Deconstructing Zepto

A user at one of the locations I work at managed to get the Zepto ransomware in August. I finally got my hands on the files so I could take a look at them. Here’s what I found:

Tools I used:

  • plasma
  • strings
  • objdump

PE file sections (via plasma):

.text                [ 0x401000 - 0x416810 - 88081 - 88576 ]
.rdata               [ 0x417000 - 0x419e41 - 11842 - 12288 ]
.data                [ 0x41a000 - 0x41c2df - 8928 - 5120 ]
.rsrc                [ 0x41d000 - 0x41d507 - 1288 - 1536 ]

PE file symbols (via plasma):

0x4170b4:  GetOEMCP
0x417018:  RaiseException
0x417060:  GetProcAddress
0x4170dc:  LoadLibraryW
0x417050:  GetModuleHandleW
0x417088:  SetHandleCount
0x41704c:  InterlockedIncrement
0x417008:  UpdateResourceA
0x417020:  HeapSetInformation
0x417030:  GetLastError
0x417004:  WaitForDebugEvent
0x417040:  TlsSetValue
0x417080:  FreeEnvironmentStringsW
0x41702c:  EncodePointer
0x4170b0:  GetACP
0x4170a0:  GetTickCount
0x417038:  TlsAlloc
0x417000:  WaitCommEvent
0x4170c8:  GetCurrentProcess
0x417070:  WriteFile
0x4170b8:  IsValidCodePage
0x417078:  GetModuleFileNameW
0x417034:  HeapFree
0x41709c:  QueryPerformanceCounter
0x4170e0:  LCMapStringW
0x4170d8:  HeapSize
0x4170d0:  EnterCriticalSection
0x41706c:  ExitProcess
0x417074:  GetStdHandle
0x41703c:  TlsGetValue
0x417024:  GetStartupInfoW
0x4170ec:  HeapReAlloc
0x417054:  SetLastError
0x41707c:  GetModuleFileNameA
0x4170ac:  GetCPInfo
0x4170e8:  GetStringTypeW
0x417014:  RtlUnwind
0x4170bc:  UnhandledExceptionFilter
0x4170a4:  GetCurrentProcessId
0x4170e4:  MultiByteToWideChar
0x4170c4:  TerminateProcess
0x417084:  GetEnvironmentStringsW
0x41700c:  WideCharToMultiByte
0x417090:  GetFileType
0x417058:  GetCurrentThreadId
0x417094:  DeleteCriticalSection
0x417010:  SetConsoleCursorInfo
0x41701c:  GetCommandLineA
0x4170a8:  GetSystemTimeAsFileTime
0x417028:  IsProcessorFeaturePresent
0x417064:  HeapAlloc
0x417048:  TlsFree
0x417068:  SetUnhandledExceptionFilter
0x417098:  HeapCreate
0x41708c:  InitializeCriticalSectionAndSpinCount
0x4170cc:  LeaveCriticalSection
0x417044:  DecodePointer
0x41705c:  InterlockedDecrement
0x4170d4:  Sleep
0x4170c0:  IsDebuggerPresent

Strings:

!This program cannot be run in DOS mode.
my polygon
@ffffff
?333333
invalid map/set iterator
string too long
invalid string position
deque too long
map/set too long
bad allocation
Unknown exception
e+000
bad exception
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
July
June
April
March
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`RTTI
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
 new
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
1#QNAN
1#INF
1#IND
1#SNAN
WaitCommEvent
WaitForDebugEvent
UpdateResourceA
WideCharToMultiByte
SetConsoleCursorInfo
KERNEL32.dll
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
GetLastError
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
HeapAlloc
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSize
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
.?AVbad_alloc@std@@
.?AVexception@std@@
31351$
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ

This is a dump of the rsrc section:

0x41d000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 | ................
0x41d00f: 03 00 00 00 20 00 00 80 0e 00 00 00 40 00 00 80 | .... .......@...
0x41d01f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 | ................
0x41d02f: 01 00 00 00 58 00 00 80 02 00 00 00 70 00 00 80 | ....X.......p...
0x41d03f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 | ................
0x41d04f: 83 00 00 00 88 00 00 80 00 00 00 00 00 00 00 00 | ................
0x41d05f: 00 00 00 00 00 00 01 00 0c 04 00 00 a0 00 00 00 | ................
0x41d06f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 | ................
0x41d07f: 0c 04 00 00 b0 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41d08f: 00 00 00 00 00 00 01 00 0c 04 00 00 c0 00 00 00 | ................
0x41d09f: d0 d0 01 00 e8 02 00 00 00 00 00 00 00 00 00 00 | ................
0x41d0af: b8 d3 01 00 28 01 00 00 00 00 00 00 00 00 00 00 | ....(...........
0x41d0bf: e0 d4 01 00 22 00 00 00 00 00 00 00 00 00 00 00 | ...."...........
0x41d0cf: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 | (... ...@.......
0x41d0df: 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 | ................
0x41d0ef: 10 00 00 00 10 00 00 00 00 00 00 00 00 00 80 00 | ................
0x41d0ff: 00 80 00 00 00 80 80 00 80 00 00 00 80 00 80 00 | ................
0x41d10f: 80 80 00 00 c0 c0 c0 00 80 80 80 00 00 00 ff 00 | ................
0x41d11f: 00 ff 00 00 00 ff ff 00 ff 00 00 00 ff 00 ff 00 | ................
0x41d12f: ff ff 00 00 ff ff ff 00 00 00 00 00 00 00 77 77 | ..............ww
0x41d13f: 77 77 00 00 00 00 00 00 00 00 00 00 00 77 87 87 | ww...........w..
0x41d14f: 88 88 77 00 00 00 00 00 00 00 00 00 77 78 78 78 | ..w.........wxxx
0x41d15f: 88 88 81 77 00 00 00 00 00 00 00 07 07 87 87 87 | ...w............
0x41d16f: 88 88 81 18 70 00 00 00 00 00 00 70 80 78 78 78 | ....p......p.xxx
0x41d17f: 88 88 11 88 57 00 00 00 00 00 07 88 08 07 87 87 | ....W...........
0x41d18f: 88 88 18 85 55 70 00 00 00 00 07 88 80 80 78 78 | ....Up........xx
0x41d19f: 88 81 88 55 55 70 00 00 00 00 78 88 88 08 07 87 | ...UUp....x.....
0x41d1af: 88 18 85 55 51 77 00 00 00 00 78 88 88 80 80 78 | ...UQw....x....x
0x41d1bf: 81 88 55 51 11 17 00 00 00 0f 88 88 88 88 08 77 | ..UQ...........w
0x41d1cf: 77 85 51 11 11 17 00 00 00 0f 88 88 88 88 87 ff | w.Q.............
0x41d1df: ff 75 11 11 14 44 70 00 00 0f 88 88 88 88 7f 00 | .u...Dp.........
0x41d1ef: 00 f7 44 44 44 44 70 00 00 0f 48 48 48 48 7f 00 | ..DDDDp...HHHH..
0x41d1ff: 00 f7 44 44 44 44 70 00 00 0f 44 44 44 44 7f 00 | ..DDDDp...DDDD..
0x41d20f: 00 f7 88 88 88 88 70 00 00 0f 44 45 55 58 7f 00 | ......p...DEUX..
0x41d21f: 00 f7 88 88 88 88 70 00 00 0f 55 55 58 81 17 ff | ......p...UUX...
0x41d22f: ff ff ff ff f8 88 70 00 00 00 f5 58 81 11 88 77 | ......p....X...w
0x41d23f: 77 f0 f0 f0 f8 87 00 00 00 00 f8 81 11 18 88 88 | w...............
0x41d24f: ff f0 f0 f0 f8 87 00 00 00 00 f7 11 11 88 88 88 | ................
0x41d25f: ff f0 f0 f0 f8 87 00 00 00 00 0f 11 18 88 88 88 | ................
0x41d26f: 8f ff ff ff f8 f0 00 00 00 00 0f 11 88 88 88 88 | ................
0x41d27f: 88 f0 f0 f0 f8 f0 00 00 00 00 00 f8 88 88 88 88 | ................
0x41d28f: 88 f0 f0 f0 ff 00 00 00 00 00 00 0f 88 88 88 88 | ................
0x41d29f: 88 f0 ff f0 f0 00 00 00 00 00 00 00 ff 88 88 88 | ................
0x41d2af: 88 f0 ff f0 f0 00 00 00 00 00 00 00 00 ff 88 88 | ................
0x41d2bf: 88 f0 ff ff ff ff f0 00 00 00 00 00 00 00 ff ff | ................
0x41d2cf: ff f0 f0 f0 f0 0f f0 00 00 00 00 00 00 00 00 00 | ................
0x41d2df: 00 f0 f0 f0 f0 0f f0 00 00 00 00 00 00 00 00 00 | ................
0x41d2ef: 00 f0 ff f0 f0 0f f0 00 00 00 00 00 00 00 00 00 | ................
0x41d2ff: 00 f0 ff f0 f0 0f f0 00 00 00 00 00 00 00 00 00 | ................
0x41d30f: 00 f0 ff ff ff ff f0 00 00 00 00 00 00 00 00 00 | ................
0x41d31f: 00 f0 f0 f0 f0 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41d32f: 00 ff ff ff f0 00 00 00 ff f0 0f ff ff c0 03 ff | ................
0x41d33f: ff 00 00 ff fe 00 00 7f fc 00 00 3f f8 00 00 1f | ...........?....
0x41d34f: f8 00 00 1f f0 00 00 0f f0 00 00 0f e0 00 00 0f | ................
0x41d35f: e0 00 00 07 e0 03 c0 07 e0 03 c0 07 e0 03 c0 07 | ................
0x41d36f: e0 03 c0 07 e0 00 00 07 f0 00 00 0f f0 00 00 0f | ................
0x41d37f: f0 00 00 0f f8 00 00 1f f8 00 00 1f fc 00 00 3f | ...............?
0x41d38f: fe 00 00 7f ff 00 00 7f ff c0 00 07 ff f0 00 67 | ...............g
0x41d39f: ff ff c0 67 ff ff c0 67 ff ff c0 67 ff ff c0 07 | ...g...g...g....
0x41d3af: ff ff c0 7f ff ff c0 7f 28 00 00 00 10 00 00 00 | ........(.......
0x41d3bf: 20 00 00 00 01 00 04 00 00 00 00 00 80 00 00 00 |  ...............
0x41d3cf: 00 00 00 00 00 00 00 00 10 00 00 00 10 00 00 00 | ................
0x41d3df: 00 00 00 00 00 00 80 00 00 80 00 00 00 80 80 00 | ................
0x41d3ef: 80 00 00 00 80 00 80 00 80 80 00 00 c0 c0 c0 00 | ................
0x41d3ff: 80 80 80 00 00 00 ff 00 00 ff 00 00 00 ff ff 00 | ................
0x41d40f: ff 00 00 00 ff 00 ff 00 ff ff 00 00 ff ff ff 00 | ................
0x41d41f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41d42f: 00 00 07 70 07 88 00 00 00 0e 77 77 77 00 00 00 | ...p......www...
0x41d43f: 00 be e7 77 70 00 78 00 00 bb ee 77 70 07 78 00 | ...wp.x....wp.x.
0x41d44f: 0a ab bb e7 7f 77 77 80 0a aa aa 80 87 77 77 80 | .....ww......ww.
0x41d45f: 07 77 7f 0f 07 77 77 80 87 77 77 80 8b bb bb 80 | .w...ww..ww.....
0x41d46f: 87 77 77 fa ee bb bb 80 08 77 7f 77 aa ee b8 00 | .ww......w.w....
0x41d47f: 08 77 f7 77 7a ae e8 00 00 8f 77 77 77 aa 80 00 | .w.wz.....www...
0x41d48f: 00 08 87 77 77 88 00 00 00 00 08 88 88 00 00 00 | ...ww...........
0x41d49f: ff 01 00 00 f8 39 00 00 e0 0c 00 00 c0 00 00 00 | .....9..........
0x41d4af: 80 03 00 00 80 03 00 00 00 01 00 00 00 01 00 00 | ................
0x41d4bf: 00 01 00 00 00 01 00 00 00 01 00 00 80 03 00 00 | ................
0x41d4cf: 80 03 00 00 c0 07 00 00 e0 0f 00 00 f8 3f 00 00 | .............?..
0x41d4df: 00 00 01 00 02 00 20 20 10 00 01 00 04 00 e8 02 | ......  ........
0x41d4ef: 00 00 01 00 10 10 10 00 01 00 04 00 28 01 00 00 | ............(...
0x41d4ff: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41d50f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................

This is a dump of the data section:

