Static | ZeroBOX

PE Compile Time

2025-03-19 10:30:49

PE Imphash

b48016c8d5075c1f1566cbaa73055aa8

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0001e388 0x0001e400 5.76181103979
.data 0x00020000 0x000004f0 0x00000600 1.41756809092
.rdata 0x00021000 0x0001dbd0 0x0001dc00 6.18891007539
.pdata 0x0003f000 0x000015f0 0x00001600 5.32885040815
.xdata 0x00041000 0x000015e4 0x00001600 3.96161278996
.bss 0x00043000 0x00001020 0x00000000 0.0
.idata 0x00045000 0x00000860 0x00000a00 3.74371321686
.CRT 0x00046000 0x00000060 0x00000200 0.312493774595
.tls 0x00047000 0x00000010 0x00000200 0.0
.rsrc 0x00048000 0x00000228 0x00000400 3.40572528221
.reloc 0x00049000 0x000001c8 0x00000200 4.76073685236
/4 0x0004a000 0x00000650 0x00000800 1.57472719724
/19 0x0004b000 0x00012322 0x00012400 5.83497919785
/31 0x0005e000 0x000032f1 0x00003400 4.81657491658
/45 0x00062000 0x00006df9 0x00006e00 5.0585074249
/57 0x00069000 0x00001708 0x00001800 4.5030014483
/70 0x0006b000 0x0000039d 0x00000400 4.6233906249
/81 0x0006c000 0x00001683 0x00001800 4.60497621525
/97 0x0006e000 0x00007867 0x00007a00 5.81609865737
/113 0x00076000 0x0000052b 0x00000600 5.31014410381

Resources

Name Offset Size Language Sub-language File type
RT_MANIFEST 0x00048058 0x000001ca LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x140045228 DeleteCriticalSection
0x140045230 EnterCriticalSection
0x140045238 GetLastError
0x140045240 GetProcAddress
0x140045250 IsDBCSLeadByteEx
0x140045258 LeaveCriticalSection
0x140045260 LoadLibraryA
0x140045268 MultiByteToWideChar
0x140045270 SetLastError
0x140045280 Sleep
0x140045288 TlsAlloc
0x140045290 TlsGetValue
0x140045298 TlsSetValue
0x1400452a0 VirtualAlloc
0x1400452a8 VirtualFree
0x1400452b0 VirtualProtect
0x1400452b8 VirtualQuery
0x1400452c0 WideCharToMultiByte
Library msvcrt.dll:
0x1400452d0 __C_specific_handler
0x1400452d8 ___lc_codepage_func
0x1400452e0 ___mb_cur_max_func
0x1400452e8 __getmainargs
0x1400452f0 __initenv
0x1400452f8 __iob_func
0x140045300 __set_app_type
0x140045308 __setusermatherr
0x140045310 _amsg_exit
0x140045318 _cexit
0x140045320 _commode
0x140045328 _errno
0x140045330 _fileno
0x140045338 _fmode
0x140045340 _initterm
0x140045348 _lock
0x140045350 _onexit
0x140045358 _setmode
0x140045360 _unlock
0x140045368 abort
0x140045370 calloc
0x140045378 exit
0x140045380 fflush
0x140045388 fprintf
0x140045390 fputc
0x140045398 free
0x1400453a0 fwrite
0x1400453a8 localeconv
0x1400453b0 malloc
0x1400453b8 memcmp
0x1400453c0 memcpy
0x1400453c8 memset
0x1400453d0 realloc
0x1400453d8 signal
0x1400453e0 strerror
0x1400453e8 strlen
0x1400453f0 strncmp
0x1400453f8 vfprintf
0x140045400 wcslen

!This program cannot be run in DOS mode.
