Static | ZeroBOX

PE Compile Time

2024-10-16 18:20:24

PE Imphash

e16254f44ddd98c690f5ad4d0a981e4a

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00021308 0x00021400 6.31791280904
.data 0x00023000 0x00000170 0x00000200 1.27501517703
.rdata 0x00024000 0x00080a80 0x00080c00 7.96510588006
.eh_fram 0x000a5000 0x00000004 0x00000200 0.0
.pdata 0x000a6000 0x00000cd8 0x00000e00 4.87523398589
.xdata 0x000a7000 0x00000dbc 0x00000e00 4.53573391819
.bss 0x000a8000 0x00015e20 0x00000000 0.0
.edata 0x000be000 0x00008226 0x00008400 5.74851200866
.idata 0x000c7000 0x00000900 0x00000a00 3.94420921895
.CRT 0x000c8000 0x00000068 0x00000200 0.390264900887
.tls 0x000c9000 0x00000010 0x00000200 0.0
.reloc 0x000ca000 0x00000158 0x00000200 3.7955317655

Imports

Library KERNEL32.dll:
0x1400c724c DeleteCriticalSection
0x1400c7254 EnterCriticalSection
0x1400c725c FreeLibrary
0x1400c7264 GetLastError
0x1400c726c GetModuleHandleA
0x1400c7274 GetProcAddress
0x1400c727c GetStartupInfoA
0x1400c728c IsDBCSLeadByteEx
0x1400c7294 LeaveCriticalSection
0x1400c729c LoadLibraryA
0x1400c72a4 MultiByteToWideChar
0x1400c72b4 Sleep
0x1400c72bc TlsGetValue
0x1400c72c4 VirtualAlloc
0x1400c72cc VirtualFree
0x1400c72d4 VirtualProtect
0x1400c72dc VirtualQuery
0x1400c72e4 WideCharToMultiByte
Library msvcrt.dll:
0x1400c72f4 __C_specific_handler
0x1400c72fc ___lc_codepage_func
0x1400c7304 ___mb_cur_max_func
0x1400c730c __getmainargs
0x1400c7314 __initenv
0x1400c731c __iob_func
0x1400c7324 __lconv_init
0x1400c732c __set_app_type
0x1400c7334 __setusermatherr
0x1400c733c _acmdln
0x1400c7344 _amsg_exit
0x1400c734c _cexit
0x1400c7354 _commode
0x1400c735c _errno
0x1400c7364 _fileno
0x1400c736c _fmode
0x1400c7374 _initterm
0x1400c737c _lock
0x1400c7384 _onexit
0x1400c738c _setjmp
0x1400c7394 _setmode
0x1400c739c _unlock
0x1400c73a4 abort
0x1400c73ac calloc
0x1400c73b4 exit
0x1400c73bc fflush
0x1400c73c4 fprintf
0x1400c73cc fputc
0x1400c73d4 free
0x1400c73dc fwrite
0x1400c73e4 localeconv
0x1400c73ec longjmp
0x1400c73f4 malloc
0x1400c73fc memchr
0x1400c7404 memcpy
0x1400c740c memset
0x1400c7414 signal
0x1400c741c strcmp
0x1400c7424 strerror
0x1400c742c strlen
0x1400c7434 strncmp
0x1400c743c strstr
0x1400c7444 vfprintf
0x1400c744c wcslen

Exports

Ordinal Address Name
1 0x200000000 AmIDebugged__76oader_1372
2 0x200000000 BaseThreadInitThunk__76oader_1592
3 0x200000000 CheckHardwareBreakPoints__76oader_1388
4 0x200000000 CreatedInterrupt__76oader_1416
5 0x1400b5e88 CurrentAssembly__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_20
6 0x1400a8120 Dl_1023410185_
7 0x1400b6000 Dl_1023410187_
8 0x200000000 Dl_1023410194_
9 0x200000000 Dl_1023410203_
10 0x200000000 Dl_1056973869_
11 0x1400a8178 Dl_1342179610_
12 0x1400a8170 Dl_1342179648_
13 0x1400a8168 Dl_1342179665_
14 0x1400a8158 Dl_1342179856_
15 0x200000000 Dl_1342180241_
16 0x1400a8150 Dl_1342180301_
17 0x1400a8148 Dl_1342180314_
18 0x1400a8138 Dl_1342180339_
19 0x200000000 Dl_1342180341_
20 0x1400a8130 Dl_1342180365_
21 0x1400a8128 Dl_1342181099_
22 0x1400a8160 Dl_1342181994_
23 0x1400a8140 Dl_1342184270_
24 0x1400a8188 Dl_1375737445_
25 0x1400a8180 Dl_1375737893_
26 0x1400a8190 Dl_1862271172_
27 0x200000000 Dl_1862271258_
28 0x200000000 Dl_2113941776_
29 0x200000000 Dl_2113941788_
30 0x1400b5e28 Dl_2113941820_
31 0x1400b5e20 Dl_2113941866_
32 0x200000000 Dl_2113941903_
33 0x200000000 Dl_2113941905_
34 0x200000000 Dl_2113943166_
35 0x1400b5f60 Dl_2113943836_
36 0x1400a8198 Dl_2516586222_
37 0x200000000 Dl_2566914147_
38 0x200000000 Dl_2566914180_
39 0x200000000 Dl_2566914183_
40 0x200000000 Dl_436208173_
41 0x200000000 Dl_436208175_
42 0x200000000 Dl_452985033_
43 0x200000000 Dl_452986305_
44 0x200000000 Dl_452986337_
45 0x200000000 ETWExceptionHandler__76oader_1578
46 0x200000000 GetPPEB__76oader_359
47 0x200000000 GetSyscallStub__76oader_1023
48 0x200000000 Kernel32ThreadInitThunkFunction__76oader_1590
49 0x200000000 LPWSTRtoLowercase__76oader_294
50 0x200000000 MultiByteToWideChar__76oader_777
51 0x200000000 MyCloseHandle__76oader_773
52 0x1400a8278 MyCreateFileA__76oader_985
53 0x200000000 MyGetComputerNameExA__76oader_1439
54 0x200000000 MyGetCurrentProcessId__76oader_764
55 0x200000000 MyGetCurrentThreadId__76oader_775
56 0x200000000 MyGetDiskFreeSpaceExA__76oader_1441
57 0x1400a8270 MyGetFileSize__76oader_986
58 0x1400b5e08 MyGetModuleHandleA__76oader_770
59 0x1400b5df0 MyGetProcAddress__76oader_768
60 0x1400a8288 MyGetProcessHeap__76oader_767
61 0x200000000 MyGetThreadContext__76oader_771
62 0x200000000 MyGetTickCount__76oader_779
63 0x200000000 MyGlobalMemoryStatusEx__76oader_1440
64 0x1400b5df8 MyLdrLoadDll__76oader_429
65 0x200000000 MyOpenProcess__76oader_765
66 0x200000000 MyOpenThread__76oader_774
67 0x1400a8260 MyReadFile__76oader_988
68 0x200000000 MyRtlAddVectoredExceptionHandler__76oader_769
69 0x1400a8268 MyRtlAllocateHeap__76oader_987
70 0x1400b5e00 MyRtlInitUnicodeString__76oader_284
71 0x200000000 MySetThreadContext__76oader_772
72 0x1400a8280 MySleep__76oader_778
73 0x200000000 MyVirtualAllocEx__76oader_763
74 0x1400a8290 MyVirtualProtect__76oader_766
75 0x200000000 MyWaitForSingleObject__76oader_776
76 0x200000000 NTIarithmeticdefect__cT9c9bHlHSpA1QTnKbHjnIkA_
77 0x200000000 NTIarrayL48OO48_safearrayboundT__nKvO7wXZAsroXb0Wz9b7Rmw_
78 0x200000000 NTIarrayL48OO494957_uint5452T__wa4ExhM0I5D0wQQmyrXAHA_
79 0x200000000 NTIarrayL48OO5149_byteT__vEOa9c5qaE9ajWxR5R4zwfQg_
80 0x200000000 NTIbcgrmproc__7kPg4iIrFVxPW1SngAif2w_
81 0x200000000 NTIbool__VaVACK0bpYmqIQ0mKcHfQQ_
82 0x200000000 NTIbyte__k3HXouOuhqAKq0dx450lXQ_
83 0x200000000 NTIcatchableerror__qrLSDoe2oBoAqNtJ9badtnA_
84 0x200000000 NTIchar__nmiMWKVIe46vacnhAFrQvw_
85 0x1400b5e40 NTIclrerror__PUxYufCPDbgUFMvFpPtSfQ_
86 0x200000000 NTIcstring__S9agCYBinaYZnGWcjTdxclg_
87 0x200000000 NTIcy95struct49__ROud78kqeHjXYisn4jhtaw_
88 0x200000000 NTIcy__wDff8zKdhpvos9c7lBHUPSQ_
89 0x200000000 NTIdecimal95union4995struct49__79a7mES62JQ1oSE6vhkv3Mg_
90 0x200000000 NTIdecimal95union49__WGoXHqhEWH1qpRGdTEgBIQ_
91 0x200000000 NTIdecimal95union5095struct49__ndD9aJVbTCK7WcNNlcFDdRQ_
92 0x200000000 NTIdecimal95union50__AHLY3ntS3ifZxbjvCnrSYw_
93 0x200000000 NTIdecimal__7lwbcpbVYQOsyXq5rL9casA_
94 0x200000000 NTIdefect__LbeSGvgPzGzXnW9caIkJqMA_
95 0x200000000 NTIdouble__w9bl9a1ul9ctRJWiMl9cNnIMvg_
96 0x200000000 NTIecb__FqrsHsObEDvZPY9aUEY69aCA_
97 0x200000000 NTIexception__XEycrCsme5C8CVWAYEcdBQ_
98 0x200000000 NTIfloat__C875xFvYpI7aGybrDGHIaQ_
99 0x200000000 NTIhcryptprov__hMQEc0FMry7Up7EoPki79aA_
100 0x200000000 NTIidispatch__25afB9aQxduZVFt1Yu6YBbw_
101 0x200000000 NTIidispatchvtbl__m6cgE8u5k2W48yvpP0M9cVg_