0x41a000: 90 72 41 00 00 00 00 00 2e 3f 41 56 62 61 64 5f | .rA......?AVbad_
0x41a00f: 61 6c 6c 6f 63 40 73 74 64 40 40 00 90 72 41 00 | alloc@std@@..rA.
0x41a01f: 00 00 00 00 2e 3f 41 56 65 78 63 65 70 74 69 6f | .....?AVexceptio
0x41a02f: 6e 40 73 74 64 40 40 00 64 00 00 00 00 00 00 00 | n@std@@.d.......
0x41a03f: 32 00 00 00 00 00 00 00 0f bd f1 2a c4 69 f1 87 | 2..........*.i..
0x41a04f: 2e 39 18 43 4e 88 e0 36 36 0f ad ce 2c df 0f ad | .9.CN..66...,...
0x41a05f: ce 36 80 e8 cf c6 c0 1f f3 86 c3 f3 80 e8 5f f3 | .6............_.
0x41a06f: 28 e0 c6 c0 4f 0f ac ce 9f 0f bd f1 80 e8 3f f6 | (...O.........?.
0x41a07f: c2 8f 2c df 4e 0f b3 ce 0f ce eb 01 1f c6 c0 6f | ..,.N..........o
0x41a08f: 2a c4 4e 4e f3 0f b3 ce 86 c3 0f c0 c3 c6 c0 ef | *.NN............
0x41a09f: 8a c4 0f ce 0f ce 0f c0 c3 2c 7f c0 e8 cf 28 e0 | .........,....(.
0x41a0af: 0f ba f6 6f 0f b3 ce f6 c2 0f 2a c4 c0 e8 af 0f | ...o......*.....
0x41a0bf: be f4 f3 f6 d8 0f be f4 0f ac ce 3f c0 e8 8f eb | ...........?....
0x41a0cf: 01 df 0f c0 c3 f6 c2 7f 2a c4 f6 d8 28 e0 80 e8 | ........*...(...
0x41a0df: bf 4e 36 8a c4 fe c8 0f ac ce 4f 8d 35 9f e6 11 | .N6.......O.5...
0x41a0ef: 90 f7 c1 9a f5 e4 17 2c 67 69 f1 b7 9e e9 08 89 | .......,gi......
0x41a0ff: cb 0f b3 ce 8a c4 0f ce eb 01 6f eb 01 bf f6 c2 | ..........o.....
0x41a10f: 0f 0f ce 0f c0 c3 0f bd f1 84 d5 65 fe c8 0f c0 | ...........e....
0x41a11f: c3 eb 01 8f 69 f1 df 26 51 d0 d1 f3 84 d5 0f ad | ....i..&Q.......
0x41a12f: ce 4e f3 eb 01 e7 65 c6 c0 87 0f ba f6 d7 88 e0 | .N....e.........
0x41a13f: 80 e8 77 0f bd f1 c0 e8 17 f3 f3 0f be f4 8d 35 | ..w............5
0x41a14f: 57 be 89 28 0f bc da fe c8 28 e0 2c bf 0f bd f1 | W..(.....(.,....
0x41a15f: d2 e8 f6 d8 f3 0f c0 c3 2a c4 4e 36 65 86 c3 4e | ........*.N6e..N
0x41a16f: fe c8 65 28 e0 d2 e8 0f ce c0 e8 0f 80 e8 5f 36 | ..e(.........._6
0x41a17f: 4e c0 e8 4f 28 e0 0f ce 0f ce 28 e0 0f ba f6 df | N..O(.....(.....
0x41a18f: 88 e0 86 c3 f6 d8 28 e0 65 0f be f4 0f ad ce b0 | ......(.e.......
0x41a19f: 5f d2 e8 36 0f ac ce 4f 2c 9f 86 c3 0f ba f6 3f | _..6...O,......?
0x41a1af: eb 01 8f 0f bd f1 0f ba f6 2f 2c 7f b0 cf f6 c2 | ........./,.....
0x41a1bf: 1f 69 f1 6f 76 61 a0 85 c8 2a c4 0f bd f1 c6 c0 | .i.ova...*......
0x41a1cf: d7 0f be f4 d2 e8 86 c3 eb 01 17 c0 e8 67 fe c8 | .............g..
0x41a1df: c6 c0 07 69 f1 57 be 89 28 31 cb 2a c4 65 28 e0 | ...i.W..(1.*.e(.
0x41a1ef: eb 01 0f f3 f6 d8 2a c4 c6 c0 4f b0 9f eb 01 ef | ......*...O.....
0x41a1ff: 0f ac ce 3f 0f c0 c3 84 d5 80 e8 2f f6 c2 7f 4e | ...?......./...N
0x41a20f: 65 f3 f6 d8 0f ac ce 0f c0 e8 5f f3 0f c0 c3 86 | e........._.....
0x41a21f: c3 c6 c0 9f 4e 0f bd f1 c0 e8 8f 69 f1 df 26 51 | ....N......i..&Q
0x41a22f: d0 31 cb c3 5c af d8 1d 43 e0 09 d2 33 7e 6b 00 | .1..\...C...3~k.
0x41a23f: 43 af ca 0a 64 ee 00 f5 00 00 00 00 52 a6 c4 1d | C...d.......R...
0x41a24f: 47 cf 0d fe 38 6a 4f 00 52 b8 ce 0f 56 e2 2a f9 | G...8jO.R...V.*.
0x41a25f: 30 63 6b 00 59 af ca 1e 64 f5 09 f5 00 00 00 00 | 0ck.Y...d.......
0x41a26f: 56 a6 c4 0c 43 eb 2d fc 30 69 49 00 56 af df 3e | V...C.-.0iI.V..>
0x41a27f: 50 e8 0f f5 2f 75 62 89 ae 7c 00 00 56 af df 28 | P.../ub..|..V..(
0x41a28f: 4b eb 09 c3 35 7c 4f 00 56 af df 23 4d e3 19 fc | K...5|O.V..#M...
0x41a29f: 39 40 43 80 aa 42 49 f9 71 70 00 00 5c bf c7 1a | 9@C..BI.qp..\...
0x41a2af: 4b c5 15 e4 39 52 45 bb a6 68 4d d7 7c 50 aa 00 | K...9RE..hM.|P..
0x41a2bf: 64 b9 ce 1c 11 b5 42 f4 30 6a 00 00 7a af d9 00 | d.....B.0j..z...
0x41a2cf: 47 eb 5f a2 72 62 46 80 00 00 00 00 42 a6 ce 0b | G._.rbF.....B...
0x41a2df: 52 00 00 00 56 af df 2f 61 d7 00 00 52 b8 ce 0f | R...V../a...R...
0x41a2ef: 56 e2 38 f8 2e 63 4b 88 00 00 00 00 5d a5 ca 0a | V.8..cK.....]...
0x41a2ff: 6e ee 0e e2 3d 74 53 ad 00 00 00 00 56 af df 3e | n...=tS.....V..>
0x41a30f: 50 e8 0f d1 38 62 58 89 bc 7f 00 00 33 31 33 35 | P...8bX.....3135
0x41a31f: 31 24 00 00 5f be fe 00 4f e6 1c c6 35 63 5d a3 | 1$.._...O...5c].
0x41a32f: a9 5f 4d f7 60 58 b7 79 00 00 00 00 47 a3 d9 1a | ._M.`X.y....G...
0x41a33f: 57 e6 00 d6 2e 63 4f 00 52 b8 ce 0f 56 e2 3c e2 | W....cO.R...V.<.
0x41a34f: 33 65 4f 9f bc 4d 00 00 47 a3 d9 1a 57 e6 00 d1 | 3eO..M..G...W...
0x41a35f: 30 6a 45 8f 00 00 00 00 56 af df 3a 4a f5 09 f1 | 0jE.....V..:J...
0x41a36f: 38 45 45 82 bb 69 50 e0 00 00 00 00 47 a3 d9 1a | 8EE..iP.....G...
0x41a37f: 57 e6 00 d1 30 6a 45 8f 8a 74 00 00 46 b8 c2 1a | W...0jE..t..F...
0x41a38f: 47 d7 1e ff 3f 63 59 9f 82 69 45 fb 66 48 00 00 | G...?cY..iE.fH..
0x41a39f: 42 af df 3a 4a f5 09 f1 38 45 45 82 bb 69 50 e0 | B..:J...8EE..iP.
0x41a3af: 00 00 00 00 43 af d8 1b 4f e2 38 f8 2e 63 4b 88 | ....C...O.8..cK.
0x41a3bf: 00 00 00 00 43 be c7 28 4b eb 00 dd 39 6b 45 9e | ....C..(K...9kE.
0x41a3cf: b6 00 00 00 43 af ca 0a 72 f5 03 f3 39 75 59 a1 | ....C...r...9uY.
0x41a3df: aa 61 47 e6 6d 00 00 00 45 af d9 03 4b e9 0d e4 | .aG.m...E...K...
0x41a3ef: 39 56 58 83 ac 69 5b e7 00 00 00 00 7f be cf 02 | 9VX..i[.........
0x41a3ff: 4e a9 08 fc 30 00 00 00 90 72 41 00 00 00 00 00 | N...0....rA.....
0x41a40f: 2e 3f 41 56 6c 6f 67 69 63 5f 65 72 72 6f 72 40 | .?AVlogic_error@
0x41a41f: 73 74 64 40 40 00 00 00 90 72 41 00 00 00 00 00 | std@@....rA.....
0x41a42f: 2e 3f 41 56 6c 65 6e 67 74 68 5f 65 72 72 6f 72 | .?AVlength_error
0x41a43f: 40 73 74 64 40 40 00 00 90 72 41 00 00 00 00 00 | @std@@...rA.....
0x41a44f: 2e 3f 41 56 6f 75 74 5f 6f 66 5f 72 61 6e 67 65 | .?AVout_of_range
0x41a45f: 40 73 74 64 40 40 00 00 00 00 00 00 00 00 00 00 | @std@@..........
0x41a46f: 75 98 00 00 73 98 00 00 00 00 00 00 00 00 00 00 | u...s...........
0x41a47f: 90 72 41 00 00 00 00 00 2e 3f 41 56 74 79 70 65 | .rA......?AVtype
0x41a48f: 5f 69 6e 66 6f 40 40 00 00 00 00 00 00 00 00 00 | _info@@.........
0x41a49f: 02 00 00 00 0f 2b 41 00 0f 2b 41 00 0f 2b 41 00 | .....+A..+A..+A.
0x41a4af: 0f 2b 41 00 0f 2b 41 00 0f 2b 41 00 0f 2b 41 00 | .+A..+A..+A..+A.
0x41a4bf: 0f 2b 41 00 0f 2b 41 00 0f 2b 41 00 90 72 41 00 | .+A..+A..+A..rA.
0x41a4cf: 00 00 00 00 2e 3f 41 56 62 61 64 5f 65 78 63 65 | .....?AVbad_exce
0x41a4df: 70 74 69 6f 6e 40 73 74 64 40 40 00 ff ff ff ff | ption@std@@.....
0x41a4ef: ff ff ff ff 4e e6 40 bb b1 19 bf 44 00 00 00 00 | ....N.@....D....
0x41a4ff: ff ff ff ff 80 0a 00 00 00 00 00 00 00 00 00 00 | ................
0x41a50f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a51f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a52f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a53f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a54f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a55f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a56f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a57f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a58f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 10 | ................
0x41a59f: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 | ................
0x41a5af: 10 10 10 10 10 10 10 10 00 00 00 00 00 00 20 20 | ..............  
0x41a5bf: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 |                 
0x41a5cf: 20 20 20 20 20 20 20 20 00 00 00 00 00 00 00 00 |         ........
0x41a5df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a5ef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a5ff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a60f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a61f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a62f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a63f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a64f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a65f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a66f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a67f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a68f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 61 62 | ..............ab
0x41a69f: 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 | cdefghijklmnopqr
0x41a6af: 73 74 75 76 77 78 79 7a 00 00 00 00 00 00 41 42 | stuvwxyz......AB
0x41a6bf: 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 | CDEFGHIJKLMNOPQR
0x41a6cf: 53 54 55 56 57 58 59 5a 00 00 00 00 00 00 00 00 | STUVWXYZ........
0x41a6df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a6ef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a6ff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a70f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a71f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a72f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a73f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a74f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a75f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a76f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a77f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a78f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a79f: 00 00 10 10 10 10 10 10 10 10 10 10 10 10 10 10 | ................
0x41a7af: 10 10 10 10 10 10 10 10 10 10 10 10 00 00 00 00 | ................
0x41a7bf: 00 00 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | ..              
0x41a7cf: 20 20 20 20 20 20 20 20 20 20 20 20 00 00 00 00 |             ....
0x41a7df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a7ef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a7ff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a80f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a81f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a82f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a83f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a84f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a85f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a86f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a87f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a88f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a89f: 00 00 00 00 00 00 00 00 00 61 62 63 64 65 66 67 | .........abcdefg
0x41a8af: 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 | hijklmnopqrstuvw
0x41a8bf: 78 79 7a 00 00 00 00 00 00 41 42 43 44 45 46 47 | xyz......ABCDEFG
0x41a8cf: 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 | HIJKLMNOPQRSTUVW
0x41a8df: 58 59 5a 00 00 00 00 00 00 00 00 00 00 00 00 00 | XYZ.............
0x41a8ef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a8ff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a90f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a91f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a92f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a93f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a94f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a95f: 00 00 00 00 00 00 00 00 40 a5 41 00 01 02 04 08 | ........@.A.....
0x41a96f: a4 03 00 00 60 82 79 82 21 00 00 00 00 00 00 00 | ....`.y.!.......
0x41a97f: a6 df 00 00 00 00 00 00 a1 a5 00 00 00 00 00 00 | ................
0x41a98f: 81 9f e0 fc 00 00 00 00 40 7e 80 fc 00 00 00 00 | ........@~......
0x41a99f: a8 03 00 00 c1 a3 da a3 20 00 00 00 00 00 00 00 | ........ .......
0x41a9af: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a9bf: 81 fe 00 00 00 00 00 00 40 fe 00 00 00 00 00 00 | ........@.......
0x41a9cf: b5 03 00 00 c1 a3 da a3 20 00 00 00 00 00 00 00 | ........ .......
0x41a9df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41a9ef: 81 fe 00 00 00 00 00 00 41 fe 00 00 00 00 00 00 | ........A.......
0x41a9ff: b6 03 00 00 cf a2 e4 a2 1a 00 e5 a2 e8 a2 5b 00 | ..............[.
0x41aa0f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41aa1f: 81 fe 00 00 00 00 00 00 40 7e a1 fe 00 00 00 00 | ........@~......
0x41aa2f: 51 05 00 00 51 da 5e da 20 00 5f da 6a da 32 00 | Q...Q.^. ._.j.2.
0x41aa3f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41aa4f: 81 d3 d8 de e0 f9 00 00 31 7e 81 fe 00 00 00 00 | ........1~......
0x41aa5f: fe ff ff ff 43 00 00 00 30 81 41 00 2c 81 41 00 | ....C...0.A.,.A.
0x41aa6f: 28 81 41 00 24 81 41 00 20 81 41 00 1c 81 41 00 | (.A.$.A. .A...A.
0x41aa7f: 18 81 41 00 10 81 41 00 08 81 41 00 00 81 41 00 | ..A...A...A...A.
0x41aa8f: f4 80 41 00 e8 80 41 00 e0 80 41 00 d4 80 41 00 | ..A...A...A...A.
0x41aa9f: d0 80 41 00 cc 80 41 00 c8 80 41 00 c4 80 41 00 | ..A...A...A...A.
0x41aaaf: c0 80 41 00 bc 80 41 00 b8 80 41 00 b4 80 41 00 | ..A...A...A...A.
0x41aabf: b0 80 41 00 ac 80 41 00 a8 80 41 00 a4 80 41 00 | ..A...A...A...A.
0x41aacf: 9c 80 41 00 90 80 41 00 88 80 41 00 80 80 41 00 | ..A...A...A...A.
0x41aadf: c0 80 41 00 78 80 41 00 70 80 41 00 68 80 41 00 | ..A.x.A.p.A.h.A.
0x41aaef: 5c 80 41 00 54 80 41 00 48 80 41 00 3c 80 41 00 | \.A.T.A.H.A.<.A.
0x41aaff: 38 80 41 00 34 80 41 00 28 80 41 00 14 80 41 00 | 8.A.4.A.(.A...A.
0x41ab0f: 08 80 41 00 09 04 00 00 01 00 00 00 00 00 00 00 | ..A.............
0x41ab1f: 00 80 41 00 f8 7f 41 00 f0 7f 41 00 e8 7f 41 00 | ..A...A...A...A.
0x41ab2f: e0 7f 41 00 d8 7f 41 00 d0 7f 41 00 c0 7f 41 00 | ..A...A...A...A.
0x41ab3f: b0 7f 41 00 a0 7f 41 00 8c 7f 41 00 78 7f 41 00 | ..A...A...A.x.A.
0x41ab4f: 68 7f 41 00 54 7f 41 00 4c 7f 41 00 44 7f 41 00 | h.A.T.A.L.A.D.A.
0x41ab5f: 3c 7f 41 00 34 7f 41 00 2c 7f 41 00 24 7f 41 00 | <.A.4.A.,.A.$.A.
0x41ab6f: 1c 7f 41 00 14 7f 41 00 0c 7f 41 00 04 7f 41 00 | ..A...A...A...A.
0x41ab7f: fc 7e 41 00 f4 7e 41 00 e4 7e 41 00 d0 7e 41 00 | .~A..~A..~A..~A.
0x41ab8f: c4 7e 41 00 b8 7e 41 00 2c 7f 41 00 ac 7e 41 00 | .~A..~A.,.A..~A.
0x41ab9f: a0 7e 41 00 90 7e 41 00 7c 7e 41 00 6c 7e 41 00 | .~A..~A.|~A.l~A.
0x41abaf: 58 7e 41 00 44 7e 41 00 3c 7e 41 00 34 7e 41 00 | X~A.D~A.<~A.4~A.
0x41abbf: 20 7e 41 00 f8 7d 41 00 e4 7d 41 00 00 00 00 00 |  ~A..}A..}A.....
0x41abcf: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41abdf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41abef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41abff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41ac0f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41ac1f: 00 00 00 00 00 00 00 00 64 aa 41 00 00 00 00 00 | ........d.A.....
0x41ac2f: 00 00 00 00 00 00 00 00 64 aa 41 00 00 00 00 00 | ........d.A.....
0x41ac3f: 00 00 00 00 00 00 00 00 64 aa 41 00 00 00 00 00 | ........d.A.....
0x41ac4f: 00 00 00 00 00 00 00 00 64 aa 41 00 00 00 00 00 | ........d.A.....
0x41ac5f: 00 00 00 00 00 00 00 00 64 aa 41 00 00 00 00 00 | ........d.A.....
0x41ac6f: 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 | ................
0x41ac7f: 00 00 00 00 00 00 00 00 00 00 00 00 78 af 41 00 | ............x.A.
0x41ac8f: 00 00 00 00 00 00 00 00 68 8a 41 00 f0 8e 41 00 | ........h.A...A.
0x41ac9f: 70 90 41 00 68 aa 41 00 d0 ab 41 00 d0 ab 41 00 | p.A.h.A...A...A.
0x41acaf: 40 a5 41 00 00 00 00 00 01 00 00 00 16 00 00 00 | @.A.............
0x41acbf: 02 00 00 00 02 00 00 00 03 00 00 00 02 00 00 00 | ................
0x41accf: 04 00 00 00 18 00 00 00 05 00 00 00 0d 00 00 00 | ................
0x41acdf: 06 00 00 00 09 00 00 00 07 00 00 00 0c 00 00 00 | ................
0x41acef: 08 00 00 00 0c 00 00 00 09 00 00 00 0c 00 00 00 | ................
0x41acff: 0a 00 00 00 07 00 00 00 0b 00 00 00 08 00 00 00 | ................
0x41ad0f: 0c 00 00 00 16 00 00 00 0d 00 00 00 16 00 00 00 | ................
0x41ad1f: 0f 00 00 00 02 00 00 00 10 00 00 00 0d 00 00 00 | ................
0x41ad2f: 11 00 00 00 12 00 00 00 12 00 00 00 02 00 00 00 | ................
0x41ad3f: 21 00 00 00 0d 00 00 00 35 00 00 00 02 00 00 00 | !.......5.......
0x41ad4f: 41 00 00 00 0d 00 00 00 43 00 00 00 02 00 00 00 | A.......C.......
0x41ad5f: 50 00 00 00 11 00 00 00 52 00 00 00 0d 00 00 00 | P.......R.......
0x41ad6f: 53 00 00 00 0d 00 00 00 57 00 00 00 16 00 00 00 | S.......W.......
0x41ad7f: 59 00 00 00 0b 00 00 00 6c 00 00 00 0d 00 00 00 | Y.......l.......
0x41ad8f: 6d 00 00 00 20 00 00 00 70 00 00 00 1c 00 00 00 | m... ...p.......
0x41ad9f: 72 00 00 00 09 00 00 00 06 00 00 00 16 00 00 00 | r...............
0x41adaf: 80 00 00 00 0a 00 00 00 81 00 00 00 0a 00 00 00 | ................
0x41adbf: 82 00 00 00 09 00 00 00 83 00 00 00 16 00 00 00 | ................
0x41adcf: 84 00 00 00 0d 00 00 00 91 00 00 00 29 00 00 00 | ............)...
0x41addf: 9e 00 00 00 0d 00 00 00 a1 00 00 00 02 00 00 00 | ................
0x41adef: a4 00 00 00 0b 00 00 00 a7 00 00 00 0d 00 00 00 | ................
0x41adff: b7 00 00 00 11 00 00 00 ce 00 00 00 02 00 00 00 | ................
0x41ae0f: d7 00 00 00 0b 00 00 00 18 07 00 00 0c 00 00 00 | ................
0x41ae1f: 0c 00 00 00 08 00 00 00 6c 8c 41 00 00 00 00 00 | ........l.A.....
0x41ae2f: 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 | ................
0x41ae3f: 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 | ................
0x41ae4f: 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41ae5f: 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 | ................
0x41ae6f: 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41ae7f: 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41ae8f: 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 | ................
0x41ae9f: 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41aeaf: 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 | ................
0x41aebf: 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41aecf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41aedf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41aeef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41aeff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41af0f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41af1f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41af2f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41af3f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41af4f: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41af5f: 20 05 93 19 00 00 00 00 00 00 00 00 00 00 00 00 |  ...............
0x41af6f: 2e 00 00 00 2e 00 00 00 70 af 41 00 94 c1 41 00 | ........p.A...A.
0x41af7f: 94 c1 41 00 94 c1 41 00 94 c1 41 00 94 c1 41 00 | ..A...A...A...A.
0x41af8f: 94 c1 41 00 94 c1 41 00 94 c1 41 00 94 c1 41 00 | ..A...A...A...A.
0x41af9f: 7f 7f 7f 7f 7f 7f 7f 7f 74 af 41 00 98 c1 41 00 | ........t.A...A.
0x41afaf: 98 c1 41 00 98 c1 41 00 98 c1 41 00 98 c1 41 00 | ..A...A...A...A.
0x41afbf: 98 c1 41 00 98 c1 41 00 78 af 41 00 68 8a 41 00 | ..A...A.x.A.h.A.
0x41afcf: 6a 8c 41 00 01 00 00 00 2e 00 00 00 01 00 00 00 | j.A.............
0x41afdf: 00 04 00 00 01 fc ff ff 35 00 00 00 0b 00 00 00 | ........5.......
0x41afef: 40 00 00 00 ff 03 00 00 80 00 00 00 81 ff ff ff | @...............
0x41afff: 18 00 00 00 08 00 00 00 20 00 00 00 7f 00 00 00 | ........ .......
0x41b00f: 00 00 00 00 00 00 00 00 00 a0 02 40 00 00 00 00 | ...........@....
0x41b01f: 00 00 00 00 00 c8 05 40 00 00 00 00 00 00 00 00 | .......@........
0x41b02f: 00 fa 08 40 00 00 00 00 00 00 00 00 40 9c 0c 40 | ...@........@..@
0x41b03f: 00 00 00 00 00 00 00 00 50 c3 0f 40 00 00 00 00 | ........P..@....
0x41b04f: 00 00 00 00 24 f4 12 40 00 00 00 00 00 00 00 80 | ....$..@........
0x41b05f: 96 98 16 40 00 00 00 00 00 00 00 20 bc be 19 40 | ...@....... ...@
0x41b06f: 00 00 00 00 00 04 bf c9 1b 8e 34 40 00 00 00 a1 | ..........4@....
0x41b07f: ed cc ce 1b c2 d3 4e 40 20 f0 9e b5 70 2b a8 ad | ......N@ ...p+..
0x41b08f: c5 9d 69 40 d0 5d fd 25 e5 1a 8e 4f 19 eb 83 40 | ..i@.].%...O...@
0x41b09f: 71 96 d7 95 43 0e 05 8d 29 af 9e 40 f9 bf a0 44 | q...C...)..@...D
0x41b0af: ed 81 12 8f 81 82 b9 40 bf 3c d5 a6 cf ff 49 1f | .......@.<....I.
0x41b0bf: 78 c2 d3 40 6f c6 e0 8c e9 80 c9 47 ba 93 a8 41 | x..@o......G...A
0x41b0cf: bc 85 6b 55 27 39 8d f7 70 e0 7c 42 bc dd 8e de | ..kU'9..p.|B....
0x41b0df: f9 9d fb eb 7e aa 51 43 a1 e6 76 e3 cc f2 29 2f | ....~.QC..v...)/
0x41b0ef: 84 81 26 44 28 10 17 aa f8 ae 10 e3 c5 c4 fa 44 | ..&D(..........D
0x41b0ff: eb a7 d4 f3 f7 eb e1 4a 7a 95 cf 45 65 cc c7 91 | .......Jz..Ee...
0x41b10f: 0e a6 ae a0 19 e3 a3 46 0d 65 17 0c 75 81 86 75 | .......F.e..u..u
0x41b11f: 76 c9 48 4d 58 42 e4 a7 93 39 3b 35 b8 b2 ed 53 | v.HMXB...9;5...S
0x41b12f: 4d a7 e5 5d 3d c5 5d 3b 8b 9e 92 5a ff 5d a6 f0 | M..]=.];...Z.]..
0x41b13f: a1 20 c0 54 a5 8c 37 61 d1 fd 8b 5a 8b d8 25 5d | . .T..7a...Z..%]
0x41b14f: 89 f9 db 67 aa 95 f8 f3 27 bf a2 c8 5d dd 80 6e | ...g....'...]..n
0x41b15f: 4c c9 9b 97 20 8a 02 52 60 c4 25 75 00 00 00 00 | L... ..R`.%u....
0x41b16f: cd cc cd cc cc cc cc cc cc cc fb 3f 71 3d 0a d7 | ...........?q=..
0x41b17f: a3 70 3d 0a d7 a3 f8 3f 5a 64 3b df 4f 8d 97 6e | .p=....?Zd;.O..n
0x41b18f: 12 83 f5 3f c3 d3 2c 65 19 e2 58 17 b7 d1 f1 3f | ...?..,e..X....?
0x41b19f: d0 0f 23 84 47 1b 47 ac c5 a7 ee 3f 40 a6 b6 69 | ..#.G.G....?@..i
0x41b1af: 6c af 05 bd 37 86 eb 3f 33 3d bc 42 7a e5 d5 94 | l...7..?3=.Bz...
0x41b1bf: bf d6 e7 3f c2 fd fd ce 61 84 11 77 cc ab e4 3f | ...?....a..w...?
0x41b1cf: 2f 4c 5b e1 4d c4 be 94 95 e6 c9 3f 92 c4 53 3b | /L[.M......?..S;
0x41b1df: 75 44 cd 14 be 9a af 3f de 67 ba 94 39 45 ad 1e | uD.....?.g..9E..
0x41b1ef: b1 cf 94 3f 24 23 c6 e2 bc ba 3b 31 61 8b 7a 3f | ...?$#....;1a.z?
0x41b1ff: 61 55 59 c1 7e b1 53 7c 12 bb 5f 3f d7 ee 2f 8d | aUY.~.S|.._?../.
0x41b20f: 06 be 92 85 15 fb 44 3f 24 3f a5 e9 39 a5 27 ea | ......D?$?..9.'.
0x41b21f: 7f a8 2a 3f 7d ac a1 e4 bc 64 7c 46 d0 dd 55 3e | ..*?}....d|F..U>
0x41b22f: 63 7b 06 cc 23 54 77 83 ff 91 81 3d 91 fa 3a 19 | c{..#Tw....=..:.
0x41b23f: 7a 63 25 43 31 c0 ac 3c 21 89 d1 38 82 47 97 b8 | zc%C1..

