ollydbg.exe - OllyDbg - Free 32-bit Analysing Debugger

info
MZ
PE
resources
strings
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	ollydbg.exe
size	2650624 (0x287200)
md5	839e04bcae3fd1fe291b5eab52881d69

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x5245fd6d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10e
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0xf5000
SizeOfInitializedData	0x129000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0xf6000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x32d000
SizeOfHeaders	0x600
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Borland C++ for Win32 1999

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xf5000	0xf4e00	R-X CODE
.data	0xf6000	0x129000	0x87a00	RW- IDATA
.tls	0x21f000	0x1000	0x200	RW- IDATA
.rdata	0x220000	0x1000	0x200	R-- IDATA SHARED
.idata	0x221000	0x3000	0x2400	R-- IDATA
.edata	0x224000	0x6000	0x5a00	R-- IDATA
.rsrc	0x22a000	0xf1000	0xf0e00	R-- IDATA
.reloc	0x31b000	0x12000	0x11400	R-- IDATA SHARED

Data Directory

type	va	size
EXPORT	0x224000	0x5816
IMPORT	0x221000	0x226e
RESOURCE	0x22a000	0xf0e00
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x31b000	0x1130c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x220000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x61f000	0x61f0b4	0x57d944	0x620010	0	0

show previews

type	name	size
KNOWNRESTYPE	RES_GUIDS	394519
KNOWNRESTYPE	RES_KNOWN	550399
LOADDLLTYPE	RES_LOADDLL	2708
CURSOR	#1	308
BITMAP	BPHARD	308
BITMAP	BPMEM	308
BITMAP	BPOINTS	308
BITMAP	CLOSE	308
BITMAP	CPU	308
BITMAP	LOG	308
BITMAP	MEMORY	308
BITMAP	MODULES	308
BITMAP	OPEN	308
BITMAP	OPTIONS	308
BITMAP	PAUSE	308
BITMAP	RESTART	308
BITMAP	RUN	308
BITMAP	RUNTHREAD	308
BITMAP	SEARCH	308
BITMAP	STACK	308
BITMAP	STEPIN	308
BITMAP	STEPOVER	308
BITMAP	THREADS	308
BITMAP	TILLRET	308
BITMAP	TILLUSER	308
BITMAP	TRACE	308
BITMAP	TRIN	308
BITMAP	TROVER	308
BITMAP	WINDOWS	308
ICON	#1	744
ICON	#2	296
ICON	#3	744
ICON	#4	744
ICON	#5	744
ICON	#6	744
ICON	#7	744
ICON	#8	744
ICON	#9	744
ICON	#10	744
ICON	#11	744
ICON	#12	744
ICON	#13	744
ICON	#14	744
ICON	#15	744
ICON	#16	744
ICON	#17	744
ICON	#18	744
ICON	#19	744
ICON	#20	744
ICON	#21	1384
ICON	#22	744
ICON	#23	744
ICON	#24	744
ICON	#25	744
DIALOG	DIA_ABOUT	242
DIALOG	DIA_ATTACH	210
DIALOG	DIA_CONDERR	282
DIALOG	DIA_CONDYESNO	252
DIALOG	DIA_EMPTY	70
DIALOG	DIA_EMPTY_RESIZE	70
DIALOG	DIA_OFNHOOK_EXE	272
DIALOG	DIA_OFNHOOK_GROUP	284
DIALOG	DIA_OFNHOOK_STREAM	150
DIALOG	DIA_OFNHOOK_TEXT	306
STRING	#4092	220
STRING	#4093	228
STRING	#4094	580
STRING	#4095	868
STRING	#4096	672
RCDATA	DVCLAL	16
GROUP_CURSOR	CURS_SIZE	20
GROUP_ICON	ICO_AAAMAIN	34
GROUP_ICON	ICO_B	20
GROUP_ICON	ICO_B_YELLOW	20
GROUP_ICON	ICO_C	20
GROUP_ICON	ICO_D	20
GROUP_ICON	ICO_E	20
GROUP_ICON	ICO_H	20
GROUP_ICON	ICO_H_YELLOW	20
GROUP_ICON	ICO_K	20
GROUP_ICON	ICO_L	20
GROUP_ICON	ICO_M	20
GROUP_ICON	ICO_M_YELLOW	20
GROUP_ICON	ICO_N	20
GROUP_ICON	ICO_P	20
GROUP_ICON	ICO_PLUGIN	34
GROUP_ICON	ICO_QUEST	20
GROUP_ICON	ICO_R	20
GROUP_ICON	ICO_RTRACE	20
GROUP_ICON	ICO_S	20
GROUP_ICON	ICO_SEH	20
GROUP_ICON	ICO_T	20
GROUP_ICON	ICO_W	20
GROUP_ICON	MAINICON	20
VERSION	#1	848

id	lang	string
65456	0	December
65457	0	Sun
65458	0	Mon
65459	0	Tue
65460	0	Wed
65461	0	Thu
65462	0	Fri
65463	0	Sat
65464	0	Sunday
65465	0	Monday
65466	0	Tuesday
65467	0	Wednesday
65468	0	Thursday
65469	0	Friday
65470	0	Saturday
65472	0	Aug
65473	0	Sep
65474	0	Oct
65475	0	Nov
65476	0	Dec
65477	0	January
65478	0	February
65479	0	March
65480	0	April
65481	0	May
65482	0	June
65483	0	July
65484	0	August
65485	0	September
65486	0	October
65487	0	November
65488	0	Variant is not an array
65489	0	Variant array index out of bounds
65490	0	External exception %x
65491	0	Assertion failed
65492	0	Interface not supported
65493	0	Exception in safecall method
65494	0	%s (%s, line %d)
65495	0	Abstract Error
65496	0	Access violation at address %p in module '%s'. %s of address %p
65497	0	Jan
65498	0	Feb
65499	0	Mar
65500	0	Apr
65501	0	May
65502	0	Jun
65503	0	Jul
65504	0	Invalid pointer operation
65505	0	Invalid class typecast
65506	0	Access violation at address %p. %s of address %p
65507	0	Stack overflow
65508	0	Control-C hit
65509	0	Privileged instruction
65510	0	Exception %s in module %s at %p. %s%s
65511	0	Application Error
65512	0	Format '%s' invalid or incompatible with argument
65513	0	No argument for format '%s'
65514	0	Invalid variant type conversion
65515	0	Invalid variant operation
65516	0	Variant method calls not supported
65517	0	Read
65518	0	Write
65519	0	Error creating variant array
65520	0	Out of memory
65521	0	I/O error %d
65522	0	File not found
65523	0	Invalid filename
65524	0	Too many open files
65525	0	File access denied
65526	0	Read beyond end of file
65527	0	Disk full
65528	0	Invalid numeric input
65529	0	Division by zero
65530	0	Range check error
65531	0	Integer overflow
65532	0	Invalid floating point operation
65533	0	Floating point division by zero
65534	0	Floating point overflow
65535	0	Floating point underflow

