PESCAN.IO - Analysis Report Basic

File Structure
Analysis Image
PE Chart Code
Executable header (light blue)
Executable sections (pink)
Non-executable sections (black)
External injected code (red)
File Structure in red = malformed or corrupted header
Chart Code For Other Files
Printable characters (blue)
Non-printable characters (black)
Information
Icon: Icon
Size: 4,89 MB
SHA-256 Hash: 176CD88CDB63E032EBECA38E773AD4E0F955688E11FC68B296A35B9C0BA430DE
SHA-1 Hash: 58B81A0849F3FF523AD1AD618B5020A5E65F640F
MD5 Hash: 9DC63BC50CE184184C05883E08F3EF6B
Imphash: 6A38930CEE106530F80E7FEE4E6E36F5
MajorOSVersion: 6
MinorOSVersion: 0
CheckSum: 004E9D86
EntryPoint (rva): 32AC30
SizeOfHeaders: 400
SizeOfImage: 4E5000
ImageBase: 0000000140000000
Architecture: x64
ImportTable: 3F466C
IAT: 346000
Characteristics: 22
TimeDateStamp: 6788FEA8
Date: 16/01/2025 12:42:16
File Type: EXE
Number Of Sections: 6
ASLR: Disabled
Section Names (Optional Header): .text, .rdata, .data, .pdata, .rsrc, .reloc
Number Of Executable Sections: 1
Subsystem: Windows GUI
UAC Execution Level Manifest: asInvoker
Sections Info
Section Name Flags ROffset RSize VOffset VSizeEntropyChi2
.text 60000020 (Code, Executable, Readable) 400 344400 1000 34430E6,455823589863,78
.rdata 40000040 (Initialized Data, Readable) 344800 B2C00 346000 B2AD65,719916978565,58
.data C0000040 (Initialized Data, Readable, Writeable) 3F7400 EE00 3F9000 101404,05484078658,75
.pdata 40000040 (Initialized Data, Readable) 406200 1EA00 40A000 1E8F46,36412190745,25
.rsrc 40000040 (Initialized Data, Readable) 424C00 B5A00 429000 B59603,650562223049,78
.reloc 42000040 (Initialized Data, GP-Relative, Readable) 4DA600 5A00 4DF000 58105,4337128464,31
Description
OriginalFilename: RadiAntViewer.exe
CompanyName: Medixant
LegalCopyright: Copyright (C) 2009-2025 Medixant
ProductName: RadiAnt DICOM Viewer (64-bit)
FileVersion: 2025.1.0.1600
FileDescription: RadiAnt DICOM Viewer (64-bit)
ProductVersion: 2025.1.0.1600
Language: Unknown (ID=0x0)
CodePage: Unicode (UTF-16 LE) (0x4B0)
Entry Point
The section number (1) have the Entry Point
Information -> EntryPoint (calculated) - 32A030
Code -> 4883EC28E8630400004883C428E97AFEFFFFCCCCE93B090000CCCCCC4883611000488D0570E7010048894108488D0555E701
• SUB RSP, 0X28
• CALL 0X146C
• ADD RSP, 0X28
• JMP 0XE8C
• INT3
• INT3
• JMP 0X1954
• INT3
• INT3
• INT3
• AND QWORD PTR [RCX + 0X10], 0
• LEA RAX, [RIP + 0X1E770]
• MOV QWORD PTR [RCX + 8], RAX
Signatures
Rich Signature Analyzer:
Code -> 228C58D566ED368666ED368666ED36866F95A58674ED36860082CB8663ED3686349832876CED36863498358762ED36863498378760ED3686B59F32876BED3686B59F308767ED3686B59F37874BED368666ED3786D2EF3686349833874EED3686AC983F873EEC3686AC98C98667ED368666EDA18662ED3686AC98348767ED36865269636866ED3686
Footprint md5 Hash -> 47686ADBBE634979F1772161F639FFA0
• The Rich header apparently has not been modified
Certificate - Digital Signature:
• The file is signed and the signature is correct
Packer/Compiler
Compiler: Microsoft Visual Studio
Detect It Easy (die)
• PE+(64): compiler: Microsoft Visual C/C++(-)[-]
• PE+(64): linker: Microsoft Linker(14.29**)[-]
• PE+(64): Sign tool: Windows Authenticode(2.0)[PKCS 7]
• Entropy: 6.25671
Suspicious Functions
Library Function Description
Ws2_32.DLL connect | Possible Call API By Name Establish a connection to a specified socket.
KERNEL32.DLL CreateMutexW Create a named or unnamed mutex object for controlling access to a shared resource.
KERNEL32.DLL CopyFileW Copies an existing file to a new file.
KERNEL32.DLL WriteFile Writes data to a specified file or input/output (I/O) device.
KERNEL32.DLL LoadLibraryA Loads the specified module into the address space of the calling process.
KERNEL32.DLL LoadLibraryW Loads the specified module into the address space of the calling process.
KERNEL32.DLL GetProcAddress Retrieves the address of an exported function or variable from the specified dynamic-link library (DLL).
KERNEL32.DLL CreateFileA Creates or opens a file or I/O device.
KERNEL32.DLL DeleteFileA Deletes an existing file.
KERNEL32.DLL IsDebuggerPresent Determines if the calling process is being debugged by a user-mode debugger.
KERNEL32.DLL SleepEx Pauses the execution of the current thread, optionally allowing the thread to be awakened by a kernel object or upon expiration of a timeout.
USER32.DLL GetAsyncKeyState Retrieves the status of a virtual key asynchronously.
SHELL32.DLL ShellExecuteW Performs a run operation on a specific file.
SHELL32.DLL ShellExecuteExW Performs a run operation on a specific file.
Windows REG (UNICODE)
Software\RadiAnt Viewer
Software\Medixant\FD\
Software\Medixant\IH
Software\Medixant
SOFTWARE\Microsoft\Windows NT\CurrentVersion
File Access
api-ms-win-crt-locale-l1-1-0.dll
api-ms-win-crt-math-l1-1-0.dll
api-ms-win-crt-string-l1-1-0.dll
api-ms-win-crt-convert-l1-1-0.dll
api-ms-win-crt-time-l1-1-0.dll
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-utility-l1-1-0.dll
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
VCRUNTIME140.dll
VCRUNTIME140_1.dll
COMCTL32.dll
SHLWAPI.dll
VERSION.dll
CRYPT32.dll
urlmon.dll
WININET.dll
WS2_32.dll
MSIMG32.dll
NETAPI32.dll
WINMM.dll
IPHLPAPI.DLL
RPCRT4.dll
PSAPI.DLL
gdiplus.dll
MSVCP140.dll
OLEAUT32.dll
ole32.dll
SHELL32.dll
ADVAPI32.dll
COMDLG32.dll
GDI32.dll
USER32.dll
KERNEL32.dll
.dat
@.dat
creport.zip
container.zip
Temp
File Access (UNICODE)
RadiAntViewer.exe
\VideoLAN\VLC\vlc.exe
\ffmpeg.exe
DBGHELP.DLL
gpuengine.dll
\Nvidia Corporation\nvsmi\nvml.dll
pragma schema_version;Shell32.dll
mfreadwrite.dll
mfplat.dll
ntdll.dll
kernel32.dll
ZipGetInterfacezip.dll
wmvcore.dll
user32.dll
jpeg4.dll
jpeg2.dll
InitMemjpeg3.dll
DecompressJPEGjpeg2000.dll
jpeg1.dll
api-ms-win-core-synch-l1-2-0.dll
\localsettings.dat
actg.dat
\actl.dat
\actg.dat
\radiant-log-%04d%02d%02d%02d%02d%02d.txt
\studies.txt
en.txt
\sl.txt
*.zip
Exec - arp 1
Exec - arp 2
Temp
SQL Queries
SELECT id, seriesrid, modality FROM series;
SELECT id,uid,patientrid,tstamp,patientname,patientid,patientbdate,totalimages,modalities,accessionnr,description,institution,referring,performing,reading,examid,totalsize,k, tstampadded, tstampopened FROM studies LEFT JOIN (SELECT keywordmap.sid, GROUP_CONCAT(keywords.text) AS k FROM keywordmap INNER JOIN keywords ON keywordmap.kid = keywords.id GROUP BY keywordmap.sid) AS t ON studies.id = t.sid
SELECT id, uid, seriesnumber, tstamp, description, protocol, modality, totalimages, tstampadded, tstampopened FROM series WHERE studyid = ?1 ORDER BY seriesrid ASC
SELECT id, uid, tstamp, framenr, instancenr, path, fileid, location FROM images WHERE seriesid = ?1 ORDER BY instancenr ASC, framenr ASC, location ASC, uid ASC
select count(*) from images where seriesid = series.id AND images.framenr IS NOT NULL),totalsize = (select SUM(size) from images where seriesid = series.id AND (images.framenr IS NULL OR images.framenr < 2)),tstampadded = ?1 WHERE series.id = ?2
SELECT SUM(totalimages) FROM series WHERE series.studyid = studies.id),totalsize = (select SUM(totalsize) from series where series.studyid = studies.id),modalities = (SELECT GROUP_CONCAT(m, '/') FROM (SELECT modality AS m FROM series WHERE series.studyid = studies.id GROUP BY modality ORDER BY modality)),tstampadded = ?1 WHERE studies.id = ?2