102 0x200000000 NTIindexdefect__n6tGEPHKkh7E1AP9bj30WrQ_
103 0x200000000 NTIint__rR5Bzr1D5krxoo1NcNyeMA_
104 0x200000000 NTIint__xHTZrq9aYs6boc9bCba0JbpQ_
105 0x1400a80e0 NTIioerror__iLZrPn9anoh9ad1MmO0RczFw_
106 0x200000000 NTIirecordinfo__o7mu6JCMnDiOC4fiz5Cxtw_
107 0x200000000 NTIirecordinfovtbl__Rtoycx0FzRmTEejgGZss8w_
108 0x200000000 NTIiunknown__GaCOTm3fAeQng3LkqGK9cpw_
109 0x200000000 NTIiunknownvtbl__jF4R4hWZYkQD9a5uVek42vg_
110 0x200000000 NTIkeyvaluepair__2wauyaneUIEXFZnckdv0OQ_
111 0x1400b5f80 NTIkeyvaluepairseq__QyuekR9bgDQj4oxD9cw0z4fw_
112 0x200000000 NTIlong__sVg18TP9cLifHyygRe9cro9aA_
113 0x200000000 NTIlonglong__Aav8dQoMlCFnZRxA0IhTHQ_
114 0x200000000 NTImyntflushinstructioncache__3eV1XklMMklNDUIHDUNWNQ_
115 0x200000000 NTIobject__diB2NTuAIWY0FO9c5IUJRGg_
116 0x1400a8220 NTIobject__nftp7RTJl9bUkGnValdDrfQ_
117 0x200000000 NTIoverflowdefect__9cxMi1BPLc3UKt9br86bGfGQ_
118 0x200000000 NTIpointer__vr5DoT1jILTGdRlYv1OYpw_
119 0x200000000 NTIprocLself58ptridispatch_dispidmember58dispid_riid58refiid_lcid58lcid_wflags58word_pdispparams58ptrdispparams_pvarresult58ptrvariant_pexcepinfo58ptrexcepinfo_puargerr58ptruintT58hresultLOstdcallOT__HMTIlg0ibX9c3DUxZWiFDlg_
120 0x200000000 NTIprocLself58ptridispatch_itinfo58uint_lcid58lcid_pptinfo58ptrptritypeinfoT58hresultLOstdcallOT__PJRj0uRX50rVBId5wxoWWg_
121 0x200000000 NTIprocLself58ptridispatch_pctinfo58ptruintT58hresultLOstdcallOT__zezkKyqfMpGrdLXfsTMoKg_
122 0x200000000 NTIprocLself58ptridispatch_riid58refiid_rgsznames58ptrlpolestr_cnames58uint_lcid58lcid_rgdispid58ptrdispidT58hresultLOstdcallOT__vTmQiiZaMJLP5PVxP1nC6g_
123 0x200000000 NTIprocLself58ptrirecordinfoT58pvoidLOstdcallOT__tl4K6HbRH9akfWlpgfxzhhQ_
124 0x200000000 NTIprocLself58ptrirecordinfo_pbstrname58ptrbstrT58hresultLOstdcallOT__CiNRVOLKE0o4du7TW0veXA_
125 0x200000000 NTIprocLself58ptrirecordinfo_pcbsize58ptrulongT58hresultLOstdcallOT__9bUQLlQzyTYq9cn1PPQoncWg_
126 0x200000000 NTIprocLself58ptrirecordinfo_pcnames58ptrulong_rgbstrnames58ptrbstrT58hresultLOstdcallOT__3flVhatAuo2wDQ3pLqPtWw_
127 0x200000000 NTIprocLself58ptrirecordinfo_pguid58ptrguidT58hresultLOstdcallOT__szvo7XZUqIEvn15njypZnQ_
128 0x200000000 NTIprocLself58ptrirecordinfo_pptypeinfo58ptrptritypeinfoT58hresultLOstdcallOT__lgbxIcoFlqaRoc8l1J5x6A_
129 0x200000000 NTIprocLself58ptrirecordinfo_precordinfo58ptrirecordinfoT58winboolLOstdcallOT__UrLfbkx3jYpl8aTT7EGhew_
130 0x200000000 NTIprocLself58ptrirecordinfo_pvdata58pvoid_szfieldname58lpcolestr_pvarfield58ptrvariantT58hresultLOstdcallOT__a8wuVcgf8JFBdtyIlUvAGg_
131 0x200000000 NTIprocLself58ptrirecordinfo_pvdata58pvoid_szfieldname58lpcolestr_pvarfield58ptrvariant_ppvdatacarray58ptrpvoidT58hresultLOstdcallOT__V5FpwH0D4atxA49a8FYaWEg_
132 0x200000000 NTIprocLself58ptrirecordinfo_pvexisting58pvoid_pvnew58pvoidT58hresultLOstdcallOT__ZI1jobj8DmvwFnbiO6qPCg_
133 0x200000000 NTIprocLself58ptrirecordinfo_pvnew58pvoidT58hresultLOstdcallOT__79cx3unW0Z6BgDnOrcHfitQ_
134 0x200000000 NTIprocLself58ptrirecordinfo_pvsource58pvoid_ppvdest58ptrpvoidT58hresultLOstdcallOT__ymDIUs9akB6qYPB24WgIOaQ_
135 0x200000000 NTIprocLself58ptrirecordinfo_wflags58ulong_pvdata58pvoid_szfieldname58lpcolestr_pvarfield58ptrvariantT58hresultLOstdcallOT__LKhTenaIJkf6RxVNrDi3BA_
136 0x200000000 NTIprocLself58ptriunknownT58ulongLOstdcallOT__3MBg39aXrFJCcyBWUf6B79aQ_
137 0x200000000 NTIprocLself58ptriunknown_riid58refiid_ppvobject58ptrpointerT58hresultLOstdcallOT__9bWBI5aELdW2XHTbyYNjFXQ_
138 0x200000000 NTIprocLx58timeT58zonedtimeLOclosure_gcsafe_locks5848OT__7xnKxEC24cr3qZyj3gX32w_
139 0x200000000 NTIptrbstr__Pdw3MEiEie9cIIBXdRF4aZg_
140 0x200000000 NTIptrbyte__cG1a2XAxsP28AUq2q9aXnNg_
141 0x200000000 NTIptrchar__9b60r3P3z08159cCfYvgtoSg_
142 0x200000000 NTIptrcy__jXbtSxLfw0itmjWsMdWfNw_
143 0x200000000 NTIptrdecimal__tOyFM5VpR5CfoueNblK2NQ_
144 0x200000000 NTIptrdouble__dHulNBWhJTS79cd5h9cp4OHg_
145 0x200000000 NTIptrfloat__K9c5mNCKsxyPa9bhQF1Un42w_
146 0x200000000 NTIptridispatch__kYuJ1yXKaTDKM1gBNBYZMA_
147 0x200000000 NTIptridispatchvtbl__D2nH2Oqivmr8QTsU9aLjsOQ_
148 0x200000000 NTIptrirecordinfo__3WT32ZAg6wsc9ay7tyclJnQ_
149 0x200000000 NTIptrirecordinfovtbl__7VzmdWawVAQPByb1qFKRtA_
150 0x200000000 NTIptriunknown__UyU8VSOcMgg7fdJy7SxeGw_
151 0x200000000 NTIptriunknownvtbl__RE27JCE9bOJX1xy12IDcHnA_
152 0x200000000 NTIptrlong__9awHbpuyuG8AxbsaqeBLKDQ_
153 0x200000000 NTIptrlonglong__qTZjETMuYhaATb9arhin3WA_
154 0x200000000 NTIptrolechar__9arplNu1iE9bhlDxcL6A4PMw_
155 0x200000000 NTIptrptridispatch__9cAC89c2ntOozT6m3udvMQRQ_
156 0x200000000 NTIptrptriunknown__8MnBU5BrvTao0wsQ9alw3AQ_
157 0x200000000 NTIptrptrsafearray__SD30oco7TmqisM1c9brwQSg_
158 0x200000000 NTIptrsafearray__DTydpwcrqtIWM70d0MgBsw_
159 0x200000000 NTIptrshort__BjHmAJOH9agj4KRxOkanazQ_
160 0x200000000 NTIptrvariant__k5zDQ9aqJXQRCQNlOgs85Ow_
161 0x200000000 NTIqipcproc__BlBp9c2J7tRXTU9adX1vV5gQ_
162 0x200000000 NTIqpcproc__eV9b9cYSUZoo6tKaCd9b3k9bzA_
163 0x200000000 NTIquitproc__PD9b9cqhDqM6Xy1oSxwODsOQ_
164 0x200000000 NTIrefclrerror__FRS9cQbNhae5zCH8EuU1Jew_
165 0x200000000 NTIrefexception__vU9aO9cTqOMn6CBzhV8rX7Sw_
166 0x200000000 NTIrefindexdefect__RJnHOb9cQV3neNC9cDkRgMyw_
167 0x1400a80a0 NTIrefioerror__HMIVdYjdZYWskTmTQVo5BQ_
168 0x200000000 NTIrefobject__HsJiUUcO9cHBdUCi0HwkSTA_
169 0x1400a81e0 NTIrefobject__PNpya69bg5jOKXuhnlj83NQ_
170 0x200000000 NTIrefoverflowdefect__r8GBEWywN07B3Rat3azS4Q_
171 0x200000000 NTIrefreraisedefect__uG62cfJZ15c2siK3CKLmnQ_
172 0x1400b6060 NTIrefvalueerror__Ie1m0dv1ZHg72IgPRr1cDw_
173 0x1400b5ee0 NTIrefvariantconversionerror__sSrF5S0WQBiSGAvsVyZTJQ_
174 0x200000000 NTIreraisedefect__E0L0wGYS1gPD81VLstNO2g_
175 0x200000000 NTIrijndaelcontext__uzMEyYcUmtQ6HTVQxlfmCQ_
176 0x200000000 NTIrootobj__ytyiCJqK439aF9cIibuRVpAg_
177 0x200000000 NTIsafearray__DKskJgJKqdiGvU7qvx1u8A_
178 0x200000000 NTIsafearraybound__MAW7pPwMg9cUv0ZH0AE2pzQ_
179 0x1400b5da0 NTIseqLbyteT__6H5Oh5UUvVCLiakt9aTwtUQ_
180 0x200000000 NTIseqLstacktraceentryT__uB9b75OUPRENsBAu4AnoePA_
181 0x1400b5fc0 NTIseqLstringT__sM4lkSb7zS6F7OVMvW9cffQ_
182 0x200000000 NTIseqLvariantT__3a0Lf6u9aPn9bq0V0eQ07mtw_
183 0x200000000 NTIshort__kDPg4wXyR8DDyA0MeEjIsw_
184 0x200000000 NTIstacktraceentry__oLyohQ7O2XOvGnflOss8EA_
185 0x200000000 NTIstring__77mFvmsOLKik79ci2hXkHEg_
186 0x200000000 NTIsystemrng58objecttype__X9aKjcE9bDr41cpowCIZoGpQ_
187 0x200000000 NTIsystemrng__9aWCZSregXolmau8IgbwrpA_
188 0x200000000 NTItable__MyiXBZqHlwtVNEEvYnEmjg_
189 0x1400a81a0 NTItableref__mmbDGmie1Vw3nGJ9cRqQG7w_
190 0x200000000 NTItimezone58objecttype__F8OvqlxXyGXRSiK9c1fCDVw_
191 0x200000000 NTItimezone__9a5v4OQPlGqsA25ioN8hFYA_
192 0x200000000 NTIuint5150__JrFyJbYm9b5I4hJ9cWDqvfYA_
