Static | ZeroBOX

PE Compile Time

2024-10-31 07:56:50

PE Imphash

1e9630f6a4cba2c0fa7296e4fb274cd5

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00086bbc 0x00086c00 6.52008756893
.rdata 0x00088000 0x000c2c9c 0x000c2e00 5.54014426209
.data 0x0014b000 0x0000390c 0x00001e00 3.64093171513
.pdata 0x0014f000 0x00005a48 0x00005c00 5.78801987481
.rsrc 0x00155000 0x000001e0 0x00000200 4.71229819329
.reloc 0x00156000 0x00001e98 0x00002000 6.40366277707

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x00155060 0x0000017d LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document text

Imports

Library KERNEL32.dll:
0x140088000 VirtualFree
0x140088008 VirtualAlloc
0x140088010 GetModuleHandleW
0x140088018 LoadLibraryA
0x140088020 ReadFile
0x140088028 WriteFile
0x140088030 CreateFileW
0x140088038 UnmapViewOfFile
0x140088040 CloseHandle
0x140088048 CreateFileMappingW
0x140088050 MapViewOfFile
0x140088058 GetProcAddress
0x140088060 GetCurrentProcess
0x140088068 FlushInstructionCache
0x140088070 VirtualQuery
0x140088080 WriteProcessMemory
0x140088088 GetModuleHandleA
0x140088090 MultiByteToWideChar
0x140088098 LoadLibraryW
0x1400880a8 WideCharToMultiByte
0x1400880b0 GetTickCount
0x1400880b8 FreeEnvironmentStringsW
0x1400880c0 GetEnvironmentStringsW
0x1400880c8 LCMapStringEx
0x1400880d0 DecodePointer
0x1400880e8 AcquireSRWLockExclusive
0x1400880f0 ReleaseSRWLockExclusive
0x140088100 GetLastError
0x140088108 SetLastError
0x140088110 RtlCaptureContext
0x140088118 RtlLookupFunctionEntry
0x140088120 RtlVirtualUnwind
0x140088128 IsDebuggerPresent
0x140088130 UnhandledExceptionFilter
0x140088140 TerminateProcess
0x140088150 GetCommandLineA
0x140088158 GetCommandLineW
0x140088160 EnterCriticalSection
0x140088168 LeaveCriticalSection
0x140088170 DeleteCriticalSection
0x140088178 GetSystemTimeAsFileTime
0x140088180 HeapAlloc
0x140088188 HeapFree
0x140088190 GetCurrentThreadId
0x140088198 GetStdHandle
0x1400881a0 GetFileType
0x1400881a8 GetStartupInfoW
0x1400881b0 RaiseException
0x1400881b8 GetFileSizeEx
0x1400881c0 SetFilePointerEx
0x1400881c8 FlushFileBuffers
0x1400881d0 GetConsoleOutputCP
0x1400881d8 GetConsoleMode
0x1400881e0 FlsAlloc
0x1400881e8 FlsGetValue
0x1400881f0 FlsSetValue
0x1400881f8 FlsFree
0x140088208 FreeLibrary
0x140088210 LoadLibraryExW
0x140088218 LCMapStringW
0x140088220 GetLocaleInfoW
0x140088228 IsValidLocale
0x140088230 GetUserDefaultLCID
0x140088238 EnumSystemLocalesW
0x140088240 ReadConsoleW
0x140088248 HeapReAlloc
0x140088250 HeapSize
0x140088258 GetProcessHeap
0x140088260 IsValidCodePage
0x140088268 GetACP
0x140088270 GetOEMCP
0x140088278 GetCPInfo
0x140088280 GetStringTypeW
0x140088288 ExitProcess
0x140088290 GetModuleHandleExW
0x140088298 SetStdHandle
0x1400882a0 GetModuleFileNameW
0x1400882a8 WriteConsoleW
0x1400882b0 QueryPerformanceCounter
0x1400882b8 GetCurrentProcessId
0x1400882c0 InitializeSListHead
0x1400882c8 RtlUnwindEx
0x1400882d0 RtlUnwind
0x1400882d8 RtlPcToFileHeader
0x1400882e0 EncodePointer
0x1400882e8 TlsAlloc
0x1400882f0 TlsGetValue
0x1400882f8 TlsSetValue
0x140088300 TlsFree
0x140088308 VirtualProtect
0x140088310 VirtualQueryEx
0x140088318 ReadProcessMemory
0x140088320 GetSystemInfo
0x140088330 LocalFree
0x140088338 FindClose
0x140088340 FindFirstFileExW
0x140088348 FindNextFileW
Library ntdll.dll:
0x1400883a0 NtUnmapViewOfSection