module_name	ord	function_name
ADVAPI32.DLL		RegCloseKey
ADVAPI32.DLL		RegEnumKeyW
ADVAPI32.DLL		RegOpenKeyExA
ADVAPI32.DLL		RegOpenKeyExW
ADVAPI32.DLL		RegQueryValueExA
ADVAPI32.DLL		RegQueryValueExW
ADVAPI32.DLL		RegQueryValueW
ADVAPI32.DLL		RegSetValueExW
KERNEL32.DLL		CloseHandle
KERNEL32.DLL		ContinueDebugEvent
KERNEL32.DLL		CopyFileW
KERNEL32.DLL		CreateFileA
KERNEL32.DLL		CreateFileMappingW
KERNEL32.DLL		CreateFileW
KERNEL32.DLL		CreateProcessW
KERNEL32.DLL		CreateThread
KERNEL32.DLL		DebugActiveProcess
KERNEL32.DLL		DeleteCriticalSection
KERNEL32.DLL		DeleteFileA
KERNEL32.DLL		DeleteFileW
KERNEL32.DLL		DuplicateHandle
KERNEL32.DLL		EnterCriticalSection
KERNEL32.DLL		EnumCalendarInfoA
KERNEL32.DLL		EnumSystemCodePagesW
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		FindClose
KERNEL32.DLL		FindFirstFileA
KERNEL32.DLL		FindFirstFileW
KERNEL32.DLL		FindNextFileW
KERNEL32.DLL		FindResourceW
KERNEL32.DLL		FlushInstructionCache
KERNEL32.DLL		FreeLibrary
KERNEL32.DLL		GetACP
KERNEL32.DLL		GetCPInfo
KERNEL32.DLL		GetCommandLineA
KERNEL32.DLL		GetCommandLineW
KERNEL32.DLL		GetCurrentProcess
KERNEL32.DLL		GetCurrentProcessId
KERNEL32.DLL		GetCurrentThread
KERNEL32.DLL		GetCurrentThreadId
KERNEL32.DLL		GetDiskFreeSpaceA
KERNEL32.DLL		GetDiskFreeSpaceW
KERNEL32.DLL		GetDriveTypeW
KERNEL32.DLL		GetEnvironmentStrings
KERNEL32.DLL		GetEnvironmentStringsW
KERNEL32.DLL		GetFileAttributesA
KERNEL32.DLL		GetFileAttributesW
KERNEL32.DLL		GetFileInformationByHandle
KERNEL32.DLL		GetFileSize
KERNEL32.DLL		GetFileType
KERNEL32.DLL		GetLastError
KERNEL32.DLL		GetLocalTime
KERNEL32.DLL		GetLocaleInfoA
KERNEL32.DLL		GetModuleFileNameA
KERNEL32.DLL		GetModuleFileNameW
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetModuleHandleW
KERNEL32.DLL		GetOEMCP
KERNEL32.DLL		GetPrivateProfileStringW
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		GetProcessHeap
KERNEL32.DLL		GetStartupInfoA
KERNEL32.DLL		GetStdHandle
KERNEL32.DLL		GetStringTypeW
KERNEL32.DLL		GetSystemDirectoryW
KERNEL32.DLL		GetThreadContext
KERNEL32.DLL		GetThreadLocale
KERNEL32.DLL		GetThreadPriority
KERNEL32.DLL		GetThreadSelectorEntry
KERNEL32.DLL		GetTickCount
KERNEL32.DLL		GetVersion
KERNEL32.DLL		GetVersionExA
KERNEL32.DLL		GetVolumeInformationW
KERNEL32.DLL		GetWindowsDirectoryW
KERNEL32.DLL		GlobalAlloc
KERNEL32.DLL		GlobalFree
KERNEL32.DLL		GlobalLock
KERNEL32.DLL		GlobalMemoryStatus
KERNEL32.DLL		GlobalReAlloc
KERNEL32.DLL		GlobalSize
KERNEL32.DLL		GlobalUnlock
KERNEL32.DLL		HeapAlloc
KERNEL32.DLL		HeapFree
KERNEL32.DLL		InitializeCriticalSection
KERNEL32.DLL		InterlockedDecrement
KERNEL32.DLL		InterlockedIncrement
KERNEL32.DLL		IsBadReadPtr
KERNEL32.DLL		IsBadWritePtr
KERNEL32.DLL		LCMapStringA
KERNEL32.DLL		LCMapStringW
KERNEL32.DLL		LeaveCriticalSection
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		LoadLibraryExA
KERNEL32.DLL		LoadLibraryW
KERNEL32.DLL		LoadResource
KERNEL32.DLL		LocalAlloc
KERNEL32.DLL		LocalFree
KERNEL32.DLL		LockResource
KERNEL32.DLL		MapViewOfFile
KERNEL32.DLL		MoveFileW
KERNEL32.DLL		MulDiv
KERNEL32.DLL		MultiByteToWideChar
KERNEL32.DLL		OpenProcess
KERNEL32.DLL		QueryDosDeviceW
KERNEL32.DLL		QueryPerformanceCounter
KERNEL32.DLL		QueryPerformanceFrequency
KERNEL32.DLL		RaiseException
KERNEL32.DLL		ReadFile
KERNEL32.DLL		ReadProcessMemory
KERNEL32.DLL		ResumeThread
KERNEL32.DLL		RtlUnwind
KERNEL32.DLL		SearchPathW
KERNEL32.DLL		SetConsoleCtrlHandler
KERNEL32.DLL		SetEndOfFile
KERNEL32.DLL		SetErrorMode
KERNEL32.DLL		SetEvent
KERNEL32.DLL		SetFilePointer
KERNEL32.DLL		SetHandleCount
KERNEL32.DLL		SetLastError
KERNEL32.DLL		SetThreadContext
KERNEL32.DLL		SetThreadPriority
KERNEL32.DLL		SetUnhandledExceptionFilter
KERNEL32.DLL		SizeofResource
KERNEL32.DLL		Sleep
KERNEL32.DLL		SuspendThread
KERNEL32.DLL		TerminateProcess
KERNEL32.DLL		TerminateThread
KERNEL32.DLL		TlsAlloc
KERNEL32.DLL		TlsFree
KERNEL32.DLL		TlsGetValue
KERNEL32.DLL		TlsSetValue
KERNEL32.DLL		UnhandledExceptionFilter
KERNEL32.DLL		UnmapViewOfFile
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		VirtualProtectEx
KERNEL32.DLL		VirtualQuery
KERNEL32.DLL		VirtualQueryEx
KERNEL32.DLL		WaitForDebugEvent
KERNEL32.DLL		WideCharToMultiByte
KERNEL32.DLL		WriteFile
KERNEL32.DLL		WritePrivateProfileStringW
KERNEL32.DLL		WriteProcessMemory
KERNEL32.DLL		lstrcpyA
KERNEL32.DLL		lstrcpynA
KERNEL32.DLL		lstrlenA
VERSION.DLL		GetFileVersionInfoSizeW
VERSION.DLL		GetFileVersionInfoW
VERSION.DLL		VerQueryValueW
COMCTL32.DLL	17
COMDLG32.DLL		ChooseColorW
COMDLG32.DLL		ChooseFontW
COMDLG32.DLL		CommDlgExtendedError
COMDLG32.DLL		GetOpenFileNameW
COMDLG32.DLL		GetSaveFileNameW
