-
Notifications
You must be signed in to change notification settings - Fork 1
/
static_info.txt
2345 lines (2283 loc) · 72 KB
/
static_info.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
----------Parsing Warnings----------
Overlapping offsets in relocation data data at RVA: 0x1000
Overlapping offsets in relocation data data at RVA: 0x2000
Overlapping offsets in relocation data data at RVA: 0x4000
Overlapping offsets in relocation data data at RVA: 0x6000
Overlapping offsets in relocation data data at RVA: 0x9000
Overlapping offsets in relocation data data at RVA: 0xa000
Overlapping offsets in relocation data data at RVA: 0xe000
----------DOS_HEADER----------
[IMAGE_DOS_HEADER]
0x0 0x0 e_magic: 0x5A4D
0x2 0x2 e_cblp: 0x50
0x4 0x4 e_cp: 0x2
0x6 0x6 e_crlc: 0x0
0x8 0x8 e_cparhdr: 0x4
0xA 0xA e_minalloc: 0xF
0xC 0xC e_maxalloc: 0xFFFF
0xE 0xE e_ss: 0x0
0x10 0x10 e_sp: 0xB8
0x12 0x12 e_csum: 0x0
0x14 0x14 e_ip: 0x0
0x16 0x16 e_cs: 0x0
0x18 0x18 e_lfarlc: 0x40
0x1A 0x1A e_ovno: 0x1A
0x1C 0x1C e_res:
0x24 0x24 e_oemid: 0x0
0x26 0x26 e_oeminfo: 0x0
0x28 0x28 e_res2:
0x3C 0x3C e_lfanew: 0x100
----------NT_HEADERS----------
[IMAGE_NT_HEADERS]
0x100 0x0 Signature: 0x4550
----------FILE_HEADER----------
[IMAGE_FILE_HEADER]
0x104 0x0 Machine: 0x14C
0x106 0x2 NumberOfSections: 0x6
0x108 0x4 TimeDateStamp: 0x9CEF24B8 [Sat Jun 7 14:10:00 2053 UTC]
0x10C 0x8 PointerToSymbolTable: 0x0
0x110 0xC NumberOfSymbols: 0x0
0x114 0x10 SizeOfOptionalHeader: 0xE0
0x116 0x12 Characteristics: 0x818E
Flags: IMAGE_FILE_LOCAL_SYMS_STRIPPED, IMAGE_FILE_32BIT_MACHINE, IMAGE_FILE_BYTES_REVERSED_LO, IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LINE_NUMS_STRIPPED, IMAGE_FILE_BYTES_REVERSED_HI
----------OPTIONAL_HEADER----------
[IMAGE_OPTIONAL_HEADER]
0x118 0x0 Magic: 0x10B
0x11A 0x2 MajorLinkerVersion: 0x2
0x11B 0x3 MinorLinkerVersion: 0x19
0x11C 0x4 SizeOfCode: 0xC400
0x120 0x8 SizeOfInitializedData: 0x3800
0x124 0xC SizeOfUninitializedData: 0x0
0x128 0x10 AddressOfEntryPoint: 0x1000
0x12C 0x14 BaseOfCode: 0x1000
0x130 0x18 BaseOfData: 0xE000
0x134 0x1C ImageBase: 0x400000
0x138 0x20 SectionAlignment: 0x1000
0x13C 0x24 FileAlignment: 0x200
0x140 0x28 MajorOperatingSystemVersion: 0x1
0x142 0x2A MinorOperatingSystemVersion: 0x0
0x144 0x2C MajorImageVersion: 0x0
0x146 0x2E MinorImageVersion: 0x0
0x148 0x30 MajorSubsystemVersion: 0x3
0x14A 0x32 MinorSubsystemVersion: 0xA
0x14C 0x34 Reserved1: 0x0
0x150 0x38 SizeOfImage: 0x1B000
0x154 0x3C SizeOfHeaders: 0x400
0x158 0x40 CheckSum: 0x1690F7
0x15C 0x44 Subsystem: 0x2
0x15E 0x46 DllCharacteristics: 0x0
0x160 0x48 SizeOfStackReserve: 0x100000
0x164 0x4C SizeOfStackCommit: 0x2000
0x168 0x50 SizeOfHeapReserve: 0x100000
0x16C 0x54 SizeOfHeapCommit: 0x1000
0x170 0x58 LoaderFlags: 0x0
0x174 0x5C NumberOfRvaAndSizes: 0x10
DllCharacteristics:
----------PE Sections----------
[IMAGE_SECTION_HEADER]
0x1F8 0x0 Name: CODE
0x200 0x8 Misc: 0xD000
0x200 0x8 Misc_PhysicalAddress: 0xD000
0x200 0x8 Misc_VirtualSize: 0xD000
0x204 0xC VirtualAddress: 0x1000
0x208 0x10 SizeOfRawData: 0xC400
0x20C 0x14 PointerToRawData: 0x600
0x210 0x18 PointerToRelocations: 0x0
0x214 0x1C PointerToLinenumbers: 0x0
0x218 0x20 NumberOfRelocations: 0x0
0x21A 0x22 NumberOfLinenumbers: 0x0
0x21C 0x24 Characteristics: 0x60000020
Flags: IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
Entropy: 6.535540 (Min=0.0, Max=8.0)
MD5 hash: 3ca22938bef6a890787eff46c201fdb7
SHA-1 hash: 5794672cd1177824a11d2145121e8cfcf1f5471d
SHA-256 hash: 70351756bba97d6324dabc52045a5dc65be5f5f266ebabd122ff6293030ea7e4
