Static | ZeroBOX

PE Compile Time

2024-05-12 19:17:07

PDB Path

D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb

PE Imphash

b1c5b1beabd90d9fdabd1df0779ea832

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0004676e 0x00046800 6.47079645411
.rdata 0x00048000 0x000128c4 0x00012a00 5.27399909778
.data 0x0005b000 0x0000e75c 0x00001a00 3.25710239079
.pdata 0x0006a000 0x0000306c 0x00003200 5.50181041367
.didat 0x0006e000 0x00000360 0x00000400 3.04599384929
_RDATA 0x0006f000 0x0000015c 0x00000200 3.33563934244
.rsrc 0x00070000 0x0000ff7c 0x00010000 5.04402950962
.reloc 0x00080000 0x00000970 0x00000a00 5.33628972009

Resources

Name Offset Size Language Sub-language File type
PNG 0x000711ec 0x000015a9 LANG_RUSSIAN SUBLANG_NEUTRAL PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced
PNG 0x000711ec 0x000015a9 LANG_RUSSIAN SUBLANG_NEUTRAL PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_ICON 0x0007d394 0x00000468 LANG_NEUTRAL SUBLANG_DEFAULT GLS_BINARY_LSB_FIRST
RT_DIALOG 0x0007e148 0x0000024a LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_DIALOG 0x0007e148 0x0000024a LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_DIALOG 0x0007e148 0x0000024a LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_DIALOG 0x0007e148 0x0000024a LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_DIALOG 0x0007e148 0x0000024a LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_DIALOG 0x0007e148 0x0000024a LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_STRING 0x0007f548 0x00000268 LANG_RUSSIAN SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x0007f7b0 0x00000076 LANG_NEUTRAL SUBLANG_DEFAULT data
RT_MANIFEST 0x0007f828 0x00000753 LANG_RUSSIAN SUBLANG_NEUTRAL XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x140048000 LocalFree
0x140048008 GetLastError
0x140048010 SetLastError
0x140048018 FormatMessageW
0x140048020 GetCurrentProcess
0x140048028 DeviceIoControl
0x140048030 SetFileTime
0x140048038 CloseHandle
0x140048040 RemoveDirectoryW
0x140048048 CreateFileW
0x140048050 DeleteFileW
0x140048058 CreateHardLinkW
0x140048060 GetShortPathNameW
0x140048068 GetLongPathNameW
0x140048070 MoveFileW
0x140048078 GetFileType
0x140048080 GetStdHandle
0x140048088 WriteFile
0x140048090 ReadFile
0x140048098 FlushFileBuffers
0x1400480a0 SetEndOfFile
0x1400480a8 SetFilePointer
0x1400480b0 GetCurrentProcessId
0x1400480b8 CreateDirectoryW
0x1400480c0 SetFileAttributesW
0x1400480c8 GetFileAttributesW
0x1400480d0 FindClose
0x1400480d8 FindFirstFileW
0x1400480e0 FindNextFileW
0x1400480e8 GetVersionExW
0x1400480f0 GetModuleFileNameW
0x1400480f8 SetCurrentDirectoryW
0x140048100 GetCurrentDirectoryW
0x140048108 GetFullPathNameW
0x140048110 FoldStringW
0x140048118 GetModuleHandleW
0x140048120 FindResourceW
0x140048128 FreeLibrary
0x140048130 GetProcAddress
0x140048140 ExitProcess
0x140048148 SetThreadExecutionState
0x140048150 Sleep
0x140048158 LoadLibraryW
0x140048160 GetSystemDirectoryW
0x140048168 CompareStringW
0x140048170 AllocConsole
0x140048178 FreeConsole
0x140048180 AttachConsole
0x140048188 WriteConsoleW
0x140048190 GetProcessAffinityMask
0x140048198 CreateThread
0x1400481a0 SetThreadPriority
0x1400481b0 EnterCriticalSection
0x1400481b8 LeaveCriticalSection
0x1400481c0 DeleteCriticalSection
0x1400481c8 SetEvent
0x1400481d0 ResetEvent
0x1400481d8 ReleaseSemaphore
0x1400481e0 WaitForSingleObject
0x1400481e8 CreateEventW
0x1400481f0 CreateSemaphoreW
0x1400481f8 GetSystemTime
0x140048210 SystemTimeToFileTime
0x140048218 FileTimeToLocalFileTime
