Sample details: 62a04a6be26a74c35a654fd03ac95874 --

Hashes
MD5: 62a04a6be26a74c35a654fd03ac95874
SHA1: 27c26da4e8e442976d940c5fcca015c3d0ef626e
SHA256: 06810249b4d0adc4fbaf4c8101a3d28d35d7c25a8edb0e5ccfb9c8542a16ac88
SSDEEP: 12288:t7/Q0+22kiWHQlWQ7QC7nXjoV7T/pe1qBsAMx3DFA7yUfce:t7/QZtxWHQlr7QC7nXjU/pOos19DEl
Details
File Type: PE32+
Added: 2018-03-07 03:55:02
Yara Hits
YRP/Microsoft_Visual_Cpp_80_DLL | YRP/IsPE64 | YRP/IsConsole | YRP/HasDebugData | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/Misc_Suspicious_Strings | YRP/DebuggerCheck__QueryInfo | YRP/DebuggerException__SetConsoleCtrl | YRP/Check_OutputDebugStringA_iat | YRP/anti_dbg | YRP/inject_thread | YRP/escalate_priv | YRP/cred_local | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/IronTiger_GetPassword_x64 |
Source
http://117.34.80.240/GetPassword_x64.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.idata
@.reloc
H;D$xw
H;D$xr
HcD$PH
D$xHcD$TH
HcL$TH
HcD$LH
HcL$LH
HcD$PH
HcL$PH
HcD$LH
HcL$xH+
HcL$LH
HcT$xH+
HcD$PH
HcL$xH+
HcL$PH
HcT$xH+
D$pH9D$8t|
D$D9D$T
H;D$(~4H
H+D$(H
H;D$(~4H
H+D$(H
H;D$(v4H
H+D$(H
H9D$@w
H9D$@w
D$8H9D$0tJD
D$0H9D$8s
D$8H9D$0tJD
D$0H9D$8s
D$8H9D$0t
7HcD$PH
D$0HcD$PH
QHcD$PH
D$0HcD$PH
D$HH9D$@tzH
D$(H9D$ u	
L$8H9H
L$8H9H
H;D$ s
H9A w)3
H;D$ s
H9A w)3
H9D$hu@H
H9D$Xs
H9D$Xs
H;D$Hs
L$HH9H s
H9D$Hs
H;D$Hs
L$HH9H s
H9D$Hs
H9D$8r
H;D$8w
H9D$8r
HH;D$8w
H;D$Ps
H+D$PH
D$XH9D$ s
H;D$Xw
H;D$Ps
H+D$PH
D$ H9D$Xs
D$HH9D$@u0H
D$HH9D$@u
H;D$Ps
H+D$PH
D$ H9D$Xs
D$HH9D$@u0H
H9D$8u
D$@H9D$8t!D
D$HH9D$@t!H
D$HH9D$@t!H
D$@H9D$8t#H
D$@H9D$8t#H
D$@H9D$8t
IPHc	H
IXHc	H
L$HH9H
H;D$Pw
L$8H9H
L$HH9H
H;D$Pw
L$8H9H
@8HcL$
L$XH9H
H;D$`w
H;AhsCH
H+D$0H;D$(s
H+D$@H
H+D$@H
H+D$@H
@@HcL$
L$`H9Ahs
L$`H9Ahs
H9D$ u
L$PH9Ahw	
L$PH9Ahs
D$8H9D$p}
D$ H9D$`}
D$@H9D$8
D$pH9D$8u
H9D$@w
H9D$@w
D$8H9D$0tJD
D$0H9D$8s
D$8H9D$0tJD
D$0H9D$8s
D$8H9D$0t
D$HH9D$@t
D$HH9D$@t
H;D$ s
D$XH9D$ s
H;D$ s
D$XH9D$ s
H9D$(s
L$(H9H
H9D$(s
L$(H9H
L$hH9H
H9D$ps
L$hH9H
H9D$ps
H;D$Hs^H
H;D$Hs
H;D$Hs^H
H;D$Hs
L$PH+A
L$PH+A
} HcD$ Hk
} HcD$ Hk
} HcD$ Hk
} HcD$ Hk
wpHcD$ H