SHA-512 hash: 702547a369fe532bb5c8c7673b8318dfcfdc854753e05a18401a5740d9c01c6be7274cd36854a45bd21669348ec83b35d05fcbaba4c642674ac6c57a4fcceda7
[IMAGE_SECTION_HEADER]
0x220 0x0 Name: DATA
0x228 0x8 Misc: 0x8000
0x228 0x8 Misc_PhysicalAddress: 0x8000
0x228 0x8 Misc_VirtualSize: 0x8000
0x22C 0xC VirtualAddress: 0xE000
0x230 0x10 SizeOfRawData: 0x1A00
0x234 0x14 PointerToRawData: 0xCA00
0x238 0x18 PointerToRelocations: 0x0
0x23C 0x1C PointerToLinenumbers: 0x0
0x240 0x20 NumberOfRelocations: 0x0
0x242 0x22 NumberOfLinenumbers: 0x0
0x244 0x24 Characteristics: 0xC0000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
Entropy: 3.953661 (Min=0.0, Max=8.0)
MD5 hash: 9cf1d2497fbdb33083d7a199d81e1d83
SHA-1 hash: 917dc5bce6aa050187a88ed78755edcfb4b20ff6
SHA-256 hash: a99338f7aaf7e9c044cf4cf82a36b45315209d898fd63168718cdb178bd32e3d
SHA-512 hash: 997df5912f98f5233b486f113e8b470d56aaf1ff0d1718b8f14acb6bb3f868cd513613ab269c1edc7a57ad1869b10f75af3cfb1ca04c85b46e11e4fc4014a909
[IMAGE_SECTION_HEADER]
0x248 0x0 Name: .idata
0x250 0x8 Misc: 0x1000
0x250 0x8 Misc_PhysicalAddress: 0x1000
0x250 0x8 Misc_VirtualSize: 0x1000
0x254 0xC VirtualAddress: 0x16000
0x258 0x10 SizeOfRawData: 0xE00
0x25C 0x14 PointerToRawData: 0xE400
0x260 0x18 PointerToRelocations: 0x0
0x264 0x1C PointerToLinenumbers: 0x0
0x268 0x20 NumberOfRelocations: 0x0
0x26A 0x22 NumberOfLinenumbers: 0x0
0x26C 0x24 Characteristics: 0xC0000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
Entropy: 4.534772 (Min=0.0, Max=8.0)
MD5 hash: ff2b503d594b6a8f1462a034798bd7b8
SHA-1 hash: 79b6f17516af4b9b0ccf55249b761f67fad41b7d
SHA-256 hash: 52bf64eb0fab17ab07650f81af63a3c4e016549b61372c72bb8df5400713b51f
SHA-512 hash: f8f97e1dc83c74fd309c827d1d8c7c8af6b6bc2ee06f7a51f15bef461302659f7736249343dd9accf825f6b0e59b92c5bb82f995ad3b28f6420f6261ea6c8ad3
[IMAGE_SECTION_HEADER]
0x270 0x0 Name: .edata
0x278 0x8 Misc: 0x1000
0x278 0x8 Misc_PhysicalAddress: 0x1000
0x278 0x8 Misc_VirtualSize: 0x1000
0x27C 0xC VirtualAddress: 0x17000
0x280 0x10 SizeOfRawData: 0x200
0x284 0x14 PointerToRawData: 0xF200
0x288 0x18 PointerToRelocations: 0x0
0x28C 0x1C PointerToLinenumbers: 0x0
0x290 0x20 NumberOfRelocations: 0x0
0x292 0x22 NumberOfLinenumbers: 0x0
0x294 0x24 Characteristics: 0x40000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
Entropy: 2.761737 (Min=0.0, Max=8.0)
MD5 hash: 691d62fe4bdc1eb7f4a3546ca4878eb9
SHA-1 hash: 8cb3b20dc061d77b2a4ce6b30c2ac8d5c83c99d8
SHA-256 hash: 820651f981f45463b16bd7b54fe02f9a19b1ed055e8778772f90aa472f4b5cdf
SHA-512 hash: 14c70c8a7f46a336d22bebac45efaf0ea7e3d387f9943a8b44aab7dcdb1a5d10cbcbda24fe2d65fc69f3e2fdd0549410bed2cfb33e7c0534fb6e994a239ef5da
[IMAGE_SECTION_HEADER]
0x298 0x0 Name: .reloc
0x2A0 0x8 Misc: 0x1000
0x2A0 0x8 Misc_PhysicalAddress: 0x1000
0x2A0 0x8 Misc_VirtualSize: 0x1000
0x2A4 0xC VirtualAddress: 0x18000
0x2A8 0x10 SizeOfRawData: 0xE00
0x2AC 0x14 PointerToRawData: 0xF400
0x2B0 0x18 PointerToRelocations: 0x0
0x2B4 0x1C PointerToLinenumbers: 0x0
0x2B8 0x20 NumberOfRelocations: 0x0
0x2BA 0x22 NumberOfLinenumbers: 0x0
0x2BC 0x24 Characteristics: 0x50000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
Entropy: 6.420339 (Min=0.0, Max=8.0)
MD5 hash: 5dfabd510a92f3c755290dfb81604139
SHA-1 hash: 5d18f0477d807421f4f1de0978c185f5ce640521
SHA-256 hash: d4affe95f0cb5f2cc06de43f31e07bf82f791815cd0993450cf321b13e541fe7
SHA-512 hash: ef2b4a546fa951bef11ea8f9a634c489c32ce4c1dd88e1302626b87808fbb8f0a8016d9e4e178812fd4820fdca77006bacdce7b5b14bb0041878bedf5f0ef34e
[IMAGE_SECTION_HEADER]
0x2C0 0x0 Name: .rsrc
0x2C8 0x8 Misc: 0x2000
0x2C8 0x8 Misc_PhysicalAddress: 0x2000
0x2C8 0x8 Misc_VirtualSize: 0x2000
0x2CC 0xC VirtualAddress: 0x19000
0x2D0 0x10 SizeOfRawData: 0x1400