SELECT images.id, fileid, framenr, path, series.id, series.studyid FROM images JOIN series ON images.seriesid = series.id WHERE series.studyid ORDER BY series.seriesrid ASC, images.instancenr ASC, images.uid ASC
SELECT images.id, fileid, framenr, path, series.id, series.studyid FROM images JOIN series ON images.seriesid = series.id WHERE series.studyid = (SELECT series.studyid FROM series WHERE series.id ) ORDER BY series.seriesrid ASC, images.instancenr ASC, images.uid ASC
SELECT images.id, fileid, framenr, path, series.id, series.studyid FROM images JOIN series ON images.seriesid = series.id WHERE series.studyid = (SELECT series.studyid FROM series WHERE series.id = (SELECT images.seriesid FROM images WHERE images.id )) ORDER BY series.seriesrid ASC, images.instancenr ASC, images.uid ASC
SELECT id FROM keywords WHERE text = ?1
SELECT text, COUNT(kid) AS c FROM keywords LEFT JOIN keywordmap ON kid = keywords.id
SELECT COUNT(*) FROM studies
SELECT images.seriesid, series.studyid FROM images LEFT JOIN series ON series.id = images.seriesid WHERE images.id = ?1 LIMIT 1
SELECT valint, valtxt FROM info WHERE id = ?1
SELECT fileid FROM images WHERE fileid IS NOT NULL ORDER BY id DESC LIMIT 1
SELECT fileid FROM delqueue ORDER BY fileid DESC LIMIT 1
SELECT id, fileid FROM delqueue
SELECT id, fileid FROM images WHERE seriesid = ?1 AND uid = ?2 AND location = ?3;
SELECT id, fileid FROM images WHERE seriesid = ?1 AND uid = ?2;
SELECT id FROM series WHERE seriesrid = ?1 AND studyid = ?2;
SELECT id, tstamp, patientname, patientid, patientbdate, referring, performing, reading, description, institution, accessionnr, examid FROM studies WHERE uid IS NULL AND patientrid = ?1 AND tstamp = ?2;
SELECT id, tstamp, patientname, patientid, patientbdate, referring, performing, reading, description, institution, accessionnr, examid FROM studies WHERE uid = ?1 AND patientrid = ?2
SELECT id, tstamp, patientname, patientid, patientbdate, referring, performing, reading, description, institution, accessionnr, examid FROM studies WHERE uid IS NULL AND patientrid = ?1 AND tstamp IS NULL;
SELECT 1 FROM "%w".sqlite_master WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, %d, %Q, %d)=NULL
SELECT 1 FROM temp.sqlite_master WHERE name NOT LIKE 'sqliteX_%%' ESCAPE 'X' AND sql NOT LIKE 'create virtual%%' AND sqlite_rename_test(%Q, sql, type, name, 1, %Q, %d)=NULL
SELECT raise(ABORT,%Q) FROM "%w"."%w"
SELECT CASE WHEN quick_check GLOB 'CHECK*' THEN raise(ABORT,'CHECK constraint failed') WHEN quick_check GLOB 'non-* value in*' THEN raise(ABORT,'type mismatch on DEFAULT') ELSE raise(ABORT,'NOT NULL constraint failed') END FROM pragma_quick_check(%Q,%Q) WHERE quick_check GLOB 'CHECK*' OR quick_check GLOB 'NULL*' OR quick_check GLOB 'non-* value in*'
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
SELECT sql FROM "%w".sqlite_schema WHERE type='table'AND name<>'sqlite_sequence' AND coalesce(rootpage,1)>0
SELECT sql FROM "%w".sqlite_schema WHERE type='index'
SELECT xml FROM xml_groups WHERE gid = ?1
INSERT INTO info (id, valint, valtxt) VALUES (1,2, "4.9.36");INSERT INTO info (id, valint, valtxt) VALUES (2,2, "2025.1");
INSERT INTO delqueue (fileid, path) VALUES (?1, ?2)
INSERT INTO keywords (text) VALUES (?1)
INSERT INTO keywordmap (kid, sid) VALUES (?1, ?2)
INSERT INTO info (id, valint, valtxt) VALUES (?1, ?2, ?3) ON CONFLICT(id) DO UPDATE SET valint = ?4, valtxt = ?5;
INSERT INTO info (id, valtxt) VALUES (?1, ?2) ON CONFLICT(id) DO UPDATE SET valtxt = ?3;
INSERT INTO images (seriesid, tstamp, framenr, instancenr, uid, fileid, path, location, size) VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8, ?9);
INSERT INTO series (studyid, uid, seriesrid, seriesnumber, description, protocol, modality, tstamp) VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8);
INSERT INTO studies (uid, patientrid, tstamp, patientname, patientid, patientbdate, referring, performing, reading, description, institution, accessionnr, examid) VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8, ?9, ?10, ?11, ?12, ?13);
INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,%d,%Q);
INSERT into generated column "%s"
INSERT INTO %Q.sqlite_master VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
INSERT INTO %s.'||quote(name)||' SELECT*FROM"%w".'||quote(name)FROM %s.sqlite_schema WHERE type='table'AND coalesce(rootpage,1)>0
INSERT INTO %s.sqlite_schema SELECT*FROM "%w".sqlite_schema WHERE type IN('view','trigger') OR(type='table'AND rootpage=0)
INSERT INTO xml_groups (gid, xml) VALUES (?1, ?2) ON CONFLICT(gid) DO UPDATE SET xml = ?3;
CREATE TABLE %Q.%s(%s)
CREATE TABLE
CREATE TABLE %Q.sqlite_sequence(name,seq)
CREATE TABLE x
CREATE TABLE x(type text,name text,tbl_name text,rootpage int,sql text)
CREATE TABLE IF NOT EXISTS xml_groups(id INTEGER PRIMARY KEY,gid TEXT,xml TEXT);CREATE UNIQUE INDEX IF NOT EXISTS xml_group_idx ON xml_groups (gid);CREATE TABLE IF NOT EXISTS info(id INTEGER PRIMARY KEY,valint INTEGER,valtxt TEXT);INSERT OR IGNORE INTO info (id, valint, valtxt) VALUES (1, 1, "2025.1");
DROP TABLE to delete table %s
DELETE FROM studies where id=?1
DELETE FROM series where id=?1
DELETE FROM images where id=?1
DELETE FROM keywordmap where sid=?1
DELETE FROM keywordmap WHERE kid = ?1 AND sid IN (
DELETE FROM keywordmap WHERE sid IN (
DELETE FROM delqueue WHERE id=?1
DELETE FROM images WHERE id = ?1;
DELETE FROM %Q.%s WHERE %s=%Q
DELETE FROM %Q.sqlite_master WHERE tbl_name=%Q and type!='trigger'
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.sqlite_master WHERE name=%Q AND type='index'
DELETE FROM %Q.sqlite_master WHERE name=%Q AND type='trigger'
select from list
Interest's Words
ToolBar
Encrypt
Decrypt
PassWord
exec
attrib
start
pause
shutdown
systeminfo
ping
expand
replace
route
Interest's Words (UNICODE)
ToolBar
PassWord
<html
<head
<body
<div
<img
<meta
start
replace
Anti-VM/Sandbox/Debug Tricks (UNICODE)
OllyDbg Libary - dbghelp.dll
URLs
http://ocsp.globalsign.com/rootr30;
http://secure.globalsign.com/cacert/root-r3.crt
http://crl.globalsign.com/root-r3.crl
http://ocsp.globalsign.com/codesigningrootr450F
http://secure.globalsign.com/cacert/codesigningrootr45.crt
http://crl.globalsign.com/codesigningrootr45.crl
http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt
http://ocsp.globalsign.com/gsgccr45evcodesignca20200U
http://crl.globalsign.com/gsgccr45evcodesignca2020.crl
http://www.radiantviewer.com
http://ocsp.globalsign.com/ca/gstsacasha384g40C
http://secure.globalsign.com/cacert/gstsacasha384g4.crt
http://crl.globalsign.com/ca/gstsacasha384g4.crl
http://ocsp2.globalsign.com/rootr606
http://crl.globalsign.com/root-r6.crl
https://www.globalsign.com/repository/
https://www.globalsign.com/repository/0
URLs (UNICODE)
http://get.adobe.com/reader/
http://www.videolan.org/vlc/
https://radiantviewer.com/trial
https://radiantviewer.com/activate
https://radiantviewer.com/deactivate
https://www.radiantviewer.com/crashreport/send.php
https://u1.radiantviewer.com/update/?