193 0x200000000 NTIuint5452__wMtfD88jmrPZwfzTH9c8e9cA_
194 0x200000000 NTIuncheckedarrayLutf4954charT__Tyd4y3haUOOHTj71TPIRag_
195 0x1400b6020 NTIvalueerror__yoNlBGx0D2tRizIdhQuENw_
196 0x200000000 NTIvariant58objecttype__FBSF3pWyJz9clqwLRXzZTsA_
197 0x200000000 NTIvariant95union4995struct4995union4995struct49__DtI9bsEAgJB3Tyh5MHrgkrw_
198 0x200000000 NTIvariant95union4995struct4995union49__DjJ9a9aNjdVJoA2NlSK7Lz7Q_
199 0x200000000 NTIvariant95union4995struct49__c8Wtv5nqLcM2jwvHc9cTY9bg_
200 0x200000000 NTIvariant95union49__Sr5LLwiwjGCKhbDlb25pAQ_
201 0x200000000 NTIvariant__UPxdF8T9b3GRPNZqBCwEDkw_
202 0x1400b5f20 NTIvariant__VYnrN9cMJav8fTNB7Pu9bPZw_
203 0x1400b5ea0 NTIvariantconversionerror__Y4pKacDNXcA9boOh7ryibHg_
204 0x200000000 NTIvartype__M4na42GvebBMnI5wV9cYMxg_
205 0x200000000 NTIwidecstringobj__4HwedE75WPfqZSQ0Cq2OUg_
206 0x200000000 NaturalToInt32__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZwinstr_49
207 0x200000000 NimMain
208 0x200000000 NimMainInner
209 0x200000000 NimMainModule
210 0x200000000 NtAllocateVirtualMemory__76oader_817
211 0x200000000 NtClose__76oader_800
212 0x200000000 NtCreateSection__76oader_898
213 0x200000000 NtCreateThreadEx__76oader_832
214 0x200000000 NtFreeVirtualMemory__76oader_936
215 0x200000000 NtMapViewOfSection__76oader_923
216 0x200000000 NtProtectVirtualMemory__76oader_879
217 0x200000000 NtReadVirtualMemory__76oader_951
218 0x200000000 NtWriteVirtualMemory__76oader_864
219 0x1400b5e90 Null__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_18
220 0x200000000 OpenMoreMaxPIDProcess__76oader_1509
221 0x200000000 PreMain
222 0x200000000 PreMainInner
223 0x200000000 RVAtoRawOffset__76oader_989
224 0x200000000 Rcon__OOZOOZ85sersZnicksZOnimbleZpkgsZnimcrypto4548O54O48ZnimcryptoZrijndael_6
225 0x200000000 RuntimeHelp__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_2248
226 0x200000000 SYSCALL_STUB_SIZE__76oader_793
227 0x14000d570 SetupETWBreakpoints__76oader_3206
228 0x200000000 SinkVtbl__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7125
229 0x200000000 Sink_AddRef__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7024
230 0x200000000 Sink_GetIDsOfNames__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7051
231 0x200000000 Sink_GetTypeInfoCount__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7040
232 0x200000000 Sink_GetTypeInfo__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7044
233 0x200000000 Sink_Invoke__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7060
234 0x200000000 Sink_QueryInterface__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7006
235 0x200000000 Sink_Release__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7032
236 0x200000000 StartProcess__76oader_1782
237 0x14009e480 None
238 0x14009e4a0 None
239 0x14009dd00 None
240 0x14009dd80 None
241 0x140025580 None
242 0x14009dea0 None
243 0x14009e470 None
244 0x14009e3e0 None
245 0x14009dfa0 None
246 0x14009df80 None
247 0x140024cc0 None
248 0x140024c80 None
249 0x14009df40 None
250 0x14009dec0 None
251 0x140006580 None
252 0x200000000 None
253 0x200000000 None
254 0x200000000 None
255 0x200000000 None
256 0x200000000 None
257 0x200000000 None
258 0x200000000 None
259 0x200000000 None
260 0x200000000 None
261 0x200000000 None
!This program cannot be run in DOS mode.
P`.data
.rdata
`@.eh_fram
.pdata
0@.xdata
0@.bss
.edata
0@.idata
.reloc
UAUATSH
([A\A]]
P H;Q }
r H9q u
A M9A u"L
A L9@ u#H
r I9p
AUATWVSH
[^_A\A]
[^_A\A]
AVAUATUWVSH
[^_]A\A]A^
ATWVSH
([^_A\
ATUWVSH
[^_]A\
AVAUATUWVSH
[^_]A\A]A^
AVAUATUWVSH
[^_]A\A]A^
J H9H tGH
J H9H
AVAUATUWVSH
[^_]A\A]A^
b@H;z(
AUATSH
[A\A]
[A\A]
[A\A]
AUATUWVSH
([^_]A\A]
AUATUWVSH
([^_]A\A]
ATWVSH
([^_A\
ATUWVSH
[^_]A\
[^_]A\
[^_]A\
AUATUWVSH
([^_]A\A]
([^_]A\A]
([^_]A\A]
ATUWVSH
[^_]A\
ATUWVSH
[^_]A\
[^_]A\
AVAUATUWVSH
[^_]A\A]A^
AVAUATUWVSH
0[^_]A\A]A^
ATUWVSH
@[^_]A\
@[^_]A\
AUATSH
AWAVAUATUWVSH
excepti
Error: uH
nhandledH
[^_]A\A]A^A_
D$ H9D$0
[[reraisH
ed from:
ATWVSH
AUATSH
AUATSH
0[A\A]
AWAVAUATUWVSH
H[^_]A\A]A^A_
Parsed iI
nteger oL
utside oI
f valid L
@0rangf
ATWVSH
([^_A\
([^_A\
ATWVSH
([^_A\
ATUWVSH
P[^_]A\
AUATUWVSH
H[^_]A\A]
AUATUWVSI
UUUUUUUUH
33333333M!
K8[^_]A\A]
AWAVAUATUWVSH
t$HH#t$8H1
L3\$8I1
|$XH#|$hH1
T$(L#L$pH#\$0L
H#t$XH#L$`L1
H#l$pM
H#|$PI1
I3W(H3D$(I
I3o8M3GHI3G@M
H3\$PH3\$(I1
H3L$hH1
H3\$(I1
T$PH3L$XH1
L3T$XL3T$`L1
L3D$8H3l$0L1
L3|$hH
H3L$0H
L#l$`M!
t$8H#t$@L
H3T$8H3T$@M
H#t$PI!
d$(H3\$pH1
L#D$XL1
D$hH3D$pL1
H3\$(I1
H3w`H1
H3oxH1
[^_]A\A]A^A_
AWAVAUATWVSH
tQL9#~LJ
@[^_A\A]A^A_
@[^_A\A]A^A_
t of bouH
index ou
containH
nds, theH
er is emH
not in H
0 ..fD
not in
not in
indefD
0 ..fD
AUATUWVSH
([^_]A\A]
([^_]A\A]
AUATVSH
convert f
([^A\A]
convert H9
convert H
convert
convert
AUATUWVSH
VT_ARRAY
8[^_]A\A]
VT_BYREF
VT_VECTO
VT_RESER
VT_ARRAYH
8[^_]A\A]
8[^_]A\A]
VT_ARRAYH
AWAVAUATUWVSH
[^_]A\A]A^A_
uncatcheH
d exceptH
hander:H
ion insiH
de eventH
AVAUATUWVSH
@[^_]A\A]A^
AUATSH
[A\A]
AWAVAUATUWVSH
o invokeH
unable tH
specifiH
ed membeH
AUATSH
AWAVAUATUWVSH
8[^_]A\A]A^A_
AUATUWSH
[_]A\A]
AUATUWVSH
([^_]A\A]
([^_]A\A]
ATWVSH
8[^_A\
gfffffffD
integer:H
invalid H
AVAUATUWVS
[^_]A\A]A^A_
AVAUATUWVSH
[^_]A\A]A^
AUATUWVSH
([^_]A\A]
ATUWVSH
[^_]A\
[^_]A\
AWAVAUATUWVSH
[^_]A\A]A^A_
D$(HcF
LcD$ M
AWAVAUATUWVSH
\$0L#\$(H!
H3\$(H1
d$HL#d$XH1
L#T$ L3T$XH1
H#T$hL1
|$hL3L$ H#
H3|$ L#\$HM1
H#D$PH1
T$pH3T$XL!
L#T$ H1
L3\$ L
L#t$`I1
H#L$8H3
d$@L3L$8H1
H3t$8I1
H#D$PH1
T$pH3T$(H
""""""""L!
DDDDDDDDI!
[^_]A\A]A^A_
AUATUWVSH
H[^_]A\A]
AVWVSH
AWAVAUATUWVSH
McT$<O
l$HHcL$@HcS
[^_]A\A]A^A_
AUATUWVSH
([^_]A\A]
H H9J u
L9Q u$H
AUATUWVSH
([^_]A\A]
ATWVSH
([^_A\
([^_A\
AWAVAUATUWVSH
[^_]A\A]A^A_
AVAUATUWVSH
0[^_]A\A]A^
AUATUWVSH
([^_]A\A]
AWAVAUATUWVSH
invalid H
format sH
tring, cH
annot paH
@0rse:
h[^_]A\A]A^A_
AUATSH
AUATUWVSH
[^_]A\A]
unable tH
o get ru
ntime ofH
AWAVAUATUWVSH
[^_]A\A]A^A_
AWAVAUATUWVSH
LcL$`H
[^_]A\A]A^A_
=CCG u
} ouH
} ot0H
UAUATWVSH
[^_A\A]]
EL;E`|
E(H;E u
E(H;E u%H
9El~)H
E(H;E t
H;E s?H
H;E s]
AWAVAUATUWVSH
)d$ fA
)d$0fI
)d$PfA
)T$`fA
)T$pfH
[^_]A\A]A^A_
libgcc_s_dw2-1.dll
__register_frame_info
__deregister_frame_info
[GC] cannot register thread local variable; too many thread local variables
[GC] cannot register global variable; too many global variables
could not load:
(bad format; library may be wrong architecture)
could not import:
out of memory
virtualFree failing!
ReraiseDefect
fatal.nim
sysFatal
OverflowDefect
ValueError
integerOutOfRangeError
parseutils.nim
SIGINT: Interrupted by Ctrl-C.
SIGSEGV: Illegal storage access. (Attempt to read from nil?)
SIGABRT: Abnormal termination.
SIGFPE: Arithmetic error.
unknown signal
SIGILL: Illegal operation.