0x140048220 LocalFileTimeToFileTime
0x140048228 FileTimeToSystemTime
0x140048230 GetCPInfo
0x140048238 IsDBCSLeadByte
0x140048240 MultiByteToWideChar
0x140048248 WideCharToMultiByte
0x140048250 GlobalAlloc
0x140048258 LockResource
0x140048260 GlobalLock
0x140048268 GlobalUnlock
0x140048270 GlobalFree
0x140048278 GlobalMemoryStatusEx
0x140048280 LoadResource
0x140048288 SizeofResource
0x140048290 GetTimeFormatW
0x140048298 GetDateFormatW
0x1400482a0 GetExitCodeProcess
0x1400482a8 GetLocalTime
0x1400482b0 GetTickCount
0x1400482b8 MapViewOfFile
0x1400482c0 UnmapViewOfFile
0x1400482c8 CreateFileMappingW
0x1400482d0 OpenFileMappingW
0x1400482d8 GetCommandLineW
0x1400482e0 SetEnvironmentVariableW
0x1400482e8 GetTempPathW
0x1400482f0 MoveFileExW
0x1400482f8 GetLocaleInfoW
0x140048300 GetNumberFormatW
0x140048308 SetFilePointerEx
0x140048310 GetConsoleMode
0x140048318 GetConsoleCP
0x140048320 HeapSize
0x140048328 SetStdHandle
0x140048330 GetProcessHeap
0x140048338 FreeEnvironmentStringsW
0x140048340 GetEnvironmentStringsW
0x140048348 GetCommandLineA
0x140048350 GetOEMCP
0x140048358 IsValidCodePage
0x140048360 FindNextFileA
0x140048368 RaiseException
0x140048370 GetSystemInfo
0x140048378 VirtualProtect
0x140048380 VirtualQuery
0x140048388 LoadLibraryExA
0x140048390 RtlCaptureContext
0x140048398 RtlLookupFunctionEntry
0x1400483a0 RtlVirtualUnwind
0x1400483a8 UnhandledExceptionFilter
0x1400483b8 TerminateProcess
0x1400483d0 WaitForSingleObjectEx
0x1400483d8 IsDebuggerPresent
0x1400483e0 GetStartupInfoW
0x1400483e8 QueryPerformanceCounter
0x1400483f0 GetCurrentThreadId
0x1400483f8 GetSystemTimeAsFileTime
0x140048400 InitializeSListHead
0x140048408 RtlPcToFileHeader
0x140048410 RtlUnwindEx
0x140048418 EncodePointer
0x140048420 TlsAlloc
0x140048428 TlsGetValue
0x140048430 TlsSetValue
0x140048438 TlsFree
0x140048440 LoadLibraryExW
0x140048450 GetModuleHandleExW
0x140048458 GetModuleFileNameA
0x140048460 GetACP
0x140048468 HeapFree
0x140048470 HeapAlloc
0x140048478 GetStringTypeW
0x140048480 HeapReAlloc
0x140048488 LCMapStringW
0x140048490 FindFirstFileExA
Library OLEAUT32.dll:
0x1400484a0 SysAllocString
0x1400484a8 SysFreeString
0x1400484b0 VariantClear
Library gdiplus.dll:
0x1400484c0 GdipCloneImage
0x1400484c8 GdipFree
0x1400484d0 GdipDisposeImage
0x1400484e8 GdiplusStartup
0x1400484f0 GdiplusShutdown
0x1400484f8 GdipAlloc

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.didat
_RDATA
@.rsrc
@.reloc
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
@USVWAUAVAWH
A_A^A]_^[]
SVWAVAWH
A_A^_^[
\$ UVWH
SVWATAUAVAWH
A_A^A]A\_^[
UVWATAUAVAWH
@A_A^A]A\_^]
t$ UWAVH
8PjuaH
VWATAVAWH
@A_A^A\_^
VWATAVAWH
@A_A^A\_^
SVWAVAWH
A_A^_^[
WAVAWH
A_A^_
WAVAWH
A_A^_
H9G8v_
UVWATAUAVAWH
A_A^A]A\_^]
x UATAUAVAWH
L9d$xt
I94$t}E
A_A^A]A\]
x UATAUAVAWH
FPH;FHtgH
A_A^A]A\]
\$ UVWATAUAVAW
A_A^A]A\_^]
ATAVAWH
0A_A^A\
x UATAUAVAWH
D3T$ A
D3T$8A
A_A^A]A\]
SUVWATAUAVAWH
)T$ fD
A_A^A]A\_^][
UVWAVAWH
A_A^_^]
\$ UVWATAUAVAWH
A_A^A]A\_^]
SVWATAUAVAWH
0A_A^A]A\_^[
WATAUAVAWH
A_A^A]A\_
t$ UWATAUAVH
A^A]A\_]
@USVWATAUAVAWH
hA_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
@USVWATAUAVAWH
K D9y0u
A_A^A]A\_^[]
USVWATAUAVAWH
A_A^A]A\_^[]
@USVWATAVAWH
A_A^A\_^[]
UVWATAUAVAWH
0A_A^A]A\_^]
WAVAWH
fD99s4
sbfD99s
UAVAWH
f99uM
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
\$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
t$ UWATAVAWH
A_A^A\_]
t$ UWAVH
@SUVWATAUAVAWH
<H.u~H
<B.ubH
hA_A^A]A\_^][
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
t$ UWATAVAWH
A_A^A\_]
4@8q6t
l$ VWAVH
@SUVWATAVAWH