wpHcD$ H
wXHcD$ H
w\HcD$ H
wXHcD$ H
w\HcD$ H
wXHcD$ H
w\HcD$ H
wXHcD$ H
w\HcD$ H
H+D$8D
wXHcD$ H
w\HcD$ H
H#T$(H
H3T$(H
D$HH9D$@tzH
L$8H9H
HcD$pH
H9D$hu@H
|$D$}.H
|$4$}.H
HcD$LH
H9D$(s
HcD$XH
|$8(s	H
L$8H9H
H;D$Ps
H+D$PH
D$XH9D$ s
H;D$Xw
H;D$Hw
D$HH9D$@u
H9D$8u
D$HH9D$ht
D$HH9D$ht
H9D$Pt
H9D$Pt
D$pH9D$@t
D$pH9D$@t
D$pH9D$@t
H9D$@t
H9D$8t
H9D$8t
H9D$`t
H9D$@s
D$dHcD$dH
D$dHcD$dH
D$@H9D$8t"H
D$@H9D$8t"H
L$XH9H
H;D$`w
L$PH9A
L$PH;A
H9D$Ht
IPHc	H
IXHc	H
@8HcL$
H9D$Xt
@@HcL$
H+D$ H
D$DHcD$DH
D$(H9D$`}
D$(H9D$`}
D$8H9D$0tJD
D$0H9D$8s
D$8H9D$0tJD
D$0H9D$8s
H9D$Ht
HcD$0H
D$HHcD$4H;
D$xH9D$H
HcD$8H
HcD$ H
HcL$ H;
THcD$ L
HcD$ H
D$ HcD$ H
~/HcD$ L
HcD$ H
H9D$ht
H+D$ H
D$LHcD$LH
H9D$@w
D$PH9D$Ht
D$PH9D$Ht
D$8H9D$0tJD
D$0H9D$8s
D$8H9D$0tJD
D$0H9D$8s
D$(H9D$ tFH
D$8H9D$0t:H
D$8H9D$0t
D$(H9D$ t	
H9D$ w3H
7HcD$0H
D$@HcD$0H
KHcD$0H
D$@HcD$0H
D$HH9D$@tzH
L$8H9H
L$8H9H
L$8H9H
L$PH9A
L$PH;A
L$PH9A
L$PH;A
L$PH;A
L$PH;A
H;D$ s
H9A w)3
HcD$pH
H9D$hu@H
|$D$}.H
|$D$}.H
|$4$}.H
|$4$}.H
HcD$TH
H9D$(s
HcD$TH
H9D$(s
D$HH9D$(s
D$PH9D$@t!
D$HH9D$(s
D$PH9D$@t!
|$T$t&
D$p9D$H}VH
D$p9D$H}
D$p9D$H}
|$T$t&
D$p9D$H}VH
D$p9D$H}
D$p9D$H}
H;D$Hs
L$HH9H s
H9D$Hs
D$8H9D$
H9D$8r
HH;D$8w
HcD$PH
|$@+t9
|$@vtT
HcL$xH
H;D$(v
H+D$(H
|$P@tk
|$0$t&
|$@+t9
|$@vtT
HcL$xH
H;D$(v
H+D$(H
|$P@tk
|$0$t&
H;D$Ps
H+D$PH
D$XH9D$ s
H;D$Xw
H;D$Hw
H;D$Hw
D$HH9D$@u
H;D$Ps
H+D$PH
D$ H9D$Xs
D$HH9D$@u0H
H9D$8u
D$HH9D$Xt
D$HH9D$@s@H
D$HH9D$Xt
D$HH9D$@s@H
D$HH9D$ht
D$HH9D$ht
H9D$Pt
H9D$Pt
D$pH9D$@t
D$pH9D$@t
D$pH9D$@t
H9D$@t
H9D$8t
H9D$8t
H9D$`t
D$HH9D$ht
D$HH9D$ht
H9D$Pt
H9D$Pt
D$pH9D$@t
D$pH9D$@t
D$pH9D$@t
H9D$@t
H9D$8t
H9D$8t
H9D$`t
HcD$PH
HcD$PH
HcD$0H
D$HHcD$4H;
D$xH9D$H
HcD$8H
D$@H9D$8t!D
HcD$ H
HcL$ H;
THcD$ L
HcD$ H
H9D$Xs*H
D$THcD$XE3
HcL$XH
H9D$Xs*H
D$THcD$XE3
HcL$XH
D$dHcD$dH
D$dHcD$dH
D$HH9D$@t!H
D$HH9D$@t!H
D$@H9D$8t#H
D$@H9D$8t#H
H9D$@w
H9D$@w
D$ HcD$ H
~/HcD$ L
HcD$ H
D$@H9D$8t
L$HH9H
H;D$Pw
L$8H9H
L$XH9H
H;D$`w
H9D$0s
L$(H9H
L$hH9H
H;D$ps
H+D$hH
H+D$pH
H9D$psUH
H9D$0s
L$(H9H
L$hH9H
H;D$ps
H+D$hH
H+D$pH
H9D$psUH
H9D$8w
H9D$8w
L$PH;A
D$HH9D$(s
D$PH9D$@t!
