD.Swrort.vmdvv
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Win64.Gen.bot
Xcitium Clean
Arcabit Trojan.Generic.D425D9C6
SUPERAntiSpyware Clean
ZoneAlarm Trojan.Win32.Fabookie.bvu
Microsoft Trojan:Win64/Znyonm
Cynet Malicious (score: 99)
AhnLab-V3 Malware/Win.Generic.C5465291
Acronis Clean
McAfee RDN/Generic Downloader.x
MAX malware (ai score=89)
DeepInstinct MALICIOUS
VBA32 Clean
Cylance unsafe
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Win32.Trojan.Fabookie.Dzlw
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet W64/GenKryptik.GMMZ!tr
AVG Win64:Malware-gen
Cybereason Clean
Avast Win64:Malware-gen
No IRMA results available.