Static | ZeroBOX

PE Compile Time

2024-01-28 23:51:12

PE Imphash

9d444da8b49ab1101a8445f51b82b024

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000e2c0c 0x000e2e00 6.37718772879
.rdata 0x000e4000 0x00097210 0x00097400 5.10074612163
.data 0x0017c000 0x00004a74 0x00002400 3.66210135702
.pdata 0x00181000 0x00007350 0x00007400 6.06931069351
_RDATA 0x00189000 0x0000015c 0x00000200 3.34742664514
.rsrc 0x0018a000 0x000001e0 0x00000200 4.71229819329
.reloc 0x0018b000 0x00001f24 0x00002000 6.44264214715

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x0018a060 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library WS2_32.dll:
0x1400e45e0 closesocket
0x1400e45e8 inet_pton
0x1400e45f0 WSAStartup
0x1400e45f8 send
0x1400e4600 socket
0x1400e4608 connect
0x1400e4610 recv
0x1400e4618 WSACleanup
0x1400e4620 htons
Library CRYPT32.dll:
0x1400e4048 CryptUnprotectData
Library WININET.dll:
0x1400e45a8 InternetReadFile
0x1400e45b0 InternetCloseHandle
0x1400e45b8 InternetOpenW
0x1400e45c0 InternetOpenUrlA
0x1400e45c8 InternetOpenA
0x1400e45d0 HttpQueryInfoW
Library ntdll.dll:
0x1400e4698 NtOpenProcess
0x1400e46a0 NtQueryObject
0x1400e46a8 NtQuerySystemInformation
Library RstrtMgr.DLL:
0x1400e4508 RmGetList
0x1400e4510 RmStartSession
0x1400e4518 RmEndSession
0x1400e4520 RmRegisterResources
Library KERNEL32.dll:
0x1400e40a0 FindFirstFileW
0x1400e40a8 FindNextFileW
0x1400e40b0 FindClose
0x1400e40b8 CreateToolhelp32Snapshot
0x1400e40c0 Process32NextW
0x1400e40c8 LoadLibraryA
0x1400e40d0 Process32FirstW
0x1400e40d8 CloseHandle
0x1400e40e0 GetProcAddress
0x1400e40e8 FreeLibrary
0x1400e40f0 MultiByteToWideChar
0x1400e40f8 LocalFree
0x1400e4100 WideCharToMultiByte
0x1400e4108 GetExitCodeProcess
0x1400e4110 WriteProcessMemory
0x1400e4118 TerminateProcess
0x1400e4120 GetModuleFileNameW
0x1400e4128 WaitForSingleObject
0x1400e4130 ResumeThread
0x1400e4138 GetThreadContext
0x1400e4140 VirtualAllocEx
0x1400e4148 CreateProcessW
0x1400e4150 SetThreadContext
0x1400e4158 ExitProcess
0x1400e4160 ReadFile
0x1400e4168 GetModuleFileNameA
0x1400e4170 GetVolumeInformationW
0x1400e4178 GetGeoInfoA
0x1400e4180 HeapFree
0x1400e4188 EnterCriticalSection
0x1400e4190 GetCurrentProcess
0x1400e4198 GetProcessId
0x1400e41a0 GetProductInfo
0x1400e41a8 LeaveCriticalSection
0x1400e41b0 SetFilePointer
0x1400e41c0 FreeEnvironmentStringsW
0x1400e41c8 GetModuleHandleA
0x1400e41d0 OpenProcess
0x1400e41d8 HeapSize
0x1400e41e0 GetLogicalDriveStringsW
0x1400e41f0 GetTimeZoneInformation
0x1400e41f8 GetLastError
0x1400e4200 HeapReAlloc
0x1400e4208 GetNativeSystemInfo
0x1400e4210 HeapAlloc
0x1400e4218 GetUserGeoID
0x1400e4220 DecodePointer
0x1400e4228 GetFileSize
0x1400e4230 DeleteCriticalSection
0x1400e4238 GetComputerNameW
0x1400e4240 GetProcessHeap
0x1400e4248 GlobalMemoryStatusEx
0x1400e4250 GetModuleHandleW
0x1400e4258 GetEnvironmentStringsW
0x1400e4260 RtlCaptureContext
0x1400e4268 RtlLookupFunctionEntry
0x1400e4270 RtlVirtualUnwind
0x1400e4278 IsDebuggerPresent
0x1400e4280 UnhandledExceptionFilter
0x1400e4290 SetLastError
0x1400e42a0 GetCurrentProcessId
0x1400e42a8 GetSystemInfo
0x1400e42b0 VirtualAlloc
0x1400e42b8 VirtualProtect
0x1400e42c0 VirtualQuery
0x1400e42c8 GetCurrentThreadId
0x1400e42d0 FlsAlloc
0x1400e42d8 FlsGetValue
0x1400e42e0 FlsSetValue
0x1400e42e8 FlsFree
0x1400e42f8 LoadLibraryExW
0x1400e4300 GetDateFormatW
0x1400e4308 GetTimeFormatW
0x1400e4310 CompareStringW
0x1400e4318 LCMapStringW
0x1400e4320 GetLocaleInfoW
0x1400e4328 IsValidLocale
0x1400e4330 GetUserDefaultLCID