|$T$t&
D$h9D$<}VH
D$h9D$<}
D$h9D$<}
H;D$ps_H
|$4+t9
|$4vtT
HcL$hH
H;D$(v
H+D$(H
|$P@tk
|$8$t&
D$HH9D$Xt
D$HH9D$@s?H
HcD$PH
H9D$Xs*H
D$PHcD$TE3
HcL$TH
H9D$@w
H9D$0s
L$(H9H
L$hH9H
H;D$ps
H+D$hH
H+D$pH
H9D$psEH
H9D$8w
D$L9D$8}oH
D$8HcD$8D
D$P9D$<}oH
D$<HcD$<D
D$H9D$4}oH
D$4HcD$4D
D$L9D$8}uH
D$8HcD$8D
D$H9D$4}oH
D$4HcD$4D
D$L9D$8}uH
D$8HcD$8D
H9D$8u
H9D$`u
D$(H9D$Xu%H
;D$<t1
H9D$(u
H9D$`u
H9D$0w
H9D$0vQ
H+D$0H
D$(H9D$hu%H
H9D$8r%H
H;D$Xt2
H+D$8H
D$D9D$H}
D$THcD$TL
D$D9D$Ht&
D$D9D$H}
D$49D$8}
D$49D$8t&
D$49D$8}
D$XH9D$@w
D$0H9D$Hs#H
D$hH9D$Xw
t[HcD$TH
D$h9D$T
0HcL$ 
0HcL$ 
u-HcD$ H
D$ 9D$4}l
D$$HcD$4
hHcL$$H
/HcD$$H
HcL$$H
u-HcD$ H
D$ 9D$4}l
D$$HcD$4
xHcL$$H
/HcD$$H
HcL$$H
;D$h}J
D$x9D$ 
HcD$ H
uCHcD$ H
D$x9D$,}
HcD$,H
D$x9D$,u
D$,9D$ }$
HcL$,H
HcD$ H
D$H9D$D
HcD$ H
D$THcD$ H
D$x9D$8}BHcD$8
HcD$ H
HcD$ H
HcD$ H
D$LHcD$ H
D$x9D$<}BHcD$<
HcD$ H
HcD$ H
HcD$ H
D$(HcL$ H
HcD$ H
HcD$ H
D$X9D$ }9HcD$ H
HcD$ H
D$@HcD$xH
D$HHcD$xH
D$x9D$8
D$H9D$ }MHcD$ H
HcD$ H
HcD$ H
(HcD$8H
D$h9D$$
;D$h}i
YD$pHcD$ 
D$ 9D$,}7HcD$,
D$0HcD$XH
D$h9D$ }dHcD$ H
HcD$ H
D$8HcD$hH
D$@HcD$hH
D$h9D$4
D$X9D$ }CHcD$ H
t)HcD$ H
HcD$ H
uLHcD$ H
9D$,} HcD$,H
D$,9D$ }*
HcL$,H
HcD$ H
D$P9D$@
HcD$ H
D$hHcD$ H
9D$8}LHcD$8
HcD$ H
HcD$ H
HcD$ H
D$XHcD$ H
9D$<}LHcD$<
HcD$ H
HcD$ H
HcD$ H
D$(HcL$ H
HcD$ H
HcD$ H
D$X9D$ }:HcD$ H
HcD$ H
D$8HcD$xH
D$@HcD$xH
D$x9D$4
D$H9D$ }FHcD$ 
HcD$ H
HcD$ H
(HcD$8H
D$ 9D$,}8HcD$,
D$0HcD$XH
D$h9D$ }eHcD$ H
HcD$ H
D$8HcD$xH
D$@HcD$xH
D$x9D$0
D$X9D$ }EHcD$ H
t*HcD$ H
HcD$ H
uLHcD$ H
9D$,} HcD$,H
D$,9D$ }*
HcL$,H
HcD$ H
D$P9D$@
HcD$ H
D$hHcD$ H
9D$8}LHcD$8
HcD$ H
HcD$ H
HcD$ H
D$XHcD$ H
9D$<}LHcD$<
HcD$ H
HcD$ H
HcD$ H
D$(HcL$ H
HcD$ H
HcD$ H
D$X9D$ }:HcD$ H
HcD$ H
D$8HcD$xH
D$@HcD$xH
D$x9D$4
D$H9D$ }FHcD$ H
HcD$ H
HcD$ H
(HcD$8H
D$ 9D$,}8HcD$,
D$0HcD$XH
D$h9D$ }eHcD$ H
HcD$ H
D$8HcD$xH
D$@HcD$xH
D$x9D$0
D$X9D$ }EHcD$ H
t*HcD$ H
D$0H9D$8r
D$@H9D$Hr1
D$@H9D$Hr1
fffffff
|$  }%HcD$ H
HcD$ H
D$H9D$@t
D$P9D$@t
D$8H9D$0t>H
L$xH9H
H9D$PtlH
D$HH9D$@
D$(H9D$0s	
D$0H9D$(t"
L$(H9A uaH
}(HcD$@H
HcD$@H
HcD$0HcL$0H
HcL$0H
0HcD$0HcL$0H
HcL$0H
HcD$0H
HcD$0H
}bHcD$@H
HcT$@LcD$@H
H+D$@H
H+D$XH
H9D$xv
t$hH;D$ps
D$0H9D$8s*H
t$PH;D$Xs
H;D$pv
D$H9D$D
HcD$DH
HcD$DH
t$hH;D$ps
D$0H9D$8s*H
H;D$Pv
@ H9D$PvFH
D$XH9D$Ht.H
D$XH9D$Ht
H9D$(t!H
ffffff
L$@HcI
D$pHc@
D$0Hc@
L$8HcD
H;D$Ht
9D$ s(
L$8HcD
D$XHc@
D$XHc@
D$$9D$ 
D$XHc@
