Static | ZeroBOX

PE Compile Time

2025-02-13 23:40:16

PDB Path

C:\AdminC6\Workspace\687321993\Project\Debug\Project.pdb

PE Imphash

adfb5165841ec7e1fff9b4b9d3b4ceb0

PEiD Signatures

Microsoft Visual C++ V8.0 (Debug)

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.textbss 0x00001000 0x0015e17a 0x00000000 0.0
.text 0x00160000 0x002c8d35 0x002c8e00 5.68549471947
.rdata 0x00429000 0x000264ac 0x00026600 3.39407268353
.data 0x00450000 0x00004250 0x00002c00 4.85916528337
.idata 0x00455000 0x00001976 0x00001a00 4.76946574405
.reloc 0x00457000 0x0001f1be 0x0001f200 6.3281398997
.rsrc 0x00477000 0x0001bd34 0x0001be00 4.16819314364

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x0048ee20 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_MENU 0x0048f6c4 0x000001d8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MENU 0x0048f6c4 0x000001d8 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_DIALOG 0x00492328 0x0000055c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ACCELERATOR 0x004928fc 0x00000038 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ACCELERATOR 0x004928fc 0x00000038 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_ACCELERATOR 0x004928fc 0x00000038 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00492934 0x000000bc LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x004929f0 0x00000344 LANG_NEUTRAL SUBLANG_NEUTRAL data

Imports

Library ADVAPI32.dll:
0x855008 QueryServiceConfigW
0x855014 QueryServiceStatus
0x85501c QueryTraceW
0x855020 QueryAllTracesW
Library KERNEL32.dll:
0x85509c FindClose
0x8550a0 FindFirstFileExW
0x8550a4 FindNextFileW
0x8550a8 FlushFileBuffers
0x8550ac GetFullPathNameW
0x8550b0 QueryDosDeviceW
0x8550b4 ReadFile
0x8550b8 SetEndOfFile
0x8550bc SetFileAttributesW
0x8550c0 WriteFile
0x8550c4 RaiseException
0x8550c8 GetLastError
0x8550cc SetErrorMode
0x8550d8 GetProcessHeap
0x8550e0 SetEvent
0x8550e4 Sleep
0x8550e8 QueryDepthSList
0x8550ec QueueUserAPC
0x8550f0 GetCurrentProcess
0x8550f4 GetCurrentProcessId
0x8550f8 GetCurrentThreadId
0x8550fc SetComputerNameExW
0x855100 SetComputerNameW
0x855104 VirtualProtect
0x855108 QueueUserWorkItem
0x85510c CreateTimerQueue
0x855128 GetModuleFileNameW
0x85512c GetModuleHandleA
0x855130 GetModuleHandleW
0x855144 SetDllDirectoryW
0x855148 CreateFileW
0x855154 SetConsoleMode
0x855158 ReadConsoleInputW
0x85515c ReadConsoleW
0x855168 SetConsoleCP
0x85516c SetConsoleOutputCP
0x855180 ReadConsoleOutputW
0x85518c K32QueryWorkingSet
0x855194 DecodePointer
0x855198 GetConsoleMode
0x85519c GetConsoleOutputCP
0x8551a0 SetFilePointerEx
0x8551a4 GetFileSizeEx
0x8551ac HeapSize
0x8551b0 HeapReAlloc
0x8551b4 LCMapStringW
0x8551b8 CompareStringW
0x8551bc GetTimeFormatW
0x8551c0 GetDateFormatW
0x8551c4 GetTempPathW
0x8551c8 EnumSystemLocalesW
0x8551cc CloseHandle
0x8551d0 GetUserDefaultLCID
0x8551d4 IsValidLocale
0x8551d8 GetLocaleInfoW
0x8551dc GetStringTypeW
0x8551e0 SetStdHandle
0x8551ec GetCommandLineA
0x8551f0 GetCPInfo
0x8551f4 GetOEMCP
0x8551f8 GetACP
0x8551fc IsValidCodePage
0x855200 GetCurrentThread
0x855204 WriteConsoleW
0x855208 OutputDebugStringW
0x85520c GetFileType
0x855210 GetSystemInfo
0x855214 HeapValidate
0x855218 ExitProcess
0x85522c GetCommandLineW
0x855230 GetStdHandle
0x855234 CopyFileW
0x855238 GetModuleHandleExW
0x85523c EncodePointer
0x855248 TerminateProcess
0x855254 InitializeSListHead
0x855258 IsDebuggerPresent
0x85525c GetStartupInfoW
0x855260 MultiByteToWideChar
0x855264 WideCharToMultiByte
0x855268 HeapAlloc
0x85526c HeapFree
0x855270 VirtualQuery
0x855274 FreeLibrary
0x855278 GetProcAddress
0x855284 LoadLibraryExW
0x855288 RtlUnwind
0x85528c SetLastError
0x8552a0 TlsAlloc
0x8552a4 TlsGetValue
0x8552a8 TlsSetValue
0x8552ac TlsFree
Library USER32.dll:
0x855344 AppendMenuW
0x855348 wsprintfW
0x85534c LoadIconW
0x855350 LoadCursorW
0x855354 SetWindowLongW
0x855358 FillRect
0x85535c ClientToScreen
0x855360 GetCursorPos
0x855364 SetCursor
0x855368 SetCursorPos
0x85536c MessageBoxW
0x855370 SetWindowTextW
0x855374 GetUpdateRect
0x855378 ReleaseDC
0x85537c DrawTextW
0x855380 SetMenuItemInfoW
0x855384 TrackPopupMenu
0x855388 GetActiveWindow
0x85538c DestroyMenu
0x855390 CreatePopupMenu
0x855394 CharUpperW
0x855398 SendDlgItemMessageW
0x85539c IsDlgButtonChecked
0x8553a0 CheckDlgButton
0x8553a4 GetDlgItemTextW
0x8553a8 SetDlgItemTextW
0x8553ac SetDlgItemInt
0x8553b0 GetDlgItem
0x8553b4 IsWindow
0x8553b8 RegisterClassW
0x8553bc SetDoubleClickTime
0x8553c0 SendMessageW
Library GDI32.dll:
0x855054 SetEnhMetaFileBits
0x855058 SetDIBitsToDevice
0x85505c SetDIBits
0x855060 SetDCPenColor
0x855064 SetDCBrushColor
0x855068 SetDIBColorTable
Library WINSPOOL.DRV:
0x855408 None

!This program cannot be run in DOS mode.
yRich5!
.textbssz
`.rdata
@.data
.idata
@.reloc
B.rsrc
E -"zc0
iE WW|
E -"$Jc
E -{%*R
WuyWWh
URPQQhp
UQPXY]Y[
P +Q4+U
P +Q4+U
P +Q4+U
P +Q4+U
P +Q4+U
P +Q4+U
J +H4+M
J +H4+M
J +H4+M
J +H4+M
J +H4+M
J +H4+M
;H4tr3
;H4tr3
;H4tr3
;H4tr3
;H4tr3
;H4tr3
PPPPPPPP
Stack pointer corruption
Cast to smaller type causing loss of data
Stack memory corruption
Local variable used before initialization
Stack around _alloca corrupted
Stack around the variable '
' was corrupted.