This is a dump of the rdata section:

0x417000: d0 99 01 00 e0 99 01 00 f4 99 01 00 06 9a 01 00 | ................
0x41700f: 1c 9a 01 00 42 9a 01 00 4e 9a 01 00 60 9a 01 00 | ....B...N...`...
0x41701f: 72 9a 01 00 88 9a 01 00 9a 9a 01 00 b6 9a 01 00 | r...............
0x41702f: c6 9a 01 00 d6 9a 01 00 e2 9a 01 00 ee 9a 01 00 | ................
0x41703f: fc 9a 01 00 0a 9b 01 00 1a 9b 01 00 24 9b 01 00 | ............$...
0x41704f: 3c 9b 01 00 50 9b 01 00 60 9b 01 00 76 9b 01 00 | <...P...`...v...
0x41705f: 8e 9b 01 00 a0 9b 01 00 ac 9b 01 00 ca 9b 01 00 | ................
0x41706f: d8 9b 01 00 e4 9b 01 00 f4 9b 01 00 0a 9c 01 00 | ................
0x41707f: 20 9c 01 00 3a 9c 01 00 54 9c 01 00 66 9c 01 00 |  ...:...T...f...
0x41708f: 8e 9c 01 00 9c 9c 01 00 b4 9c 01 00 c2 9c 01 00 | ................
0x41709f: dc 9c 01 00 ec 9c 01 00 02 9d 01 00 1c 9d 01 00 | ................
0x4170af: 28 9d 01 00 32 9d 01 00 3e 9d 01 00 50 9d 01 00 | (...2...>...P...
0x4170bf: 6c 9d 01 00 80 9d 01 00 94 9d 01 00 a8 9d 01 00 | l...............
0x4170cf: c0 9d 01 00 d8 9d 01 00 e0 9d 01 00 ec 9d 01 00 | ................
0x4170df: fc 9d 01 00 0c 9e 01 00 22 9e 01 00 34 9e 01 00 | ........"...4...
0x4170ef: 00 00 00 00 00 00 00 00 e0 66 41 00 f0 66 41 00 | .........fA..fA.
0x4170ff: 00 67 41 00 10 67 41 00 20 67 41 00 30 67 41 00 | .gA..gA. gA.0gA.
0x41710f: 40 67 41 00 50 67 41 00 60 67 41 00 70 67 41 00 | @gA.PgA.`gA.pgA.
0x41711f: 80 67 41 00 90 67 41 00 a0 67 41 00 b0 67 41 00 | .gA..gA..gA..gA.
0x41712f: c0 67 41 00 e0 67 41 00 f0 67 41 00 00 00 00 00 | .gA..gA..gA.....
0x41713f: 00 00 00 00 e4 e5 40 00 42 04 41 00 b0 1d 41 00 | ......@.B.A...A.
0x41714f: 39 07 41 00 00 00 00 00 00 00 00 00 00 00 00 00 | 9.A.............
0x41715f: 00 00 00 00 00 00 00 00 6d 79 20 70 6f 6c 79 67 | ........my polyg
0x41716f: 6f 6e 00 00 00 00 00 00 00 00 00 00 00 00 10 40 | on.............@
0x41717f: 00 00 00 00 00 00 08 40 66 66 66 66 66 66 fe 3f | .......@ffffff.?
0x41718f: 33 33 33 33 33 33 03 40 00 00 00 00 00 00 1c 40 | 333333.@.......@
0x41719f: 00 00 00 00 00 00 18 40 00 00 00 00 00 00 14 40 | .......@.......@
0x4171af: 00 00 00 00 00 00 00 40 ff ff ff ff 69 6e 76 61 | .......@....inva
0x4171bf: 6c 69 64 20 6d 61 70 2f 73 65 74 3c 54 3e 20 69 | lid map/set i
0x4171cf: 74 65 72 61 74 6f 72 00 73 74 72 69 6e 67 20 74 | terator.string t
0x4171df: 6f 6f 20 6c 6f 6e 67 00 69 6e 76 61 6c 69 64 20 | oo long.invalid 
0x4171ef: 73 74 72 69 6e 67 20 70 6f 73 69 74 69 6f 6e 00 | string position.
0x4171ff: 64 65 71 75 65 3c 54 3e 20 74 6f 6f 20 6c 6f 6e | deque too lon
0x41720f: 67 00 00 00 6d 61 70 2f 73 65 74 3c 54 3e 20 74 | g...map/set t
0x41721f: 6f 6f 20 6c 6f 6e 67 00 90 91 41 00 65 d1 40 00 | oo long...A.e.@.
0x41722f: 04 df 40 00 10 92 41 00 65 d1 40 00 04 df 40 00 | ..@...A.e.@...@.
0x41723f: 60 92 41 00 65 d1 40 00 04 df 40 00 b9 d5 40 00 | `.A.e.@...@...@.
0x41724f: 63 73 6d e0 01 00 00 00 00 00 00 00 00 00 00 00 | csm.............
0x41725f: 03 00 00 00 20 05 93 19 00 00 00 00 00 00 00 00 | .... ...........
0x41726f: b0 92 41 00 90 38 40 00 04 df 40 00 62 61 64 20 | ..A..8@...@.bad 
0x41727f: 61 6c 6c 6f 63 61 74 69 6f 6e 00 00 fc 92 41 00 | allocation....A.
0x41728f: a6 de 40 00 44 93 41 00 d6 df 40 00 04 df 40 00 | ..@.D.A...@...@.
0x41729f: 55 6e 6b 6e 6f 77 6e 20 65 78 63 65 70 74 69 6f | Unknown exceptio
0x4172af: 6e 00 00 00 65 2b 30 30 30 00 00 00 47 f3 40 00 | n...e+000...G.@.
0x4172bf: 58 93 41 00 51 f1 40 00 04 df 40 00 62 61 64 20 | X.A.Q.@...@.bad 
0x4172cf: 65 78 63 65 70 74 69 6f 6e 00 00 00 4b 00 45 00 | exception...K.E.
0x4172df: 52 00 4e 00 45 00 4c 00 33 00 32 00 2e 00 44 00 | R.N.E.L.3.2...D.
0x4172ef: 4c 00 4c 00 00 00 00 00 46 6c 73 46 72 65 65 00 | L.L.....FlsFree.
0x4172ff: 46 6c 73 53 65 74 56 61 6c 75 65 00 46 6c 73 47 | FlsSetValue.FlsG
0x41730f: 65 74 56 61 6c 75 65 00 46 6c 73 41 6c 6c 6f 63 | etValue.FlsAlloc
0x41731f: 00 00 00 00 43 6f 72 45 78 69 74 50 72 6f 63 65 | ....CorExitProce
0x41732f: 73 73 00 00 6d 00 73 00 63 00 6f 00 72 00 65 00 | ss..m.s.c.o.r.e.
0x41733f: 65 00 2e 00 64 00 6c 00 6c 00 00 00 72 00 75 00 | e...d.l.l...r.u.
0x41734f: 6e 00 74 00 69 00 6d 00 65 00 20 00 65 00 72 00 | n.t.i.m.e. .e.r.
0x41735f: 72 00 6f 00 72 00 20 00 00 00 00 00 0d 00 0a 00 | r.o.r. .........
0x41736f: 00 00 00 00 54 00 4c 00 4f 00 53 00 53 00 20 00 | ....T.L.O.S.S. .
0x41737f: 65 00 72 00 72 00 6f 00 72 00 0d 00 0a 00 00 00 | e.r.r.o.r.......
0x41738f: 53 00 49 00 4e 00 47 00 20 00 65 00 72 00 72 00 | S.I.N.G. .e.r.r.
0x41739f: 6f 00 72 00 0d 00 0a 00 00 00 00 00 44 00 4f 00 | o.r.........D.O.
0x4173af: 4d 00 41 00 49 00 4e 00 20 00 65 00 72 00 72 00 | M.A.I.N. .e.r.r.
0x4173bf: 6f 00 72 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | o.r.............
0x4173cf: 52 00 36 00 30 00 33 00 33 00 0d 00 0a 00 2d 00 | R.6.0.3.3.....-.
0x4173df: 20 00 41 00 74 00 74 00 65 00 6d 00 70 00 74 00 |  .A.t.t.e.m.p.t.
0x4173ef: 20 00 74 00 6f 00 20 00 75 00 73 00 65 00 20 00 |  .t.o. .u.s.e. .
0x4173ff: 4d 00 53 00 49 00 4c 00 20 00 63 00 6f 00 64 00 | M.S.I.L. .c.o.d.
0x41740f: 65 00 20 00 66 00 72 00 6f 00 6d 00 20 00 74 00 | e. .f.r.o.m. .t.
0x41741f: 68 00 69 00 73 00 20 00 61 00 73 00 73 00 65 00 | h.i.s. .a.s.s.e.
0x41742f: 6d 00 62 00 6c 00 79 00 20 00 64 00 75 00 72 00 | m.b.l.y. .d.u.r.
0x41743f: 69 00 6e 00 67 00 20 00 6e 00 61 00 74 00 69 00 | i.n.g. .n.a.t.i.
0x41744f: 76 00 65 00 20 00 63 00 6f 00 64 00 65 00 20 00 | v.e. .c.o.d.e. .
0x41745f: 69 00 6e 00 69 00 74 00 69 00 61 00 6c 00 69 00 | i.n.i.t.i.a.l.i.
0x41746f: 7a 00 61 00 74 00 69 00 6f 00 6e 00 0a 00 54 00 | z.a.t.i.o.n...T.
0x41747f: 68 00 69 00 73 00 20 00 69 00 6e 00 64 00 69 00 | h.i.s. .i.n.d.i.
0x41748f: 63 00 61 00 74 00 65 00 73 00 20 00 61 00 20 00 | c.a.t.e.s. .a. .
0x41749f: 62 00 75 00 67 00 20 00 69 00 6e 00 20 00 79 00 | b.u.g. .i.n. .y.
0x4174af: 6f 00 75 00 72 00 20 00 61 00 70 00 70 00 6c 00 | o.u.r. .a.p.p.l.
0x4174bf: 69 00 63 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 | i.c.a.t.i.o.n...
0x4174cf: 20 00 49 00 74 00 20 00 69 00 73 00 20 00 6d 00 |  .I.t. .i.s. .m.
0x4174df: 6f 00 73 00 74 00 20 00 6c 00 69 00 6b 00 65 00 | o.s.t. .l.i.k.e.
0x4174ef: 6c 00 79 00 20 00 74 00 68 00 65 00 20 00 72 00 | l.y. .t.h.e. .r.
0x4174ff: 65 00 73 00 75 00 6c 00 74 00 20 00 6f 00 66 00 | e.s.u.l.t. .o.f.
0x41750f: 20 00 63 00 61 00 6c 00 6c 00 69 00 6e 00 67 00 |  .c.a.l.l.i.n.g.
0x41751f: 20 00 61 00 6e 00 20 00 4d 00 53 00 49 00 4c 00 |  .a.n. .M.S.I.L.
0x41752f: 2d 00 63 00 6f 00 6d 00 70 00 69 00 6c 00 65 00 | -.c.o.m.p.i.l.e.
0x41753f: 64 00 20 00 28 00 2f 00 63 00 6c 00 72 00 29 00 | d. .(./.c.l.r.).
0x41754f: 20 00 66 00 75 00 6e 00 63 00 74 00 69 00 6f 00 |  .f.u.n.c.t.i.o.
0x41755f: 6e 00 20 00 66 00 72 00 6f 00 6d 00 20 00 61 00 | n. .f.r.o.m. .a.
0x41756f: 20 00 6e 00 61 00 74 00 69 00 76 00 65 00 20 00 |  .n.a.t.i.v.e. .
0x41757f: 63 00 6f 00 6e 00 73 00 74 00 72 00 75 00 63 00 | c.o.n.s.t.r.u.c.
0x41758f: 74 00 6f 00 72 00 20 00 6f 00 72 00 20 00 66 00 | t.o.r. .o.r. .f.
0x41759f: 72 00 6f 00 6d 00 20 00 44 00 6c 00 6c 00 4d 00 | r.o.m. .D.l.l.M.
0x4175af: 61 00 69 00 6e 00 2e 00 0d 00 0a 00 00 00 00 00 | a.i.n...........
0x4175bf: 52 00 36 00 30 00 33 00 32 00 0d 00 0a 00 2d 00 | R.6.0.3.2.....-.
0x4175cf: 20 00 6e 00 6f 00 74 00 20 00 65 00 6e 00 6f 00 |  .n.o.t. .e.n.o.
0x4175df: 75 00 67 00 68 00 20 00 73 00 70 00 61 00 63 00 | u.g.h. .s.p.a.c.
0x4175ef: 65 00 20 00 66 00 6f 00 72 00 20 00 6c 00 6f 00 | e. .f.o.r. .l.o.
0x4175ff: 63 00 61 00 6c 00 65 00 20 00 69 00 6e 00 66 00 | c.a.l.e. .i.n.f.
0x41760f: 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 | o.r.m.a.t.i.o.n.
0x41761f: 0d 00 0a 00 00 00 00 00 52 00 36 00 30 00 33 00 | ........R.6.0.3.
0x41762f: 31 00 0d 00 0a 00 2d 00 20 00 41 00 74 00 74 00 | 1.....-. .A.t.t.
0x41763f: 65 00 6d 00 70 00 74 00 20 00 74 00 6f 00 20 00 | e.m.p.t. .t.o. .
0x41764f: 69 00 6e 00 69 00 74 00 69 00 61 00 6c 00 69 00 | i.n.i.t.i.a.l.i.
0x41765f: 7a 00 65 00 20 00 74 00 68 00 65 00 20 00 43 00 | z.e. .t.h.e. .C.
0x41766f: 52 00 54 00 20 00 6d 00 6f 00 72 00 65 00 20 00 | R.T. .m.o.r.e. .
0x41767f: 74 00 68 00 61 00 6e 00 20 00 6f 00 6e 00 63 00 | t.h.a.n. .o.n.c.
0x41768f: 65 00 2e 00 0a 00 54 00 68 00 69 00 73 00 20 00 | e.....T.h.i.s. .
0x41769f: 69 00 6e 00 64 00 69 00 63 00 61 00 74 00 65 00 | i.n.d.i.c.a.t.e.
0x4176af: 73 00 20 00 61 00 20 00 62 00 75 00 67 00 20 00 | s. .a. .b.u.g. .
0x4176bf: 69 00 6e 00 20 00 79 00 6f 00 75 00 72 00 20 00 | i.n. .y.o.u.r. .
0x4176cf: 61 00 70 00 70 00 6c 00 69 00 63 00 61 00 74 00 | a.p.p.l.i.c.a.t.
0x4176df: 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 00 00 00 00 | i.o.n...........
0x4176ef: 52 00 36 00 30 00 33 00 30 00 0d 00 0a 00 2d 00 | R.6.0.3.0.....-.
0x4176ff: 20 00 43 00 52 00 54 00 20 00 6e 00 6f 00 74 00 |  .C.R.T. .n.o.t.
0x41770f: 20 00 69 00 6e 00 69 00 74 00 69 00 61 00 6c 00 |  .i.n.i.t.i.a.l.
0x41771f: 69 00 7a 00 65 00 64 00 0d 00 0a 00 00 00 00 00 | i.z.e.d.........
0x41772f: 52 00 36 00 30 00 32 00 38 00 0d 00 0a 00 2d 00 | R.6.0.2.8.....-.
0x41773f: 20 00 75 00 6e 00 61 00 62 00 6c 00 65 00 20 00 |  .u.n.a.b.l.e. .
0x41774f: 74 00 6f 00 20 00 69 00 6e 00 69 00 74 00 69 00 | t.o. .i.n.i.t.i.
0x41775f: 61 00 6c 00 69 00 7a 00 65 00 20 00 68 00 65 00 | a.l.i.z.e. .h.e.
0x41776f: 61 00 70 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | a.p.............
0x41777f: 52 00 36 00 30 00 32 00 37 00 0d 00 0a 00 2d 00 | R.6.0.2.7.....-.
0x41778f: 20 00 6e 00 6f 00 74 00 20 00 65 00 6e 00 6f 00 |  .n.o.t. .e.n.o.
0x41779f: 75 00 67 00 68 00 20 00 73 00 70 00 61 00 63 00 | u.g.h. .s.p.a.c.
0x4177af: 65 00 20 00 66 00 6f 00 72 00 20 00 6c 00 6f 00 | e. .f.o.r. .l.o.
0x4177bf: 77 00 69 00 6f 00 20 00 69 00 6e 00 69 00 74 00 | w.i.o. .i.n.i.t.
0x4177cf: 69 00 61 00 6c 00 69 00 7a 00 61 00 74 00 69 00 | i.a.l.i.z.a.t.i.
0x4177df: 6f 00 6e 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | o.n.............
0x4177ef: 52 00 36 00 30 00 32 00 36 00 0d 00 0a 00 2d 00 | R.6.0.2.6.....-.
0x4177ff: 20 00 6e 00 6f 00 74 00 20 00 65 00 6e 00 6f 00 |  .n.o.t. .e.n.o.
0x41780f: 75 00 67 00 68 00 20 00 73 00 70 00 61 00 63 00 | u.g.h. .s.p.a.c.
0x41781f: 65 00 20 00 66 00 6f 00 72 00 20 00 73 00 74 00 | e. .f.o.r. .s.t.
0x41782f: 64 00 69 00 6f 00 20 00 69 00 6e 00 69 00 74 00 | d.i.o. .i.n.i.t.
0x41783f: 69 00 61 00 6c 00 69 00 7a 00 61 00 74 00 69 00 | i.a.l.i.z.a.t.i.
0x41784f: 6f 00 6e 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | o.n.............
0x41785f: 52 00 36 00 30 00 32 00 35 00 0d 00 0a 00 2d 00 | R.6.0.2.5.....-.
0x41786f: 20 00 70 00 75 00 72 00 65 00 20 00 76 00 69 00 |  .p.u.r.e. .v.i.
0x41787f: 72 00 74 00 75 00 61 00 6c 00 20 00 66 00 75 00 | r.t.u.a.l. .f.u.
0x41788f: 6e 00 63 00 74 00 69 00 6f 00 6e 00 20 00 63 00 | n.c.t.i.o.n. .c.
0x41789f: 61 00 6c 00 6c 00 0d 00 0a 00 00 00 00 00 00 00 | a.l.l...........
0x4178af: 52 00 36 00 30 00 32 00 34 00 0d 00 0a 00 2d 00 | R.6.0.2.4.....-.
0x4178bf: 20 00 6e 00 6f 00 74 00 20 00 65 00 6e 00 6f 00 |  .n.o.t. .e.n.o.
0x4178cf: 75 00 67 00 68 00 20 00 73 00 70 00 61 00 63 00 | u.g.h. .s.p.a.c.
0x4178df: 65 00 20 00 66 00 6f 00 72 00 20 00 5f 00 6f 00 | e. .f.o.r. ._.o.
0x4178ef: 6e 00 65 00 78 00 69 00 74 00 2f 00 61 00 74 00 | n.e.x.i.t./.a.t.
0x4178ff: 65 00 78 00 69 00 74 00 20 00 74 00 61 00 62 00 | e.x.i.t. .t.a.b.
0x41790f: 6c 00 65 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | l.e.............
0x41791f: 52 00 36 00 30 00 31 00 39 00 0d 00 0a 00 2d 00 | R.6.0.1.9.....-.
0x41792f: 20 00 75 00 6e 00 61 00 62 00 6c 00 65 00 20 00 |  .u.n.a.b.l.e. .