IndexDefect
os.nim
paramStr
inet_ntop
VariantConversionError
com.nim
newVariant
CLRError
clr.nim
clrError
toVariant
LdrLoadDll
RtlInitUnicodeString
GetCurrentProcessId
VirtualProtect
OpenProcess
GetProcessHeap
GetProcAddress
RtlAddVectoredExceptionHandler
GetModuleHandleA
GetThreadContext
SetThreadContext
CloseHandle
OpenThread
GetCurrentThreadId
WaitForSingleObject
MultiByteToWideChar
GetTickCount
CreateFileA
GetFileSize
RtlAllocateHeap
ReadFile
GetComputerNameExA
GlobalMemoryStatusEx
GetDiskFreeSpaceExA
strutils.nim
parseInt
counter
Field2
Field1
Field0
hresult
cipher
NtFlushInstructionCache4
treadHandle3
remoteProcID2
tProcess1
:state
zonedTimeFromAdjTimeImpl
zonedTimeFromTimeImpl
hIntel
coresCount
queryIdleProcessorCycleTime
queryUnbiasedInterruptTime
queryProcessCycleTime
bCryptGenRandom
decVal
RecordDestroy
RecordCreateCopy
RecordCreate
IsMatchingType
GetFieldNames
PutFieldNoCopy
PutField
GetFieldNoCopy
GetField
GetTypeInfo
GetSize
GetName
GetGuid
RecordCopy
RecordClear
RecordInit
lpVtbl
pRecInfo
pvRecord
struct1
puintVal
pintVal
pullVal
pulVal
puiVal
union2
signscale
union1
wReserved
pdecVal
uintVal
intVal
ullVal
pvarVal
pparray
ppdispVal
ppunkVal
pbstrVal
pcyVal
pscode
pboolVal
pdblVal
pfltVal
pllVal
lLbound
cElements
rgsabound
pvData
cLocks
cbElements
fFeatures
parray
Invoke
GetIDsOfNames
GetTypeInfoCount
pdispVal
Release
AddRef
QueryInterface
punkVal
bstrVal
boolVal
dblVal
fltVal
wReserved3
wReserved2
wReserved1
filename
procname
parent
SetConsoleOutputCP
SetConsoleCP
IsEqualGUID
WideCharToMultiByte
SysStringLen
lstrlenW
GetCurrentThread
HeapCreate
HeapAlloc
LoadLibraryA
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
CreateProcessW
GetCurrentProcess
ResumeThread
GetForegroundWindow
GetWindowThreadProcessId
GetCommandLineW
GetModuleFileNameW
DispGetIDsOfNames
SysFreeString
CoInitialize
VariantClear
VariantCopy
SysAllocString
SafeArrayCreate
SafeArrayPutElement
CLRCreateInstance
CreateToolhelp32Snapshot
Thread32First
Thread32Next
RtlGetVersion
GetFileAttributesW
@System.Drawing.dll
@System.dll
@kernel32
@kernel32
@ole32
@ole32
@oleaut32
@oleaut32
@kernel32
@kernel32
@kernel32
@kernel32
@user32
@user32
@kernel32
@kernel32
@ole32
@ole32
@oleaut32
@oleaut32
@mscoree
@mscoree
@kernel32
@kernel32
@kernel32.dll
=:<"58'84865>77)=')*(<=&.%04/*,NQY]\N_^JJFVP\KJAO\S@DEMNVVOCOAO~{
oexbmiulu}m||eepe`tjerzmochk`
>9!<+:>+#/'0+&+':>>-/9-=/7*.869/_FGKZFQBUHR@TKIMDHMIZ_NQT_A]NFKXcc}`ps}dakqkcxvmt}fi
~yhmmmimcz
@PNMVXAMN]OO]JRA@^UJWlgzybititrmtwflmjqebecjwcppz`ncv
: =?/()"7/0!(&0-%',;6*&;",1:<=<-
LP___LXN[LML^EUP\GYCBZJGNNKPIHT\lomlb|{nlzohgcoo}mmch~odepzirbkj
0.:,'&;'%4&&)<,4 );;8-/8'-.#"(")
@kernel32.dll
"<&*0-2#20"5$&!)*+;'').>7,-+;-,)
|nn|nq|elinoe
iuskhpktpG\JDASYFQL
@ntdll.dll
@tgisihwc{~zocr
kie`r{j
%>-+#4+#/<%'>8? #>%.4+ -;;)780-%
@*/83>/<72%.8'-<&->/9
QP^PZFVILG_JOZLXWIVTOJQDGDX_[CBEhl`}ajpy~entg
@+9$$3'.#"#'3(-*1;/>+
hiqkigpr}zpaax`~azcgqn~~orbrxdt|FKLKJW\MPBZLTYJYHCSYUSGSLNPFO_ZF
q'.vgc
Y)nUm
=_9MDJ
1GAY{~
8Jl?h9
a qZ#W-n
-S2MQO
1g,]Q-
.$rVjZ'
KiE1>
O?wz&
HrUW5cD+
Bij{Wkz
@"c}\3|
H'&)5y
^O-'VE
# BCC
Or6oP
w[/WWM
N@zU]8s!
Q.^hJ
K8whx9
/FUEPf4
k,s<x@hI
t+\`(%uh
/QK!y/F
/u!h&e
Y#-5gc
25z@B)
K~8(j0
7Pg'4a
hh<<uF
S^be@J
&)f%A\
y!IYt}
XAz5&K
*{kpqB
Rp?)6!
|]9(&"
m8SeF}
c1ef7M{
B:ItK[
Te)o=|`
_+jf wt
Gz,zlW
@qDy.b
=^64Zn
>5A~iSan}
=Uq=P)<^
e4ZR4ht
-Q"v
17Jun
%UOb88
:2UVyq
MdC&HnB
0o#5&
SA9;="e%
!h9j-n
[gZ(@\l
L"bL!)
2^<kcm
iP`9SI
207R ;
COA^to
,:]Gmd
`6pMed
A1i/wK
\JX"aIPU
DZVE;b[
{pB{\W
>UgH.]I
G<[ALT
"Xpn:4*
d?GM~M
41.Ob;h
|vL3%p
d5EarV
Eietj.
7b#C7#
F|&}XY
M<%-,t
W2dG`%
H`j_Yd
7+6N8[
M<%-,t
'Q1P>r
M<%-,t
B5BB^O>
kp*/a7O
G<[ALT
gz;;]R9
`R4g11
[+[lv6
y+F ?]j
QZ)}:{
0zk6*X
EV0?q'
M<%-,t
y+F ?]j
[+[lv6
y+F ?]j
0zk6*X
Pp>.yE
`R4g11
<RW=Y:9
y+F ?]j
_4?OQX
I3PHT3
QZ)}:{
M<%-,t
dozoQf
[PTx";{4
O_*>W#
>ygnp W6
F*%D>Q*OYA
E/_0;2
\bR@Wc
QoiJl4WR_
)Sl$g<
M<%-,t
!^}"o_
47J'Zl;
H`j_Yd
)9BypH
LO91i;
`f{q(|
5/]m:WL
bc('Q_pC
(PQ*Isy
+Yc)&2
QZ)}:{
7V@_'~1EB
f"j~0T
G<[ALT
N{|sEYG
tD\_'#
m:~1Sj
M<%-,t
;|k=z2
iZA?7i
#SLhbB
[{']ezv9m
cR;sm~7/CQ
Dee/OL
d"%*WjX
+zP}<PI
f4F$CN
G_o%h9B
`Z}`-w
LFm-n~
S;M<k8
0"!bbQ;
qkschq
Vpl8{q
P,0_J/
oZ\\?;)o
Nrs= b
Krk(F(
+ko] v
:*!p\_
%SU&`fN
IIoX0d
tK%S:&1
jN]{mg
b4#D\A[!
d2J+V A
o!F?"$
xRNu|N
C3?s;3
OXb{,5
v2\g|
LCA@Q2X
9rrqVj0
3uD2d1
6)pOR<I
K4L-x23cj
j>w3L#S
Zs4BK+l<A>
;<{vaB]
Ld!$|A,
_iyzWD
g0Oe$MG
^rIBV=%p
)G5<#,[
;2KG'G
$t\ -'
\-2G9-
8NFW$;
veizp+7
n\hZ<I[
"j'`Akvb
uQ=,le
=ryz!.
/x@%Sxg
j5OLq=x
Qr2sGAV
LOp`ZbA
N(m[G(
q+;qq7{wG
o:VdxU
i]wN05
Ae|P9HK
#.-<]r
1hH37&
BET3_<C,w
Z 9i(w
w:X)M#
Y_}>/Yp
fW?TMv
0s@xYe
!e"Xb;i
hL%Yk_
7C@w,s
z:AulK
$}w),0
p+^w(Y#
=a]](z
UsL7Dhb
e1U7Tedj2lZ
+JTWQ0
s~/y"0W
!pU"I>
Z%ZAnP
yP4ZEZ
:mt7YHf
kZ^b%2
X%f=.g
Q*,)`]!
$$X`@>
9.b<Gkk
0*bS]Bp
bxGa=[
fQc-P~6
,8gb7T
7.D\]>A
uy]_rR
B{.&wb
GiInY_
a~ jwO
/1+A}/<
AYU]EpG
NhPQIw
1{wRZH1
czd#]s
Syu[C~
,n)Pp[H
fF]_-W
HB/^^<G
AJb<,ti
Fka"8]
_9wqQJ
m]:DN|
$~Aj,uk
Qg6)m?
C_~&O\
[&\TIs
`AKSc
!ySUiiy
ri!KxFa
5ZYvry
5h 8ic}
^"Nhh83
ZAhztH
lEj[Dl
k:/YH6
u]>}l4!
^,3}Rop
^r@n%!
l=u=rS
P3ucgIN
N]v~ug
YEG]c'$
WNV`KzZ?
{<,S$L?
N6C:`q)
};*Y&/
`'s.l3ho8
$u<M!N3L
jmd4A~
*<P0F_U
&?>Vom
tZH-Cd
02kgS3
Ff3TbaE2
1tR/\!
.o0*-DZ
!LpjBj#}
vS;5m/`:
M%U/^i
]*Hk%9
RihOxRUIMI
G;>Gz^
Z"4f?ge
0KQn0v
/^1mA
80Q,4I
(~>!lR
3KA]$&OX
3;Ba?;
~{Ny*-j
A_ mq*
^dQTY
<-\ifL6S
EO*ui@
2HOG3RtS
(t&:Ri
`W(CVI
t,Rr3tg
b $UvO
ey;^e;
%fmR<A/4
<d7'W
9Q?qW~
yswQJ[,
7EOM+V
ZmQ${e/+
\MaoPR
`.t7Dt
Pp3T:f
\F^vN}
/iEbspT
.,u?L@aR
p]lOOs
tm Q,V
5b8a"AN
n'R;hJ%
9w?a9`
t[G]7"9
,nMQFR
P,s,3P>
^Y][LK
k6~!&"$
R~Xk*Ho
K[glhC
)Od.Otq
L* U%5
HZ_~axH
<a`i`"
p:0t[B
FF&r"o
"j9u5
s3hxXZ
kt4-!cG
$exP1?6
|&_Qqq
y&,L>*
E=$t}?nLf
-a@g31
O4#)n?^$G
N(9{=Z
/|iTrH
oc>m7cer
,`q$l\Q
!zHGUL
#v:wI
aknv"RN6
sx9+bDFA*
<*88Aw
&jtYi%
:?^CEK
rqH4W{
U8tmC?
xDZ3Vr
lF\D2Y U
YdTd[1%
2( W[I
83^81/
J|zi!XL
iRq%%(
\qK@U+
L}5=i'
@]AaaJ]:
:>2}K,
p/y1i\0
+rV)@O
&%EY7}
zD)$=[
4GV3{>C~
.N)Iz
yE`8)>h?