0x1400e4338 EnumSystemLocalesW
0x1400e4340 GetStdHandle
0x1400e4348 GetFileType
0x1400e4350 GetStartupInfoW
0x1400e4358 GetFileSizeEx
0x1400e4360 SetFilePointerEx
0x1400e4368 FlushFileBuffers
0x1400e4370 WriteFile
0x1400e4378 GetConsoleOutputCP
0x1400e4380 GetConsoleMode
0x1400e4388 RaiseException
0x1400e4390 ReadConsoleW
0x1400e4398 IsValidCodePage
0x1400e43a0 GetACP
0x1400e43a8 GetOEMCP
0x1400e43b0 GetCPInfo
0x1400e43b8 GetStringTypeW
0x1400e43c0 SetStdHandle
0x1400e43c8 SetEndOfFile
0x1400e43d0 WriteConsoleW
0x1400e43d8 OutputDebugStringW
0x1400e43e0 SetEnvironmentVariableW
0x1400e43e8 ReleaseSRWLockExclusive
0x1400e43f0 AcquireSRWLockExclusive
0x1400e43f8 WakeAllConditionVariable
0x1400e4408 QueryPerformanceCounter
0x1400e4410 InitializeSListHead
0x1400e4418 RtlUnwindEx
0x1400e4420 RtlUnwind
0x1400e4428 RtlPcToFileHeader
0x1400e4430 EncodePointer
0x1400e4438 TlsAlloc
0x1400e4440 TlsGetValue
0x1400e4448 TlsSetValue
0x1400e4450 TlsFree
0x1400e4458 VirtualQueryEx
0x1400e4460 ReadProcessMemory
0x1400e4468 VirtualFree
0x1400e4470 CreateFileMappingW
0x1400e4478 MapViewOfFile
0x1400e4480 UnmapViewOfFile
0x1400e4490 LCMapStringEx
0x1400e44a8 GetModuleHandleExW
0x1400e44b0 GetCommandLineA
0x1400e44b8 GetCommandLineW
0x1400e44c0 GetSystemTimeAsFileTime
0x1400e44c8 CreateFileW
0x1400e44d0 AreFileApisANSI
0x1400e44d8 GetFileAttributesExW
0x1400e44e0 FindFirstFileExW
0x1400e44e8 GetCurrentDirectoryW
0x1400e44f0 GetLocaleInfoEx
0x1400e44f8 FormatMessageA
Library USER32.dll:
0x1400e4568 EnumDisplayDevicesW
0x1400e4570 GetDC
0x1400e4578 GetSystemMetrics
0x1400e4580 GetWindowRect
0x1400e4588 GetDesktopWindow
0x1400e4590 ReleaseDC
Library GDI32.dll:
0x1400e4058 CreateCompatibleBitmap
0x1400e4060 SelectObject
0x1400e4068 CreateCompatibleDC
0x1400e4070 BitBlt
0x1400e4078 DeleteDC
0x1400e4080 GetObjectW
0x1400e4088 DeleteObject
0x1400e4090 GetDeviceCaps
Library ADVAPI32.dll:
0x1400e4000 GetCurrentHwProfileW
0x1400e4008 RegCloseKey
0x1400e4010 RegQueryValueExA
0x1400e4018 RegOpenKeyExA
0x1400e4020 GetUserNameW
0x1400e4028 RegEnumKeyExA
0x1400e4030 CredEnumerateA
0x1400e4038 CredFree
Library SHELL32.dll:
0x1400e4530 ShellExecuteW
0x1400e4538 SHGetKnownFolderPath
Library ole32.dll:
0x1400e46b8 CoTaskMemFree
0x1400e46c0 CreateStreamOnHGlobal
Library SHLWAPI.dll:
0x1400e4548 None
0x1400e4550 None
0x1400e4558 None
Library gdiplus.dll:
0x1400e4630 GdiplusStartup
0x1400e4638 GdiplusShutdown
0x1400e4640 GdipGetImageEncoders
0x1400e4648 GdipCloneImage
0x1400e4650 GdipAlloc
0x1400e4660 GdipDisposeImage
0x1400e4670 GdipSaveImageToStream
0x1400e4678 GdipGetImageEncodersSize
0x1400e4680 GdipFree

!This program cannot be run in DOS mode.
Rich){
`.rdata
@.data
.pdata
@_RDATA
@.rsrc
@.reloc
|$ UATAUAVAWH
<zQT6^
~&7=Z;
<zQT6^
<zQT6^
[T;'Y0
<zQT6^
<zQT6^
<zQT6^
J=0T^
<zQT6^
J=0T^
<zQT6^
<zQT6^
<zQT6^
<zQT6^
A_A^A]A\]
UATAUAVAWH
<zQT6^
A_A^A]A\]
<zQT6^
|$ UATAUAVAWH
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
@USVWATAUAVAWH
A_A^A]A\_^[]
UATAUAVAWH
A_A^A]A\]
|$ UAVAWH
|$ UATAUAVAWH
McN?%
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
WAVAWH
fffffff
WAVAWH
fffffff
u[L95Yr
cvtsi2sdH
cvtsi2ssH
UATAUAVAWH
A_A^A]A\]
@SUVWAVH
`A^_^][
t$ WAVAWH
@A_A^_
t$ UWATAVAWH
A_A^A\_]
@SUVWAVH
PA^_^][
PA^_^][
PA^_^][
fB94Bu
UAVAWH
<zQT6^
UAVAWH
<zQT6^
UWATAVAWH
A_A^A\_]
@SUWAVH
(A^_][
(A^_][
p UWAVH
<zQT6^
<zQT6^
UATAUAVAWH
A_A^A]A\]
t$ WAVAWH
t$ WATAUAVAWH
A_A^A]A\_
d$ UAVAWH
UATAUAVAWH
<zQT6^
A_A^A]A\]
UATAUAVAWH
<zQT6^
A_A^A]A\]
UATAUAVAWH
<zQT6^
A_A^A]A\]
UATAUAVAWH
