Sample details: 08dcccd144f15dcf59c00bf659123e02 --

Hashes
MD5: 08dcccd144f15dcf59c00bf659123e02
SHA1: ff2f8bd435e4234e8ecbebd374bffc9fc4a397f3
SHA256: 43052d5dea06f2c34c36ddb5fcbb7fd593f3c64d41693d06dd49d793b142b5f0
SSDEEP: 24576:MbhXmHfTiy5CrBwIQhywYtvoQvfA77Up:M4HfTp5CrBwIQhyVJfAM
Details
File Type: PE32+
Yara Hits
YRP/Microsoft_Visual_Cpp_80 | YRP/Microsoft_Visual_Cpp_80_DLL | YRP/IsPE64 | YRP/IsWindowsGUI | YRP/HasDebugData | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/System_Tools | YRP/Dropper_Strings | YRP/DebuggerCheck__QueryInfo | YRP/anti_dbg | YRP/inject_thread | YRP/network_http | YRP/network_dga | YRP/escalate_priv | YRP/screenshot | YRP/keylogger | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/win_hook | YRP/Big_Numbers1 | YRP/Big_Numbers3 | YRP/Advapi_Hash_API | YRP/CRC32_poly_Constant | YRP/CRC32_table | YRP/RIPEMD160_Constants | YRP/SHA1_Constants | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API | YRP/Str_Win32_Http_API | YRP/GlassesCode | YRP/Glasses |
Strings
		!This program cannot be run in DOS mode.
sYxyrX;
sYkvwX8
sYkvpX:
sYVzpX8
sYVzvX4
sYxyvX2
sY_vpX8
sY_vwX1
sY_vvX-
sYkvvX>
sYVzwX
sYVzuX;
sYVzrX<
sY_vzX0
sY_vsX8
sY_vqX8
sYRich9
`.rdata
@.data
.pdata
@.rsrc
UAVAWH
UAUAVH
H UWATAUAVH
A^A]A\_]
UATAUAVAWH
D<@fD9 t}I
A_A^A]A\]
H UWAUAVAWH
fD9/t/H
A_A^A]_]
UVWATAUAVAWH
 A_A^A]A\_^]
L$ UWATAUAVH
A^A]A\_]
WATAWH
0A_A\_
UAVAWH
UVWAVAWH
A_A^_^]
@USVWAVAWH
A_A^_^[]
L$ USVWATAUAVAWH
A_A^A]A\_^[]
D#D$hA
f9+tVH
u_9oxu
L$ UVWATAUAVAWH
A_A^A]A\_^]
@USVWAUAVAWH
PA_A^A]_^[]
UAUAVH
UAUAVH
x ATAVAWH
A_A^A\
USVWAUAVAWH
A_A^A]_^[]
UVWATAUAVAWH
D9?u%H
A_A^A]A\_^]
USVWATAUAVAWH
A_A^A]A\_^[]
WATAVH
 A^A\_
@USVWATAVH
A^A\_^[]
WAVAWH
 A_A^_
@SVWAWH
8A__^[
UVWAVAWH
@A_A^_^]
tJL93t
t]L93t
0D95EA
UVWATAUAVAWH
 A_A^A]A\_^]
VWATAVAWH
0A_A^A\_^
tkL9?t
USVWATAUAVAWH
tYL9#t
A_A^A]A\_^[]
UATAUAVAWH
A_A^A]A\]
D9uhu;H
USVWATAUAVAWH
T$XH9T$`t
T$XH9T$`t
T$XH9T$`u
tFL9/t
A_A^A]A\_^[]
USVWATAUAVAWH
p`M9t$
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAVAWH
H9t$Pt
H9t$Pt
A_A^A\_^[]
UVWATAUAVAWH
}@fD9.
@A_A^A]A\_^]
WAVAWH
@USVWATAVH
A^A\_^[]
\$ UVWAVAWH
A_A^_^]
@USVWAVAWH
A_A^_^[]
UVWATAUAVAWH
D9d$pu
A_A^A]A\_^]
UATAUAVAWH
IcD$dHi
A_A^A]A\]
UVWATAUAVAWH
D$@HcH
A_A^A]A\_^]
|$ UAVAWH
L$ UWAVH
@USVWAVH
pA^_^[]
WAVAWH
!D$(E3
@A_A^_
UVWAVAWH
W\fC9TJ
A_A^_^]
fD9|$`teL
UVWAVAWH
W\fC9TA
A_A^_^]
|$L.u 
fD9|$P
\$ UWAVH
UWATAVAWH
A_A^A\_]
USVWATAVAWH
0A_A^A\_^[]
UVWATAUAVAWH
0A_A^A]A\_^]
UWAUAVAWH
A_A^A]_]
UVWAVAWH
D8}0u	A
pA_A^_^]
UVWAUAVH
`A^A]_^]
UWATAVAWH
A_A^A\_]
UVWATAUAVAWH
A_A^A]A\_^]
gfffffffH+
gfffffffH+K
L$0H9{
UATAUAVAWH
_ H9_(tDH
A_A^A]A\]
UVWATAUAVAWH
gfffffffI+
gfffffffM
0A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
m@B;|(H
Jc|(HIcA
D$@=@M23
A_A^A]A\_^]
VWAUAVAWH
0A_A^A]_^
McIHLcD
H UWAWH
h VWAVH
I(f9l$Pu
VAVAWH
 A_A^^
u#H9X s
tYf9/tTE3
\$pHcC
UVWATAUAVAWH
\$HHcK
A_A^A]A\_^]
UATAUAVAWH
A_A^A]A\]
UAVAWH
` UAVAWH
` UAVAWH
` UAVAWH
` UAVAWH
UAVAWH
UAVAWH
UAVAWH
UAVAWH
x UATAUAVAWH
A_A^A]A\]
tlf92tg
UVWATAUAVAWH
\$@HcK
D$PD96
H!L$XH
H!L$xH
A_A^A]A\_^]
` UAVAWH
UAVAWH
UAVAWH
UAVAWH
UVWATAUAVAWH
H)D$xE3
D$xH;E
A_A^A]A\_^]
UAVAWH
UAVAWH
UATAUAVAWH
o\fD9lH
A_A^A]A\]
L$ UVWATAUAVAWH
L+|$hI
$HiL$X
	HiL$X
t$pLch
A_A^A]A\_^]
UVWATAUAVAWH
}$.ujf
}&.uc3
A_A^A]A\_^]
D$hf98tCH
;O s7H
G0H9G8t
UWATAVAWH
EPD9eT
EXD9e\
A_A^A\_]
UVWATAUAVAWH
A0H+A(H
C0H+C(H
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
WAVAWH
tQL93t
tPL97t
tPL93t
tOL93t
UATAUAVAWH
D$8Hcp
A_A^A]A\]
UVWAVAWH
A_A^_^]
UATAUAVAWH
A_A^A]A\]
UAVAWH