0x2D4 0x14 PointerToRawData: 0x10200
0x2D8 0x18 PointerToRelocations: 0x0
0x2DC 0x1C PointerToLinenumbers: 0x0
0x2E0 0x20 NumberOfRelocations: 0x0
0x2E2 0x22 NumberOfLinenumbers: 0x0
0x2E4 0x24 Characteristics: 0xD0000040
Flags: IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
Entropy: 4.190037 (Min=0.0, Max=8.0)
MD5 hash: 23ddd2f2629da3f523ef03adaac5f4de
SHA-1 hash: 7181a49d7dbb372cafa00899fa0f57ac16f4932c
SHA-256 hash: 086ff39e3db84fade43136d818a2d5384d92b284d5f5dbdf946be88de04590d3
SHA-512 hash: 205ef0c36611b5b0e16c2407db15c89ceabd56eb10f4c53c212ac8fe33cd7d7bf485e6a3c56d365241049dabf94c19cb90a46db17d202c9c5d21bc1bdb9217ad
----------Directories----------
[IMAGE_DIRECTORY_ENTRY_EXPORT]
0x178 0x0 VirtualAddress: 0x17000
0x17C 0x4 Size: 0xEF
[IMAGE_DIRECTORY_ENTRY_IMPORT]
0x180 0x0 VirtualAddress: 0x16000
0x184 0x4 Size: 0xC6C
[IMAGE_DIRECTORY_ENTRY_RESOURCE]
0x188 0x0 VirtualAddress: 0x19000
0x18C 0x4 Size: 0x1400
[IMAGE_DIRECTORY_ENTRY_EXCEPTION]
0x190 0x0 VirtualAddress: 0x0
0x194 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_SECURITY]
0x198 0x0 VirtualAddress: 0x166AF8
0x19C 0x4 Size: 0x13C0
[IMAGE_DIRECTORY_ENTRY_BASERELOC]
0x1A0 0x0 VirtualAddress: 0x18000
0x1A4 0x4 Size: 0xCAC
[IMAGE_DIRECTORY_ENTRY_DEBUG]
0x1A8 0x0 VirtualAddress: 0x0
0x1AC 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_COPYRIGHT]
0x1B0 0x0 VirtualAddress: 0x0
0x1B4 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_GLOBALPTR]
0x1B8 0x0 VirtualAddress: 0x0
0x1BC 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_TLS]
0x1C0 0x0 VirtualAddress: 0x0
0x1C4 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG]
0x1C8 0x0 VirtualAddress: 0x0
0x1CC 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT]
0x1D0 0x0 VirtualAddress: 0x0
0x1D4 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_IAT]
0x1D8 0x0 VirtualAddress: 0x0
0x1DC 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT]
0x1E0 0x0 VirtualAddress: 0x0
0x1E4 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR]
0x1E8 0x0 VirtualAddress: 0x0
0x1EC 0x4 Size: 0x0
[IMAGE_DIRECTORY_ENTRY_RESERVED]
0x1F0 0x0 VirtualAddress: 0x0
0x1F4 0x4 Size: 0x0
----------Exported symbols----------
[IMAGE_EXPORT_DIRECTORY]
0xF200 0x0 Characteristics: 0x0
0xF204 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC]
0xF208 0x8 MajorVersion: 0x0
0xF20A 0xA MinorVersion: 0x0
0xF20C 0xC Name: 0x1706E
0xF210 0x10 Base: 0x1
0xF214 0x14 NumberOfFunctions: 0x7
0xF218 0x18 NumberOfNames: 0x7
0xF21C 0x1C AddressOfFunctions: 0x17028
0xF220 0x20 AddressOfNames: 0x17044
0xF224 0x24 AddressOfNameOrdinals: 0x17060
Ordinal RVA Name
6 0x00008CA4h @__lockDebuggerData$qv
7 0x00008CCCh @__unlockDebuggerData$qv
2 0x000031D4h DlgProc
4 0x000029C4h GetPasswordDlgProc
3 0x000061BCh WndProc
5 0x0000E8F8h __DebuggerHookData
1 0x00001074h __GetExceptDLLinfo
----------Imported symbols----------
[IMAGE_IMPORT_DESCRIPTOR]
0xE400 0x0 OriginalFirstThunk: 0x16078
0xE400 0x0 Characteristics: 0x16078
0xE404 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC]
0xE408 0x8 ForwarderChain: 0x0
0xE40C 0xC Name: 0x16428
0xE410 0x10 FirstThunk: 0x16250
KERNEL32.dll.VirtualFree Hint[0]
KERNEL32.dll.GetFileType Hint[0]
KERNEL32.dll.WaitForSingleObject Hint[0]
KERNEL32.dll.GetVolumeInformationA Hint[0]
KERNEL32.dll.GetShortPathNameA Hint[0]
KERNEL32.dll.GetProcAddress Hint[0]
KERNEL32.dll.WriteFile Hint[0]
KERNEL32.dll.GetEnvironmentVariableA Hint[0]
KERNEL32.dll.LoadResource Hint[0]
KERNEL32.dll.GetCurrentDirectoryA Hint[0]
KERNEL32.dll.FindResourceA Hint[0]
KERNEL32.dll.FindFirstFileA Hint[0]
KERNEL32.dll.SetFilePointer Hint[0]