0x1400883a8 RtlFreeHeap
0x1400883b0 NtContinue
0x1400883b8 NtCreateSection
0x1400883c0 RtlAllocateHeap
0x1400883c8 NtGetContextThread
0x1400883d0 RtlCompareUnicodeString
0x1400883d8 NtQueryObject
0x1400883e0 NtOpenSection
0x1400883e8 RtlCreateUnicodeString
0x1400883f0 NtMapViewOfSection
0x1400883f8 NtRaiseHardError
0x140088400 RtlAdjustPrivilege
0x140088408 NtClose
Library OLEAUT32.dll:
0x140088358 SafeArrayDestroy
0x140088360 SysFreeString
0x140088368 SafeArrayPutElement
0x140088370 SafeArrayCreate
0x140088378 SafeArrayCreateVector
0x140088380 SysAllocString
Library mscoree.dll:
0x140088390 CLRCreateInstance

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
WAVAWH
fffffff
WAVAWH
fffffff
u[L95q
cvtsi2sdH
cvtsi2ssH
UATAUAVAWH
A_A^A]A\]
L$ SUVWH
@SUVWAVH
`A^_^][
t$ WAVAWH
0A_A^_
VAVAWH
A_A^^
WAVAWH
A_A^_
WAVAWH
@SUVWAVH
A^_^][
A^_^][
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
C@H90t$H
A_A^A]A\_^[]
@SUVWAWH
A__^][
A__^][
UVWATAUAVAWH
C@H98t$H
A_A^A]A\_^]
|$ AVH
WATAUAVAWH
A_A^A]A\_
|$ AVH
WATAUAVAWH
A_A^A]A\_
@SUVAVH
(A^^][
(A^^][
UVWATAUAVAWH
C@H98t$H
)D$0M+
A_A^A]A\_^]
@SVATAUAWH
0A_A]A\^[
@SUVATH
8A\^][
t$ UWAVH
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
@SVWATAUAVAWH
PA_A^A]A\_^[
WAVAWH
\$ WAVAWH
A_A^_
ubf9;u]HcC<=
ubf9;u]HcC<=
uRf9;uMHcC<=
uMf9;uHHcC<=
ucf9;u^HcC<=
uif93udHcC<=
uCHcC<=
|$ AVH
u?f9u:HcG<=
t$ WATAUAVAWH
uCHcG<=
D$`fE;_
0A_A^A]A\_
WATAUAVAWH
u>HcF<=
0A_A^A]A\_
@SUAVH
uDHcC<=
@SUAVAWH
A_A^][
@SUVWATAUAVAWH
9D$hu$
A_A^A]A\_^][
@SUWAWH
@8<$tFH
8A__][
SUVWATAUAVAWH
8A_A^A]A\_^][
UAVAWH
9BSJBu
@USVWATAVAWH
A_A^A\_^[]
|$ UAVAWH
D$pexpa
D$tnd 3
D$x2-by
D$|te k
UATAUAVAWH
A_A^A]A\]
l$ VWAVH
@SUVWAVH
L90u"H
0A^_^][
t$ WAVAWH
A_A^_
@SAVAWH
0A_A^[
|$ t}I
0A_A^[
|$ UAVAWH
00000000H
\$ VWAVH
@SVAVH
@SVAVAWH
(A_A^^[
@SVWAVH
XA^_^[
@VWAWH
WAVAWH
0A_A^_
@VWAWH
WAVAWH
0A_A^_
UVWAVAWH
A_A^_^]
t$ WATAUAVAWH
A_A^A]A\_
t$ WAVAWH
@A_A^_
SUVATH
HA\^][
@SUVWATAUAVAWH
T$0fff
;t$XsGI
D+t$ E
xA_A^A]A\_^][
@SUVAVAWH
00000000H
PA_A^^][
@VWATAVAWH
@A_A^A\_^
@UVWATAVAWH
8A_A^A\_^]
@WATAWH
0A_A\_
@USVWAVH
A^_^[]
E0xD+
\$ UVWAVAWH
A_A^_^]
< tB<+t!<-uYA
@USVWATAVAWH
t-<st)A
A_A^A\_^[]
t1<ct-A
UVWATAUAVAWH
A_A^A]A\_^]
UVWAVAWH
A_A^_^]
UVWATAUAVAWH
A_A^A]A\_^]
@SVWATAVH
0A^A\_^[
@SUVWAUAVAWH
T$HL;T$Pt
A_A^A]_^][
@USVWATAVAWH
<BtX<XtK<bt><ot
A_A^A\_^[]
UVWAVAWH
pA_A^_^]
@USVWATAVAWH
t0<ct,A
<BtW<XtJ<bt=<ot
A_A^A\_^[]
UVWAVAWH
pA_A^_^]
@USVWATAVAWH
t0<ct,A
<BtX<XtK<bt><ot
A_A^A\_^[]
@USVWATAVAWH
t0<ct,A
<BtW<XtJ<bt=<ot
A_A^A\_^[]
UVWAVAWH
pA_A^_^]
@USVWATAVAWH
t0<ct,A
<BtX<XtK<bt><ot
A_A^A\_^[]
\$ VWATAVAWH
0A_A^A\_^
|$ AVH
\$ UVWATAWH
@A_A\_^]
l$ VWATAVAWH
A_A^A\_^
t$ WATAUAVAWH
0A_A^A]A\_
l$ WATAUAVAWH
@A_A^A]A\_
\$ UVWATAWH
@A_A\_^]
\$ UVWATAWH
@A_A\_^]
\$ UVWATAWH
@A_A\_^]
L$ SWH
|$ ATAVAWH
A_A^A\H
|$ AVH
WAVAWH
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
0A_A^A]A\_
S(HcS0
S(HcS0
S(HcS0
D$@H;F
kL@8o(u
kL@8o(u
<htl<jt\<lt4<tt$<wt
|$ UATAUAVAWH
A_A^A]A\]
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
0A_A^A]A\_
UVWATAUAVAWH
rsf;\$d
r_f;\$l
rKf;\$t
r7f;\$|
f;\$4r
f;\$<r
rvf;\$d
rbf;\$l
rNf;\$t
r:f;\$|
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
D$0@8{
p*W4H
p*W4H
L$ VWAVH
t$ WATAUAVAWH
0A_A^A]A\_
D$(H!L$ E3
;D$hsL
L$ UVWATAUAVAWH
0A_A^A]A\_^]
T$ D){
USVWATAUAVAWH
XA_A^A]A\_^[]
WAVAWH
@A_A^_
WAUAVH
@A^A]_
WAVAWH
A_A^_
WAVAWH
A_A^_