The variable '
' is being used without being initialized.
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
A cast to a smaller data type has caused a loss of data. If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example:
char c = (i & 0xFF);
Changing the code in this way will not affect the quality of the resulting optimized code.
Stack memory was corrupted
A local variable was used before it was initialized
Stack memory around _alloca was corrupted
Unknown Runtime Check Error
Unknown Filename
Unknown Module Name
Run-Time Check Failure #%d - %s
Stack corrupted near unknown variable
Stack area around _alloca memory reserved by this function is corrupted
Data: <
Allocation number within this function:
Size:
Address: 0x
Stack area around _alloca memory reserved by this function is corrupted
%s%s%p%s%zd%s%d%s%s%s%s%s
A variable is being used without being initialized.
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
PDBOpenValidate5
D:\a\_work\1\s\src\vctools\crt\vcruntime\src\eh\std_type_info.cpp
D:\a\_work\1\s\src\vctools\crt\vcruntime\src\internal\per_thread_data.cpp
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__swift_3
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
operator<=>
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`anonymous namespace'
template-parameter-
`template-parameter-
generic-type-
`generic-type-
`non-type-template-parameter
`template-type-parameter-
`generic-class-parameter-
`generic-method-parameter-
nullptr
lambda
`template-parameter
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static
virtual
private:
protected:
public:
[thunk]:
extern "C"
short
unsigned
volatile
volatile
std::nullptr_t
std::nullptr_t
<ellipsis>
,<ellipsis>
noexcept
double
__int8
__int16
__int32
__int64
__int128
<unknown>
char8_t
char16_t
char32_t
wchar_t
decltype(auto)
__w64
UNKNOWN
signed
volatile
`unknown ecsu'
union
struct
class
coclass
cointerface
const
cli::array<
cli::pin_ptr<
{flat}
Cannot access value of empty optional
D:\a\_work\1\s\binaries\x86ret\inc\optional
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
Unknown exception
bad exception
<program name unknown>
minkernel\crts\ucrt\src\appcrt\misc\dbgrpt.cpp
minkernel\crts\ucrt\src\appcrt\startup\argv_parsing.cpp
minkernel\crts\ucrt\src\desktopcrt\env\environment_initialization.cpp
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
minkernel\crts\ucrt\src\appcrt\locale\wsetlocale.cpp
minkernel\crts\ucrt\src\appcrt\startup\onexit.cpp
(null)
minkernel\crts\ucrt\inc\corecrt_internal_stdio_output.h
Normal
Ignore
Client
Client hook allocation failure at file %hs line %d.
Client hook allocation failure.
Error: memory allocation: bad memory block type.
Client hook re-allocation failure at file %hs line %d.
Client hook re-allocation failure.
Error: memory allocation: bad memory block type.
Memory allocated at %hs(%d).
The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()
Error: possible heap corruption at or near 0x%p
The Block at 0x%p was allocated by aligned routines, use _aligned_free()
Client hook free failure.
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
DAMAGED
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
%hs located at 0x%p is %Iu bytes long.
Memory allocated at %hs(%d).
%hs located at 0x%p is %Iu bytes long.
Cycle in block list detected while processing block located at 0x%p.
Heap validation failed.
Bad memory block found at 0x%p.
Memory allocated at %hs(%d).
Bad memory block found at 0x%p.
Data: <%s> %s
Dumping objects ->
#File Error#(%d) :
%hs(%d) :
{%ld}
client block at 0x%p, subtype %x, %Iu bytes long.
normal block at 0x%p, %Iu bytes long.
crt block at 0x%p, subtype %x, %Iu bytes long.
Object dump complete.
Detected memory leaks!
%Id bytes in %Id %hs Blocks.
Largest number used: %Id bytes.
Total allocations: %Id bytes.
The block at 0x%p was not allocated by _aligned routines, use realloc()
Damage before 0x%p which was allocated by aligned routine
The block at 0x%p was not allocated by _aligned routines, use free()
Second Chance Assertion Failed: File
<file unknown>
, Line
_CrtDbgReport: String too long or IO Error
Assertion failed:
Assertion failed!
%s(%d) : %s
_CrtDbgReport: String too long or Invalid characters in String
minkernel\crts\ucrt\src\appcrt\misc\signal.cpp
minkernel\crts\ucrt\src\appcrt\internal\per_thread_data.cpp
minkernel\crts\ucrt\inc\corecrt_internal_win32_buffer.h
minkernel\crts\ucrt\src\appcrt\startup\argv_wildcards.cpp
minkernel\crts\ucrt\src\appcrt\mbstring\mbctype.cpp
minkernel\crts\ucrt\src\desktopcrt\env\get_environment_from_os.cpp
minkernel\crts\ucrt\src\desktopcrt\env\setenv.cpp
minkernel\crts\ucrt\src\appcrt\lowio\osfinfo.cpp
minkernel\crts\ucrt\src\appcrt\locale\initctype.cpp
minkernel\crts\ucrt\src\appcrt\locale\initmon.cpp
minkernel\crts\ucrt\src\appcrt\locale\initnum.cpp
minkernel\crts\ucrt\src\appcrt\locale\inittime.cpp
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
minkernel\crts\ucrt\src\appcrt\locale\getstringtypea.cpp
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
GetActiveWindow
GetDateFormatEx
GetTempPath2W
GetEnabledXStateFeatures
GetLastActivePopup
GetLocaleInfoEx
GetProcessWindowStation
GetSystemTimePreciseAsFileTime
GetTimeFormatEx
GetUserDefaultLocaleName
GetUserObjectInformationW
GetXStateFeaturesMask
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
LocateXStateFeature
MessageBoxA
MessageBoxW
RoInitialize
RoUninitialize
AppPolicyGetProcessTerminationMethod
AppPolicyGetThreadInitializationType
AppPolicyGetShowDeveloperDiagnostic
AppPolicyGetWindowingModel
SetThreadStackGuarantee
SystemFunction036
minkernel\crts\ucrt\src\appcrt\stdio\_sftbuf.cpp
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
minkernel\crts\ucrt\src\appcrt\stdio\_file.cpp
minkernel\crts\ucrt\src\appcrt\locale\lcmapstringa.cpp
minkernel\crts\ucrt\src\appcrt\locale\getlocaleinfoa.cpp
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
minkernel\crts\ucrt\src\appcrt\locale\comparestringa.cpp
minkernel\crts\ucrt\src\appcrt\stdio\_getbuf.cpp
minkernel\crts\ucrt\src\appcrt\lowio\read.cpp
minkernel\crts\ucrt\src\appcrt\stdio\stream.cpp
?5Wg4p
%S#[k=
"B <1=
_hypot
_nextafter
C:\AdminC6\Workspace\687321993\Project\Debug\Project.pdb
+9).<;
(.JEc\N
<U/A@}
HE#Z&]
+]*.<P?
+5*.<P?
<{HM3Z
(.JE7Z
-.<P?~4
(.HM#R
(.JE7Z
)HU#P!
+y!.<P?B0
+5!.<P?