H]xb9}p
?PU78x
p;H)N)
ed%a>
yxfx#v
0hU|Hkt3qN
a'Ch~i
a*cJdS
|Il}CO
Hiy4$V7
)u#Ni
!mf}0r
[_P$jG
;VC+'g
/$KKf"
f1d5Rb
q5hW?[
9J]?J)
N4;tWAC
Ui#F~m
Wa.~OD
8;d/ l
-@%)N!
LJzN8T
CMfT9_I4WY%
4)d7}M7a
]Nfzy.
<bExK
+,+s)q
jSbi3R
?|8s~-o
=o!A@g
T61CMd
IQi.eP
FSbDLO
4g2B)!
8E(}e+
AfKci@r
&rP8 H#
eFn3yPD
0>?7&f
Sh7_aZO
_zkr-~T
2"M7E^
dut=)<3e
hcE&a.
i^<.-z
esh);$;
?S97O
PV|mJ)
X_c^eS
\<FqRJ
0FH#Uk
]VSSf0
)q~$q;
0FW$4xp
MeRk
[z+>9Q
B_ ~R*k}
#O-^MQy
m.bj{w
9,eK;
~Yg-~
t:0zkD
_*P} \~
'H>wF3
-oY?3?r
YcRd4Z
1E~!*b
SmMc)W
XU^I+K
hdc!N"
YmlJ*u
/lJ<qP
g-/9Sg
?upO{0UX
EthRF
3rrrtG
<5y<fB5
[!ro{@
y/:8DL
,1bpFr
a2xa":
28u}u
@2UG0
SG%)?[/ug
.>SUtX
GMf3vuI}!l
g59I0J
/,gtha/
~[g~pb
?6O_6FzJ>T
>7v0wAL
rjA!wM
z"[c$]D
h"5MeD
>)|},S
o8O30/
@R3Nu5
ggE[jN%
m-%H.!}DB
yWt{)H(/
I.z>*&y?
3hqiJ-
By'Nv8Kv
}4)U<>
r4sjE)
IC6#/e
NXS/xg
3<jg&
}HyP9R
VYWD'_Q
'nqICN
{y=sgiJw
P2DDqOd
TxiDVT
xCNykC
wzacGL
qZEdo
>7ryqq{
EV?e~[
lCF0zd*
rUU)75J
j0[H3_0
NnVa`3
`I(3mS
z2Z<UZ
;aL3B%p9f
)F3Ov!
`"?Z{#
`=H*yG
F2X#B]
y'"H(N
f(i87U
5&lu![,
D7|Gac)
|^L7N$A
aHTn]C
z,I_55
4 v;ct
L$E,TP
9?e'S;
Jb~X/D
B7T/^#
cmqN_
We^/Y;h\
$,FB<.
Rb:*9:X
h9z *D
-/9GBK
SG{wYA
(B%Q7BJ7
Z7dz.-
|194I$
x,7|Y;
7O{CdXe
b#5hUu
x#EfW$a2
K7B4c
4m.XR_
3~8?\>Z
,u*&&D
og$)?q,?
L7&=|l
r^W?w(c
+{36Ouz!
;}j{"D
SM&>4.gJ
g9]m0L
]o.O$6v-b
[28X3'17
fudwnPRW
c@q'g=
7@'ia,
$?\LL4
4K7.bz
Wuz|V
QB90Oy"K
qr]~0=
R@wBAd
Y>*N}_
5~YB8f2
#,_kZa
DJ:.r5
HHERGI1
<P|F/YV
(#6(<
Kb]:*z
jEDz~OvG
x/ae>7
Y`]HLE
[bKMms
Cn&mPR
<H~C<(
j.ea.8
zIU9ht
#|peR4/
,%885P
]xNL~;
Rft$eR
+S|w(I
Cy7W6H-S
Yd2_sf
(6v:f[W
}*-NK{
._5{/*
W`o\cN
_KObe/
}_:gI[&/
eS<ocF
!k;?]7z
- K@Y~M
k[R]n(})j1
02HX?(4*q3
~|erV4
7gb,UOQ,
zw=R7=
E*IvLQ
nLIBhn
EFU9Ma
SL&5m^
NEVp"Ug
vy%n`}
&ncMmS
edJByL
r.d^l&=?8
A[I(G1ddpM
'xXJ%Vz
{kWeyS
F)0*Pm
8Es!R%
x_f9zx
oT;44GG
qc~nW_i2$
TsiJtat
)8Fhe&
O#,*AP
6A1DSe
su#ZS5$
P`,]gS
AkOK-s
7|k@,;
@uq2)K
07>`@]
X7lA]#XR
J-k tF
gayu;zPv
yIvD72
|g_'(g
'GY}(x
|0QPK]n^J/
&j7Gx9/
g>(l8e\
&Y,=I#
99c}m\
LYZiy|y
}`2D\u
O,9Zj6
pbcRu#
/WI]sf
*tKv"Rh$
j[6V\\
+;gxY7
Mlv2UL=]
5`R\&U
iwrJ5>
ijvj%-w
6TQ^!=
Iha@1+%
9,)8A,
vVa!GY\
)s*s~9
K%\6<m]
/tB$p%/8
qNc"e@w
[;]mb5
%Vm9eN
1k(NIG
TCL_1|`#
-$:?[r
xr,/L7
Q&eXD2
d9HHMA
xF/e\W
?1^x"7
TYY{&B
v>:SW
J-!pkm
4>Hy(kW
fIRX"f
O(2={MtFc
J}88zP
lG7a1%j*
Bc@XBT
q4.1$)
`|?ici
l$';6 
5!YyE1C
hAdAfe
H;5A':
[;\rE<
M}]ls,
]pK8sNk
l)0xJ`
`zdU|Q
^(8QFt
L~R7FD
h'cwkh
w$vbXR%h
5!a_RW
H /vU|
f'1g"U
v^;OVd
#f^R8J
DZBXMSw
R"v?5$
S~.#a9m>
&ivQ:3v@
RpvI9.z
5g|:e]
"5Ono]
jm}UCB
3"{k.h
G>NmR
J$~^io^z4
HYgZIf&_
I6EGOv.
d:>$mg
]TeHVUl
?tl-<<
38eafK0
KY.l0:
L4l%x1o
*5vh2+
BeeIEh]
~.alr]Wc
W}FneP
h$)YQ@]
|EQMYbC
5_!Gy,
'?q@W_
2u+&+>`
NMbib%
&|.@fcsAkQ
Lk~Ap/
PFL`82
_=BPe,~a
J%M>M9
|7,w6hh
nT{>Y{
Tu7J\?
J(t9y]Fv
~\$yhj
<S!cgG
<vQ[F0
$Fv%.%eZh
( kWvV
3(O|I-E
VgNp|P
hP\ybE[
ZP?X{i
:7%O>F
/QQd3O
YbwdE<A
<I5}YM.
7-Dlz#
&tP\f
`o`yZ&
AQ_!jxg
1cf>:l
D_OWV{
^ V!TC
I|la9Gk
":5H(G
Bsch6M
^z`i\j
Y5ef#c`.3!
VV\ sj
60*"R&T
"DjvTc
>@j_Z<
a7*z?>
F_<e$O
O"r}Lp
ebb2tn
G<rNR*
fB=yF.
nB5 7x
6>8CX5Y
d_QT!y
uiT{$O
vz}',1
O> j.F
>mHT@fc
W3ZV}FG
r&IB{s%z
^67|>W
"8#MBz G
- $8}_`
-hV=6
~55I<B
Q(Atvl
%a;INn
-m'L@L
*%,(vu
@:;1{[Db
Dg&kIOq
}t`w K
^|M+R
Wdmc,""
0)[|&y
1H]Anr[X!
eMgQp0
L]KsVY){Yp
I]4lYq
O0PN8c|
zwp/Y"
\?H>rg
J.gWhz_
w*%x&x
#zqA6?0
V<Xn?c+
BsS101Q
+;jh<t
OfqWs4)X
]Ro:(o
A'@vp=0S
dq'(LN
{Vjx!,
2FMa%+
9U"!A"
6m7\Zr
nn&SiL
xPe%(9
7s6ka{c
zuhk^R
rny~N6f
tG7Q{J
wjxhjl.?
?:H!Cc
sd^q_e}
t}dVyE
yI&4~S/
8(V#qx
`Lj9GVd
x<7+(0
6=M43
mcakJA
Ds+m\7
>}KzqK
Cn\^JrH
@q$C-
W^^fw$o
WTm'>w
Cn\^JrH
g'qt7:
3Df~ 1
@q$C-
g'qt7:
h0>ZlUY.
W^^fw$o
@q$C-
g'qt7:
@q$C-
jMC;kC
`HW09
Cn\^JrH
1o]CE6
@q$C-
yC6 zr
e; (%1
g'qt7:
jMC;kC
Cn\^Jrv
@q$C-
g'qt7:
Cn\^Jr
:_9?&F`
G|2J:c
XYSeNxE
A`}O*|
:y^}[N
W:X)R:
Iyn4b0
8HqtvV8s
$t][^vVt
.NfF<$
{:3Zb,I^4N
%)?pkP
}=V*<i
J2}.r0
rWTLo6J
\^vkea
8@#r3D]
G>?pQ7q
?Vkf_d#
0/jaQ!.%5
#f]pA<2b
F P>?4U
D/N0dE
U~Y`q^
Y7-7{{
R1H~&,"
,LB>MA
danx~``jccaer`djcaida
@Ws2_32.dll
@UAQXMDFO[LMKLWB\T
@C_IRBSMEQFHJO]GH
@mew`qew`i
@D~\zgeaAtgnt
@mqogrlek
@F\NFH
@5:#16(;/;,("*.?>#",/5'$
@&?)25.%.17!(=/&??&
@#'43-&%.+/<;%.