L$ UVWATAUAVAWH
A8m(u=I
D$xH;C
0A_A^A]A\_^]
8\$Pt@
t;8_2t
8\$PtB
t=8_2t
WATAUAVAWH
@8q2u~H
A_A^A]A\_
UVWATAUAVAWH
D8i2uwH
0A_A^A]A\_^]
tED8k2u7H
@HcC(H
UVWATAUAVAWH
0A_A^A]A\_^]
t$ WATAUAVAWH
t$HA_A^A]A\_
UVWATAUAVAWH
L$<;L$P
L$4+L$8
D+d$HD
A_A^A]A\_^]
SUVWATAVAWH
A_A^A\_^][
@8|$Pu
L$0H;K
@8(u&I
WAVAWH
fE98t'
0A_A^_
@USVWATAUAVAWH
A_A^A]A\_^[]
9Cu,fD9y
fB9<{u
fD9,pu
t$`fD9+t$I
x ATAVAWH
A_A^A\
L$ SUVWH
WATAUAVAWH
0A_A^A]A\_
\$ UVWATAUAVAWH
fD9,Au
A_A^A]A\_^]
\$ UVWATAUAVAWH
f9t$bu
A_A^A]A\_^]
H9L$Ht?H
UVWATAUAVAWH
fE9,Fu
A_A^A]A\_^]
|$ AVH
@UATAUAVAWH
A_A^A]A\]
t$ WATAUAVAWH
gfffffffH
A_A^A]A\_
{ AUAVAWH
0A_A^A]
t$xt*3
WAVAWH
A_A^_
x ATAVAWH
A_A^A\
L$ VWAVH
fD94H}aD
fD9t$b
u1!D$0H
UVWATAUAVAWH
PA_A^A]A\_^]
D$0H9D$8
UVWATAUAVAWH
fB9<I}1L
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
VATAUAVAWH
0A_A^A]A\^
@USVWATAUAVAWH
H!D$ H
xA_A^A]A\_^[]
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAW
A_A^A]A\_^]
\$ UVWATAUAVAWH
s2fE9)I
fE9)fA
D$pfA;
0fD9l$pu
fD9l$pt
0A_A^A]A\_^]
l$ VWATAVAWH
0A_A^A\_^
AUAVAWH
A_A^A]
UVWATAUAVAWH
@8t$HtzL
`A_A^A]A\_^]
VATAUAVAWH
0A_A^A]A\^
l$ VWATAVAWH
L$&8\$&t,8Y
A_A^A\_^
s WATAUAVAWH
D$h9t$P
A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
@UATAUAVAWH
e0A_A^A]A\]
fB9<Hu
fB9<@u
fB9<Bu
fB9,Nu
fB9,Nu
fB9,Nu
fA9,Au
fB94Ou
t}f91txH
x ATAVAWH
A_A^A\
x ATAVAWH
fD9 tMH
fG9$Ou
0A_A^A\
fB9<Hu
fB9<@u
fB9<Bu
fD94Au
fD94iu
tSf91tNH
t^;\$0tQ
WAVAWH
A_A^_
@USVWATAVAWH
tyfD9 tsH
tQfD9 tK
fD9$Hu
@A_A^A\_^[]
u3HcH<H
t$ WATAUAVAWH
D!|$xA
A_A^A]A\_
@USVWATAVAWH
A_A^A\_^[]
WATAUAVAWH
0A_A^A]A\_
WAVAWH
A_A^_
@UAVAWH
e0A_A^]
@SUVWATAVAWH
A_A^A\_^][
WAVAWH
D8|$`t
A_A^_
WAVAWH
@A_A^_
x ATAVAWH
@A_A^A\
p0R^G'
WAVAWH
A_A^_
WAVAWH
A_A^_
ffffff
fffffff
@SUVWATAVAWH
@A_A^A\_^][
T$`fA;
ATAVAWH
A_A^A\
USVWAVH
A^_^[]
WATAVH
0A^A\_
E80t"A
fD94Q}
u/HcH<H
WATAUAVAWH
A_A^A]A\_
D8L$0u`A
VWATAVAWH
A_A^A\_^
WATAUAVAWH
A_A^A]A\_
H;xXu5
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
AUAVAWH
u4I9}(
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
`A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
@USVWATAUAVAWH
d$dD;d$l
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
A_A^_
WAVAWH
@SVWATAUAVAWH
L!|$(L!
D$0HcH
pA_A^A]A\_^[
SVWATAUAWH
L!d$(L!d$@D
D$HL9gXt
A_A]A\_^[
B(I9A(u
SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
D$ I;R
D$ I9P
L$ SUVWH
WATAUAVAWH
A_A^A]A\_
t$ WATAUAVAWH
D)ctA+
A_A^A]A\_
SUVWATAUAVAWH
T$@A+|$
\$8E+\$
A;U8v#A
tJE;u$tDH
uNE9}4uB
hA_A^A]A\_^][
tWH98uR
@<L9A0
WAVAWH
K49K<u
A_A^_
@SWAVAWH
l$XD+`
(A_A^_[
(A_A^_[
(A_A^_[
VWATAUAWH
A_A]A\_^
WATAUAVAWH
A9.u$9iLvE
A9.u E
0A_A^A]A\_
SUVWATAUAVAWH
T$"fA;
T$0fA;
HA_A^A]A\_^][
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
@UAVAWH
A_A^]
@UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
@SWATH
|$ ATAVAWH
f90uKH
A_A^A\
WATAUAVAWH
A_A^A]A\_
@USWAUAVAWH
A_A^A]_[]
H3+H3s
H3S I3
SUVWAVH
0A^_^][
0A^_^][
0A^_^][
SUVWATAUAVAWH
hA_A^A]A\_^][
UVWATAUAVAWH
;D$(s8D
`A_A^A]A\_^]
SUVWATAVAWH
0A_A^A\_^][
)T$ fD
SUVWATAUAVAWH
hA_A^A]A\_^][
)D$ fD
SUVWATAUAVAWH
hA_A^A]A\_^][
SVWATAUAVAWH
A_A^A]A\_^[
SVWATAUAVAWH
\$PfA;
;D$(s:D
pA_A^A]A\_^[
~(o%k#
SUVWAVH
A^_^][
USVWATAUAVAWH
A_A^A]A\_^[]
USVWAVAWH
A_A^_^[]
|$ AVH
|$ AVH
@SUVWATH
@A\_^][
|$ ATAVAWH
t$0t.ff
@A_A^A\
WAVAWH
A_A^_
SVWATAUAVAWH
0A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
VWATAVAWH
t$(@8s
d$pA8w
A_A^A\_^
@SWAWH