KERNEL32.dll.FileTimeToLocalFileTime Hint[0]
KERNEL32.dll.CloseHandle Hint[0]
KERNEL32.dll.GetModuleFileNameA Hint[0]
KERNEL32.dll.SetEnvironmentVariableA Hint[0]
KERNEL32.dll.RtlUnwind Hint[0]
KERNEL32.dll.RaiseException Hint[0]
KERNEL32.dll.GetDriveTypeA Hint[0]
KERNEL32.dll.GetCurrentThreadId Hint[0]
KERNEL32.dll.GlobalMemoryStatus Hint[0]
KERNEL32.dll.GetCommandLineA Hint[0]
KERNEL32.dll.GetTickCount Hint[0]
KERNEL32.dll.GetFullPathNameA Hint[0]
KERNEL32.dll.GetStartupInfoA Hint[0]
KERNEL32.dll.CreateFileA Hint[0]
KERNEL32.dll.GetLastError Hint[0]
KERNEL32.dll.GetLocalTime Hint[0]
KERNEL32.dll.GetLogicalDrives Hint[0]
KERNEL32.dll.FindClose Hint[0]
KERNEL32.dll.ReadFile Hint[0]
KERNEL32.dll.GetModuleHandleA Hint[0]
KERNEL32.dll.CreateProcessA Hint[0]
KERNEL32.dll.DeleteFileA Hint[0]
KERNEL32.dll.SetFileAttributesA Hint[0]
KERNEL32.dll.SetCurrentDirectoryA Hint[0]
KERNEL32.dll.SetConsoleCtrlHandler Hint[0]
KERNEL32.dll.DosDateTimeToFileTime Hint[0]
KERNEL32.dll.CreateDirectoryA Hint[0]
KERNEL32.dll.GetEnvironmentStrings Hint[0]
KERNEL32.dll.LocalFileTimeToFileTime Hint[0]
KERNEL32.dll.EnterCriticalSection Hint[0]
KERNEL32.dll.LeaveCriticalSection Hint[0]
KERNEL32.dll.InitializeCriticalSection Hint[0]
KERNEL32.dll.LockResource Hint[0]
KERNEL32.dll.ExitProcess Hint[0]
KERNEL32.dll.GetVersionExA Hint[0]
KERNEL32.dll.GetVersion Hint[0]
KERNEL32.dll.GetFileAttributesA Hint[0]
KERNEL32.dll.ExpandEnvironmentStringsA Hint[0]
KERNEL32.dll.GetTempPathA Hint[0]
KERNEL32.dll.GetStdHandle Hint[0]
KERNEL32.dll.FindNextFileA Hint[0]
KERNEL32.dll.FileTimeToDosDateTime Hint[0]
KERNEL32.dll.SetFileTime Hint[0]
KERNEL32.dll.SetHandleCount Hint[0]
KERNEL32.dll.SizeofResource Hint[0]
KERNEL32.dll.UnhandledExceptionFilter Hint[0]
KERNEL32.dll.VirtualAlloc Hint[0]
[IMAGE_IMPORT_DESCRIPTOR]
0xE414 0x0 OriginalFirstThunk: 0x1616C
0xE414 0x0 Characteristics: 0x1616C
0xE418 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC]
0xE41C 0x8 ForwarderChain: 0x0
0xE420 0xC Name: 0x16435
0xE424 0x10 FirstThunk: 0x16344
GDI32.dll.SetTextColor Hint[0]
GDI32.dll.SetBkColor Hint[0]
GDI32.dll.DeleteObject Hint[0]
GDI32.dll.CreateSolidBrush Hint[0]
GDI32.dll.CreateFontA Hint[0]
[IMAGE_IMPORT_DESCRIPTOR]
0xE428 0x0 OriginalFirstThunk: 0x16184
0xE428 0x0 Characteristics: 0x16184
0xE42C 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC]
0xE430 0x8 ForwarderChain: 0x0
0xE434 0xC Name: 0x1643F
0xE438 0x10 FirstThunk: 0x1635C
USER32.dll.UpdateWindow Hint[0]
USER32.dll.TranslateMessage Hint[0]
USER32.dll.SetWindowLongA Hint[0]
USER32.dll.SetTimer Hint[0]
USER32.dll.SetDlgItemTextA Hint[0]
USER32.dll.RegisterClassA Hint[0]
USER32.dll.RedrawWindow Hint[0]
USER32.dll.PostQuitMessage Hint[0]
USER32.dll.MessageBoxA Hint[0]
USER32.dll.LoadIconA Hint[0]
USER32.dll.LoadCursorA Hint[0]
USER32.dll.KillTimer Hint[0]
USER32.dll.IsWindow Hint[0]
USER32.dll.IsDlgButtonChecked Hint[0]
USER32.dll.InvalidateRect Hint[0]
USER32.dll.SendMessageA Hint[0]
USER32.dll.GetSysColor Hint[0]
USER32.dll.GetParent Hint[0]
USER32.dll.GetMessageA Hint[0]
USER32.dll.GetDlgItem Hint[0]
USER32.dll.EnumThreadWindows Hint[0]
USER32.dll.EndDialog Hint[0]
USER32.dll.EnableWindow Hint[0]
USER32.dll.DispatchMessageA Hint[0]
USER32.dll.GetDlgItemTextA Hint[0]
USER32.dll.DialogBoxParamA Hint[0]
USER32.dll.DestroyWindow Hint[0]
USER32.dll.DefWindowProcA Hint[0]
USER32.dll.GetWindowLongA Hint[0]
USER32.dll.DdeInitializeA Hint[0]
USER32.dll.DdeFreeStringHandle Hint[0]
USER32.dll.DdeFreeDataHandle Hint[0]
USER32.dll.DdeDisconnect Hint[0]
USER32.dll.DdeCreateStringHandleA Hint[0]
USER32.dll.DdeConnect Hint[0]