0x41793f: 74 00 6f 00 20 00 6f 00 70 00 65 00 6e 00 20 00 | t.o. .o.p.e.n. .
0x41794f: 63 00 6f 00 6e 00 73 00 6f 00 6c 00 65 00 20 00 | c.o.n.s.o.l.e. .
0x41795f: 64 00 65 00 76 00 69 00 63 00 65 00 0d 00 0a 00 | d.e.v.i.c.e.....
0x41796f: 00 00 00 00 00 00 00 00 52 00 36 00 30 00 31 00 | ........R.6.0.1.
0x41797f: 38 00 0d 00 0a 00 2d 00 20 00 75 00 6e 00 65 00 | 8.....-. .u.n.e.
0x41798f: 78 00 70 00 65 00 63 00 74 00 65 00 64 00 20 00 | x.p.e.c.t.e.d. .
0x41799f: 68 00 65 00 61 00 70 00 20 00 65 00 72 00 72 00 | h.e.a.p. .e.r.r.
0x4179af: 6f 00 72 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | o.r.............
0x4179bf: 52 00 36 00 30 00 31 00 37 00 0d 00 0a 00 2d 00 | R.6.0.1.7.....-.
0x4179cf: 20 00 75 00 6e 00 65 00 78 00 70 00 65 00 63 00 |  .u.n.e.x.p.e.c.
0x4179df: 74 00 65 00 64 00 20 00 6d 00 75 00 6c 00 74 00 | t.e.d. .m.u.l.t.
0x4179ef: 69 00 74 00 68 00 72 00 65 00 61 00 64 00 20 00 | i.t.h.r.e.a.d. .
0x4179ff: 6c 00 6f 00 63 00 6b 00 20 00 65 00 72 00 72 00 | l.o.c.k. .e.r.r.
0x417a0f: 6f 00 72 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | o.r.............
0x417a1f: 52 00 36 00 30 00 31 00 36 00 0d 00 0a 00 2d 00 | R.6.0.1.6.....-.
0x417a2f: 20 00 6e 00 6f 00 74 00 20 00 65 00 6e 00 6f 00 |  .n.o.t. .e.n.o.
0x417a3f: 75 00 67 00 68 00 20 00 73 00 70 00 61 00 63 00 | u.g.h. .s.p.a.c.
0x417a4f: 65 00 20 00 66 00 6f 00 72 00 20 00 74 00 68 00 | e. .f.o.r. .t.h.
0x417a5f: 72 00 65 00 61 00 64 00 20 00 64 00 61 00 74 00 | r.e.a.d. .d.a.t.
0x417a6f: 61 00 0d 00 0a 00 00 00 52 00 36 00 30 00 31 00 | a.......R.6.0.1.
0x417a7f: 30 00 0d 00 0a 00 2d 00 20 00 61 00 62 00 6f 00 | 0.....-. .a.b.o.
0x417a8f: 72 00 74 00 28 00 29 00 20 00 68 00 61 00 73 00 | r.t.(.). .h.a.s.
0x417a9f: 20 00 62 00 65 00 65 00 6e 00 20 00 63 00 61 00 |  .b.e.e.n. .c.a.
0x417aaf: 6c 00 6c 00 65 00 64 00 0d 00 0a 00 00 00 00 00 | l.l.e.d.........
0x417abf: 52 00 36 00 30 00 30 00 39 00 0d 00 0a 00 2d 00 | R.6.0.0.9.....-.
0x417acf: 20 00 6e 00 6f 00 74 00 20 00 65 00 6e 00 6f 00 |  .n.o.t. .e.n.o.
0x417adf: 75 00 67 00 68 00 20 00 73 00 70 00 61 00 63 00 | u.g.h. .s.p.a.c.
0x417aef: 65 00 20 00 66 00 6f 00 72 00 20 00 65 00 6e 00 | e. .f.o.r. .e.n.
0x417aff: 76 00 69 00 72 00 6f 00 6e 00 6d 00 65 00 6e 00 | v.i.r.o.n.m.e.n.
0x417b0f: 74 00 0d 00 0a 00 00 00 52 00 36 00 30 00 30 00 | t.......R.6.0.0.
0x417b1f: 38 00 0d 00 0a 00 2d 00 20 00 6e 00 6f 00 74 00 | 8.....-. .n.o.t.
0x417b2f: 20 00 65 00 6e 00 6f 00 75 00 67 00 68 00 20 00 |  .e.n.o.u.g.h. .
0x417b3f: 73 00 70 00 61 00 63 00 65 00 20 00 66 00 6f 00 | s.p.a.c.e. .f.o.
0x417b4f: 72 00 20 00 61 00 72 00 67 00 75 00 6d 00 65 00 | r. .a.r.g.u.m.e.
0x417b5f: 6e 00 74 00 73 00 0d 00 0a 00 00 00 00 00 00 00 | n.t.s...........
0x417b6f: 52 00 36 00 30 00 30 00 32 00 0d 00 0a 00 2d 00 | R.6.0.0.2.....-.
0x417b7f: 20 00 66 00 6c 00 6f 00 61 00 74 00 69 00 6e 00 |  .f.l.o.a.t.i.n.
0x417b8f: 67 00 20 00 70 00 6f 00 69 00 6e 00 74 00 20 00 | g. .p.o.i.n.t. .
0x417b9f: 73 00 75 00 70 00 70 00 6f 00 72 00 74 00 20 00 | s.u.p.p.o.r.t. .
0x417baf: 6e 00 6f 00 74 00 20 00 6c 00 6f 00 61 00 64 00 | n.o.t. .l.o.a.d.
0x417bbf: 65 00 64 00 0d 00 0a 00 00 00 00 00 00 00 00 00 | e.d.............
0x417bcf: 02 00 00 00 70 7b 41 00 08 00 00 00 18 7b 41 00 | ....p{A......{A.
0x417bdf: 09 00 00 00 c0 7a 41 00 0a 00 00 00 78 7a 41 00 | .....zA.....xzA.
0x417bef: 10 00 00 00 20 7a 41 00 11 00 00 00 c0 79 41 00 | .... zA......yA.
0x417bff: 12 00 00 00 78 79 41 00 13 00 00 00 20 79 41 00 | ....xyA..... yA.
0x417c0f: 18 00 00 00 b0 78 41 00 19 00 00 00 60 78 41 00 | .....xA.....`xA.
0x417c1f: 1a 00 00 00 f0 77 41 00 1b 00 00 00 80 77 41 00 | .....wA......wA.
0x417c2f: 1c 00 00 00 30 77 41 00 1e 00 00 00 f0 76 41 00 | ....0wA......vA.
0x417c3f: 1f 00 00 00 28 76 41 00 20 00 00 00 c0 75 41 00 | ....(vA. ....uA.
0x417c4f: 21 00 00 00 d0 73 41 00 78 00 00 00 ac 73 41 00 | !....sA.x....sA.
0x417c5f: 79 00 00 00 90 73 41 00 7a 00 00 00 74 73 41 00 | y....sA.z...tsA.
0x417c6f: fc 00 00 00 6c 73 41 00 ff 00 00 00 4c 73 41 00 | ....lsA.....LsA.
0x417c7f: 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 | M.i.c.r.o.s.o.f.
0x417c8f: 74 00 20 00 56 00 69 00 73 00 75 00 61 00 6c 00 | t. .V.i.s.u.a.l.
0x417c9f: 20 00 43 00 2b 00 2b 00 20 00 52 00 75 00 6e 00 |  .C.+.+. .R.u.n.
0x417caf: 74 00 69 00 6d 00 65 00 20 00 4c 00 69 00 62 00 | t.i.m.e. .L.i.b.
0x417cbf: 72 00 61 00 72 00 79 00 00 00 00 00 0a 00 0a 00 | r.a.r.y.........
0x417ccf: 00 00 00 00 2e 00 2e 00 2e 00 00 00 3c 00 70 00 | ............<.p.
0x417cdf: 72 00 6f 00 67 00 72 00 61 00 6d 00 20 00 6e 00 | r.o.g.r.a.m. .n.
0x417cef: 61 00 6d 00 65 00 20 00 75 00 6e 00 6b 00 6e 00 | a.m.e. .u.n.k.n.
0x417cff: 6f 00 77 00 6e 00 3e 00 00 00 00 00 52 00 75 00 | o.w.n.>.....R.u.
0x417d0f: 6e 00 74 00 69 00 6d 00 65 00 20 00 45 00 72 00 | n.t.i.m.e. .E.r.
0x417d1f: 72 00 6f 00 72 00 21 00 0a 00 0a 00 50 00 72 00 | r.o.r.!.....P.r.
0x417d2f: 6f 00 67 00 72 00 61 00 6d 00 3a 00 20 00 00 00 | o.g.r.a.m.:. ...
0x417d3f: 05 00 00 c0 0b 00 00 00 00 00 00 00 1d 00 00 c0 | ................
0x417d4f: 04 00 00 00 00 00 00 00 96 00 00 c0 04 00 00 00 | ................
0x417d5f: 00 00 00 00 8d 00 00 c0 08 00 00 00 00 00 00 00 | ................
0x417d6f: 8e 00 00 c0 08 00 00 00 00 00 00 00 8f 00 00 c0 | ................
0x417d7f: 08 00 00 00 00 00 00 00 90 00 00 c0 08 00 00 00 | ................
0x417d8f: 00 00 00 00 91 00 00 c0 08 00 00 00 00 00 00 00 | ................
0x417d9f: 92 00 00 c0 08 00 00 00 00 00 00 00 93 00 00 c0 | ................
0x417daf: 08 00 00 00 00 00 00 00 b4 02 00 c0 08 00 00 00 | ................
0x417dbf: 00 00 00 00 b5 02 00 c0 08 00 00 00 00 00 00 00 | ................
0x417dcf: 03 00 00 00 09 00 00 00 90 00 00 00 0c 00 00 00 | ................
0x417ddf: 00 00 00 00 48 00 48 00 3a 00 6d 00 6d 00 3a 00 | ....H.H.:.m.m.:.
0x417def: 73 00 73 00 00 00 00 00 64 00 64 00 64 00 64 00 | s.s.....d.d.d.d.
0x417dff: 2c 00 20 00 4d 00 4d 00 4d 00 4d 00 20 00 64 00 | ,. .M.M.M.M. .d.
0x417e0f: 64 00 2c 00 20 00 79 00 79 00 79 00 79 00 00 00 | d.,. .y.y.y.y...
0x417e1f: 4d 00 4d 00 2f 00 64 00 64 00 2f 00 79 00 79 00 | M.M./.d.d./.y.y.
0x417e2f: 00 00 00 00 50 00 4d 00 00 00 00 00 41 00 4d 00 | ....P.M.....A.M.
0x417e3f: 00 00 00 00 44 00 65 00 63 00 65 00 6d 00 62 00 | ....D.e.c.e.m.b.
0x417e4f: 65 00 72 00 00 00 00 00 4e 00 6f 00 76 00 65 00 | e.r.....N.o.v.e.
0x417e5f: 6d 00 62 00 65 00 72 00 00 00 00 00 4f 00 63 00 | m.b.e.r.....O.c.
0x417e6f: 74 00 6f 00 62 00 65 00 72 00 00 00 53 00 65 00 | t.o.b.e.r...S.e.
0x417e7f: 70 00 74 00 65 00 6d 00 62 00 65 00 72 00 00 00 | p.t.e.m.b.e.r...
0x417e8f: 41 00 75 00 67 00 75 00 73 00 74 00 00 00 00 00 | A.u.g.u.s.t.....
0x417e9f: 4a 00 75 00 6c 00 79 00 00 00 00 00 4a 00 75 00 | J.u.l.y.....J.u.
0x417eaf: 6e 00 65 00 00 00 00 00 41 00 70 00 72 00 69 00 | n.e.....A.p.r.i.
0x417ebf: 6c 00 00 00 4d 00 61 00 72 00 63 00 68 00 00 00 | l...M.a.r.c.h...
0x417ecf: 46 00 65 00 62 00 72 00 75 00 61 00 72 00 79 00 | F.e.b.r.u.a.r.y.
0x417edf: 00 00 00 00 4a 00 61 00 6e 00 75 00 61 00 72 00 | ....J.a.n.u.a.r.
0x417eef: 79 00 00 00 44 00 65 00 63 00 00 00 4e 00 6f 00 | y...D.e.c...N.o.
0x417eff: 76 00 00 00 4f 00 63 00 74 00 00 00 53 00 65 00 | v...O.c.t...S.e.
0x417f0f: 70 00 00 00 41 00 75 00 67 00 00 00 4a 00 75 00 | p...A.u.g...J.u.
0x417f1f: 6c 00 00 00 4a 00 75 00 6e 00 00 00 4d 00 61 00 | l...J.u.n...M.a.
0x417f2f: 79 00 00 00 41 00 70 00 72 00 00 00 4d 00 61 00 | y...A.p.r...M.a.
0x417f3f: 72 00 00 00 46 00 65 00 62 00 00 00 4a 00 61 00 | r...F.e.b...J.a.
0x417f4f: 6e 00 00 00 53 00 61 00 74 00 75 00 72 00 64 00 | n...S.a.t.u.r.d.
0x417f5f: 61 00 79 00 00 00 00 00 46 00 72 00 69 00 64 00 | a.y.....F.r.i.d.
0x417f6f: 61 00 79 00 00 00 00 00 54 00 68 00 75 00 72 00 | a.y.....T.h.u.r.
0x417f7f: 73 00 64 00 61 00 79 00 00 00 00 00 57 00 65 00 | s.d.a.y.....W.e.
0x417f8f: 64 00 6e 00 65 00 73 00 64 00 61 00 79 00 00 00 | d.n.e.s.d.a.y...
0x417f9f: 54 00 75 00 65 00 73 00 64 00 61 00 79 00 00 00 | T.u.e.s.d.a.y...
0x417faf: 4d 00 6f 00 6e 00 64 00 61 00 79 00 00 00 00 00 | M.o.n.d.a.y.....
0x417fbf: 53 00 75 00 6e 00 64 00 61 00 79 00 00 00 00 00 | S.u.n.d.a.y.....
0x417fcf: 53 00 61 00 74 00 00 00 46 00 72 00 69 00 00 00 | S.a.t...F.r.i...
0x417fdf: 54 00 68 00 75 00 00 00 57 00 65 00 64 00 00 00 | T.h.u...W.e.d...
0x417fef: 54 00 75 00 65 00 00 00 4d 00 6f 00 6e 00 00 00 | T.u.e...M.o.n...
0x417fff: 53 00 75 00 6e 00 00 00 48 48 3a 6d 6d 3a 73 73 | S.u.n...HH:mm:ss
0x41800f: 00 00 00 00 64 64 64 64 2c 20 4d 4d 4d 4d 20 64 | ....dddd, MMMM d
0x41801f: 64 2c 20 79 79 79 79 00 4d 4d 2f 64 64 2f 79 79 | d, yyyy.MM/dd/yy
0x41802f: 00 00 00 00 50 4d 00 00 41 4d 00 00 44 65 63 65 | ....PM..AM..Dece
0x41803f: 6d 62 65 72 00 00 00 00 4e 6f 76 65 6d 62 65 72 | mber....November
0x41804f: 00 00 00 00 4f 63 74 6f 62 65 72 00 53 65 70 74 | ....October.Sept
0x41805f: 65 6d 62 65 72 00 00 00 41 75 67 75 73 74 00 00 | ember...August..
0x41806f: 4a 75 6c 79 00 00 00 00 4a 75 6e 65 00 00 00 00 | July....June....
0x41807f: 41 70 72 69 6c 00 00 00 4d 61 72 63 68 00 00 00 | April...March...
0x41808f: 46 65 62 72 75 61 72 79 00 00 00 00 4a 61 6e 75 | February....Janu
0x41809f: 61 72 79 00 44 65 63 00 4e 6f 76 00 4f 63 74 00 | ary.Dec.Nov.Oct.
0x4180af: 53 65 70 00 41 75 67 00 4a 75 6c 00 4a 75 6e 00 | Sep.Aug.Jul.Jun.
0x4180bf: 4d 61 79 00 41 70 72 00 4d 61 72 00 46 65 62 00 | May.Apr.Mar.Feb.
0x4180cf: 4a 61 6e 00 53 61 74 75 72 64 61 79 00 00 00 00 | Jan.Saturday....
0x4180df: 46 72 69 64 61 79 00 00 54 68 75 72 73 64 61 79 | Friday..Thursday
0x4180ef: 00 00 00 00 57 65 64 6e 65 73 64 61 79 00 00 00 | ....Wednesday...
0x4180ff: 54 75 65 73 64 61 79 00 4d 6f 6e 64 61 79 00 00 | Tuesday.Monday..
0x41810f: 53 75 6e 64 61 79 00 00 53 61 74 00 46 72 69 00 | Sunday..Sat.Fri.
0x41811f: 54 68 75 00 57 65 64 00 54 75 65 00 4d 6f 6e 00 | Thu.Wed.Tue.Mon.
0x41812f: 53 75 6e 00 00 00 00 00 01 02 03 04 05 06 07 08 | Sun.............
0x41813f: 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 | ................
0x41814f: 19 1a 1b 1c 1d 1e 1f 20 21 22 23 24 25 26 27 28 | ....... !"#$%&'(
0x41815f: 29 2a 2b 2c 2d 2e 2f 30 31 32 33 34 35 36 37 38 | )*+,-./012345678
0x41816f: 39 3a 3b 3c 3d 3e 3f 40 41 42 43 44 45 46 47 48 | 9:;<=>?@ABCDEFGH
0x41817f: 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 | IJKLMNOPQRSTUVWX
0x41818f: 59 5a 5b 5c 5d 5e 5f 60 61 62 63 64 65 66 67 68 | YZ[\]^_`abcdefgh
0x41819f: 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 | ijklmnopqrstuvwx
0x4181af: 79 7a 7b 7c 7d 7e 7f 00 3d 00 00 00 a8 bc 41 00 | yz{|}~..=.....A.
0x4181bf: 00 bd 41 00 20 43 6f 6d 70 6c 65 74 65 20 4f 62 | ..A. Complete Ob
0x4181cf: 6a 65 63 74 20 4c 6f 63 61 74 6f 72 27 00 00 00 | ject Locator'...
0x4181df: 20 43 6c 61 73 73 20 48 69 65 72 61 72 63 68 79 |  Class Hierarchy
0x4181ef: 20 44 65 73 63 72 69 70 74 6f 72 27 00 00 00 00 |  Descriptor'....
0x4181ff: 20 42 61 73 65 20 43 6c 61 73 73 20 41 72 72 61 |  Base Class Arra
0x41820f: 79 27 00 00 20 42 61 73 65 20 43 6c 61 73 73 20 | y'.. Base Class 
0x41821f: 44 65 73 63 72 69 70 74 6f 72 20 61 74 20 28 00 | Descriptor at (.
0x41822f: 20 54 79 70 65 20 44 65 73 63 72 69 70 74 6f 72 |  Type Descriptor
0x41823f: 27 00 00 00 60 6c 6f 63 61 6c 20 73 74 61 74 69 | '...`local stati
0x41824f: 63 20 74 68 72 65 61 64 20 67 75 61 72 64 27 00 | c thread guard'.
0x41825f: 60 6d 61 6e 61 67 65 64 20 76 65 63 74 6f 72 20 | `managed vector 
0x41826f: 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 | copy constructor
0x41827f: 20 69 74 65 72 61 74 6f 72 27 00 00 60 76 65 63 |  iterator'..`vec