SVWATAUAVAWH
@A_A^A]A\_^[
@A_A^A]A\_^[
SVWATAUAVAWH
@A_A^A]A\_^[
@A_A^A]A\_^[
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
SVWAVAWH
A_A^_^[
WAVAWH
A_A^_
\$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
WAVAWH
R8H+V0t>H
^PH+^HH
A_A^_
|$ AVH
|$ AVH
VWATAVAWH
A_A^A\_^
C8H;C0
D$`HcH
D$`HcH
D$`HcH
C8H+C0H;
S8H+S0H
C8H+C0H
UVWATAUAVAWH
G8H+G0H
G8H+G0
A_A^A]A\_^]
WAVAWH
A_A^_
UWATAVAWH
A_A^A\_]
\$ UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
D8} uPD
A_A^A]A\_^[]
T$PH;T$Xt)
T$PH;T$Xt)
T$PH;T$Xt
T$PH;T$Xt
D$PH;D$Xt
AHH;APt-
|$ UATAUAVAWH
\$PH;\$XtR
H;\$Xu
D$XH9D$P
@8L+@0L
L$pL+L$hH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
\$ UVWATAUAVAWH
A8H+A0f
D$hH9D$`
\$`H;\$htP
H;\$hu
\$xH;]
D$hH;D$pt
A_A^A]A\_^]
\$ UVWAVAWH
A8H+A0H
A_A^_^]
x UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
@SUVWATAVAWH
PA_A^A\_^][
UVWATAUAVAWH
A_A^A]A\_^]
FHI;FPu
FHI;FPu
H;\$pH
B\$pH;L$xH
GL$xH%
L$8uZH;
UVWAVAWH
@A_A^_^]
SVWATAUAVAWH
A_A^A]A\_^[
WATAUAVAWH
@A_A^A]A\_
UUUUUUU
UVWATAUAVAWH
@A_A^A]A\_^]
@USVWATAUAVAWH
C8H+C0H
H9T$hu
A_A^A]A\_^[]
@USVWAWH
A__^[]
VWATAVAWH
~8H+~0tgH
F8H+F0L
A_A^A\_^
\$ WAVAWH
KHH;SXt
|$HH;SXt
A_A^_
SVWATAUAVAWH
@A_A^A]A\_^[
\$ UVWATAUAVAWH
A_A^A]A\_^]
SUVATAUH
A]A\^][
UVWATAUAVAWH
C8H+C0H
A_A^A]A\_^]
(H;l$@
UVWATAUAVAWH
\.PK+\.HH
L+D$@H
L$pH+L$hI
A_A^A]A\_^]
|$ UAVAWH
UVWATAUAVAWH
A_A^A]A\_^]
A8H+A0f
SVWATAUAVAWH
0A_A^A]A\_^[
WATAUAVAWH
0A_A^A]A\_
fffffff
UVWATAUAVAWH
0A_A^A]A\_^]
VWATAVAWH
W`I;Wht#L
@A_A^A\_^
A0;A s
A2f;A4v
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
rn-sae
rd-sae
ru-sae
rz-sae
u|=evexu
=locku
=longu
=repet"=repzt
xacquireL;
xreleaseL;
|$ ATAVAWH
@A_A^A\
USVWATAUAVAWH
A_A^A]A\_^[]
|$ ATAUAVAWI
|$@A_A^A]A\
byteu*H
VWATAVAWH
\$ H+\$(I
0A_A^A\_^
t$ WATAWH
t|H9_0uvD8g
A_A\_
@SWAWH
l$ VWAWH
@SATAUH
0A]A\[
l$XuhL
@ .tex
0A]A\[
SVWATAUAVH
HA^A]A\_^[
HA^A]A\_^[
HA^A]A\_^[
HA^A]A\_^[
HA^A]A\_^[
n`A+D$
HA^A]A\_^[
SVWAUH
8A]_^[
8A]_^[
8A]_^[
8A]_^[
$L;EXv#
@VWATH
USVWATAUAVAWH
A_A^A]A\_^[]
+T$XA+
H+T$XH
HcL$pI+
D$XLc`
WAVAWH
D$ <L
UUUUUUUUL;
@SUWATAUH
A]A\_][
WATAUAVAWH
A_A^A]A\_
t$ WATAWH
A_A\_
|$ ATAVAWH
A_A^A\
@SATAVH
0A^A\[
l$ WAVAWH
A_A^_
A_A^_
A_A^_
t$ WATAUAVAWH
A_A^A]A\_
l$ WATAWH
@A_A\_
@A_A\_
@SVATH
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
@A_A^A]A\_^]
s!H;l$HL
C|$HH9L$PL
ND;NHu
nPD9nTu
L)A()VHD;vPH
FDH)G H
@VATAUAVH
(A^A]A\^
(A^A]A\^
(A^A]A\^
(A^A]A\^
)OH;wPH
|$ AVH
D$@<L
WAVAWH
D$@<L
WATAUAVAWH
D$@<L
A_A^A]A\_
UWAUAVAWH
D$0<L
A_A^A]_]
UVWATAUAVAWH
D$ <L
A_A^A]A\_^]
SVWAUH
t*@80t@8p
HA]_^[
|$ UATAUAVAWH
A_A^A]A\]
|$ AVH
D$H<s
UATAUAVAWH
@A_A^A]A\]
|$ UATAUAVAWH
b@D#b03
+Mgu%L
A_A^A]A\]
\$ UWATAUAWH
A_A]A\_]
WATAUAVAWH
@A_A^A]A\_
D$ t%=
WATAUAVAWH
@A_A^A]A\_
D$(<s
UVWATAUAVAWH
D$0H#E
A_A^A]A\_^]
@VWATH
D8#t9A
|$ ATAVAWH
A_A^A\
WATAUAVAWH
0A_A^A]A\_
L$ UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
@A_A^A]A\_^]
SUVWATAUAVAWH
A_A^A]A\_^][
l$ VWAVH
sH9.tgH
9D$(}LH
sH9.t&H
@UAVAWH
UVWAVAWH
0A_A^_^]
WAVAWH
fA9,@u
fA9,vu
0A_A^_
fffffff
fffffff
fffffff
fffffff
ffffff
fffffff
fffffff
fffffff
fffffff
ffffff
t$ UWAUAVAWH
A_A^A]_]
UVWATAUAVAWH
H;\$8u
H;\$8u
fE9$Iu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H9>u+A
WATAVH
0A^A\_
@USVWATAUAVAWH
xA_A^A]A\_^[]
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
UVWATAUAVAWH
@A_A^A]A\_^]
LcA<E3
SVWAVH
8A^_^[
WAVAWH
UVWATAUAVAWH
@8r tRA