@+2+,4(>#*3:7)8 ?"#?'@IAFMDVBAVXDZGXZJVVRZOXQK\T@R]XLvca```mfdy`osng|k`k~xaax`iaao{k`
@unable to get type of object
@variant is not an object
@variant is nil
@GetType
@RuntimeHelper
@CompiledAssembly
@Microsoft.CSharp.CSharpCodeProvider
@ using System;using System.Drawing;using System.Runtime.InteropServices;abstract class RuntimeHelper{public static IntPtr wrapIntPtr(Int64 i){return Marshal.GetIUnknownForObject((IntPtr)i);}
public static IntPtr wrapIntPtr(Int32 i){return Marshal.GetIUnknownForObject((IntPtr)i);}
public static IntPtr wrapAny(Object o){return Marshal.GetIUnknownForObject(o);}
public static T Cast<T>(Object o){return(T)o;}
public static IntPtr wrapAny(Object o,Type t){try{if(t==o.GetType()){return wrapAny(o);}
else if(t.IsEnum){return wrapAny(Enum.ToObject(t,o));}
else if(t==typeof(Color)){int i=(int)Convert.ChangeType(o,typeof(int));return wrapAny(Color.FromArgb(i&0xff,(i>>8)&0xff,(i>>16)&0xff));}
else{try{return wrapAny(Convert.ChangeType(o,t));}
catch(System.InvalidCastException){return wrapAny(typeof(RuntimeHelper).GetMethod("Cast").MakeGenericMethod(t).Invoke(null,new object[]{o}));}}}
catch{return IntPtr.Zero;}}
public static IntPtr wrapAny(Object o,String type){try{return wrapAny(o,Type.GetType(type,true,true));}
catch{return IntPtr.Zero;}}}
@variant is not a type object
@unable to convert to object
@wrapAny
@openarray
@0123456789ABCDEF
@VT_BSTR_BLOB
@VT_CLSID
@VT_CF
@VT_BLOB_OBJECT
@VT_STORED_OBJECT
@VT_STREAMED_OBJECT
@VT_STORAGE
@VT_STREAM
@VT_BLOB
@VT_FILETIME
@VT_UINT_PTR
@VT_INT_PTR
@VT_RECORD
@VT_LPWSTR
@VT_LPSTR
@VT_USERDEFINED
@VT_CARRAY
@VT_SAFEARRAY
@VT_PTR
@VT_HRESULT
@VT_VOID
@VT_UINT
@VT_INT
@VT_UI8
@VT_I8
@VT_UI4
@VT_UI2
@VT_UI1
@VT_I1
@VT_DECIMAL
@VT_UNKNOWN
@VT_VARIANT
@VT_BOOL
@VT_ERROR
@VT_DISPATCH
@VT_BSTR
@VT_DATE
@VT_CY
@VT_R8
@VT_R4
@VT_I4
@VT_I2
@VT_NULL
@VT_EMPTY
@VT_ILLEGAL
@no exception to reraise
@over- or underflow
00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899
ValueError
strformat.nim
parseStandardFormatSpecifier
IOError
io.nim
raiseEIO
virtualFree failing!
VariantConversionError
com.nim
toVariant
@,pfcvc
@A8\Wg`hc}yT{
upao12\
@]+[&Hr@jsunOhurtseroihEgenc&`gojcb<&
@Q'W*D~Zxe~oi~\cx~
kfGogexs*lex*~bo*beea*lkcfon0*
@Invoke
@EntryPoint
@Z^DY^EZAT\OE\JDAB]\KBMYEH]KFO^^]IZO^VMX^CJ\\ELBHCJO[THXGWBBWBIEOZT_TJ_J]DYFFDJJAVJYOFEI@OBMEDKLBD@[_J[@[D^F]__]DOGXXAO@Z^JAH_\MKM\]XCDZH^[Y@FIO[DGE_IACXH@ILJCKHHCFGKV\AOJCXEDITLOMBE_W]]K^KIH_H^HCEKBGD@YD^TBOAHHAI\KFA[_\]\EGEAOLVMH]Z^TI^T^\VIZTH[E@_JWZVMEJV__]MF^EEDEBFKE]^XH\AWVMOVTCJH@JYD_LEZ@A[]LJ\CGMGZZ[CTCWB\]FIBCL_G[_[HFWWIJXTOKI^XLJA[I_XFCADC_FCO]F^XCAKE^OCIZ]_ABMGCBGJYATVOVHGWM\FJJCDZBCXF]ADOAYAKMWJI@WY@IYMJIMYZ@OKDJ[CVOI_FWJXWJ\V@EWL@CVEHO]LKKHTICG\EXJL_MHKM__FCWF_@
@5/?9(..(?=;+?>) #$)9546*$)/4+#(88:&;;'=5 :>(6/%$?$(6+:8 />!$+*? >*))8/!5<&>=9.%/!8/ (: 5+% /$%(!<6$!"=/( <+=<4%=5-'#<$95"698::6=>-64<$+%>=*8!>!:&-'*556'(5% 5"?)-??)&+=<: "46.)= %+ ++?/5''&!>9*??= -#(<($>= 8#< ..;<=:!>!?+$' ;<:"86;-<*9/=-66*6&-()&!>&-;8*-8'!4.+(>58?';/!&+(85#)8<&/"(?%=96#< -!6+.6%#>):.<-+5'=!'=%<;$4#(';/&;4%$)!*<?9<'*? 6.)5%488'.:5)$:4/:$8-<*
@#;3="&&3$'//?8'>"&#;89) :(+.0&23?2.-+-?"9'&( !. #0"))-%/."%%:/!9.83:2=&'3$)<$?9-!/:-'!)" 9")$-><"+/?98:0,"% 0<,+)$%2/#!-&,-(;3:2>%03=>$"=&)>8#"(2%;3..&<$+=;".; ))?-(->?(2/3,"?0,< 9)22%:?!"+!2?><=.:#,-<
@(0)/4/#.:/%(3/9"52*"!39'6:&$)98.+"807%/96$#*3&&71!(6+.1122204320!:12&333:$2+794"+-%:7:2.357.)":04#*&$4648/!3)099*'43/#(/80%)8(.0&0#%/159,/#-$#("1/:,-/$'+(*5!6,&(69+/06"&95./.#$&/6&/:9)24-4"9%5#5-""30*
@vxu`d~{bhu}}|fik`v}khhb
fguevt|faithehz`avj~|`hn{taxifn}`z`jux{oihguyyaoi``}{n
hbidbh
njevhmn`tffcmagvhm}d}ydonfkjktv}uvkif
efze~g`coz`czztg`ajyjhvi~mydt}kbv`ufkytut}izgk|}
cck{nibnvk|j|
jcmo`~bm
`g{~ik~oj|o
hg{j}ejiiaxbkk
|~mgvtj}jb|j
kjhekmxgdvkci
actu~dbdm
vomayj{mffoi}noficvkbcmvexbav{{xynzdh{ozfhicea{ixak{
jnimbbckh
g`o``tmviazz{e{evj
mdhvjmuzcyx`f|``a~n~`did
tiak|xi{ccuzdbuu|}uiokxiyvvhy
nvmcaafnkgco
zaji{x}}xtjifbg
~udhtch{ba`mtb{j`ozzu{cz~`
ZA^AVI
[^_A\A]A^]
\$0AVAYM
amsi.dll
cyvera.dA
cyvrtrapH
ntnativeH
api.dll
EpMPThe.H
EpMPApi.H
HipHandlH
ers64.dl
MfeAmsiPH
rovider.H
LogLib.dARAZM
McVarianH
tExport.H
ATPAmsiGH
uard.dllH
mfehida.H
mfehctheM
mfehcinjf
GDAMSIx6H
GDAMSIx8H
fsamsi64
spapi64.
TmUmEvt6H
tmmon64.H
TMAMSIPrH
ovider64M
WRusr.dlH
bdhkm64.H
atcuf64.H
mbae.dllH
awshook.fD
ashShellH
antimalw
are_provH
ider.dllM
ScriptCoH
ctiuser.H
cbamsi.dH
PowerreaH
son.dll
PowerBufH
crsi.dllH
crcem.dlH
InProcesH
sClient
SentinelH
ams.dll
D$[umpp
SophosAmH
siProvidH
hmpalertH
symamsi.H
ccVrTrstH
ccLib.dlH
IPSEng32
cpICC.dlM
A_AZH1
AVA^AUA]
T$aAWY
T$aAWY
ARAZV^
_]A\A]
@.4$,,
fAILED
ADDRESS
nTfLUSHiNSTRUCTIONcACHE
@Hr@jsunOhurtseroihEgenc
@JP@HH
@LvCla}i
@.;$++2'7-#,--'>%$:%8WLO@FPTOJF@X]E_CTDPSMQTPAJHBZKBF`d~r{klcv`c
`f{btuwbwjwh~lxgrzqf
@Assembly
@unable to get default domain
@unable to start CorRuntimeHost
@unable to get interface of CorRuntimeHost
@unable to start CLRRuntimeHost
@unable to get interface of CLRRuntimeHost
@specified runtime is not loadable
@unable to find a installed CLR
@unable to enumerate installed runtimes
@unable to create metahost instance
@cannot write string to file
@variant is not a type
@LoadWithPartialName
@LoadFrom
@CreateInstance
@CompileAssemblyFromSource
@IncludeDebugInformation
@CompilerOptions
@GenerateExecutable
@GenerateInMemory
@OutputAssembly
@System.CodeDom.Compiler.CompilerParameters
@System
@s|e`kc{ltgm
@iKZcAJ[BKhGBK`OCKy
@yO^lCFOcDLEXGK^CEDhSbKDNFO
@ApgcvgDkngU
@/9!?(/*08(9+/$*59.+<)2)4))8&@ZVIDSA[^IPNIAJK_TMDSYYMHDFQVITC{`jfzoii|ev}oewixemts
racjevivzx
@meub}iychm
6!f4!.&-!"+=;
MMBKDDCIJVSUODGN\VUNOGMARBTFHXOIzdxi{oqzgemascsxma
}zgk~aefpkmjm
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Mingw-w64 runtime failure:
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
(null)
Infinity
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
GCC: (MinGW-W64 x86_64-posix-seh, built by Brecht Sanders) 11.1.0
Snaffler-ruylopez.exe
AmIDebugged__76oader_1372
BaseThreadInitThunk__76oader_1592
CheckHardwareBreakPoints__76oader_1388
CreatedInterrupt__76oader_1416
CurrentAssembly__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_20
Dl_1023410185_
Dl_1023410187_
Dl_1023410194_
Dl_1023410203_
Dl_1056973869_
Dl_1342179610_
Dl_1342179648_
Dl_1342179665_
Dl_1342179856_
Dl_1342180241_
Dl_1342180301_
Dl_1342180314_
Dl_1342180339_
Dl_1342180341_
Dl_1342180365_
Dl_1342181099_
Dl_1342181994_
Dl_1342184270_
Dl_1375737445_
Dl_1375737893_
Dl_1862271172_
Dl_1862271258_
Dl_2113941776_
Dl_2113941788_
Dl_2113941820_
Dl_2113941866_
Dl_2113941903_
Dl_2113941905_
Dl_2113943166_
Dl_2113943836_
Dl_2516586222_
Dl_2566914147_
Dl_2566914180_
Dl_2566914183_
Dl_436208173_
Dl_436208175_
Dl_452985033_
Dl_452986305_
Dl_452986337_
ETWExceptionHandler__76oader_1578
GetPPEB__76oader_359
GetSyscallStub__76oader_1023
Kernel32ThreadInitThunkFunction__76oader_1590
LPWSTRtoLowercase__76oader_294
MultiByteToWideChar__76oader_777
MyCloseHandle__76oader_773
MyCreateFileA__76oader_985
MyGetComputerNameExA__76oader_1439
MyGetCurrentProcessId__76oader_764
MyGetCurrentThreadId__76oader_775
MyGetDiskFreeSpaceExA__76oader_1441
MyGetFileSize__76oader_986
MyGetModuleHandleA__76oader_770
MyGetProcAddress__76oader_768
MyGetProcessHeap__76oader_767
MyGetThreadContext__76oader_771
MyGetTickCount__76oader_779
MyGlobalMemoryStatusEx__76oader_1440
MyLdrLoadDll__76oader_429
MyOpenProcess__76oader_765
MyOpenThread__76oader_774
MyReadFile__76oader_988
MyRtlAddVectoredExceptionHandler__76oader_769
MyRtlAllocateHeap__76oader_987
MyRtlInitUnicodeString__76oader_284
MySetThreadContext__76oader_772
MySleep__76oader_778
MyVirtualAllocEx__76oader_763
MyVirtualProtect__76oader_766