9D$h|0H
D$XHc@
H9D$@s
H9D$@u
D$ H9D$@u
D$pHc@
D$8HcD$ H
D$xH9D$h
D$xH9D$hr
(HcD$0Hk
HcD$0Hk
|$ $}~HcD$ Hk
tbHcD$ Hk
tKHcD$ Hk
HcD$ Hk
|$ $}THcD$ Hk
t;HcD$ Hk
u$HcD$ Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
|$ $}lHcD$ Hk
uSHcD$$Hk
HcL$ Hk
D$$HcD$ Hk
(HcD$0Hk
I(H9H(u
9D$d~FD
L$pHcI
D$d9D$`
L$hHcI
L$hHcI
L$hHcI
L$hHcI
L$hHcI
L$hHcI
L$0Hc	H
L$XHcI
HcL$$Hk
L$PHcI
HcL$ Hk
L$PHcI
HcL$ Hk
D$@Hc@
D$(Hc@
L$(HcI
D$(Hc@
D$`Hc@
L$hHcI
L$hHcI
D$pHc@
L$@Hc	H
|$ RCC
|$ MOC
|$ csm
HcL$ HcD
HcL$ HcD
L$`HcI
L$`HcI
L$`HcI
L$hHcI
H9D$8t[H
L$`HcI
L$hHcI
D$H9D$ s"
H9D$ t!H
H9D$ t!H
H9D$ t!H
H9D$ t!H
H9D$ t!H
HcD$PH
uPHcD$TH
r)HcD$TH
uPHcD$XH
r)HcD$XH
|$ $w	
HcD$xH
+D$x9D$4}
+D$x9D$4~
}(HcD$0Hk
HcL$0H
H9D$0rY
H9D$0w<H
H9D$0rY
H9D$0w<H
;D$ u&H
HcD$ H
HcD$ H
HcD$ H
HcD$ H
u&HcD$ H
u<HcD$ H
t"HcD$ H
HcD$ H
H9D$8s
D$@H9D$8
D$09D$Dv
D$09D$Ds8H
HcD$<L
D$09D$ 
|LHcD$ H
 HcD$ 
HcD$ H
@$9D$ ~
HcD$ H
HcD$$H
HcD$@H
HcD$4H
HcD$HH
0HcL$HH
HcD$ H
HcD$ H
HcD$TH
HcD$lH
HcD$PH
HcD$PH
uPHcD$PH
r)HcD$PH
uMHcD$`H
r&HcD$`H
D$0HcD$0H=
s0HcD$0HcL$0H
HcD$0H
HcL$0L
kHcD$H
9D$0sw
H9D$`rZ
H9D$`wB
D$8H9D$0s"H
D$HH9D$@s-
HcD$0H
D$(H9D$ r
D$(H9D$ s
D$0H9D$8u
D$@H9D$Ht(H
H9D$8u
H9D$8u
HcD$0H
D$@HcD$0H
BHcD$0H
HcD$xH
HcD$xH
H9D$@t
H9D$@u
D$49D$8t
H;D$xsg
T$ H9L
HcD$0Hk
T$PH9L
tgHcD$0Hk
tQHcD$0Hk
u9HcD$0Hk
HcD$0Hk
HcD$0Hk
uZHcD$0Hk
HcD$0Hk
HcD$0Hk
tKHcD$0Hk
t5HcD$0Hk
HcD$0Hk
T$ H9L
D$HH9D$ tSH
H9D$ t
|$PArO
|$PZwH
|$ParO
|$PzwH
H9D$ tbH
H9D$ t
}!HcD$ HcL$ H
} HcD$ HcL$ H
}#HcD$ HcL$ H
H9D$(t
9D$ w@
9D$ w(
H9D$0t
H9D$(t#H
H9D$(t
|$8@sX
|$8@s[
D$HH9D$@t&H
L$0H9A
D$`9D$0}UH
D$0HcD$0Hk
 HcL$0Hk
 HcL$0Hk
KHcD$0Hk
u"HcD$0Hk
H9D$@u
teHcD$0Hk
D$T9D$@
HcD$@H
t3HcD$@H
HcD$@H
6HcD$@H
HcD$@H
D$T9D$@
D$PHcD$PH
s!HcD$P
HcL$Pf
D$0H9D$xv
HcD$@H
H9D$8t
H9D$@t
H9D$@u^H
HcD$TH
9D$P} HcD$PHk
H9D$8r
HcD$PH
yHcD$PH
HcL$PH
HcL$PH
HcD$PH
HcD$`H
*HcD$`H
D$@HcD$`H
|$pPtSH
HcL$xH
HcD$0H
D$HH9D$hw
L$xH9H
H9D$PtlH
@UVWAVH
@UATAUAVAWH
 A_A^A]A\]
@SUWATAUAVAWH
A_A^A]A\_][
D$@Hc@
D$@Hc@
D$PHc@
D$PHc@
D$PHc@
D$@Hc@
D$$9D$ sAH
D$@Hc@
H9D$P}
D$@Hc@
|$hEu7H
|$hfu,H
|$hAu4H
D$PH9D$8t9H
|$Hd|IH
HcD$HH
HcL$XH
|$8d|4
H+D$pH
HcL$PH
HcT$DH
HcD$LH
9D$<u2HcD$<H
HcL$4H
HcD$TH
9D$D|EH
HcL$8H
D$ HcD$ H
s(HcD$ H
HcL$ H
9D$ } HcD$ Hk
|$0csm
D$HHcD$<H
HcD$@H
D$0HcD$@H
H9D$0s}H
D$<9D$8
HcT$8Hk
HcD$8H
HcD$ H
HcD$ H
D$(HcD$ H
H9D$(s
HcD$ H
HcD$ H
HcD$0H
HcD$4H
HcD$0HcL$4H
