Sample details: 1ff8f0384b2d7050fd3bb0a5f6051ba9 --

Hashes
MD5: 1ff8f0384b2d7050fd3bb0a5f6051ba9
SHA1: e48abfeffb7302597cdc2c02d6e178d9a4dfb99b
SHA256: 2c9dc088a3e51c4c476edca413909e014a85663376798d012097f7b18080e210
SSDEEP: 12288:eHE4IM43TzPjDxS1CMV1tnrDbLctZYHd:eHKznxSVVjLctZY9
Details
File Type: PE32
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasDebugData | YRP/IsBeyondImageSize | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/DebuggerException__SetConsoleCtrl | YRP/anti_dbg | YRP/screenshot | YRP/keylogger | YRP/win_registry | YRP/win_private_profile | YRP/win_files_operation | YRP/win_hook | YRP/BASE64_table | YRP/Trojan_W32_Gh0stMiancha_1_0_0 |
Source
http://118.24.147.51/Test.exe
http://118.24.147.51/Test.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
t7E;l$
D$|SUV
PQSUVW
PQQQQQ
S\_^[]
S\_^[]
t39w u&
_ 9w$u
9~Pu	P
u*9} t
t	9p(u
uLh"Q@
Ht;O u
u:j0^V
VWh"Q@
QQQQhd
SVWj(3
 ~	j Y
 ~	j [
t	9APu
NL;Apt
@L;ppt
0WWWWS
WtrHHt
tA9wht<
9p t-S
whh"Q@
t"9^ u
u;f9F&t 
u;f9FFt 
u%RRRh
SSOWVQ
t%Wh<\A
u*h`.H
t!Sh<+G
PWVWWW
j,Wj,V
j,Wj,V
WWj'Sj
j3PPPPP
~dj7WWWWW
QQSVW3
QQSVW3
u%SSSS
+F(_^[;E
F(@;F,v
F(@@;F,v
F(;^ r
F(;F0u
^(_^[]
~ 9^0u(
HtpHHt
9HhtK9M
tV9_ uQ
PSSSSS
HVt@HtWHuT
t#WWhl
SSPPhd
u$SShe
Gt9p<t9
Gt9p,t
9~xuY9^ 
tZ9^ tU
t[9^ tV
H SSIQ
@ SSHPWj
^t@_^[]
u,j@Z3
RQQQQQ
t	9HLu
;ALtHh,
RSSSSS
Sj?j@P
Sj?j@P
;M r%w
<A|0<Z
<A|S<Z
tbItDIt
jWWWWWW
Wj,_Wj
9GDuR9O@uM
GD9wHu
^<to9p@u
tj9~8u@j
9~8ucj
F4_^[]
+toHt_HtOHt6Ht
+t=Ht-Ht
	t7Ht$HHt
9C|t	3
CX+C`+E
C\+Cd+E
t^HtF-
{D+{<+
QQSVWd
0WWWWW
0SSSSS
0WWWWW
@PVh}iD
WVh}iD
0SSSSS
0SSSSS
0WWWWW
AAFFf;
^SSSSS
^SSSSS
0SSSSS
9] tI9]$u?9](u?