USER32.dll.DdeClientTransaction Hint[0]
USER32.dll.OemToCharA Hint[0]
USER32.dll.CreateWindowExA Hint[0]
USER32.dll.CheckDlgButton Hint[0]
USER32.dll.SetWindowTextA Hint[0]
[IMAGE_IMPORT_DESCRIPTOR]
0xE43C 0x0 OriginalFirstThunk: 0x16228
0xE43C 0x0 Characteristics: 0x16228
0xE440 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC]
0xE444 0x8 ForwarderChain: 0x0
0xE448 0xC Name: 0x1644A
0xE44C 0x10 FirstThunk: 0x16400
ADVAPI32.dll.RegQueryValueExA Hint[0]
ADVAPI32.dll.RegCloseKey Hint[0]
ADVAPI32.dll.RegSetValueA Hint[0]
ADVAPI32.dll.RegOpenKeyExA Hint[0]
[IMAGE_IMPORT_DESCRIPTOR]
0xE450 0x0 OriginalFirstThunk: 0x1623C
0xE450 0x0 Characteristics: 0x1623C
0xE454 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC]
0xE458 0x8 ForwarderChain: 0x0
0xE45C 0xC Name: 0x16457
0xE460 0x10 FirstThunk: 0x16414
SHELL32.DLL.SHGetSpecialFolderLocation Hint[0]
SHELL32.DLL.SHGetPathFromIDList Hint[0]
SHELL32.DLL.SHGetMalloc Hint[0]
SHELL32.DLL.SHBrowseForFolder Hint[0]
----------Resource directory----------
[IMAGE_RESOURCE_DIRECTORY]
0x10200 0x0 Characteristics: 0x0
0x10204 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10208 0x8 MajorVersion: 0x0
0x1020A 0xA MinorVersion: 0x0
0x1020C 0xC NumberOfNamedEntries: 0x0
0x1020E 0xE NumberOfIdEntries: 0x4
Id: [0x3] (RT_ICON)
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10210 0x0 Name: 0x3
0x10214 0x4 OffsetToData: 0x80000030
[IMAGE_RESOURCE_DIRECTORY]
0x10230 0x0 Characteristics: 0x0
0x10234 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10238 0x8 MajorVersion: 0x0
0x1023A 0xA MinorVersion: 0x0
0x1023C 0xC NumberOfNamedEntries: 0x0
0x1023E 0xE NumberOfIdEntries: 0x1
Id: [0x1]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10240 0x0 Name: 0x1
0x10244 0x4 OffsetToData: 0x800000C8
[IMAGE_RESOURCE_DIRECTORY]
0x102C8 0x0 Characteristics: 0x0
0x102CC 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x102D0 0x8 MajorVersion: 0x0
0x102D2 0xA MinorVersion: 0x0
0x102D4 0xC NumberOfNamedEntries: 0x0
0x102D6 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x102D8 0x0 Name: 0x0
0x102DC 0x4 OffsetToData: 0x1D0
[IMAGE_RESOURCE_DATA_ENTRY]
0x103D0 0x0 OffsetToData: 0x1933C
0x103D4 0x4 Size: 0x2E8
0x103D8 0x8 CodePage: 0x0
0x103DC 0xC Reserved: 0x0
Id: [0x5] (RT_DIALOG)
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10218 0x0 Name: 0x5
0x1021C 0x4 OffsetToData: 0x80000048
[IMAGE_RESOURCE_DIRECTORY]
0x10248 0x0 Characteristics: 0x0
0x1024C 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10250 0x8 MajorVersion: 0x0
0x10252 0xA MinorVersion: 0x0
0x10254 0xC NumberOfNamedEntries: 0x8
0x10256 0xE NumberOfIdEntries: 0x0
Name: [ASKVOLUME]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10258 0x0 Name: 0x80000280
0x1025C 0x4 OffsetToData: 0x800000E0
[IMAGE_RESOURCE_DIRECTORY]
0x102E0 0x0 Characteristics: 0x0
0x102E4 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x102E8 0x8 MajorVersion: 0x0
0x102EA 0xA MinorVersion: 0x0
0x102EC 0xC NumberOfNamedEntries: 0x0
0x102EE 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x102F0 0x0 Name: 0x0
0x102F4 0x4 OffsetToData: 0x1E0
[IMAGE_RESOURCE_DATA_ENTRY]
0x103E0 0x0 OffsetToData: 0x19624
0x103E4 0x4 Size: 0xFE
0x103E8 0x8 CodePage: 0x0
0x103EC 0xC Reserved: 0x0
Name: [ERRARCHIVE]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10260 0x0 Name: 0x80000294
0x10264 0x4 OffsetToData: 0x800000F8
[IMAGE_RESOURCE_DIRECTORY]
0x102F8 0x0 Characteristics: 0x0
0x102FC 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10300 0x8 MajorVersion: 0x0
0x10302 0xA MinorVersion: 0x0
0x10304 0xC NumberOfNamedEntries: 0x0
0x10306 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10308 0x0 Name: 0x0