H9D$0s
H9D$0r
UVWAVAWH
fD9|$ptUL
A_A^_^]
fD9|$ptrL
UVWATAUAVAWH
V\fA9TH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
H!L$@A
H!L$@H
H!L$@H
t$hLcn
H!L$@H
H!L$@H
@USVWAUAVAWH
`A_A^A]_^[]
UATAUAVAWH
AL!t$0H
H9D$0r
A_A^A]A\]
UVWAVAWH
0A_A^_^]
UVWATAUAVAWH
|$0Hcw
A_A^A]A\_^]
UAVAWH
UWAUAVAWH
@A_A^A]_]
UVWATAUAVAWH
\$0HcC
W\f9TC
\$0HcG
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
tVH93t
tMH93t
D$`H+D$XH
H+D$XH
H+L$XI
D$`H+D$XH
tmH97t
\$0Hcs
@USVWATAVAWH
A_A^A\_^[]
@USVWATAVAWH
A_A^A\_^[]
WAVAWH
WAVAWH
@USVWAVH
0A^_^[]
UAVAWH
USVWATAUAVAWH
P8D8egH
A_A^A]A\_^[]
UAVAWH
UVWAVAWH
A_A^_^]
UVWATAUAVAWH
A_A^A]A\_^]
3333D3
%UUUU3
%33333
3333D3
%UUUU3
%33333
UWAUAVAWH
A_A^A]_]
UVWATAUAVAWH
H!L$`H
A_A^A]A\_^]
UVWAVAWH
PA_A^_^]
D$PHcP
WAVAWH
 A_A^_
SUVWATAUAVAW
fE9)u\I
)L;T$8
H+t$pE
A_A^A]A\_^][
L$ UVWATAUAVAWH
 A_A^A]A\_^]
WAVAWH
PA_A^_
t$ WATAUAVAWH
E9n(t	I
 A_A^A]A\_
@USWAUAVAWH
A_A^A]_[]
A_A^A]_[]
USVWATAUAVH
H;G s0H
A^A]A\_^[]
USWATAVAWH
L9|$ht
\$8Lcs
T$pH;U
A_A^A\_[]
\$PHck
\$ AUAVAWH
pA_A^A]
t$ WATAUAVAWH
A_A^A]A\_
@SUVWAVH
@A^_^][
@A^_^][
@A^_^][
@A^_^][
USVWATH
A\_^[]
A\_^[]
|$@Hc_
@USVAUAWH
A_A]^[]
A_A]^[]
@SWAVH
\$h@8t$pt\I
@USAVAWH
A_A^[]
\$0Hc{
A_A^[]
\$0Hc{
SWATAVAWH
PA_A^A\_[
SWATAVAWH
PA_A^A\_[
@SVWATAUH
@A]A\_^[
@A]A\_^[
@A]A\_^[
@SUVWAVH
@A^_^][
@SUVWAVH
PA^_^][
VWATAVAWH
@A_A^A\_^
UWATAVAWH
`A_A^A\_]
UVWAVAWH
@A_A^_^]
@A_A^_^]
@SVAVH
UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
 A_A^_
USVWATAUAVAWH
A_A^A]A\_^[]
|$ AVH
\$ H9Q
|$ AVH
@VWAVH
USVWAUAWH
A_A]_^[]
A_A]_^[]
A_A]_^[]
SUVWATAUAVAWH
HA_A^A]A\_^][
P(D9|$hH
USVWATAUAVAWH
hA_A^A]A\_^[]
UVWAVAWH
LcL$pH
@A_A^_^]
@USVWAUH
A]_^[]
A]_^[]
A]_^[]
A]_^[]
\$PHcp
|$ ATAVAWH
 A_A^A\
gfffffffH
USAUAWH
A_A][]
t$ WAVAWH
t$ WAVAWH
0A_A^_
WATAUAVAWH
A_A^A]A\_
UATAUAWH
A_A]A\]
G0I9G(
A_A]A\]
@WATAUAVAWH
 A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
L$H9H s
;K s5H
L$H9H s
;K s5H
@UATAUAVAWH
H+L$8H
A_A^A]A\]
;C s7H
;K s7H
UVATAUH
|$8H9|$@t
H+L$PH
D$0fff
A]A\^]
WAVAWH
SVWATAUAVAWH
](I;]0
\$PH9\$Xt)I
gfffffffH
A_A^A]A\_^[
\$`Hck
A0H9A(taH
WAVAWH
0A_A^_
@UVWATAUAVH
A^A]A\_^]
|$ AVH
\$@HcC
|$ AVH
UVATAUH
A]A\^]
A]A\^]
A]A\^]
t$ AWH
L$0HcQ
|$ AVH
@UATAWH
PA_A\]
PA_A\]
fD9/tl
fD9+te
fD9+tdH
fD9+tdH
UVWATAUAVAWH
PA_A^A]A\_^]
H9D$`u
l$ VWAVH
D$`H9Q
VWATAVAWH
@A_A^A\_^
|$8H9Q
VWATAVAWH
@A_A^A\_^
L$ USWATAUAVAWH
A_A^A]A\_[]
UATAUAVAWH
A_A^A]A\]
UWAUAWH
A_A]_]
@USVWAVAWH
A_A^_^[]
USVWATAUAVAWH
A_A^A]A\_^[]
@UVAVAWH
A_A^^]
A_A^^]
USVWAUAVAWH
A_A^A]_^[]
<CtJ<Wt
<ctB<w
\$ UWATAUAVH
t~fE9,$twH
A^A]A\_]
USVWATAUAVAWH
A_A^A]A\_^[]
@WATAWH
`A_A\_
|$l.u 
@USVATAUH
A]A\^[]
A]A\^[]
|$ AVH
t$ AWH
|$ AVH
t$ AWH
|$ AUAVAWH
A_A^A]
VWATAVAWH
`0L9f t
0A_A^A\_^
SATAUAVH
KH;\$0
hA^A]A\[
hA^A]A\[
|$ ATAVAWH
 A_A^A\
WAVAWH
 A_A^_
|$ AVH
D$(H9D$ t
I98u*A
\$ AVH
SUWAWH
(A__][
(A__][
t$ AWH
t$ AWH
t$ AWH
WAVAWH
 A_A^_
t$ AWH
I9:u*A
@UWAVH
UVWATAUAVAWH
 A_A^A]A\_^]
s WAVAWH
H9K@t'H
WAVAWH
 A_A^_
WAVAWH
 A_A^_
UVWATAUAVAWH
@A_A^A]A\_^]
SUVWAVH
 A^_^][
UAUAWH
w(HcMgH
|$ AVH
WATAUAVAWH
0A_A^A]A\_
@WATAUAVAWH
0A_A^A]A\_
SVWATAUAVAWH
A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
SVWATAUAVAWH
A_A^A]A\_^[
@SVWATAUAVAWH
pA_A^A]A\_^[
@SVWATAUAVAWH
pA_A^A]A\_^[
@SVWATAUAVAWH
gfffffffI
fffffff
gfffffffH
A_A^A]A\_^[
@WATAUAVAWH
0A_A^A]A\_
SVWATAUAVAWH
gfffffffI
3333333
gfffffffH
PA_A^A]A\_^[
@SVWATAUAVAWH
PA_A^A]A\_^[
@WATAUAVAWH
UUUUUUU
0A_A^A]A\_
@WATAUAVAWH
0A_A^A]A\_
SVWATAUAVAWH
A_A^A]A\_^[
WAVAWH
 A_A^_
ATAVAWH
 A_A^A\
WAVAWH
@A_A^_
UUUUUUU
WAVAWH
 A_A^_
ATAVAWH
$H;8u6
@A_A^A\
H9H s.