0x41828f: 74 6f 72 20 76 62 61 73 65 20 63 6f 70 79 20 63 | tor vbase copy c
0x41829f: 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 | onstructor itera
0x4182af: 74 6f 72 27 00 00 00 00 60 76 65 63 74 6f 72 20 | tor'....`vector 
0x4182bf: 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 | copy constructor
0x4182cf: 20 69 74 65 72 61 74 6f 72 27 00 00 60 64 79 6e |  iterator'..`dyn
0x4182df: 61 6d 69 63 20 61 74 65 78 69 74 20 64 65 73 74 | amic atexit dest
0x4182ef: 72 75 63 74 6f 72 20 66 6f 72 20 27 00 00 00 00 | ructor for '....
0x4182ff: 60 64 79 6e 61 6d 69 63 20 69 6e 69 74 69 61 6c | `dynamic initial
0x41830f: 69 7a 65 72 20 66 6f 72 20 27 00 00 60 65 68 20 | izer for '..`eh 
0x41831f: 76 65 63 74 6f 72 20 76 62 61 73 65 20 63 6f 70 | vector vbase cop
0x41832f: 79 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 | y constructor it
0x41833f: 65 72 61 74 6f 72 27 00 60 65 68 20 76 65 63 74 | erator'.`eh vect
0x41834f: 6f 72 20 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 | or copy construc
0x41835f: 74 6f 72 20 69 74 65 72 61 74 6f 72 27 00 00 00 | tor iterator'...
0x41836f: 60 6d 61 6e 61 67 65 64 20 76 65 63 74 6f 72 20 | `managed vector 
0x41837f: 64 65 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 | destructor itera
0x41838f: 74 6f 72 27 00 00 00 00 60 6d 61 6e 61 67 65 64 | tor'....`managed
0x41839f: 20 76 65 63 74 6f 72 20 63 6f 6e 73 74 72 75 63 |  vector construc
0x4183af: 74 6f 72 20 69 74 65 72 61 74 6f 72 27 00 00 00 | tor iterator'...
0x4183bf: 60 70 6c 61 63 65 6d 65 6e 74 20 64 65 6c 65 74 | `placement delet
0x4183cf: 65 5b 5d 20 63 6c 6f 73 75 72 65 27 00 00 00 00 | e[] closure'....
0x4183df: 60 70 6c 61 63 65 6d 65 6e 74 20 64 65 6c 65 74 | `placement delet
0x4183ef: 65 20 63 6c 6f 73 75 72 65 27 00 00 60 6f 6d 6e | e closure'..`omn
0x4183ff: 69 20 63 61 6c 6c 73 69 67 27 00 00 20 64 65 6c | i callsig'.. del
0x41840f: 65 74 65 5b 5d 00 00 00 20 6e 65 77 5b 5d 00 00 | ete[]... new[]..
0x41841f: 60 6c 6f 63 61 6c 20 76 66 74 61 62 6c 65 20 63 | `local vftable c
0x41842f: 6f 6e 73 74 72 75 63 74 6f 72 20 63 6c 6f 73 75 | onstructor closu
0x41843f: 72 65 27 00 60 6c 6f 63 61 6c 20 76 66 74 61 62 | re'.`local vftab
0x41844f: 6c 65 27 00 60 52 54 54 49 00 00 00 60 45 48 00 | le'.`RTTI...`EH.
0x41845f: 60 75 64 74 20 72 65 74 75 72 6e 69 6e 67 27 00 | `udt returning'.
0x41846f: 60 63 6f 70 79 20 63 6f 6e 73 74 72 75 63 74 6f | `copy constructo
0x41847f: 72 20 63 6c 6f 73 75 72 65 27 00 00 60 65 68 20 | r closure'..`eh 
0x41848f: 76 65 63 74 6f 72 20 76 62 61 73 65 20 63 6f 6e | vector vbase con
0x41849f: 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 74 6f | structor iterato
0x4184af: 72 27 00 00 60 65 68 20 76 65 63 74 6f 72 20 64 | r'..`eh vector d
0x4184bf: 65 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 74 | estructor iterat
0x4184cf: 6f 72 27 00 60 65 68 20 76 65 63 74 6f 72 20 63 | or'.`eh vector c
0x4184df: 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 | onstructor itera
0x4184ef: 74 6f 72 27 00 00 00 00 60 76 69 72 74 75 61 6c | tor'....`virtual
0x4184ff: 20 64 69 73 70 6c 61 63 65 6d 65 6e 74 20 6d 61 |  displacement ma
0x41850f: 70 27 00 00 60 76 65 63 74 6f 72 20 76 62 61 73 | p'..`vector vbas
0x41851f: 65 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 | e constructor it
0x41852f: 65 72 61 74 6f 72 27 00 60 76 65 63 74 6f 72 20 | erator'.`vector 
0x41853f: 64 65 73 74 72 75 63 74 6f 72 20 69 74 65 72 61 | destructor itera
0x41854f: 74 6f 72 27 00 00 00 00 60 76 65 63 74 6f 72 20 | tor'....`vector 
0x41855f: 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 74 65 72 | constructor iter
0x41856f: 61 74 6f 72 27 00 00 00 60 73 63 61 6c 61 72 20 | ator'...`scalar 
0x41857f: 64 65 6c 65 74 69 6e 67 20 64 65 73 74 72 75 63 | deleting destruc
0x41858f: 74 6f 72 27 00 00 00 00 60 64 65 66 61 75 6c 74 | tor'....`default
0x41859f: 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 63 6c 6f |  constructor clo
0x4185af: 73 75 72 65 27 00 00 00 60 76 65 63 74 6f 72 20 | sure'...`vector 
0x4185bf: 64 65 6c 65 74 69 6e 67 20 64 65 73 74 72 75 63 | deleting destruc
0x4185cf: 74 6f 72 27 00 00 00 00 60 76 62 61 73 65 20 64 | tor'....`vbase d
0x4185df: 65 73 74 72 75 63 74 6f 72 27 00 00 60 73 74 72 | estructor'..`str
0x4185ef: 69 6e 67 27 00 00 00 00 60 6c 6f 63 61 6c 20 73 | ing'....`local s
0x4185ff: 74 61 74 69 63 20 67 75 61 72 64 27 00 00 00 00 | tatic guard'....
0x41860f: 60 74 79 70 65 6f 66 27 00 00 00 00 60 76 63 61 | `typeof'....`vca
0x41861f: 6c 6c 27 00 60 76 62 74 61 62 6c 65 27 00 00 00 | ll'.`vbtable'...
0x41862f: 60 76 66 74 61 62 6c 65 27 00 00 00 5e 3d 00 00 | `vftable'...^=..
0x41863f: 7c 3d 00 00 26 3d 00 00 3c 3c 3d 00 3e 3e 3d 00 | |=..&=..<<=.>>=.
0x41864f: 25 3d 00 00 2f 3d 00 00 2d 3d 00 00 2b 3d 00 00 | %=../=..-=..+=..
0x41865f: 2a 3d 00 00 7c 7c 00 00 26 26 00 00 7c 00 00 00 | *=..||..&&..|...
0x41866f: 5e 00 00 00 7e 00 00 00 28 29 00 00 2c 00 00 00 | ^...~...()..,...
0x41867f: 3e 3d 00 00 3e 00 00 00 3c 3d 00 00 3c 00 00 00 | >=..>...<=..<...
0x41868f: 25 00 00 00 2f 00 00 00 2d 3e 2a 00 26 00 00 00 | %.../...->*.&...
0x41869f: 2b 00 00 00 2d 00 00 00 2d 2d 00 00 2b 2b 00 00 | +...-...--..++..
0x4186af: 2a 00 00 00 2d 3e 00 00 6f 70 65 72 61 74 6f 72 | *...->..operator
0x4186bf: 00 00 00 00 5b 5d 00 00 21 3d 00 00 3d 3d 00 00 | ....[]..!=..==..
0x4186cf: 21 00 00 00 3c 3c 00 00 3e 3e 00 00 20 64 65 6c | !...<<..>>.. del
0x4186df: 65 74 65 00 20 6e 65 77 00 00 00 00 5f 5f 75 6e | ete. new....__un
0x4186ef: 61 6c 69 67 6e 65 64 00 5f 5f 72 65 73 74 72 69 | aligned.__restri
0x4186ff: 63 74 00 00 5f 5f 70 74 72 36 34 00 5f 5f 65 61 | ct..__ptr64.__ea
0x41870f: 62 69 00 00 5f 5f 63 6c 72 63 61 6c 6c 00 00 00 | bi..__clrcall...
0x41871f: 5f 5f 66 61 73 74 63 61 6c 6c 00 00 5f 5f 74 68 | __fastcall..__th
0x41872f: 69 73 63 61 6c 6c 00 00 5f 5f 73 74 64 63 61 6c | iscall..__stdcal
0x41873f: 6c 00 00 00 5f 5f 70 61 73 63 61 6c 00 00 00 00 | l...__pascal....
0x41874f: 5f 5f 63 64 65 63 6c 00 5f 5f 62 61 73 65 64 28 | __cdecl.__based(
0x41875f: 00 00 00 00 00 00 00 00 58 87 41 00 50 87 41 00 | ........X.A.P.A.
0x41876f: 44 87 41 00 38 87 41 00 2c 87 41 00 20 87 41 00 | D.A.8.A.,.A. .A.
0x41877f: 14 87 41 00 0c 87 41 00 04 87 41 00 f8 86 41 00 | ..A...A...A...A.
0x41878f: ec 86 41 00 e0 7d 41 00 e4 86 41 00 dc 86 41 00 | ..A..}A...A...A.
0x41879f: b8 81 41 00 d8 86 41 00 d4 86 41 00 d0 86 41 00 | ..A...A...A...A.
0x4187af: cc 86 41 00 c8 86 41 00 c4 86 41 00 b8 86 41 00 | ..A...A...A...A.
0x4187bf: b4 86 41 00 b0 86 41 00 ac 86 41 00 a8 86 41 00 | ..A...A...A...A.
0x4187cf: a4 86 41 00 a0 86 41 00 9c 86 41 00 98 86 41 00 | ..A...A...A...A.
0x4187df: 94 86 41 00 90 86 41 00 8c 86 41 00 88 86 41 00 | ..A...A...A...A.
0x4187ef: 84 86 41 00 80 86 41 00 7c 86 41 00 78 86 41 00 | ..A...A.|.A.x.A.
0x4187ff: 74 86 41 00 70 86 41 00 6c 86 41 00 68 86 41 00 | t.A.p.A.l.A.h.A.
0x41880f: 64 86 41 00 60 86 41 00 5c 86 41 00 58 86 41 00 | d.A.`.A.\.A.X.A.
0x41881f: 54 86 41 00 50 86 41 00 4c 86 41 00 48 86 41 00 | T.A.P.A.L.A.H.A.
0x41882f: 44 86 41 00 40 86 41 00 3c 86 41 00 30 86 41 00 | D.A.@.A.<.A.0.A.
0x41883f: 24 86 41 00 1c 86 41 00 10 86 41 00 f8 85 41 00 | $.A...A...A...A.
0x41884f: ec 85 41 00 d8 85 41 00 b8 85 41 00 98 85 41 00 | ..A...A...A...A.
0x41885f: 78 85 41 00 58 85 41 00 38 85 41 00 14 85 41 00 | x.A.X.A.8.A...A.
0x41886f: f8 84 41 00 d4 84 41 00 b4 84 41 00 8c 84 41 00 | ..A...A...A...A.
0x41887f: 70 84 41 00 60 84 41 00 5c 84 41 00 54 84 41 00 | p.A.`.A.\.A.T.A.
0x41888f: 44 84 41 00 20 84 41 00 18 84 41 00 0c 84 41 00 | D.A. .A...A...A.
0x41889f: fc 83 41 00 e0 83 41 00 c0 83 41 00 98 83 41 00 | ..A...A...A...A.
0x4188af: 70 83 41 00 48 83 41 00 1c 83 41 00 00 83 41 00 | p.A.H.A...A...A.
0x4188bf: dc 82 41 00 b8 82 41 00 8c 82 41 00 60 82 41 00 | ..A...A...A.`.A.
0x4188cf: 44 82 41 00 e0 7d 41 00 30 82 41 00 14 82 41 00 | D.A..}A.0.A...A.
0x4188df: 00 82 41 00 e0 81 41 00 c4 81 41 00 47 65 74 50 | ..A...A...A.GetP
0x4188ef: 72 6f 63 65 73 73 57 69 6e 64 6f 77 53 74 61 74 | rocessWindowStat
0x4188ff: 69 6f 6e 00 47 65 74 55 73 65 72 4f 62 6a 65 63 | ion.GetUserObjec
0x41890f: 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 57 00 00 00 | tInformationW...
0x41891f: 47 65 74 4c 61 73 74 41 63 74 69 76 65 50 6f 70 | GetLastActivePop
0x41892f: 75 70 00 00 47 65 74 41 63 74 69 76 65 57 69 6e | up..GetActiveWin
0x41893f: 64 6f 77 00 4d 65 73 73 61 67 65 42 6f 78 57 00 | dow.MessageBoxW.
0x41894f: 55 00 53 00 45 00 52 00 33 00 32 00 2e 00 44 00 | U.S.E.R.3.2...D.
0x41895f: 4c 00 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 | L.L.............
0x41896f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41897f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41898f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x41899f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4189af: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4189bf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4189cf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4189df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4189ef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4189ff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418a0f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418a1f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418a2f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418a3f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418a4f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418a5f: 00 00 00 00 00 00 00 00 20 00 20 00 20 00 20 00 | ........ . . . .
0x418a6f: 20 00 20 00 20 00 20 00 20 00 28 00 28 00 28 00 |  . . . . .(.(.(.
0x418a7f: 28 00 28 00 20 00 20 00 20 00 20 00 20 00 20 00 | (.(. . . . . . .
0x418a8f: 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 |  . . . . . . . .
0x418a9f: 20 00 20 00 20 00 20 00 48 00 10 00 10 00 10 00 |  . . . .H.......
0x418aaf: 10 00 10 00 10 00 10 00 10 00 10 00 10 00 10 00 | ................
0x418abf: 10 00 10 00 10 00 10 00 84 00 84 00 84 00 84 00 | ................
0x418acf: 84 00 84 00 84 00 84 00 84 00 84 00 10 00 10 00 | ................
0x418adf: 10 00 10 00 10 00 10 00 10 00 81 00 81 00 81 00 | ................
0x418aef: 81 00 81 00 81 00 01 00 01 00 01 00 01 00 01 00 | ................
0x418aff: 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 | ................
0x418b0f: 01 00 01 00 01 00 01 00 01 00 01 00 01 00 10 00 | ................
0x418b1f: 10 00 10 00 10 00 10 00 10 00 82 00 82 00 82 00 | ................
0x418b2f: 82 00 82 00 82 00 02 00 02 00 02 00 02 00 02 00 | ................
0x418b3f: 02 00 02 00 02 00 02 00 02 00 02 00 02 00 02 00 | ................
0x418b4f: 02 00 02 00 02 00 02 00 02 00 02 00 02 00 10 00 | ................
0x418b5f: 10 00 10 00 10 00 20 00 00 00 00 00 00 00 00 00 | ...... .........
0x418b6f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418b7f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418b8f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418b9f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418baf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418bbf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418bcf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418bdf: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418bef: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418bff: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418c0f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418c1f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418c2f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418c3f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418c4f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x418c5f: 00 00 00 00 00 00 00 00 00 00 20 00 20 00 20 00 | .......... . . .