A_A^A]A\]
UATAUAVAWH
<zQT6^
A_A^A]A\]
UATAUAVAWH
A_A^A]A\]
UATAUAVAWH
<zQT6^
A_A^A]A\]
UATAUAVAWH
A_A^A]A\]
l$ VWAVH
l$ VWAVH
\$8@8k
3333333
VWATAVAWH
A_A^A\_^
t$ AVH
t$ AVH
|$ UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
3333333
3333333
A_A^A]A\_^]
|$ AVH
@SUWAVAWH
A_A^_][
A_A^_][
t$ UWATAVAWH
A_A^A\_]
|$ AVH
l$ VAVAWH
A_A^^
UVWAVAWH
A_A^_^]
\$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
0A_A^A]A\_^]
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
3333333
`A_A^A]A\_^]
WAVAWH
0A_A^_
@USVWAVH
A^_^[]
@VWAVAWH
8A_A^_^
SVAUAWH
HA_A]^[
@SUVAWH
(A_^][
(A_^][
@SVAVH
@SVAVAWH
8A_A^^[
@WATAVAWH
8A_A^A\_
@SVAVAWH
(A_A^^[
@SVATAUAWH
0A_A]A\^[
\$ UVWH
UVWATAUAVAWH
A_A^A]A\_^]
@SUVWAVH
A^_^][
A^_^][
A^_^][
@SVWATAUAVAWH
A_A^A]A\_^[
WAVAWH
0A_A^_
@SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
0A_A^A]A\_^[
WAVAWH
A_A^_
@SVATH
UVWAVAWH
@A_A^_^]
\$ VWAWH
SVWATAUAVAWH
@A_A^A]A\_^[
l$ VWAVH
t$ WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
3333333
3333333
A_A^A]A\_
\$ UVWAVAWH
t$(@8s
d$pA8w
@A_A^_^]
t$ WATAUAVAWH
UPH;UXt
|$|.u/
|$|.u2
A_A^A]A\_
t$ UWAVH
CL$hH;
@SVWATAUAVAWH
A_A^A]A\_^[
UVWAVAWH
H;E(tbH
A_A^_^]
d$ UAVAWH
t$ UWAVH
UVWATAUAVAWH
A_A^A]A\_^]
d$ UAVAWH
l$ VWAVH
t$ UWATAVAWH
A_A^A\_]
@SVWATAUAVAWH
PA_A^A]A\_^[
fB9<Bu
l$ VWAVH
\$ UVWH
@SUVWAVH
A^_^][
A^_^][
|$ HcB<I
@SVWAVAW
A_A^_^[
D$XL;D$`
SVWATAUAVAWH
A_A^A]A\_^[
UATAUAVAWH
A_A^A]A\]
@SVATAUAWH
0A_A]A\^[
@USVWAUAVAWH
A_A^A]_^[]
L$ SWH
L$ SVWH
L$ SVWH
L$ SUVWH
L$ SUVWH
l$ VWAVH
WATAUAVAWL
D$8A)U
t$HA_A^A]A\_
UVWATAUAVAWH
`A_A^A]A\_^]
@UVWAVAWH
e`A_A^_^]
A8F)tkI
UVWATAUAVAWH
A_A^A]A\_^]
UWATAVAWH
A_A^A\_]
d$ UAVAWH
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
t?xDE3
A_A^A]A\_^]
ATAVAW
A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
!!!!!!!!!
!!!!!!!
!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|$ UATAUAVAWH
A_A^A]A\]
@USVWH
\$ UVWATAUAVAWH
A_A^A]A\_^]
UWATAVAWH
A_A^A\_]
|$ UATAUAVAWH
A_A^A]A\]
UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
S H;S(tpH
@SUVWAVH
L90u"H
0A^_^][
l$ VWAVH
@SVAVH
|$ tiI
|$ UAVAWH
UVWAVAWH
A_A^_^]
WAVAWH
WAVAWH
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
USVWATAUAVAWH
C@H90t$H
A_A^A]A\_^[]
UVWATAUAVAWH
C@H98t$H
A_A^A]A\_^]
UVWATAUAVAWH
C@H98t$H
)D$0M+
A_A^A]A\_^]
WATAUAVAWH
DZ\bH
DZ\tH
DZ\nH
DZ\fH
DZ\rH
DZ\"H
DZ\\H
A_A^A]A\_
@USVWAVH
GPD90~
CPD90~
A^_^[]
@SVATAUAWH
|$Xu4I
A_A]A\^[
A_A]A\^[
VWATAVAWH
@A_A^A\_^
@USVWAVH
A^_^[]
@SUVATH
8A\^][
t$ UWAVH
t$ UWAVH
t$ UWAVH
UVWATAUAVAWH
A_A^A]A\_^]
UVWAVAWH
A_A^_^]
@USVWATAUAVAWH
xA_A^A]A\_^[]
D$ trueA
D$ falsH
D$ nullA
D$ trueH
D$ fals
:D< uXH
D$ null
:D< u+H
L$0H;SHt
D$0H;SHt
L$0H;SHt
L$0H;SHt
t$ WAVAWH
L$PH;SHt
A_A^_
@USVWAVH
A^_^[]
D$0H;SHt
L$0H;SHt
D$0H;SHt
L$0H;SHt
\$ UWATAUAWH
A_A]A\_]
 !!"!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$%&&&&&&&&&&&&'&&()))*f
D$ H;Q
 !!"!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!#!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$%&&&&&&&&&&&&'&&()))*f
l$ VWAVH
D$ H;WHt
t$ WAVAWH
T$ H;CHt
@A_A^_
A8H98t!H
D$pH;SHt
\$ UVWAVAWH
0A_A^_^]
SUVWAVH
A^_^][
k VWAVH
@SVWATAUAVAWH
@A_A^A]A\_^[
@SVWATAUAVAWH
PA_A^A]A\_^[
t$ WAVAWH
WAVAWH
0A_A^_
UVWAVAWH
A_A^_^]
p UWAVH
p UWAVH
UVWAVAWH
A_A^_^]
@SUVATH
HA\^][
|$ UAVAWH
l$ VWAVH
3333333
\$ UVWATAUAVAWH
0A_A^A]A\_^]
t$ WATAUAVAWH
A_A^A]A\_
VWATAVAWH
pA_A^A\_^
t$ UWAVH
UVWAVAWH
0A_A^_^]
0A_A^_^]
0A_A^_^]
UVWAVAWH
0A_A^_^]
0A_A^_^]
0A_A^_^]
UVWAVAWH
0A_A^_^]
0A_A^_^]
0A_A^_^]
t$ UWAVH
@USVWATAVAWH
A_A^A\_^[]
@USVWAVH
`A^_^[]
t$ UWAVH
t$ UWAVH