0x1030C 0x4 OffsetToData: 0x1F0
[IMAGE_RESOURCE_DATA_ENTRY]
0x103F0 0x0 OffsetToData: 0x19724
0x103F4 0x4 Size: 0x106
0x103F8 0x8 CodePage: 0x0
0x103FC 0xC Reserved: 0x0
Name: [ERRCRC]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10268 0x0 Name: 0x800002AA
0x1026C 0x4 OffsetToData: 0x80000110
[IMAGE_RESOURCE_DIRECTORY]
0x10310 0x0 Characteristics: 0x0
0x10314 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10318 0x8 MajorVersion: 0x0
0x1031A 0xA MinorVersion: 0x0
0x1031C 0xC NumberOfNamedEntries: 0x0
0x1031E 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10320 0x0 Name: 0x0
0x10324 0x4 OffsetToData: 0x200
[IMAGE_RESOURCE_DATA_ENTRY]
0x10400 0x0 OffsetToData: 0x1982C
0x10404 0x4 Size: 0xE2
0x10408 0x8 CodePage: 0x0
0x1040C 0xC Reserved: 0x0
Name: [ERRCREATE]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10270 0x0 Name: 0x800002B8
0x10274 0x4 OffsetToData: 0x80000128
[IMAGE_RESOURCE_DIRECTORY]
0x10328 0x0 Characteristics: 0x0
0x1032C 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10330 0x8 MajorVersion: 0x0
0x10332 0xA MinorVersion: 0x0
0x10334 0xC NumberOfNamedEntries: 0x0
0x10336 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10338 0x0 Name: 0x0
0x1033C 0x4 OffsetToData: 0x210
[IMAGE_RESOURCE_DATA_ENTRY]
0x10410 0x0 OffsetToData: 0x19910
0x10414 0x4 Size: 0xE2
0x10418 0x8 CodePage: 0x0
0x1041C 0xC Reserved: 0x0
Name: [ERRMEMORY]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10278 0x0 Name: 0x800002CC
0x1027C 0x4 OffsetToData: 0x80000140
[IMAGE_RESOURCE_DIRECTORY]
0x10340 0x0 Characteristics: 0x0
0x10344 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10348 0x8 MajorVersion: 0x0
0x1034A 0xA MinorVersion: 0x0
0x1034C 0xC NumberOfNamedEntries: 0x0
0x1034E 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10350 0x0 Name: 0x0
0x10354 0x4 OffsetToData: 0x220
[IMAGE_RESOURCE_DATA_ENTRY]
0x10420 0x0 OffsetToData: 0x199F4
0x10424 0x4 Size: 0xA0
0x10428 0x8 CodePage: 0x0
0x1042C 0xC Reserved: 0x0
Name: [ERRWRITE]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10280 0x0 Name: 0x800002E0
0x10284 0x4 OffsetToData: 0x80000158
[IMAGE_RESOURCE_DIRECTORY]
0x10358 0x0 Characteristics: 0x0
0x1035C 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10360 0x8 MajorVersion: 0x0
0x10362 0xA MinorVersion: 0x0
0x10364 0xC NumberOfNamedEntries: 0x0
0x10366 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10368 0x0 Name: 0x0
0x1036C 0x4 OffsetToData: 0x230
[IMAGE_RESOURCE_DATA_ENTRY]
0x10430 0x0 OffsetToData: 0x19A94
0x10434 0x4 Size: 0x1BA
0x10438 0x8 CodePage: 0x0
0x1043C 0xC Reserved: 0x0
Name: [GETPASSWORD]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10288 0x0 Name: 0x800002F2
0x1028C 0x4 OffsetToData: 0x80000170
[IMAGE_RESOURCE_DIRECTORY]
0x10370 0x0 Characteristics: 0x0
0x10374 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10378 0x8 MajorVersion: 0x0
0x1037A 0xA MinorVersion: 0x0
0x1037C 0xC NumberOfNamedEntries: 0x0
0x1037E 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10380 0x0 Name: 0x0
0x10384 0x4 OffsetToData: 0x240
[IMAGE_RESOURCE_DATA_ENTRY]
0x10440 0x0 OffsetToData: 0x19C50
0x10444 0x4 Size: 0x12E
0x10448 0x8 CodePage: 0x0
0x1044C 0xC Reserved: 0x0
Name: [MAINDLG]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10290 0x0 Name: 0x8000030A
0x10294 0x4 OffsetToData: 0x80000188
[IMAGE_RESOURCE_DIRECTORY]
0x10388 0x0 Characteristics: 0x0
0x1038C 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x10390 0x8 MajorVersion: 0x0
0x10392 0xA MinorVersion: 0x0
0x10394 0xC NumberOfNamedEntries: 0x0
0x10396 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10398 0x0 Name: 0x0