0x418c6f: 20 00 20 00 20 00 20 00 20 00 20 00 68 00 28 00 |  . . . . . .h.(.
0x418c7f: 28 00 28 00 28 00 20 00 20 00 20 00 20 00 20 00 | (.(.(. . . . . .
0x418c8f: 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 |  . . . . . . . .
0x418c9f: 20 00 20 00 20 00 20 00 20 00 48 00 10 00 10 00 |  . . . . .H.....
0x418caf: 10 00 10 00 10 00 10 00 10 00 10 00 10 00 10 00 | ................
0x418cbf: 10 00 10 00 10 00 10 00 10 00 84 00 84 00 84 00 | ................
0x418ccf: 84 00 84 00 84 00 84 00 84 00 84 00 84 00 10 00 | ................
0x418cdf: 10 00 10 00 10 00 10 00 10 00 10 00 81 01 81 01 | ................
0x418cef: 81 01 81 01 81 01 81 01 01 01 01 01 01 01 01 01 | ................
0x418cff: 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | ................
0x418d0f: 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | ................
0x418d1f: 10 00 10 00 10 00 10 00 10 00 10 00 82 01 82 01 | ................
0x418d2f: 82 01 82 01 82 01 82 01 02 01 02 01 02 01 02 01 | ................
0x418d3f: 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 | ................
0x418d4f: 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 | ................
0x418d5f: 10 00 10 00 10 00 10 00 20 00 20 00 20 00 20 00 | ........ . . . .
0x418d6f: 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 |  . . . . . . . .
0x418d7f: 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 |  . . . . . . . .
0x418d8f: 20 00 20 00 20 00 20 00 20 00 20 00 20 00 20 00 |  . . . . . . . .
0x418d9f: 20 00 20 00 20 00 20 00 20 00 48 00 10 00 10 00 |  . . . . .H.....
0x418daf: 10 00 10 00 10 00 10 00 10 00 10 00 10 00 10 00 | ................
0x418dbf: 10 00 10 00 10 00 10 00 10 00 10 00 10 00 14 00 | ................
0x418dcf: 14 00 10 00 10 00 10 00 10 00 10 00 14 00 10 00 | ................
0x418ddf: 10 00 10 00 10 00 10 00 10 00 01 01 01 01 01 01 | ................
0x418def: 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | ................
0x418dff: 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 | ................
0x418e0f: 01 01 01 01 01 01 01 01 10 00 01 01 01 01 01 01 | ................
0x418e1f: 01 01 01 01 01 01 01 01 02 01 02 01 02 01 02 01 | ................
0x418e2f: 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 | ................
0x418e3f: 02 01 02 01 02 01 02 01 02 01 02 01 02 01 02 01 | ................
0x418e4f: 02 01 02 01 02 01 02 01 10 00 02 01 02 01 02 01 | ................
0x418e5f: 02 01 02 01 02 01 02 01 02 01 01 01 00 00 00 00 | ................
0x418e6f: 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f | ................
0x418e7f: 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f | ................
0x418e8f: a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af | ................
0x418e9f: b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf | ................
0x418eaf: c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf | ................
0x418ebf: d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df | ................
0x418ecf: e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef | ................
0x418edf: f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff | ................
0x418eef: 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f | ................
0x418eff: 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f | ................
0x418f0f: 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f |  !"#$%&'()*+,-./
0x418f1f: 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f | 0123456789:;<=>?
0x418f2f: 40 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f | @abcdefghijklmno
0x418f3f: 70 71 72 73 74 75 76 77 78 79 7a 5b 5c 5d 5e 5f | pqrstuvwxyz[\]^_
0x418f4f: 60 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f | `abcdefghijklmno
0x418f5f: 70 71 72 73 74 75 76 77 78 79 7a 7b 7c 7d 7e 7f | pqrstuvwxyz{|}~.
0x418f6f: 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f | ................
0x418f7f: 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f | ................
0x418f8f: a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af | ................
0x418f9f: b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf | ................
0x418faf: c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf | ................
0x418fbf: d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df | ................
0x418fcf: e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef | ................
0x418fdf: f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff | ................
0x418fef: 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f | ................
0x418fff: 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f | ................
0x41900f: a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af | ................
0x41901f: b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf | ................
0x41902f: c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf | ................
0x41903f: d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df | ................
0x41904f: e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef | ................
0x41905f: f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff | ................
0x41906f: 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f | ................
0x41907f: 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f | ................
0x41908f: 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f |  !"#$%&'()*+,-./
0x41909f: 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f | 0123456789:;<=>?
0x4190af: 40 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f | @ABCDEFGHIJKLMNO
0x4190bf: 50 51 52 53 54 55 56 57 58 59 5a 5b 5c 5d 5e 5f | PQRSTUVWXYZ[\]^_
0x4190cf: 60 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f | `ABCDEFGHIJKLMNO
0x4190df: 50 51 52 53 54 55 56 57 58 59 5a 7b 7c 7d 7e 7f | PQRSTUVWXYZ{|}~.
0x4190ef: 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f | ................
0x4190ff: 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f | ................
0x41910f: a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af | ................
0x41911f: b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf | ................
0x41912f: c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf | ................
0x41913f: d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 da db dc dd de df | ................
0x41914f: e0 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea eb ec ed ee ef | ................
0x41915f: f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd fe ff | ................
0x41916f: 31 23 51 4e 41 4e 00 00 31 23 49 4e 46 00 00 00 | 1#QNAN..1#INF...
0x41917f: 31 23 49 4e 44 00 00 00 31 23 53 4e 41 4e 00 00 | 1#IND...1#SNAN..
0x41918f: 00 00 00 00 00 00 00 00 00 00 00 00 08 a4 41 00 | ..............A.
0x41919f: a4 91 41 00 00 00 00 00 00 00 00 00 02 00 00 00 | ..A.............
0x4191af: b4 91 41 00 c0 91 41 00 dc 91 41 00 00 00 00 00 | ..A...A...A.....
0x4191bf: 08 a4 41 00 01 00 00 00 00 00 00 00 ff ff ff ff | ..A.............
0x4191cf: 00 00 00 00 40 00 00 00 a4 91 41 00 1c a0 41 00 | ....@.....A...A.
0x4191df: 00 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 | ................
0x4191ef: 40 00 00 00 f8 91 41 00 00 00 00 00 00 00 00 00 | @.....A.........
0x4191ff: 01 00 00 00 08 92 41 00 dc 91 41 00 00 00 00 00 | ......A...A.....
0x41920f: 00 00 00 00 00 00 00 00 00 00 00 00 28 a4 41 00 | ............(.A.
0x41921f: 24 92 41 00 00 00 00 00 00 00 00 00 03 00 00 00 | $.A.............
0x41922f: 34 92 41 00 44 92 41 00 c0 91 41 00 dc 91 41 00 | 4.A.D.A...A...A.
0x41923f: 00 00 00 00 28 a4 41 00 02 00 00 00 00 00 00 00 | ....(.A.........
0x41924f: ff ff ff ff 00 00 00 00 40 00 00 00 24 92 41 00 | ........@...$.A.
0x41925f: 00 00 00 00 00 00 00 00 00 00 00 00 48 a4 41 00 | ............H.A.
0x41926f: 74 92 41 00 00 00 00 00 00 00 00 00 03 00 00 00 | t.A.............
0x41927f: 84 92 41 00 94 92 41 00 c0 91 41 00 dc 91 41 00 | ..A...A...A...A.
0x41928f: 00 00 00 00 48 a4 41 00 02 00 00 00 00 00 00 00 | ....H.A.........
0x41929f: ff ff ff ff 00 00 00 00 40 00 00 00 74 92 41 00 | ........@...t.A.
0x4192af: 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 41 00 | ..............A.
0x4192bf: c4 92 41 00 00 00 00 00 00 00 00 00 02 00 00 00 | ..A.............
0x4192cf: d4 92 41 00 e0 92 41 00 dc 91 41 00 00 00 00 00 | ..A...A...A.....
0x4192df: 00 a0 41 00 01 00 00 00 00 00 00 00 ff ff ff ff | ..A.............
0x4192ef: 00 00 00 00 40 00 00 00 c4 92 41 00 00 00 00 00 | ....@.....A.....
0x4192ff: 00 00 00 00 00 00 00 00 80 a4 41 00 10 93 41 00 | ..........A...A.
0x41930f: 00 00 00 00 00 00 00 00 01 00 00 00 20 93 41 00 | ............ .A.
0x41931f: 28 93 41 00 00 00 00 00 80 a4 41 00 00 00 00 00 | (.A.......A.....
0x41932f: 00 00 00 00 ff ff ff ff 00 00 00 00 40 00 00 00 | ............@...
0x41933f: 10 93 41 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..A.............
0x41934f: 1c a0 41 00 f8 91 41 00 00 00 00 00 00 00 00 00 | ..A...A.........
0x41935f: 00 00 00 00 cc a4 41 00 6c 93 41 00 00 00 00 00 | ......A.l.A.....
0x41936f: 00 00 00 00 02 00 00 00 7c 93 41 00 88 93 41 00 | ........|.A...A.
0x41937f: dc 91 41 00 00 00 00 00 cc a4 41 00 01 00 00 00 | ..A.......A.....
0x41938f: 00 00 00 00 ff ff ff ff 00 00 00 00 40 00 00 00 | ............@...
0x41939f: 6c 93 41 00 00 00 00 00 00 00 00 00 00 00 00 00 | l.A.............
0x4193af: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4193bf: 00 00 00 00 d3 32 40 00 00 00 00 00 00 00 00 00 | .....2@.........
0x4193cf: 00 00 00 00 f7 32 40 00 ff ff ff ff 00 00 00 00 | .....2@.........
0x4193df: ff ff ff ff 00 00 00 00 01 00 00 00 00 00 00 00 | ................
0x4193ef: 01 00 00 00 00 00 00 00 22 05 93 19 04 00 00 00 | ........".......
0x4193ff: d8 93 41 00 02 00 00 00 1c 94 41 00 00 00 00 00 | ..A.......A.....
0x41940f: 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | ................
0x41941f: 02 00 00 00 03 00 00 00 01 00 00 00 c8 93 41 00 | ..............A.
0x41942f: 00 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 | ................
0x41943f: b8 93 41 00 00 00 00 00 70 38 40 00 00 00 00 00 | ..A.....p8@.....
0x41944f: 54 94 41 00 02 00 00 00 60 94 41 00 7c 94 41 00 | T.A.....`.A.|.A.
0x41945f: 00 00 00 00 00 a0 41 00 00 00 00 00 ff ff ff ff | ......A.........
0x41946f: 00 00 00 00 0c 00 00 00 70 3a 40 00 00 00 00 00 | ........p:@.....
0x41947f: 1c a0 41 00 00 00 00 00 ff ff ff ff 00 00 00 00 | ..A.............
0x41948f: 0c 00 00 00 fd df 40 00 00 00 00 00 00 00 00 00 | ......@.........
0x41949f: 00 00 00 00 3e 43 40 00 ff ff ff ff 00 00 00 00 | ....>C@.........
0x4194af: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4194bf: 01 00 00 00 01 00 00 00 98 94 41 00 22 05 93 19 | ..........A."...
0x4194cf: 02 00 00 00 a8 94 41 00 01 00 00 00 b8 94 41 00 | ......A.......A.
0x4194df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x4194ef: 00 00 00 00 08 a4 41 00 00 00 00 00 ff ff ff ff | ......A.........
0x4194ff: 00 00 00 00 0c 00 00 00 ae d0 40 00 00 00 00 00 | ..........@.....
0x41950f: a9 d0 40 00 00 00 00 00 1c 95 41 00 03 00 00 00 | ..@.......A.....
0x41951f: 2c 95 41 00 f0 94 41 00 7c 94 41 00 00 00 00 00 | ,.A...A.|.A.....