(.JEkZ
".<P?>1
(.HM+X
(.HM+R
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVDNameNode@@
.?AVcharNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVDNameStatusNode@@
.?AVpairNode@@
.?AVtype_info@@
QueryUsersOnEncryptedFile
QueryRecoveryAgentsOnEncryptedFile
QueryServiceConfigW
QueryServiceConfig2W
QueryServiceLockStatusW
QueryServiceStatus
QueryServiceStatusEx
QueryTraceW
QueryAllTracesW
ADVAPI32.dll
GetStdHandle
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFullPathNameW
QueryDosDeviceW
ReadFile
SetEndOfFile
SetFileAttributesW
WriteFile
RaiseException
GetLastError
SetErrorMode
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessHeap
SetCriticalSectionSpinCount
SetEvent
QueryDepthSList
QueueUserAPC
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
SetComputerNameExW
SetComputerNameW
VirtualProtect
QueueUserWorkItem
CreateTimerQueue
SetEventWhenCallbackReturns
WaitForThreadpoolWorkCallbacks
WaitForThreadpoolTimerCallbacks
WaitForThreadpoolWaitCallbacks
WaitForThreadpoolIoCallbacks
QueryInformationJobObject
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
QueryThreadCycleTime
QueryProcessCycleTime
QueryIdleProcessorCycleTime
QueryFullProcessImageNameW
SetDllDirectoryW
CopyFileW
SetDefaultCommConfigW
SetDynamicTimeZoneInformation
SetConsoleMode
ReadConsoleInputW
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleActiveScreenBuffer
SetConsoleCP
SetConsoleOutputCP
SetConsoleCursorInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterW
ReadConsoleOutputAttribute
ReadConsoleOutputW
SetCurrentConsoleFontEx
SetConsoleHistoryInfo
K32QueryWorkingSet
K32QueryWorkingSetEx
KERNEL32.dll
wsprintfW
SendMessageW
SetDoubleClickTime
RegisterClassW
IsWindow
GetDlgItem
SetDlgItemInt
SetDlgItemTextW
GetDlgItemTextW
CheckDlgButton
IsDlgButtonChecked
SendDlgItemMessageW
CharUpperW
GetActiveWindow
CreatePopupMenu
DestroyMenu
AppendMenuW
TrackPopupMenu
SetMenuItemInfoW
DrawTextW
ReleaseDC
GetUpdateRect
SetWindowTextW
MessageBoxW
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
FillRect
SetWindowLongW
LoadCursorW
LoadIconW
USER32.dll
SetDCBrushColor
SetDCPenColor
SetDIBits
SetDIBitsToDevice
SetEnhMetaFileBits
SetDIBColorTable
GDI32.dll
WINSPOOL.DRV
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
VirtualQuery
FreeLibrary
GetProcAddress
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetModuleHandleExW
ExitProcess
HeapValidate
GetSystemInfo
GetFileType
OutputDebugStringW
WriteConsoleW
GetCurrentThread
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
HeapReAlloc
HeapSize
HeapQueryInformation
GetFileSizeEx
SetFilePointerEx
GetConsoleOutputCP
GetConsoleMode
DecodePointer
CloseHandle
1.181?1H1j1r1
2 272b2
4,4O4X4a4k4v4
6[7c7q7y7
;";+;];s;
>O>X>]>e>
?<?E?_?g?q?|?
%0-050>0K0V0^0
1%1:1C1p1
2/2I2S2f2o2
:4:W:y:
<R=[=o=~=
?*?A?\?
0%00090x0
1E1J1O1W1\1d1n1v1
4 4.474
5=5\5e5p5u5
6"676?6G6
767b7j7
8#8K8U8r8
9Z9g9l9t9{9
:X:a:y:~:
;);2;N;X;];e;{;
<&<G<p<
<+=5=<=V=_=y=
=W?`?j?o?
0 0*0S0_0
061Y1f1p1x1
1'202F2W2k2p2z2
;M<U<{<
<F=O=Y=
= >T>`>n>v>|>
? ?9?B?
020C0K0U0i0
2,262>2E2N2j2r2w2
2/3B3K3S3n3
4B4L4Q4[4`4h4o4
5.666>6C6K6Z6b6
7$7F7|7
8(8F8N8g8o8v8
90989@9
:*:3:G:S:`:
:F;m;u;
<!<)<R<h<t<
X0e0y0
0+171y1
2-2i2r2w2
4>4G4o4x4
5S5a5j5q5z5
6:6B6n6
7$7,7F7O7
858E8d8m8x8
9!9e9o9v9
;#;+;~;
</<_<g<
="=)=1=R=Z=a=j=o=w=
?>?G?m?y?
0&060>0d0l0
0>1G1Y1
2)2]2g2
3M3p3x3
4(414D4M4U4\4o4{4
4)575@5G5u5
6!6V6y6
7/787A7Y7
8"8F8N8a8i8
8#9+9;9W9r9
: ;W;_;
<+<3<K<S<y<
=e=m=t=
?'?@?c?m?s?
2232;2s2{2
2=3K3a3j3
5&5P5Y5
5<6D6M6a6i6
7;7D7W7_7i7t7
8@8H8o8
::':1:l:
:4;<;A;I;
<@<O<^<f<
=!=+=p=z=
>d>s>{>
?"?L?V?^?i?
0080A0x0
1$262N2
3?3G3e3m3
44-4W4d4
5$5-595s5
6?6O6X6
6(717@7H7O7
8J8c8p8~8
9%9>9G9f9s9
1K1P1i1
2-3;3P3X3
4D4R4[4
6"6*6M6R6\6e6n6
7&7>7L7V7
8#8.8_8u8~8
8/979A9T9]9r9
;#;E;O;
<"<)<3<:<f<
=#=-=7=x=
0$090a0
11@1`1i1
2.232R2Z2y2
354=4w4
45&5V5_5
536E6^6h6
8$9=9\9{9
:=:J:Y:^:
<<(<L<
=!=W=a=
>#>+>5>=>E>h>
?2???F?U?p?
0$0,070@0d0l0s0U1Z1c1
5$6<6E6t6~6
7/7I7Y7b7
989=9D9U9_9i9
97:@:J:w:
<3=<=F=d=m=
>(>P>X>
>A?P?e?v?{?
0<2E2J2R2
3'3.3<3D3K3_3i3
4'4,4x4
6%6S6[6c6
8%858=8B8J8u8
9#9(9/9g9o9
:':6:?:F:
;&<+<2<;<_<i<
=+>E>M>R>Z>
>"?H?\?a?h?
0#0i0n0
3 3-3<3I3
494>4T4]4
5P5Z5e5o5y5~5
6 6@6[6h6
8&8.858|8
9"929@9J9U9c9p9
90:^:f:q:
<$<R<k<u<
<!=4=<=P=X=
?1?6?\?d?o?
11$191C1
1.262>2d2
313;3R3y3
5:5?5n5w5
6'606D6S6Z6
7c7m7v7
8;8@8[8c8
9S9b9g9r9w9
:$:):3:>:
;9;A;`;m;
<<H<u<
<=P=]=e=
>b?u?}?
0070~0
11191M1b1j1
3!4(4E4M4
5#5/565
6/646=6
687=7t7
7>8P8U8k8
9U:h:m:
;";*;<;D;M;o;
>8>h>p>
>F?O?z?