ATAVAWH
$H;8u3
@A_A^A\
l$ VWAVH
ATAVAWH
$H;8u6
@A_A^A\
ATAVAWH
$H;8u6
@A_A^A\
WAVAWH
@A_A^_
|$ ATAVAWH
UUUUUUU
 A_A^A\
effffff
effffff
effffff
ATAVAWH
$H;0u3H
A_A^A\
effffff
TUUUUUU
WATAUAVAWH
L;0u8H
A_A^A]A\_
WATAUAVAWH
$H;0u+L
A_A^A]A\_
t&H93t!H
2333333
2333333
A9Q s@I
A9Q s@I
H;8uDI
I9Q s@I
H;8ucI
H;8ucI
A9Q s@I
A9Q }@I
H;8uDI
VWATAVAWH
0A_A^A\_^
TUUUUUU
9C s&H
9C s%H
2333333
WATAUAVAWH
H;8u8H
A_A^A]A\_
H9C s&H
@WATAUAVAWH
L;0u3H
@A_A^A]A\_
9C s#H
9C }&H
TUUUUUU
WATAUAVAWH
H;8u8H
A_A^A]A\_
VWATAVAWH
0A_A^A\_^
{ UAVAWH
E H9K@t'H
Y@H9;u%L
ATAVAWH
$H;8u5
K H9C0sUD
@A_A^A\
UWATAVAWH
A_A^A\_]
WATAUAVAWH
%L9g`u9
 A_A^A]A\_
x AUAVAWH
 A_A^A]
VWATAVAWH
<atj<gtT<lt7<q
tu{A8Z
tubA8Z
tuIA8Z
pu/A8Z
 A_A^A\_^
|$ UATAUAVAWH
<atq<gtZ<lt<<q
<atq<gtZ<lt<<q
 A_A^A]A\]
t_<<uTH
H SUVWH
WAVAWH
 A_A^_
H!AHH9Aht
WATAUAVAWH
 A_A^A]A\_
WATAUAVAWH
f90uTH
 A_A^A]A\_
f90t}H
f90t{f
f90t%H
L$8f99tVf
H SUVWATAVAWH
 A_A^A\_^][
WATAUAVAWH
%L9g`u:
 A_A^A]A\_
WAVAWH
 A_A^_
WATAUAVAWH
 A_A^A]A\_
WAVAWH
 A_A^_
tjf9+te
WATAUAVAWH
 Lct$pE3
 A_A^A]A\_
WAVAWH
 A_A^_
t$ UWAVH
f90uTL
t$ WATAUAVAWH
A_A^A]A\_
x AUAVAWH
 A_A^A]
x ATAVAWH
 A_A^A\
x ATAVAWH
 A_A^A\
WATAUAVAWH
fG9$qu6@
 A_A^A]A\_
USVWATAUAVAWH
~xL9nHu
A_A^A]A\_^[]
WAVAWH
 A_A^_
ATAVAWH
 A_A^A\
WAVAWH
 A_A^_
USVWAUAVAWH
@A_A^A]_^[]
UVWATAUAVAWH
A_A^A]A\_^]
tRH97t
]wI9t$
VWAUAVAWH
0A_A^A]_^
UVWATAUAVAWH
@A_A^A]A\_^]
t$ WAVAWH
 A_A^_
tUL9?t
UATAUAVAWH
H!L$8H
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
USVWATAUAVAWH
\$@D9r
;fD9#v
\$@HcC
D$HHcH
A_A^A]A\_^[]
UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
0A_A^A]A\_^]
UVWAVAWH
0A_A^_^]
UWAUAVAWH
A_A^A]_]
USVWATAUAVAWH
A_A^A]A\_^[]
fD9'tuH
|$pfE9'
L9t$xuc
UVWATAVH
@A^A\_^]
tCL9#t
t$ WAVAWH
0A_A^_
UVWAVAWH
PA_A^_^]
UVWAVAWH
0A_A^_^]
UWATAVAWH
A_A^A\_]
t@L9&t
UATAUAVAWH
4FfA9>t
4vfA9>t
A_A^A]A\]
9;u*H;
UAVAWH
8;uFH;
0A_A^]
UVWATAUAVAWH
D$0HcH
\$0HcC
;"u5HcK
fD98t:A
H!L$8H
A_A^A]A\_^]
\$xHcC
|$ AVH
|$ AVH
@WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
H;8u5H
A_A^A]A\_
H;8uDI
H;8uDI
H;8uDI
WATAUAVAWH
H;8u5H
A_A^A]A\_
TUUUUUU
WATAUAVAWH
H;8u5H
A_A^A]A\_
VWATAVAWH
0A_A^A\_^
USVWATAUAVAWH
tUL9;t
hA_A^A]A\_^[]
WAVAWH
UVWAVAWH
`A_A^_^]
WATAUAVAWH
W(9uXt
hubf9G
 A_A^A]A\_
USVWATAUAVAWH
H!L$0H
H!L$0H
H!L$0H
H!L$0H
D$Hf9q
;D$Hu"I
H!L$0H
A_A^A]A\_^[]
UAVAWH
UWATAVAWH
A_A^A\_]
f9.t&H
UVWATAUAVAWH
A_A^A]A\_^]
UVWAVAWH
PA_A^_^]
UVWATAUAVAWH
H!L$HH
H!L$HH
H!L$`H
H!L$XH
A_A^A]A\_^]
|$ UATAUAVAWH
}@fD9'
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
@SVWATAUAVAWH
A_A^A]A\_^[
@USVWAVH
A^_^[]
VWATAVAWH
0A_A^A\_^
x ATAVAWH
~@H9FXu
 A_A^A\
WATAUAVAWH
i,L;IPs
CHH+C@L
CPH;C@
k,L;KPs
L;KHu$H
CPH;C@t
KXL9KPt
0A_A^A]A\_
USVWATAUAVAWH
]oL;iPs
L;nHu$H
F@H9FPt
MgL;nHu$H;V@t
]oL;nPs
nXL9nPt8D
A_A^A]A\_^[]
USVWATAUAVAWH
A_A^A]A\_^[]
SUVWATAUAVAWH
W,L;OPs
H;W@spH
GHH+G@H
OXA_A^A]A\_^][
I@H9{8u
@USVWATAVAWH
A_A^A\_^[]
@USVWAVH
A^_^[]
|$ UAVAWH
@USVWAUAVH
C89E8t
C<9E8t
C@9E8t
8A^A]_^[]
@8.t^H
UVWATAUAVAWH
N`A)N|M
 A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
t.f91t)H
t$ WATAUAVAWH
H+D$PH
 A_A^A]A\_
UVWAVAWH
A_A^_^]
UVWATAUAVAWH
A_A^A]A\_^]
H UATAUAVAWH
L$HIcA
H9T$`t
H9T$`t
\$XH+\$PH
L9d$Hu
A_A^A]A\]
u HcD$@
UAVAWH
[fB9lA
t)f9.H
UAVAWH
x ATAVAWH
 A_A^A\
t$ UWAVH
D$( @ 
D$( @ 
@USVWAVH
A^_^[]
f9|$PtzL
u HcD$h
@USVWAWH
pA__^[]
UWATAVAWI
A_A^A\_]
WAVAWH
0A_A^_
x ATAVAWH
 A_A^A\
x ATAVAWH
 A_A^A\
H UATAUAVAWH
A_A^A]A\]
H!t$@I
H!t$ L
x ATAVAWH
 A_A^A\
6H9D$0rQ
VWATAVAWH
H;K s8H
0A_A^A\_^
Q0H;Q w
WAVAWH
 A_A^_
` UAVAWH
WATAUAVAWH
0A_A^A]A\_
,9{0t$H
,9{0t$H
WATAWH
 A_A\_
x ATAVAWH
 A_A^A\
WATAUAVAWH
 A_A^A]A\_
x ATAVAWH
 A_A^A\
SUVATAUAVAWH
/fE9\m
D$`fG9\e
 A_A^A]A\^][
SUVWATAUAVAWH
uGf9E uAf9E0u;f9E@u5f9EPu/
A_A^A]A\_^][
@SUVATAUAVAWH
A_A^A]A\^][
WATAUAVAWH
 A_A^A]A\_
UVWATAUAVAWH
+9^0t$H
pA_A^A]A\_^]
WATAUAVAWH
 A_A^A]A\_
~,LcD$(L
x ATAVAWHc\$@E3
Lct$HL
|$8A_A^A\
SUVWATAUAVAWH
A_A^A]A\_^][
WAVAWH
D!t$ A
+y +A B
x AUAVAWH
H;w(r!E
H+G H;
 A_A^A]
` UAVAWH
WAVAWH
 A_A^_
UVWATAUAVAWH
LcT$$D
pA_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
 A_A^_
USVWATAUAVAWH
=SNRtt
Lc|$DH
A_A^A]A\_^[]
xHcD$L3
WAVAWH
SUVWATAUAVAWH
D9s0t$H
-D9s0t$H
|$ D9;
D9|$h~eE
A_A^A]A\_^][
WATAUAVAWH
 A_A^A]A\_
|$ UATAUAVAWH
D8m0uw
A_A^A]A\]
L$ UVWATAUAVAWH
tHL9o0uBH
G`L9o@udH
A_A^A]A\_^]
t+fD90t%H
WATAUAVAWH
 A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
fD9?tl
A_A^A]A\_^]
WAVAWH
0A_A^_
t$ WAVAWH
0A_A^_
SUVWATAUAVAWH
A_A^A]A\_^][
UVWATAUAVAWH
A_A^A]A\_^]
t]f9(tX9
UAVAWH
UWATAVAWH
A_A^A\_]
WAVAWH
ATAVAWH
D$<t&D
@A_A^A\
UAVAWH