<\t	<.u
9E vKP
9u(v(V
^SSSSS
YSSSSS
^SSSSS
^SSSSS
s[S;7|G;w
tR99u2
t$<"u	3
>=Yt1j
< tK<	tG
j@j ^V
0A@@Ju
to=@	H
URPQQh
HHtXHHt
>If90t
tM<it-<ot)<ut%<xt!<Xt
<dty<itu<otq<utm<xti<Xte
HIf98t
HHtYHHt
^SSSSS
^SSSSS
j"^SSSSS
_VVVVV
_VVVVV
PPPPPPPP
PPPPPPPP
v	N+D$
_VVVVV
^WWWWW
^WWWWW
^SSSSS
^SSSSS
>:u8FV
Pf95\9H
VVVVVQRSSj
^SSSSS
^F<-uB
<xtX<XtT
jF<-uH
<xtV<XtR
HHt*HHt
tK<_t<<$t8<<t4<>t0<-t,<a|
<z~$<A|
<0|O<9
tU<A|B<P
tY<@tO<Zt
t\<@tXj'
Ft,Nt	NtFNt#NuV
t.<@t5V
TtUHtKHtAHt
0t-HHt
AtIHt0Hu
;t$,v-
UQPXY]Y[
t"SS9]
v$;5d	H
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
.;1s(N
HHt4HHt
Ht\Ht,
teHtFHt&Hu
ty<%tA
PPPPPPPP
^SSSSS
j"^SSSSS
u,VVWV
t VV9u
ji_jdZf;
It.It+It!It
It"IIuQ
0SSSSS
v	N+D$
_VVVVV
^SSSSS
^WWWWW
0SSSSS
8VVVVV
t+WWVPV
u)jAXf;
<+t(<-t$:
+t HHt
Invalid DateTimeSpan
Invalid DateTime
CDialog
AfxWnd90s
AfxControlBar90s
AfxMDIFrame90s
AfxFrameOrView90s
AfxOleControl90s
AfxOldWndProc423
EnumDisplayDevicesA
GetMonitorInfoA
EnumDisplayMonitors
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
GetSystemMetrics
USER32
DISPLAY
InitCommonControls
InitCommonControlsEx
InitNetworkAddressControl
HtmlHelpA
hhctrl.ocx
F#32768
%s (%s:%d)
%s (%s:%d)
Exception thrown in destructor
f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl
Afx:%p:%x:%p:%p:%p
Afx:%p:%x
commctrl_DragListMsg
CCmdTarget
CWinApp
Recent File List
File%d
Settings
PreviewPages
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxA
KERNEL32
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoDrives
RestrictRun
NoNetConnectDisconnect
NoRecentDocsHistory
NoClose
Software\Microsoft\Windows\CurrentVersion\Policies\Network
NoEntireNetwork
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
NoPlacesBar
NoBackButton
NoFileMru
Automation
Embedding
UnregserverPerUser
UnregisterPerUser
Unregserver
Unregister
RegserverPerUser
RegisterPerUser
Regserver
Register
ntdll.dll
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
kernel32.dll
%s%s.dll
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp
CWinThread
Software\Classes\
system
Software\
COleException
FCInvalidArgException
CNotSupportedException
CMemoryException
CSimpleException
CException
CreateActCtxW
comctl32.dll
comdlg32.dll
shell32.dll
f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin1.inl
CPalette
CBitmap
CBrush
CGdiObject
CPaintDC
CWindowDC
CClientDC
CUserException
CResourceException
GetLayout
GDI32.DLL
SetLayout
CObject
TypeLib
Software
SYSTEM
SECURITY
Hardware
Interface
FileType
Component Categories
Delete
NoRemove
ForceRemove
combobox
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
System
CMapPtrToPtr
AfxmReleaseManagedReferences
mfcm90.dll
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp
CPtrList
software
CDocManager
%s\shell\open\%s
%s\shell\print\%s
%s\shell\printto\%s
%s\DefaultIcon
%s\ShellNew
command
 /p "%1"
 /pt "%1" "%2" "%3" "%4"
ddeexec
[open("%1")]
[print("%1")]
[printto("%1","%2","%3","%4")]
NullFile
[printto("
[print("
[open("
InProcServer32
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp
{%08X-%04X-%04X-%02X%02X-%02X%02X%02X%02X%02X%02X}
DllGetClassObject
InprocServer32
Version
TypeLib
Control
MiscStatus\1
MiscStatus
ToolboxBitmap32
%3, %4
InprocServer32
ProgID
%sCLSID\%s
Interface\
RegisterTypeLibForUser
HELPDIR
TYPELIB\%s
CLSID\%s
ToolboxBitmap32
InprocServer32
CLSID\%s\%s
InprocServer
CToolBar
Marlett
DllGetVersion
ToolbarWindow32
CArchiveException
NotifyWinEvent
user32.dll
CFileException
CControlBar
CFrameWnd