0@1W1`1j1r1z1
2d3n3x3
5,5B5W5u5
7 8*838p8
9#9.979B9L9
;,;4;U;
;$<)<3<^<f<
=M>U>e>m>
60=0R0Z0
0 111C1L1f1n1
2&2N2V2w2
5^5c5m5u5
9d9i9t9}9
:(:?:D:
=(=S=s=~=
=$>->4>I>N>U>^>n>
?&?1?;?[?`?e?m?
0$0)0?0]0g0l0t0
191J1R1Z1u1}1
2>2N2n2v2|2
2*333<3F3S3s3x3
545V5^5s5|5
66O6T6]6g6o6
7L738H8Q8
9!9K9T9
9+:3:=:F:
;</<7<N<
=T=e=j=
>%>U>]>d>l>
?,?6?=?[?`?q?
0-070\0i0r0
1$171@1T1v1
1\3d3k3y3
3(4-464U4
5!5;5B5
6K6X6{6
6+737;7F7W7\7
74898>8F8K8S8
9B9m9r9
:':1:6:I:h:q:
=\>a>u>
0$0b0l0
0!1)1.161=1U1]1
2'2u2}2
2(3t3y3
3(4-4=4
717M7u7}7
858=8j8r8
939G9P9d9
:":m:v:~:
;";=;E;Y;^;
<e<m<t<|<
<j=r={=
=4>=>N>[>
0!0+040G0Q0
1&1D1L1c1s1
2D3I3R3|3
3Q4Z4n4
5(585B5P5Y5c5
6#676A6p6
8I8T8^8p8
8Z9t9|9
9`:n:s:z:
:7;A;I;P;_;g;
='=2=:=W=a=s=|=
=4><>P>q>z>
>2?=?[?
#0<0[0c0
2#2(2C2K2h2
3-3L3U3^3t3
3*424`4
6!6+6C6q6~6
7%7E7M7R7Z7
-0:0?0V0^0g0
0m1r1}1
152@2i2
6/6=6i6p6z6
62797t7{7
8 8)8Y8
9O9V9{9
9::B:\:d:y:
;%;_;i;
=A=P=n=x=
>%>d>k>
? ?*?/?
0/080n0|0
0>1C1\1a1
1)2G2P2`2j2
3+454I4
4R5W5z5
6676@6W6`6
7+7T7e7v7
8,858I8U8\8e8
9::B:Y:^:i:n:
;/<4<?<H<Q<^<
>!?9?F?
10:0Q0
1X1a1u1}1
464D4I4S4X4q4v4
6:7?7c7|7
7;8^8f8
8j9w9|9
9 :%:8:E:N:\:a:j:
:-;B;K;R;f;k;u;
<2<:<n<s<
> >(>L>n>w>
2!2,242m2v2
3]3b3m3v3
304M4V4
575@5G5f5o5
56'6f6k6
7@7Q7V7`7h7
9%9c9q9|9
:I:V:`:e:
<%<u<z<
=+=4===m=~=
=>$>I>W>_>h>o>y>
>4?A?F?
020F0K0
0U1t1y1
2E2T2Y2
3X3i3r3y3
3?4D4[4`4
8P8X8x8
9$9,959
:U:p:{:
;P=U=_=d=
>#>->7>E>T>\>
>L?Q?|?
0b0k0u0
1/141?1H1g1n1
3 3%3u3
5/5D5M5W5\5c5
7G7S7]7g7
8%8.8B8t8
969@9{9
:A:J:`:|:
;%;,;I;c;j;
;&<.<8<=<_<i<
=$=)=u=}=
>>'>0>y>
#010;0r0
1,1\1w1|1
22&2G2T2Y2
2?3D3O3Y3|3
4?4F4_4h4
66(6?6M6]6
8L8^8c8
949<9G9P9Y9
7$7,7_7l7
8 8O8e8~8
;";7;y;~;
;"<B<d<
<>=K=_=d=k=
=>'>O>Y>c>h>r>w>
?1F1P1X1m1v1
4<4I4]4e4u4
5'61686
8-929X9w9|9
:0:8:I:e:u:
:%;.;L;s;
<K<U<`<e<
=(=0=@=H=]=h=q=
=,>r>w>~>
>K?T?i?
M0g0o0
121;1E1M1U1_1d1
2$2,2U2^2
32373S3\3e3y3
484g4u4z4
5.5R5[5t5|5
7?7H7u7}7
88U8Z8
9G9O9V9_9j9s9
;);1;<;F;N;V;^;
=2><>F>K>R>b>
??)?I?N?S?[?e?j?
,080D0^0
1+1D1M1]1f1q1}1
2c2k2r2{2
4+444I4f4n4x4
4 5(5-555<5D5W5_5i5n5x5
6K6P6d6
6'787H7m7|7
7*8J8R8[8b8r8
809=9w9
91:6:F:N:}:
;8<S<[<w<
?.?6?;?C?b?j?r?{?
0%0-0E0M0
1"1'101w1
1#222;2g2l2
3(323:3C3P3U3Z3d3o3y3
464e4j4q4{4
5/595R5[5
51666N6[6c6
8$8J8O8o8t8
9V9`9k9s9
:":?:G:
<"<T<Y<z<
=%=.=E=M=X=a=w=
>*>2>8>E>
?:?G?k?t?
0#0+0R0Z0a0
5#6+6q6v6
9"9'909;9@9q9{9
;E;N;x;
;c<t<y<
=k=s=~=
B0K0l0
01191[1
2M2g2l2
2!3)303<3F3
4P4]4j4
9':0:7:
:1;?;o<|<
>!>;>`>w>
?%?-?k?
0 0?0p0
1.151O1Y1b1w1
1L2U2_2
3"3I3U3z3
4/4j4t4
7C8r8{8
;8;A;K;P;e;n;
<7<N<l<
="=,=1=m=
=)>I>Q>X>
>#???j?
0D1N1X1|1
2)2B2G2L2T2
333<3[3g3t3
3J4R4x4
5 505:5Q5
5/686M6R6c6m6
6"7R7Z7{7
9`9h9p9
:":c:h:m:u:~:
;A;I;Y;
<#<(<Y<f<k<
=1=>=L=U=\=
=>G>O>X>b>j>q>
#0+0Y0b0
2&3/393A3`3h3|3
344<4f4m4
:G:Q:e:w:
:E;O;i;q;z;
<-<2<9<E<R<
?#?-?U?b?j?
353=3G3L3`3i3r3
576`6e6w6
6:7A7j7s7x7
9^9c9m9
:#:J:W:x:
;,;4;9;A;R;m;u;
=%=-=5=>=E=\=a=
>.>7>z>
0%1/1u1}1
22/272
2%3-373J3S3
44k4x4
6#6A6F6z6
7'878j8r8|8
8+939:9c9h9r9w9
:':n:{:
;;(;1;@;H;e;r;w;
=>>G>P>\>|>
[0n0u0
0$1,1~1
1 2)202}2
3;3X3|3
4 4(4G4O4f4s4
5!575?5D5N5X5
5/6U6Z6
6;7L7Q7X7e7
8#8@8I8e8u8}8
:!:(:2:<:Q:Y:}:
2?2G2L2T2f2p2
3!3(3:3u3
465@5t5|5
546<6E6X6
7/777<7D7t7
7.868@8I8V8
9 9A9a9i9
:'<1<8<A<H<X<|<
=9=C=M=g=
>>>F>p>z>
>1?;?b?k?p?x?