pA_A^A\_^][
@UVWATAUAVAWH
A_A^A]A\_^]
t$ WATAUAVAWH
uWL9vP
FPL;GPu%M
NxD9qtu
D8t$Ru
tbD8t$Ru[
CL$pI;^
FxD8p5t1D8
D8t$Pu
FxD8pku
\$\H;Fps
L$QfE;
D8D$`A
8T$PuZE
L$PD8t$\t
A_A^A]A\_
\$ UVWATAUAVAWH
H9r uVM
A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
WAVAWH
@A_A^_
UWAUAVAWH
CD$XfD
L9|$hu
A_A^A]_]
\$ UVWAVAWH
pA_A^_^]
\$ UVWATAUAVAWH
i`D8i8u
D8k(t$H
A_A^A]A\_^]
@SUVWAV
ukH;Q0|eH+Y0
A^_^][
UVWATAUAVAWH
l$0D9k
@A_A^A]A\_^]
@SUVWAUAVAWH
A_A^A]_^][
HcD$0H
@SUVWAUAVAWH
`A_A^A]_^][
\$ UVWATAUAVAWH
A_A^A]A\_^]
l$ VWAVH
t$ UWAVH
@USVWATAUAVAWH
A_A^A]A\_^[]
L$ SUVWH
@USVWAVH
A^_^[]
\$ UVWATAUAVAWH
nL9>u
A_A^A]A\_^]
t\9} vWH
\$ UVWATAUAVAWH
`A_A^A]A\_^]
x ATAVAWH
A_A^A\
VWATAVAWH
@A_A^A\_^
WAVAWH
A_A^_
t$ UWATAVAWH
A_A^A\_]
l$ VWAUAVAWH
<H/uXH
A_A^A]_^
<P\t"fA
<p.tmH
UVWATAUAVAWH
A_A^A]A\_^]
@USVWAVH
PA^_^[]
t$ WATAUAVAWH
A_A^A]A\_
|$ UATAUAVAWH
A_A^A]A\]
<K\t(f
t$ WATAUAVAWH
A_A^A]A\_
Q(H;Q s
H;A s"L
P(I;P s/
WATAUAVAWH
tH;sH~
A_A^A]A\_
L;A w"H
{(H){
SVWATAUAVAWH
A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
WAVAWH
A_A^_
@USVWAVH
A^_^[]
@USVWAVH
A^_^[]
UVWATAUAVAWH
T$ I;T$(t
|$8H;=[
l$H8\$0t
fE94wu
|$HtuH
T$hI;T$pt
A_A^A]A\_^]
\$ UVWATAUAVAWH
D+D$TD
D+T$PD
A_A^A]A\_^]
L$ SUVWH
USVWATAVAWH
`A_A^A\_^[]
s WAVAWH
@A_A^_
t$ UWATAUAVH
A^A]A\_]
UVWATAUAVAWH
E3F E3
V8A3V$A3V
@A_A^A]A\_^]
l$ VWAVH
@SUVWAVH
pA^_^][
\$ UVWAVAWH
pA_A^_^]
|$ UATAUAVAWH
A_A^A]A\]
WAVAWH
A_A^_
WATAVH
fD9$HH
A^A\_
WATAVH
A^A\_
WATAUAVAWH
A_A^A]A\_
gfffffffI
\$ UVWAVAWH
pA_A^_^]
UWATAVAWH
A_A^A\_]
HkD$ dH
@USVWATAUAVAWH
u+A9w@t%E
A_A^A]A\_^[]
x ATAVAWH
A_A^A\
WAUAVH
A^A]_
WAVAWH
A_A^_
SVWAVAWH
A_A^_^[
x ATAVAWH
A_A^A\
l$ VWAWH
@SUVWATAVAWH
A_A^A\_^][
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
GpH;Gxt
@SUVWATAUAVAWH
8A_A^A]A\_^][
WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
8K u,L
tf8K5u
8K4u=
A_A^A]A\_
SUVWATAUAVAWH
HA_A^A]A\_^][
UVWATAUAVAWH
@A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
@SUVWAVH
@A^_^][
\$ UVWH
UVWATAUAVAWH
l$ fD9+u
A_A^A]A\_^]
|$ AVH
<q u4H
VWATAVAWH
0A_A^A\_^
8fD99t
@SUVWAVH
A^_^][
c UAVAWH
@A_A^]
UVWATAUAVAWH
fD9$xt
fD9 u@H
PA_A^A]A\_^]
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
A_A^A]A\_
\$ UVWH
SVWATAUAVAWH
@A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
@SUVWAVH
pA^_^][
<y\u'H
<y\u>H
\$ UVWH
@SUVWH
|$ UAVAWH
@USVWATAVAWH
<H{t#L
A_A^A\_^[]
L$ SWH
upf9:tk
@SVWATAUAVAWH
D$pL+D$hA
tBL!|$ E3
L$pH+L$hH
u#D9%j
A_A^A]A\_^[
@USVWATAVAWH
A_A^A\_^[]
<B:t&H
UVWATAUAVAWH
A_A^A]A\_^]
n f9(t
@SUVWAVH
pA^_^][
@USVWATAVAWH
fD9 u)E
A_A^A\_^[]
WAVAWH
A_A^_
D$DDtRH
|$ UATAUAVAWH
t'HcG<
H;|80u
A_A^A]A\]
e A^_]
SVWAVH
8A^_^[
WAVAWH
WAVAWH
0A_A^_
u/HcH<H
H3E H3E
ffffff
fffffff
fffffff
ffffff
vKfffff
D8L$0uP
H;xXu5
fA;8unI
fA;(t(fA98t
WATAUAVAWH
A_A^A]A\_
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
d$dD;d$ltY
A_A^A]A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
SVWATAUAWH
L!d$(L!d$@D
D$HL9gXt
A_A]A\_^[
B(I9A(
SVWATAUAVAWH
A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
D$ I;R
D$ I9P
WATAUAVAWH
A_A^A]A\_
D$@H;G
D$0H;G
S,, <Zw
CA< t(<#t
<htr<jtb<lt6<tt&<wt
!,X< w
t$ WAVAWH
s4+sP+
0A_A^_
t$ WATAUAVAWH
s4+sP+
A_A^A]A\_
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
t$ UWATAVAWH
D8d$Ht
D8d$Ht
A_A^A\_]
t$ UWATAVAWH
D8d$Ht
D8d$Ht
A_A^A\_]
x AUAVAWH
H9L$`t
A_A^A]
l$ WAVAWH
A_A^_
@UATAVH
|$ UATAUAVAWH
A_A^A]A\]
t$ WATAUAVAWH
'D8l$@
t)D8l$@t
WD8l$@t
D8l$@t
A_A^A]A\_
u3HcH<H
x ATAVAWH
A_A^A\
UVWAVAWH
0A_A^_^]
WAVAWH
A86taH
0A_A^_
L$ WATAUAVAWH
@A_A^A]A\_
x ATAVAWH
A_A^A\
D82u&H
D8t$Ht
x ATAVAWH
gfffffffH
D8d$ht
A_A^A\