`.data
.rdata
@.pdata
@.xdata
.idata
@.reloc
ATUWVSH
[^_]A\
[^_]A\
VUUUUUUUH
H;E } H
gfffffffH
f=MZt(H
UAWAVAUATWVSH
[^_A\A]A^A_]
ATUWVSH
[^_]A\H
:MZuYHcB<H
AUATUWVSH
([^_]A\A]
C$9C(~
u HcS$
AWAVAUATUWVSH
C$9C(~
H[^_]A\A]A^A_
S$9S(~
S$9S(~
UAWAVAUATWVSH
C$9C(~
C$9C(~
[^_A\A]A^A_]
UAWAVAUATWVSH
C$9C(~
S$9S(~
[^_A\A]A^A_]
UATWVSH
C$9C(~
[^_A\]
[^_A\]
=UUUUw
S$9S(~
AUATUWVSH
X[^_]A\A]
AWAVAUATUWVSH
[^_]A\A]A^A_
AWAVAUATUWVSH
8[^_]A\A]A^A_
AWAVAUATUWVSH
[^_]A\A]A^A_
[^_]A\A]A^A_
xnHcD$hA;E
D)d$pH
ATUWVSHcY
[^_]A\
[^_]A\
AWAVAUATUWVSH
([^_]A\A]A^A_
AVAUATUWVSH
[^_]A\A]A^
AUATUWVSH
([^_]A\A]
([^_]A\A]
WVSHcA
AVAUATUWVSH
0[^_]A\A]A^
ATUWVSH
@[^_]A\
AVAUATUWVSH
@[^_]A\A]A^
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arithmetics.nim
nimDecRefIsLastCyclicDyn
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/orc.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arc.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/cellseqs_v2.nim
nimTraceRefDyn
00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899addChars
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/std/private/digitsutils.nim
addIntImpl
addInt
addInt
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/std/private/digitsutils.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/dollars.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/repr_v2.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/std/widestrs.nim
@field 'fun1' is not accessible for type 'Fun' using 'kind =
@kClosure
@kNoconv
@field 'fun2' is not accessible for type 'Fun' using 'kind =
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arithmetics.nim
nimIncRefCyclic
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/orc.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arc.nim
nimDecRefIsLastCyclicDyn
callClosures
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/std/exitprocs.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/core/locks.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/iterators_1.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system.nim
nimMarkCyclic
addExitProc
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/threadimpl.nim
exitprocs
@kernel32
@kernel32
restoreConsoleOutputCP
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/std/syncio.nim
restoreConsoleCP
setInheritable
syncio
GetConsoleOutputCP
GetConsoleCP
SetConsoleOutputCP
SetConsoleCP
SetHandleInformation
@No stack traceback available
@value out of range
@value out of range:
@index out of bounds, the container is empty
@index
@ not in 0 ..
@ notin
@over- or underflow
@Traceback (most recent call last)
@ calls omitted) ...
@Error: call depth limit reached in a debug build (
@ function calls). You can change it with -d:nimCallDepthLimit=<int> but really try to avoid deep recursions instead.
@SIGINT: Interrupted by Ctrl-C.
@SIGSEGV: Illegal storage access. (Attempt to read from nil?)
@SIGABRT: Abnormal termination.
@SIGFPE: Arithmetic error.
@SIGILL: Illegal operation.
@SIGBUS: Illegal storage access. (Attempt to read from nil?)
@unknown signal
@index out of bounds:
@ notin 0..
@cannot write string to file
@[[reraised from:
@Error: unhandled exception:
could not load:
(bad format; library may be wrong architecture)
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arithmetics.nim
roundup
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/osalloc.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/alloc.nim
mappingSearch
findSuitableBlock
raiseOutOfMem
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/mmdisp.nim
out of memory
osAllocPages
allocPages
osTryAllocPages
tryAllocPages
incCurrMem
llAlloc
addHeapLink
intSetGet
contains
pageIndex
requestOsChunks
isAccessible
updatePrevSize
intSetPut
splitChunk2
mappingInsert
setBit
addChunkToMatrix
splitChunk
clearBit
removeChunkFromMatrix2
getBigChunk
getSmallChunk
pageAddr
compensateCounters
listAdd
listRemove
decCurrMem
osDeallocPages
virtualFree failing!
freeHugeChunk
chunkUnused
isSmallChunk
removeChunkFromMatrix
freeBigChunk