1/171A1L1`1
1A2I2n2x2
3 3)3P3X3f3n3
44(4E4Q4b4j4
646>6F6t6
67+757>7C7K7n7x7
7Y8f8p8
:!:*:I:U:b:
;4;<;C;S;b;
3$3F4P4l4t4
4C5X5a5
6J6c6m6|6
6M7U7_7
848>8i8q8
9P9Z9p9x9
:+:4:9:A:f:n:y:
:%;^;h;v;
;1<a<{<
=+=3=B=K=
>B>Z>d>m>
?3?=?S?\?z?
0&080@0R0_0g0{0
01'1/1X1
3.373j3r3
464T4a4i4r4
5G5P5w5
5e6m6u6
6'717;7C7K7a7
9)9Q9[9d9t9
9):1:i:r:
>!>;>E>
?&?8?}?
1%1.181f1n1x1
1J2R2c2p2
2.373U3t3}3
3"4*4<4r4~4
5*52595B5G5Q5
6%6*626;6E6M6
7J7S7[7w7
8'8H8U8h8
:#:+:S:
;.;8;Q;`;h;
<$<4<<<E<Q<b<l<|<
=%=D=x=
?#?1?9?>?F?K?U?\?e?n?
1G1v1~1
2.2B2Q2o2z2
3!3G3O3
445H5P5k5u5
6$646>6[6c6h6p6
9!9+9J9T9d9l9s9|9
:&:.:N:
<I<s<{<
=G=O=V=g=
=#>0>A>I>S>^>f>
?1?@?J?
1L1U1g1o1t1|1
5,515;5C5M5X5e5
8'898A8l8t8{8
8R9Z9_9g9
98:k:t:
;%;7;C;
=1=:=E=N=b=
>>0>5>{>
?9?A?K?P?W?}?
0 0)0T0o0
2$2,232=2
3!4*424<4
4G5L5W5w5
6$686=6t6
8?8G8O8g8o8y8~8
;#;3;F;O;\;m;v;
;&<.<E<R<
<(=1=u=
^0f0k0t0
1 1;1I1N1_1
2,2_2g2
414_4i4
5 5@5I5
556I6N6
67*777D7
8'8W8_8t8y8
9 9@9J9h9p9u9}9
:9:A:i:r:
<-<6<K<T<{<
> >.>V>^>
?4?=?Q?
2-363[3d3u3
4!4(414^4g4
4I5Q5v5
5"6*6Y6p6
8D8L8b8u8}8
9<9I9N9j9t9
<"<9<S<~<
080E0y0
1#1-151I1
393>3P3_3g3
494a4n4u4
7#7-767=7D7N7_7
8$8-8^8r8w8
99'9.9K9S9]9b9u9
:!:3:<:
;);1;M;U;d;m;
;%</<K<U<
= =B=I=T=]=
>6>H>Q>
?!?3?<?A?I?}?
141A1e1j1
1$2-2{2
3'3/3g3l3
4[4g4n4
5c5p5z5
6*626l6u6
8C8b8k8
949<9^9m9v9}9
:b;k;u;};
=3=k=r={=
=8>@>_>g>o>
?-?6?I?S?\?}?
04090>0H0W0_0r0z0
0"1*141=1J1X1b1i1|1
303Z3b3{3
44N4X4_4t4|4
55(5Q5n5v5
6*7A7p7{7
8"8*8;8
:!:):{:
;&;5;M;b;g;
<!=1=?=D=
= >K>P>Z>_>j>
0:0B0V0
001:1K1
2`2h2p2
3+3=3G3O3
5#545<5L5Y5c5k5
7?7H7S7\7f7
738>8F8V8_8f8x8}8
:':2:;:x:
;6;c;r;|;
?&?.?E?N?U?^?s?{?
00N0W0i0q0z0
2#2@2E2W2a2k2p2
2#353:3n3v3
3(464;4V4^4x4
5*535p5x5
6;6C6a6w6
767>7[7e7
8<8E8m8
9$9M9W9_9d9l9u9
:":*:H:
;;$;.;c;r;z;
;/<7<A<F<x<
=B=K=R=a=k=
0+020G0P0U0]0h0r0
1!1(191L1U1\1n1|1
3A3K3[3s3x3
3D4Q4X4
4=5H5a5i5~5
7S7a7f7{7
8!8i8q8x8
:,:9:>:c:l:
:);1;W;d;i;
;&<.<[<m<
<$=,=6=;=N=Z=d=
=Q?_?m?z?
0/0<0F0O0
1.181Q1Y1`1i1
12'2:2D2v2
203]3b3
414:4A4
777?7p7
:2:m:u:~:
;%<*<?<q<
=5=>=z=
=">X>b>i>
?5?D?I?[?
>9>s>}>
?0?O?h?m?x?}?
0.060O0
1&1e1j1
1!2)2>2G2[2
525C5K5
5;6@6f6|6
6O7X7{7
888=8F8
<#<-<2<G<
?&?.?J?y?~?
23282`2l2
22393B3O3
374>4X4]4t4|4
41565Y5^5
6(6:6B6X6a6
8'8/8S8X8
:.:7:x:
>$>.>q>v>
?%?.?;?C?
<<&<P<X<
<2=:=?=G=[=c=m=
0'0=0E0L0U0
1D1L1]1e1j1r1y1
2=2J2h2}2
3-3L3T3d3k3
6,6A6i6
7.767@7H7
8J8i8v8
<"<P<Y<
<"=/=D=
>'>j>t>
?<?E?O?Z?
$0U0]0
1"1)141>1
2$2.232:2C2H2P2W2a2j2
3S3s3}3
4'4/494G4L4
5/575q5
8 8-828<8D8X8z8
99(9W9a9k9p9
;);2;q;z;
>!>0>8>P>e>r>{>
1C1m1u1
2!2)2W2j2
4+444K4x4
6"6@6V6
6V7`7q7
7 8(8F8P8X8a8
;;;b;k;
<<=D=V=
?C?P?a?i?q?
*0@0H0Z0~0
1@1c1k1
3$353=3B3J3f3
3-454m4w4}4
5%6-6V6^6h6m6
9#9E9O9
<H<W<`<g<
=7=B=Q=
?H?Q?Y?}?
P0Y0c0r0
1*1=1E1p1y1
30373]3e3
3%4-4D4
5$5<5D5_5l5
95:=:B:J:U:^:g:
:.;3;R;f;o;
?*?D?M?\?d?w?~?
0.060K0S0
011I1]1b1i1x1
132A2J2S2Z2
3 3Q3[3d3
4)444U4
4#5+5E5O5d5r5
7%7*737m7
8\9e9p9x9
:&:+:3:
;&;_;g;
<@<E<X<`<j<s<
=,=9=H=
>.>O>W>v>
?&?.?@?H?W?_?
0:0C0Z0
031k1r1
2.2G2P2n2
3!353b3~3
434=4p4
6 6)6;6I6N6U6
767>7F7b7j7{7
9&999R9\9f9v9~9
9*:F:N:u:
;2;S;[;|;
<<C<f<~<
<Y=b=q=y=
?H?W?^?z?