0A_A^A]A\_^]
|$ AVE2
UVWATAUAVAWH
F+8F(u
0A_A^A]A\_^]
|$ AVH
WAVAWH
A_A^_
WATAUAVAWH
u.HcC0
0A_A^A]A\_
tC<8t!<:u`
l$ WAUAVAW
l$@A_A^A]_
|$ AVH
|$ AVH
t$ AWH
WATAUAVAWH
H;C0wD
@A_A^A]A\_
tf;B`u
|$ AVH
H;C v
|$huVH
WAVAWH
A_A^_
H;C0ww
H;C0wKH
H;C0w+
t$(D8`
|$hu0H
WAVAWH
A_A^_
H;C0wA
@SVAVH
S(D8;tKH
@SUVWATAVH
hA^A\_^][
|$ AVH
UVWATAUAVAWH
A_A^A]A\_^]
u;9B4u6
fffffff
fffffff
fffffff
ffffff
vKfffff
SUVWAVH
(null)
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
NAN(SNAN)
NAN(IND)
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
_hypot
_nextafter
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetDateFormatEx
GetTempPath2W
GetLocaleInfoEx
GetSystemTimePreciseAsFileTime
GetTimeFormatEx
GetUserDefaultLocaleName
InitializeCriticalSectionEx
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
CorExitProcess
1#QNAN
1#SNAN
UUUUUU
UUUUUU
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
?UUUUUU
?7zQ6$
bad allocation
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
short
UNKNOWN
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
deflate 1.3.1 Copyright 1995-2024 Jean-loup Gailly and Mark Adler
incorrect header check
unknown compression method
invalid window size
unknown header flags set
header crc mismatch
invalid block type
invalid stored block lengths
too many length or distance symbols
invalid code lengths set
invalid bit length repeat
invalid code -- missing end-of-block
invalid literal/lengths set
invalid distances set
invalid literal/length code
invalid distance code
invalid distance too far back
incorrect data check
incorrect length check
Qkkbal
zlib-ng 2.2.2
need dictionary
stream end
file error
stream error
data error
insufficient memory
buffer error
incompatible version
inflate 1.3.1 Copyright 1995-2024 Mark Adler
Qkkbal
[1!qv
y>X,7 l
&Dq3hZE
MuH *u
@o=''o
}mM1dS
IEin$s8
!Z%F3lKpb
O$@?k~
gMnxg{?
@?>=<;:9876543210/.-,+*)('&%$#"! 
Qkkbal
[1!qv
y>X,7 l
&Dq3hZE
MuH *u
@o=''o
}mM1dS
IEin$s8
!Z%F3lKpb
O$@?k~
gMnxg{?
Qkkbal
[1!qv
y>X,7 l
&Dq3hZE
MuH *u
@o=''o
}mM1dS
IEin$s8
!Z%F3lKpb
O$@?k~
gMnxg{?
cmovle
cmovnb
cmovnbe
cmovnl
cmovnle
cmovno
cmovnp
cmovns
cmovnz
cmpxchg
cvtsi2sd
cvtsi2ss
extractps
pextrb
pextrd
pextrq
setnbe
setnle
dest holder
VALLOC2
INPLACE
CODE_CAVE
INPLACE_SHORT
RECOMMENDED
Failed to generate in-place trampoline:
VirtualAlloc2 failed to find a region near function
VirtualAlloc2 failed allocate within requested range
No code caves found near function
None of the allowed hooking schemes have succeeded
Invalid state: hook instructions are empty
m_fnAddress:
Original function:
Disassembler unable to decode any valid instructions
Prologue jmp resolution failed
Chosen detour scheme:
Function too small to hook safely!
Function needs a prologue jmp table but it's too small to insert one
Prologue to overwrite:
m_trampoline:
m_trampolineSz:
Trampoline:
Trampoline Jmp Tbl:
Hook instructions:
Hook size:
Prologue offset:
Failed to detect pointer size:
Unexpected size of immediate:
Unexpected register:
Unexpected scratch register:
No translation support for such instruction
push rax
mov rax,
xchg [rsp], rax
lea rsp, [rsp - 0x80]
Translation:
AsmTK error:
AsmJit error:
Translation address:
Instructions needing entry:
Instructions needing relocation:
Instructions needing translation:
Trampoline address:
Jmp To Prol:
invalid map<K, T> key
c2 ?? ??