GDI32.DLL		AddFontResourceW
GDI32.DLL		BitBlt
GDI32.DLL		CreateCompatibleBitmap
GDI32.DLL		CreateCompatibleDC
GDI32.DLL		CreateFontIndirectW
GDI32.DLL		CreatePen
GDI32.DLL		CreateRectRgn
GDI32.DLL		CreateSolidBrush
GDI32.DLL		DeleteDC
GDI32.DLL		DeleteObject
GDI32.DLL		EnumFontFamiliesW
GDI32.DLL		ExcludeClipRect
GDI32.DLL		ExtTextOutW
GDI32.DLL		GetNearestColor
GDI32.DLL		GetObjectW
GDI32.DLL		GetStockObject
GDI32.DLL		GetTextExtentExPointW
GDI32.DLL		GetTextExtentPoint32W
GDI32.DLL		GetTextMetricsW
GDI32.DLL		LineTo
GDI32.DLL		MoveToEx
GDI32.DLL		RemoveFontResourceW
GDI32.DLL		SelectClipRgn
GDI32.DLL		SelectObject
GDI32.DLL		SetBkColor
GDI32.DLL		SetPixel
GDI32.DLL		SetTextAlign
GDI32.DLL		SetTextColor
SHELL32.DLL		CommandLineToArgvW
SHELL32.DLL		DragAcceptFiles
SHELL32.DLL		DragFinish
SHELL32.DLL		DragQueryFileW
SHELL32.DLL		ShellExecuteW
USER32.DLL		AdjustWindowRect
USER32.DLL		AppendMenuW
USER32.DLL		BeginDeferWindowPos
USER32.DLL		BeginPaint
USER32.DLL		BringWindowToTop
USER32.DLL		CallWindowProcW
USER32.DLL		CharNextA
USER32.DLL		CheckDlgButton
USER32.DLL		CheckRadioButton
USER32.DLL		ClientToScreen
USER32.DLL		CloseClipboard
USER32.DLL		CreateCaret
USER32.DLL		CreateDialogParamW
USER32.DLL		CreateMDIWindowW
USER32.DLL		CreateMenu
USER32.DLL		CreatePopupMenu
USER32.DLL		CreateWindowExW
USER32.DLL		DefFrameProcW
USER32.DLL		DefMDIChildProcW
USER32.DLL		DefWindowProcW
USER32.DLL		DeferWindowPos
USER32.DLL		DeleteMenu
USER32.DLL		DestroyCaret
USER32.DLL		DestroyMenu
USER32.DLL		DestroyWindow
USER32.DLL		DialogBoxParamW
USER32.DLL		DispatchMessageW
USER32.DLL		DrawEdge
USER32.DLL		DrawMenuBar
USER32.DLL		EmptyClipboard
USER32.DLL		EnableMenuItem
USER32.DLL		EnableScrollBar
USER32.DLL		EnableWindow
USER32.DLL		EndDeferWindowPos
USER32.DLL		EndDialog
USER32.DLL		EndPaint
USER32.DLL		EnumChildWindows
USER32.DLL		EnumThreadWindows
USER32.DLL		EnumWindows
USER32.DLL		FillRect
USER32.DLL		FrameRect
USER32.DLL		GetActiveWindow
USER32.DLL		GetCapture
USER32.DLL		GetClassInfoW
USER32.DLL		GetClassLongA
USER32.DLL		GetClassLongW
USER32.DLL		GetClassNameW
USER32.DLL		GetClientRect
USER32.DLL		GetClipboardData
USER32.DLL		GetCursorPos
USER32.DLL		GetDC
USER32.DLL		GetDesktopWindow
USER32.DLL		GetDlgCtrlID
USER32.DLL		GetDlgItem
USER32.DLL		GetDlgItemInt
USER32.DLL		GetDlgItemTextW
USER32.DLL		GetFocus
USER32.DLL		GetKeyState
USER32.DLL		GetKeyboardState
USER32.DLL		GetKeyboardType
USER32.DLL		GetMenu
USER32.DLL		GetMenuItemCount
USER32.DLL		GetMenuItemID
USER32.DLL		GetMenuItemInfoW
USER32.DLL		GetParent
USER32.DLL		GetScrollInfo
USER32.DLL		GetSubMenu
USER32.DLL		GetSysColor
USER32.DLL		GetSysColorBrush
USER32.DLL		GetSystemMetrics
USER32.DLL		GetWindowLongW
USER32.DLL		GetWindowPlacement
USER32.DLL		GetWindowRect
USER32.DLL		GetWindowTextW
USER32.DLL		GetWindowThreadProcessId
USER32.DLL		InSendMessage
USER32.DLL		InsertMenuItemW
USER32.DLL		InsertMenuW
USER32.DLL		IntersectRect
USER32.DLL		InvalidateRect
USER32.DLL		IsDialogMessageW
USER32.DLL		IsDlgButtonChecked
USER32.DLL		IsIconic
USER32.DLL		IsWindowEnabled
USER32.DLL		IsWindowUnicode
USER32.DLL		IsWindowVisible
USER32.DLL		IsZoomed
USER32.DLL		KillTimer
USER32.DLL		LoadBitmapW
USER32.DLL		LoadCursorW
USER32.DLL		LoadIconW
USER32.DLL		LoadStringA
USER32.DLL		MessageBoxA
USER32.DLL		MessageBoxW
USER32.DLL		MoveWindow
USER32.DLL		OpenClipboard
USER32.DLL		OpenIcon
USER32.DLL		PeekMessageW
USER32.DLL		PostMessageW
USER32.DLL		PostQuitMessage
USER32.DLL		PostThreadMessageW
USER32.DLL		RedrawWindow
USER32.DLL		RegisterClassW
USER32.DLL		ReleaseCapture
USER32.DLL		ReleaseDC
USER32.DLL		ScreenToClient
USER32.DLL		SendDlgItemMessageW
USER32.DLL		SendMessageW
USER32.DLL		SetCapture
USER32.DLL		SetCaretPos
USER32.DLL		SetClipboardData
USER32.DLL		SetCursor
USER32.DLL		SetDlgItemTextW
USER32.DLL		SetFocus
USER32.DLL		SetForegroundWindow
USER32.DLL		SetMenu
USER32.DLL		SetMenuItemInfoW
USER32.DLL		SetScrollInfo
USER32.DLL		SetTimer
USER32.DLL		SetWindowLongW
USER32.DLL		SetWindowPos
USER32.DLL		SetWindowTextW
USER32.DLL		ShowCaret
USER32.DLL		ShowScrollBar
USER32.DLL		ShowWindow
USER32.DLL		ToAscii
USER32.DLL		TrackPopupMenu
USER32.DLL		TranslateMDISysAccel
USER32.DLL		TranslateMessage
USER32.DLL		UnregisterClassW
USER32.DLL		UpdateWindow
USER32.DLL		WinHelpW
USER32.DLL		WindowFromDC
USER32.DLL		WindowFromPoint
USER32.DLL		wsprintfA
OLE32.DLL		CoCreateInstance
OLE32.DLL		CoInitialize
OLE32.DLL		CoUninitialize
OLEAUT32.DLL		SysAllocStringLen
OLEAUT32.DLL		SysFreeString
OLEAUT32.DLL		SysStringLen
OLEAUT32.DLL		VariantChangeTypeEx
OLEAUT32.DLL		VariantClear
OLEAUT32.DLL		VariantCopyInd