0x1039C 0x4 OffsetToData: 0x250
[IMAGE_RESOURCE_DATA_ENTRY]
0x10450 0x0 OffsetToData: 0x19D80
0x10454 0x4 Size: 0x19E
0x10458 0x8 CodePage: 0x0
0x1045C 0xC Reserved: 0x0
Id: [0xA] (RT_RCDATA)
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10220 0x0 Name: 0xA
0x10224 0x4 OffsetToData: 0x80000098
[IMAGE_RESOURCE_DIRECTORY]
0x10298 0x0 Characteristics: 0x0
0x1029C 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x102A0 0x8 MajorVersion: 0x0
0x102A2 0xA MinorVersion: 0x0
0x102A4 0xC NumberOfNamedEntries: 0x1
0x102A6 0xE NumberOfIdEntries: 0x0
Name: [SCRIPT]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x102A8 0x0 Name: 0x8000031A
0x102AC 0x4 OffsetToData: 0x800001A0
[IMAGE_RESOURCE_DIRECTORY]
0x103A0 0x0 Characteristics: 0x0
0x103A4 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x103A8 0x8 MajorVersion: 0x0
0x103AA 0xA MinorVersion: 0x0
0x103AC 0xC NumberOfNamedEntries: 0x0
0x103AE 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x103B0 0x0 Name: 0x0
0x103B4 0x4 OffsetToData: 0x260
[IMAGE_RESOURCE_DATA_ENTRY]
0x10460 0x0 OffsetToData: 0x19F20
0x10464 0x4 Size: 0x39B
0x10468 0x8 CodePage: 0x0
0x1046C 0xC Reserved: 0x0
Id: [0xE] (RT_GROUP_ICON)
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x10228 0x0 Name: 0xE
0x1022C 0x4 OffsetToData: 0x800000B0
[IMAGE_RESOURCE_DIRECTORY]
0x102B0 0x0 Characteristics: 0x0
0x102B4 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x102B8 0x8 MajorVersion: 0x0
0x102BA 0xA MinorVersion: 0x0
0x102BC 0xC NumberOfNamedEntries: 0x1
0x102BE 0xE NumberOfIdEntries: 0x0
Name: [SFX_ICON]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x102C0 0x0 Name: 0x80000328
0x102C4 0x4 OffsetToData: 0x800001B8
[IMAGE_RESOURCE_DIRECTORY]
0x103B8 0x0 Characteristics: 0x0
0x103BC 0x4 TimeDateStamp: 0x35683124 [Sun May 24 14:39:32 1998 UTC]
0x103C0 0x8 MajorVersion: 0x0
0x103C2 0xA MinorVersion: 0x0
0x103C4 0xC NumberOfNamedEntries: 0x0
0x103C6 0xE NumberOfIdEntries: 0x1
\--- LANG [0,0][LANG_NEUTRAL,SUBLANG_NEUTRAL]
[IMAGE_RESOURCE_DIRECTORY_ENTRY]
0x103C8 0x0 Name: 0x0
0x103CC 0x4 OffsetToData: 0x270
[IMAGE_RESOURCE_DATA_ENTRY]
0x10470 0x0 OffsetToData: 0x1A2BC
0x10474 0x4 Size: 0x14
0x10478 0x8 CodePage: 0x0
0x1047C 0xC Reserved: 0x0
----------Base relocations----------
[IMAGE_BASE_RELOCATION]
0xF400 0x0 VirtualAddress: 0x1000
0xF404 0x4 SizeOfBlock: 0x138
00001001h HIGHLOW
00001009h HIGHLOW
00001012h HIGHLOW
00001017h HIGHLOW
0000102Eh HIGHLOW
00001036h HIGHLOW
0000103Eh HIGHLOW
00001047h HIGHLOW
0000105Dh HIGHLOW
00001069h HIGHLOW
0000112Ch HIGHLOW
00001144h HIGHLOW
00001271h HIGHLOW
000012ADh HIGHLOW
000012BCh HIGHLOW
000012D0h HIGHLOW
000012DBh HIGHLOW
000012E7h HIGHLOW
000012FBh HIGHLOW
00001306h HIGHLOW
0000132Fh HIGHLOW
00001338h HIGHLOW
00001340h HIGHLOW
00001352h HIGHLOW
0000135Eh HIGHLOW
00001367h HIGHLOW
000013A2h HIGHLOW
000013AAh HIGHLOW
000013B4h HIGHLOW
000013C3h HIGHLOW
000013D4h HIGHLOW
000013DCh HIGHLOW
000013E9h HIGHLOW
000013EFh HIGHLOW
000013F8h HIGHLOW
00001412h HIGHLOW
00001449h HIGHLOW
0000144Fh HIGHLOW
00001455h HIGHLOW
0000145Fh HIGHLOW
00001470h HIGHLOW
00001476h HIGHLOW
00001481h HIGHLOW
0000148Fh HIGHLOW
000014A5h HIGHLOW
000014B2h HIGHLOW
000014BFh HIGHLOW
000014CBh HIGHLOW
000014D8h HIGHLOW
000014EBh HIGHLOW
000014F0h HIGHLOW
000014F8h HIGHLOW
000014FEh HIGHLOW
00001504h HIGHLOW
0000151Bh HIGHLOW
0000152Dh HIGHLOW
0000153Dh HIGHLOW
00001556h HIGHLOW
0000155Eh HIGHLOW
0000156Bh HIGHLOW
0000159Dh HIGHLOW
000015BAh HIGHLOW
000015C2h HIGHLOW
00001828h HIGHLOW
0000187Ch HIGHLOW
0000189Eh HIGHLOW
00001971h HIGHLOW
00001981h HIGHLOW
000019A0h HIGHLOW