t$ UWAVH
t$ UWAVH
t$ UWAVH
t$ WATAUAVAWH
A_A^A]A\_
I92u7A
SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
PA_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
SVWATAUAVAWH
0A_A^A]A\_^[
D$0@8{
p*W4H
p*W4H
@UAVAWH
u3HcH<H
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
0A_A^A]A\_
S(HcS0
S(HcS0
S(HcS0
D$@H;F
kL@8o(u
kL@8o(u
<htl<jt\<lt4<tt$<wt
|$ UATAUAVAWH
A_A^A]A\]
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
0A_A^A]A\_
UVWATAUAVAWH
rsf;\$d
r_f;\$l
rKf;\$t
r7f;\$|
f;\$4r
f;\$<r
rvf;\$d
rbf;\$l
rNf;\$t
r:f;\$|
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
USVWATAUAVAWH
XA_A^A]A\_^[]
UVWATAUAVAWH
@A_A^A]A\_^]
WAVAWH
@A_A^_
WAUAVH
@A^A]_
WAVAWH
A_A^_
WAVAWH
A_A^_
L$ UVWATAUAVAWH
A8m(u=I
D$xH;C
0A_A^A]A\_^]
t$ WATAUAVAWH
@8i(u:
D$0H;C
A_A^A]A\_
8\$Pt@
t;8_2t
8\$PtF
tA8_:t
8\$PtB
t=8_2t
8\$PtH
tC8_:t
WATAUAVAWH
@8q2u~H
A_A^A]A\_
x ATAVAWH
A_A^A\
UVWATAUAVAWH
D8i2uwH
0A_A^A]A\_^]
tED8k2u7H
VWATAVAWH
0A_A^A\_^
tQD8c:u0M
@HcC(H
UVWATAUAVAWH
0A_A^A]A\_^]
t$ WATAUAVAWH
t$HA_A^A]A\_
UVWATAUAVAWH
L$<;L$P
L$4+L$8
D+d$HD
A_A^A]A\_^]
SUVWATAVAWH
A_A^A\_^][
@8|$Pu
@8|$Pu
L$0H;K
@8(u&I
t$ UWAVH
@UAVAWH
epA_A^]
w`HcE H
Hc;9E0t
HcE H+
L$ VWAVH
SUVWAUAVAWH
A_A^A]_^][
u$D8r(t
D81uUL9r
uED8r(t
vAD8s(t
f9)u4H9j
u%@8j(t
x UATAUAVAWH
A_A^A]A\]
t$ WATAUAVAWH
0A_A^A]A\_
D$(H!L$ E3
;D$hsL
L$ UVWATAUAVAWH
0A_A^A]A\_^]
T$ D){
WAVAWH
fE98t'
0A_A^_
@USVWATAUAVAWH
A_A^A]A\_^[]
9Cu,fD9y
fB9<{u
fD9,pu
t$`fD9+t$I
x ATAVAWH
A_A^A\
L$ SUVWH
WATAUAVAWH
0A_A^A]A\_
\$ UVWATAUAVAWH
fD9,Au
A_A^A]A\_^]
\$ UVWATAUAVAWH
f9t$bu
A_A^A]A\_^]
H9L$Ht?H
UVWATAUAVAWH
fE9,Fu
A_A^A]A\_^]
|$ AVH
WATAUAVAWH
A_A^A]A\_
p0R^G'
@UATAUAVAWH
A_A^A]A\]
p0R^G'
WAVAWH
A_A^_
WAVAWH
A_A^_
fD9t$b
t$ WATAUAVAWH
gfffffffH
A_A^A]A\_
{ AUAVAWH
0A_A^A]
t$xt*3
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
L$ VWAVH
fD94H}aD
D$0H9D$8
D$@H=@W
p WATAUAVAWH
A_A^A]A\_
T$xD;D$x
@USVWATAVAWH
fD9$Ou
0A_A^A\_^[]
fD9$wu
}HfD9#A
\$ UVWH
UVWATAUAVAWH
fB9<I}1L
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
VATAUAVAWH
0A_A^A]A\^
@USVWATAUAVAWH
H!D$ H
xA_A^A]A\_^[]
|$ UATAUAVAWH
9^ t"H
A_A^A]A\]
@UVWATAUAVAWH
e0A_A^A]A\_^]
UWATAVAWH
A_A^A\_]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAW
A_A^A]A\_^]
u1!D$0H
UVWATAUAVAWH
PA_A^A]A\_^]
\$ UVWATAUAVAWH
s2fE9)I
fE9)fA
D$pfA;
0fD9l$pu
fD9l$pt
0A_A^A]A\_^]
l$ VWATAVAWH
0A_A^A\_^
AUAVAWH
A_A^A]
UVWATAUAVAWH
@8t$HtzL
`A_A^A]A\_^]
VATAUAVAWH
0A_A^A]A\^
t$ WATAUAVAWH
D!|$xA
A_A^A]A\_
l$ VWATAVAWH
L$&8\$&t,8Y
A_A^A\_^
s WATAUAVAWH
D$h9t$P
A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
@UATAUAVAWH
e0A_A^A]A\]
fB9<Hu
fB9<@u
fB9<Bu
fB9,Nu
fB9,Nu
fB9,Nu
fA9,Au
fB94Ou
t}f91txH
x ATAVAWH
A_A^A\
x ATAVAWH
fD9 tMH
fG9$Ou
0A_A^A\
fB9<Hu
fB9<@u
fB9<Bu
fD94Au
fD94iu
tSf91tNH
t^;\$0tQ
WAVAWH
A_A^_
@USVWATAVAWH
tyfD9 tsH
tQfD9 tK
fD9$Hu
@A_A^A\_^[]
WAVAWH
A_A^_
ATAVAWH
0A_A^A\
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
0A_A^A]A\_
WAVAWH
@A_A^_
@UAVAWH
e0A_A^]
@SUVWATAVAWH
A_A^A\_^][
WAVAWH
D8|$`t
A_A^_
x ATAVAWH
@A_A^A\
ffffff
fffffff
@SUVWATAVAWH
@A_A^A\_^][
WAVAWH
fA9,@u
fA9,vu
0A_A^_
T$`fA;
ATAVAWH
A_A^A\
USVWAVH
A^_^[]
WATAUAVAWH
fB94ht
xXI96tSI
fC94wu
0A_A^A]A\_
WATAVH
0A^A\_
E80t"A
fD94Q}
SVWAVH
8A^_^[
WAVAWH
u/HcH<H
D8L$0u`
VWATAVAWH
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
H;xXu5
A:8ucI
t&A88t
WATAUAVAWH
A_A^A]A\_
fffffff
ffffff
vKfffff
fffffff
fffffff
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
@USVWATAUAVAWH
d$dD;d$ltY
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
@SVWATAUAVAWH
L!|$(L!