WATAUAVAWH
A_A^A]A\_
fD9t$b
@UATAUAVAWH
H!T$0D
uf!T$(H!T$
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
`A_A^A]A\_^]
x ATAVAWH
0A_A^A\
\$ UVWAVAWH
A_A^_^]
@8|$^t
l$ VWATAVAWH
L$&@8t$&t0@8q
A81t@@8r
A_A^A\_^
fD94Fu
SVWATAUAWH
HA_A]A\_^[
@UATAUAVAWH
e0A_A^A]A\]
WAVAWH
@A_A^_
@USVWATAUAVAWH
D8l$ht
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
H!D$ E
`A_A^A]A\_^]
ffffff
fffffff
|$ ATAVAWH
\$@@8=
A_A^A\
USVWAVH
A^_^[]
LcA<E3
Unknown exception
bad array new length
string too long
vector too long
invalid string position
SELECT * FROM Win32_OperatingSystem
*messages***
CryptProtectMemory
CryptUnprotectMemory
xlistpos
SetDllDirectoryW
SetDefaultDllDirectories
bad allocation
s:IDS_BROWSETITLE
s:IDS_CMDEXTRACTING
s:IDS_SKIPPING
s:IDS_UNEXPEOF
s:IDS_FILEHEADERBROKEN
s:IDS_HEADERBROKEN
s:IDS_MAINHEADERBROKEN
s:IDS_CMTHEADERBROKEN
s:IDS_CMTBROKEN
s:IDS_OUTOFMEMORYERROR
s:IDS_UNKNOWNMETHOD
s:IDS_CANNOTOPEN
s:IDS_CANNOTCREATE
s:IDS_CANNOTMKDIR
s:IDS_ENCRCRCFAILED
s:IDS_EXTRCRCFAILED
s:IDS_PACKEDDATACRCFAILED
s:IDS_WRITEERROR
s:IDS_READERROR
s:IDS_CLOSEERROR
s:IDS_CANNOTFINDVOL
s:IDS_BADARCHIVE
s:IDS_EXTRACTING
s:IDS_ASKNEXTVOLTITLE
s:IDS_ARCHEADERBROKEN
s:IDS_DONE
s:IDS_ERROR
s:IDS_ERRORS
s:IDS_BYTES
s:IDS_MODIFIEDON
s:IDS_BADFOLDER
s:IDS_CREATEERRORS
s:IDS_RESTARTHINT
s:IDS_CRCERRORS
s:IDS_ALLFILES
s:IDS_TITLE1
s:IDS_TITLE1A
s:IDS_TITLE2
s:IDS_TITLE3
s:IDS_TITLE4
s:IDS_TITLE5
s:IDS_TITLE6
s:IDS_ARCBROKEN
s:IDS_EXTRFILESTO
s:IDS_EXTRFILESTOTEMP
s:IDS_EXTRACTBUTTON
s:IDS_EXTRACTPROGRESS
s:IDS_MAXPATHLIMIT
s:IDS_UNKENCMETHOD
s:IDS_WRONGPASSWORD
s:IDS_WRONGFILEPASSWORD
s:IDS_COPYERROR
s:IDS_CANNOTCREATELNKS
s:IDS_CANNOTCREATELNKH
s:IDS_ERRLNKTARGET
s:IDS_NEEDADMIN
s:IDS_PAUSE
s:IDS_CONTINUE
s:IDS_SECWARNING
s:IDS_SECDELDLL
s:IDS_EXTRDICTOUTMEM
s:IDS_SUGGEST64BIT
s:IDS_WARNING
s:IDS_DICTEXCEEDSRAM
s:IDS_DICTSUGGESTCANCEL
s:IDS_EXTRACTIONCANCELLED
$STARTDLG:SIZE
$STARTDLG:CAPTION
$STARTDLG:IDC_DESTEDITTITLE
$STARTDLG:IDC_CHANGEDIR
$STARTDLG:IDC_PROGRESSBARTITLE
$STARTDLG:IDOK
$STARTDLG:IDCANCEL
$REPLACEFILEDLG:SIZE
$REPLACEFILEDLG:CAPTION
$REPLACEFILEDLG:IDC_OWRFILEEXISTS
$REPLACEFILEDLG:IDC_OWRASKREPLACE
$REPLACEFILEDLG:IDC_OWRQUESTION
$REPLACEFILEDLG:IDC_OWRYES
$REPLACEFILEDLG:IDC_OWRALL
$REPLACEFILEDLG:IDC_OWRRENAME
$REPLACEFILEDLG:IDC_OWRNO
$REPLACEFILEDLG:IDC_OWRNOALL
$REPLACEFILEDLG:IDC_OWRCANCEL
$RENAMEDLG:SIZE
$RENAMEDLG:CAPTION
$RENAMEDLG:IDOK
$RENAMEDLG:IDCANCEL
$RENAMEDLG:IDC_RENAMEFROM
$RENAMEDLG:IDC_RENAMETO
$GETPASSWORD1:SIZE
$GETPASSWORD1:CAPTION
$GETPASSWORD1:IDC_PASSWORDENTER
$GETPASSWORD1:IDOK
$GETPASSWORD1:IDCANCEL
$LICENSEDLG:SIZE
$LICENSEDLG:CAPTION
$LICENSEDLG:IDOK
$LICENSEDLG:IDCANCEL
$ASKNEXTVOL:SIZE
$ASKNEXTVOL:CAPTION
$ASKNEXTVOL:IDC_NEXTVOLINFO1
$ASKNEXTVOL:IDC_NEXTVOLFIND
$ASKNEXTVOL:IDC_NEXTVOLINFO2
$ASKNEXTVOL:IDOK
$ASKNEXTVOL:IDCANCEL
USER32.dll
GDI32.dll
COMDLG32.dll
ADVAPI32.dll
SHELL32.dll
Fole32.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SHLWAPI.dll
COMCTL32.dll
SleepConditionVariableCS
WakeAllConditionVariable
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
`h````
xpxxxx
(null)
CorExitProcess
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
GetCurrentPackageId
InitializeCriticalSectionEx
LCMapStringEx
LocaleNameToLCID
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.gfids
.rdata
.rdata$T
.rdata$r
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.tls$ZZZ
.xdata
.xdata$x
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.pdata
.didat$5
_RDATA
.rsrc$01
.rsrc$02
(F*8(@
""$"&((P&N"j
@vBb<i
N"P6NjP
,J.r0L.
