ppc64.exe

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	ppc64.exe
size	6799872 (0x67c200)
md5	198b0189082899629ffca945b1ee1792

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x5eb556ca
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x23
Magic	0x20b
LinkerVersion	14.25
SizeOfCode	0xc3600
SizeOfInitializedData	0x46600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x5cba5e
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0xc02000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8120
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xc3574	0	R-X CODE
.rdata	0xc5000	0x33180	0	R-- IDATA
.data	0xf9000	0x9c98	0	RW- IDATA
.pdata	0x103000	0x7f50	0	R-- IDATA
.text0	0x10b000	0x4793de	0	R-X CODE IDATA
.text1	0x585000	0x67ba60	0x67bc00	R-X CODE IDATA
.rsrc	0xc01000	0x1d5	0x200	R-- IDATA

Data Directory

type	va	size
EXPORT	0xa53088	0x11c9
IMPORT	0x5d9880	0x208
RESOURCE	0xc01000	0x1d5
EXCEPTION	0xbf5d50	0xad10
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x587468	0x13dc
LOAD_CONFIG	0xbf5c20	0x130
Bound_IAT	0	0
IAT	0x598000	0x1f0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	flags
0x140587490	0x140588844	0x140102490	0x500000
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0
0	0	0	0

show previews

type	name	size	cp
MANIFEST	#1	381	0

module_name	hint	ord	function_name
WS2_32.dll			freeaddrinfo
ole32.dll			CoInitialize
IPHLPAPI.DLL			GetAdaptersInfo
KERNEL32.dll			RtlCaptureContext
USER32.dll			wsprintfW
ADVAPI32.dll			RegQueryValueExW
MSVCP140.dll			void (__cdecl__cdecl std::set_new_handler(void (__cdecl)(void)))(void) ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
SHLWAPI.dll			SHDeleteKeyW
VCRUNTIME140.dll			__current_exception
VCRUNTIME140_1.dll			__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0.dll			_beginthreadex
api-ms-win-crt-math-l1-1-0.dll			__setusermatherr
api-ms-win-crt-heap-l1-1-0.dll			_aligned_free
api-ms-win-crt-utility-l1-1-0.dll			srand
api-ms-win-crt-convert-l1-1-0.dll			atoi
api-ms-win-crt-stdio-l1-1-0.dll			__p__commode
api-ms-win-crt-filesystem-l1-1-0.dll			_unlock_file
api-ms-win-crt-string-l1-1-0.dll			_wcsicmp
api-ms-win-crt-locale-l1-1-0.dll			___lc_codepage_func
api-ms-win-crt-time-l1-1-0.dll			_time64
WTSAPI32.dll			WTSSendMessageW
KERNEL32.dll			GetSystemTimeAsFileTime
USER32.dll			GetUserObjectInformationW
KERNEL32.dll			LocalAlloc
KERNEL32.dll			LocalFree
KERNEL32.dll			GetModuleFileNameW
KERNEL32.dll			GetProcessAffinityMask
KERNEL32.dll			SetProcessAffinityMask
KERNEL32.dll			SetThreadAffinityMask
KERNEL32.dll			Sleep
KERNEL32.dll			ExitProcess
KERNEL32.dll			FreeLibrary
KERNEL32.dll			LoadLibraryA
KERNEL32.dll			GetModuleHandleA
KERNEL32.dll			GetProcAddress
USER32.dll			GetProcessWindowStation
USER32.dll			GetUserObjectInformationW