D$0HcH
pA_A^A]A\_^[
SVWATAUAWH
L!d$(L!d$@D
D$HL9gXt
A_A]A\_^[
B(I9A(
SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
D$ I;R
D$ I9P
WATAUAVAWH
A_A^A]A\_
|$ AVH
|$ ATAVAWH
t$0t.ff
@A_A^A\
WAVAWH
A_A^_
SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
VWATAVAWH
t$(@8s
d$pA8w
A_A^A\_^
@SWAWH
@SWAVH
SVWATAUAVAWH
@A_A^A]A\_^[
@A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
@A_A^A]A\_^[
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
WAVAWH
R8H+V0t>H
^PH+^HH
A_A^_
|$ AVH
|$ AVH
VWATAVAWH
A_A^A\_^
VWATAVAWH
A_A^A\_^
C8H;C0
D$`HcH
D$`HcH
D$`HcH
C8H+C0H;
S8H+S0H
C8H+C0H
UVWATAUAVAWH
G8H+G0H
G8H+G0
A_A^A]A\_^]
WAVAWH
A_A^_
UWATAVAWH
A_A^A\_]
\$ UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
D8} uPD
A_A^A]A\_^[]
T$PH;T$Xt)
T$PH;T$Xt)
T$PH;T$Xt
T$PH;T$Xt
D$PH;D$Xt
AHH;APt-
|$ UATAUAVAWH
\$PH;\$XtR
H;\$Xu
D$XH9D$P
@8L+@0L
L$pL+L$hH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
\$ UVWATAUAVAWH
A8H+A0f
D$hH9D$`
\$`H;\$htP
H;\$hu
\$xH;]
D$hH;D$pt
A_A^A]A\_^]
\$ UVWAVAWH
A8H+A0H
A_A^_^]
x UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
@SUVWATAVAWH
PA_A^A\_^][
UVWATAUAVAWH
A_A^A]A\_^]
FHI;FPu
FHI;FPu
H;\$pH
B\$pH;L$xH
GL$xH%
L$8uZH;
UVWAVAWH
@A_A^_^]
SVWATAUAVAWH
A_A^A]A\_^[
WATAUAVAWH
@A_A^A]A\_
UUUUUUU
UVWATAUAVAWH
@A_A^A]A\_^]
@USVWATAUAVAWH
C8H+C0H
H9T$hu
A_A^A]A\_^[]
@USVWAWH
A__^[]
VWATAVAWH
~8H+~0tgH
F8H+F0L
A_A^A\_^
\$ WAVAWH
KHH;SXt
|$HH;SXt
A_A^_
SVWATAUAVAWH
@A_A^A]A\_^[
\$ UVWATAUAVAWH
A_A^A]A\_^]
SUVATAUH
A]A\^][
UVWATAUAVAWH
C8H+C0H
A_A^A]A\_^]
(H;l$@
UVWATAUAVAWH
\.PK+\.HH
L+D$@H
L$pH+L$hI
A_A^A]A\_^]
|$ UAVAWH
UVWATAUAVAWH
A_A^A]A\_^]
A8H+A0f
SVWATAUAVAWH
0A_A^A]A\_^[
WATAUAVAWH
0A_A^A]A\_
fffffff
UVWATAUAVAWH
0A_A^A]A\_^]
VWATAVAWH
W`I;Wht#L
@A_A^A\_^
A0;A s
A2f;A4v
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
rn-sae
rd-sae
ru-sae
rz-sae
u|=evexu
=locku
=longu
=repet"=repzt
xacquireL;
xreleaseL;
|$ ATAVAWH
@A_A^A\
USVWATAUAVAWH
A_A^A]A\_^[]
|$ ATAUAVAWI
|$@A_A^A]A\
byteu*H
VWATAVAWH
\$ H+\$(I
0A_A^A\_^
t$ WATAWH
t|H9_0uvD8g
A_A\_
@SWAWH
l$ VWAWH
@SATAUH
0A]A\[
l$XuhL
@ .tex
0A]A\[
SVWATAUAVH
HA^A]A\_^[
HA^A]A\_^[
HA^A]A\_^[
HA^A]A\_^[
HA^A]A\_^[
n`A+D$
HA^A]A\_^[
SVWAUH
8A]_^[
8A]_^[
8A]_^[
8A]_^[
$L;EXv#
@VWATH
USVWATAUAVAWH
A_A^A]A\_^[]
+T$XA+
H+T$XH
HcL$pI+
D$XLc`
WAVAWH
D$ <L
UUUUUUUUL;
@SUWATAUH
A]A\_][
WATAUAVAWH
A_A^A]A\_
t$ WATAWH
A_A\_
|$ ATAVAWH
A_A^A\
@SATAVH
0A^A\[
l$ WAVAWH
A_A^_
A_A^_
A_A^_
t$ WATAUAVAWH
A_A^A]A\_
l$ WATAWH
@A_A\_
@A_A\_
@SVATH
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
@A_A^A]A\_^]
s!H;l$HL
C|$HH9L$PL
ND;NHu
nPD9nTu
L)A()VHD;vPH
FDH)G H
@VATAUAVH
(A^A]A\^
(A^A]A\^
(A^A]A\^
(A^A]A\^
)OH;wPH
|$ AVH
D$@<L
WAVAWH
D$@<L
WATAUAVAWH
D$@<L
A_A^A]A\_
UWAUAVAWH
D$0<L
A_A^A]_]
UVWATAUAVAWH
D$ <L
A_A^A]A\_^]
SVWAUH
t*@80t@8p
HA]_^[
|$ UATAUAVAWH
A_A^A]A\]
|$ AVH
D$H<s
UATAUAVAWH
@A_A^A]A\]
|$ UATAUAVAWH
b@D#b03
+Mgu%L
A_A^A]A\]
\$ UWATAUAWH
A_A]A\_]
WATAUAVAWH
@A_A^A]A\_
D$ t%=
WATAUAVAWH
@A_A^A]A\_
D$(<s
UVWATAUAVAWH
D$0H#E