ord	entry_va	function_name
1	0x1059	__GetExceptDLLinfo
2	0x1cd4	_Error
3	0x20c4	_Conderror
4	0x2510	_Condyesno
5	0x261c	_Stringfromini
6	0x26a0	_Filefromini
7	0x2718	_Getfromini
8	0x2790	_Writetoini
9	0x2854	_Filetoini
10	0x2930	_Deleteinisection
11	0x2978	_Getfromsettings
12	0x299c	_Addtosettings
13	0x29c0	_IstextA
14	0x2a00	_IstextW
15	0x2a28	_IsrareA
16	0x2a6c	_Replacegraphs
17	0x32bc	_Unicodebuffertoascii
18	0x3374	_Unicodetoascii
19	0x33d8	_Asciitounicode
20	0x3440	_Unicodetoutf
21	0x3514	_Utftounicode
22	0x3670	_Getmbstringinfo
23	0x3808	_Getmbcharlength
24	0x3918	_Iszero
25	0x3944	_Guidtotext
26	0x39c8	_Swprintf
27	0x3c70	_Memalloc
28	0x3d7c	_Memfree
29	0x3dbc	_Mempurge
30	0x3ec4	_Memdouble
31	0x4070	_Virtalloc
32	0x4158	_Virtfree
33	0x4274	_Broadcast
34	0x46d4	_Fnsplit
35	0x48a4	_Fnmerge
36	0x4a4c	_Listalternatedatastreams
37	0x58fc	_Browsefilename
38	0x67d8	_Browsedirectory
39	0x68cc	_Relativizepath
40	0x6938	_Absolutizepath
41	0x6a18	_Confirmoverwrite
42	0x6ab4	_Labeladdress
43	0x6ee4	_Simpleaddress
44	0x6f80	_Heapsort
45	0x70b0	_Heapsortex
46	0x71f8	_Readfile
47	0x733c	_Devicenametodosname
48	0x7414	_Filenamefromhandle
49	0x74c4	_Quicktimerstart
50	0x7528	_Quicktimerstop
51	0x75b0	_Quicktimerflush
52	0x9ae4	_Info
53	0x9b98	_Message
54	0x9ca0	_Tempinfo
55	0x9d48	_Flash
56	0x9dbc	_Progress
57	0x9e50	_Moveprogress
58	0x9e74	_Setstatus
59	0x12078	_Getmonitorrect
60	0x1214c	_Sunkenframe
61	0x1236c	_Findstockobject
62	0x12818	_Findmodule
63	0x12884	_Findmodulebyname
64	0x128cc	_Findmainmodule
65	0x12900	_Issystem
66	0x12930	_Findfixup
67	0x129b0	_Findfileoffset
68	0x12a44	_Decoderange
69	0x12e70	_Getexeversion
70	0x13760	_Getexportfrommemory
71	0x17350	_Destroysorteddata
72	0x1742c	_Createsorteddata
73	0x17638	_Deletesorteddata
74	0x1775c	_Deletesorteddatarange
75	0x17980	_Addsorteddata
76	0x17f00	_Replacesorteddatarange
77	0x184d0	_Renumeratesorteddata
78	0x18520	_Confirmsorteddata
79	0x18580	_Deletenonconfirmedsorteddata
80	0x186d8	_Unmarknewsorteddata
81	0x18738	_Findsorteddata
82	0x187c0	_Findsorteddatarange
83	0x1883c	_Findsortedindexrange
84	0x188b8	_Getsortedbyindex
85	0x188f8	_Sortsorteddata
86	0x18a88	_Getsortedbyselection
87	0x18afc	_Issortedinit
88	0x191e4	_Redrawlist
89	0x19208	_Addtolist
90	0x1a6e8	_Getcharacterwidth
91	0x1a740	_Defaultbar
92	0x1a83c	_Linecount
93	0x1d9f8	_Gettabletext
94	0x1de08	_Gettableselectionxy
95	0x1dfe8	_Maketableareavisible
96	0x1e14c	_Movetableselection
97	0x1e23c	_Settableselection
98	0x1e314	_Removetableselection
99	0x1e368	_Updatetable
100	0x1e3b0	_Delayedtableredraw
101	0x1e444	_Setautoupdate
102	0x20a30	_Processwmmousewheel
103	0x20b74	_Createottablewindow
104	0x21084	_Copytableselection
105	0x21484	_Copywholetable
106	0x223d0	_Createtablewindow
107	0x22a30	_Activatetablewindow
108	0x22a9c	_Createtablechild
109	0x22c04	_Gettablebywindow
110	0x24934	_Callmenufunction
111	0x28b4c	_Getcontrolpos
112	0x28b98	_Movecontrol
113	0x28c04	_Findcontrol
114	0x28cd0	_Defaultactions
115	0x28f30	_Addstringtocombolist
116	0x290dc	_Preparedialog
117	0x2a8a4	_Endotdialog
118	0x2ad88	_Getregister
119	0x2ae78	_Getinteger
120	0x2af64	_Getdword
121	0x2b030	_Getlasterrorcode
122	0x2b4b8	_Getaddressrange
123	0x2b728	_Getexceptionrange
124	0x2ba68	_Getstructuretype
125	0x2baf0	_Getrepstructuretype
126	0x2bdf0	_Getfpureg
127	0x2bee8	_Get3dnow
128	0x2bf90	_Getfloat
129	0x2c2a0	_Getmmx
130	0x2c5e4	_Getsse
131	0x2cfec	_Getstring
132	0x2d0b0	_Getdwordexpression
133	0x2d158	_Getintexpression
134	0x2d384	_Getgotoexpression
135	0x2e068	_Asmindump
136	0x2e2c4	_Getasmsearchmodel
137	0x2e7bc	_Getseqsearchmodel
138	0x30ba8	_Binaryedit
139	0x30fa0	_Getpredefinedtypebyindex
140	0x30fdc	_Getindexbypredefinedtype
141	0x319b4	_Condbreakpoint
142	0x31cf4	_Condlogbreakpoint
143	0x32ac8	_Membreakpoint
144	0x32ce4	_Memlogbreakpoint
145	0x33ac4	_Hardbreakpoint
146	0x33d98	_Hardlogbreakpoint
147	0x35098	_Setrtcond
148	0x359fc	_Setrtprot
149	0x369dc	_Browsecodelocations
150	0x36c44	_Fillcombowithcplist
151	0x36df8	_Fillmenuwithcplist
152	0x38b74	_Insertdata
153	0x38f58	_Finddata
154	0x38ff8	_Finddataptr
155	0x39068	_Startnextdata
156	0x390cc	_Findnextdata
157	0x391a0	_Startnextdatalist
158	0x39228	_Findnextdatalist
159	0x3931c	_Isdataavailable
160	0x39448	_Isdatainrange
161	0x394e4	_Deletedatarange
162	0x395b8	_Deletedatarangelist
163	0x39694	_Mergequickdata
164	0x39bcc	_Quickinsertdata
165	0x39dc8	_DemanglenameW
166	0x39f58	_InsertnameW
167	0x39fa4	_QuickinsertnameW
168	0x39ff0	_FindnameW
169	0x3a098	_FindnextnameW
170	0x3a13c	_Startnextnamelist
171	0x3a15c	_FindnextnamelistW
172	0x3a244	_Findlabel
173	0x3a514	_FindaddressW
174	0x3ac10	_Destroysimpledata
175	0x3ac40	_Createsimpledata
176	0x3aca8	_Addsimpledata
177	0x3ad8c	_Sortsimpledata
178	0x3aea8	_Findsimpledata
179	0x3aef0	_Getsimpledataindexbyaddr
180	0x3af24	_Getsimpledatabyindex
181	0x3af64	_Deletesimpledatarange
182	0x3fd34	_Byteregtodwordreg
183	0x3fd54	_Disassembleforward
184	0x3fef4	_Disassembleback
185	0x406d8	_Commentcharacter
186	0x40854	_Printfloat4