Known IP/Domains
Cloudflare DNS - 1.1.1.1
Strings/Hex Code Found With The File Rules
Rule Type Encoding Matched (Word)
Text Ascii WinAPI Sockets (bind)
Text Ascii WinAPI Sockets (listen)
Text Ascii WinAPI Sockets (accept)
Text Unicode WinAPI Sockets (accept)
Text Ascii WinAPI Sockets (connect)
Text Unicode WinAPI Sockets (connect)
Text Ascii WinAPI Sockets (send)
Text Unicode WinAPI Sockets (send)
Text Ascii Registry (RegOpenKeyEx)
Text Ascii Registry (RegSetValueEx)
Text Ascii File (GetTempPath)
Text Ascii File (CopyFile)
Text Ascii File (CreateFile)
Text Ascii File (WriteFile)
Text Ascii File (ReadFile)
Text Unicode Encryption (Microsoft Enhanced Cryptographic Provider v1.0)
Text Ascii Encryption API (CryptAcquireContext)
Text Ascii Encryption API (CryptReleaseContext)
Text Ascii Anti-Analysis VM (IsDebuggerPresent)
Text Ascii Anti-Analysis VM (GetSystemInfo)
Text Ascii Anti-Analysis VM (GlobalMemoryStatusEx)
Text Ascii Anti-Analysis VM (GetVersion)
Text Ascii Reconnaissance (FindFirstFileW)
Text Ascii Reconnaissance (FindNextFileW)
Text Ascii Reconnaissance (FindClose)
Text Ascii Stealth (CloseHandle)
Text Ascii Stealth (UnmapViewOfFile)
Text Ascii Stealth (MapViewOfFile)
Text Ascii Stealth (CreateFileMappingA)
Text Ascii Stealth (CreateFileMappingW)
Text Ascii Stealth (QueueUserAPC)
Text Ascii Execution (CreateProcessW)
Text Ascii Execution (ShellExecute)
Text Ascii Execution (CreateEventW)
Text Unicode Keyboard Key (Alt+)
Text Unicode Keyboard Key (Alt+F4)
Text Ascii Keyboard Key (Num 0)
Text Ascii Keyboard Key (Num 1)
Text Ascii Keyboard Key (Num 2)
Text Ascii Keyboard Key (Num 3)
Text Ascii Keyboard Key (Num 4)
Text Ascii Keyboard Key (Num 5)
Text Ascii Keyboard Key (Num 6)
Text Ascii Keyboard Key (Num 7)
Text Ascii Keyboard Key (Num 8)
Text Ascii Keyboard Key (Num 9)
Text Ascii Keyboard Key (Num -)
Text Ascii Keyboard Key (Num +)
Text Ascii Keyboard Key (Num *)
Text Ascii Keyboard Key (NUMPAD0)
Text Ascii Keyboard Key (NUMPAD1)
Text Ascii Keyboard Key (NUMPAD2)
Text Ascii Keyboard Key (NUMPAD3)
Text Ascii Keyboard Key (NUMPAD4)
Text Ascii Keyboard Key (NUMPAD5)
Text Ascii Keyboard Key (NUMPAD6)
Text Ascii Keyboard Key (NUMPAD7)
Text Ascii Keyboard Key (NUMPAD8)
Text Ascii Keyboard Key (NUMPAD9)
Text Unicode Keyboard Key ((Ctrl + )
Text Ascii Keyboard Key (Scroll)
Text Unicode Keyboard Key (Scroll)
Text Ascii Keyboard Key (Num Lock)
Text Ascii Keyboard Key (Backspace)
Text Unicode Keyboard Key (Ctrl+A)
Text Unicode WMI execution (ROOT\CIMV2)
Text Ascii Ability of malware to remain on a system after a reboot (Persistence)
Text Ascii Technique to insert malicious code into a vulnerable application (Injection)
Text Ascii Movement from one compromised system to another within a network (Lateral)
Text Ascii Software that records user activity (Logger)
Text Ascii Unauthorized movement of funds or data (Transfer)
Text Unicode Unauthorized movement of funds or data (Transfer)
Text Ascii Technique used to insert malicious code into legitimate processes (Inject)
Text Ascii Technique used to capture communications between systems (Intercept)
Text Ascii Armed forces responsible for defending a country (Military)
Entry Point Hex Pattern Microsoft Visual C++ 8.0 (DLL)
Entry Point Hex Pattern PE-Exe Executable Image
Resources
Path DataRVA Size FileOffset CodeText
\AFX_DIALOG_LAYOUT\IDD_REGWIZ_PAGE9\0 4DDFC0 2 4D9BC0 0000..
\AFX_DIALOG_LAYOUT\103\0 42C110 2 427D10 0000..
\AFX_DIALOG_LAYOUT\106\0 42C108 2 427D08 0000..
\AFX_DIALOG_LAYOUT\139\0 4DE038 2 4D9C38 0000..
\AFX_DIALOG_LAYOUT\140\0 4DE000 2 4D9C00 0000..
\AFX_DIALOG_LAYOUT\169\0 4DDFE8 2 4D9BE8 0000..
\AFX_DIALOG_LAYOUT\170\0 4DDF88 2 4D9B88 0000..
\AFX_DIALOG_LAYOUT\176\0 4DDFD8 2 4D9BD8 0000..
\AFX_DIALOG_LAYOUT\195\0 4DDF80 2 4D9B80 0000..
\AFX_DIALOG_LAYOUT\219\0 4DDF90 2 4D9B90 0000..
\AFX_DIALOG_LAYOUT\220\0 4DDF78 2 4D9B78 0000..
\AFX_DIALOG_LAYOUT\222\0 4DDFA0 2 4D9BA0 0000..
\AFX_DIALOG_LAYOUT\223\0 4DDFA8 2 4D9BA8 0000..
\AFX_DIALOG_LAYOUT\224\0 4DDFB0 2 4D9BB0 0000..
\AFX_DIALOG_LAYOUT\225\0 4DDFB8 2 4D9BB8 0000..
\AFX_DIALOG_LAYOUT\227\0 4DDF98 2 4D9B98 0000..
\AFX_DIALOG_LAYOUT\228\0 4DDFC8 2 4D9BC8 0000..
\AFX_DIALOG_LAYOUT\229\0 4DDFD0 2 4D9BD0 0000..
\AFX_DIALOG_LAYOUT\230\0 4DDFE0 2 4D9BE0 0000..
\AFX_DIALOG_LAYOUT\236\0 4DDFF0 2 4D9BF0 0000..
\AFX_DIALOG_LAYOUT\238\0 4DDFF8 2 4D9BF8 0000..
\AFX_DIALOG_LAYOUT\244\0 4DE008 2 4D9C08 0000..
\AFX_DIALOG_LAYOUT\245\0 4DE010 2 4D9C10 0000..
\AFX_DIALOG_LAYOUT\246\0 4DE018 2 4D9C18 0000..
\AFX_DIALOG_LAYOUT\248\0 4DE020 2 4D9C20 0000..
\AFX_DIALOG_LAYOUT\251\0 4DE028 2 4D9C28 0000..
\AFX_DIALOG_LAYOUT\253\0 4DE030 2 4D9C30 0000..
\AFX_DIALOG_LAYOUT\258\0 4DE040 2 4D9C40 0000..
\AFX_DIALOG_LAYOUT\263\0 4DE048 2 4D9C48 0000..
\AFX_DIALOG_LAYOUT\268\1033 4DE198 2 4D9D98 0000..
\AFX_DIALOG_LAYOUT\270\0 4DE050 2 4D9C50 0000..
\AFX_DIALOG_LAYOUT\273\0 4DE058 2 4D9C58 0000..
\AFX_DIALOG_LAYOUT\275\0 4DE060 2 4D9C60 0000..
\AFX_DIALOG_LAYOUT\277\0 4DE068 2 4D9C68 0000..
\CURSOR\1\0 444748 422C 440348 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\2\0 448978 25AC 444578 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\3\0 44AF28 10AC 446B28 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\4\0 44C008 422C 447C08 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\5\0 450238 25AC 44BE38 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\6\0 4527E8 10AC 44E3E8 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\7\0 4538C8 422C 44F4C8 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\8\0 457AF8 25AC 4536F8 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\9\0 45A0A8 10AC 455CA8 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\10\0 45B188 422C 456D88 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\11\0 45F3B8 25AC 45AFB8 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\12\0 461968 10AC 45D568 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\13\0 462A48 422C 45E648 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\14\0 466C78 25AC 462878 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\15\0 469228 10AC 464E28 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\16\0 46A308 422C 465F08 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\17\0 46E538 25AC 46A138 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\18\0 470AE8 10AC 46C6E8 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\19\0 471BC8 422C 46D7C8 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\20\0 475DF8 25AC 4719F8 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\21\0 4783A8 10AC 473FA8 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\22\0 479488 422C 475088 0C000C0028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\23\0 47D6B8 25AC 4792B8 0900090028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\24\0 47FC68 10AC 47B868 0600060028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\25\0 480D48 422C 47C948 0C000C0028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\26\0 484F78 25AC 480B78 0900090028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\27\0 487528 10AC 483128 0600060028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\CURSOR\28\0 488608 422C 484208 0000000028000000400000008000000001002000000000000042000000000000000000000000000000000000000000000000....(...@......... ......B........................