A_A^A]A\_^]
@VWATH
D8#t9A
|$ ATAVAWH
A_A^A\
WATAUAVAWH
0A_A^A]A\_
L$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
@A_A^A]A\_^]
SUVWATAUAVAWH
A_A^A]A\_^][
D#L$`3
WAVAWH
t$ UWAVH
l$ VWAVH
t$ WAVAWH
@A_A^_
@UAVAWH
UVWAVAWH
0A_A^_^]
fffffff
fffffff
fffffff
fffffff
ffffff
fffffff
fffffff
fffffff
fffffff
ffffff
t$ UWAUAVAWH
A_A^A]_]
|$ AVH
UVWATAUAVAWH
H;\$8u
H;\$8u
fE9$Iu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H9>u+A
WATAVH
0A^A\_
@USVWATAUAVAWH
xA_A^A]A\_^[]
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
UVWATAUAVAWH
@A_A^A]A\_^]
s WAVAWH
0A_A^_
u~9t$Xt
UATAUAVAWH
A_A^A]A\]
x ATAVAWH
@8~8t
@8~0tM
A_A^A\
LcA<E3
UVWATAUAVAWH
@8r tRA
0A_A^A]A\_^]
|$ AVE2
UVWATAUAVAWH
F+8F(u
0A_A^A]A\_^]
|$ AVH
WAVAWH
A_A^_
WATAUAVAWH
u.HcC0
0A_A^A]A\_
tC<8t!<:u`
l$ WAUAVAW
l$@A_A^A]_
|$ AVH
|$ AVH
t$ AWH
WATAUAVAWH
H;C0wD
@A_A^A]A\_
tf;B`u
|$ AVH
H;C v
|$huVH
WAVAWH
A_A^_
H;C0ww
H;C0wKH
H;C0w+
t$(D8`
|$hu0H
WAVAWH
A_A^_
H;C0wA
@SVAVH
S(D8;tKH
@SUVWATAVH
hA^A\_^][
|$ AVH
UVWATAUAVAWH
A_A^A]A\_^]
u;9B4u6
SUVWAVH
CorExitProcess
(null)
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)SNAN)
IND)ind)
IND)ind)
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetDateFormatEx
GetTempPath2W
GetLocaleInfoEx
GetSystemTimePreciseAsFileTime
GetTimeFormatEx
GetUserDefaultLocaleName
InitializeCriticalSectionEx
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
SetThreadStackGuarantee
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
_hypot
_nextafter
1#QNAN
1#SNAN
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
bad allocation
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
short
UNKNOWN
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
cmovle
cmovnb
cmovnbe
cmovnl
cmovnle
cmovno
cmovnp
cmovns
cmovnz
cmpxchg
cvtsi2sd
cvtsi2ss
extractps
pextrb
pextrd
pextrq
setnbe
setnle
dest holder
VALLOC2
INPLACE
CODE_CAVE
INPLACE_SHORT
RECOMMENDED
Failed to generate in-place trampoline:
VirtualAlloc2 failed to find a region near function
VirtualAlloc2 failed allocate within requested range
No code caves found near function
None of the allowed hooking schemes have succeeded
Invalid state: hook instructions are empty
m_fnAddress:
Original function:
Disassembler unable to decode any valid instructions
Prologue jmp resolution failed
Chosen detour scheme:
Function too small to hook safely!
Function needs a prologue jmp table but it's too small to insert one
Prologue to overwrite:
m_trampoline:
m_trampolineSz:
Trampoline:
Trampoline Jmp Tbl:
Hook instructions:
Hook size:
Prologue offset:
Failed to detect pointer size:
Unexpected size of immediate:
Unexpected register:
Unexpected scratch register:
No translation support for such instruction
push rax
mov rax,
xchg [rsp], rax
lea rsp, [rsp - 0x80]
Translation:
AsmTK error:
AsmJit error:
Translation address:
Instructions needing entry:
Instructions needing relocation:
Instructions needing translation:
Trampoline address:
Jmp To Prol:
invalid map<K, T> key
c2 ?? ??