ord	entry_va	function_name
1	0x26d40	??0Assembler@asmjit@@QEAA@PEAURuntime@1@@Z
2	0x36f80	??0CodeGen@asmjit@@QEAA@PEAURuntime@1@@Z
3	0x2f1d0	??0HostRuntime@asmjit@@QEAA@XZ
4	0x2f340	??0JitRuntime@asmjit@@QEAA@XZ
5	0x2f190	??0Runtime@asmjit@@QEAA@XZ
6	0x2f220	??0StaticRuntime@asmjit@@QEAA@PEAX_K@Z
7	0xd7f0	??0VMemMgr@asmjit@@QEAA@PEAX@Z
8	0x2f670	??0X86Assembler@asmjit@@QEAA@PEAURuntime@1@I@Z
9	0x372c0	??0Zone@asmjit@@QEAA@_K@Z
10	0x26dc0	??1Assembler@asmjit@@UEAA@XZ
11	0x36fd0	??1CodeGen@asmjit@@UEAA@XZ
12	0x2f1c0	??1HostRuntime@asmjit@@UEAA@XZ
13	0x2f3e0	??1JitRuntime@asmjit@@UEAA@XZ
14	0x2f1c0	??1Runtime@asmjit@@UEAA@XZ
15	0x2f1c0	??1StaticRuntime@asmjit@@UEAA@XZ
16	0xd860	??1VMemMgr@asmjit@@QEAA@XZ
17	0x2f710	??1X86Assembler@asmjit@@UEAA@XZ
18	0x372e0	??1Zone@asmjit@@QEAA@XZ
19	0x16b0	??_FVMemMgr@asmjit@@QEAAXXZ
20	0x37410	?_alloc@Zone@asmjit@@QEAAPEAX_K@Z
21	0x2fe50	?_emit@X86Assembler@asmjit@@UEAAIIAEBUOperand@2@000@Z
22	0x26f70	?_grow@Assembler@asmjit@@QEAAI_K@Z
23	0x37100	?_grow@PodVectorBase@asmjit@@IEAAI_K0@Z
24	0x271d0	?_newLabel@Assembler@asmjit@@QEAAIPEAULabel@2@@Z
25	0x272a0	?_newLabelLink@Assembler@asmjit@@QEAAPEAULabelLink@2@XZ
26	0xd1060	?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
27	0x270f0	?_registerIndexedLabels@Assembler@asmjit@@QEAAI_K@Z
28	0x2fcf0	?_relocCode@X86Assembler@asmjit@@UEBA_KPEAX_K@Z
29	0x27050	?_reserve@Assembler@asmjit@@QEAAI_K@Z
30	0x37230	?_reserve@PodVectorBase@asmjit@@IEAAI_K0@Z
31	0xd10c0	?_x86CondToCmovcc@asmjit@@3QBIB
32	0xd1160	?_x86CondToJcc@asmjit@@3QBIB
33	0xd1110	?_x86CondToSetcc@asmjit@@3QBIB
34	0xd11b0	?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
35	0xd2c20	?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
36	0xd1070	?_x86ReverseCond@asmjit@@3QBIB
37	0x2f450	?add@JitRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z
38	0x2f250	?add@StaticRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z
39	0x2f9a0	?align@X86Assembler@asmjit@@UEAAIII@Z
40	0xd960	?alloc@VMemMgr@asmjit@@QEAAPEAX_KI@Z
41	0xcb90	?alloc@VMemUtil@asmjit@@SAPEAX_KPEA_KI@Z
42	0xcc30	?allocProcessMemory@VMemUtil@asmjit@@SAPEAXPEAX_KPEA_KI@Z
43	0x374f0	?allocZeroed@Zone@asmjit@@QEAAPEAX_K@Z
44	0x27310	?bind@Assembler@asmjit@@UEAAIAEBULabel@2@@Z
45	0x3dcc0	?callCpuId@X86CpuUtil@asmjit@@SAXIIPEATX86CpuId@2@@Z
46	0x3dce0	?detect@X86CpuUtil@asmjit@@SAXPEAUX86CpuInfo@2@@Z
47	0x39d70	?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
48	0x37550	?dup@Zone@asmjit@@QEAAPEAXPEBX_K@Z
49	0x27440	?embed@Assembler@asmjit@@UEAAIPEBXI@Z
50	0x2f840	?embedLabel@X86Assembler@asmjit@@QEAAIAEBULabel@2@@Z
51	0x275a0	?emit@Assembler@asmjit@@QEAAII@Z
52	0x27610	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00@Z
53	0x27880	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00H@Z
54	0x278e0	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00_K@Z
55	0x275f0	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0@Z
56	0x277c0	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0H@Z
57	0x27820	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0_K@Z
58	0x275d0	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@@Z
59	0x27700	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@H@Z
60	0x27760	?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@_K@Z
61	0x27640	?emit@Assembler@asmjit@@QEAAIIH@Z
62	0x276a0	?emit@Assembler@asmjit@@QEAAII_K@Z
63	0x24520	?flush@HostRuntime@asmjit@@UEAAXPEAX_K@Z
64	0x2f200	?getCpuInfo@HostRuntime@asmjit@@UEAAPEBUCpuInfo@2@XZ
65	0x39db0	?getHost@CpuInfo@asmjit@@SAPEBU12@XZ
66	0xcb70	?getPageGranularity@VMemUtil@asmjit@@SA_KXZ
67	0xcb50	?getPageSize@VMemUtil@asmjit@@SA_KXZ
68	0x2f210	?getStackAlignment@HostRuntime@asmjit@@UEAAIXZ
69	0x27500	?make@Assembler@asmjit@@UEAAPEAXXZ
70	0xd1050	?noOperand@asmjit@@3UOperand@1@B
71	0x2f560	?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KAEBUX86Reg@2@IHI@Z
72	0x2f530	?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
73	0x2f520	?release@JitRuntime@asmjit@@UEAAIPEAX@Z
74	0x1830	?release@StaticRuntime@asmjit@@UEAAIPEAX@Z
75	0xda70	?release@VMemMgr@asmjit@@QEAAIPEAX@Z
76	0xccd0	?release@VMemUtil@asmjit@@SAIPEAX_K@Z
77	0xcd10	?releaseProcessMemory@VMemUtil@asmjit@@SAIPEAX0_K@Z
78	0x274d0	?relocCode@Assembler@asmjit@@QEBA_KPEAX_K@Z
79	0x26ea0	?reset@Assembler@asmjit@@QEAAX_N@Z
80	0x370b0	?reset@PodVectorBase@asmjit@@QEAAX_N@Z
81	0xd8b0	?reset@VMemMgr@asmjit@@QEAAXXZ
82	0x37360	?reset@Zone@asmjit@@QEAAX_N@Z
83	0x375d0	?sdup@Zone@asmjit@@QEAAPEADPEBD@Z
84	0x2f720	?setArch@X86Assembler@asmjit@@QEAAII@Z
85	0x37000	?setError@CodeGen@asmjit@@QEAAIIPEBD@Z
86	0x37060	?setErrorHandler@CodeGen@asmjit@@QEAAIPEAUErrorHandler@2@@Z
87	0x37680	?sformat@Zone@asmjit@@QEAAPEADPEBDZZ
88	0xdc40	?shrink@VMemMgr@asmjit@@QEAAIPEAX_K@Z
89	0xd01f0	?x86RegData@asmjit@@3UX86RegData@1@B

module_name	chrome.exe
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	89
nNames	89
Names(89)	0xa532c6
Functions(89)	0xa530b0
NameOrdinals(89)	0xa53214

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	6794288	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x102490