deallocBigChunk
addToSharedFreeListBigChunks
freeDeferredObjects
getHugeChunk
rawAlloc
unregisterCycle
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/orc.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/cellseqs_v2.nim
ptrSize
addToSharedFreeList
rawDealloc
dealloc
realloc
resize
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/seqs_v2.nim
markGray
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arc.nim
scanBlack
collectColor
nimRawDispose
deinit
collectCyclesBacon
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/iterators_1.nim
collectCycles
registerCycle
rememberCycle
nimDestroyAndDispose
newSeq
nimIncRefCyclic
nimDecRefIsLastCyclicDyn
sysFatal
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/fatal.nim
RangeDefect
IndexDefect
nimNewObj
OverflowDefect
addInt
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/std/private/digitsutils.nim
could not import:
FieldDefect
:anonymous
raiseEIO
IOError
writeWindows
echoBinSafe
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/iterators.nim
@kernel32
@kernel32
CreateProcessA
OpenProcess
VirtualProtect
GetModuleHandleA
@0123456789ABCDEF
toHexImpl
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/pure/strutils.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/iterators_1.nim
/home/tris0n/.nimble/pkgs2/winim-3.9.4-4b7c430159be2e8b2dc4b663a9b19f7678b58f87/winim/winstr.nim
winstrConverterStringToPtrChar
loadLib
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/pure/dynlib.nim
symAddr
@Ws2_32.dll
@Ws2_32.dll
@kernel32
@kernel32
winlean
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/windows/winlean.nim
inet_ntop
WSAStartup
FormatMessageW
LocalFree
GetLastError
socket
closesocket
WSAIoctl
@Additional info:
@unknown OS error
=destroy
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system.nim
osErrorMsg
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/std/oserrors.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/indices.nim
newOSError
OSError
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arithmetics.nim
nimDecRefIsLastCyclicDyn
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/orc.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/arc.nim
raiseOSError
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/pure/random.nim
random
setInheritable
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/pure/nativesockets.nim
createNativeSocket
nativesockets
initPointer
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/pure/asyncdispatch.nim
initAll
asyncdispatch
_H_K_JKIHMV
S}p"[/
E@AC_B_C_@_A
_K_JK/
6E@AC_B_C_@_A
?Jvwm>nlqyl
ppqj>|{>lkp>wp>ZQM>sqz{0
0l{rq}
>E@AC_B
_I_H_K_JR
E@A_B_C_@_AC
_H_K_JKV
E@AC_B_C_@_A
6E@A_B
^E@AC_B
E_B_C_@
_K_JKIHMV
.E@AC_B_C_@
_JKIH/
>E@AC_B
&E@A_B
VE@AC_B_C_@_A
_H_K_J[/
@AC_B_C_@
_I_H_K_JKIHMV
Z:.x_'
VE@AC_B_C_@_A
VE@AC_B_C_@_A
_I_H[/
_K_J[/
k<V-V
FE@AC_B_C_@_A
E@AC_B_C_@_A
VE@AC_B_C_@_A
VE@AC_B_C_@_A
_I_H_K_JIHMV
E@A_B_C_@_AC
_K_JKIHMV
^E@AC_B_C_@
_I_H_KW
_JIHMV
E@A_B_C_@_A
_H_K_JKIHMV
E@AC_B_C_@_A
_I_H_K_JIHMV
E@A_B_C_@_AC
_I_H_KW
_JKIHMV
E@AC_B_C_@_A
E@AC_B_C_@_A
_H_K_JW
A_B_C_@
_H_K_JW
fE@AC_B_C_@_A
_H_K_JIHMV
~E@A_B_C_@_A
E_B_C_@
_I_H_K_JW
E@AC_B_C_@_A
_I_H_KW
&_B_C_@_A
_I_H_KW
_JKIHMV
R:vZ'j:Fh/V
R:vZ'b:FhaV
fE@AC_B_C_@_A
R:v'b:FhU
R:v'B:Bh6
Z:vZ'r:Bh
R:v'B:Fh?
E@AC_B_C_@_A
jYZ'=j
EA_B_CC
EA_B_CC
_I_H_KW
_JIHMV
E@A_B_C_@_AC
_K_JKIHMV
vE@AC_B_C_@_A
_I_H_KW
_JIHMV
k&Z'/k-Z
E@A_B_C_@_AC
E@A_B_C_@_AC
E@A_B_C_@_AC
EA_B_C
_I_H_KW
_JKIHMV
r:v_'c
J:v'j:zh
E@AC_B_C_@_A
E@AC_B_C_@_A
_K_JMV
E_B_C_@
_H_K_JKIHMV
FE@AC_B_C_@_A
_K_JIMV
EA_B_C_@
_I_H_KW
_JKIHV
E@AC_B_C_@_A
E@AC_B_C
_I_H_K_JIHMV
'Z:z`)V
E@A_B_C_@_AC
_K_JKIHMV
J:"V7M
VE@AC_B_C
_K_JIR
E@A_B_C_@_AC
_H_K_JW
.E@AC_B_C_@
_I_H_K_JKIHMV
E@AC_B_C_@_A
_I_H[/
E@AC_B_C_@_A
_H_K_J_
'j::h)V
E@AC_B_C_@
_I_H_K_JKIHR
E@AC_B_C_@_A
j>V}_"
E@A_B_C
_I_H_K_JW
E@AC_B_C_@_A
E@AC_B_C_@_A
_I_H_KW
E@AC_B_C_@_A
_H_K_JKV
E@AC_B_C_@_A
6E@A_B_C_@
_H_K_JW
E@AC_B_C_@
_K_JIHV
E@A_B_C_@C
!x'R:4l
!x'B:4
_I_H_K_JW
E@AC_B_C_@_A
E_B_C_@
>E@AC_B
_I_H_K[/
_JKIHMV
FE@AC_B_C_@_A
_I_H[/
_K_J[/