SendMessageW
ShowWindow
GetDlgItem
SetDlgItemTextW
EnableWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetParent
SetWindowPos
GetSystemMetrics
GetClientRect
GetWindowRect
GetWindowLongW
SetWindowLongW
GetWindowLongPtrW
SetProcessDefaultLayout
GetWindow
LoadStringW
OemToCharBuffA
CharUpperW
DefWindowProcW
RegisterClassExW
CreateWindowExW
IsWindow
DestroyWindow
UpdateWindow
MapWindowPoints
CopyRect
SetWindowLongPtrW
LoadCursorW
ReleaseDC
MessageBoxW
FindWindowExW
GetClassNameW
CopyImage
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
WaitForInputIdle
IsWindowVisible
DialogBoxParamW
EndDialog
GetDlgItemTextW
SendDlgItemMessageW
SetFocus
SetForegroundWindow
GetSysColor
LoadBitmapW
LoadIconW
DestroyIcon
IsDialogMessageW
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
StretchBlt
CreateDIBSection
GetObjectW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
OpenProcessToken
AdjustTokenPrivileges
SetFileSecurityW
LookupPrivilegeValueW
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
GetTokenInformation
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SetEntriesInAclW
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteExW
SHGetFileInfoW
SHGetFolderPathW
SHChangeNotify
CoSetProxyBlanket
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromString
OleInitialize
OleUninitialize
SHAutoComplete
InitCommonControlsEx
sfxrar.exe
LocalFree
GetLastError
SetLastError
FormatMessageW
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetCurrentProcessId
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetModuleFileNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
ExpandEnvironmentStringsW
ExitProcess
SetThreadExecutionState
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
GlobalMemoryStatusEx
LoadResource
SizeofResource
GetTimeFormatW
GetDateFormatW
GetExitCodeProcess
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetNumberFormatW
KERNEL32.dll
OLEAUT32.dll
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
gdiplus.dll
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
GetStringTypeW
HeapReAlloc
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_array_new_length@std@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AW4RAR_EXIT@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AV_com_error@@
.?AVbad_exception@std@@
.?AVtype_info@@
vuOuefweV$y
d{a?b\l
c_qQ_}
'_c?!k
-[jE>y,
xT28FX
401pQm
o1CpQm0
3z.g-]`
,\`2E&X
om\^\p
SYc61r
u_Agr,
6y3&T.
Gv&F~2
QM~2^~
)'/<4t
PA<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
version="1.0.0.0"
processorArchitecture="*"
name="WinRAR SFX"
type="win32"/>
<description>WinRAR SFX module</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker"
uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
<dependency>
<dependentAssembly>
<assemblyIdentity
type="win32"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
processorArchitecture="*"
publicKeyToken="6595b64144ccf1df"
language="*"/>
</dependentAssembly>
</dependency>
<compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<application>
<!--The ID below indicates application support for Windows Vista -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!--The ID below indicates application support for Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<!--The ID below indicates application support for Windows 8 -->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!--The ID below indicates application support for Windows 8.1 -->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<!--The ID below indicates application support for Windows 10 -->
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