\CURSOR\29\0 48C838 25AC 488438 0000000028000000300000006000000001002000000000008025000000000000000000000000000000000000000000000000....(...0........ ......%........................
\CURSOR\30\0 48EDE8 10AC 48A9E8 0000000028000000200000004000000001002000000000008010000000000000000000000000000000000000000000000000....(... ...@..... ...............................
\BITMAP\110\0 48FEC8 1028 48BAC8 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\111\0 490EF0 1028 48CAF0 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\112\0 491F18 1028 48DB18 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\116\0 492F40 1028 48EB40 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\117\0 493F68 1028 48FB68 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\120\0 494F90 1028 490B90 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\130\0 498008 1028 493C08 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\131\0 496FE0 1028 492BE0 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\135\0 495FB8 1028 491BB8 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\141\0 499030 1028 494C30 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\145\0 49A058 1028 495C58 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\146\0 49B080 1028 496C80 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\154\0 49C0A8 7A8 497CA8 280000000F00000020000000010020000000000080070000C40E0000C40E0000000000000000000000000000000000000000(....... ..... ...................................
\BITMAP\155\0 49C850 7A8 498450 28000000200000000F000000010020000000000080070000C40E0000C40E0000000000000000000000000000000000000000(... ......... ...................................
\BITMAP\159\0 49CFF8 1028 498BF8 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\167\0 49E020 1028 499C20 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\168\0 49F048 1028 49AC48 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\171\0 4A0070 1028 49BC70 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000010000(... ... ..... ...................................
\BITMAP\172\0 4A1098 1028 49CC98 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\173\0 4A20C0 1028 49DCC0 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\174\0 4A30E8 1028 49ECE8 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\175\0 4A4110 1028 49FD10 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\181\0 4A5138 E028 4A0D38 28000000E000000040000000010020000000000000E00000130B0000130B000000000000000000005A5858FF5A5858FF5A58(.......@..... .........................ZXX.ZXX.ZX
\BITMAP\183\0 4B3160 1028 4AED60 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\184\0 4B4188 428 4AFD88 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\185\0 4B45B0 428 4B01B0 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\186\0 4B49D8 428 4B05D8 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\187\0 4B4E00 428 4B0A00 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\189\0 4B5228 428 4B0E28 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\190\0 4B5650 428 4B1250 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\191\0 4B5A78 428 4B1678 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\192\0 4B5EA0 428 4B1AA0 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\195\0 4B62C8 428 4B1EC8 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\196\0 4B66F0 1028 4B22F0 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\197\0 4B7718 1028 4B3318 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\199\0 4B8740 1028 4B4340 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\200\0 4B9768 1028 4B5368 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\201\0 4BA790 1028 4B6390 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\203\0 4BB7B8 1028 4B73B8 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\204\0 4BC7E0 1028 4B83E0 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\205\0 4BD808 1028 4B9408 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\206\0 4BE830 1028 4BA430 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\221\0 4BF858 1028 4BB458 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\223\0 4C0880 1028 4BC480 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\224\0 4C18A8 1028 4BD4A8 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\225\0 4C28D0 1028 4BE4D0 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\226\0 4C38F8 1028 4BF4F8 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\227\0 4C4920 1028 4C0520 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\232\0 4C5948 1028 4C1548 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\234\0 4C6970 1028 4C2570 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\235\0 4C7998 1028 4C3598 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\240\0 4C89C0 428 4C45C0 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\241\0 4C8DE8 428 4C49E8 280000001000000010000000010020000000000000040000C40E0000C40E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\242\0 4C9210 1028 4C4E10 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\250\0 4CA238 1028 4C5E38 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\255\0 4CB260 1028 4C6E60 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\256\0 4CC288 1028 4C7E88 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\260\0 4CD2B0 1028 4C8EB0 280000002000000020000000010020000000000000000000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\261\0 4CE2D8 428 4C9ED8 280000001000000010000000010020000000000000040000C30E0000C30E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\262\0 4CE700 428 4CA300 280000001000000010000000010020000000000000040000C30E0000C30E0000000000000000000000000000000000000000(............. ...................................
\BITMAP\265\0 4CEB28 1028 4CA728 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\266\0 4CFB50 1028 4CB750 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\267\0 4D0B78 1028 4CC778 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\268\0 4D1BA0 1028 4CD7A0 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\269\0 4D2BC8 1028 4CE7C8 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\270\0 4D3BF0 1028 4CF7F0 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\271\0 4D4C18 1028 4D0818 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\272\0 4D5C40 1028 4D1840 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\273\0 4D6C68 1028 4D2868 280000002000000020000000010020000000000000100000C40E0000C40E0000000000000000000000000000000000000000(... ... ..... ...................................
\BITMAP\279\0 4D7C90 1028 4D3890 280000002000000020000000010020000000000000100000130B0000130B0000000000000000000000000000000000000000(... ... ..... ...................................
\ICON\1\1033 42C118 568 427D18 2800000010000000200000000100080000000000400100000000000000000000000100000000000012461700215227002253(....... ...........@....................F..!R'."S
\ICON\2\1033 42C680 19B2 428280 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000019794944415478DAED9D5DAC56557A.PNG........IHDR.............\r.f...yIDATx...].VUz
\ICON\3\1033 42E038 4228 429C38 280000004000000080000000010020000000000000420000000000000000000000000000000000002B5A31FF2B5A31FF2B5A(...@......... ......B..................+Z1.+Z1.+Z
\ICON\4\1033 432260 25A8 42DE60 280000003000000060000000010020000000000080250000000000000000000000000000000000002B5A31FF2B5A31FF2B5A(...0........ ......%..................+Z1.+Z1.+Z
\ICON\5\1033 434808 1A68 430408 2800000028000000500000000100200000000000401A0000000000000000000000000000000000002B5A31FF2B5A31FF2A59(...(...P..... .....@...................+Z1.+Z1.*Y
\ICON\6\1033 436270 10A8 431E70 280000002000000040000000010020000000000080100000000000000000000000000000000000002A5930FF27572DFF2554(... ...@..... .........................*Y0.'W-.%T
\ICON\7\1033 437318 988 432F18 2800000018000000300000000100200000000000600900000000000000000000000000000000000026562BFF225127FF1B4C(.......0..... ........................&V+."Q'..L
\ICON\8\1033 437CA0 6B8 4338A0 28000000140000002800000001002000000000009006000000000000000000000000000000000000225227FF27572DFF2251(.......(..... ........................."R'.'W-."Q
\ICON\9\1033 438358 468 433F58 28000000100000002000000001002000000000004004000000000000000000000000000000000000225328FF3C6A44FF3563(....... ..... .....@..................."S(.<jD.5c
\ICON\10\1033 438848 568 434448 28000000100000002000000001000800000000004001000000000000000000000001000000000000513C3C00215227002253(....... ...........@...................Q<<.!R'."S
\ICON\11\1033 438DB0 1182 4349B0 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000011494944415478DAEDDD7B8C5C551D.PNG........IHDR.............\r.f...IIDATx...{.\U.
\ICON\12\1033 439F38 4228 435B38 280000004000000080000000010020000000000000420000000000000000000000000000000000002B5A31FF2B5A31FF2B5A(...@......... ......B..................+Z1.+Z1.+Z
\ICON\13\1033 43E160 25A8 439D60 280000003000000060000000010020000000000080250000000000000000000000000000000000002B5A31FF2B5A31FF2B5A(...0........ ......%..................+Z1.+Z1.+Z
\ICON\14\1033 440708 1A68 43C308 2800000028000000500000000100200000000000401A0000000000000000000000000000000000002B5A31FF2B5A31FF2A59(...(...P..... .....@...................+Z1.+Z1.*Y
\ICON\15\1033 442170 10A8 43DD70 280000002000000040000000010020000000000080100000000000000000000000000000000000002A5930FF27572DFF2554(... ...@..... .........................*Y0.'W-.%T
\ICON\16\1033 443218 988 43EE18 2800000018000000300000000100200000000000600900000000000000000000000000000000000026562BFF225127FF1B4C(.......0..... ........................&V+."Q'..L
\ICON\17\1033 443BA0 6B8 43F7A0 28000000140000002800000001002000000000009006000000000000000000000000000000000000225227FF27572DFF2251(.......(..... ........................."R'.'W-."Q
\ICON\18\1033 444258 468 43FE58 28000000100000002000000001002000000000004004000000000000000000000000000000000000225328FF3C6A44FF3563(....... ..... .....@..................."S(.<jD.5c
\DIALOG\101\0 42B7D0 2F0 4273D0 0100FFFF00000000000000004800CF020C000000000005020F0100000000530065006100720063006800200061006E006400............H.................S.e.a.r.c.h. .a.n.d.
\DIALOG\103\0 42BAC0 3A6 4276C0 0100FFFF0000000000000000C800C8821300000000007D01DB00000000005000410043005300200063006F006E0066006900......................}.......P.A.C.S. .c.o.n.f.i.