187	0x40940	_Printfloat8
188	0x40a24	_Printfloat10
189	0x40cb0	_Printmmx
190	0x40cdc	_Nameoffloat
191	0x41574	_Disasm
192	0x47824	_Cmdinfo
193	0x4f3c4	_Suspendallthreads
194	0x4f444	_Resumeallthreads
195	0x4f4c8	_Getlasterror
196	0x4f5a8	_Getselectorinfo
197	0x4fb14	_Pauseprocess
198	0x4fd1c	_Closeprocess
199	0x50130	_Detachprocess
200	0x5054c	_Runthread
201	0x51208	_Run
202	0x51308	_Checkfordebugevent
203	0x58630	_Flushmemorycache
204	0x58694	_Readmemory
205	0x587cc	_Readmemoryex
206	0x58a4c	_Writememory
207	0x58de4	_Findmemory
208	0x58e68	_Finddecode
209	0x58eac	_Guardmemory
210	0x58f4c	_Listmemory
211	0x59b14	_Copymemoryhex
212	0x59ce4	_Pastememoryhex
213	0x59f40	_Editmemory
214	0x5b6ec	_Findthread
215	0x5b754	_Findthreadbyordinal
216	0x5b78c	_Threadregisters
217	0x5b7c8	_Decodethreadname
218	0x6e784	_Removeanalysis
219	0x6ea8c	_Getpackednetint
220	0x70a58	_Maybecommand
221	0x70cc4	_Followcall
222	0x70e70	_Followjump
223	0x71104	_Addjump
224	0x712f8	_Sortjumpdata
225	0x7139c	_Findjumpfrom
226	0x7144c	_Findlocaljumpsto
227	0x71544	_Findlocaljumpscallsto
228	0x71640	_Arelocaljumpscallstorange
229	0x7172c	_Findglobalcallsto
230	0x7184c	_Findglobaljumpscallsto
231	0x71cd8	_Initset
232	0x71cfc	_Fullrange
233	0x71d28	_Emptyrange
234	0x71d48	_Getsetcount
235	0x71d80	_Getrangecount
236	0x71d98	_Isinset
237	0x71dd8	_Getrangebymember
238	0x71e34	_Getrangebyindex
239	0x71e84	_Addrange
240	0x71ff0	_Removerange
241	0x73864	_Createframewindow
242	0x73bec	_Updateframe
243	0x73c28	_Getactiveframe
244	0x73c50	_Gettabcount
245	0x73ca4	_Setactivetab
246	0x74688	_Updatetabs
247	0x748b4	_Createtabwindow
248	0x74cb8	_Getactivetab
249	0x775c0	_Redrawcpudisasm
250	0x775e0	_Redrawcpureg
251	0x775fc	_Getcputhreadid
252	0x77608	_Getcpuruntracebackstep
253	0x77614	_Getcpudisasmdump
254	0x77620	_Getcpudisasmselection
255	0x7762c	_Getcpudisasmtable
256	0x77638	_Getcpudumpdump
257	0x77644	_Getcpustackdump
258	0x77afc	_Addtohistory
259	0x77bd8	_Walkhistory
260	0x77cd0	_Checkhistory
261	0x77df0	_Setcpu
262	0x83624	_Getconstantbyname
263	0x8365c	_Getconstantbyvalue
264	0x83760	_Fillcombowithgroup
265	0x839c0	_Getrawdata
266	0x83b60	_Substitutehkeyprefix
267	0x84074	_Decodeknownbyname
268	0x841c8	_Decodeknownbyaddr
269	0x8478c	_Isnoreturn
270	0x84998	_Decodeargument
271	0x84e78	_Decodetype
272	0x84f00	_Fillcombowithstruct
273	0x85014	_Getstructureitemcount
274	0x85078	_Findstructureitembyoffset
275	0x850f0	_Decodestructure
276	0x85544	_Getstructureitemvalue
277	0x85660	_Skipspaces
278	0x856a8	_Scan
279	0x867ec	_Optostring
280	0x868b8	_Destroynesteddata
281	0x86920	_Createnesteddata
282	0x8699c	_Addnesteddata
283	0x86c64	_Deletenestedrange
284	0x86d88	_Getnestingpattern
285	0x86f1c	_Getnestingdepth
286	0x86f58	_Findnesteddata
287	0x86ff0	_Nesteddatatoudd
288	0x870a4	_Uddtonesteddata
289	0x87170	_Stringtotext
290	0x87480	_Isstring
291	0x87d74	_Squeezename
292	0x87dfc	_Uncapitalize
293	0x87e40	_Decoderelativeoffset
294	0x87fd0	_Decodeaddress
295	0x8889c	_Decodearglocal
296	0x88a88	_Getanalysercomment
297	0x88db0	_Getswitchcomment
298	0x892dc	_Getloopcomment
299	0x8969c	_Getproccomment
300	0x8996c	_Commentaddress
301	0x8c764	_Assembleallforms
302	0x913dc	_Assembleex
303	0x9152c	_Assemble
304	0x9165c	_Executecommand
305	0x9493c	_Checkcondition
306	0x94a24	_Setcondition
307	0x960b8	_Registermodifiedbyuser
308	0x97744	_Removeint3breakpoint
309	0x97820	_Setint3breakpoint
310	0x97a4c	_Enableint3breakpoint
311	0x97af0	_Confirmint3breakpoint
312	0x97b3c	_Confirmhardwarebreakpoint
313	0x97b88	_Confirmint3breakpointlist
314	0x97d30	_Wipebreakpointrange
315	0x9d228	_Cexpression
316	0x9d8d8	_Exprcount
317	0x9d8fc	_Eexpression
318	0x9f5fc	_Expression
319	0x9f6f8	_Fastexpression
320	0xa4f2c	_Comparecommand
321	0xa5280	_Comparesequence
322	0xa8bc8	_Compress
323	0xa8e1c	_Getoriginaldatasize
324	0xa8e44	_Decompress
325	0xa9058	_Savetaggedrecord
326	0xa90d8	_Savepackedrecord
327	0xa9154	_Createtaggedfile
328	0xa9274	_Finalizetaggedfile
329	0xa9510	_Gettaggedrecordsize
330	0xa95c4	_Gettaggedfiledata
331	0xa9640	_Closetaggedfile
332	0xa9660	_Opentaggedfile
333	0xad29c	_Getmodulestring
334	0xad7fc	_Isretaddr
335	0xad8c4	_Findretaddrdata
336	0xb7504	_Setdumptype
337	0xb7cd0	_Dumpback
338	0xb7d8c	_Dumpforward
339	0xb7e48	_Getmbdumpaddress
340	0xb814c	_Getmbdumpposition
341	0xb8410	_Scrolldumpwindow
342	0xb8c5c	_Alignselection
343	0xb8d78	_Getproclimits
344	0xb8e60	_Getextproclimits
345	0xb8ebc	_Newdumpselection
346	0xbd204	_Ensurememorybackup
347	0xbd394	_Backupusercode
348	0xbdcfc	_Copydumpselection
349	0xc0468	_Findfiledump
350	0xc04d4	_Createdumpwindow
351	0xc0988	_Createdatadumpwindow
352	0xc0b10	_Embeddumpwindow
353	0xc493c	_Addprotocolrange
354	0xc49e8	_Getruntrace
355	0xc4c24	_Findruntracerecord
356	0xc70cc	_Removemembreakpoint
357	0xc7148	_Setmembreakpoint
358	0xc7338	_Enablemembreakpoint
359	0xc7d24	_Removehardbreakpoint
360	0xc7de4	_Sethardbreakpoint
361	0xc8140	_Enablehardbreakpoint
362	0xc8204	_Findfreehardbreakslot
363	0xca7d0	_Findsource
364	0xcaab4	_Getsourceline