</application>
</compatibility>
<asmv3:application xmlns:asmv3="urn:schemas-microsoft-com:asm.v3">
<asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
<dpiAware>true</dpiAware>
</asmv3:windowsSettings>
</asmv3:application>
</assembly>
PPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
Setup=1.bat
TempMode
Silent=1
rolex.exe
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.didat
_RDATA
@.rsrc
@.reloc
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
@USVWAUAVAWH
A_A^A]_^[]
SVWAVAWH
A_A^_^[
\$ UVWH
SVWATAUAVAWH
A_A^A]A\_^[
UVWATAUAVAWH
@A_A^A]A\_^]
t$ UWAVH
8PjuaH
VWATAVAWH
@A_A^A\_^
VWATAVAWH
@A_A^A\_^
SVWAVAWH
A_A^_^[
WAVAWH
A_A^_
WAVAWH
A_A^_
H9G8v_
UVWATAUAVAWH
A_A^A]A\_^]
x UATAUAVAWH
L9d$xt
I94$t}E
A_A^A]A\]
x UATAUAVAWH
FPH;FHtgH
A_A^A]A\]
\$ UVWATAUAVAW
A_A^A]A\_^]
ATAVAWH
0A_A^A\
x UATAUAVAWH
D3T$ A
D3T$8A
A_A^A]A\]
SUVWATAUAVAWH
)T$ fD
A_A^A]A\_^][
UVWAVAWH
A_A^_^]
\$ UVWATAUAVAWH
A_A^A]A\_^]
SVWATAUAVAWH
0A_A^A]A\_^[
WATAUAVAWH
A_A^A]A\_
t$ UWATAUAVH
A^A]A\_]
@USVWATAUAVAWH
hA_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
@USVWATAUAVAWH
K D9y0u
A_A^A]A\_^[]
USVWATAUAVAWH
A_A^A]A\_^[]
@USVWATAVAWH
A_A^A\_^[]
UVWATAUAVAWH
0A_A^A]A\_^]
WAVAWH
fD99s4
sbfD99s
UAVAWH
f99uM
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
\$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
t$ UWATAVAWH
A_A^A\_]
t$ UWAVH
@SUVWATAUAVAWH
<H.u~H
<B.ubH
hA_A^A]A\_^][
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
t$ UWATAVAWH
A_A^A\_]
4@8q6t
l$ VWAVH
@SUVWATAVAWH
pA_A^A\_^][
@UVWATAUAVAWH
A_A^A]A\_^]
t$ WATAUAVAWH
uWL9vP
FPL;GPu%M
NxD9qtu
D8t$Ru
tbD8t$Ru[
CL$pI;^
FxD8p5t1D8
D8t$Pu
FxD8pku
\$\H;Fps
L$QfE;
D8D$`A
8T$PuZE
L$PD8t$\t
A_A^A]A\_
\$ UVWATAUAVAWH
H9r uVM
A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
WAVAWH
@A_A^_
UWAUAVAWH
CD$XfD
L9|$hu
A_A^A]_]
\$ UVWAVAWH
pA_A^_^]
\$ UVWATAUAVAWH
i`D8i8u
D8k(t$H
A_A^A]A\_^]
@SUVWAV
ukH;Q0|eH+Y0
A^_^][
UVWATAUAVAWH
l$0D9k
@A_A^A]A\_^]
@SUVWAUAVAWH
A_A^A]_^][
HcD$0H
@SUVWAUAVAWH
`A_A^A]_^][
\$ UVWATAUAVAWH
A_A^A]A\_^]
l$ VWAVH
t$ UWAVH
@USVWATAUAVAWH
A_A^A]A\_^[]
L$ SUVWH
@USVWAVH
A^_^[]
\$ UVWATAUAVAWH
nL9>u
A_A^A]A\_^]
t\9} vWH
\$ UVWATAUAVAWH
`A_A^A]A\_^]
x ATAVAWH
A_A^A\
VWATAVAWH
@A_A^A\_^
WAVAWH
A_A^_
t$ UWATAVAWH
A_A^A\_]
l$ VWAUAVAWH
<H/uXH
A_A^A]_^
<P\t"fA
<p.tmH
UVWATAUAVAWH
A_A^A]A\_^]
@USVWAVH
PA^_^[]
t$ WATAUAVAWH
A_A^A]A\_
|$ UATAUAVAWH
A_A^A]A\]
<K\t(f
t$ WATAUAVAWH
A_A^A]A\_
Q(H;Q s
H;A s"L
P(I;P s/
WATAUAVAWH
tH;sH~
A_A^A]A\_
L;A w"H
{(H){
SVWATAUAVAWH
A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
WAVAWH
A_A^_
@USVWAVH
A^_^[]
@USVWAVH
A^_^[]
UVWATAUAVAWH
T$ I;T$(t
|$8H;=[
l$H8\$0t
fE94wu
|$HtuH
T$hI;T$pt
A_A^A]A\_^]
\$ UVWATAUAVAWH
D+D$TD
D+T$PD
A_A^A]A\_^]
L$ SUVWH
USVWATAVAWH
`A_A^A\_^[]
s WAVAWH
@A_A^_
t$ UWATAUAVH
A^A]A\_]
UVWATAUAVAWH
E3F E3
V8A3V$A3V
@A_A^A]A\_^]
l$ VWAVH
@SUVWAVH
pA^_^][
\$ UVWAVAWH
pA_A^_^]
|$ UATAUAVAWH
A_A^A]A\]
WAVAWH
A_A^_
WATAVH
fD9$HH
A^A\_
WATAVH
A^A\_
WATAUAVAWH
A_A^A]A\_
gfffffffI
\$ UVWAVAWH
pA_A^_^]
UWATAVAWH
A_A^A\_]
HkD$ dH
@USVWATAUAVAWH
u+A9w@t%E
A_A^A]A\_^[]
x ATAVAWH
A_A^A\
WAUAVH
A^A]_
WAVAWH
A_A^_
SVWAVAWH
A_A^_^[
x ATAVAWH
A_A^A\
l$ VWAWH
@SUVWATAVAWH
A_A^A\_^][
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
GpH;Gxt
@SUVWATAUAVAWH
8A_A^A]A\_^][
WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
8K u,L
tf8K5u
8K4u=
A_A^A]A\_
SUVWATAUAVAWH
HA_A^A]A\_^][
UVWATAUAVAWH
@A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
@SUVWAVH
@A^_^][
\$ UVWH
UVWATAUAVAWH
l$ fD9+u
A_A^A]A\_^]
|$ AVH
<q u4H
VWATAVAWH
0A_A^A\_^
8fD99t
@SUVWAVH
A^_^][
c UAVAWH
@A_A^]
UVWATAUAVAWH
fD9$xt