@A_A^]
UVWAVAWH
 A_A^_^]
WATAUAVAWH
A_A^A]A\_
WAVAWH
 A_A^_
UATAUAVAWH
A_A^A]A\]
UATAUAVAWH
A_A^A]A\]
UATAUAVAWH
A_A^A]A\]
t08B!t+H9
UVWATAUAVAWH
\$Xt	L
A_A^A]A\_^]
D$@E94
USVWATAUAVAWH
A9>u|A9~
A+?A+>A+~
A_A^A]A\_^[]
UVWATAUAVAWH
]pL9c8
K8D9cPu
D9cLt7A
A_A^A]A\_^]
UAVAWH
UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
D+egE+
9Ek~XH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
USVWATAUAVAWH
8A_A^A]A\_^[]
UVWAVAWH
`A_A^_^]
UWATAVAWH
0A_A^A\_]
UVWATAUAVAWH
 A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
UVWAVAWH
 A_A^_^]
)T$ )T$(H
)D$$)D$,
WAVAWH
@A_A^_
x ATAVAWH
 A_A^A\
UVWATAUAVAWH
pA_A^A]A\_^]
USVWATAUAVAWH
A_A^A]A\_^[]
H UATAUAVAWH
A_A^A]A\]
WAVAWH
0A_A^_
UWATAVAWH
0A_A^A\_]
t$ UWAVH
WAVAWH
 A_A^_
WAVAWH
 A_A^_
UAVAWH
UAVAWH
WAVAWH
 A_A^_
WAVAWH
 A_A^_
x ATAVAWH
 A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
UWATAVAWH
fD9&t4
A_A^A\_]
UVWATAUAVAWH
L9Ihu8H;
0A_A^A]A\_^]
t$ WAVAWH
fD9>t9
@A_A^_
VWAUAVAWH
A_A^A]_^
WAVAWH
C@+CHA+
C<+CDA+
 A_A^_
UVWATAUAVAWH
9EH~)H
E+4$A+t$
pA_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
K H9k0s
W H;o0s
@WATAUAVAWH
0A_A^A]A\_
I9P vXM
I9Q s@I
TUUUUUU
H9C s$H
C0H+C(H
C0H9C8t
UATAUAVAWH
A_A^A]A\]
tRL93t
teL96t
L9p(uJH
@USVWATAUAVAWH
l$@L;d$P
L9/u2I
T$8H9T$@t
A_A^A]A\_^[]
D$Xt(H
@SUVWATAUAVAWH
XA_A^A]A\_^][
UVWATAUAVAWH
A_A^A]A\_^]
@USVWATAUAVAWH
t,H9t$@t
A_A^A]A\_^[]
UVWATAUAVAWH
PA_A^A]A\_^]
UWATAVAWH
A_A^A\_]
|$\.u 
fD9d$`
@USVWATAUAVAWH
H+t$@E3
A_A^A]A\_^[]
UVWAVAWH
A_A^_^]
9Q8u	H
9Q@u	H
UVWATAVH
A^A\_^]
UVWAVAWH
PA_A^_^]
UVWATAUAVAWH
0A_A^A]A\_^]
tCL93t
t$ UWAVH
\$4+\$<u
\$0+\$8H
@USVWATAVAWH
D9e@tXA
VTfD9"t7H
`A_A^A\_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
VWATAVAWH
0A_A^A\_^
@USVWATAVAWH
0A_A^A\_^[]
WAVAWH
 A_A^_
@USVWATAUAVAWH
XA_A^A]A\_^[]
@USVWH
x ATAVAWH
 A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
@USVWAVH
D$PH9T$0t
D$XH9T$0t
A^_^[]
@USVWATAUAVAWH
A_A^A]A\_^[]
\$ UVATAVAWH
9u0vkH
`A_A^A\^]
@USVWATAUAVAWH
XA_A^A]A\_^[]
@USVWATAUAVAWH
XA_A^A]A\_^[]
UVWATAUAVAWH
 A_A^A]A\_^]
USVWATAUAVAWH
T$8H9T$@t
T$8H9T$@t
A_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
USVWATAUAVAWH
tXfD9#tRH
8A_A^A]A\_^[]
@USVWATAVAWH
@A_A^A\_^[]
@USVWATAUAVAWH
fD9+tGH;
A_A^A]A\_^[]
UVWATAUAVAWH
PA_A^A]A\_^]
USVWATAVAWH
uPfE9&
t9L9't
PA_A^A\_^[]
@USVWATAVAWH
D$HL9x(
H;\$hu
t~L9?t
D9|$xu*H
A_A^A\_^[]
@USVWATAUAVAWH
t,H9t$Xt
A_A^A]A\_^[]
QH9}8u!H
P8H9\$$u	H
@USVWATAUAVAWH
hA_A^A]A\_^[]
SUVWATAUAVAWH
D$8L9p
xA_A^A]A\_^][
x ATAVAWH
 A_A^A\
VWATAVAWH
0A_A^A\_^
USVWATAUAVAWH
HA_A^A]A\_^[]
USVWATAVAWH
0A_A^A\_^[]
\$ UVWATAUAVAWH
PA_A^A]A\_^]
@USVWAWH
0A__^[]
x ATAVAWH
0A_A^A\
@USVWATAUAVAWH
XA_A^A]A\_^[]
|$ AVH
|$ UAVAWH
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
WAVAWH
 A_A^_
VWATAVAWH
H;8u2H
A_A^A\_^
H;8uDI
WATAUAVAWH
H;8u5H
A_A^A]A\_
UVWATAUAVAWH
0A_A^A]A\_^]
t 9l$Ht
WATAUAVAWH
 A_A^A]A\_
D$DDtRH
@USVWATAUAVAWH
t'HcG<
H;|80u
xA_A^A]A\_^[]
x	;^Xu&H
u3HcH<H
8H1D$0
H1D$0H
D$0H3L$0H3
\$ UVWH
IsWow64Process2
USER32.dll
GDI32.dll
COMDLG32.dll
ADVAPI32.dll
SHELL32.dll
Fole32.dll
OLEAUT32.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
atlthunk.dll
AtlThunk_AllocateData
AtlThunk_InitData
AtlThunk_DataToCode
AtlThunk_FreeData
SHLWAPI.dll
MSIMG32.dll
bad function call
gdiplus.dll
PSAPI.DLL
CBSHost.dll
WIMGAPI.DLL
USERENV.dll
Cabinet.dll
SETUPAPI.dll
api-ms-win-core-winrt-l1-1-0.dll
api-ms-win-core-winrt-string-l1-1-0.dll
FLTLIB.DLL
VSSAPI.DLL
msi.dll
WININET.dll
WTSAPI32.dll
CRYPT32.dll
VERSION.dll
SX[:N f
/f*N;N
N*N	gHe
GetDeltaInfoB
ApplyDeltaProvidedB
!jWW& & 
S_MRvQ
zI{& & 
ck(Wkb
ck(WgbL
zI{& & 
S	gpenc
vS_MR f
S_MR!j
S_MRlx
ck(W<h
ck(WxS}
DllGetClassObject
NativeDism.exe
B/nSY?
\gScpo-V~6
C3vCo+
X9Fe)A
HV@+Ig
fM/vM.l
U3'&P}m
Kw9X,}
c{N)q-
iX:yX]
nNp&	nN
w ;c=a
TTDX}V
<}lpz^
p(4V56
us*58y
NativeDism.exe
Qkkbal
TCPAu$
fSfSfU
fY[ZfYfY
A disk read error occurred
BOOTMGR is compressed
Press Ctrl+Alt+Del to restart
An operating system wasn't found. Try disconnecting any drives that don't
contain an operating system.
fSfPfQfVfW
f_f^fYf
fTfVgf
fPfPgf
fZfYfBfQfV
fYfZfQfVf
fRfQfRf
f`fPfQf3
fPfSfQf
fYf[fX
fSfRf+
fYfYf3
fPfVfXf^f;
fVf@fPfH
fZf^fYf[fSfQfVfRf
fYfYfYfY
fYfYf3
fYfZ&f9
fYfZf3
f3G f3G4f
fQfWfRf
fZf_fY
#*1892+$
%,3:;4-&
'.5<=6/7>????????????????
|8N$}$
r9&8-t
at2Nt	
BOOTMGR    
BOOTMGR is missing
Disk error
Press any key to restart
fXfXfXfX
BOOTMGR    
Disk error
Press any key to restart
An operating system wasn't found. Try disconnecting any drives that don't
contain an operating system.