0x41952f: 28 a4 41 00 00 00 00 00 ff ff ff ff 00 00 00 00 | (.A.............
0x41953f: 0c 00 00 00 fb d0 40 00 00 00 00 00 a9 d0 40 00 | ......@.......@.
0x41954f: 00 00 00 00 58 95 41 00 03 00 00 00 68 95 41 00 | ....X.A.....h.A.
0x41955f: f0 94 41 00 7c 94 41 00 00 00 00 00 48 a4 41 00 | ..A.|.A.....H.A.
0x41956f: 00 00 00 00 ff ff ff ff 00 00 00 00 0c 00 00 00 | ................
0x41957f: 48 d1 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 | H.@.............
0x41958f: 88 ff ff ff 00 00 00 00 fe ff ff ff bc e1 40 00 | ..............@.
0x41959f: d0 e1 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ..@.............
0x4195af: d0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x4195bf: e2 f2 40 00 00 00 00 00 a4 f2 40 00 ae f2 40 00 | ..@.......@...@.
0x4195cf: fe ff ff ff 00 00 00 00 d8 ff ff ff 00 00 00 00 | ................
0x4195df: fe ff ff ff 8a f3 40 00 93 f3 40 00 40 00 00 00 | ......@...@.@...
0x4195ef: 00 00 00 00 00 00 00 00 71 f4 40 00 ff ff ff ff | ........q.@.....
0x4195ff: 00 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 | ................
0x41960f: 00 00 00 00 01 00 00 00 01 00 00 00 ec 95 41 00 | ..............A.
0x41961f: 22 05 93 19 02 00 00 00 fc 95 41 00 01 00 00 00 | ".........A.....
0x41962f: 0c 96 41 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..A.............
0x41963f: 01 00 00 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x41964f: b4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x41965f: a9 f5 40 00 00 00 00 00 19 f5 40 00 22 f5 40 00 | ..@.......@.".@.
0x41966f: fe ff ff ff 00 00 00 00 d4 ff ff ff 00 00 00 00 | ................
0x41967f: fe ff ff ff 90 f7 40 00 94 f7 40 00 00 00 00 00 | ......@...@.....
0x41968f: fe ff ff ff 00 00 00 00 d8 ff ff ff 00 00 00 00 | ................
0x41969f: fe ff ff ff 29 f8 40 00 2d f8 40 00 00 00 00 00 | ....).@.-.@.....
0x4196af: 46 f1 40 00 00 00 00 00 bc 96 41 00 02 00 00 00 | F.@.......A.....
0x4196bf: c8 96 41 00 7c 94 41 00 00 00 00 00 cc a4 41 00 | ..A.|.A.......A.
0x4196cf: 00 00 00 00 ff ff ff ff 00 00 00 00 0c 00 00 00 | ................
0x4196df: 20 fd 40 00 00 00 00 00 fe ff ff ff 00 00 00 00 |  .@.............
0x4196ef: d8 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x4196ff: 51 ff 40 00 fe ff ff ff 00 00 00 00 60 ff 40 00 | Q.@.........`.@.
0x41970f: fe ff ff ff 00 00 00 00 d8 ff ff ff 00 00 00 00 | ................
0x41971f: fe ff ff ff 00 00 00 00 13 01 41 00 fe ff ff ff | ..........A.....
0x41972f: 00 00 00 00 1f 01 41 00 fe ff ff ff 00 00 00 00 | ......A.........
0x41973f: d8 ff ff ff 00 00 00 00 fe ff ff ff c6 02 41 00 | ..............A.
0x41974f: ca 02 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ..A.............
0x41975f: d8 ff ff ff 00 00 00 00 fe ff ff ff 16 03 41 00 | ..............A.
0x41976f: 1a 03 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ..A.............
0x41977f: d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x41978f: a9 04 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ..A.............
0x41979f: d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x4197af: f8 05 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ..A.............
0x4197bf: c0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x4197cf: b5 09 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ..A.............
0x4197df: d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x4197ef: a5 19 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | ..A.............
0x4197ff: cc ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x41980f: 77 1d 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | w.A.............
0x41981f: d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x41982f: fb 20 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | . A.............
0x41983f: d4 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x41984f: 36 2e 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | 6.A.............
0x41985f: c0 ff ff ff 00 00 00 00 fe ff ff ff 00 00 00 00 | ................
0x41986f: 15 34 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | .4A.............
0x41987f: d8 ff ff ff 00 00 00 00 fe ff ff ff 9b 35 41 00 | .............5A.
0x41988f: ae 35 41 00 00 00 00 00 fe ff ff ff 00 00 00 00 | .5A.............
0x41989f: d8 ff ff ff 00 00 00 00 fe ff ff ff ad 65 41 00 | .............eA.
0x4198af: c9 65 41 00 dc 98 01 00 00 00 00 00 00 00 00 00 | .eA.............
0x4198bf: 34 9a 01 00 00 70 01 00 00 00 00 00 00 00 00 00 | 4....p..........
0x4198cf: 00 00 00 01 01 00 00 00 00 00 00 00 d0 99 01 00 | ................
0x4198df: e0 99 01 00 f4 99 01 00 06 9a 01 00 1c 9a 01 00 | ................
0x4198ef: 42 9a 01 00 4e 9a 01 00 60 9a 01 00 72 9a 01 00 | B...N...`...r...
0x4198ff: 88 9a 01 00 9a 9a 01 00 b6 9a 01 00 c6 9a 01 00 | ................
0x41990f: d6 9a 01 00 e2 9a 01 00 ee 9a 01 00 fc 9a 01 00 | ................
0x41991f: 0a 9b 01 00 1a 9b 01 00 24 9b 01 00 3c 9b 01 00 | ........$...<...
0x41992f: 50 9b 01 00 60 9b 01 00 76 9b 01 00 8e 9b 01 00 | P...`...v.......
0x41993f: a0 9b 01 00 ac 9b 01 00 ca 9b 01 00 d8 9b 01 00 | ................
0x41994f: e4 9b 01 00 f4 9b 01 00 0a 9c 01 00 20 9c 01 00 | ............ ...
0x41995f: 3a 9c 01 00 54 9c 01 00 66 9c 01 00 8e 9c 01 00 | :...T...f.......
0x41996f: 9c 9c 01 00 b4 9c 01 00 c2 9c 01 00 dc 9c 01 00 | ................
0x41997f: ec 9c 01 00 02 9d 01 00 1c 9d 01 00 28 9d 01 00 | ............(...
0x41998f: 32 9d 01 00 3e 9d 01 00 50 9d 01 00 6c 9d 01 00 | 2...>...P...l...
0x41999f: 80 9d 01 00 94 9d 01 00 a8 9d 01 00 c0 9d 01 00 | ................
0x4199af: d8 9d 01 00 e0 9d 01 00 ec 9d 01 00 fc 9d 01 00 | ................
0x4199bf: 0c 9e 01 00 22 9e 01 00 34 9e 01 00 00 00 00 00 | ...."...4.......
0x4199cf: f5 04 57 61 69 74 43 6f 6d 6d 45 76 65 6e 74 00 | ..WaitCommEvent.
0x4199df: f6 04 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 | ..WaitForDebugEv
0x4199ef: 65 6e 74 00 de 04 55 70 64 61 74 65 52 65 73 6f | ent...UpdateReso
0x4199ff: 75 72 63 65 41 00 11 05 57 69 64 65 43 68 61 72 | urceA...WideChar
0x419a0f: 54 6f 4d 75 6c 74 69 42 79 74 65 00 2f 04 53 65 | ToMultiByte./.Se
0x419a1f: 74 43 6f 6e 73 6f 6c 65 43 75 72 73 6f 72 49 6e | tConsoleCursorIn
0x419a2f: 66 6f 00 00 4b 45 52 4e 45 4c 33 32 2e 64 6c 6c | fo..KERNEL32.dll
0x419a3f: 00 00 18 04 52 74 6c 55 6e 77 69 6e 64 00 b1 03 | ....RtlUnwind...
0x419a4f: 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 00 00 | RaiseException..
0x419a5f: 86 01 47 65 74 43 6f 6d 6d 61 6e 64 4c 69 6e 65 | ..GetCommandLine
0x419a6f: 41 00 d3 02 48 65 61 70 53 65 74 49 6e 66 6f 72 | A...HeapSetInfor
0x419a7f: 6d 61 74 69 6f 6e 00 00 63 02 47 65 74 53 74 61 | mation..c.GetSta
0x419a8f: 72 74 75 70 49 6e 66 6f 57 00 04 03 49 73 50 72 | rtupInfoW...IsPr
0x419a9f: 6f 63 65 73 73 6f 72 46 65 61 74 75 72 65 50 72 | ocessorFeaturePr
0x419aaf: 65 73 65 6e 74 00 ea 00 45 6e 63 6f 64 65 50 6f | esent...EncodePo
0x419abf: 69 6e 74 65 72 00 02 02 47 65 74 4c 61 73 74 45 | inter...GetLastE
0x419acf: 72 72 6f 72 00 00 cf 02 48 65 61 70 46 72 65 65 | rror....HeapFree
0x419adf: 00 00 c5 04 54 6c 73 41 6c 6c 6f 63 00 00 c7 04 | ....TlsAlloc....
0x419aef: 54 6c 73 47 65 74 56 61 6c 75 65 00 c8 04 54 6c | TlsGetValue...Tl
0x419aff: 73 53 65 74 56 61 6c 75 65 00 ca 00 44 65 63 6f | sSetValue...Deco
0x419b0f: 64 65 50 6f 69 6e 74 65 72 00 c6 04 54 6c 73 46 | dePointer...TlsF
0x419b1f: 72 65 65 00 ef 02 49 6e 74 65 72 6c 6f 63 6b 65 | ree...Interlocke
0x419b2f: 64 49 6e 63 72 65 6d 65 6e 74 00 00 18 02 47 65 | dIncrement....Ge
0x419b3f: 74 4d 6f 64 75 6c 65 48 61 6e 64 6c 65 57 00 00 | tModuleHandleW..
0x419b4f: 73 04 53 65 74 4c 61 73 74 45 72 72 6f 72 00 00 | s.SetLastError..
0x419b5f: c5 01 47 65 74 43 75 72 72 65 6e 74 54 68 72 65 | ..GetCurrentThre
0x419b6f: 61 64 49 64 00 00 eb 02 49 6e 74 65 72 6c 6f 63 | adId....Interloc
0x419b7f: 6b 65 64 44 65 63 72 65 6d 65 6e 74 00 00 45 02 | kedDecrement..E.
0x419b8f: 47 65 74 50 72 6f 63 41 64 64 72 65 73 73 00 00 | GetProcAddress..
0x419b9f: cb 02 48 65 61 70 41 6c 6c 6f 63 00 a5 04 53 65 | ..HeapAlloc...Se
0x419baf: 74 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 | tUnhandledExcept
0x419bbf: 69 6f 6e 46 69 6c 74 65 72 00 19 01 45 78 69 74 | ionFilter...Exit
0x419bcf: 50 72 6f 63 65 73 73 00 25 05 57 72 69 74 65 46 | Process.%.WriteF
0x419bdf: 69 6c 65 00 64 02 47 65 74 53 74 64 48 61 6e 64 | ile.d.GetStdHand
0x419bef: 6c 65 00 00 14 02 47 65 74 4d 6f 64 75 6c 65 46 | le....GetModuleF
0x419bff: 69 6c 65 4e 61 6d 65 57 00 00 13 02 47 65 74 4d | ileNameW....GetM
0x419c0f: 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 41 00 00 | oduleFileNameA..
0x419c1f: 61 01 46 72 65 65 45 6e 76 69 72 6f 6e 6d 65 6e | a.FreeEnvironmen
0x419c2f: 74 53 74 72 69 6e 67 73 57 00 da 01 47 65 74 45 | tStringsW...GetE
0x419c3f: 6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 | nvironmentString
0x419c4f: 73 57 00 00 6f 04 53 65 74 48 61 6e 64 6c 65 43 | sW..o.SetHandleC
0x419c5f: 6f 75 6e 74 00 00 e3 02 49 6e 69 74 69 61 6c 69 | ount....Initiali
0x419c6f: 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f | zeCriticalSectio
0x419c7f: 6e 41 6e 64 53 70 69 6e 43 6f 75 6e 74 00 f3 01 | nAndSpinCount...
0x419c8f: 47 65 74 46 69 6c 65 54 79 70 65 00 d1 00 44 65 | GetFileType...De
0x419c9f: 6c 65 74 65 43 72 69 74 69 63 61 6c 53 65 63 74 | leteCriticalSect
0x419caf: 69 6f 6e 00 cd 02 48 65 61 70 43 72 65 61 74 65 | ion...HeapCreate
0x419cbf: 00 00 a7 03 51 75 65 72 79 50 65 72 66 6f 72 6d | ....QueryPerform
0x419ccf: 61 6e 63 65 43 6f 75 6e 74 65 72 00 93 02 47 65 | anceCounter...Ge
0x419cdf: 74 54 69 63 6b 43 6f 75 6e 74 00 00 c1 01 47 65 | tTickCount....Ge
0x419cef: 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 49 | tCurrentProcessI
0x419cff: 64 00 79 02 47 65 74 53 79 73 74 65 6d 54 69 6d | d.y.GetSystemTim
0x419d0f: 65 41 73 46 69 6c 65 54 69 6d 65 00 72 01 47 65 | eAsFileTime.r.Ge
0x419d1f: 74 43 50 49 6e 66 6f 00 68 01 47 65 74 41 43 50 | tCPInfo.h.GetACP
0x419d2f: 00 00 37 02 47 65 74 4f 45 4d 43 50 00 00 0a 03 | ..7.GetOEMCP....
0x419d3f: 49 73 56 61 6c 69 64 43 6f 64 65 50 61 67 65 00 | IsValidCodePage.
0x419d4f: d3 04 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 | ..UnhandledExcep
0x419d5f: 74 69 6f 6e 46 69 6c 74 65 72 00 00 00 03 49 73 | tionFilter....Is
0x419d6f: 44 65 62 75 67 67 65 72 50 72 65 73 65 6e 74 00 | DebuggerPresent.
0x419d7f: c0 04 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 | ..TerminateProce
0x419d8f: 73 73 00 00 c0 01 47 65 74 43 75 72 72 65 6e 74 | ss....GetCurrent
0x419d9f: 50 72 6f 63 65 73 73 00 39 03 4c 65 61 76 65 43 | Process.9.LeaveC
0x419daf: 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 00 00 | riticalSection..
0x419dbf: ee 00 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 | ..EnterCriticalS
0x419dcf: 65 63 74 69 6f 6e 00 00 b2 04 53 6c 65 65 70 00 | ection....Sleep.
0x419ddf: d4 02 48 65 61 70 53 69 7a 65 00 00 3f 03 4c 6f | ..HeapSize..?.Lo
0x419def: 61 64 4c 69 62 72 61 72 79 57 00 00 2d 03 4c 43 | adLibraryW..-.LC
0x419dff: 4d 61 70 53 74 72 69 6e 67 57 00 00 67 03 4d 75 | MapStringW..g.Mu
0x419e0f: 6c 74 69 42 79 74 65 54 6f 57 69 64 65 43 68 61 | ltiByteToWideCha
0x419e1f: 72 00 69 02 47 65 74 53 74 72 69 6e 67 54 79 70 | r.i.GetStringTyp
0x419e2f: 65 57 00 00 d2 02 48 65 61 70 52 65 41 6c 6c 6f | eW....HeapReAllo
0x419e3f: 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | c...............
0x419e4f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
0x419e5f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................