E@AC_B_C_@_A
_H_K_JW
E@A_B_C_@_AC
_I_H_K_JKIHMV
FE@AC_B_C_@_A
_H_K_JKV
E@AC_B_C_@
E@AC_B
_I_H[/
_K_JKIHMV
E@AC_B_C_@_A
_K_JKIHMV
E@AC_B_C
VE@_B_C
_B_C_@
>E@AC_B
E@AC_B_C_@
_B_C_@
E@AC_B_C_@
>E@AC_B
E@A_B_C_@_AC
_I_H_K_JKIHMV
VE@AC_B_C_@_A
_JIHMV
6E@A_B
_H_K_J[/
E@AC_B_C_@_A
E@AC_B_C_@
_H_K_JW
E@AC_B_C_@
_I_H_K_JKIHV
VE@AC_B_C_@_A
NE@AC_B
6E@AC_B_C
\JZ'T&k
O&Z'N&k
V}T"V
>E@AC_B
_JKIHMV
!x'j:4h
E@AC_B
_JKIHMV
nE@AC_B
_I_H_K_JW
E@A_B_C_@_AC
_I_H_K_JKIHMV
FE@AC_B_C_@_A
B:&kdV
_H_K_JKIHMV
fE@AC_B_C_@_A
FE@A_B
_K_J[/
Z:&V'Z:v
V'Z:fk
E@A_B_C_@_AC
_I_H_K_JIHMV
E@A_B_C_@_AC
E@AC_B
^E@A_B_C
_I_H_K_JKIHMV
E@AC_B_C_@_A
_JIHMV
*:V'.k
6E@A_B
_K_JKIHMV
E@AC_B_C
_I_H_K_JKIH/
E@AC_B_C_@_A
_H_K_JKIHV
E@AC_B_C_@_A
z{sqp0f(*0zrr
D$PHc@<H
D$(HcD$(H
s0HcD$(H
H9D$@u"
}NHcD$
D$@H9D$
@C:\Windows\System32\cmd.exe
@CreateProcess failed
@OpenProcess failed
@Failed to change memory protection
@NtClose
@NtOpenFile
@NtWriteFile
@NtContinue
@NtCancelTimer
@ntdll.dll
@Failed to load ntdll.dll
@Failed to restore memory protection
@Failed to get the function address
@Failed to find the syscall number
@NtCreateSection
@NtCreateSection failed
@NtMapViewOfSection
@Local NtMapViewOfSection failed
@Remote NtMapViewOfSection failed
@NtProtectVirtualMemory
@NtProtectVirtualMemory failed
@NtCreateThreadEx
@NtCreateThread failed
@Execution failed
toByteSeq
/home/tris0n/labs/tools/loaders/nim-loader/loader/main.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system.nim
createProcess
/home/tris0n/labs/tools/loaders/nim-loader/loader/functions/utils.nim
eqStrings
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/strmantle.nim
HighPart=
/home/tris0n/.nimble/pkgs2/winim-3.9.4-4b7c430159be2e8b2dc4b663a9b19f7678b58f87/winim/inc/windef.nim
LowPart=
calcPointer
/home/tris0n/labs/tools/loaders/nim-loader/loader/core/syscalls.nim
/home/tris0n/.nimble/pkgs2/winim-3.9.4-4b7c430159be2e8b2dc4b663a9b19f7678b58f87/winim/winstr.nim
GetProcAddressReplacement
/home/tris0n/labs/tools/loaders/nim-loader/loader/core/replacements.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/system/iterators_1.nim
getSyscallAddr
indirectSyscall
getSSN
injection
/home/tris0n/labs/tools/loaders/nim-loader/loader/functions/injection.nim
protection
/home/tris0n/labs/tools/loaders/nim-loader/loader/functions/protection.nim
execute
/home/tris0n/labs/tools/loaders/nim-loader/loader/functions/execute.nim
/home/tris0n/.choosenim/toolchains/nim-2.2.0/lib/pure/times.nim
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Mingw-w64 runtime failure:
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
(null)
Infinity
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_errno
_fileno
_fmode
_initterm
_onexit
_setmode
_unlock
calloc
fflush
fprintf
fwrite
localeconv
malloc
memcmp
memcpy
memset
realloc
signal
strerror
strlen
strncmp
vfprintf
wcslen
KERNEL32.dll
msvcrt.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="winim" type="win32"/><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"/></dependentAssembly></dependency></assembly>
9GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
size_t
long long unsigned int
long long int
uintptr_t
wchar_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
_EXCEPTION_RECORD
ExceptionCode
ExceptionFlags
ExceptionAddress
NumberParameters
ExceptionInformation
._CONTEXT
P1Home
P2Home
P3Home
P4Home
P5Home
P6Home
ContextFlags
EFlags
VectorRegister
VectorControl
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
__globallocalestatus
signed char
short int
ULONG_PTR
DWORD64
LONGLONG
ULONGLONG
EXCEPTION_ROUTINE
PEXCEPTION_ROUTINE
=_M128A
/M128A
long double
_onexit_t
double
_invalid_parameter_handler
_Float16
__bf16
._XMM_SAVE_AREA32
ControlWord
StatusWord
TagWord
Reserved1
ErrorOpcode
ErrorOffset
ErrorSelector
Reserved2
DataOffset
DataSelector
Reserved3
MxCsr_Mask
FloatRegisters
XmmRegisters
Reserved4
/XMM_SAVE_AREA32
Header
Legacy
1FltSave
1FloatSave
PCONTEXT
EXCEPTION_RECORD
PEXCEPTION_RECORD
_EXCEPTION_POINTERS
ContextRecord
EXCEPTION_POINTERS
_EXCEPTION_REGISTRATION_RECORD