TCPAu2
fSfSfUfh
Invalid partition table
Error loading operating system
Missing operating system
CABINET
vU_1Y%
WIMGetMountedImageHandle
WIMGetWIMBootWIMPath
Tv^1Y%
~X[(W 
l6R\O 
sources\lang.ini
lck8^xS}
IsInboxPackage
index.xml
OfflineSyncPackage/Updates
IsBundle
Categories
Product
UpdateId
OfflineSyncPackage/FileLocations
package%u.cab
assembly
assemblyIdentity
publicKeyToken
processorArchitecture
language
neutral
version
upd:Update/upd:ApplicabilityRules/upd:Metadata/cbsar:CbsPackageApplicabilityMetadata
upd:Update/upd:ApplicabilityRules/upd:Metadata/mar:MsiPatchMetadata/MsiPatch
PatchGUID
TargetProductCode
Comparison
EqualTo
LessThan
LessThanOrEqualTo
GreaterThanOrEqualTo
GreaterThan
MajorVersion
MinorVersion
BuildNumber
ServicePackMajor
ServicePackMinor
ProductType
SuiteMask
AllSuitesMustBePresent
Version
%hd.%hd.%hd.%hd
Architecture
Revision
Created
Modified
Language
ProductCode
PatchCode
VersionMax
VersionMin
ExcludeVersionMax
ExcludeVersionMin
upd:Update/upd:ApplicabilityRules/upd:Metadata/mar:MsiApplicationMetadata/mar:ProductCode
AllFeaturesRequired
AllProductsRequired
mar:Product
mar:Feature
AllComponentsRequired
mar:Component
MsiProductInstalled
MsiPatchInstalled
MsiPatchInstalledForProduct
MsiPatchInstallable
MsiApplicationInstallable
MsiApplicationInstalled
MsiFeatureInstalledForProduct
MsiComponentInstalledForProduct
Subkey
RegType32
BeginsWith
Contains
EndsWith
REG_DWORD
REG_QWORD
REG_SZ
REG_BINARY
REG_EXPAND_SZ
REG_MULTI_SZ
REG_FULL_RESOURCE_DESCRIPTOR
HKEY_LOCAL_MACHINE
HKEY_CLASSES_ROOT
HKEY_USERS
HKEY_LOOP_TARGET
%hd-%hd-%hdT%hd:%hd:%hd
Namespace
WqlQuery
WindowsVersion
FileVersion
FileExists
FileSize
Processor
RegKeyExists
RegValueExists
RegDword
RegSzToVersion
LicenseDword
RegKeyLoop
WmiQuery
WindowsLanguage
FileCreated
FileVersionPrependRegSz
MuiInstalled
SystemMetric
MuiLanguageInstalled
CbsPackageInstalledByIdentity
PackageIdentity
CbsPackageInstalled
CbsPackageInstallable
cbsar:
msiar:
RevisionId
upd:Update/upd:Files
upd:File
Digest
PatchingType
SelfContained
Express
FileName
UpdateID
upd:Update/upd:Relationships/upd:Prerequisites
upd:Update/upd:ApplicabilityRules/upd:IsInstallable
upd:Update/upd:ApplicabilityRules/upd:IsInstalled
upd:Update/upd:Properties
upd:Update/upd:Relationships/upd:BundledUpdates
upd:AtLeastOne
upd:Update/upd:LocalizedPropertiesCollection
upd:LocalizedProperties
upd:Language
DefaultPropertiesLanguage
upd:Title
upd:Description
upd:MoreInfoUrl
upd:Update/upd:Properties/upd:KBArticleID
AutoSelectOnWebSites
CreationDate
%hu-%hu-%huT%hu:%hu::%hu.%huZ
Categories/Category
Category
UpdateClassification
upd:Update/upd:HandlerSpecificData
upd:HandlerSpecificData
cbs:Cbs
msp:WindowsInstaller
msp:MspData
CommandLine
cmd:CommandLineInstallation
cmd:InstallCommand
Arguments
cmd:ReturnCode
Result
Succeeded
Reboot
DefaultResult
RebootByDefault
msp:WindowsInstallerApp
msp:MsiData
MsiFile
wsi:WindowsSetup
xsi:type
Program
WU-IE9-Windows7-
IE9-langpack-Windows7-
WU-Windows6.1-KB
WU-IE10-KB
WU-IE10-Windows7-
WU-IE11-KB
IE11-Windows6.1-
DismCreateInstance2
^Hr,g:
AddDllDirectory
cbshost.dll
wimgapi.dll
tXTCgP
S_MRHr,gW
X[(W3z
MiniDumpWriteDump
d\Odk f
(W'}(c@w 
(u7bOS
vector<T> too long
map/set<T> too long
0123456789ABCDEF
NX[(WS
NX[(WS
NX[(W 
ck(WgbL
cdk^\'`
ck(WgbL
ck(WgbL
ck(WgbL
NX[(WF
N*NvPpe
DismLoadString
CreateCScript
NX[(WC
need dictionary
invalid literal/length code
invalid distance code
invalid block type
invalid stored block lengths
too many length or distance symbols
invalid bit length repeat
oversubscribed dynamic bit lengths tree
incomplete dynamic bit lengths tree
oversubscribed literal/length tree
incomplete literal/length tree
oversubscribed distance tree
incomplete distance tree
empty distance tree with lengths
unknown compression method
invalid window size
incorrect header check
incorrect data check
GetGestureInfo
CloseGestureInfoHandle
SetGestureConfig
BeginPanningFeedback
EndPanningFeedback
UpdatePanningFeedback
CLabelUI::~CLabelUI
CLabelUI::SetTransShadow
CLabelUI::GetTransShadow
CLabelUI::SetTextRenderingHintAntiAlias
CLabelUI::SetShadowOffset
CLabelUI::SetText
CLabelUI::GetText
CLabelUI::SetEnabledEffect
CLabelUI::GetEnabledEffect
CLabelUI::SetTextColor1
CLabelUI::GetTextColor1
CLabelUI::SetTextShadowColorA
CLabelUI::GetTextShadowColorA
CLabelUI::SetTextShadowColorB
CLabelUI::GetTextShadowColorB
CLabelUI::SetTransText
CLabelUI::GetTransText
CLabelUI::SetTransShadow1
CLabelUI::GetTransShadow1
CLabelUI::SetTransText1