c3 0f 1f 44 00 00
c3 0f 1f 84 00 00 00 00 00
c3 66 0f 1f 84 00 00 00 00 00
c3 66 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc 66 0f 1f 44 00 00
c3 66 66 66 66 66 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
c3 cc cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? 0f 1f 44 00 00
c2 ?? ?? 0f 1f 84 00 00 00 00 00
c2 ?? ?? 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc 66 0f 1f 44 00 00
c2 ?? ?? 66 66 66 66 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
c2 ?? ?? cc cc cc cc cc cc cc 66 66 0f 1f 84 00 00 00 00 00
kernelbase.dll
VirtualAlloc2
Failed to initialize zydis decoder
Failed to initialize zydis formatter
invalid unordered_map<K, T> key
invalid vector subscript
unordered_map/set too long
invalid hash bucket count
_Couldn't decompile instructions at followed jmp
Prologue jmp resolution hit max depth, prologue too deep
setting: Do NOT follow CALL on fnAddress
First assembly instruction is CALL
Branching instruction without displacement encountered
Detour unhook failed: no hook present
hook size must not be larger than nop prologue offset
,,,,,,,,,*****,,,,,,,,,,,,,,,,,,*)))'))))))))(%)
))))))&
 !"#))))$)
 !"#)))),++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Ok
OutOfMemory
InvalidArgument
InvalidState
InvalidArch
NotInitialized
AlreadyInitialized
FeatureNotEnabled
TooManyHandles
TooLarge
NoCodeGenerated
InvalidDirective
InvalidLabel
TooManyLabels
LabelAlreadyBound
LabelAlreadyDefined
LabelNameTooLong
InvalidLabelName
InvalidParentLabel
InvalidSection
TooManySections
InvalidSectionName
TooManyRelocations
InvalidRelocEntry
RelocOffsetOutOfRange
InvalidAssignment
InvalidInstruction
InvalidRegType
InvalidRegGroup
InvalidPhysId
InvalidVirtId
InvalidElementIndex
InvalidPrefixCombination
InvalidLockPrefix
InvalidXAcquirePrefix
InvalidXReleasePrefix
InvalidRepPrefix
InvalidRexPrefix
InvalidExtraReg
InvalidKMaskUse
InvalidKZeroUse
InvalidBroadcast
InvalidEROrSAE
InvalidAddress
InvalidAddressIndex
InvalidAddressScale
InvalidAddress64Bit
InvalidAddress64BitZeroExtension
InvalidDisplacement
InvalidSegment
InvalidImmediate
InvalidOperandSize
AmbiguousOperandSize
OperandSizeMismatch
InvalidOption
OptionAlreadyDefined
InvalidTypeId
InvalidUseOfGpbHi
InvalidUseOfGpq
InvalidUseOfF80
NotConsecutiveRegs
ConsecutiveRegsAllocation
IllegalVirtReg
TooManyVirtRegs
NoMorePhysRegs
OverlappedRegs
OverlappingStackRegWithRegArg
ExpressionLabelNotBound
ExpressionOverflow
FailedToOpenAnonymousMemory
<Unknown>
.addrtab
&.6>de
align %u
0123456789ABCDEF
#$%%&''(())**++,,,--..//000111122223334444555566666667777777888888889999999999999:::::::::::::::;;;;;;;;;;;;;;<<<<<<<====>>>>???
AuthenticAMDINTEL
GenuineIntelVIA
CentaurHaulsVIA
UNKNOWN
.section %s {#%u}
888884
222224
./012345
>???:<
@ABBC/
$C4BBDEEFGGHH;;C;;GGI04JK
RRRRRRRRRR
dedefg
mnjmnmn
oo!!jM
ss/tssssssss
GGvwCCCCxGy
||||U~
)*+,)*)*+,+,
,-./0-./0
123)*+,)*+,4
OOPOPPPOOQR
YYYYYYYYYYYYYYYYYYYYYYYYYYYYY
uvwvwuvwvw
xyxyzz{|zzz}~
zzzzzzzzz
zzzzzzzzz
xyzzz}~
EFggggggtt
tttttt
gggggggg
:V, :V0
Iap Ia
")eK#)e@")eN#)e/%)u&
1eD#1e
Cdp JT
^de$hdd$h
qd! qd_
>ee!>ea"
Dee!DUM!DUJ5
!R/C!RF#
%QQN#p
U-#pVq
8rD#8r
8rF#8bH38bK38b@B8bN3
RSp RS
qacBqagBq
AkUW!kUW13OY
9bp 9R
0tr{26
~rp ~r
Qv`Qv`$Qv`
Pv`)Qv`.Qv`3Qv`%4v`(4v`
v`p vp&
uU%4uU(4
Q8qQ8q$Q8q
P8q)Q8q.Q8q3Q8q
8qp 8q
+tp +t
b0Ba*`H
4@Hqe@Hq=PHqBPHqGPHqLPHqp
2t, 2t0 2d}
2d942d<42d?42d
Btp Id
Id64Id
]te$gdc4gdm4
pt\ ptw$p
pt! pt_
)2 b/C bF# B
F#7rH37rK37r@B7rN3
QcYCQc]CQcaCQceCQc