c3 0f 1f 44 00 00
c3 0f 1f 84 00 00 00 00 00
c3 66 0f 1f 84 00 00 00 00 00
c3 66 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc 66 0f 1f 44 00 00
c3 66 66 66 66 66 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? 0f 1f 44 00 00
c2 ?? ?? 0f 1f 84 00 00 00 00 00
c2 ?? ?? 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc 66 0f 1f 44 00 00
c2 ?? ?? 66 66 66 66 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
kernelbase.dll
VirtualAlloc2
Failed to initialize zydis decoder
Failed to initialize zydis formatter
invalid unordered_map<K, T> key
invalid vector subscript
unordered_map/set too long
invalid hash bucket count
_Couldn't decompile instructions at followed jmp
Prologue jmp resolution hit max depth, prologue too deep
setting: Do NOT follow CALL on fnAddress
First assembly instruction is CALL
Branching instruction without displacement encountered
Detour unhook failed: no hook present
hook size must not be larger than nop prologue offset
,,,,,,,,,*****,,,,,,,,,,,,,,,,,,*)))'))))))))(%)
))))))&
 !"#))))$)
 !"#)))),++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Ok
OutOfMemory
InvalidArgument
InvalidState
InvalidArch
NotInitialized
AlreadyInitialized
FeatureNotEnabled
TooManyHandles
TooLarge
NoCodeGenerated
InvalidDirective
InvalidLabel
TooManyLabels
LabelAlreadyBound
LabelAlreadyDefined
LabelNameTooLong
InvalidLabelName
InvalidParentLabel
InvalidSection
TooManySections
InvalidSectionName
TooManyRelocations
InvalidRelocEntry
RelocOffsetOutOfRange
InvalidAssignment
InvalidInstruction
InvalidRegType
InvalidRegGroup
InvalidPhysId
InvalidVirtId
InvalidElementIndex
InvalidPrefixCombination
InvalidLockPrefix
InvalidXAcquirePrefix
InvalidXReleasePrefix
InvalidRepPrefix
InvalidRexPrefix
InvalidExtraReg
InvalidKMaskUse
InvalidKZeroUse
InvalidBroadcast
InvalidEROrSAE
InvalidAddress
InvalidAddressIndex
InvalidAddressScale
InvalidAddress64Bit
InvalidAddress64BitZeroExtension
InvalidDisplacement
InvalidSegment
InvalidImmediate
InvalidOperandSize
AmbiguousOperandSize
OperandSizeMismatch
InvalidOption
OptionAlreadyDefined
InvalidTypeId
InvalidUseOfGpbHi
InvalidUseOfGpq
InvalidUseOfF80
NotConsecutiveRegs
ConsecutiveRegsAllocation
IllegalVirtReg
TooManyVirtRegs
NoMorePhysRegs
OverlappedRegs
OverlappingStackRegWithRegArg
ExpressionLabelNotBound
ExpressionOverflow
FailedToOpenAnonymousMemory
<Unknown>
.addrtab
&.6>de
align %u
0123456789ABCDEF
#$%%&''(())**++,,,--..//000111122223334444555566666667777777888888889999999999999:::::::::::::::;;;;;;;;;;;;;;<<<<<<<====>>>>???
AuthenticAMDINTEL
GenuineIntelVIA
CentaurHaulsVIA
UNKNOWN
.section %s {#%u}
888884
222224
./012345
>???:<
@ABBC/
$C4BBDEEFGGHH;;C;;GGI04JK
RRRRRRRRRR
dedefg
mnjmnmn
oo!!jM
ss/tssssssss
GGvwCCCCxGy
||||U~
)*+,)*)*+,+,
,-./0-./0
123)*+,)*+,4
OOPOPPPOOQR
YYYYYYYYYYYYYYYYYYYYYYYYYYYYY
uvwvwuvwvw
xyxyzz{|zzz}~
zzzzzzzzz
zzzzzzzzz
xyzzz}~
EFggggggtt
tttttt
gggggggg
:V, :V0
Iap Ia
")eK#)e@")eN#)e/%)u&
1eD#1e
Cdp JT
^de$hdd$h
qd! qd_
>ee!>ea"
Dee!DUM!DUJ5
!R/C!RF#
%QQN#p
U-#pVq
8rD#8r
8rF#8bH38bK38b@B8bN3
RSp RS
qacBqagBq
AkUW!kUW13OY
9bp 9R
0tr{26
~rp ~r
Qv`Qv`$Qv`
Pv`)Qv`.Qv`3Qv`%4v`(4v`
v`p vp&
uU%4uU(4
Q8qQ8q$Q8q
P8q)Q8q.Q8q3Q8q
8qp 8q
+tp +t
b0Ba*`H
4@Hqe@Hq=PHqBPHqGPHqLPHqp
2t, 2t0 2d}
2d942d<42d?42d
Btp Id
Id64Id
]te$gdc4gdm4
pt\ ptw$p
pt! pt_
)2 b/C bF# B
F#7rH37rK37r@B7rN3
QcYCQc]CQcaCQceCQc
Qcp Qc
0iS+Pnc0@iS=PiSGPiS
iSp ,G
vgf2p8affineinvqbvaeskeygenassistvbroadcastf32x464x264x4i32x2i32x4i32x8i64x2i64x4vpbroadcastmb2w2d128i128vcvtne2ps2bf1vfmaddsub132ph213pd213ph213ps231pd231ph231psvfmsubadd132vpmultishiftvscatterpf0dqpdqps1dpd1dps1qpd1qpsvcvtneps2bf1vextracvextractfvgatherpf0vp2intersectsdvfnmadd132213sd213sh213ss231sd231sh231ssvfnmsub132vinservinsertfvpshufbitqprefetchntwt1saveprevsssha256rndtileloaddtilereleavaesdeclvaesenclvcompressvcvttpd2uqqvcvttph2uvcvttps2uvcvttsd2uvcvttsh2uvcvttss2uvfixupimmvfmadd132vfmsub132vmaskmovdqvpcompressvpconflictvphminposuvpmadd52hluqvpscatterqdvpunpckhqlqdqvrndscaleclflushopcmpxchg16t0t2msg1msg2tilestorev4fnmaddssvcvtpd2uvcvtph2psudqvcvtps2phvcvtsd2uvcvtsh2uvcvtss2uvcvtudq2vcvtuqq2vcvtusi2vfcmaddcvfpclassvgetmanmulbvp4dpwssvpclmuvpcmpestrvpcmpistrvperm2fvpermil2vpgathervpmacssdqvpmadcsswubswvpmaskmovpternlogbwwdlbwldqlwdvrsqrt1428pd28ps28sd28ssvshufvshuffvzeroupxsaveopt8bfxrstorldtilecfmovdir64pvalidarmpadjurmpupdaserialisha1nexsha1rndssttilecftdpbf16v4fmadvaddsubvblendmvpdvcvtdq2uwvcvtqq2vcv