CLabelUI::GetTransText1
CLabelUI::SetGradientAngle
CLabelUI::GetGradientAngle
CLabelUI::SetEnabledStroke
CLabelUI::GetEnabledStroke
CLabelUI::SetTransStroke
CLabelUI::GetTransStroke
CLabelUI::SetStrokeColor
CLabelUI::GetStrokeColor
CLabelUI::SetEnabledShadow
CLabelUI::GetEnabledShadow
CLabelUI::SetGradientLength
CLabelUI::GetGradientLength
CreateTextServices
WdcRunTaskAsInteractiveUser
ck(Wkb
,g!kqQ
ck(W Rd
ck(W7R
u<O_cOW
`O*geg
U`O Rd
ck(W Rd
Y6R0RjR
ck(W Rd
ck(W Rd
(uS_MR
ck(W Rd
ck(Wkb
ck(W7R
ck(WxS}
,g0Wlx
_X[(W^
X-NgbL
X-NgbL
ck(WSb
\Documents\Visual Studio 2015\Projects\Dism++\Release\Dism++x64.pdb
.text$di
.text$mn
.text$mn$00
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCL
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$T
.rdata$zzzdbg
.tls$ZZZ
.xdata
.xdata$x
ATL$__a
ATL$__z
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.didat$5
.pdata
.rsrc$01
.rsrc$02
MessageBoxW
GetClientRect
DefWindowProcW
CallNextHookEx
ShowWindow
IsWindowVisible
GetParent
EnableWindow
SetWindowsHookExW
UnhookWindowsHookEx
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
MoveWindow
SetFocus
GetDlgCtrlID
SendMessageW
GetSysColorBrush
SetWindowPos
MapWindowPoints
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
GetWindowLongW
GetWindow
GetDlgItem
SetWindowLongPtrW
UnregisterClassW
GetActiveWindow
PostMessageW
EndDialog
CallWindowProcW
ScreenToClient
IsWindowEnabled
LoadImageW
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
LoadMenuW
SetMenu
PostQuitMessage
LoadIconW
GetMenu
SetForegroundWindow
PostThreadMessageW
MsgWaitForMultipleObjects
PeekMessageW
LoadStringW
ExitWindowsEx
DestroyWindow
DialogBoxParamW
RegisterClassExW
GetClassInfoExW
LoadCursorW
CreateWindowExW
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetSubMenu
GetMenuItemCount
AppendMenuW
DeleteMenu
CreatePopupMenu
GetWindowLongPtrW
GetMenuStringW
FindWindowExW
SendNotifyMessageW
GetShellWindow
RegisterWindowMessageW
EndPaint
BeginPaint
GetCursorPos
ReleaseDC
IsIconic
InvalidateRect
ReleaseCapture
PtInRect
KillTimer
ShowCaret
DrawIconEx
DrawTextW
SetWindowLongW
SetCursor
SetCapture
TranslateMessage
GetUpdateRect
SetPropW
CharNextW
IntersectRect
SetLayeredWindowAttributes
IsRectEmpty
GetSysColor
RegisterClassW
CreateCaret
ClientToScreen
CopyRect
SetTimer
DispatchMessageW
OffsetRect
IsWindow
SetCaretPos
UnionRect
GetIconInfo
HideCaret
GetPropW
GetFocus
GetKeyState
GetMessageW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetForegroundWindow
FlashWindowEx
DeleteDC
SetBkMode
SetBkColor
ExtTextOutW
GetDeviceCaps
GetObjectA
RoundRect
CombineRgn
CreateFontIndirectW
ExtSelectClipRgn
CreateSolidBrush
DeleteObject
CreatePenIndirect
RestoreDC
SetStretchBltMode
MoveToEx
GetObjectW
SelectClipRgn
Rectangle
CreatePen
LineTo
SetTextColor
GetTextMetricsW
EnumFontFamiliesW
CreateRoundRectRgn
CreateRectRgnIndirect
GetClipBox
GetStockObject
SetWindowOrgEx
StretchBlt
CreateCompatibleDC
CreateDIBSection
SelectObject
SaveDC
CreateCompatibleBitmap
BitBlt
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegSetKeyValueW
RegLoadKeyW
RegFlushKey
RegUnLoadKeyW
RegGetValueW
DuplicateToken
OpenProcessToken
MapGenericMask
AccessCheck
RegQueryInfoKeyW
RegEnumKeyW
RegEnumValueW
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
CryptImportKey
CryptDecrypt
GetTokenInformation
AdjustTokenPrivileges
DuplicateTokenEx
SetThreadToken
CreateProcessAsUserW
RevertToSelf
CryptGetHashParam
CryptDestroyHash
RegSetValueExW
CryptHashData
CryptCreateHash
ConvertStringSidToSidW
LookupAccountSidW
SHChangeNotify
SHCreateAssociationRegistration
SHGetSpecialFolderPathW
CommandLineToArgvW
ShellExecuteW
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CoCreateGuid
CoInitializeSecurity
CoSetProxyBlanket
CLSIDFromString
StrCmpW
StrCmpNIW
StrCpyW
PathFindFileNameW
StrCmpIW
PathFindExtensionW
StrCmpNW
StrRChrW
PathFileExistsW
PathIsDirectoryEmptyW
StrChrW
StrRChrA
PathFindFileNameA
PathIsNetworkPathW
PathFindExtensionA
StrStrIW
StrCpyNW
StrCatW
PathSkipRootW
StrCmpNIA
StrCmpNA
PathQuoteSpacesW
PathRemoveArgsW
PathUnquoteSpacesW
PathIsDirectoryW
StrChrA
PathCanonicalizeW
StrStrW
SHCreateStreamOnFileEx
StrFormatByteSizeW
SHCreateStreamOnFileW
GradientFill
AlphaBlend
GdipSetStringFormatAlign
GdipDeleteFont
GdipDeleteStringFormat
GdipDeleteGraphics
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipCreateFontFromDC
GdipSetStringFormatLineAlign
GdipDeleteBrush
GdipCreateLineBrushI
GdipCreateFontFromLogfontA
GdipCreateStringFormat