fD9 u@H
PA_A^A]A\_^]
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
A_A^A]A\_
\$ UVWH
SVWATAUAVAWH
@A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
@SUVWAVH
pA^_^][
<y\u'H
<y\u>H
\$ UVWH
@SUVWH
|$ UAVAWH
@USVWATAVAWH
<H{t#L
A_A^A\_^[]
L$ SWH
upf9:tk
@SVWATAUAVAWH
D$pL+D$hA
tBL!|$ E3
L$pH+L$hH
u#D9%j
A_A^A]A\_^[
@USVWATAVAWH
A_A^A\_^[]
<B:t&H
UVWATAUAVAWH
A_A^A]A\_^]
n f9(t
@SUVWAVH
pA^_^][
@USVWATAVAWH
fD9 u)E
A_A^A\_^[]
WAVAWH
A_A^_
D$DDtRH
|$ UATAUAVAWH
t'HcG<
H;|80u
A_A^A]A\]
e A^_]
SVWAVH
8A^_^[
WAVAWH
WAVAWH
0A_A^_
u/HcH<H
H3E H3E
ffffff
fffffff
fffffff
ffffff
vKfffff
D8L$0uP
H;xXu5
fA;8unI
fA;(t(fA98t
WATAUAVAWH
A_A^A]A\_
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
d$dD;d$ltY
A_A^A]A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
SVWATAUAWH
L!d$(L!d$@D
D$HL9gXt
A_A]A\_^[
B(I9A(
SVWATAUAVAWH
A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
D$ I;R
D$ I9P
WATAUAVAWH
A_A^A]A\_
D$@H;G
D$0H;G
S,, <Zw
CA< t(<#t
<htr<jtb<lt6<tt&<wt
!,X< w
t$ WAVAWH
s4+sP+
0A_A^_
t$ WATAUAVAWH
s4+sP+
A_A^A]A\_
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
t$ UWATAVAWH
D8d$Ht
D8d$Ht
A_A^A\_]
t$ UWATAVAWH
D8d$Ht
D8d$Ht
A_A^A\_]
x AUAVAWH
H9L$`t
A_A^A]
l$ WAVAWH
A_A^_
@UATAVH
|$ UATAUAVAWH
A_A^A]A\]
t$ WATAUAVAWH
'D8l$@
t)D8l$@t
WD8l$@t
D8l$@t
A_A^A]A\_
u3HcH<H
x ATAVAWH
A_A^A\
UVWAVAWH
0A_A^_^]
WAVAWH
A86taH
0A_A^_
L$ WATAUAVAWH
@A_A^A]A\_
x ATAVAWH
A_A^A\
D82u&H
D8t$Ht
x ATAVAWH
gfffffffH
D8d$ht
A_A^A\
WATAUAVAWH
A_A^A]A\_
fD9t$b
@UATAUAVAWH
H!T$0D
uf!T$(H!T$
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
`A_A^A]A\_^]
x ATAVAWH
0A_A^A\
\$ UVWAVAWH
A_A^_^]
@8|$^t
l$ VWATAVAWH
L$&@8t$&t0@8q
A81t@@8r
A_A^A\_^
fD94Fu
SVWATAUAWH
HA_A]A\_^[
@UATAUAVAWH
e0A_A^A]A\]
WAVAWH
@A_A^_
@USVWATAUAVAWH
D8l$ht
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
H!D$ E
`A_A^A]A\_^]
ffffff
fffffff
|$ ATAVAWH
\$@@8=
A_A^A\
USVWAVH
A^_^[]
LcA<E3
Unknown exception
bad array new length
string too long
vector too long
invalid string position
SELECT * FROM Win32_OperatingSystem
*messages***
CryptProtectMemory
CryptUnprotectMemory
xlistpos
SetDllDirectoryW
SetDefaultDllDirectories
bad allocation
s:IDS_BROWSETITLE
s:IDS_CMDEXTRACTING
s:IDS_SKIPPING
s:IDS_UNEXPEOF
s:IDS_FILEHEADERBROKEN
s:IDS_HEADERBROKEN
s:IDS_MAINHEADERBROKEN
s:IDS_CMTHEADERBROKEN
s:IDS_CMTBROKEN
s:IDS_OUTOFMEMORYERROR
s:IDS_UNKNOWNMETHOD
s:IDS_CANNOTOPEN
s:IDS_CANNOTCREATE
s:IDS_CANNOTMKDIR
s:IDS_ENCRCRCFAILED
s:IDS_EXTRCRCFAILED
s:IDS_PACKEDDATACRCFAILED
s:IDS_WRITEERROR
s:IDS_READERROR
s:IDS_CLOSEERROR
s:IDS_CANNOTFINDVOL
s:IDS_BADARCHIVE
s:IDS_EXTRACTING
s:IDS_ASKNEXTVOLTITLE
s:IDS_ARCHEADERBROKEN
s:IDS_DONE
s:IDS_ERROR
s:IDS_ERRORS
s:IDS_BYTES
s:IDS_MODIFIEDON
s:IDS_BADFOLDER
s:IDS_CREATEERRORS
s:IDS_RESTARTHINT
s:IDS_CRCERRORS
s:IDS_ALLFILES
s:IDS_TITLE1
s:IDS_TITLE1A
s:IDS_TITLE2
s:IDS_TITLE3
s:IDS_TITLE4
s:IDS_TITLE5
s:IDS_TITLE6
s:IDS_ARCBROKEN
s:IDS_EXTRFILESTO
s:IDS_EXTRFILESTOTEMP
s:IDS_EXTRACTBUTTON
s:IDS_EXTRACTPROGRESS
s:IDS_MAXPATHLIMIT
s:IDS_UNKENCMETHOD
s:IDS_WRONGPASSWORD
s:IDS_WRONGFILEPASSWORD
s:IDS_COPYERROR
s:IDS_CANNOTCREATELNKS
s:IDS_CANNOTCREATELNKH
s:IDS_ERRLNKTARGET
s:IDS_NEEDADMIN
s:IDS_PAUSE
s:IDS_CONTINUE
s:IDS_SECWARNING
s:IDS_SECDELDLL
s:IDS_EXTRDICTOUTMEM
s:IDS_SUGGEST64BIT
s:IDS_WARNING
s:IDS_DICTEXCEEDSRAM
s:IDS_DICTSUGGESTCANCEL
s:IDS_EXTRACTIONCANCELLED
$STARTDLG:SIZE
$STARTDLG:CAPTION
$STARTDLG:IDC_DESTEDITTITLE
$STARTDLG:IDC_CHANGEDIR
$STARTDLG:IDC_PROGRESSBARTITLE
$STARTDLG:IDOK
$STARTDLG:IDCANCEL
$REPLACEFILEDLG:SIZE
$REPLACEFILEDLG:CAPTION
$REPLACEFILEDLG:IDC_OWRFILEEXISTS
$REPLACEFILEDLG:IDC_OWRASKREPLACE