Handler
handler
FiberData
Version
_NT_TIB
ExceptionList
StackBase
StackLimit
SubSystemTib
ArbitraryUserPointer
NT_TIB
PNT_TIB
2JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
_IMAGE_DOS_HEADER
e_magic
e_cblp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_csum
e_lfarlc
e_ovno
e_oemid
e_oeminfo
e_res2
e_lfanew
IMAGE_DOS_HEADER
PIMAGE_DOS_HEADER
_IMAGE_FILE_HEADER
Machine
NumberOfSections
TimeDateStamp
PointerToSymbolTable
NumberOfSymbols
SizeOfOptionalHeader
Characteristics
IMAGE_FILE_HEADER
_IMAGE_DATA_DIRECTORY
VirtualAddress
IMAGE_DATA_DIRECTORY
_IMAGE_OPTIONAL_HEADER
BaseOfData
PIMAGE_OPTIONAL_HEADER32
_IMAGE_OPTIONAL_HEADER64
IMAGE_OPTIONAL_HEADER64
PIMAGE_OPTIONAL_HEADER64
C_IMAGE_NT_HEADERS64
Signature
FileHeader
OptionalHeader
PIMAGE_NT_HEADERS64
PIMAGE_NT_HEADERS
PIMAGE_TLS_CALLBACK
PTOP_LEVEL_EXCEPTION_FILTER
LPTOP_LEVEL_EXCEPTION_FILTER
DtagCOINITBASE
COINITBASE_MULTITHREADED
2VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
_dowildcard
_newmode
__imp___initenv
newmode
_startupinfo
__uninitialized
__initializing
__initialized
__native_startup_state
__native_startup_lock
I_exception
retval
_TCHAR
__ImageBase
_fmode
_commode
__xi_a
__xi_z
__xc_a
__xc_z
__dyn_tls_init_callback
__mingw_app_type
Jargret
mainret
managedapp
has_cctor
startinfo
__mingw_oldexcpt_handler
4__mingw_pcinit
4__mingw_pcppinit
_MINGW_INSTALL_DEBUG_MATHERR
'__mingw_initltsdrot_force
'__mingw_initltsdyn_force
'__mingw_initltssuo_force
K__mingw_module_is_dll
(_onexit
memcpy
strlen
(malloc
"_cexit
C Lexit
"__main
"_fpreset
_set_invalid_parameter_handler
_gnu_exception_handler
SetUnhandledExceptionFilter
"_pei386_runtime_relocator
_initterm
_amsg_exit
__getmainargs
(_matherr
__mingw_setusermatherr
)_setargv
)__p__commode
)__p__fmode
__set_app_type
Matexit
Oduplicate_ppstrings
Qcheck_managed_app
pDOSHeader
pPEHeader
pNTHeader32
pNTHeader64
5__tmainCRTStartup
lock_free
fiberid
nested
7mainCRTStartup
7WinMainCRTStartup
8pre_cpp_init
5pre_c_init
8__mingw_invalidParameterHandler
expression
R function
Q file
X line
Y pReserved
YNtCurrentTeb
,_InterlockedExchangePointer
Target
,_InterlockedCompareExchangePointer
Destination
ExChange
Comperand
,__readgsqword
Offset
Zmemcpy
__builtin_memcpy
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
ptrdiff_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
signed char
short int
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
func_ptr
__CTOR_LIST__
__DTOR_LIST__
initialized
atexit
__main
__do_global_ctors
__do_global_dtors
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
signed char
short int
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
__uninitialized
__initializing
__initialized
__native_startup_state
__native_startup_lock
__native_dllmain_reason
__native_vcclrit_reason
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_dowildcard
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
signed char
short int
long double
double
_Float16
__bf16
_setargv
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_newmode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
uintptr_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPVOID
signed char
short int
ULONG_PTR
HANDLE
ULONGLONG
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
PIMAGE_TLS_CALLBACK
_IMAGE_TLS_DIRECTORY64
StartAddressOfRawData
EndAddressOfRawData
AddressOfIndex
AddressOfCallBacks
SizeOfZeroFill
Characteristics
IMAGE_TLS_DIRECTORY64
IMAGE_TLS_DIRECTORY
_tls_index
_tls_start
_tls_end
__xl_a
__xl_z
_tls_used
__xd_a
__xd_z
_CRT_MT
__dyn_tls_init_callback
__xl_c
__xl_d
__mingw_initltsdrot_force
__mingw_initltsdyn_force
__mingw_initltssuo_force
__mingw_TLScallback
__dyn_tls_dtor
__tlregdtor
__dyn_tls_init
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_commode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
__xi_a
__xi_z
__xc_a
__xc_z
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
double
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
long double
_exception
retval
_iobuf
_charbuf
_bufsiz
_tmpfname
fprintf