0!0&00080n0s0x0
1(1/161?1F1
292A2y2
3"3+3e3r3
4!4?4U4s4{4
525R5i5
8(80878@8^8g8
9R9[9e9n9v9}9
:=;G;P;V;`;j;r;z;
;*=2=M=
1N2U2j2o2z2
3,3E3J3T3Y3c3k3
5=5B5I5k5p5
6 656>6x6}6
70787W7
7=8B8r8|8
9#9,939:9
:4:9:X:
;6;];d;
<3<<<c<h<
= =/=8=
>(>1>D>T>v>
>7?<?C?P?`?
0`0g0~0
0<2M2[2
4#4;4E4P4X4
5*545E5{5
566I6S6k6t6
858Z8g8z8
9'909e9|9
:(;-;O;
;<4<C<L<S<Z<
?D?M?f?{?
0.030^0y0
1O1f1m1x1
12<2F2r2
3*323t3~3
4!4,454I4
616>6C6X6a6~6
989?9V9[9z9
;0;9;[;p;
=4=`=e=
> >O>T>h>
?=?E?a?p?x?
0&0?0H0^0c0
1K1P1Z1_1
3>3K3|3
484a4i4
4!5*5=5J5Q5e5j5
6:6D6O6W6b6k6
:(;-;B;P;Y;m;z;
0*020f0k0
1.1P1_1g1z1
2%2/2Y2b2m2w2
2@3E3Y3c3v3
454:4E4M4W4o4t4
4+585I5`5q5z5
51666K6T6
72797L7
9!9(9F9U9k9
:*:1:R:Y:d:i:~:
<(<-<m<v<
>->6>K>S>g>p>}>
>/?4?S?]?p?x?
0"0B0v0{0
1;1B1K1
2#2,23292B2P2Z2q2{2
6"6+6D6M6a6f6
8(808[8`8
9 929C9
9E:J:S:a:k:!;+;a;i;
<'<A<g<
4K5P5`5m5w5
8"8H8Q8V8^8
9+:a:h:q:
:+;0;:;?;k;u;
<Z<a<~<
=M=c=k=
4?4G4L4V4t4
5(5b5j5
5O6d6l6s6
7,797^7h7q7z7
8W8`8q8~8
8#969U9^9c9k9r9
:$:M:R:[:d:q:
<!<)<~<
=)===E=}=
>1>F>N>
>(?9?U?^?c?k?r?
04191Q1Z1
5(676@6K6S6e6y6
77N7X7
8;8@8G8
9'90959=9G9L9\9d9}9
:&:E:g:o:z:
;W<j<w<
>&>R>[>p>
?!?&?0?E?
70<0O0T0
1#1-151R1
2J2O2o2{2
4!4P4q4
5+5k5x5
6/6B6[6c6
7=8G8b8j8o8y8
: :(:>:G:P:}:
<#<V<b<
=$=)=Y=a=i=
?>?O?z?
0#0,0J0R0y0
1+282g2n2
3#313:3A3
525^5y5
7!828R8Z8
8&9.9c9m9v9~9
:!:*:@:R:Z:a:j:
:,;3;F;N;x;};
0T0j0r0
1 121L1U1_1n1
2+3C3H3\3a3
3)4B4G4Z4_4u4
6D6`6e6
9$:<:D:q:z:
<*<4<=<S<
?-?5?R?
060Y0`0i0v0{0
0#1,171?1f1
3$3-3:3K3^3g3
3.4p4z4
505a5f5
6"6I6Q6m6u6
73787L7U7
8#8,898P8Y8c8n8w8
839Q9Y9
=$=A=F={=
>0>K>f>
>+?3?:?R?l?
#0,050D0I0j0q0
1!2)2B2J2^2}2
3$3.3C3H3Q3X3b3j3
3E4M4V4a4n4
4=5L5}5
8#8a8~8
8C9H9i9q9x9
9%:/:A:X:b:i:s:
:5;=;S;
<0<8<A<l<t<
=5=>=P=w=
=,>5>}?
0 0)0M0U0
161R1\1l1t1
2*222;2Y2a2s2{2
2;3`3j3
4?4D4[4`4g4z4
4)5K5`5n5
5S6t6~6
6%747A7I7Y7i7n7u7
748<8F8N8
9$999Y9q9z9
:':1:H:R:Z:
<-<6<L<Q<d<l<t<
=?=M=s={=
>,>6>K>V>^>
?A?I?]?
0v0~0
1h1r1{1
2:2]2e2
2&343<3
4.454G4V4_4d4l4
485q5v5
727O7f7
8!8D8Z8a8q8~8
9`9h9x9
<*</<8<s<{<
1"1:1B1G1P1Z1_1d1l1
5a6f6p6
88'8;8i8
8+90999A9I9S9X9
:,:l:v:
;"<0<y<~<
=0=9=K=^=g=p=
>'>4>@>G>c>s>
> ?j?r?z?
0l0q0z0
0'1/1H1a1n1
4#4B4O4
5D5L5^5h5x5
5#6=6F6l6
7)72787E7O7
7?8T8^8g8t8
9%9\9s9
:*:V:[:o:
;;/;<;E;h;
;'<1<6<><}<
=1=X=]=u=|=
?)?h?q?
0(0I0N0
1*191W1
2(323U3]3g3~3
3:4J4V4z4
4%5o5x5}5
6%6*6P6
6 757=7M7a7j7
:@;I;q;y;
;Q<`<g<l<v<
>">*>5>>>M>Z>}>
?)?2?;?D?L?e?
0"0,060>0C0L0U0c0h0n0x0
0 202Y2^2g2
343M3{3
7/797>7H7Y7
8&8>8M8c8k8p8x8
999D9j9r9
<%<,<?<G<
<&=.=8=]=f=
>#>,>K>P>W>d>x>}>
?"?'?1?
1(1-1d1m1
1$2v2~2
3,363E3}3
5#5-5=5J5f5
636<6C6]6
8'80858?8D8L8
9"9*9x9
;);6;l;
<(<A<I<N<V<]<f<
0#0-020E0M0
2>3Z3k3s3|3
4"4'4<4A4R4_4t4y4
6!656f6n6
7;8C8c8h8|8
:/:Q:Y:b:m:v:{:
;$;G;O;
<<'<]<k<
=:=G=a=j=
>->2>;>\>
>-?7?J?R?Y?f?
2M2R2W2a2k2p2
2(323x3
4C4L4h4q4~4
5J5R5\5d5
161=1U1s1z1
3#4,464;4\4s4z4
6>6H6O6k6s6
77'797
7*898B8`8
:":a:i:
;N;W;a;o;t;
;2<\<d<n<s<
=B=K=V=_=
=(>1>6>?>^>k>
F0N0k0
1+242F2g2
3K4S4^4g4~4
586N6W6^6
9=9G9L9T9
;W;f;k;
>0C0L0Z0b0
1G2L2U2\2q2v2
21363=3x3
425W5c5p5u5
7;8N8V8
809:9Y9^9
:9:B:o:t:
=W=c=j=t=|=
>,?1?<?R?W?]?t?|?
0#0O0X0z0
31484M4V4
5N5\5d5u5
78$8,8I8Z8d8m8{8
:':::S:|:
;";);C;J;Q;Y;d;
>D>N>h>p>y>
??(?1?F?S?[?b?