!"#$%&'()*+,#%')')"#$%&'()*+"#$%&'()*+"#$%&'()*+"#$%&'()*+"#$%&'()*+
@@@@@@@@@@
<InvalidLabel:%u>
.repeat %zu
52+;>/7A
gpb.hi
byte ptr
word ptr
dword ptr
fword ptr
qword ptr
tbyte ptr
xmmword ptr
ymmword ptr
zmmword ptr
<Reg-%u>?%u
<None>
UNORD_Q
NEQ_UQ
NLT_US
NLE_US
NGE_US
NGT_US
FALSE_OQ
NEQ_OQ
TRUE_UQ
UNORD_S
NEQ_US
NLT_UQ
NLE_UQ
NGE_UQ
NGT_UQ
FALSE_OS
NEQ_OS
TRUE_US
DENORMAL
-FINITE
+INF_IE
-VE_IE
-INF_IE
SNAN_IE
ONE_IE
ONE_ZE
ZERO_IE
ZERO_ZE
[1, 2)
[.5, 2)
[.5, 1)
[.75, 1.5)
NO_SIGN
QNAN_IF_SIGN
BLK1[4]
BLK1[5]
BLK2[4]
BLK2[5]
BLK2[6]
BLK2[7]
BLK1[0]
BLK1[1]
BLK2[0]
BLK2[1]
BLK2[2]
BLK2[3]
SIGN_A
SIGN_B
SIGN_0
SIGN_1
MIN_ABS
MAX_ABS
LEN=%d
INEXACT
{vex}
{vex3}
{evex}
{modrm}
{modmr}
xacquire
xrelease
repnz
[InstId=#%u]
{1to%u}
, {%s-sae}
, {sae}
QPm QP
XPm XP
_Pm _P
fPm fP
`m `
'`m '`
o`m o`
u`m u`
{`m {`
Qp fFI
8`508`>0
autia1716autibldsmaxalhldsminalldumaxallduminalsha256su0sha512su1sm3partwsqrshrunldaddalldclralldeoralldsetallbstsmaxstsminstumaxstuminfrint32z64x64zh2sqdmlalsl2sqdmulsqrdmlaulhn2sqshruuqrshrspcrc32cstaddstclrsteorstsetxpaclbfcvtbfmlaltfcvtxfjcvtzfmaxnmfminnmfrsqrraddrsubsha1sm3tt12a2bsm4ekeysqxtuuqshrursqrsetfrev8
>8B 8R ?8
>?8B ?8R (B
> (N (^ 8
> 8N 8^
bad function call
success
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
unknown error
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
GetCurrentPackageId
UUUUUU
UUUUUU
"e?<<<<<<l?
Il?333333c?
.i?0@I
d?000000`?
)|B?d!
L?UUUUUUU?
&?PPPPPPP?
0X8b?~
%GoU?*
(T?j?Y
Zod(^?
D W?{W
qS>g?h3
c?FA@s}
UUUUUU
UUUUUU
A03>A|
Q5rHg,>
Hk=>:
j>>A?1
.>PJ;I:qE>
:>t6k'
])6M>&
CWD>~3
_oD>Kg
N>O=I9
F>qUxv
/2GG>!B
zY;>u:m
P>q_Y~
0><[cZUg^>
Y>kX>M
H[><y5
[*ncd>0
S>$hkDh$h>[2
UA>N0Wl
x87control
x87status
x87tag
eflags
rflags
bndcfg
bndstatus
invalid
addsubpd
addsubps
aesdec
aesdec128kl
aesdec256kl
aesdeclast
aesdecwide128kl
aesdecwide256kl
aesenc
aesenc128kl
aesenc256kl
aesenclast
aesencwide128kl
aesencwide256kl
aesimc
aeskeygenassist
andnpd
andnps
blcfill
blcmsk
blendpd
blendps
blendvpd
blendvps
blsfill
blsmsk
bndldx
bndmov
bndstx
cldemote
clevict0
clevict1
clflush
clflushopt
clrssbsy
clzero
cmovbe
cmpxchg16b
cmpxchg8b
comisd
comiss
cvtdq2pd
cvtdq2ps
cvtpd2dq
cvtpd2pi
cvtpd2ps
cvtpi2pd
cvtpi2ps
cvtps2dq
cvtps2pd
cvtps2pi
cvtsd2si
cvtsd2ss
cvtss2sd
cvtss2si
cvttpd2dq
cvttpd2pi
cvttps2dq
cvttps2pi
cvttsd2si
cvttss2si
encodekey128
encodekey256
endbr32
endbr64
enqcmd
enqcmds
fcmovb
fcmovbe
fcmove
fcmovnb
fcmovnbe
fcmovne
fcmovnu
fcmovu
fcomip
fcompp
fdecstp
fdisi8087_nop
fdivrp
feni8087_nop
ffreep
ficomp
fidivr
fincstp
fisttp
fisubr
fldenv
fldl2e
fldl2t
fldlg2
fldln2
fnclex
fninit
fnsave
fnstcw
fnstenv
fnstsw
fpatan
fprem1
frndint
frstor
fscale
fsetpm287_nop
fsincos
fstpnce
fsubrp
fucomi
fucomip
fucomp
fucompp
fxrstor
fxrstor64
fxsave
fxsave64
fxtract
fyl2xp1
getsec
gf2p8affineinvqb
gf2p8affineqb
gf2p8mulb
haddpd
haddps
hreset
hsubpd
hsubps
incsspd
incsspq
insertps
insertq
invept
invlpg
invlpga
invlpgb
invpcid
invvpid
kandnb
kandnd
kandnq
kandnr
kandnw
kconcath
kconcatl
kextract
kmerge2l1h
kmerge2l1l
kortest
kortestb
kortestd
kortestq
kortestw
kshiftlb
kshiftld
kshiftlq
kshiftlw
kshiftrb
kshiftrd
kshiftrq
kshiftrw
ktestb
ktestd
ktestq
ktestw
kunpckbw
kunpckdq
kunpckwd
kxnorb
kxnord
kxnorq
kxnorw
ldmxcsr
ldtilecfg
lfence
llwpcb
loadiwkey
loopne
lwpins
lwpval
maskmovdqu
maskmovq
mcommit
mfence
monitor
monitorx
montmul
movapd
movaps
movddup
movdir64b
movdiri
movdq2q
movdqa
movdqu
movhlps
movhpd
movhps
movlhps
movlpd
movlps
movmskpd
movmskps
movntdq
movntdqa
movnti
movntpd
movntps
movntq
movntsd
movntss
No antivirus signatures available.
No IRMA results available.