365	0xcb354	_Showsourcecode
366	0xd19e0	_Ndisasm
367	0xd3db0	_Getguidname
368	0xd3e68	_Isguid
369	0xd8c9c	_Pluginsaverecord
370	0xd8cd0	_Pluginpackedrecord
371	0xd8d0c	_Pluginmodulechanged
372	0xd8d3c	_Plugingetuniquedatatype
373	0xd8d5c	_Plugintempbreakpoint
374	0xd8d7c	_Pluginshowoptions
375	0xde7c4	_T
376	0xf61fc	___CPPdebugHook
377	0x1cd4	Error
378	0x20c4	Conderror
379	0x2510	Condyesno
380	0x2718	Getfromini
381	0x2790	Writetoini
382	0x9ae4	Info
383	0x9b98	Message
384	0x9ca0	Tempinfo
385	0x9d48	Flash
386	0x9dbc	Progress
387	0x19208	Addtolist
388	0x39c8	Swprintf
389	0x6938	Absolutizepath
390	0x22a30	Activatetablewindow
391	0x71104	Addjump
392	0x8699c	Addnesteddata
393	0xc493c	Addprotocolrange
394	0x71e84	Addrange
395	0x3aca8	Addsimpledata
396	0x17980	Addsorteddata
397	0x28f30	Addstringtocombolist
398	0x77afc	Addtohistory
399	0x299c	Addtosettings
400	0xb8c5c	Alignselection
401	0x71640	Arelocaljumpscallstorange
402	0x33d8	Asciitounicode
403	0x2e068	Asmindump
404	0x9152c	Assemble
405	0x913dc	Assembleex
406	0x30ba8	Binaryedit
407	0x8c764	Assembleallforms
408	0xbd394	Backupusercode
409	0x4274	Broadcast
410	0x369dc	Browsecodelocations
411	0x67d8	Browsedirectory
412	0x58fc	Browsefilename
413	0x3fd34	Byteregtodwordreg
414	0x24934	Callmenufunction
415	0x9d228	Cexpression
416	0x9493c	Checkcondition
417	0x51308	Checkfordebugevent
418	0x77cd0	Checkhistory
419	0x4fd1c	Closeprocess
420	0xa9640	Closetaggedfile
421	0x47824	Cmdinfo
422	0x8996c	Commentaddress
423	0x406d8	Commentcharacter
424	0xa4f2c	Comparecommand
425	0xa5280	Comparesequence
426	0xa8bc8	Compress
427	0x319b4	Condbreakpoint
428	0x31cf4	Condlogbreakpoint
429	0x97b3c	Confirmhardwarebreakpoint
430	0x97af0	Confirmint3breakpoint
431	0x41574	Disasm
432	0x97b88	Confirmint3breakpointlist
433	0x6a18	Confirmoverwrite
434	0x18520	Confirmsorteddata
435	0xbdcfc	Copydumpselection
436	0x59b14	Copymemoryhex
437	0x21084	Copytableselection
438	0x21484	Copywholetable
439	0xc0988	Createdatadumpwindow
440	0xc04d4	Createdumpwindow
441	0x73864	Createframewindow
442	0x86920	Createnesteddata
443	0x20b74	Createottablewindow
444	0x3ac40	Createsimpledata
445	0x1742c	Createsorteddata
446	0x22a9c	Createtablechild
447	0x223d0	Createtablewindow
448	0x748b4	Createtabwindow
449	0xa9154	Createtaggedfile
450	0x87fd0	Decodeaddress
451	0x8889c	Decodearglocal
452	0x84998	Decodeargument
453	0x841c8	Decodeknownbyaddr
454	0x84e78	Decodetype
455	0x84074	Decodeknownbyname
456	0x12a44	Decoderange
457	0x87e40	Decoderelativeoffset
458	0x850f0	Decodestructure
459	0x5b7c8	Decodethreadname
460	0xa8e44	Decompress
461	0x28cd0	Defaultactions
462	0x1a740	Defaultbar
463	0x1e3b0	Delayedtableredraw
464	0x394e4	Deletedatarange
465	0x395b8	Deletedatarangelist
466	0x2930	Deleteinisection
467	0x86c64	Deletenestedrange
468	0x18580	Deletenonconfirmedsorteddata
469	0x3af64	Deletesimpledatarange
470	0x17638	Deletesorteddata
471	0x1775c	Deletesorteddatarange
472	0x39dc8	DemanglenameW
473	0x868b8	Destroynesteddata
474	0x3ac10	Destroysimpledata
475	0x17350	Destroysorteddata
476	0x50130	Detachprocess
477	0xb7cd0	Dumpback
478	0x733c	Devicenametodosname
479	0x3fef4	Disassembleback
480	0x3fd54	Disassembleforward
481	0xb7d8c	Dumpforward
482	0x59f40	Editmemory
483	0x9d8fc	Eexpression
484	0xc0b10	Embeddumpwindow
485	0x71d28	Emptyrange
486	0xc8140	Enablehardbreakpoint
487	0x97a4c	Enableint3breakpoint
488	0xc7338	Enablemembreakpoint
489	0x2a8a4	Endotdialog
490	0xbd204	Ensurememorybackup
491	0x9165c	Executecommand
492	0x9d8d8	Exprcount
493	0x9f5fc	Expression
494	0x9f6f8	Fastexpression
495	0x26a0	Filefromini
496	0x7414	Filenamefromhandle
497	0x2854	Filetoini
498	0x36c44	Fillcombowithcplist
499	0x83760	Fillcombowithgroup
500	0x84f00	Fillcombowithstruct
501	0x36df8	Fillmenuwithcplist
502	0x51208	Run
503	0xa9274	Finalizetaggedfile
504	0x3a514	FindaddressW
505	0x28c04	Findcontrol
506	0x38f58	Finddata
507	0x38ff8	Finddataptr
508	0x58e68	Finddecode
509	0xc0468	Findfiledump
510	0x129b0	Findfileoffset
511	0x12930	Findfixup
512	0xc8204	Findfreehardbreakslot
513	0x7172c	Findglobalcallsto
514	0x7184c	Findglobaljumpscallsto
515	0x7139c	Findjumpfrom
516	0x3a244	Findlabel
517	0x71544	Findlocaljumpscallsto
518	0x7144c	Findlocaljumpsto
519	0x128cc	Findmainmodule
520	0x58de4	Findmemory
521	0x12818	Findmodule
522	0x12884	Findmodulebyname
523	0x39ff0	FindnameW
524	0x86f58	Findnesteddata
525	0x390cc	Findnextdata
526	0x39228	Findnextdatalist
527	0x3a098	FindnextnameW
528	0x3a15c	FindnextnamelistW
529	0xad8c4	Findretaddrdata
530	0xc4c24	Findruntracerecord
531	0x3aea8	Findsimpledata
532	0x18738	Findsorteddata
533	0x187c0	Findsorteddatarange
534	0x1883c	Findsortedindexrange
535	0xca7d0	Findsource
536	0x1236c	Findstockobject
537	0x85078	Findstructureitembyoffset
538	0x5b6ec	Findthread
539	0x5b754	Findthreadbyordinal
540	0x58630	Flushmemorycache
541	0x48a4	Fnmerge
542	0x46d4	Fnsplit
543	0x70cc4	Followcall
544	0x70e70	Followjump
545	0x71cfc	Fullrange
546	0x2bee8	Get3dnow
547	0x73c28	Getactiveframe
548	0x74cb8	Getactivetab
549	0x2b4b8	Getaddressrange
550	0x88a88	Getanalysercomment