ImageList_Draw
ImageList_GetImageInfo
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winfrm.cpp
ReBarWindow32
CFileDialog
p4GetOpenFileNameA
GetSaveFileNameA
SHCreateItemFromParsingName
Shell32.dll
%2\CLSID
%2\Insertable
%2\protocol\StdFileEditing\verb\0
%2\protocol\StdFileEditing\server
CLSID\%1
CLSID\%1\ProgID
CLSID\%1\InprocHandler32
ole32.dll
CLSID\%1\LocalServer32
CLSID\%1\Verb\0
&Edit,0,2
CLSID\%1\Verb\1
&Open,0,2
CLSID\%1\Insertable
CLSID\%1\AuxUserType\2
CLSID\%1\AuxUserType\3
CLSID\%1\DefaultIcon
CLSID\%1\MiscStatus
CLSID\%1\InProcServer32
CLSID\%1\DocObject
%2\DocObject
CLSID\%1\Printable
CLSID\%1\DefaultExtension
%9, %8
ThreadingModel
Insertable
CMapStringToPtr
CByteArray
CObArray
CRichEditCtrl
CImageList
CStatusBarCtrl
CToolBarCtrl
CListCtrl
CTreeCtrl
CTabCtrl
CAnimateCtrl
CHotKeyCtrl
CHeaderCtrl
CComboBoxEx
CProgressCtrl
CSliderCtrl
CSpinButtonCtrl
CDragListBox
msctls_statusbar32
SysListView32
SysTreeView32
msctls_updown32
msctls_trackbar32
msctls_progress32
SysHeader32
msctls_hotkey32
SysTabControl32
SysAnimate32
ImageList_Create
ImageList_Destroy
ImageList_LoadImageA
ImageList_Read
ImageList_Write
ImageList_Merge
MakeDragList
LBItemFromPt
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winctrl2.cpp
CMiniDockFrameWnd
CDockBar
CReBar
CCommonDialog
commdlg_SetRGBColor
commdlg_help
commdlg_ColorOK
commdlg_FileNameOK
commdlg_ShareViolation
commdlg_LBSelChangedNotify
CToolTipCtrl
tooltips_class32
UxTheme.dll
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
IsThemePartDefined
CScrollBar
CComboBox
CListBox
CButton
CStatic
STATIC
BUTTON
LISTBOX
COMBOBOX
SCROLLBAR
CMiniFrameWnd
f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dockcont.cpp
CPtrArray
bad allocation
CorExitProcess
SetThreadStackGuarantee
HeapQueryInformation
runtime error 
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program: 
bad exception
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
(null)
`h````
xpxxxx
`h`hhh
xppwpp
SystemFunction036
ADVAPI32.DLL
GAIsProcessorFeaturePresent
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
{flat}
`non-type-template-parameter
unsigned 
short 
<ellipsis>
,<ellipsis>
 throw(
`template-parameter
cli::pin_ptr<
cli::array<
`anonymous namespace'
generic-type-
template-parameter-
`unknown ecsu'
union 
struct 
class 
coclass 
cointerface 
extern "C" 
[thunk]:
public: 
protected: 
private: 
virtual 
static 
`template static data member destructor helper'
`template static data member constructor helper'
`local static destructor helper'
`adjustor{
`vtordisp{
`vtordispex{
const 
volatile 
volatile
 volatile
signed 
double
UNKNOWN
__int128
wchar_t
__int64
__int16
__int32
__int8
__w64 
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
Unknown exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
1#QNAN
1#SNAN
CONIN$
CONOUT$
'+?2LF
#3:O4j
OLEACC.dll
c:\Documents and Settings\Administrator\
\120170930
\20170930
\20171116
\Newpeiserver\Release\NewTest.pdb
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
lstrcpyA
CloseHandle
ReadFile
VirtualAlloc
GetFileSize
CreateFileA
FreeLibrary
WriteFile
GetProcAddress
LoadLibraryA
DeleteFileA
GetFileAttributesA
VirtualProtect
VirtualFree
IsBadReadPtr
HeapFree
GetProcessHeap
HeapAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GetVersionExA
GetModuleHandleA
lstrcmpW
MultiByteToWideChar
SetLastError
GetLastError
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrlenA
GlobalAlloc
lstrcmpA
InterlockedExchange