\DIALOG\105\0 42BE68 BE 427A68 0100FFFF00000000000000004800CF82020000000000CB01E900000000005000410043005300200064006F0077006E006C00............H.................P.A.C.S. .d.o.w.n.l.
\DIALOG\106\0 42BF28 1DC 427B28 0100FFFF0000000000000000C800C882080000000000DB005C00000000004100640064002000730065006100720063006800........................\.....A.d.d. .s.e.a.r.c.h.
\DIALOG\139\0 4D8CB8 D2 4D48B8 0100FFFF0000000000000000C800C8800300000000005301C80000000000410062006F007500740000000800900100014D00......................S.......A.b.o.u.t.........M.
\DIALOG\140\0 4D8D90 9A4 4D4990 0100FFFF0000000000000000C800C8802F000000000037013001000000004500780070006F0072007400200069006D006100................/.....7.0.....E.x.p.o.r.t. .i.m.a.
\DIALOG\143\0 4D9738 132 4D5338 0100FFFF0000000000000000C800C880050000000000F1005F0000000000520061006400690041006E007400200044004900........................_.....R.a.d.i.A.n.t. .D.I.
\DIALOG\149\0 4D9870 F2 4D5470 0100FFFF0000000000000000C800C8800200000000005601D100000000005500700064006100740065002000630068006500......................V.......U.p.d.a.t.e. .c.h.e.
\DIALOG\160\0 4D9968 122 4D5568 0100FFFF0000000000000000C000C88005000000000079010801000000004C006900630065006E0073006500200061006700......................y.......L.i.c.e.n.s.e. .a.g.
\DIALOG\169\0 4D9A90 500 4D5690 0100FFFF0000000000000000C800C8800B00000000004701E600000000004500720072006F00720020007200650070006F00......................G.......E.r.r.o.r. .r.e.p.o.
\DIALOG\170\0 4D9F90 D0 4D5B90 0100FFFF00000000000000004800CF0003000000000017022701000000004400690061006C006F0067000000080090010001............H...........'.....D.i.a.l.o.g.........
\DIALOG\176\0 4DA060 13C 4D5C60 0100FFFF00000000000000004800CD800500000000003D01B700000000004400690061006C006F0067000000080090010001............H.........=.......D.i.a.l.o.g.........
\DIALOG\182\0 4DA1A0 264 4D5DA0 0100FFFF0000000000000000C800C8800B000000000011015E00000000004C0065006E006700740068002000630061006C00.............................L.e.n.g.t.h. .c.a.l.
\DIALOG\193\0 4DA408 40 4D6008 0100FFFF0000000000000000C800C8800000000000003D01B6000000000000000800900100014D00530020005300680065006C006C00200044006C0067000000......................=...............M.S. .S.h.e.l.l. .D.l.g...
\DIALOG\195\0 4DA448 316 4D6048 0100FFFF0000000000030000C800C8000E00000000001301EC00000000004B006500790062006F0061007200640000000800..............................K.e.y.b.o.a.r.d.....
\DIALOG\219\0 4DA760 110 4D6360 0100FFFF0000000000000000C800CA800500000000005301E20000000000570069007A006100720064000000080090010001......................S.......W.i.z.a.r.d.........
\DIALOG\220\0 4DA870 232 4D6470 0100FFFF00000000000000004804C1400600000000004301C300000000004400690061006C006F0067000000080090010001............H..@......C.......D.i.a.l.o.g.........
\DIALOG\222\0 4DAAA8 156 4D66A8 0100FFFF00000000000000004804C1400400000000004301C30000000000690000000800900100014D005300200053006800............H..@......C.......i.........M.S. .S.h.
\DIALOG\223\0 4DAC00 3E2 4D6800 0100FFFF00000000000000004804C1400B00000000004D01BA0000000000680000000800900100014D005300200053006800............H..@......M.......h.........M.S. .S.h.
\DIALOG\224\0 4DAFE8 32A 4D6BE8 0100FFFF00000000000000004804C1400800000000004D01BA0000000000690000000800900100014D005300200053006800............H..@......M.......i.........M.S. .S.h.
\DIALOG\225\0 4DB318 1B4 4D6F18 0100FFFF00000000000000004804C1400700000000004301BA0000000000690000000800900100014D005300200053006800............H..@......C.......i.........M.S. .S.h.
\DIALOG\227\0 4DB4D0 390 4D70D0 0100FFFF00000000000000004804C1400800000000004D01BA00000000004400690061006C006F0067000000080090010001............H..@......M.......D.i.a.l.o.g.........
\DIALOG\228\0 4DB860 104 4D7460 0100FFFF00000000000000004804C1400300000000004301BA0000000000690000000800900100014D005300200053006800............H..@......C.......i.........M.S. .S.h.
\DIALOG\229\0 4DB968 154 4D7568 0100FFFF00000000000000004804C1400200000000004301BA00000000004400690061006C006F0067000000080090010001............H..@......C.......D.i.a.l.o.g.........
\DIALOG\230\0 4DBAC0 F0 4D76C0 0100FFFF00000000000000004800CF020300000000009F027801000000004C006F00630061006C0020006100720063006800............H...........x.....L.o.c.a.l. .a.r.c.h.
\DIALOG\236\0 4DBBB0 132 4D77B0 0100FFFF0000000000000000C800C880040000000000D50040000000000041006400640020006B006500790077006F007200........................@.....A.d.d. .k.e.y.w.o.r.
\DIALOG\238\0 4DBCE8 148 4D78E8 0100FFFF0000000000000000C800C8820500000000001F0162000000000049006D0070006F007200740020006D006F006400........................b.....I.m.p.o.r.t. .m.o.d.
\DIALOG\244\0 4DBE30 1EE 4D7A30 0100FFFF0000000000000000C800C880050000000000DD0056000000000045006E0074006500720020007000610073007300........................V.....E.n.t.e.r. .p.a.s.s.
\DIALOG\245\0 4DC020 128 4D7C20 0100FFFF0000000000000000C800C880050000000000DD0056000000000045006E0074006500720020007400650078007400........................V.....E.n.t.e.r. .t.e.x.t.
\DIALOG\246\0 4DC148 64 4D7D48 0100FFFF0000000000000000C800C8800000000000003501B00000000000520065006E0064006500720069006E0067002000......................5.......R.e.n.d.e.r.i.n.g. .
\DIALOG\248\0 4DC1B0 5B4 4D7DB0 0100FFFF0000000000000000C800C8801F00000000004B01E100000000003300440020005300740061007400650073000000......................K.......3.D. .S.t.a.t.e.s...
\DIALOG\251\0 4DC768 320 4D8368 0100FFFF0000000000000000C800C8800F000000000021017A000000000051007500690063006B0020006D006F0076006900......................!.z.....Q.u.i.c.k. .m.o.v.i.
\DIALOG\253\0 4DCA88 FC 4D8688 0100FFFF0000000000000000C800C880040000000000C100380000000000530054004C0020006500780070006F0072007400........................8.....S.T.L. .e.x.p.o.r.t.
\DIALOG\258\0 4DCB88 538 4D8788 0100FFFF0000000000000000C800C8801B0000000000EF0030010000000052004F0049002000700072006F00700065007200........................0.....R.O.I. .p.r.o.p.e.r.
\DIALOG\263\0 4DD0C0 3AC 4D8CC0 0100FFFF0000000000000000C800C880130000000000EF00BD000000000043007500730074006F006D002000770069006E00..............................C.u.s.t.o.m. .w.i.n.
\DIALOG\268\1033 4DE070 124 4D9C70 0100FFFF0000000000000000C800C880040000000000FB008400000000004E006F0074006900660069006300610074006900..............................N.o.t.i.f.i.c.a.t.i.
\DIALOG\270\0 4DD470 174 4D9070 0100FFFF0000000000000000C800CA820500000000001F018500000000005400610073006B002000700072006F0067007200..............................T.a.s.k. .p.r.o.g.r.
\DIALOG\273\0 4DD5E8 294 4D91E8 0100FFFF00000000000000004800CF000D0000000000170223010000000041006E006F006E0079006D0069007A0061007400............H................A.n.o.n.y.m.i.z.a.t.
\DIALOG\275\0 4DD880 110 4D9480 0100FFFF00000000000000004800CF000400000000008B01F600000000004400490043004F004D0020007400610067002000............H.................D.I.C.O.M. .t.a.g. .
\DIALOG\277\0 4DD990 5E8 4D9590 0100FFFF0000000000000000C800CA001B0000000000360133010000000041006E006F006E0079006D0069007A0065002000......................6.3.....A.n.o.n.y.m.i.z.e. .