Here's what objdump spit out:

zorgins.exe:     file format pei-i386
zorgins.exe
architecture: i386, flags 0x0000012e:
EXEC_P, HAS_LINENO, HAS_DEBUG, HAS_LOCALS, D_PAGED
start address 0x0040e1fa

Characteristics 0x103
	relocations stripped
	executable
	32 bit words

Time/Date		Tue Aug  9 08:30:46 2016
Magic			010b	(PE32)
MajorLinkerVersion	10
MinorLinkerVersion	0
SizeOfCode		00015a00
SizeOfInitializedData	00005a00
SizeOfUninitializedData	00000000
AddressOfEntryPoint	0000e1fa
BaseOfCode		00001000
BaseOfData		00017000
ImageBase		00400000
SectionAlignment	00001000
FileAlignment		00000200
MajorOSystemVersion	5
MinorOSystemVersion	1
MajorImageVersion	0
MinorImageVersion	0
MajorSubsystemVersion	5
MinorSubsystemVersion	1
Win32Version		00000000
SizeOfImage		0001e000
SizeOfHeaders		00000400
CheckSum		0002353d
Subsystem		00000002	(Windows GUI)
DllCharacteristics	00008100
SizeOfStackReserve	00100000
SizeOfStackCommit	00001000
SizeOfHeapReserve	00100000
SizeOfHeapCommit	00001000
LoaderFlags		00000000
NumberOfRvaAndSizes	00000010

The Data Directory
Entry 0 00000000 08080000 Export Directory [.edata (or where ever we found it)]
Entry 1 000198b4 00000028 Import Directory [parts of .idata]
Entry 2 0001d000 00000508 Resource Directory [.rsrc]
Entry 3 00000000 00000000 Exception Directory [.pdata]
Entry 4 00000000 00000000 Security Directory
Entry 5 00000000 00000000 Base Relocation Directory [.reloc]
Entry 6 00000000 00000000 Debug Directory
Entry 7 00000000 00000000 Description Directory
Entry 8 00000000 00000000 Special Directory
Entry 9 00000000 00000000 Thread Storage Directory [.tls]
Entry a 00000000 00000000 Load Configuration Directory
Entry b 00000000 00000000 Bound Import Directory
Entry c 00017000 000000f4 Import Address Table Directory
Entry d 00000000 00000000 Delay Import Directory
Entry e 00000000 00000000 CLR Runtime Header
Entry f 00000000 00000000 Reserved

There is an import table in .rdata at 0x4198b4

The Import Tables (interpreted .rdata section contents)
 vma:            Hint    Time      Forward  DLL       First
                 Table   Stamp     Chain    Name      Thunk
 000198b4	000198dc 00000000 00000000 00019a34 00017000

	DLL Name: KERNEL32.dll
	vma:  Hint/Ord Member-Name Bound-To
	199d0	 1269  WaitCommEvent
	199e0	 1270  WaitForDebugEvent
	199f4	 1246  UpdateResourceA
	19a06	 1297  WideCharToMultiByte
	19a1c	 1071  SetConsoleCursorInfo
	19a42	 1048  RtlUnwind
	19a4e	  945  RaiseException
	19a60	  390  GetCommandLineA
	19a72	  723  HeapSetInformation
	19a88	  611  GetStartupInfoW
	19a9a	  772  IsProcessorFeaturePresent
	19ab6	  234  EncodePointer
	19ac6	  514  GetLastError
	19ad6	  719  HeapFree
	19ae2	 1221  TlsAlloc
	19aee	 1223  TlsGetValue
	19afc	 1224  TlsSetValue
	19b0a	  202  DecodePointer
	19b1a	 1222  TlsFree
	19b24	  751  InterlockedIncrement
	19b3c	  536  GetModuleHandleW
	19b50	 1139  SetLastError
	19b60	  453  GetCurrentThreadId
	19b76	  747  InterlockedDecrement
	19b8e	  581  GetProcAddress
	19ba0	  715  HeapAlloc
	19bac	 1189  SetUnhandledExceptionFilter
	19bca	  281  ExitProcess
	19bd8	 1317  WriteFile
	19be4	  612  GetStdHandle
	19bf4	  532  GetModuleFileNameW
	19c0a	  531  GetModuleFileNameA
	19c20	  353  FreeEnvironmentStringsW
	19c3a	  474  GetEnvironmentStringsW
	19c54	 1135  SetHandleCount
	19c66	  739  InitializeCriticalSectionAndSpinCount
	19c8e	  499  GetFileType
	19c9c	  209  DeleteCriticalSection
	19cb4	  717  HeapCreate
	19cc2	  935  QueryPerformanceCounter
	19cdc	  659  GetTickCount
	19cec	  449  GetCurrentProcessId
	19d02	  633  GetSystemTimeAsFileTime
	19d1c	  370  GetCPInfo
	19d28	  360  GetACP
	19d32	  567  GetOEMCP
	19d3e	  778  IsValidCodePage
	19d50	 1235  UnhandledExceptionFilter
	19d6c	  768  IsDebuggerPresent
	19d80	 1216  TerminateProcess
	19d94	  448  GetCurrentProcess
	19da8	  825  LeaveCriticalSection
	19dc0	  238  EnterCriticalSection
	19dd8	 1202  Sleep
	19de0	  724  HeapSize
	19dec	  831  LoadLibraryW
	19dfc	  813  LCMapStringW
	19e0c	  871  MultiByteToWideChar
	19e22	  617  GetStringTypeW
	19e34	  722  HeapReAlloc

 000198c8	00000000 00000000 01000000 00000001 00000000

There is an export table, but the section containing it could not be found

The .rsrc Resource Directory section:
000  Type Table: Char: 0, Time: 00000000, Ver: 0/0, Num Names: 0, IDs: 2
010   Entry: ID: 0x000003, Value: 0x80000020
020    Name Table: Char: 0, Time: 00000000, Ver: 0/0, Num Names: 0, IDs: 2
030     Entry: ID: 0x000001, Value: 0x80000058
058      Language Table: Char: 0, Time: 00000000, Ver: 0/0, Num Names: 0, IDs: 1
068       Entry: ID: 0x00040c, Value: 0x0000a0
0a0        Leaf: Addr: 0x01d0d0, Size: 0x0002e8, Codepage: 0
038     Entry: ID: 0x000002, Value: 0x80000070
070      Language Table: Char: 0, Time: 00000000, Ver: 0/0, Num Names: 0, IDs: 1
080       Entry: ID: 0x00040c, Value: 0x0000b0
0b0        Leaf: Addr: 0x01d3b8, Size: 0x000128, Codepage: 0
018   Entry: ID: 0x00000e, Value: 0x80000040
040    Name Table: Char: 0, Time: 00000000, Ver: 0/0, Num Names: 0, IDs: 1
050     Entry: ID: 0x000083, Value: 0x80000088
088      Language Table: Char: 0, Time: 00000000, Ver: 0/0, Num Names: 0, IDs: 1
098       Entry: ID: 0x00040c, Value: 0x0000c0
0c0        Leaf: Addr: 0x01d4e0, Size: 0x000022, Codepage: 0
 Resources start at offset: 0xd0

Sections:
Idx Name          Size      VMA       LMA       File off  Algn
  0 .text         00015811  00401000  00401000  00000400  2**2
                  CONTENTS, ALLOC, LOAD, READONLY, CODE
  1 .rdata        00002e42  00417000  00417000  00015e00  2**2
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
  2 .data         00001400  0041a000  0041a000  00018e00  2**2
                  CONTENTS, ALLOC, LOAD, DATA
  3 .rsrc         00000508  0041d000  0041d000  0001a200  2**2
                  CONTENTS, ALLOC, LOAD, READONLY, DATA
SYMBOL TABLE:
no symbols

Plasma does not find any entry point named "MAIN", neither does objdump. However, objdump does identify the entry point as 0x40e1fa which corresponds to plasma's sub_40e1fa function.

Bookmark the permalink.

Comments are closed