GdiplusShutdown
GdiplusStartup
GetMappedFileNameW
DismWriteLog
CreateCbsHostHelper
GetConfig
CbsCreateTempDirectory2
DismGetScratchDir
WIMRemountImage
WIMRegisterMessageCallback
WIMGetMountedImageInfoFromHandle
WIMCloseHandle
WIMGetMountedImageInfo
WIMSetReferenceFile
WIMInitFileIOCallbacks
WIMSetFileIOCallbackTemporaryPath
WIMCreateFile
WIMSetTemporaryPath
WIMGetAttributes
WIMGetImageInformation
WIMLoadImage
WIMSetImageInformation
WIMExportImage
WIMUnregisterMessageCallback
WIMSetBootImage
WIMDeleteImage
WIMGetMountedImageHandle
WIMCommitImageHandle
WIMMountImageHandle
WIMApplyImage
WIMUnmountImageHandle
WIMCaptureImage
WIMGetImageCount
WIMSplitFile
WIMAddImagePath
WIMUnmountImage
WIMExtractImagePath
WIMFindFirstImageFile
WIMFindNextImageFile
CreateEnvironmentBlock
DestroyEnvironmentBlock
SetupOpenInfFileW
SetupCloseInfFile
SetupInstallFromInfSectionW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
RoInitialize
RoUninitialize
WindowsCreateString
WindowsDeleteString
WindowsGetStringRawBuffer
RoActivateInstance
FilterGetDosName
FilterLoad
CreateVssBackupComponentsInternal
VssFreeSnapshotPropertiesInternal
InternetCloseHandle
InternetSetOptionW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
WTSEnumerateProcessesW
WTSFreeMemory
CryptStringToBinaryW
VerQueryValueW
Dism++x64.exe
BcdGetCurrentEntryIdentifier
BcdGetFirmwareBootDevice
BcdGetFirmwareType
BcdGetSystemPartition
BcdIsWinPEBoot
BcdOpenStore
DismAddDriver
DismAddPackage
DismAppAssociationsDefaultExport
DismAppAssociationsDefaultImport
DismAppAssociationsDefaultRemove
DismAppAssociationsExport
DismAppAssociationsImport
DismAppAssociationsRemove
DismApplyDPI
DismApplyImage
DismAppxsCleanup
DismCaptureImage
DismCommitImage
DismCompactOs
DismComponentCleanup
DismCreateInterface
DismDeleteImage
DismDriverCleanup
DismExpandEnvironmentStrings
DismExportImage
DismFormatMessage
DismFreeMemory
DismGetAllUsersAppx
DismGetCapabilities
DismGetDrivers
DismGetFeatures
DismGetFileFilter
DismGetImageFileInfo
DismGetMountedImages
DismGetPackages
DismGetProvisionedAppxs
DismGetScratchDir
CBSHost.DismGetScratchDir
DismGetServices
DismGetSystemInfoByPath
DismGetSystemInfoBySession
DismHardLinkMerge
DismIsNoviceMode
DismMountImage
DismMultiLanguage
DismRegOpenKey
DismRegOpenKeyEx
DismRemoveAppx
DismRemoveCapability
DismRemoveDriver
DismRemovePackage
DismRemoveProvisionedAppx
DismRemoveService
DismRestoreHealth
DismScanHealth
DismSetBootImage
DismSetImageFileInfo
DismSetServiceStart
DismUnmountImage
DismWriteLog
CBSHost.DismWriteLog
IbsSetFirstBootCommandLine
WinREConfig2
GetLastError
GetSystemTimeAsFileTime
IsWow64Process
FreeLibrary
GetProcAddress
LoadLibraryExW
CloseHandle
WaitForSingleObject
GetCurrentThreadId
GetModuleHandleW
RaiseException
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
VerifyVersionInfoW
VerSetConditionMask
SetLastError
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WritePrivateProfileSectionW
GetFileAttributesW
SetEvent
ResetEvent
DeviceIoControl
GetVolumePathNameW
GetVolumeInformationByHandleW
GetModuleFileNameW
GetEnvironmentVariableW
UnmapViewOfFile
MoveFileExW
DeleteFileW
GetNativeSystemInfo
GlobalMemoryStatusEx
GetUserDefaultLCID
FindFirstFileW
FindClose
CreateFileW
WriteFile
LCIDToLocaleName
GetThreadLocale
GetLocaleInfoEx
CreateProcessW
GetWindowsDirectoryW
FindNextFileW
IsValidLocaleName
GetSystemDirectoryW
MoveFileW
CreateDirectoryW
GetVolumeInformationW
SetVolumeLabelW
RemoveDirectoryW
DeleteCriticalSection
GetTickCount
CreateFileMappingW
MapViewOfFile
LocalFree
GetCurrentProcess
TerminateProcess
ReadFile
SetFilePointer
GetTempPathA
GetTempFileNameA
DeleteFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
lstrcpyA
lstrcpynA
ReleaseMutex
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeCriticalSectionEx
InitializeSRWLock
AcquireSRWLockExclusive
AcquireSRWLockShared
VirtualFreeEx
VirtualAllocEx
CreateEventW
DuplicateHandle
WaitForMultipleObjects
ExpandEnvironmentStringsW
SetFilePointerEx
GetFileSizeEx
SetEnvironmentVariableW
GetVolumeNameForVolumeMountPointW
CreateMutexW
GetFullPathNameW
lstrcmpiA
CopyFileW
GetFileSize
GetLocaleInfoW
GetExitCodeProcess
lstrcmpA
SystemTimeToFileTime
GetExitCodeThread
EnumUILanguagesW
CopyFileExW
FreeResource
SetThreadUILanguage
SetThreadLocale
LocaleNameToLCID
OpenProcess
DecodePointer
SetErrorMode
SetUnhandledExceptionFilter
GetDiskFreeSpaceExW
GetCurrentProcessId
VirtualQuery
GetProcessId
GetSystemTime
LoadLibraryW
FormatMessageW
GetLongPathNameW