MyWaitForSingleObject__76oader_776
NTIarithmeticdefect__cT9c9bHlHSpA1QTnKbHjnIkA_
NTIarrayL48OO48_safearrayboundT__nKvO7wXZAsroXb0Wz9b7Rmw_
NTIarrayL48OO494957_uint5452T__wa4ExhM0I5D0wQQmyrXAHA_
NTIarrayL48OO5149_byteT__vEOa9c5qaE9ajWxR5R4zwfQg_
NTIbcgrmproc__7kPg4iIrFVxPW1SngAif2w_
NTIbool__VaVACK0bpYmqIQ0mKcHfQQ_
NTIbyte__k3HXouOuhqAKq0dx450lXQ_
NTIcatchableerror__qrLSDoe2oBoAqNtJ9badtnA_
NTIchar__nmiMWKVIe46vacnhAFrQvw_
NTIclrerror__PUxYufCPDbgUFMvFpPtSfQ_
NTIcstring__S9agCYBinaYZnGWcjTdxclg_
NTIcy95struct49__ROud78kqeHjXYisn4jhtaw_
NTIcy__wDff8zKdhpvos9c7lBHUPSQ_
NTIdecimal95union4995struct49__79a7mES62JQ1oSE6vhkv3Mg_
NTIdecimal95union49__WGoXHqhEWH1qpRGdTEgBIQ_
NTIdecimal95union5095struct49__ndD9aJVbTCK7WcNNlcFDdRQ_
NTIdecimal95union50__AHLY3ntS3ifZxbjvCnrSYw_
NTIdecimal__7lwbcpbVYQOsyXq5rL9casA_
NTIdefect__LbeSGvgPzGzXnW9caIkJqMA_
NTIdouble__w9bl9a1ul9ctRJWiMl9cNnIMvg_
NTIecb__FqrsHsObEDvZPY9aUEY69aCA_
NTIexception__XEycrCsme5C8CVWAYEcdBQ_
NTIfloat__C875xFvYpI7aGybrDGHIaQ_
NTIhcryptprov__hMQEc0FMry7Up7EoPki79aA_
NTIidispatch__25afB9aQxduZVFt1Yu6YBbw_
NTIidispatchvtbl__m6cgE8u5k2W48yvpP0M9cVg_
NTIindexdefect__n6tGEPHKkh7E1AP9bj30WrQ_
NTIint__rR5Bzr1D5krxoo1NcNyeMA_
NTIint__xHTZrq9aYs6boc9bCba0JbpQ_
NTIioerror__iLZrPn9anoh9ad1MmO0RczFw_
NTIirecordinfo__o7mu6JCMnDiOC4fiz5Cxtw_
NTIirecordinfovtbl__Rtoycx0FzRmTEejgGZss8w_
NTIiunknown__GaCOTm3fAeQng3LkqGK9cpw_
NTIiunknownvtbl__jF4R4hWZYkQD9a5uVek42vg_
NTIkeyvaluepair__2wauyaneUIEXFZnckdv0OQ_
NTIkeyvaluepairseq__QyuekR9bgDQj4oxD9cw0z4fw_
NTIlong__sVg18TP9cLifHyygRe9cro9aA_
NTIlonglong__Aav8dQoMlCFnZRxA0IhTHQ_
NTImyntflushinstructioncache__3eV1XklMMklNDUIHDUNWNQ_
NTIobject__diB2NTuAIWY0FO9c5IUJRGg_
NTIobject__nftp7RTJl9bUkGnValdDrfQ_
NTIoverflowdefect__9cxMi1BPLc3UKt9br86bGfGQ_
NTIpointer__vr5DoT1jILTGdRlYv1OYpw_
NTIprocLself58ptridispatch_dispidmember58dispid_riid58refiid_lcid58lcid_wflags58word_pdispparams58ptrdispparams_pvarresult58ptrvariant_pexcepinfo58ptrexcepinfo_puargerr58ptruintT58hresultLOstdcallOT__HMTIlg0ibX9c3DUxZWiFDlg_
NTIprocLself58ptridispatch_itinfo58uint_lcid58lcid_pptinfo58ptrptritypeinfoT58hresultLOstdcallOT__PJRj0uRX50rVBId5wxoWWg_
NTIprocLself58ptridispatch_pctinfo58ptruintT58hresultLOstdcallOT__zezkKyqfMpGrdLXfsTMoKg_
NTIprocLself58ptridispatch_riid58refiid_rgsznames58ptrlpolestr_cnames58uint_lcid58lcid_rgdispid58ptrdispidT58hresultLOstdcallOT__vTmQiiZaMJLP5PVxP1nC6g_
NTIprocLself58ptrirecordinfoT58pvoidLOstdcallOT__tl4K6HbRH9akfWlpgfxzhhQ_
NTIprocLself58ptrirecordinfo_pbstrname58ptrbstrT58hresultLOstdcallOT__CiNRVOLKE0o4du7TW0veXA_
NTIprocLself58ptrirecordinfo_pcbsize58ptrulongT58hresultLOstdcallOT__9bUQLlQzyTYq9cn1PPQoncWg_
NTIprocLself58ptrirecordinfo_pcnames58ptrulong_rgbstrnames58ptrbstrT58hresultLOstdcallOT__3flVhatAuo2wDQ3pLqPtWw_
NTIprocLself58ptrirecordinfo_pguid58ptrguidT58hresultLOstdcallOT__szvo7XZUqIEvn15njypZnQ_
NTIprocLself58ptrirecordinfo_pptypeinfo58ptrptritypeinfoT58hresultLOstdcallOT__lgbxIcoFlqaRoc8l1J5x6A_
NTIprocLself58ptrirecordinfo_precordinfo58ptrirecordinfoT58winboolLOstdcallOT__UrLfbkx3jYpl8aTT7EGhew_
NTIprocLself58ptrirecordinfo_pvdata58pvoid_szfieldname58lpcolestr_pvarfield58ptrvariantT58hresultLOstdcallOT__a8wuVcgf8JFBdtyIlUvAGg_
NTIprocLself58ptrirecordinfo_pvdata58pvoid_szfieldname58lpcolestr_pvarfield58ptrvariant_ppvdatacarray58ptrpvoidT58hresultLOstdcallOT__V5FpwH0D4atxA49a8FYaWEg_
NTIprocLself58ptrirecordinfo_pvexisting58pvoid_pvnew58pvoidT58hresultLOstdcallOT__ZI1jobj8DmvwFnbiO6qPCg_
NTIprocLself58ptrirecordinfo_pvnew58pvoidT58hresultLOstdcallOT__79cx3unW0Z6BgDnOrcHfitQ_
NTIprocLself58ptrirecordinfo_pvsource58pvoid_ppvdest58ptrpvoidT58hresultLOstdcallOT__ymDIUs9akB6qYPB24WgIOaQ_
NTIprocLself58ptrirecordinfo_wflags58ulong_pvdata58pvoid_szfieldname58lpcolestr_pvarfield58ptrvariantT58hresultLOstdcallOT__LKhTenaIJkf6RxVNrDi3BA_
NTIprocLself58ptriunknownT58ulongLOstdcallOT__3MBg39aXrFJCcyBWUf6B79aQ_
NTIprocLself58ptriunknown_riid58refiid_ppvobject58ptrpointerT58hresultLOstdcallOT__9bWBI5aELdW2XHTbyYNjFXQ_
NTIprocLx58timeT58zonedtimeLOclosure_gcsafe_locks5848OT__7xnKxEC24cr3qZyj3gX32w_
NTIptrbstr__Pdw3MEiEie9cIIBXdRF4aZg_
NTIptrbyte__cG1a2XAxsP28AUq2q9aXnNg_
NTIptrchar__9b60r3P3z08159cCfYvgtoSg_
NTIptrcy__jXbtSxLfw0itmjWsMdWfNw_
NTIptrdecimal__tOyFM5VpR5CfoueNblK2NQ_
NTIptrdouble__dHulNBWhJTS79cd5h9cp4OHg_
NTIptrfloat__K9c5mNCKsxyPa9bhQF1Un42w_
NTIptridispatch__kYuJ1yXKaTDKM1gBNBYZMA_
NTIptridispatchvtbl__D2nH2Oqivmr8QTsU9aLjsOQ_
NTIptrirecordinfo__3WT32ZAg6wsc9ay7tyclJnQ_
NTIptrirecordinfovtbl__7VzmdWawVAQPByb1qFKRtA_
NTIptriunknown__UyU8VSOcMgg7fdJy7SxeGw_
NTIptriunknownvtbl__RE27JCE9bOJX1xy12IDcHnA_
NTIptrlong__9awHbpuyuG8AxbsaqeBLKDQ_
NTIptrlonglong__qTZjETMuYhaATb9arhin3WA_
NTIptrolechar__9arplNu1iE9bhlDxcL6A4PMw_
NTIptrptridispatch__9cAC89c2ntOozT6m3udvMQRQ_
NTIptrptriunknown__8MnBU5BrvTao0wsQ9alw3AQ_
NTIptrptrsafearray__SD30oco7TmqisM1c9brwQSg_
NTIptrsafearray__DTydpwcrqtIWM70d0MgBsw_
NTIptrshort__BjHmAJOH9agj4KRxOkanazQ_
NTIptrvariant__k5zDQ9aqJXQRCQNlOgs85Ow_
NTIqipcproc__BlBp9c2J7tRXTU9adX1vV5gQ_
NTIqpcproc__eV9b9cYSUZoo6tKaCd9b3k9bzA_
NTIquitproc__PD9b9cqhDqM6Xy1oSxwODsOQ_
NTIrefclrerror__FRS9cQbNhae5zCH8EuU1Jew_
NTIrefexception__vU9aO9cTqOMn6CBzhV8rX7Sw_
NTIrefindexdefect__RJnHOb9cQV3neNC9cDkRgMyw_
NTIrefioerror__HMIVdYjdZYWskTmTQVo5BQ_
NTIrefobject__HsJiUUcO9cHBdUCi0HwkSTA_
NTIrefobject__PNpya69bg5jOKXuhnlj83NQ_
NTIrefoverflowdefect__r8GBEWywN07B3Rat3azS4Q_
NTIrefreraisedefect__uG62cfJZ15c2siK3CKLmnQ_
NTIrefvalueerror__Ie1m0dv1ZHg72IgPRr1cDw_
NTIrefvariantconversionerror__sSrF5S0WQBiSGAvsVyZTJQ_
NTIreraisedefect__E0L0wGYS1gPD81VLstNO2g_
NTIrijndaelcontext__uzMEyYcUmtQ6HTVQxlfmCQ_
NTIrootobj__ytyiCJqK439aF9cIibuRVpAg_
NTIsafearray__DKskJgJKqdiGvU7qvx1u8A_
NTIsafearraybound__MAW7pPwMg9cUv0ZH0AE2pzQ_
NTIseqLbyteT__6H5Oh5UUvVCLiakt9aTwtUQ_
NTIseqLstacktraceentryT__uB9b75OUPRENsBAu4AnoePA_
NTIseqLstringT__sM4lkSb7zS6F7OVMvW9cffQ_
NTIseqLvariantT__3a0Lf6u9aPn9bq0V0eQ07mtw_
NTIshort__kDPg4wXyR8DDyA0MeEjIsw_
NTIstacktraceentry__oLyohQ7O2XOvGnflOss8EA_
NTIstring__77mFvmsOLKik79ci2hXkHEg_
NTIsystemrng58objecttype__X9aKjcE9bDr41cpowCIZoGpQ_
NTIsystemrng__9aWCZSregXolmau8IgbwrpA_
NTItable__MyiXBZqHlwtVNEEvYnEmjg_
NTItableref__mmbDGmie1Vw3nGJ9cRqQG7w_
NTItimezone58objecttype__F8OvqlxXyGXRSiK9c1fCDVw_
NTItimezone__9a5v4OQPlGqsA25ioN8hFYA_
NTIuint5150__JrFyJbYm9b5I4hJ9cWDqvfYA_
NTIuint5452__wMtfD88jmrPZwfzTH9c8e9cA_
NTIuncheckedarrayLutf4954charT__Tyd4y3haUOOHTj71TPIRag_
NTIvalueerror__yoNlBGx0D2tRizIdhQuENw_
NTIvariant58objecttype__FBSF3pWyJz9clqwLRXzZTsA_
NTIvariant95union4995struct4995union4995struct49__DtI9bsEAgJB3Tyh5MHrgkrw_
NTIvariant95union4995struct4995union49__DjJ9a9aNjdVJoA2NlSK7Lz7Q_
NTIvariant95union4995struct49__c8Wtv5nqLcM2jwvHc9cTY9bg_
NTIvariant95union49__Sr5LLwiwjGCKhbDlb25pAQ_
NTIvariant__UPxdF8T9b3GRPNZqBCwEDkw_
NTIvariant__VYnrN9cMJav8fTNB7Pu9bPZw_
NTIvariantconversionerror__Y4pKacDNXcA9boOh7ryibHg_
NTIvartype__M4na42GvebBMnI5wV9cYMxg_
NTIwidecstringobj__4HwedE75WPfqZSQ0Cq2OUg_
NaturalToInt32__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZwinstr_49
NimMain
NimMainInner
NimMainModule
NtAllocateVirtualMemory__76oader_817
NtClose__76oader_800
NtCreateSection__76oader_898
NtCreateThreadEx__76oader_832
NtFreeVirtualMemory__76oader_936
NtMapViewOfSection__76oader_923
NtProtectVirtualMemory__76oader_879
NtReadVirtualMemory__76oader_951
NtWriteVirtualMemory__76oader_864
Null__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_18
OpenMoreMaxPIDProcess__76oader_1509
PreMain
PreMainInner
RVAtoRawOffset__76oader_989
Rcon__OOZOOZ85sersZnicksZOnimbleZpkgsZnimcrypto4548O54O48ZnimcryptoZrijndael_6
RuntimeHelp__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_2248