D0U0f0
1P2Y2q2
373B3L3\3t3|3
3)414W5
7E8N8[8
8+9;9w9|9
; ;Q;V;`;e;n;
;A<k<y<
=V=]=t=y=
?4?E?J?]?i?}?
060@0l0
4%5-5@5P5U5v5
5*636I6b6j6
7;7`7h7
8J8O8_8
<!<)<H<
=#=(={=
=7><>C>T>^>
? ?'?1?>?Y?`?f?
;0D0U0b0
2G2S2a2f2
3%4*4/484O4x4
4&5N5s5
6)6U6]6g6
7;7X7]7|7
:\;a;k;
<7=L=V=m=
=5>=>D>o>v>
1,141M1R1f1o1
3'373Y3u4|4
4)5.5Q5V5j5
66,6T6]6d6t6
7&7F7K7U7
9H9M9a9j9
<7<V<[<b<k<t<{<
=;=h=t=
>.>8>o>|>
?&?Y?c?|?
0<0D0l0
1 1(1E1O1
3 3-3W3i4r4
5E5R5Y5s5
66(626?6V6^6s6
7"7u7~7
8&868?8[8{8
8$9/979k9s9
:>:H:]:q:z:
;';R;d;
<!<)<U<l<
</=<=e=r=
?%?A?I?d?l?
3 3%3-323;3K3S3m3
464?4R4u4
565U5]5
6&6D6Q6p6z6
6B7u7~7
9$9/9\9d9
:#:A:K:R:f:
<A<N<i<
?d?l?s?|?
10<0D0T0\0y0
3'3>3F3n3w3
4'474?4u4}4
5!5,555
6D6M6c6l6s6}6
8T9\9n9w9
;&;1;9;e;s;};
;0<8<I<
==-=V=^=f=
>U>f>o>
?"?+?p?w?
2>3F3x3
4$4H4Q4l4y4
5;5F5Y5
6&646A6T6\6
818:8[8e8n8s8}8
9 9(9m9
<%</<?<G<[<
<-=L=T=\=
>6>@>O>W>v>
0)0.080=0E0U0
2X2b2q2y2
3A3I3P3
5$5-5H5R5Y5c5j5s5
6&606D6L6S6
8$8.8s8
9,9?9I9b9j9
:-:N:V:^:z:
; ;*;q;z;
<<&<4<><E<O<p<x<}<
=/=7=z=
=F>N>V>
0#0+090C0s0
1 1*1;1[1c1j1w1
2(242w2
:;';o;y;~;
<*<E<J<
=!=)=;=D=c=m=r=|=
?%?-?6?>?F?_?p?y?
Q0v0~0
3:3D3M3V3c3j3z3
6G6O6q6
7!7)7l7s7
88j8x8
9!979D9L9
;-;5;h;
;R<_<i<~<
=>=t=|=
>'>0>:>Z>a>
0W0b0z0
1%1@1L1V1z1
2"272?2S2_2q2y2
263?3o3
4 4)4W4_4g4p4z4
5?5H5Z5g5l5v5{5
5(6J6S6^6x6
7P7a7n7w7
9'9/969R9y9~9
:9:B:J:
;J;a;j;
<0<5<G<\<e<
0$0Z0b0r0{0
1o1x1}1
2I3N3_3
3K4W4_4p4z4
4%5-5O5X5s5{5
6"6'676D6K6
7"7[7c7x7}7
8?9H9t9{9
9!:6:b:r:{:
=(=;=E=Q=^=g=}=
>=>B>I>R>Y>k>s>
0#0A0I0t0|0
1$1-1>1F1M1t1
2,2E2X2]2v2~2
20383B3U3b3w3
384B4f4n4w4
5>5G5R5[5f5w5
5*686B6_6t6|6
6,757L7Z7c7l7
8"9=9K9S9Z9l9
;&;?;O;];g;
<-<5<=<b<k<
<:=?=J=R=Z=j=s=x=
= >)>c>z>
?$?k?t?
0%0O0Y0d0m0
1&1C1K1_1
252f2y2~2
3D3M3^3g3n3{3
4X4q4*5F5t5}5
6X6o6|6
6)717P7U7^7
8N8S8Z8c8
9-9G9P9
:I:R:Z:
<D<N<q<y<
=,=4=F=_=h=q=
=&>.>7>
0+04090C0\0d0m0
1"2*222
2$3-3W3b3j3~3
4X4`4{4
5L5Q5q5y5
66$696n6
7F7p7y7
7E8[8c8
;D;L;h;
<(<7<D<L<T<j<o<v<
<+=0=7=^=t=|=
0!0S0[0b0
0C1O1W1m1w1
202<2F2f2k2t2{2
4A4K4h4q4
5A5J5w5
6E6J6T6Y6^6h6
7R7Z7e7m7|7
888@8k8t8
819W9f9o9
:$:-:p:
==@=_=i=~=
>A>J>T>
?"?S?l?
030<0E0c0l0s0
181E1v1
2#2(2}2
434<4y4
5'5/5e5j5
576K6Z6
7&8.868
89H9P9e9o9
;+;=;B;L;W;i;n;s;{;
???L?Y?c?l?
31=1M1V1a1j1
2=2G2d2
4*424=4F4w4
5A5I5P5X5
8C8V8`8
:S:[:o:x:
;&;8;S;b;j;
<&<L<U<
= =[=d=
=!>,>X>e>q>}>
>#?-?2?:?~?
?0H0S0o0
0-1O1W1j1w1
222L2T2
4#4*414K4S4e4m4
445<5P5v5
6M6R6l6
737B7K7_7g7p7
8 8)8b8g8
9 959:9E9N9^9f9o9v9
:[:e:j:r:{:
;+;3;=;[;d;
;#<-<<<D<\<h<r<z<
=$=-=B=O=T=}=
=O>W>`>
>4?<?P?f?m?w?
0Q0V0~0
041M1T1]1x1
2=2J2T2[2d2`4z4
55-555Q5
6%676?6
767=7z7
8B8P8c8m8
:9:@:K:T:}:
;#;L;t;~;
;"<B<J<
0/0A0I0
2"3)3;3u3
344F4S4X4
6L6U6^6
:':0:::B:q:{:
:P;];b;j;};
=='=e=o=z=
050?0Q0|0
1%1.131;1A1N1
2$2.2]2
5 5)5S5]5o5
5'616N6}6
8"8+828
:?:D:N:Z:s:}:
;';/;m;u;~;
;&<+<;<S<[<
=V=^=}=
>9>Y>^>e>
?E?J?Q?o?
&0/090>0H0M0W0\0s0|0
1 1'1`1e1
222?2D2{2
4*444X4n4{4
40585f5o5
7)838:8H8f8
9'9.979>9M9
<8<R<[<
=?=Z=c=m=r=y=
=I>U>_>
>'?9?A?F?N?
20@0H0[0
0P1a1t1
2C2L2V2y2
2(313M3
4I5Q5[5
6K6P6z6
7 7W7_7g7n7w7
7D8W8_8g8
989O9X9
:7:E:T:]:
;U;];b;j;~;
;;<O<Y<c<h<
>a>v>~>
?$?+?L?T?d?l?