GetTempPathW
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeW
SetFileAttributesW
ProcessIdToSessionId
GetShortPathNameW
GetLocalTime
GetStartupInfoW
WritePrivateProfileStringW
GetModuleHandleExW
GetDiskFreeSpaceW
GetPrivateProfileSectionW
GetVersionExW
GetPrivateProfileStringW
LocalFileTimeToFileTime
GetCurrentDirectoryW
DosDateTimeToFileTime
MulDiv
GetTickCount64
TerminateThread
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GlobalAlloc
GlobalLock
GlobalUnlock
CreateIoCompletionPort
GetSystemInfo
KERNEL32.dll
InitCommonControlsEx
CreatePropertySheetPageW
DestroyPropertySheetPage
PropertySheetW
_TrackMouseEvent
COMCTL32.dll
NtSetInformationFile
RtlAdjustPrivilege
NtQuerySystemInformation
RtlNtStatusToDosError
NtWriteVirtualMemory
NtReadVirtualMemory
NtOpenFile
ZwQueryDirectoryFile
NtClose
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
RtlComputeCrc32
NtQueryInformationFile
NtShutdownSystem
LdrVerifyImageMatchesChecksum
NtQueryInformationProcess
NtDeleteKey
RtlImageRvaToVa
ZwQuerySymbolicLinkObject
NtWriteFile
RtlInitUnicodeString
ZwOpenSymbolicLinkObject
NtReadFile
RtlImageNtHeader
RtlGetLastNtStatus
NtQueryVolumeInformationFile
NtCreateFile
ZwClose
ntdll.dll
??3@YAXPEAX@Z
_purecall
??2@YAPEAX_K@Z
wcsnlen
memcpy
_errno
memset
wcstoul
wcsncpy_s
wcslen
memmove
memcmp
vswprintf_s
_vscwprintf
swscanf
wcschr
towupper
??_V@YAXPEAX@Z
??_U@YAPEAX_K@Z
wcsftime
_localtime64_s
_time64
_wcsicmp
_beginthreadex
_wcslwr_s
bsearch
malloc
strnlen
strlen
_mktime64
_wcstoui64
wcscpy
wcstol
sscanf
vsprintf_s
_vscprintf
_strtoui64
realloc
strcmp
strtoul
strtol
isdigit
swprintf_s
_mbschr
_wcsupr_s
wcsrchr
wcsstr
_mbslwr_s
iswspace
wcscmp
_mbscmp
wcscpy_s
calloc
toupper
wcsncpy
wcstod
wcscat
_strcmpi
qsort_s
_lrotl
_CxxThrowException
_cexit
__C_specific_handler
__CxxFrameHandler3
__setusermatherr
_initterm
_initterm_e
_set_fmode
_c_exit
??0exception@@QEAA@AEBQEBD@Z
__wgetmainargs
_wcsnicmp
_strlwr
_wcmdln
_unlock
__dllonexit
msvcrt.dll
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
atexit
_XcptFilter
?terminate@@YAXXZ
VirtualProtect
LoadLibraryExA
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
VirtualAlloc
VirtualFree
IsDebuggerPresent
OutputDebugStringW
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
_invalid_parameter
_msize
__set_app_type
_commode
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVbad_function_call@std@@
.?AV<lambda_08a12d65608a3caa413db20fced4fcfb>@@
.?AV<lambda_755863376d582436dae9db6b400e9ed4>@@
.?AV<lambda_b262c77309b39c07f7ec7761301aa25f>@@
.?AV<lambda_f027140fd6e9e8a73008a6de49c7fbef>@@
.?AV<lambda_87ec2e5284df638e94a9027e81d749e2>@@
.?AV<lambda_49fc9888b5f6dd5a837683aa9adecbee>@@
.?AV<lambda_2eeed89f07b461585013c25bce7de2e5>@@
.?AV<lambda_ef7077d9f3e65ed1d1fb89b4b27bbe9d>@@
.?AV<lambda_0d7ba13c957e670a51ef2bbaf53bd1d6>@@
.?AV<lambda_795f9aa83011864a07ca3fb499413f80>@@
.?AV<lambda_6be6f8f020ac9635098d4cb8cb34d453>@@
.?AV<lambda_f3cfa4654d3b5ba82d1e58cdc71cdc28>@@
.?AV<lambda_b53eb5d5adae9e2d1ac10e4e732d4eea>@@
.?AV<lambda_3f68567956437544db0522b7470df43d>@@
.?AV<lambda_d1e502fbac511bb78d362aa1e08ac0cb>@@
.?AV<lambda_ae718d54811b029116ad35e3c343e4ae>@@
1!1!11
!1!1!11
!!11!! 
/,Rnnu
QVYM6\
iK]yLr
.<zHWe
L|/,zh7
g?7(/^R
2[:#T%
L[} 'r
Wclv0d
W=i74*2
)^K0l4
[$k*]-
TWAL<!$
yRJ-P	4
\gh\Yy
hP)Ty;
SX[:N f
P/f&TX[(W
P-NX[(W
m@b	gC
X[(W|Q
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="amd64" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">True/PM</dpiAware></windowsSettings></application><ms_compatibility:compatibility xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" xmlns="urn:schemas-microsoft-com:compatibility.v1"><ms_compatibility:application xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1"><ms_compatibility:supportedOS xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></ms_compatibility:supportedOS><ms_compatibility:supportedOS xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></ms_compatibility:supportedOS><ms_compatibility:supportedOS xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></ms_compatibility:supportedOS><ms_compatibility:supportedOS xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></ms_compatibility:supportedOS><ms_compatibility:supportedOS xmlns:ms_compatibility="urn:schemas-microsoft-com:compatibility.v1" Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></ms_compatibility:supportedOS></ms_compatibility:application></ms_compatibility:compatibility></assembly>