__acrt_iob_func
_matherr
pexcept
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_fpreset
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__mingw_app_type
'GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__gnuc_va_list
__builtin_va_list
va_list
size_t
long long unsigned int
long long int
ptrdiff_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPBYTE
PDWORD
LPVOID
LPCVOID
signed char
short int
ULONG_PTR
SIZE_T
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
_MEMORY_BASIC_INFORMATION
BaseAddress
AllocationBase
AllocationProtect
PartitionId
RegionSize
Protect
MEMORY_BASIC_INFORMATION
PMEMORY_BASIC_INFORMATION
_IMAGE_DOS_HEADER
e_magic
e_cblp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_csum
e_lfarlc
e_ovno
e_oemid
e_oeminfo
e_res2
e_lfanew
IMAGE_DOS_HEADER
PhysicalAddress
VirtualSize
_IMAGE_SECTION_HEADER
VirtualAddress
SizeOfRawData
PointerToRawData
PointerToRelocations
PointerToLinenumbers
NumberOfRelocations
NumberOfLinenumbers
Characteristics
PIMAGE_SECTION_HEADER
-tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
._iobuf
_charbuf
_bufsiz
_tmpfname
__RUNTIME_PSEUDO_RELOC_LIST__
__RUNTIME_PSEUDO_RELOC_LIST_END__
__ImageBase
addend
target
runtime_pseudo_reloc_item_v1
target
runtime_pseudo_reloc_item_v2
magic1
magic2
version
runtime_pseudo_reloc_v2
old_protect
base_address
region_size
sec_start
the_secs
maxSections
GetLastError
VirtualProtect
VirtualQuery
_GetPEImageBase
__mingw_GetSectionForAddress
memcpy
1abort
(2vfprintf
__acrt_iob_func
__mingw_GetSectionCount
3_pei386_runtime_relocator
4was_init
5mSecs
#do_pseudo_reloc
addr_imp
reldata
reloc_target
v2_hdr
newval
max_unsigned
min_signed
#__write_memory
<restore_modified_sections
%oldprot
=mark_section_writable
new_protect
?__report_error
Afwrite
__builtin_fwrite
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
double
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
long double
_exception
retval
fUserMathErr
stUserMathErr
__setusermatherr
__mingw_setusermatherr
__mingw_raise_matherr
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_fmode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
_EXCEPTION_RECORD
ExceptionCode
ExceptionFlags
ExceptionAddress
NumberParameters
ExceptionInformation
_CONTEXT
P1Home
P2Home
P3Home
P4Home
P5Home
P6Home
ContextFlags
EFlags
VectorRegister
VectorControl
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
signed char
short int
ULONG_PTR
DWORD64
LONGLONG
ULONGLONG
_M128A
long double
double
_Float16
__bf16
_XMM_SAVE_AREA32
ControlWord
StatusWord
TagWord
Reserved1
ErrorOpcode
ErrorOffset
ErrorSelector
Reserved2
DataOffset
DataSelector
Reserved3
MxCsr_Mask
FloatRegisters
XmmRegisters
Reserved4
XMM_SAVE_AREA32
Header
Legacy
FltSave
FloatSave
PCONTEXT
EXCEPTION_RECORD
PEXCEPTION_RECORD
_EXCEPTION_POINTERS
ContextRecord
EXCEPTION_POINTERS
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
PTOP_LEVEL_EXCEPTION_FILTER
LPTOP_LEVEL_EXCEPTION_FILTER
"tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
__p_sig_fn_t
#__mingw_oldexcpt_handler
$_fpreset
%signal
&_gnu_exception_handler
'exception_data
old_handler
action
reset_fpu
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
size_t
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPVOID
signed char
short int
ULONG_PTR
HANDLE
_LIST_ENTRY
LIST_ENTRY
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
_RTL_CRITICAL_SECTION_DEBUG
CreatorBackTraceIndex
CriticalSection
ProcessLocksList
EntryCount
ContentionCount
CreatorBackTraceIndexHigh
SpareWORD
_RTL_CRITICAL_SECTION
DebugInfo
LockCount
RecursionCount
OwningThread
LockSemaphore
SpinCount
PRTL_CRITICAL_SECTION_DEBUG
RTL_CRITICAL_SECTION
PRTL_CRITICAL_SECTION
CRITICAL_SECTION
LPCRITICAL_SECTION
__mingwthr_cs
__mingwthr_cs_init
__mingwthr_key_t
__mingwthr_key
key_dtor_list
GetLastError
TlsGetValue
_fpreset
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
calloc
__mingw_TLScallback
hDllHandle
reason
reserved
$__mingwthr_run_key_dtors
___w64_mingwthr_remove_key_dtor
prev_key
cur_key
___w64_mingwthr_add_key_dtor
new_key