HcL$4H
HcD$0HcL$4H
IHcD$0H
HcD$0H
HcD$0H
 H3D$0H
H9D$ u
~:HcD$0H
w&HcD$0H
~HcD$0H
H9D$0w
HcD$LH
HcD$LH
D$L9D$P}eHcD$PH
HcD$ H
HcD$ H
t$HcD$ H
|KHcD$ H
HcD$ H
XHcD$`H
XHcD$`H
XHcD$`H
D$HHcD$XH
D$HHcD$XH
HcL$hH
D$h9D$t
D$h9D$t~
D$8Hc@
@H9D$pt
D$`H9D$hv
H9D$@ssH
H9D$@s
H9D$@s
D$8Hc@
H9D$@s
D$8Hc@$H
HcD$`H
D$@Hc@
H9D$@t
H9D$@u
D$49D$8t
9D$t|	
9D$t}	
D$D9D$0~
aHcD$xH
HcD$xH
uGHcD$@H
r&HcD$@H
D$0Hc@<H
H9D$8r H
H9D$8s
$Hc@<H
H;D$ht
HcD$0H
HcD$0H
|$| t8
|$|#t>
|$|-t	
|$|0t7
D$p9D$D~
D$p9D$x~
D$pHcD$xHk
uBHcD$xHk
HcD$xHk
HcD$xHk
HcD$xHk
*HcD$xHk
D$p9D$t~
D$pHcD$tHk
uBHcD$tHk
HcD$tHk
HcD$tHk
HcD$tHk
*HcD$tHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
.HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
.HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
.HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
+HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
.HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
.HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
.HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
2HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
1HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
0HcD$DHk
HcD$DHk
uBHcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
0HcD$DHk
D$p9D$D
HcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
HcD$DHk
D$49D$
9D$ uHH
D$(9D$0t
HHcD$PH
D$0Hc@
D$H9D$(
D$$HcD$$Hk
HcD$$Hk
HcD$TH=q
HcD$THk
D$pHcD$TH
D$T9D$\
D$pHcD$TH
D$|9D$\}
D$8H9D$@
D$pH9D$0u+
&HcD$XH
D$XHcD$XH
HcD$XH
HcL$XH
HcD$\L
HcD$\L
tDHcD$\L
HcD$\H
H9D$@u
D$@H9D$ t
H;D$xsi
|$x t8
|$x#t>
|$x-t	
|$x0t7
9D$L}[H
HcD$lH
HcD$lH
HcD$TH9
H9D$@s
D$0H9D$hr
HcD$TH9
H9D$@s
D$0H9D$pr
HcD$TH9
H9D$@s
D$0H9D$hr
HcD$TH9
H9D$@s
D$0H9D$pr
UVATAUAVH
A^A]A\^]
u#L95:
tc+}o;>r\
A^A]A\^]
D$$9D$(t$H
tjHcD$PE3
HcD$@H
HcD$ H
HcD$0H
HcD$0H
|$$XtV
|$ 5t.
HcD$@H
HcD$HH
HcD$DH
|$<Kt	
|$0Xt)
HcD$ H
wfHcD$ H
|$$5t	
|$ Btz
|$ )uqH
L$XH9H 
H+D$XH
HcD$DH
HcD$<H
HcD$8H
HcD$8H
|$00t"
|$01t~
|$H0t2
HcD$4H
|$0Ata
|$0Bt,
HcD$4H
HcD$8H
|$<@tn
D$PHcD$PE3
t.HcD$PH
D$PH9D$ s&H
|$ @u&H
D$ 9D$X~
HcD$XH
HcD$(H
|$,H|/
|$$FtD
|$$Ht\
|$$It/
HcD$XH
HcD$,H
																																			
											
											
												
|$@@t?H
HcD$@Hk
:cD$ @
:cD$ @
:cD$ @
HcD$0H
HcD$0H
D$@HcD$0H
D$<HcL$0H
HcD$0H
D$@HcD$0H
H9D$@s,H
HHcD$PH
XHcD$`H
D$pHcD$<H
HcD$<H
H9D$psaH
D$`H9D$0u!
D$`H9D$0r
HcD$lH
D$0HcD$lH
AH9D$P
H9D$PseH
D$PHcD$<H
HcD$<H
H9D$PsjH
D$`H9D$@u'
H9D$`t
t,HcD$@A
D$H9D$@r 
D$H9D$@u,3
D$49D$
9D$ uHH
D$(9D$0t
D$t9D$@~
D$t9D$|~
D$tHcD$|Hk
uCHcD$|Hk
HcD$|Hk
HcD$|Hk
HcD$|Hk
*HcD$|Hk
D$t9D$x~
D$tHcD$xHk
uCHcD$xHk
HcD$xHk
HcD$xHk
HcD$xHk
*HcD$xHk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
+HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
.HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
+HcD$@Hk
9D$X}[H
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
.HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
.HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
.HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
2HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
1HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
0HcD$@Hk
HcD$@Hk
uCHcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
0HcD$@Hk
D$t9D$@
HcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
HcD$@Hk
|$| t8
|$|#t>
|$|-t	
|$|0t7
9D$L}[H
HcD$xH
HcD$xH
H9D$0r
H9D$0r
H9D$0r
H9D$0r
H9D$0r
H9D$0r
H9D$0v
H9D$0shH
D$0HcD$ H
HcL$ L
t.HcD$ H
HcL$ L
D$<HcD$ H
D$4HcD$ 
HcL$ H
HcD$$H
9D$ |bH
HcD$@H
D$pHcD$<H
D$hHcD$4H
HcD$ Hk
|$t:wKHcD$tH
|$x:wAHcD$xH
|$|:wAHcD$|H
H9D$8r
H9D$8s&H
H9D$8r
D$pH9D$@r<H
D$pH9D$@uR
H9D$@w
H9D$@vR
D$T9D$@r 
D$T9D$@u,3
D$`H9D$@r6H
D$`H9D$@uL
H9D$@w
H9D$@vR
D$49D$0
EPH9E t
EPH9E t
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptGetProperty
BCryptGenerateSymmetricKey
LsaIRegisterNotification
LsaICancelNotification
SpInstanceInit
color 0a
chcp 936
get Windows Version ERROR
OpenProcessToken:%d
LookupPrivilegeValue:%d
AdjustTokenPrivilege:%d
CloseHandle:%d
PTRN_WNO8_InsertInLogSess
PTRN_W8CP_InsertInLogSess
result
PTRN_W8RP_InsertInLogSess
Buffer
mesInfos
hToken
Stream
result
ptrBase
DES3KeyLen
AESKeyLen
ptrBase
maCleData
myProcess
processName
myVectorModules
extractPkgFunctionTable
pStruct
userName
domainName
password
rUserName
rDomainName
sessions
sessionData
_Alproxy
_Alproxy
_Mbst1
_Mbst1
_Mbst2
_Oldlocale
_Oldlocale
_Psave
_Oldlocale
_Alproxy
_Alproxy
_Psave
_Alproxy
_Alproxy
_Alval
_Psave
_Groupstring
_Grouping
_Groupstring
_Grouping
bad locale name
C:\Program Files\Microsoft Visual Studio 11.0\VC\include\xlocale
generic
unknown error
iostream
iostream stream error
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
C:\Program Files\Microsoft Visual Studio 11.0\VC\include\xiosbase
C:\Program Files\Microsoft Visual Studio 11.0\VC\include\xlocnum
invalid string position
string too long
Standard C++ Libraries Out of Range
Standard C++ Libraries Invalid Argument
bad cast
C:\Program Files\Microsoft Visual Studio 11.0\VC\include\streambuf
NtQueryInformationProcess
LoadLibraryW
RtlCreateUserThread
myProcess
processHandle
Module
dwByteRead
Buffer
myProcesses
myProcessK
sizeReturn
myBuffer
oldProtect
oldProtect2
dwByteWrite
LibComplete
fileExist
hRemoteThread
_Alproxy
_Alproxy
_Alval
_Alval
_Alval
vector<T> too long
system
xdigit
bad allocation
bad function call
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\_tolower.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\locale0.cpp
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xutility
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xlocale
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xlocnum
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\locale.cpp
0123456789ABCDEFabcdef-+Xx
0123456789-+Ee
0123456789ABCDEFabcdef-+XxPp
permission denied
file exists
no such device
filename too long
device or resource busy
io error
directory not empty
invalid argument
no space on device
no such file or directory
function not supported
no lock available
not enough memory
resource unavailable try again
cross device link
operation canceled
too many files open
permission_denied
address_in_use
address_not_available
address_family_not_supported
connection_already_in_progress
bad_file_descriptor
connection_aborted
connection_refused
connection_reset
destination_address_required
bad_address
host_unreachable
operation_in_progress
interrupted
invalid_argument
already_connected
too_many_files_open
message_size
filename_too_long
network_down
network_reset
network_unreachable
no_buffer_space
no_protocol_option
not_connected
not_a_socket
operation_not_supported
protocol_not_supported
wrong_protocol_type
timed_out
operation_would_block
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
destination address required
executable format error
file too large
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid seek
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no message available
no message
no protocol option
no stream resources
no such device or address
no such process
not a directory
not a socket
not a stream
not connected
not supported
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
protocol error
protocol not supported
read only file system
resource deadlock would occur
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many links
too many symbolic link levels
value too large
wrong protocol type
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xiosbase
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\streambuf
:Sun:Sunday:Mon:Monday:Tue:Tuesday:Wed:Wednesday:Thu:Thursday:Fri:Friday:Sat:Saturday
:Jan:January:Feb:February:Mar:March:Apr:April:May:May:Jun:June:Jul:July:Aug:August:Sep:September:Oct:October:Nov:November:Dec:December
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\wlocale.cpp
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xloctime
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\locale
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xlocmes
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xlocmon
0123456789-
%b %d %H : %M : %S %Y
%m / %d / %y
:AM:am:PM:pm
%I : %M : %S %p
%H : %M
%H : %M : S
%d / %m / %y
0123456789-
0123456789ABCDEFabcdef-+Xx
0123456789-+Ee
0123456789-
0123456789ABCDEFabcdef-+Xx
0123456789-+Ee
0123456789-
0123456789ABCDEFabcdef-+XxPp
0123456789ABCDEFabcdef-+XxPp
+v$x+v$xv$+xv+$xv$+x+$vx+$vx$v+x+$vx$+vx+v $+v $v $+v +$v $++$ v+$ v$ v++$ v$+ v+xv$+ v$v$ +v+ $v$ ++x$v+ $v$v ++ $v$ +v
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xlocale.cpp
0123456789-
0123456789-
A0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\xwcsxfrm.c
0123456789abcdefABCDEF
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\onexit.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\system.c
COMSPEC
cmd.exe
Unknown exception
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dbgrpt.c
Normal
Ignore
Client
Client hook allocation failure at file %hs line %d.
Client hook allocation failure.
Invalid allocation size: %Iu bytes.
Error: memory allocation: bad memory block type.
Client hook re-allocation failure at file %hs line %d.
Client hook re-allocation failure.
Invalid allocation size: %Iu bytes.
Memory allocated at %hs(%d).
Error: memory allocation: bad memory block type.
Memory allocated at %hs(%d).
The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()
Error: possible heap corruption at or near 0x%p
The Block at 0x%p was allocated by aligned routines, use _aligned_free()
Client hook free failure.
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
_heapchk fails with _HEAPBADBEGIN.
_heapchk fails with _HEAPBADNODE.
_heapchk fails with _HEAPBADEND.
_heapchk fails with _HEAPBADPTR.
_heapchk fails with unknown return value!
DAMAGED
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
%hs located at 0x%p is %Iu bytes long.
Memory allocated at %hs(%d).
%hs located at 0x%p is %Iu bytes long.
Bad memory block found at 0x%p.
Memory allocated at %hs(%d).
Bad memory block found at 0x%p.
 Data: <%s> %s
Dumping objects ->
#File Error#(%d) : 
%hs(%d) : 
{%ld} 
client block at 0x%p, subtype %x, %Iu bytes long.
normal block at 0x%p, %Iu bytes long.
crt block at 0x%p, subtype %x, %Iu bytes long.
Object dump complete.
Detected memory leaks!
%Id bytes in %Id %hs Blocks.
Largest number used: %Id bytes.
Total allocations: %Id bytes.
The block at 0x%p was not allocated by _aligned routines, use realloc()
Damage before 0x%p which was allocated by aligned routine
The block at 0x%p was not allocated by _aligned routines, use free()
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\mlock.c
bad exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\initctyp.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\setlocal.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\_file.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\setvbuf.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\strftime.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\wcsftime.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\inithelp.c
CorExitProcess
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\crt0dat.c
GetCurrentPackageId
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\_sftbuf.c
(null)
`h````
xpxxxx
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\output.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\mbctype.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\tidtable.c
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\wsetloca.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\spawnve.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\spawnvpe.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\getenv.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\winsig.c
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
Second Chance Assertion Failed: File 
<file unknown>
, Line 
_CrtDbgReport: String too long or IO Error
Assertion failed: 
Assertion failed!
%s(%d) : %s
_CrtDbgReport: String too long or Invalid characters in String
<program name unknown>
Stack around the variable '
' was corrupted.
The variable '
' is being used without being initialized.
The value of ESP was not properly saved across a function call.  This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
A cast to a smaller data type has caused a loss of data.  If this was intentional, you should mask the source of the cast with the appropriate bitmask.  For example:  
	char c = (i & 0xFF);
Changing the code in this way will not affect the quality of the resulting optimized code.
Stack memory was corrupted
A local variable was used before it was initialized
Stack memory around _alloca was corrupted
Unknown Runtime Check Error
Unknown Filename
Unknown Module Name
Run-Time Check Failure #%d - %s
Stack corrupted near unknown variable
wsprintfA
Stack area around _alloca memory reserved by this function is corrupted
Data: <
Allocation number within this function: 
Size: 
Address: 0x
Stack area around _alloca memory reserved by this function is corrupted
%s%s%p%s%I64d%s%d%s
%s%s%s%s
A variable is being used without being initialized.