551	0x2e2c4	Getasmsearchmodel
552	0x1a6e8	Getcharacterwidth
553	0x83624	Getconstantbyname
554	0x8365c	Getconstantbyvalue
555	0x28b4c	Getcontrolpos
556	0x77614	Getcpudisasmdump
557	0x77620	Getcpudisasmselection
558	0x7762c	Getcpudisasmtable
559	0x77638	Getcpudumpdump
560	0x77608	Getcpuruntracebackstep
561	0x77644	Getcpustackdump
562	0x775fc	Getcputhreadid
563	0x2af64	Getdword
564	0x2d0b0	Getdwordexpression
565	0x2b728	Getexceptionrange
566	0x12e70	Getexeversion
567	0x13760	Getexportfrommemory
568	0xb8e60	Getextproclimits
569	0x2bf90	Getfloat
570	0x2bdf0	Getfpureg
571	0x2978	Getfromsettings
572	0x2d384	Getgotoexpression
573	0xd3db0	Getguidname
574	0x30fdc	Getindexbypredefinedtype
575	0x2ae78	Getinteger
576	0x2d158	Getintexpression
577	0x4f4c8	Getlasterror
578	0x2b030	Getlasterrorcode
579	0x892dc	Getloopcomment
580	0x3808	Getmbcharlength
581	0xb7e48	Getmbdumpaddress
582	0xb814c	Getmbdumpposition
583	0x3670	Getmbstringinfo
584	0x2c2a0	Getmmx
585	0xad29c	Getmodulestring
586	0x12078	Getmonitorrect
587	0x86f1c	Getnestingdepth
588	0x86d88	Getnestingpattern
589	0xa8e1c	Getoriginaldatasize
590	0x6ea8c	Getpackednetint
591	0x30fa0	Getpredefinedtypebyindex
592	0x8969c	Getproccomment
593	0xb8d78	Getproclimits
594	0x71e34	Getrangebyindex
595	0x71dd8	Getrangebymember
596	0x71d80	Getrangecount
597	0x839c0	Getrawdata
598	0x2ad88	Getregister
599	0x2baf0	Getrepstructuretype
600	0xc49e8	Getruntrace
601	0x2e7bc	Getseqsearchmodel
602	0x10b4b	_StrlenA
603	0x71d48	Getsetcount
604	0x3af24	Getsimpledatabyindex
605	0x3aef0	Getsimpledataindexbyaddr
606	0x188b8	Getsortedbyindex
607	0x18a88	Getsortedbyselection
608	0xcaab4	Getsourceline
609	0x2c5e4	Getsse
610	0x2cfec	Getstring
611	0x85014	Getstructureitemcount
612	0x85544	Getstructureitemvalue
613	0x2ba68	Getstructuretype
614	0x88db0	Getswitchcomment
615	0x73c50	Gettabcount
616	0x1de08	Gettableselectionxy
617	0x1d9f8	Gettabletext
618	0xa95c4	Gettaggedfiledata
619	0xa9510	Gettaggedrecordsize
620	0x58eac	Guardmemory
621	0x3944	Guidtotext
622	0x33ac4	Hardbreakpoint
623	0x33d98	Hardlogbreakpoint
624	0x6f80	Heapsort
625	0x70b0	Heapsortex
626	0x71cd8	Initset
627	0x38b74	Insertdata
628	0x39f58	InsertnameW
629	0x3931c	Isdataavailable
630	0x39448	Isdatainrange
631	0xd3e68	Isguid
632	0x71d98	Isinset
633	0x8478c	Isnoreturn
634	0x2a28	IsrareA
635	0xad7fc	Isretaddr
636	0x18afc	Issortedinit
637	0x87480	Isstring
638	0x12900	Issystem
639	0x29c0	IstextA
640	0x2a00	IstextW
641	0x3918	Iszero
642	0x6ab4	Labeladdress
643	0x1a83c	Linecount
644	0x4a4c	Listalternatedatastreams
645	0x58f4c	Listmemory
646	0x1dfe8	Maketableareavisible
647	0x70a58	Maybecommand
648	0x3c70	Memalloc
649	0x32ac8	Membreakpoint
650	0x3ec4	Memdouble
651	0x3d7c	Memfree
652	0x32ce4	Memlogbreakpoint
653	0x3dbc	Mempurge
654	0x39694	Mergequickdata
655	0x28b98	Movecontrol
656	0x9e50	Moveprogress
657	0x1e14c	Movetableselection
658	0x40cdc	Nameoffloat
659	0xd19e0	Ndisasm
660	0x86ff0	Nesteddatatoudd
661	0xb8ebc	Newdumpselection
662	0xa9660	Opentaggedfile
663	0x867ec	Optostring
664	0x59ce4	Pastememoryhex
665	0x4fb14	Pauseprocess
666	0xd8d3c	Plugingetuniquedatatype
667	0xd8d0c	Pluginmodulechanged
668	0xd8cd0	Pluginpackedrecord
669	0xd8c9c	Pluginsaverecord
670	0xd8d7c	Pluginshowoptions
671	0xd8d5c	Plugintempbreakpoint
672	0x290dc	Preparedialog
673	0x40a24	Printfloat10
674	0x40854	Printfloat4
675	0x40940	Printfloat8
676	0x40cb0	Printmmx
677	0x20a30	Processwmmousewheel
678	0x39bcc	Quickinsertdata
679	0x39fa4	QuickinsertnameW
680	0x75b0	Quicktimerflush
681	0x74c4	Quicktimerstart
682	0x71f8	Readfile
683	0x7528	Quicktimerstop
684	0x58694	Readmemory
685	0x587cc	Readmemoryex
686	0x775c0	Redrawcpudisasm
687	0x775e0	Redrawcpureg
688	0x191e4	Redrawlist
689	0x960b8	Registermodifiedbyuser
690	0x68cc	Relativizepath
691	0x6e784	Removeanalysis
692	0xc7d24	Removehardbreakpoint
693	0x97744	Removeint3breakpoint
694	0xc70cc	Removemembreakpoint
695	0x71ff0	Removerange
696	0x1e314	Removetableselection
697	0x184d0	Renumeratesorteddata
698	0x2a6c	Replacegraphs
699	0x17f00	Replacesorteddatarange
700	0x4f444	Resumeallthreads
701	0x5054c	Runthread
702	0xa90d8	Savepackedrecord
703	0xa9058	Savetaggedrecord
704	0x856a8	Scan
705	0xb8410	Scrolldumpwindow
706	0x73ca4	Setactivetab
707	0x10b6d	_StrlenW
708	0x1e444	Setautoupdate
709	0x94a24	Setcondition
710	0x77df0	Setcpu
711	0xb7504	Setdumptype
712	0xc7de4	Sethardbreakpoint
713	0x97820	Setint3breakpoint
714	0xc7148	Setmembreakpoint
715	0x35098	Setrtcond
716	0x359fc	Setrtprot
717	0x9e74	Setstatus
718	0x1e23c	Settableselection
719	0xcb354	Showsourcecode
720	0x6ee4	Simpleaddress
721	0x85660	Skipspaces
722	0x712f8	Sortjumpdata
723	0x3ad8c	Sortsimpledata
724	0x188f8	Sortsorteddata
725	0x87d74	Squeezename
726	0x39068	Startnextdata
727	0x391a0	Startnextdatalist
728	0x3a13c	Startnextnamelist
729	0x261c	Stringfromini
730	0x87170	Stringtotext
731	0x83b60	Substitutehkeyprefix
732	0x1214c	Sunkenframe
733	0x4f3c4	Suspendallthreads
734	0x109a7	_StrcopyA
735	0x5b78c	Threadregisters
736	0x870a4	Uddtonesteddata
737	0x87dfc	Uncapitalize