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_CRT_MT
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__RUNTIME_PSEUDO_RELOC_LIST_END__
__RUNTIME_PSEUDO_RELOC_LIST__
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
size_t
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPVOID
signed char
short int
ULONG_PTR
DWORD_PTR
ULONGLONG
long double
double
_Float16
__bf16
_IMAGE_DOS_HEADER
e_magic
e_cblp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_csum
e_lfarlc
e_ovno
e_oemid
e_oeminfo
e_res2
e_lfanew
IMAGE_DOS_HEADER
PIMAGE_DOS_HEADER
_IMAGE_FILE_HEADER
Machine
NumberOfSections
PointerToSymbolTable
NumberOfSymbols
SizeOfOptionalHeader
IMAGE_FILE_HEADER
_IMAGE_DATA_DIRECTORY
IMAGE_DATA_DIRECTORY
_IMAGE_OPTIONAL_HEADER64
MajorLinkerVersion
MinorLinkerVersion
SizeOfCode
SizeOfInitializedData
SizeOfUninitializedData
AddressOfEntryPoint
BaseOfCode
ImageBase
SectionAlignment
FileAlignment
MajorOperatingSystemVersion
MinorOperatingSystemVersion
MajorImageVersion
MinorImageVersion
MajorSubsystemVersion
MinorSubsystemVersion
Win32VersionValue
SizeOfImage
SizeOfHeaders
CheckSum
Subsystem
DllCharacteristics
SizeOfStackReserve
SizeOfStackCommit
SizeOfHeapReserve
SizeOfHeapCommit
LoaderFlags
NumberOfRvaAndSizes
DataDirectory
IMAGE_OPTIONAL_HEADER64
PIMAGE_OPTIONAL_HEADER64
PIMAGE_OPTIONAL_HEADER
"_IMAGE_NT_HEADERS64
Signature
FileHeader
OptionalHeader
PIMAGE_NT_HEADERS64
PIMAGE_NT_HEADERS
PhysicalAddress
VirtualSize
_IMAGE_SECTION_HEADER
SizeOfRawData
PointerToRawData
PointerToRelocations
PointerToLinenumbers
NumberOfRelocations
NumberOfLinenumbers
PIMAGE_SECTION_HEADER
OriginalFirstThunk
_IMAGE_IMPORT_DESCRIPTOR
ForwarderChain
FirstThunk
IMAGE_IMPORT_DESCRIPTOR
PIMAGE_IMPORT_DESCRIPTOR
%__ImageBase
strncmp
strlen
__mingw_enum_import_library_names
importDesc
importsStartRVA
_IsNonwritableInCurrentImage
pTarget
rvaTarget
_GetPEImageBase
_FindPESectionExec
__mingw_GetSectionCount
__mingw_GetSectionForAddress
_FindPESectionByName
_FindPESection
_ValidateImageBase
pDOSHeader
pOptHeader
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_MINGW_INSTALL_DEBUG_MATHERR
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__gnuc_va_list
__builtin_va_list
va_list
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
_iobuf
_charbuf
_bufsiz
_tmpfname
_unlock_file
__mingw_pformat
_lock_file
__mingw_vfprintf
stream
retval
;GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__gnuc_va_list
__builtin_va_list
va_list
size_t
long long unsigned int
long long int
wchar_t
short unsigned int
long int
unsigned int
long unsigned int
$lconv
decimal_point
thousands_sep
grouping
int_curr_symbol
currency_symbol
mon_decimal_point
mon_thousands_sep
mon_grouping
positive_sign
negative_sign
int_frac_digits
frac_digits
p_cs_precedes
p_sep_by_space
n_cs_precedes
n_sep_by_space
p_sign_posn
n_sign_posn
_W_decimal_point
_W_thousands_sep
_W_int_curr_symbol
_W_currency_symbol
_W_mon_decimal_point
_W_mon_thousands_sep
_W_positive_sign
_W_negative_sign
unsigned char
$_iobuf
_charbuf
_bufsiz
_tmpfname
long double
signed char
short int
int32_t
uint32_t
int64_t
double
_Wchar
_State
.mbstate_t
0sign_exponent
@0res1
P0res0
$__tI128
digits
__tI128
digits32
@__uI128
t128_2
__uI128
__pformat_long_t
__pformat_llong_t
__pformat_ulong_t
__pformat_ullong_t
__pformat_ushort_t
__pformat_uchar_t
__pformat_short_t
__pformat_char_t
__pformat_ptr_t
__pformat_u128_t
__pformat_intarg_t
PFORMAT_INIT
PFORMAT_SET_WIDTH
PFORMAT_GET_PRECISION
PFORMAT_SET_PRECISION
PFORMAT_END
__pformat_state_t
PFORMAT_LENGTH_INT
PFORMAT_LENGTH_SHORT
PFORMAT_LENGTH_LONG
PFORMAT_LENGTH_LLONG
PFORMAT_LENGTH_LLONG128
PFORMAT_LENGTH_CHAR
__pformat_length_t
thousands_chr_len
thousands_chr
expmin
.__pformat_t
STRTOG_Zero
STRTOG_Normal
STRTOG_Denormal
STRTOG_Infinite
STRTOG_NaN
STRTOG_NaNbits
STRTOG_NoNumber
STRTOG_Retmask
STRTOG_Neg
STRTOG_Inexlo
STRTOG_Inexhi
STRTOG_Inexact
STRTOG_Underflow
STRTOG_Overflow
rounding
sudden_underflow
int_max
FPI_Round_zero
FPI_Round_near
FPI_Round_up
FPI_Round_down