SYSCALL_STUB_SIZE__76oader_793
SetupETWBreakpoints__76oader_3206
SinkVtbl__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7125
Sink_AddRef__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7024
Sink_GetIDsOfNames__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7051
Sink_GetTypeInfoCount__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7040
Sink_GetTypeInfo__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7044
Sink_Invoke__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7060
Sink_QueryInterface__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7006
Sink_Release__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_7032
StartProcess__76oader_1782
TM__BSPEmXPrl3fGKf4UbEDdiQ_70.lto_priv.0
TM__JGc9b9bh2D3nTdUR7TGyq8aA_3.lto_priv.0
TM__N8CdbwZ9cwqgx8RJFxCYHdg_43.lto_priv.0
TM__N8CdbwZ9cwqgx8RJFxCYHdg_45.lto_priv.0
TM__N8CdbwZ9cwqgx8RJFxCYHdg_49.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_27.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_33.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_37.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_50.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_51.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_52.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_53.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_54.lto_priv.0
TM__W39aKMRuy9awEMbV9aZGrkN8Q_56.lto_priv.0
UNICODEminusgtstring___OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZwinstr_191
UTF8minusgtwstring___OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZwinstr_120
WSAID_ACCEPTEX__windowsZwinlean_713
WSAID_CONNECTEX__windowsZwinlean_712
WSAID_GETACCEPTEXSOCKADDRS__windowsZwinlean_714
X5BX5D___76oader_1002
X5BX5D___76oader_1064
X5BX5D___76oader_1987
X5BX5D___76oader_3186
X5BX5D___76oader_3329
X5BX5D___76oader_54
X5BX5Deq___76oader_1568
X5BX5Deq___76oader_67
X5BX5Deq___OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_2031
X5BX5Deq___OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_2130
accelerated_sleep__76oader_1469
addChar
addChar.constprop.0
addChunkToMatrix__system_3999
addHeapLink__system_4092
addInt__stdZprivateZdigitsutils_164
addInt__stdZprivateZdigitsutils_167
addZCT__system_5314
addZCT__system_5314.constprop.0
add__system_2308
add__system_4198
add__system_4909.lto_priv.0
adjustStackPointer__76oader_1548
alignString__pureZstrformat_18
align__system_1624
alloc0Impl__system_1745
alloc0__system_4829
alloc0__system_4829.constprop.0
allocAvlNode__system_4067
allocImpl__system_1743
alloc__system_4825
amISpawned__76oader_1733
amp___76oader_1939
asgnRef.constprop.0
asgnRef.lto_priv.0.lto_priv.0
at___76oader_141
at___OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_487
atmLoaderdotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatsnimcryptominus0dot6dot0atsnimcryptoatsrijndaeldotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatsnimcryptominus0dot6dot0atsnimcryptoatssysranddotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatsnimcryptominus0dot6dot0atsnimcryptoatssysranddotnim_Init000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsclrdotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsclrdotnim_Init000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatscomdotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatscomdotnim_Init000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsincatsmscoreedotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsincatsobjbasedotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsincatstlhelp32dotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsincatswinbasedotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsincatswindefdotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatsincatswinuserdotnim_DatInit000
atmdotdotatsdotdotatsUsersatsnicksatsdotnimbleatspkgsatswinimminus3dot9dot2atswinimatswinstrdotnim_DatInit000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatspureatsosdotnim_DatInit000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatspureatsosdotnim_Init000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatspureatstimesdotnim_DatInit000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatspureatstimesdotnim_Init000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatssystematsiodotnim_DatInit000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatssystematsiodotnim_Init000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatssystematswidestrsdotnim_DatInit000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatssystemdotnim_DatInit000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatssystemdotnim_Init000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatswindowsatswinleandotnim_DatInit000
atmdotdotatsnimminus1dot6dot8_x64atsnimminus1dot6dot8atslibatswindowsatswinleandotnim_Init000
billionIncrements__76oader_1494
burnMem__OOZOOZ85sersZnicksZOnimbleZpkgsZnimcrypto4548O54O48ZnimcryptoZutils_282
c_setjmp__systemZansi95c_42
calcHard__76oader_160
calcSomething__76oader_343
calcTheThings__76oader_88
cellSetEnlarge__system_4999
cellSetGet__system_4973
cellSetPut__system_5012
cellSetRawInsert__system_4982
cellsetReset__system_5583
cfgspawn__76oader_211
checkIfInteger__76oader_1730
clrError__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_339
clrStart__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_1381
clrStart__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_1381.constprop.0.isra.0
cmdCount
cmdLine
collectCTBody__system_5890
collectCT__system_5344
collectCT__system_5344.part.0.constprop.0
collectCycles__system_5810
collectZCT__system_5808
comTrace__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZcom_76
compile__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_1943
compile__OOZOOZ85sersZnicksZOnimbleZpkgsZwinim4551O57O50ZwinimZclr_1943.constprop.0
containsOrIncl__system_5112
contains__pureZstrutils_1631
contains__system_4274
contains__system_5034
copyString
copyString.part.0
copyStringRC1
cstrToNimstr
currException__system_2568
dataPointer__system_5935
dealloc
Antivirus Signature
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (moderate confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Cylance Clean
Zillya Clean
Sangfor Trojan.Win64.Agent.Vr45
CrowdStrike win/malicious_confidence_70% (D)
Alibaba Clean
K7GW Trojan ( 005b58991 )
K7AntiVirus Trojan ( 005b58991 )
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/Agent.DUU
APEX Malicious
Avast Win64:MalwareX-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky Clean
BitDefender Trojan.GenericKD.74441578
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.74441578
Tencent Win32.Trojan.Agen.Edhl
Sophos Mal/Generic-S
F-Secure Heuristic.HEUR/AGEN.1329661
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD ti!3621C6A555E7
Trapmine Clean
CTX exe.trojan.agen
Emsisoft Trojan.GenericKD.74441578 (B)
Ikarus Trojan.Win64.Crypt
FireEye Trojan.GenericKD.74441578
Jiangmin Clean
Webroot Clean
Varist Clean
Avira HEUR/AGEN.1329661
Fortinet W64/Agent.DUU!tr
Antiy-AVL Trojan/Win64.Kryptik
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Trojan.Generic.D46FE377
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Wacatac.B!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!1AF918875C67
TACHYON Clean
VBA32 Clean
Malwarebytes Crypt.Trojan.MSIL.DDS
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Kryptik!8.8 (TFE:5:hzKgty1bItV)
Yandex Clean
SentinelOne Static AI - Malicious PE
MaxSecure Clean
GData MSIL.Riskware.Hacktool.07U0AL
AVG Win64:MalwareX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan:Win/Injector.DYD
No IRMA results available.