\GROUP_CURSOR\208\0 44BFD8 30 447BD8 00000200030040008000010020002C42000001003000600001002000AC25000002002000400001002000AC1000000300......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\210\0 453898 30 44F498 00000200030040008000010020002C42000004003000600001002000AC25000005002000400001002000AC1000000600......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\212\0 45B158 30 456D58 00000200030040008000010020002C42000007003000600001002000AC25000008002000400001002000AC1000000900......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\213\0 462A18 30 45E618 00000200030040008000010020002C4200000A003000600001002000AC2500000B002000400001002000AC1000000C00......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\214\0 46A2D8 30 465ED8 00000200030040008000010020002C4200000D003000600001002000AC2500000E002000400001002000AC1000000F00......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\215\0 480D18 30 47C918 00000200030040008000010020002C42000016003000600001002000AC25000017002000400001002000AC1000001800......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\216\0 4885D8 30 4841D8 00000200030040008000010020002C42000019003000600001002000AC2500001A002000400001002000AC1000001B00......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\217\0 471B98 30 46D798 00000200030040008000010020002C42000010003000600001002000AC25000011002000400001002000AC1000001200......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\218\0 479458 30 475058 00000200030040008000010020002C42000013003000600001002000AC25000014002000400001002000AC1000001500......@..... .,B....0.... ..%.... .@... .......
\GROUP_CURSOR\222\0 48FE98 30 48BA98 00000200030040008000010020002C4200001C003000600001002000AC2500001D002000400001002000AC1000001E00......@..... .,B....0.... ..%.... .@... .......
\GROUP_ICON\138\1033 4387C0 84 4343C0 00000100090010100000010008006805000001000000000001002000B2190000020040400000010020002842000003003030..............h........... .......@@.... .(B....00
\GROUP_ICON\272\1033 4446C0 84 4402C0 0000010009001010000001000800680500000A000000000001002000821100000B004040000001002000284200000C003030..............h........... .......@@.... .(B....00
\VERSION\1\0 4DE1A0 35C 4D9DA0 5C0334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE000001000100\.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O...............
\24\1\1033 4DE500 45F 4DA100 EFBBBF3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D225554462D3822207374616E64616C6F6E65...<?xml version="1.0" encoding="UTF-8" standalone
Intelligent String
• api-ms-win-crt-time-l1-1-0.dll
• api-ms-win-crt-stdio-l1-1-0.dll
• api-ms-win-crt-utility-l1-1-0.dll
• api-ms-win-crt-runtime-l1-1-0.dll
• report.xml
• minidump.dmp
• api-ms-win-core-synch-l1-2-0.dll
• SELECT id,uid,patientrid,tstamp,patientname,patientid,patientbdate,totalimages,modalities,accessionnr,description,institution,referring,performing,reading,examid,totalsize,k, tstampadded, tstampopened FROM studies LEFT JOIN (SELECT keywordmap.sid, GROUP_CONCAT(keywords.text) AS k FROM keywordmap INNER JOIN keywords ON keywordmap.kid = keywords.id GROUP BY keywordmap.sid) AS t ON studies.id = t.sid
• .dcm
• jpeg1.dll
• jpeg2000.dll
• InitMemjpeg3.dll
• jpeg2.dll
• jpeg4.dll
• 2.12.4.57
• overlay.xml
• %s%05d.dcm
• %s.dcm
• %s%05d.jpg
• %s.jpg
• %s%05d.bmp
• %s.bmp
• zipcontainer.zip
• \sl.txt
• .xml
• .txt
• user32.dll
• wmvcore.dll
• ZipGetInterfacezip.dll
• runas
• kernel32.dll
• ntdll.dll
• mfplat.dll
• mfreadwrite.dll
• \actg.dat
• \actl.dat
• actg.dat
• www.radiantviewer.com
• radiantviewer.com
• activate.radiantviewer.com
• <a>radiantviewer.com/%s</a>
• https://radiantviewer.com/trial
• https://radiantviewer.com/activate
• <a>radiantviewer.com/deactivate</a>
• https://radiantviewer.com/deactivate
• www.radiantviewer.com/crashreport/privacy.html
• creport.zip
• https://www.radiantviewer.com/crashreport/send.php
• dump
• addon.xml
• addon.xml.sig
• addons.radiantviewer.com
• \addon.xml
• .sig
• Shell32.dll
• .jpg
• \Nvidia Corporation\nvsmi\nvml.dll
• gpuengine.dll
• OEM_102\keyboard.xml
• en.txt
• \studies.txt
• *.zip;*.dmz
• *.csv
• .csv
• \localsettings.dat
• MiniDumpWriteDump
• DBGHELP.DLL
• %s_%04d.jpg
• options.xml
• pacs.xml
• keyboard.xml
• \ffmpeg.exe
• \VideoLAN\VLC\vlc.exe
• \Common\options.xml
• \radiant-log-%04d%02d%02d%02d%02d%02d.txt
• \pacs.xml
• &pid=%dtxtsubu2.radiantviewer.com
• .wmv
• manual.php
• %s\helpbtn.bmp
• *.XML
• .stl
• *.stl
• RadiAntViewer.pdb
• .tls
• .bss
• KERNEL32.dll
• USER32.dll
• COMDLG32.dll
• ADVAPI32.dll
• MSVCP140.dll
• RPCRT4.dll
• NETAPI32.dll
• getaddrinfoWS2_32.dll
• COMCTL32.dll
• VCRUNTIME140_1.dll
• VCRUNTIME140.dll
• 4_strnicmpapi-ms-win-crt-heap-l1-1-0.dll
• api-ms-win-crt-convert-l1-1-0.dll
• api-ms-win-crt-string-l1-1-0.dll
• api-ms-win-crt-math-l1-1-0.dll
• api-ms-win-crt-locale-l1-1-0.dll
• Please use our offline activation service at <a>radiantviewer.com/activate</a>
• Please use our offline activation service at <a>radiantviewer.com/trial</a>
• Please use our offline deactivation service at <a>radiantviewer.com/deactivate</a>
• RadiAntViewer.exe
Flow Anomalies
Offset RVA Section Description
5E0 N/A .text CALL QWORD PTR [RIP+0x3450C2]
5FC N/A .text CALL QWORD PTR [RIP+0x34579E]
79B N/A .text CALL QWORD PTR [RIP+0x345BA7]
B48 N/A .text CALL QWORD PTR [RIP+0x16EC0000]
BC7 N/A .text CALL QWORD PTR [RIP+0x34577B]
2F2A N/A .text JMP QWORD PTR [RIP+0x343408]
562E N/A .text CALL QWORD PTR [RIP+0x3412F4]
827C N/A .text CALL QWORD PTR [RIP+0x33D1EE]
8476 N/A .text CALL QWORD PTR [RIP+0x33E4AC]
87C9 N/A .text CALL QWORD PTR [RIP+0x33CC81]
A2C4 N/A .text CALL QWORD PTR [RIP+0x33BDE6]
A31D N/A .text CALL QWORD PTR [RIP+0x33BD85]
A35F N/A .text JMP QWORD PTR [RIP+0x33BD43]
A3E4 N/A .text CALL QWORD PTR [RIP+0x33BCC6]
A424 N/A .text CALL QWORD PTR [RIP+0x33BC86]
A44B N/A .text CALL QWORD PTR [RIP+0x33B63F]
A4C2 N/A .text JMP QWORD PTR [RIP+0x33C460]
A776 N/A .text CALL QWORD PTR [RIP+0x33BBD4]
A7A9 N/A .text CALL QWORD PTR [RIP+0x33BB89]
AC07 N/A .text CALL QWORD PTR [RIP+0x33A85B]
B150 N/A .text CALL QWORD PTR [RIP+0x33A31A]
B4C2 N/A .text CALL QWORD PTR [RIP+0x339FA0]
BCF0 N/A .text CALL QWORD PTR [RIP+0x33977A]
BEFB N/A .text CALL QWORD PTR [RIP+0x33A54F]
C046 N/A .text CALL QWORD PTR [RIP+0x33A404]
C097 N/A .text CALL QWORD PTR [RIP+0x33A3B3]
C7AE N/A .text CALL QWORD PTR [RIP+0x339294]