__pformat_fpreg_mantissa
__pformat_fpreg_exponent
&__pformat_fpreg_double_t
&__pformat_fpreg_ldouble_t
&__pformat_fpreg_bitmap
&__pformat_fpreg_bits
.__pformat_fpreg_t
1fputc
__gdtoa
F__freedtoa
strlen
strnlen
wcslen
wcsnlen
1wcrtomb
1mbrtowc
6localeconv
memset
strerror
6_errno
G__mingw_pformat
saved_errno
Hformat_scan
argval
length
backtrack
width_spec
iargval
cstate
__pformat_xdouble
shifted
__pformat_xldouble
__pformat_emit_xfloat
min_width
exponent2
__pformat_gfloat
__pformat_efloat
__pformat_float
__pformat_emit_efloat
__pformat_emit_float
__pformat_emit_inf_or_nan
__pformat_emit_numeric_value
__pformat_emit_radix_point
)__pformat_fcvt
)__pformat_ecvt
N__pformat_cvt
)init_fpreg_ldouble
topbit
signbit
__pformat_xint
bufflen
__pformat_int
bufflen
)__pformat_int_bufsiz
__pformat_wcputs
__pformat_wputchars
__pformat_puts
__pformat_putchars
__pformat_putc
*__isnanl
signexp
*__isnan
*__fpclassify
*__fpclassifyl
Pmemset
__builtin_memset
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
long double
double
maxwds
__cmp_D2A
__Bfree_D2A
__Balloc_D2A
__quorem_D2A
borrow
__freedtoa
__nrv_alloc_D2A
__rv_alloc_D2A
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
size_t
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
long double
STRTOG_Zero
STRTOG_Normal
STRTOG_Denormal
STRTOG_Infinite
STRTOG_NaN
STRTOG_NaNbits
STRTOG_NoNumber
STRTOG_Retmask
STRTOG_Neg
STRTOG_Inexlo
STRTOG_Inexhi
STRTOG_Inexact
STRTOG_Underflow
STRTOG_Overflow
rounding
sudden_underflow
int_max
double
_dbl_union
maxwds
__bigtens_D2A
__tens_D2A
__diff_D2A
__quorem_D2A
"memcpy
__Balloc_D2A
__multadd_D2A
__cmp_D2A
__lshift_D2A
__mult_D2A
__pow5mult_D2A
__i2b_D2A
__rv_alloc_D2A
__b2d_D2A
__Bfree_D2A
__rshift_D2A
__trailz_D2A
__nrv_alloc_D2A
%__gdtoa
ndigits
k_check
leftright
spec_case
try_quick
'ret_zero
fast_failed
one_digit
no_digits
bump_up
small_ilim
round_9_up
accept
roundoff
chopzeros
.bitstob
0__hi0bits_D2A
2memcpy
__builtin_memcpy
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
long double
double
maxwds
__trailz_D2A
__rshift_D2A
__lo0bits_D2A
.GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
double
size_t
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.C2.m!c
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Ghanarava.1745570070e5da34
Skyhigh BehavesLike.Win64.Generic.gh
ALYac Trojan.Generic.37731484
Cylance Unsafe
Zillya Trojan.GenKryptik.Win64.49856
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (W)
Alibaba Backdoor:Win64/GenKryptik.939179e5
K7GW Trojan ( 005bc3c51 )
K7AntiVirus Trojan ( 005bc3c51 )
huorong Trojan/Generic!260ABA5D5C6E9414
Baidu Clean
VirIT Trojan.Win64.Genus.HWY
Paloalto generic.ml
Symantec Trojan.Gen.MBT
tehtris Clean
ESET-NOD32 a variant of Win64/GenKryptik.HAWI
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky Backdoor.Win64.C2.jn
BitDefender Trojan.Generic.37731484
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Trojan.Generic.37731484
Tencent Malware.Win32.Gencirc.10c35e7c
Sophos Mal/Generic-S
F-Secure Trojan.TR/Crypt.Agent.wnvzv
DrWeb BackDoor.Havoc.16
VIPRE Trojan.Generic.37731484
TrendMicro Clean
McAfeeD ti!BC61C830AE2C
Trapmine Clean
CTX exe.trojan.generic
Emsisoft Trojan.Generic.37731484 (B)
Ikarus Trojan.Win64.Reverseshell
GData Trojan.Generic.37731484
Jiangmin Clean
Webroot Clean
Varist W64/ABApplication.FMAG-2750
Avira TR/Crypt.Agent.wnvzv
Antiy-AVL Trojan[Backdoor]/Win64.C2
Kingsoft Clean
Gridinsoft Susp.U.XOREncoded.sd!yf
Xcitium Clean
Arcabit Trojan.Generic.D23FBC9C
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win32/Etset!rfn
Google Detected
AhnLab-V3 Trojan/Win.Evo-gen.C5746294
Acronis Clean
McAfee Artemis!ACBDE00860CE
TACHYON Clean
VBA32 Backdoor.Win64.C
Malwarebytes Trojan.Crypt
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H09D125
Rising Trojan.Kryptik!8.8 (CLOUD)
Yandex Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Trojan.Malware.338743124.susgen
Fortinet W64/GenKryptik.HAWI!tr
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Backdoor:Win/C2.jl
No IRMA results available.