0,0I0Q0V0^0d0m0x0
0A1I1^1h1s1|1
3)323=3U3a3
4+434;4D4O4X4l4|4
67$7|7
88S8X8
9"9C9K9
:F:_:z:
:A;d;m;
<&<i<u<
<@=I={=
!0)000L0X0k0
11E1P1Y1c1z1
2I2Q2Y2d2i2z2
4'4/4E4N4s4{4
4#5l5~5
6"777@7J7O7V7_7
8&979E9M9S9`9j9o9
:(;-;E;N;
<%<=<E<z<
>;>E>[>g>o>
040L0Z0b0
2.262k2
5;5C5`5|5
6;6@6G6t6
: ;(;/;8;A;X;_;i;q;
=+===J=R=
>9>S>X>b>{>
? ?U?f?}?
1 121K1|1
$000N0V0i0s0
1M1V1_1i1
112;2[2c2j2w2
4$4,41494Q4m4
5,565o5w5}5
6.676>6G6
9^9f9o9
:=:E:V:g:p:
;3<<<C<K<R<p<
= =H=Q=b=k=p=x=
=E>N>^>f>
?"?5?>?H?
0"0q0z0
111G1c1
2#2K2T2b2j2
2\3q3}3
536<6D6e6{6
8%8?8G8P8x8
:-:=:v:
:6;>;E;p;};
< <;<E<r<|<
<E=M=U=r=|=
>+>Q>_>
?B?J?Q?Z?
0'010;0]0e0j0t0
0-151;1E1m1
3(3A3{3
484o4w4
565>5d5m5
7"7E7M7j7
9>9G9y9
:C:K:S:Z:
;&;T;a;
<%<C<Q<Y<j<r<
=5>g>}>
>-?X?r?
0_0g0l0t0z0
1-151:1B1f1o1
1+2A2J2Q2u2
3Y3b3l3
555=5D5
6(757=7E7O7c7k7r7|7
728V8^8
:&:U:]:
:#;,;4;B;J;O;X;_;h;
;9<c<k<s<
=<=i=r=|=
>#>.>G>p>|>
2"3/3=3
394A4Y4f4
455G5Q5n5w5
576c6p6
7&70787
8.8q8z8
839;9I9S9X9`9
<2<a<j<z<
=,=6=>=p=
P0[0c0j0r0
1#1+1>1H1
2)232C2K2R2s2
3N4X4l4
50585I5
627<7y7
8$8-8;8k8s8z8
9+939:9s9{9
::6:>:v:
:!;@;J;O;W;g;q;
;+<3<w<
<X=b=i=r=
>">/>8>Q>Y>h>r>
?;?[?d?w?
0E0[0q0z0
0%121\1o1y1
2&2T2}2
44K4X4t4|4
5%5E5g5
6"6<6F6M6U6Z6b6s6}6
60797V7_7o7x7
9@:H:O:r:
;>(>R>[>`>h>
?)?@?g?p?
22)2V2_2
2H3Q3b3l3
4%4/494m4v4{4
55;5E5}5
5\6d6n6w6
7%7i7q7x7
9<9E9e9
:$:B:K:R:w:
;4;F;Q;Z;l;t;
<<-<[<o<
> >g>o>
?&?A?I?
!0+0\0q0y0
1$171@1G1P1W1a1
2.262\2f2k2t2
3,353<3
5G5v5~5
9&9:9D9L9^9j9
<!<*<3<L<
=H=U=b=
=">d>n>
?2?d?n?
0(0T0^0z0
5&5G5m5
6>6M6U6
747=7G7
9*929;9c9k9s9z9
;1;:;i;s;x;
<$=-=A=I=h=r=
080C0K0p0x0
1%1/181I1Q1X1v1
242<2G2q2y2
2%3.3A3U3^3
4D4L4Q4Y4y4
525:5A5
6%6<6j6
7 7C7K7P7X7j7
7I8Q8W8d8j8w8
99L9U9c9k9{9
:$:,:U:d:
;J;S;e;m;
;$<-<z<
=,=6=H=
9K;S;Z;
=(=.=;=X=k=w=
=.>I>N>j>
> ?(?-?7?
#0H0^0s0|0
2!222q2
3#3+3{3
3,464r4
5N6[6d6z6
8$8)818<8D8K8
949C9M9V9
:%:-:5:[:e:y:
<Z<c<j<
<H=R=]=f=
>!>9>>>
>J?j?s?
0.070W0_0
1)111Z1_1i1
2.2;2B2K2T2m2u2
3"3'373M3U3x3
6 6;6C6v6~6
7!797>7`7j7q7
9O9W9\9d9m9z9
:2:H:Q:
;!;);2;M;W;b;g;
<6<k<p<
<S=X=l=
0&0/090N0
1E1X1a1
2 2T2a2q2z2
3 3B3L3{3
3!4[4c4m4r4
5<5A5V5d5i5~5
5O6W6_6
<%=3=q=v=
=>>Q>Z>p>u>
?%?2???G?O?V?_?m?v?
1#1+191A1Q1Z1
3%313l3v3
4D5M5T5o5{5
676<6T6\6
758J8T8^8f8x8
:7;@;T;Y;r;{;
<0<8<X<f<
Antivirus Signature
Bkav Clean
Lionic Clean
Elastic Clean
ClamAV Clean
CTX exe.trojan.generic
CAT-QuickHeal Clean
Skyhigh Artemis!Trojan
ALYac Trojan.GenericKD.75864806
Cylance Unsafe
Zillya Clean
Sangfor Clean
CrowdStrike win/malicious_confidence_70% (W)
BitDefender Trojan.GenericKD.75864806
K7GW Clean
K7AntiVirus Clean
huorong Clean
Baidu Clean
VirIT Trojan.Win32.Genus.XOG
Symantec Trojan.Gen.MBT
tehtris Clean
ESET-NOD32 a variant of Win32/Kryptik.HYTD
APEX Clean
Paloalto Clean
Cynet Malicious (score: 99)
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Trojan:Win32/Kryptik.4509b00d
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.75864806
Tencent Win32.Trojan.Kryptik.Njgl
Sophos Clean
F-Secure Trojan.TR/Crypt.Agent.lllso
DrWeb Clean
VIPRE Trojan.GenericKD.75864806
TrendMicro Clean
McAfeeD ti!17BC5B41B35D
Trapmine Clean
CMC Clean
Emsisoft Trojan.GenericKD.75864806 (B)
Ikarus Trojan-Spy.Win32.LummaStealer
FireEye Trojan.GenericKD.75864806
Jiangmin Clean
Webroot Clean
Varist Clean
Avira TR/Crypt.Agent.lllso
Fortinet W32/PossibleThreat
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Trojan.Win32.Generic.cl
Xcitium Malware@#2m645ivd7rppd
Arcabit Trojan.Generic.D4859AE6
SUPERAntiSpyware Clean
Microsoft Program:Win32/Wacapew.C!ml
Google Detected
AhnLab-V3 Malware/Win.Generic.C5730210
Acronis Clean
VBA32 Clean
TACHYON Clean
Malwarebytes Trojan.MalPack.Generic
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.ShellCodeRunner!1.1275A (CLASSIC)
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.1728101.susgen
GData Trojan.GenericKD.75864806
DeepInstinct MALICIOUS
alibabacloud Clean
No IRMA results available.