C80C N/A .text CALL QWORD PTR [RIP+0x33922E]
C859 N/A .text CALL QWORD PTR [RIP+0x339AD9]
CDD8 N/A .text CALL QWORD PTR [RIP+0x339672]
CEE0 N/A .text CALL QWORD PTR [RIP+0x33956A]
CEFB N/A .text CALL QWORD PTR [RIP+0x338B97]
D0B8 N/A .text CALL QWORD PTR [RIP+0x339392]
D232 N/A .text CALL QWORD PTR [RIP+0x339218]
D3AE N/A .text CALL QWORD PTR [RIP+0x33909C]
D629 N/A .text CALL QWORD PTR [RIP+0x3381D1]
D684 N/A .text CALL QWORD PTR [RIP+0x3383AE]
D6CF N/A .text CALL QWORD PTR [RIP+0x33812B]
D72F N/A .text CALL QWORD PTR [RIP+0x338303]
DA25 N/A .text CALL QWORD PTR [RIP+0x33891D]
DB26 N/A .text CALL QWORD PTR [RIP+0x33881C]
DC5E N/A .text CALL QWORD PTR [RIP+0x3386D4]
DC6F N/A .text CALL QWORD PTR [RIP+0x3386C3]
DCC6 N/A .text CALL QWORD PTR [RIP+0x33866C]
DCD7 N/A .text CALL QWORD PTR [RIP+0x33865B]
DD27 N/A .text CALL QWORD PTR [RIP+0x33860B]
DD38 N/A .text CALL QWORD PTR [RIP+0x3385FA]
DD5A N/A .text CALL QWORD PTR [RIP+0x3385D8]
DD64 N/A .text CALL QWORD PTR [RIP+0x3385CE]
F3E2 N/A .text CALL QWORD PTR [RIP+0x337068]
F4C5 N/A .text CALL QWORD PTR [RIP+0x336F85]
F5FB N/A .text CALL QWORD PTR [RIP+0x33648F]
F691 N/A .text CALL QWORD PTR [RIP+0x336DB9]
F889 N/A .text CALL QWORD PTR [RIP+0x336AA9]
FBC1 N/A .text CALL QWORD PTR [RIP+0x336771]
FED8 N/A .text CALL QWORD PTR [RIP+0x336572]
10196 N/A .text JMP QWORD PTR [RIP+0xFF00FF]
101DA N/A .text JMP QWORD PTR [RIP+0xFF00FF]
10328 N/A .text JMP QWORD PTR [RIP+0xFF00FF]
1162B N/A .text CALL QWORD PTR [RIP+0x33445F]
1239B N/A .text CALL QWORD PTR [RIP+0x33345F]
123FB N/A .text CALL QWORD PTR [RIP+0x333637]
12425 N/A .text CALL QWORD PTR [RIP+0x333F1D]
12477 N/A .text CALL QWORD PTR [RIP+0x333EBB]
12544 N/A .text CALL QWORD PTR [RIP+0x333DEE]
125BE N/A .text CALL QWORD PTR [RIP+0x33323C]
12621 N/A .text CALL QWORD PTR [RIP+0x333411]
12649 N/A .text CALL QWORD PTR [RIP+0x333CF9]
126FC N/A .text CALL QWORD PTR [RIP+0x333C36]
1275D N/A .text CALL QWORD PTR [RIP+0x333BD5]
134B6 N/A .text CALL QWORD PTR [RIP+0x332344]
13519 N/A .text CALL QWORD PTR [RIP+0x332519]
13538 N/A .text CALL QWORD PTR [RIP+0x332E0A]
1373E N/A .text CALL QWORD PTR [RIP+0x3320BC]
137A1 N/A .text CALL QWORD PTR [RIP+0x332291]
137D5 N/A .text CALL QWORD PTR [RIP+0x332B6D]
1384E N/A .text CALL QWORD PTR [RIP+0x332AE4]
138E2 N/A .text CALL QWORD PTR [RIP+0x332A50]
13921 N/A .text CALL QWORD PTR [RIP+0x332A11]
13D09 N/A .text CALL QWORD PTR [RIP+0x332629]
1406A N/A .text CALL QWORD PTR [RIP+0x3323E0]
1467B N/A .text CALL QWORD PTR [RIP+0x331DCF]
146BB N/A .text CALL QWORD PTR [RIP+0x332267]
147EB N/A .text CALL QWORD PTR [RIP+0x332137]
1486F N/A .text CALL QWORD PTR [RIP+0x331BDB]
148A0 N/A .text CALL QWORD PTR [RIP+0x332082]
148FC N/A .text CALL QWORD PTR [RIP+0x331B4E]
1494B N/A .text CALL QWORD PTR [RIP+0x331AFF]
14AA9 N/A .text CALL QWORD PTR [RIP+0x3319A1]
14BB8 N/A .text CALL QWORD PTR [RIP+0x331892]
14C3B N/A .text CALL QWORD PTR [RIP+0x33180F]
155BE N/A .text CALL QWORD PTR [RIP+0x330D74]
1567A N/A .text CALL QWORD PTR [RIP+0x330CB8]
15731 N/A .text CALL QWORD PTR [RIP+0x330C01]
15889 N/A .text CALL QWORD PTR [RIP+0x32FDB9]
15992 N/A .text CALL QWORD PTR [RIP+0x32FCB0]
15AD0 N/A .text CALL QWORD PTR [RIP+0x330E52]
15B23 N/A .text JMP QWORD PTR [RIP+0x330477]
15B69 N/A .text CALL QWORD PTR [RIP+0x330431]
15BC0 N/A .text CALL QWORD PTR [RIP+0x3303DA]
4D4360-4D438F N/A .rsrc Potential obfuscated jump sequence detected, count: 24
4D43E0-4D440F N/A .rsrc Potential obfuscated jump sequence detected, count: 24
4D4460-4D448F N/A .rsrc Potential obfuscated jump sequence detected, count: 24
4D44E0-4D450F N/A .rsrc Potential obfuscated jump sequence detected, count: 24
4D4560-4D458F N/A .rsrc Potential obfuscated jump sequence detected, count: 24
4D45E0-4D460B N/A .rsrc Potential obfuscated jump sequence detected, count: 22
406200 1000 .pdata ExceptionHook | Pointer to 1000 - 0x400 .text + UnwindInfo: .rdata
40620C 11A0 .pdata ExceptionHook | Pointer to 11A0 - 0x5A0 .text + UnwindInfo: .rdata
406218 1210 .pdata ExceptionHook | Pointer to 1210 - 0x610 .text + UnwindInfo: .rdata
406224 1250 .pdata ExceptionHook | Pointer to 1250 - 0x650 .text + UnwindInfo: .rdata
406230 1290 .pdata ExceptionHook | Pointer to 1290 - 0x690 .text + UnwindInfo: .rdata
40623C 12F0 .pdata ExceptionHook | Pointer to 12F0 - 0x6F0 .text + UnwindInfo: .rdata
406248 1500 .pdata ExceptionHook | Pointer to 1500 - 0x900 .text + UnwindInfo: .rdata
406254 1760 .pdata ExceptionHook | Pointer to 1760 - 0xB60 .text + UnwindInfo: .rdata
406260 1890 .pdata ExceptionHook | Pointer to 1890 - 0xC90 .text + UnwindInfo: .rdata
40626C 1A10 .pdata ExceptionHook | Pointer to 1A10 - 0xE10 .text + UnwindInfo: .rdata
406278 1A2B .pdata ExceptionHook | Pointer to 1A2B - 0xE2B .text + UnwindInfo: .rdata
406284 1A81 .pdata ExceptionHook | Pointer to 1A81 - 0xE81 .text + UnwindInfo: .rdata
406290 1A90 .pdata ExceptionHook | Pointer to 1A90 - 0xE90 .text + UnwindInfo: .rdata
40629C 1AE4 .pdata ExceptionHook | Pointer to 1AE4 - 0xEE4 .text + UnwindInfo: .rdata
4062A8 1B31 .pdata ExceptionHook | Pointer to 1B31 - 0xF31 .text + UnwindInfo: .rdata
4062B4 1B50 .pdata ExceptionHook | Pointer to 1B50 - 0xF50 .text + UnwindInfo: .rdata
4062C0 1B65 .pdata ExceptionHook | Pointer to 1B65 - 0xF65 .text + UnwindInfo: .rdata
4062CC 1B6D .pdata ExceptionHook | Pointer to 1B6D - 0xF6D .text + UnwindInfo: .rdata
4062D8 1D93 .pdata ExceptionHook | Pointer to 1D93 - 0x1193 .text + UnwindInfo: .rdata
4062E4 1DB4 .pdata ExceptionHook | Pointer to 1DB4 - 0x11B4 .text + UnwindInfo: .rdata
4062F0 1E60 .pdata ExceptionHook | Pointer to 1E60 - 0x1260 .text + UnwindInfo: .rdata
4062FC 1EF0 .pdata ExceptionHook | Pointer to 1EF0 - 0x12F0 .text + UnwindInfo: .rdata
406308 1F14 .pdata ExceptionHook | Pointer to 1F14 - 0x1314 .text + UnwindInfo: .rdata
406314 1F8B .pdata ExceptionHook | Pointer to 1F8B - 0x138B .text + UnwindInfo: .rdata
406320 1FA0 .pdata ExceptionHook | Pointer to 1FA0 - 0x13A0 .text + UnwindInfo: .rdata
40632C 1FD2 .pdata ExceptionHook | Pointer to 1FD2 - 0x13D2 .text + UnwindInfo: .rdata
406338 2031 .pdata ExceptionHook | Pointer to 2031 - 0x1431 .text + UnwindInfo: .rdata
406344 2050 .pdata ExceptionHook | Pointer to 2050 - 0x1450 .text + UnwindInfo: .rdata
406350 2075 .pdata ExceptionHook | Pointer to 2075 - 0x1475 .text + UnwindInfo: .rdata