Qcp Qc
0iS+Pnc0@iS=PiSGPiS
iSp ,G
vgf2p8affineinvqbvaeskeygenassistvbroadcastf32x464x264x4i32x2i32x4i32x8i64x2i64x4vpbroadcastmb2w2d128i128vcvtne2ps2bf1vfmaddsub132ph213pd213ph213ps231pd231ph231psvfmsubadd132vpmultishiftvscatterpf0dqpdqps1dpd1dps1qpd1qpsvcvtneps2bf1vextracvextractfvgatherpf0vp2intersectsdvfnmadd132213sd213sh213ss231sd231sh231ssvfnmsub132vinservinsertfvpshufbitqprefetchntwt1saveprevsssha256rndtileloaddtilereleavaesdeclvaesenclvcompressvcvttpd2uqqvcvttph2uvcvttps2uvcvttsd2uvcvttsh2uvcvttss2uvfixupimmvfmadd132vfmsub132vmaskmovdqvpcompressvpconflictvphminposuvpmadd52hluqvpscatterqdvpunpckhqlqdqvrndscaleclflushopcmpxchg16t0t2msg1msg2tilestorev4fnmaddssvcvtpd2uvcvtph2psudqvcvtps2phvcvtsd2uvcvtsh2uvcvtss2uvcvtudq2vcvtuqq2vcvtusi2vfcmaddcvfpclassvgetmanmulbvp4dpwssvpclmuvpcmpestrvpcmpistrvperm2fvpermil2vpgathervpmacssdqvpmadcsswubswvpmaskmovpternlogbwwdlbwldqlwdvrsqrt1428pd28ps28sd28ssvshufvshuffvzeroupxsaveopt8bfxrstorldtilecfmovdir64pvalidarmpadjurmpupdaserialisha1nexsha1rndssttilecftdpbf16v4fmadvaddsubvblendmvpdvcvtdq2uwvcvtqq2vcv
!"#$%&'()*+,#%')')"#$%&'()*+"#$%&'()*+"#$%&'()*+"#$%&'()*+"#$%&'()*+
@@@@@@@@@@
<InvalidLabel:%u>
.repeat %zu
52+;>/7A
gpb.hi
byte ptr
word ptr
dword ptr
fword ptr
qword ptr
tbyte ptr
xmmword ptr
ymmword ptr
zmmword ptr
<Reg-%u>?%u
<None>
UNORD_Q
NEQ_UQ
NLT_US
NLE_US
NGE_US
NGT_US
FALSE_OQ
NEQ_OQ
TRUE_UQ
UNORD_S
NEQ_US
NLT_UQ
NLE_UQ
NGE_UQ
NGT_UQ
FALSE_OS
NEQ_OS
TRUE_US
DENORMAL
-FINITE
+INF_IE
-VE_IE
-INF_IE
SNAN_IE
ONE_IE
ONE_ZE
ZERO_IE
ZERO_ZE
[1, 2)
[.5, 2)
[.5, 1)
[.75, 1.5)
NO_SIGN
QNAN_IF_SIGN
BLK1[4]
BLK1[5]
BLK2[4]
BLK2[5]
BLK2[6]
BLK2[7]
BLK1[0]
BLK1[1]
BLK2[0]
BLK2[1]
BLK2[2]
BLK2[3]
SIGN_A
SIGN_B
SIGN_0
SIGN_1
MIN_ABS
MAX_ABS
LEN=%d
INEXACT
{vex}
{vex3}
{evex}
{modrm}
{modmr}
xacquire
xrelease
repnz
[InstId=#%u]
{1to%u}
, {%s-sae}
, {sae}
QPm QP
XPm XP
_Pm _P
fPm fP
`m `
'`m '`
o`m o`
u`m u`
{`m {`
Qp fFI
8`508`>0
autia1716autibldsmaxalhldsminalldumaxallduminalsha256su0sha512su1sm3partwsqrshrunldaddalldclralldeoralldsetallbstsmaxstsminstumaxstuminfrint32z64x64zh2sqdmlalsl2sqdmulsqrdmlaulhn2sqshruuqrshrspcrc32cstaddstclrsteorstsetxpaclbfcvtbfmlaltfcvtxfjcvtzfmaxnmfminnmfrsqrraddrsubsha1sm3tt12a2bsm4ekeysqxtuuqshrursqrsetfrev8
>8B 8R ?8
>?8B ?8R (B
> (N (^ 8
> 8N 8^
bad function call
success
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
unknown error
433333333333333
Haz[~i
!q^}M)R
=@53-;
l%mDX=XG^
,$,TPu
* Bj*y
}?G4g*
II]':j
31:viN<
e,<O7tC
$19;@)2
H#@Ow&
Z`>X5,
$;6m89
#;6m89
#;6m89
#;6m89
#;6m89
#;6m89
#;6m89P
a9>7QL
qo`Q49
po`Q49
po`Q49
#_.!x
po`Q49
^gmjpP
po`Q49
^gmjpP
po`Q49
^gmjpP
po`Q49
^gmjpP
^gmjpP
L&-\jA
^gmjpP
EwZhN"
^gmjp*
DwZhN"
^gm$x,
DwZhN"
DwZhN"
DwZhN"
DwZhN"
DwZhN"
V?AgPhU
&+y|O{
/_![GJ
/_![GJ
/_![GJ
/_![GJ
/_![GJ
/_![GJ
[NVJfx'
R5qhi5
1N6@,
j+"Mw^
v<L/{Q
j+"Mw^r
,c>qI3
j+"Mw^r
j+"Mw^r
{Xb4z:%
j+"Mw^r
j+"Mw^r
j+"Mw^r
~yjS6/
~yjS6/1
~yjS6/1
~yjS6/1
~yjS6/1
~yjS6/1
~yjS6/1
BXwxZH+
f>):oB"
dSp^z0hS 6
dSp^z0h
P>GkD
dSp^z0h
dSp^z0h
\%Fd"U
dSp^z0h
\%Fd"U
dSp^z0h
\%Fd"U
Sp^z0h
\%Fd"U
\%Fd"U
\%Fd"U
\%Fd"U
|1T8xBO`
P?tb(z
4*REmv
(ytR>u
}m9hR'>M.
|1T8xBO
P?tb(z-U
}m9hR'
|1T8xBO
P?tb(z-U
}m9hR'
|1T8xBO
P?tb(z-U
rH6v6u
}m9hR'
|1T8xBO
P?tb(z-U
z3\Gc0
}m9hR'
|1T8xBO
P?tb(z-U
}m9hR'
1T8xBO
?tb(z-U
}m9hR'
b(z-U
3']t2+1
x`.+eh%
'wnGz$
x`.+WV+
x`.+WV
1w-!O?
?ffffff
?fffff
IMbP?i
MbP?}F
9Y>)F$
s\ax}?
tC7Ddw
%k/V(
xg^Jp5|
{zel#|67
~?33A
GetCurrentPackageId
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
UUUUUU
UUUUUU
"e?<<<<<<l?
