Architecture Specific Data rva: 00000000h size: 00000000h

Global Pointer rva: 00000000h size: 00000000h

TLS Directory rva: 0011A000h size: 00000018h

Load config table rva: 00000000h size: 00000000h

Bound Import table rva: 00000000h size: 00000000h

Import Address Table rva: 00000000h size: 00000000h

Delay import descriptor rva: 00000000h size: 00000000h

COM descriptor rva: 00000000h size: 00000000h

unused rva: 00000000h size: 00000000h

SECTION TABLE

01 CODE

VirtSize: 0010E820h VirtAddr: 00001000h

raw data offs: 00000400h raw data size: 0010EA00h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: 60000020h

CODE EXECUTE READ ALIGN_DEFAULT(16)

02 DATA

VirtSize: 00003454h VirtAddr: 00110000h

raw data offs: 0010EE00h raw data size: 00003600h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: C0000040h

INITIALIZED_DATA READ WRITE ALIGN_DEFAULT(16)

03 BSS

VirtSize: 00001279h VirtAddr: 00114000h

raw data offs: 00112400h raw data size: 00000000h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: C0000000h

READ WRITE ALIGN_DEFAULT(16)

04 .idata

VirtSize: 00002AD8h VirtAddr: 00116000h

raw data offs: 00112400h raw data size: 00002C00h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: C0000040h

INITIALIZED_DATA READ WRITE ALIGN_DEFAULT(16)

05 .tls

VirtSize: 00000060h VirtAddr: 00119000h

raw data offs: 00115000h raw data size: 00000000h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: C0000000h

READ WRITE ALIGN_DEFAULT(16)

06 .rdata

VirtSize: 00000018h VirtAddr: 0011A000h

raw data offs: 00115000h raw data size: 00000200h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: 50000040h

INITIALIZED_DATA SHARED READ ALIGN_DEFAULT(16)

07 .reloc

VirtSize: 00015F10h VirtAddr: 0011B000h

raw data offs: 00115200h raw data size: 00016000h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: 50000040h

INITIALIZED_DATA SHARED READ ALIGN_DEFAULT(16)

08 .rsrc

VirtSize: 00040A00h VirtAddr: 00131000h

raw data offs: 0012B200h raw data size: 00040A00h

relocation offs: 00000000h relocations: 00000000h

line # offs: 00000000h line #'s: 00000000h

characteristics: 50000040h

INITIALIZED_DATA SHARED READ ALIGN_DEFAULT(16)

IMPORTS TABLE:

kernel32.dll

Import Lookup Table RVA: 00000000h (Unbound IAT)

TimeDateStamp: 00000000h

ForwarderChain: 00000000h

DLL Name RVA: 00116950h

Import Address Table RVA: 0011617Ch

First thunk RVA: 0011617Ch

Ordn Name

----------

0 DeleteCriticalSection

0 LeaveCriticalSection

0 EnterCriticalSection

0 InitializeCriticalSection

0 VirtualFree

0 VirtualAlloc

0 LocalFree

0 LocalAlloc

0 GetCurrentThreadId

0 InterlockedDecrement

0 InterlockedIncrement

0 VirtualQuery

0 WideCharToMultiByte

0 MultiByteToWideChar

0 lstrlenA

0 lstrcpynA

0 LoadLibraryExA

0 GetThreadLocale

0 GetStartupInfoA

0 GetProcAddress

0 GetModuleHandleA

0 GetModuleFileNameA

0 GetLocaleInfoA

0 GetLastError

0 GetCommandLineA

0 FreeLibrary

0 FindFirstFileA

0 FindClose

0 ExitProcess

0 ExitThread

0 CreateThread

0 WriteFile

0 UnhandledExceptionFilter

0 SetFilePointer

0 SetEndOfFile

0 RtlUnwind

0 ReadFile

0 RaiseException

0 GetStdHandle

0 GetFileSize

0 GetFileType

0 CreateFileA

0 CloseHandle

user32.dll

Import Lookup Table RVA: 00000000h (Unbound IAT)

TimeDateStamp: 00000000h

ForwarderChain: 00000000h

DLL Name RVA: 00116C4Eh

Import Address Table RVA: 0011622Ch

First thunk RVA: 0011622Ch

Ordn Name

----------

0 GetKeyboardType

0 LoadStringA

0 MessageBoxA

0 CharNextA

advapi32.dll

Import Lookup Table RVA: 00000000h (Unbound IAT)

TimeDateStamp: 00000000h

ForwarderChain: 00000000h

DLL Name RVA: 00116C94h

Import Address Table RVA: 00116240h

First thunk RVA: 00116240h

Ordn Name

----------

0 RegQueryValueExA

0 RegOpenKeyExA

0 RegCloseKey

oleaut32.dll

Import Lookup Table RVA: 00000000h (Unbound IAT)

TimeDateStamp: 00000000h

ForwarderChain: 00000000h

DLL Name RVA: 00116CD4h

Import Address Table RVA: 00116250h

First thunk RVA: 00116250h

Ordn Name

----------

0 SysFreeString

0 SysReAllocStringLen

0 SysAllocStringLen

kernel32.dll

Import Lookup Table RVA: 00000000h (Unbound IAT)

TimeDateStamp: 00000000h

ForwarderChain: 00000000h

DLL Name RVA: 00116D1Ch

Import Address Table RVA: 00116260h

First thunk RVA: 00116260h

Ordn Name

----------

0 TlsSetValue

0 TlsGetValue

0 LocalAlloc

0 GetModuleHandleA

advapi32.dll

Import Lookup Table RVA: 00000000h (Unbound IAT)

TimeDateStamp: 00000000h

ForwarderChain: 00000000h

DLL Name RVA: 00116D68h

Import Address Table RVA: 00116274h

First thunk RVA: 00116274h

Ordn Name

----------

0 SetSecurityDescriptorDacl

0 RegQueryValueExA

0 RegOpenKeyExA

0 RegCloseKey

0 InitializeSecurityDescriptor

kernel32.dll

Import Lookup Table RVA: 00000000h (Unbound IAT)

TimeDateStamp: 00000000h

ForwarderChain: 00000000h

DLL Name RVA: 00116DE4h

Import Address Table RVA: 0011628Ch

First thunk RVA: 0011628Ch

Ordn Name

----------

0 lstrcpyA

0 WriteFile

0 WaitForSingleObject

0 VirtualQuery

0 VirtualAlloc

0 UnmapViewOfFile

0 Sleep

0 SizeofResource

0 SetThreadLocale

0 SetFilePointer

0 SetEvent

0 SetErrorMode

0 SetEndOfFile

0 SearchPathA

0 ResumeThread

0 ResetEvent

0 ReleaseMutex

0 ReadFile

0 OpenMutexA

0 OpenFileMappingA

0 OpenEventA

0 MultiByteToWideChar

0 MulDiv

0 MapViewOfFile

0 LockResource

0 LoadResource

0 LoadLibraryA

0 LeaveCriticalSection

0 IsDBCSLeadByte

0 InitializeCriticalSection

0 GlobalUnlock

0 GlobalSize

0 GlobalReAlloc

0 GlobalHandle

0 GlobalLock

0 GlobalFree

0 GlobalFindAtomA

0 GlobalDeleteAtom

0 GlobalAlloc

0 GlobalAddAtomA

0 GetVersionExA

0 GetVersion

0 GetUserDefaultLCID

0 GetTickCount

0 GetThreadLocale

0 GetTempPathA

0 GetTempFileNameA

0 GetSystemInfo

0 GetSystemDefaultLCID

0 GetStringTypeExA

0 GetStdHandle

0 GetProfileStringA

Страницы: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18