40635C 20CF .pdata ExceptionHook | Pointer to 20CF - 0x14CF .text + UnwindInfo: .rdata
406368 20F0 .pdata ExceptionHook | Pointer to 20F0 - 0x14F0 .text + UnwindInfo: .rdata
406374 2570 .pdata ExceptionHook | Pointer to 2570 - 0x1970 .text + UnwindInfo: .rdata
406380 25D0 .pdata ExceptionHook | Pointer to 25D0 - 0x19D0 .text + UnwindInfo: .rdata
40638C 25E3 .pdata ExceptionHook | Pointer to 25E3 - 0x19E3 .text + UnwindInfo: .rdata
406398 265F .pdata ExceptionHook | Pointer to 265F - 0x1A5F .text + UnwindInfo: .rdata
4063A4 2670 .pdata ExceptionHook | Pointer to 2670 - 0x1A70 .text + UnwindInfo: .rdata
4063B0 2700 .pdata ExceptionHook | Pointer to 2700 - 0x1B00 .text + UnwindInfo: .rdata
4063BC 2770 .pdata ExceptionHook | Pointer to 2770 - 0x1B70 .text + UnwindInfo: .rdata
4063C8 27AC .pdata ExceptionHook | Pointer to 27AC - 0x1BAC .text + UnwindInfo: .rdata
4063D4 27F0 .pdata ExceptionHook | Pointer to 27F0 - 0x1BF0 .text + UnwindInfo: .rdata
4063E0 2810 .pdata ExceptionHook | Pointer to 2810 - 0x1C10 .text + UnwindInfo: .rdata
4063EC 2900 .pdata ExceptionHook | Pointer to 2900 - 0x1D00 .text + UnwindInfo: .rdata
4063F8 29F0 .pdata ExceptionHook | Pointer to 29F0 - 0x1DF0 .text + UnwindInfo: .rdata
406404 2A40 .pdata ExceptionHook | Pointer to 2A40 - 0x1E40 .text + UnwindInfo: .rdata
406410 2A90 .pdata ExceptionHook | Pointer to 2A90 - 0x1E90 .text + UnwindInfo: .rdata
40641C 2B30 .pdata ExceptionHook | Pointer to 2B30 - 0x1F30 .text + UnwindInfo: .rdata
406428 2C00 .pdata ExceptionHook | Pointer to 2C00 - 0x2000 .text + UnwindInfo: .rdata
406434 2CA0 .pdata ExceptionHook | Pointer to 2CA0 - 0x20A0 .text + UnwindInfo: .rdata
406440 3700 .pdata ExceptionHook | Pointer to 3700 - 0x2B00 .text + UnwindInfo: .rdata
40644C 3790 .pdata ExceptionHook | Pointer to 3790 - 0x2B90 .text + UnwindInfo: .rdata
406458 3910 .pdata ExceptionHook | Pointer to 3910 - 0x2D10 .text + UnwindInfo: .rdata
406464 3944 .pdata ExceptionHook | Pointer to 3944 - 0x2D44 .text + UnwindInfo: .rdata
406470 39AD .pdata ExceptionHook | Pointer to 39AD - 0x2DAD .text + UnwindInfo: .rdata
40647C 3A0D .pdata ExceptionHook | Pointer to 3A0D - 0x2E0D .text + UnwindInfo: .rdata
406488 3B01 .pdata ExceptionHook | Pointer to 3B01 - 0x2F01 .text + UnwindInfo: .rdata
406494 3B40 .pdata ExceptionHook | Pointer to 3B40 - 0x2F40 .text + UnwindInfo: .rdata
4064A0 3C10 .pdata ExceptionHook | Pointer to 3C10 - 0x3010 .text + UnwindInfo: .rdata
4064AC 3CF0 .pdata ExceptionHook | Pointer to 3CF0 - 0x30F0 .text + UnwindInfo: .rdata
4064B8 3D10 .pdata ExceptionHook | Pointer to 3D10 - 0x3110 .text + UnwindInfo: .rdata
4064C4 3E30 .pdata ExceptionHook | Pointer to 3E30 - 0x3230 .text + UnwindInfo: .rdata
4064D0 3E8E .pdata ExceptionHook | Pointer to 3E8E - 0x328E .text + UnwindInfo: .rdata
4064DC 40FC .pdata ExceptionHook | Pointer to 40FC - 0x34FC .text + UnwindInfo: .rdata
4064E8 4130 .pdata ExceptionHook | Pointer to 4130 - 0x3530 .text + UnwindInfo: .rdata
4064F4 447E .pdata ExceptionHook | Pointer to 447E - 0x387E .text + UnwindInfo: .rdata
406500 48F0 .pdata ExceptionHook | Pointer to 48F0 - 0x3CF0 .text + UnwindInfo: .rdata
40650C 4930 .pdata ExceptionHook | Pointer to 4930 - 0x3D30 .text + UnwindInfo: .rdata
406518 4B90 .pdata ExceptionHook | Pointer to 4B90 - 0x3F90 .text + UnwindInfo: .rdata
406524 4BD0 .pdata ExceptionHook | Pointer to 4BD0 - 0x3FD0 .text + UnwindInfo: .rdata
406530 4C39 .pdata ExceptionHook | Pointer to 4C39 - 0x4039 .text + UnwindInfo: .rdata
40653C 4CA8 .pdata ExceptionHook | Pointer to 4CA8 - 0x40A8 .text + UnwindInfo: .rdata
406548 4CB8 .pdata ExceptionHook | Pointer to 4CB8 - 0x40B8 .text + UnwindInfo: .rdata
406554 4CE0 .pdata ExceptionHook | Pointer to 4CE0 - 0x40E0 .text + UnwindInfo: .rdata
406560 4D60 .pdata ExceptionHook | Pointer to 4D60 - 0x4160 .text + UnwindInfo: .rdata
40656C 52E0 .pdata ExceptionHook | Pointer to 52E0 - 0x46E0 .text + UnwindInfo: .rdata
406578 5480 .pdata ExceptionHook | Pointer to 5480 - 0x4880 .text + UnwindInfo: .rdata
406584 56C0 .pdata ExceptionHook | Pointer to 56C0 - 0x4AC0 .text + UnwindInfo: .rdata
406590 59C0 .pdata ExceptionHook | Pointer to 59C0 - 0x4DC0 .text + UnwindInfo: .rdata
40659C 6430 .pdata ExceptionHook | Pointer to 6430 - 0x5830 .text + UnwindInfo: .rdata
4065A8 6450 .pdata ExceptionHook | Pointer to 6450 - 0x5850 .text + UnwindInfo: .rdata
4065B4 69F0 .pdata ExceptionHook | Pointer to 69F0 - 0x5DF0 .text + UnwindInfo: .rdata
4065C0 6C40 .pdata ExceptionHook | Pointer to 6C40 - 0x6040 .text + UnwindInfo: .rdata
4065CC 7050 .pdata ExceptionHook | Pointer to 7050 - 0x6450 .text + UnwindInfo: .rdata
4065D8 7270 .pdata ExceptionHook | Pointer to 7270 - 0x6670 .text + UnwindInfo: .rdata
4065E4 72DB .pdata ExceptionHook | Pointer to 72DB - 0x66DB .text + UnwindInfo: .rdata
4065F0 7313 .pdata ExceptionHook | Pointer to 7313 - 0x6713 .text + UnwindInfo: .rdata
4065FC 8431 .pdata ExceptionHook | Pointer to 8431 - 0x7831 .text + UnwindInfo: .rdata
406608 8441 .pdata ExceptionHook | Pointer to 8441 - 0x7841 .text + UnwindInfo: .rdata
406614 8460 .pdata ExceptionHook | Pointer to 8460 - 0x7860 .text + UnwindInfo: .rdata
406620 8730 .pdata ExceptionHook | Pointer to 8730 - 0x7B30 .text + UnwindInfo: .rdata
40662C 8B00 .pdata ExceptionHook | Pointer to 8B00 - 0x7F00 .text + UnwindInfo: .rdata
406638 8E60 .pdata ExceptionHook | Pointer to 8E60 - 0x8260 .text + UnwindInfo: .rdata
406644 8EB0 .pdata ExceptionHook | Pointer to 8EB0 - 0x82B0 .text + UnwindInfo: .rdata
406650 93B0 .pdata ExceptionHook | Pointer to 93B0 - 0x87B0 .text + UnwindInfo: .rdata
40665C 93E0 .pdata ExceptionHook | Pointer to 93E0 - 0x87E0 .text + UnwindInfo: .rdata
406668 9C10 .pdata ExceptionHook | Pointer to 9C10 - 0x9010 .text + UnwindInfo: .rdata
406674 9CA0 .pdata ExceptionHook | Pointer to 9CA0 - 0x90A0 .text + UnwindInfo: .rdata
406680 9CC0 .pdata ExceptionHook | Pointer to 9CC0 - 0x90C0 .text + UnwindInfo: .rdata
40668C A2A0 .pdata ExceptionHook | Pointer to A2A0 - 0x96A0 .text + UnwindInfo: .rdata
406698 A920 .pdata ExceptionHook | Pointer to A920 - 0x9D20 .text + UnwindInfo: .rdata
4066A4 AEA0 .pdata ExceptionHook | Pointer to AEA0 - 0xA2A0 .text + UnwindInfo: .rdata
4E0000 N/A *Overlay* F82E00000002020030822EE606092A864886F70D | ........0.....*.H...
Extra Analysis
Metric Value Percentage
Ascii Code 2877258 56,1544%
Null Byte Code 1110671 21,6766%
© 2026 All rights reserved.