000019ACh HIGHLOW
000019D4h HIGHLOW
000019DCh HIGHLOW
000019E7h HIGHLOW
000019EFh HIGHLOW
000019F5h HIGHLOW
00001A04h HIGHLOW
00001A11h HIGHLOW
00001A1Fh HIGHLOW
00001A34h HIGHLOW
00001A57h HIGHLOW
00001A61h HIGHLOW
00001A67h HIGHLOW
00001A7Fh HIGHLOW
00001A87h HIGHLOW
00001A99h HIGHLOW
00001AA4h HIGHLOW
00001AADh HIGHLOW
00001AE2h HIGHLOW
00001AE7h HIGHLOW
00001AFAh HIGHLOW
00001B01h HIGHLOW
00001B06h HIGHLOW
00001B21h HIGHLOW
00001B2Ah HIGHLOW
00001B36h HIGHLOW
00001B3Eh HIGHLOW
00001B4Ah HIGHLOW
00001B52h HIGHLOW
00001B7Bh HIGHLOW
00001B82h HIGHLOW
00001BDEh HIGHLOW
00001BFDh HIGHLOW
00001C0Bh HIGHLOW
00001C21h HIGHLOW
00001C38h HIGHLOW
00001C4Dh HIGHLOW
00001C78h HIGHLOW
00001C8Bh HIGHLOW
00001C98h HIGHLOW
00001CB7h HIGHLOW
00001CC5h HIGHLOW
00001CDBh HIGHLOW
00001CF0h HIGHLOW
00001D1Ch HIGHLOW
00001D48h HIGHLOW
00001D53h HIGHLOW
00001D7Dh HIGHLOW
00001DA9h HIGHLOW
00001DB2h HIGHLOW
00001DBCh HIGHLOW
00001DD1h HIGHLOW
00001DFCh HIGHLOW
00001E0Fh HIGHLOW
00001E1Ch HIGHLOW
00001E3Bh HIGHLOW
00001E49h HIGHLOW
00001E5Fh HIGHLOW
00001E74h HIGHLOW
00001E8Bh HIGHLOW
00001E93h HIGHLOW
00001E9Eh HIGHLOW
00001EB7h HIGHLOW
00001EC6h HIGHLOW
00001ED4h HIGHLOW
00001EF3h HIGHLOW
00001F01h HIGHLOW
00001F15h HIGHLOW
00001F2Ah HIGHLOW
00001F33h HIGHLOW
00001F3Eh HIGHLOW
00001F48h HIGHLOW
00001F72h HIGHLOW
00001F85h HIGHLOW
00001F93h HIGHLOW
00001FB2h HIGHLOW
00001FC0h HIGHLOW
00001FD4h HIGHLOW
00001FE9h HIGHLOW
00001FEFh HIGHLOW
00001FFEh HIGHLOW
00001000h ABSOLUTE
[IMAGE_BASE_RELOCATION]
0xF538 0x0 VirtualAddress: 0x2000
0xF53C 0x4 SizeOfBlock: 0x1BC
00002034h HIGHLOW
00002069h HIGHLOW
0000207Ch HIGHLOW
00002085h HIGHLOW
000020A6h HIGHLOW
000020AEh HIGHLOW
000020B5h HIGHLOW
000020DBh HIGHLOW
000020E1h HIGHLOW
000020F8h HIGHLOW
000020FEh HIGHLOW
0000210Fh HIGHLOW
00002115h HIGHLOW
0000211Bh HIGHLOW
00002129h HIGHLOW
0000212Fh HIGHLOW
0000213Bh HIGHLOW
00002142h HIGHLOW
0000214Dh HIGHLOW
0000215Dh HIGHLOW
00002163h HIGHLOW
00002172h HIGHLOW
00002178h HIGHLOW
0000217Eh HIGHLOW
00002184h HIGHLOW
00002189h HIGHLOW
00002198h HIGHLOW
000021A9h HIGHLOW
000021B0h HIGHLOW
000021B8h HIGHLOW
000021CBh HIGHLOW
000021D8h HIGHLOW
0000220Dh HIGHLOW
0000221Fh HIGHLOW
00002254h HIGHLOW
0000226Ah HIGHLOW
00002274h HIGHLOW
0000227Ch HIGHLOW
00002288h HIGHLOW
0000228Eh HIGHLOW
00002294h HIGHLOW
000022A0h HIGHLOW
000022A8h HIGHLOW
000022ADh HIGHLOW
000022B5h HIGHLOW
000022BBh HIGHLOW
000022C2h HIGHLOW
000022CAh HIGHLOW
000022D7h HIGHLOW
000022ECh HIGHLOW
000022F3h HIGHLOW
0000230Dh HIGHLOW
00002324h HIGHLOW
0000232Bh HIGHLOW
00002339h HIGHLOW
00002355h HIGHLOW
00002364h HIGHLOW
00002372h HIGHLOW
0000237Bh HIGHLOW
00002396h HIGHLOW
0000239Bh HIGHLOW
000023AEh HIGHLOW
000023CDh HIGHLOW
00002402h HIGHLOW
0000241Dh HIGHLOW
0000242Ch HIGHLOW
00002431h HIGHLOW
00002437h HIGHLOW
00002452h HIGHLOW
00002461h HIGHLOW
00002469h HIGHLOW
0000246Fh HIGHLOW
00002480h HIGHLOW
00002489h HIGHLOW
00002497h HIGHLOW
000024ADh HIGHLOW
000024B5h HIGHLOW
000024DCh HIGHLOW
000024E2h HIGHLOW
000024F7h HIGHLOW
00002523h HIGHLOW
00002532h HIGHLOW
0000253Ah HIGHLOW
0000253Fh HIGHLOW
00002545h HIGHLOW
0000254Eh HIGHLOW
00002554h HIGHLOW
0000255Bh HIGHLOW
00002563h HIGHLOW
00002572h HIGHLOW
00002578h HIGHLOW
0000257Dh HIGHLOW
00002597h HIGHLOW
000025ABh HIGHLOW
000025BCh HIGHLOW
000025C1h HIGHLOW
000025D2h HIGHLOW
000025DFh HIGHLOW
000025FFh HIGHLOW
00002607h HIGHLOW
0000261Eh HIGHLOW
0000263Ah HIGHLOW
0000264Eh HIGHLOW
00002658h HIGHLOW
0000265Dh HIGHLOW
00002664h HIGHLOW
00002669h HIGHLOW
0000267Ah HIGHLOW
0000269Ch HIGHLOW
000026C5h HIGHLOW
0000270Fh HIGHLOW
0000273Fh HIGHLOW
0000274Ch HIGHLOW
00002762h HIGHLOW