$REPLACEFILEDLG:IDC_OWRQUESTION
$REPLACEFILEDLG:IDC_OWRYES
$REPLACEFILEDLG:IDC_OWRALL
$REPLACEFILEDLG:IDC_OWRRENAME
$REPLACEFILEDLG:IDC_OWRNO
$REPLACEFILEDLG:IDC_OWRNOALL
$REPLACEFILEDLG:IDC_OWRCANCEL
$RENAMEDLG:SIZE
$RENAMEDLG:CAPTION
$RENAMEDLG:IDOK
$RENAMEDLG:IDCANCEL
$RENAMEDLG:IDC_RENAMEFROM
$RENAMEDLG:IDC_RENAMETO
$GETPASSWORD1:SIZE
$GETPASSWORD1:CAPTION
$GETPASSWORD1:IDC_PASSWORDENTER
$GETPASSWORD1:IDOK
$GETPASSWORD1:IDCANCEL
$LICENSEDLG:SIZE
$LICENSEDLG:CAPTION
$LICENSEDLG:IDOK
$LICENSEDLG:IDCANCEL
$ASKNEXTVOL:SIZE
$ASKNEXTVOL:CAPTION
$ASKNEXTVOL:IDC_NEXTVOLINFO1
$ASKNEXTVOL:IDC_NEXTVOLFIND
$ASKNEXTVOL:IDC_NEXTVOLINFO2
$ASKNEXTVOL:IDOK
$ASKNEXTVOL:IDCANCEL
USER32.dll
GDI32.dll
COMDLG32.dll
ADVAPI32.dll
SHELL32.dll
Fole32.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SHLWAPI.dll
COMCTL32.dll
SleepConditionVariableCS
WakeAllConditionVariable
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
`h````
xpxxxx
(null)
CorExitProcess
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
GetCurrentPackageId
InitializeCriticalSectionEx
LCMapStringEx
LocaleNameToLCID
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
D:\Projects\WinRAR\sfx\build\sfxrar64\Release\sfxrar.pdb
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.gfids
.rdata
.rdata$T
.rdata$r
.rdata$voltmd
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.tls$ZZZ
.xdata
.xdata$x
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.data$rs
.pdata
.didat$5
_RDATA
.rsrc$01
.rsrc$02
(F*8(@
""$"&((P&N"j
@vBb<i
N"P6NjP
,J.r0L.
SendMessageW
ShowWindow
GetDlgItem
SetDlgItemTextW
EnableWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetParent
SetWindowPos
GetSystemMetrics
GetClientRect
GetWindowRect
GetWindowLongW
SetWindowLongW
GetWindowLongPtrW
SetProcessDefaultLayout
GetWindow
LoadStringW
OemToCharBuffA
CharUpperW
DefWindowProcW
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.BAT.Starter.tsAs
tehtris Clean
ClamAV Win.Dropper.Nanocore-9986456-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win64.CoinMiner.rc
ALYac Gen:Variant.Mino.1
Cylance Unsafe
Zillya Exploit.UAC.Win32.999
Sangfor Trojan.Win32.Agent.Vr3n
K7AntiVirus Spyware ( 005b10b61 )
Alibaba Trojan:Win64/Genric.affcf6dc
K7GW Spyware ( 005b10b61 )
Cybereason malicious.1b5620
Baidu Clean
VirIT Clean
Symantec Infostealer
Elastic malicious (high confidence)
ESET-NOD32 Clean
APEX Clean
Avast Win64:Malware-gen
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Gen:Variant.Mino.1
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Mino.1
Tencent Clean
Sophos Mal/Generic-S
F-Secure Trojan.TR/AD.Nekark.kekhn
DrWeb Clean
VIPRE Gen:Variant.Mino.1
TrendMicro Trojan.Win64.SMOKELOADER.YXEFWZ
McAfeeD ti!9A4C96B22721
Trapmine Clean
FireEye Generic.mg.1fecbc51b5620e57
Emsisoft Gen:Variant.Mino.1 (B)
Paloalto generic.ml
GData Gen:Variant.Mino.1
Jiangmin Worm.MSIL.vpw
Webroot Clean
Varist W64/ABRisk.QPGL-2825
Avira TR/AD.Nekark.kekhn
MAX malware (ai score=85)
Antiy-AVL Clean
Kingsoft Win32.Trojan.Generic.a
Gridinsoft Ransom.Win64.Wacatac.sa
Xcitium Clean
Arcabit Trojan.Mino.1
SUPERAntiSpyware Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win64/DisguisedXMRigMiner
Google Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!1FECBC51B562
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Trj/CI.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win64.SMOKELOADER.YXEFWZ
Rising Clean
Yandex Clean
Ikarus Clean
MaxSecure Win.MxResIcn.Heur.Gen
Fortinet Clean
BitDefenderTheta Clean
AVG Win64:Malware-gen
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (W)
alibabacloud Clean
No IRMA results available.