738	0x32bc	Unicodebuffertoascii
739	0x3374	Unicodetoascii
740	0x3440	Unicodetoutf
741	0x186d8	Unmarknewsorteddata
742	0x73bec	Updateframe
743	0x1e368	Updatetable
744	0x74688	Updatetabs
745	0x3514	Utftounicode
746	0x4070	Virtalloc
747	0x4158	Virtfree
748	0x77bd8	Walkhistory
749	0x97d30	Wipebreakpointrange
750	0x58a4c	Writememory
751	0x109a7	StrcopyA
752	0x109d4	_StrcopyW
753	0x109d4	StrcopyW
754	0x10b4b	StrlenA
755	0x10b6d	StrlenW
756	0x10bb2	_HexprintA
757	0x10bb2	HexprintA
758	0x10c08	_HexprintW
759	0x10c08	HexprintW
760	0x10c6a	_Hexprint4A
761	0x10c6a	Hexprint4A
762	0x10cb5	_Hexprint4W
763	0x10cb5	Hexprint4W
764	0x10d0b	_Hexprint8A
765	0x10d0b	Hexprint8A
766	0x10d3a	_Hexprint8W
767	0x10d3a	Hexprint8W
768	0x10d6c	_SignedhexA
769	0x10d6c	SignedhexA
770	0x10dd0	_SignedhexW
771	0x10dd0	SignedhexW
772	0x10ed0	_Swapmem
773	0x10ed0	Swapmem
774	0x10e44	_HexdumpA
775	0x10e44	HexdumpA
776	0x10e87	_HexdumpW
777	0x10e87	HexdumpW
778	0x10f19	_Bitcount
779	0x10f19	Bitcount
780	0xf793c	_bincmd
781	0xf793c	bincmd
782	0x12fc44	_regname
783	0x12fc44	regname
784	0x12fca4	_regname64
785	0x12fca4	regname64
786	0x12fda4	_segname
787	0x12fda4	segname
788	0x12fdc4	_fpuname
789	0x12fdc4	fpuname
790	0x12fe04	_mmxname
791	0x12fe04	mmxname
792	0x12fe24	_ssename
793	0x12fe24	ssename
794	0x12fea4	_crname
795	0x12fea4	crname
796	0x12fee4	_drname
797	0x12fee4	drname
798	0x12ff04	_sizename
799	0x12ff04	sizename
800	0x12ff88	_sizekey
801	0x12ff88	sizekey
802	0x13000c	_sizeatt
803	0x13000c	sizeatt
804	0x17e7e0	_ollyfile
805	0x17e7e0	ollyfile
806	0x17e9e8	_ollydir
807	0x17e9e8	ollydir
808	0x17f410	_systemdir
809	0x17f410	systemdir
810	0x1d40cc	_plugindir
811	0x1d40cc	plugindir
812	0x17fe34	_hollyinst
813	0x17fe34	hollyinst
814	0x17fe38	_hwollymain
815	0x17fe38	hwollymain
816	0x17fe40	_hwclient
817	0x17fe40	hwclient
818	0x1d5408	_ottable
819	0x1d5408	ottable
820	0x17dd28	_cpufeatures
821	0x17dd28	cpufeatures
822	0x1d5564	_ischild
823	0x1d5564	ischild
824	0x1be69c	_asciicodepage
825	0x1be69c	asciicodepage
826	0x1be6a0	_mbcscodepage
827	0x1be6a0	mbcscodepage
828	0x1c892c	_tracefile
829	0x1c892c	tracefile
830	0x17feb8	_font
831	0x17feb8	font
832	0x182678	_sysfont
833	0x182678	sysfont
834	0x1828f4	_titlefont
835	0x1828f4	titlefont
836	0x182b70	_fixfont
837	0x182b70	fixfont
838	0x182df4	_color
839	0x182df4	color
840	0x182e84	_scheme
841	0x182e84	scheme
842	0x186246	_hilite
843	0x186246	hilite
844	0x1d45b0	_executable
845	0x1d45b0	executable
846	0x1d47b8	_arguments
847	0x1d47b8	arguments
848	0x1d4084	_netdbg
849	0x1d4084	netdbg
850	0x1d3a30	_rundll
851	0x1d3a30	rundll
852	0x1d5510	_process
853	0x1d5514	_processid
854	0x1d5510	process
855	0x1d5514	processid
856	0x1d5518	_mainthreadid
857	0x1d5518	mainthreadid
858	0x1d5568	_run
859	0x1d5568	run
860	0x1d560c	_skipsystembp
861	0x1d560c	skipsystembp
862	0x1d5520	_debugbreak
863	0x1d5520	debugbreak
864	0x1d5524	_dbgbreakpoint
865	0x1d5524	dbgbreakpoint
866	0x1d5528	_kiuserexcept
867	0x1d5528	kiuserexcept
868	0x1d552c	_zwcontinue
869	0x1d552c	zwcontinue
870	0x1d5538	_uefilter
871	0x1d5538	uefilter
872	0x1d5540	_ntqueryinfo
873	0x1d5540	ntqueryinfo
874	0x1d554c	_corexemain
875	0x1d554c	corexemain
876	0x1d5550	_peblock
877	0x1d5550	peblock
878	0x1d5554	_kusershareddata
879	0x1d5554	kusershareddata
880	0x1d5558	_userspacelimit
881	0x1d5558	userspacelimit
882	0x1cbbcc	_rtcond
883	0x1cbbcc	rtcond
884	0x1d380c	_rtprot
885	0x1d380c	rtprot
886	0x1d5618	_list
887	0x1d5618	list
888	0x1d5884	_premod
889	0x1d5884	premod
890	0x1d58c8	_module
891	0x1d58c8	module
892	0x1d5b34	_aqueue
893	0x1d5b34	aqueue
894	0x1d6050	_win
895	0x1d5b78	_thread
896	0x1d5b78	thread
897	0x1d5de4	_memory
898	0x1d5de4	memory
899	0x1d6050	win
900	0x1d62bc	_handles
901	0x1d62bc	handles
902	0x1d6528	_bpoint
903	0x1d6528	bpoint
904	0x1d6794	_bpmem
905	0x1d6794	bpmem
906	0x1d6a00	_bppage
907	0x1d6a00	bppage
908	0x1d6a44	_bphard
909	0x1d6a44	bphard
910	0x1d6cb0	_watch
911	0x1d6cb0	watch
912	0x1d6f1c	_patch
913	0x1d6f1c	patch
914	0x1d7188	_procdata
915	0x1d7188	procdata
916	0x1d71cc	_encaddr
917	0x1d71cc	encaddr
918	0x1d76e8	_sehchain
919	0x1d76e8	sehchain
920	0x1d7210	_source
921	0x1d7954	callstk
922	0x1d7954	_callstk
923	0x1d7210	source
924	0x1d747c	_srccode
925	0x1d747c	srccode
926	0x17fe9c	_restorewinpos
927	0x17fe9c	restorewinpos

module_name	ollydbg.exe
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	927
nNames	927
Names(927)	0x224ea4
Functions(927)	0x224028
NameOrdinals(927)	0x225d20

StringTable 040904E4

CompanyName	Softwareentwicklung Yuschuk
FileDescription	Free 32-bit Analysing Debugger
FileVersion	2.1.0.4
InternalName	OllyDbg
LegalCopyright	Copyright (C) 2000-2012 Oleh Yuschuk
LegalTrademarks
OriginalFilename	OllyDbg
ProductName	OllyDbg
ProductVersion	2.1.0.4
Comments

VS_FIXEDFILEINFO

FileVersion	2.1.0.4
ProductVersion	2.1.0.4
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	2650624	EXE	09/27/2013 21:49:33	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

ollydbg.exe-

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

ollydbg.exe
-