GetLocaleInfoA
GetModuleFileNameA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
GetCurrentProcessId
MulDiv
lstrlenW
LocalFree
FormatMessageA
GlobalSize
CopyFileA
GetModuleFileNameW
InterlockedDecrement
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetAtomNameA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
MoveFileA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GetModuleHandleW
FileTimeToSystemTime
SystemTimeToFileTime
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileSizeEx
GetFileTime
HeapReAlloc
RtlUnwind
GetCommandLineA
GetStartupInfoA
RaiseException
ExitProcess
ExitThread
CreateThread
GetSystemInfo
VirtualQuery
HeapSize
FatalAppExitA
HeapCreate
HeapDestroy
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
KERNEL32.dll
EnableWindow
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
GetClientRect
LoadIconA
GetSystemMetrics
EndDialog
GetNextDlgTabItem
GetParent
IsWindowEnabled
GetDlgItem
GetWindowLongA
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
GetWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
SetWindowPlacement
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetSysColor
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
MessageBoxA
GetMenuItemCount
GetMenuItemID
GetSubMenu
PostMessageA
UpdateWindow
IsWindowVisible
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
GetKeyState
TrackPopupMenu
TrackPopupMenuEx
ScrollWindow
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageA
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
ScrollWindowEx
PostQuitMessage
ValidateRect
GetCursorPos
TranslateMessage
GetMessageA
SetCursor
ShowOwnedPopups
GetWindowThreadProcessId
RemoveMenu
InsertMenuA
GetMenuStringA
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
GetDialogBaseUnits
GetSysColorBrush
LoadCursorA
DeleteMenu
SetCapture
WindowFromPoint
ReleaseCapture
WaitMessage
DestroyIcon
CharUpperA
UnregisterClassA
SetRectEmpty
InvalidateRect
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
GetMenuBarInfo
LoadMenuA
ReuseDDElParam
UnpackDDElParam
SetRect
SetTimer
KillTimer
GetKeyNameTextA
MapVirtualKeyA
IsRectEmpty
SetParent
UnionRect
GetDCEx
LockWindowUpdate
USER32.dll
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
GetDeviceCaps
CopyMetaFileA
CreateDCA
CreateFontIndirectA
CreateCompatibleDC
BitBlt
ExtTextOutA
GetTextExtentPoint32A
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
GetTextMetricsA
GetCharWidthA
CreateFontA
StretchDIBits
CreateCompatibleBitmap
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetBkColor
GDI32.dll
GetFileTitleA
COMDLG32.dll
ClosePrinter
DocumentPropertiesA
OpenPrinterA
WINSPOOL.DRV
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
ADVAPI32.dll
ExtractIconA
SHGetFileInfoA
DragFinish
DragQueryFileA
SHELL32.dll
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
SHLWAPI.dll
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CoCreateInstance
CLSIDFromString
CoUninitialize
CoInitializeEx
ole32.dll
OLEAUT32.dll
NewTest.dat
Servic
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
rqexsrCnsbK1r7O9/f7zrrGwvf0C858=
sbKnrrCf
2v387+7xv9Py9fTn5v4Bv+MCBZ8=
2v387+7x8PO/1fTn5v4BAAMCv+T39vn4+/q/3O/u8fDz8vW/x+b+nw==
2v387+7x8PO/1fTn5v4BAAMCv+T39vn4+/q/3O/u8fDz8vW/x+b+nw==
9/Pz76m8vK6up72xs72us7S9sq688u8D/vP+vQP+858=
4KnLz/H8BPH++r/l9vsC8MvW/fMC8f0C87/i5+/7/PEC8Z8=
8wLw870C5wKf
.?AUThank_you@Define_the_symbol__ATL_MIXED@@
.?AVCdull@@
.?AVCDialog@@
.?AVCWnd@@
.?AVCCmdTarget@@
.?AVCObject@@