Stack pointer corruption
Cast to smaller type causing loss of data
Stack memory corruption
Local variable used before initialization
Stack around _alloca corrupted
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\ioinit.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\stdargv.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\stdenvp.c
_hypot
_nextafter
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\_getbuf.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\tzset.c
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
SystemFunction036
`h`hhh
xppwpp
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\initmon.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\initnum.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\inittime.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dospawn.c
SystemRoot
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\cenvarg.c
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
PDBOpenValidate5
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
 delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
 new[]
 delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
 Type Descriptor'
 Base Class Descriptor at (
 Base Class Array'
 Class Hierarchy Descriptor'
 Complete Object Locator'
template-parameter-
generic-type-
`anonymous namespace'
`non-type-template-parameter
`template-parameter
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static 
virtual 
private: 
protected: 
public: 
[thunk]:
extern "C" 
short 
unsigned 
volatile
std::nullptr_t
<ellipsis>
,<ellipsis>
 throw(
double
__int8
__int16
__int32
__int64
__int128
<unknown>
wchar_t
__w64 
UNKNOWN
signed 
 volatile
`unknown ecsu'
union 
struct 
class 
coclass 
cointerface 
volatile 
const 
cli::array<
cli::pin_ptr<
{flat}
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\osfinfo.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\read.c
f:\dd\vctools\crt_bld\self_64_amd64\crt\src\a_env.c
1#SNAN
1#QNAN
C:\Users\K8team\Desktop\GetPassword\Debug x64\GetPassword.pdb
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ios@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@
.?AV_Facet_base@std@@
.?AVfacet@locale@std@@
.?AUctype_base@std@@
.?AV?$ctype@_W@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV?$numpunct@_W@std@@
.?AV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
.?AV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
.?AV?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV_System_error_category@std@@
.?AVbad_alloc@std@@
.?AVinvalid_argument@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVbad_function_call@std@@
.?AVregex_error@std@@
.?AV_Locimp@locale@std@@
.?AVcodecvt_base@std@@
.?AV?$ctype@D@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$numpunct@D@std@@
.?AV?$codecvt@DDH@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@
.?AV?$codecvt@_WDH@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AV?$codecvt@GDH@std@@
.?AV?$ctype@G@std@@
.?AV?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AUmessages_base@std@@
.?AUmoney_base@std@@
.?AUtime_base@std@@
.?AV?$collate@_W@std@@
.?AV?$messages@_W@std@@
.?AV?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$moneypunct@_W$0A@@std@@
.?AV?$_Mpunct@_W@std@@
.?AV?$moneypunct@_W$00@std@@
.?AV?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$numpunct@G@std@@
.?AV?$collate@G@std@@
.?AV?$messages@G@std@@
.?AV?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$moneypunct@G$0A@@std@@
.?AV?$_Mpunct@G@std@@
.?AV?$moneypunct@G$00@std@@
.?AV?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@
.?AV?$collate@D@std@@
.?AV?$messages@D@std@@
.?AV?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$moneypunct@D$0A@@std@@
.?AV?$_Mpunct@D@std@@
.?AV?$moneypunct@D$00@std@@
.?AV?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AVbad_typeid@std@@
.?AV__non_rtti_object@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVDNameNode@@
.?AVcharNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVDNameStatusNode@@
.?AVpairNode@@
CloseHandle
GetLastError
GetCurrentProcess
OpenProcess
GetVersionExW
FreeLibrary
GetModuleHandleW
GetProcAddress
LocalFree
FormatMessageW
LoadLibraryW
K32GetModuleInformation
GetCurrentDirectoryW
CreateFileW
SetLastError
WaitForSingleObject
CreateRemoteThread
VirtualProtect
VirtualAllocEx
VirtualFreeEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
KERNEL32.dll
GetMessageW
TranslateMessage
DispatchMessageW
USER32.dll
OpenProcessToken
AdjustTokenPrivileges
IsTextUnicode
LookupPrivilegeValueW
ADVAPI32.dll
LsaFreeReturnBuffer
LsaEnumerateLogonSessions
LsaGetLogonSessionData
Secur32.dll
PathCanonicalizeW
PathCombineW
PathIsRelativeW
SHLWAPI.dll
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetLocaleInfoEx
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleFileNameW
GetModuleHandleExW
HeapSize
HeapValidate
GetSystemInfo
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineW
InitializeCriticalSectionAndSpinCount
FatalAppExitA
GetCPInfo
LCMapStringEx
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
GetStdHandle
WriteFile
FreeEnvironmentStringsW
ExitProcess
AreFileApisANSI
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThread
GetCurrentThreadId
IsValidLocaleName
GetEnvironmentVariableA
LCMapStringA
SetConsoleCtrlHandler
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
LoadLibraryExW
GetFileType
OutputDebugStringA
WriteConsoleW
HeapFree
HeapReAlloc
HeapQueryInformation
GetModuleFileNameA
HeapAlloc
GetProcessHeap
lstrlenA
InitOnceExecuteOnce
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
GetTimeZoneInformation
GetUserDefaultLocaleName
EnumSystemLocalesEx
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
VirtualQuery
SetStdHandle
ReadConsoleW
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level='requireAdministrator' uiAccess='false' />
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>