Il?333333c?
.i?0@I
d?000000`?
)|B?d!
L?UUUUUUU?
&?PPPPPPP?
0X8b?~
%GoU?*
(T?j?Y
Zod(^?
D W?{W
qS>g?h3
c?FA@s}
UUUUUU
UUUUUU
A03>A|
Q5rHg,>
Hk=>:
j>>A?1
.>PJ;I:qE>
:>t6k'
])6M>&
CWD>~3
_oD>Kg
N>O=I9
F>qUxv
/2GG>!B
zY;>u:m
P>q_Y~
0><[cZUg^>
Y>kX>M
H[><y5
[*ncd>0
S>$hkDh$h>[2
UA>N0Wl
x87control
x87status
x87tag
eflags
rflags
bndcfg
bndstatus
invalid
addsubpd
addsubps
aesdec
aesdec128kl
aesdec256kl
aesdeclast
aesdecwide128kl
aesdecwide256kl
aesenc
aesenc128kl
aesenc256kl
aesenclast
aesencwide128kl
aesencwide256kl
aesimc
aeskeygenassist
andnpd
andnps
blcfill
blcmsk
blendpd
blendps
blendvpd
blendvps
blsfill
blsmsk
bndldx
bndmov
bndstx
cldemote
clevict0
clevict1
clflush
clflushopt
clrssbsy
clzero
cmovbe
cmpxchg16b
cmpxchg8b
comisd
comiss
cvtdq2pd
cvtdq2ps
cvtpd2dq
cvtpd2pi
cvtpd2ps
cvtpi2pd
cvtpi2ps
cvtps2dq
cvtps2pd
cvtps2pi
cvtsd2si
cvtsd2ss
cvtss2sd
cvtss2si
cvttpd2dq
cvttpd2pi
cvttps2dq
cvttps2pi
cvttsd2si
cvttss2si
encodekey128
encodekey256
endbr32
endbr64
enqcmd
enqcmds
fcmovb
fcmovbe
fcmove
fcmovnb
fcmovnbe
fcmovne
fcmovnu
fcmovu
fcomip
fcompp
fdecstp
fdisi8087_nop
fdivrp
feni8087_nop
ffreep
ficomp
fidivr
fincstp
fisttp
fisubr
fldenv
fldl2e
fldl2t
fldlg2
fldln2
fnclex
fninit
fnsave
fnstcw
fnstenv
fnstsw
fpatan
fprem1
frndint
frstor
fscale
fsetpm287_nop
fsincos
fstpnce
fsubrp
fucomi
fucomip
fucomp
fucompp
fxrstor
fxrstor64
fxsave
fxsave64
fxtract
fyl2xp1
getsec
gf2p8affineinvqb
gf2p8affineqb
gf2p8mulb
haddpd
haddps
hreset
hsubpd
hsubps
incsspd
incsspq
insertps
insertq
invept
invlpg
invlpga
invlpgb
invpcid
invvpid
kandnb
kandnd
kandnq
kandnr
kandnw
kconcath
kconcatl
kextract
kmerge2l1h
kmerge2l1l
kortest
kortestb
kortestd
kortestq
kortestw
kshiftlb
kshiftld
kshiftlq
kshiftlw
kshiftrb
kshiftrd
kshiftrq
kshiftrw
ktestb
ktestd
ktestq
ktestw
kunpckbw
kunpckdq
kunpckwd
kxnorb
kxnord
kxnorq
kxnorw
ldmxcsr
ldtilecfg
lfence
llwpcb
loadiwkey
loopne
lwpins
lwpval
maskmovdqu
maskmovq
mcommit
mfence
monitor
monitorx
montmul
movapd
movaps
movddup
movdir64b
movdiri
movdq2q
movdqa
movdqu
movhlps
movhpd
movhps
movlhps
movlpd
movlps
movmskpd
movmskps
movntdq
movntdqa
movnti
movntpd
movntps
movntq
movntsd
movntss
movq2dq
movshdup
movsldup
movsxd
movupd
movups
mpsadbw
mwaitx
packssdw
packsswb
packusdw
packuswb
paddsb
paddsw
paddusb
paddusw
palignr
pavgusb
pblendvb
pblendw
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
Elastic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Gen:Variant.Lazy.614752
Cylance Unsafe
Zillya Clean
CrowdStrike win/malicious_confidence_70% (D)
Alibaba Trojan:Win64/GenKryptik.44c78615
K7GW Clean
K7AntiVirus Clean
huorong Clean
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/GenKryptik.HCVV
APEX Malicious
Avast MalwareX-gen [Trj]
Cynet Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Gen:Variant.Lazy.614752
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Gen:Variant.Lazy.614752
Tencent Clean
Sophos Generic Reputation PUA (PUA)
F-Secure Clean
DrWeb Clean
VIPRE Gen:Variant.Lazy.614752
TrendMicro Clean
McAfeeD ti!2BE1A242289C
Trapmine Clean
CTX exe.trojan.lazy
Emsisoft Gen:Variant.Lazy.614752 (B)
Ikarus Win32.Outbreak
FireEye Gen:Variant.Lazy.614752
Jiangmin Clean
Webroot Clean
Varist Clean
Avira Clean
Fortinet Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Trojan.Win64.Kryptik.sa
Xcitium Clean
Arcabit Trojan.Lazy.D96160
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Program:Win32/Wacapew.C!ml
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!A917B1D8182A
TACHYON Clean
VBA32 Clean
Malwarebytes Generic.Malware/Suspicious
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Kryptik@AI.83 (RDML:TCk/Ad+mIpcnhQMi7+ft1A)
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.300983.susgen
GData Gen:Variant.Lazy.614752
AVG MalwareX-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Trojan[stealer]:Win/Wacapew.C9nj
No IRMA results available.