.?AVCNewpeiserverApp@@
.?AVCWinApp@@
.?AVCWinThread@@
.?AVCAboutDlg@@
.?AVCNewpeiserverDlg@@
.PAVCException@@
.?AVXAccessible@CWnd@@
.?AVXAccessibleServer@CWnd@@
.?AVCTestCmdUI@@
.?AVCCmdUI@@
.?AV_AFX_HTMLHELP_STATE@@
.?AVCNoTrackObject@@
.PAVCUserException@@
.?AV?$IAccessibleProxyImpl@VCAccessibleProxy@ATL@@@ATL@@
.?AUIAccessible@@
.?AUIDispatch@@
.?AUIUnknown@@
.?AUIAccessibleProxy@@
.?AV?$CMFCComObject@VCAccessibleProxy@ATL@@@@
.?AVCAccessibleProxy@ATL@@
.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@
.?AVCComObjectRootBase@ATL@@
.?AUIOleWindow@@
.?AVCCommandLineInfo@@
.PAVCMemoryException@@
.?AVCOleException@@
.?AVCException@@
.PAVCOleException@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCNotSupportedException@@
.PAVCInvalidArgException@@
.?AVCSimpleException@@
.?AVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCInvalidArgException@@
.?AV_AFX_THREAD_STATE@@
.?AVAFX_MODULE_THREAD_STATE@@
.?AVAFX_MODULE_STATE@@
.?AVCDllIsolationWrapperBase@@
.?AVCComCtlWrapper@@
.?AVCCommDlgWrapper@@
.?AVCShellWrapper@@
.?AV_AFX_BASE_MODULE_STATE@@
.?AVCGdiObject@@
.?AVCMenu@@
.?AVCFont@@
.?AVCBitmap@@
.?AVCChevronOwnerDrawMenu@@
.PAVCResourceException@@
.?AVCResourceException@@
.?AVCUserException@@
.?AVCDC@@
.?AVCClientDC@@
.?AVCWindowDC@@
.?AVCPaintDC@@
.?AVCBrush@@
.?AVCPen@@
.?AVCAfxStringMgr@@
.?AUIAtlStringMgr@ATL@@
.?AUCThreadData@@
.?AVCMapPtrToPtr@@
.?AVCInnerUnknown@@
.?AVCHandleMap@@
.?AVCPtrList@@
.?AVCRecentFileList@@
.?AVCNewTypeDlg@@
.?AVCDocManager@@
.?AVCFile@@
.?AVCFileException@@
.?AVCToolBar@@
.?AVCControlBar@@
.?AVCToolCmdUI@@
.?AVCRgn@@
.PAVCArchiveException@@
.?AVCFixedStringMgr@ATL@@
.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@
.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@
.?AV?$CSimpleStringT@_W$0A@@ATL@@
.?AV?$CFixedStringT@V?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@$0EA@@ATL@@
.?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@
.?AV?$CSimpleStringT@D$0A@@ATL@@
.?AVCArchiveException@@
.PAVCFileException@@
.?AV?$CTypedPtrArray@VCObArray@@PAVCBitmap@@@@
.?AVCObArray@@
.?AV?$CArray@PAUHWND__@@PAU1@@@
.?AV?$CList@PAUHWND__@@PAU1@@@
.?AVCFrameWnd@@
.?AVCCommonDialog@@
.?AVXFileDialogEvents@CFileDialog@@
.?AUIFileDialogEvents@@
.?AVXFileDialogControlEvents@CFileDialog@@
.?AUIFileDialogControlEvents@@
.?AVCFileDialog@@
Apartment
.?AVCMapStringToPtr@@
.?AVCByteArray@@
.?AVCArchiveStream@@
.?AUIStream@@
.?AUISequentialStream@@
.?AVCDragListBox@@
.?AVCListBox@@
.?AVCToolBarCtrl@@
.?AVCStatusBarCtrl@@
.?AVCListCtrl@@
.?AVCTreeCtrl@@
.?AVCSpinButtonCtrl@@
.?AVCSliderCtrl@@
.?AVCProgressCtrl@@
.?AVCHeaderCtrl@@
.?AVCHotKeyCtrl@@
.?AVCTabCtrl@@
.?AVCAnimateCtrl@@
.?AVCRichEditCtrl@@
.?AVCImageList@@
.?AVCDockBar@@
.?AVCMiniDockFrameWnd@@
.?AVCMiniFrameWnd@@
.?AVCReBar@@
.?AVCToolTipCtrl@@
.?AV?$CArray@W4LoadArrayObjType@CArchive@@ABW412@@@
.?AVCStatic@@
.?AVCButton@@
.?AVCComboBox@@
.?AVCEdit@@
.?AVCScrollBar@@
.?AVCDockContext@@
.?AVCPtrArray@@
.?AVtype_info@@
.?AVbad_exception@std@@
.?AVexception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_cast@std@@
.?AVbad_typeid@std@@
.?AV__non_rtti_object@std@@
xxxxxxxxx
xxxxxxxxx
xxxxxxxxx
xxxxxxxxx
xxxxxxxxx
xxxxxxxxx
xxxxxxxxx
xxxxxxxxx
xxxxxxxxx
wwwwwwwwwp
HrCg@b	g 
SX[:N	
ech1Y%
ech1Y%
ech1Y%
RSbpS\O
QX[gbL
YX[(W)
N/f@b	g
l	g~b0R
c0R"N1Y
N*Ntepe
N*NpeW[
N*N(W 
N*N(W 
N*N(W 
N*Ncktepe
T/f&Tcknx
l	g~b0R 
[/fS_MR
g~b1Y%
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD