LoLSharp.exe

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	LoLSharp.exe
size	9318912 (0x8e3200)
md5	aaa261cde07af1da48096dd77d623fa6

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	0xa
TimeDateStamp	0x601fc20b
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.0
SizeOfCode	0x452800
SizeOfInitializedData	0x5d200
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa8739c
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x1356000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
Rb!/yH:`	0x1000	0x452623	0	R-X CODE
9Skcp:cP	0x454000	0x3815c	0	R-- IDATA
rExJa?+u	0x48d000	0x156a0	0	RW- IDATA
=@2!\S4i	0x4a3000	0xe628	0	R-- IDATA
1ZobqM#z	0x4b2000	0x40	0	R-- IDATA
7t@n.\o)	0x4b3000	9	0	RW- IDATA
6Xeftt&8	0x4b4000	0x5bc79f	0	R-X CODE IDATA
;D[>9)</	0xa71000	0x8e2804	0x8e2a00	R-X CODE IDATA
1f%G8SY$	0x1354000	0xec	0x200	R-- IDATA
zq?]$)#w	0x1355000	0x1d5	0x200	R-- IDATA

Data Directory

type	va	size
EXPORT	0xaee198	0xc4f
IMPORT	0x10a3820	0x21c
RESOURCE	0x1355000	0x1d5
EXCEPTION	0x1341ff0	0x11814
SECURITY	0	0
BASERELOC	0x1354000	0xec
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x10b9f68	0x30
LOAD_CONFIG	0x1341f50	0x94
Bound_IAT	0	0
IAT	0xa8d000	0xcc8
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x1410b9f90	0x1410b9f98	0x140495cf4	0	0	0x300000

show previews

type	name	size	cp
MANIFEST	#1	381	0

module_name	ord	function_name
d3d9.dll		Direct3DCreate9
d3dx9_43.dll		D3DXCreateTextureFromFileInMemory
d3dx9_43.dll		D3DXCreateTextureFromFileA
d3dx9_43.dll		D3DXMatrixMultiply
d3dx9_43.dll		D3DXCreateSprite
d3dx9_43.dll		D3DXCreateEffect
d3dx9_43.dll		D3DXMatrixTranslation
dwmapi.dll		DwmExtendFrameIntoClientArea
KERNEL32.dll		GetEnvironmentVariableW
KERNEL32.dll		VirtualAlloc
KERNEL32.dll		VirtualFree
KERNEL32.dll		GlobalLock
KERNEL32.dll		GlobalUnlock
KERNEL32.dll		GlobalAlloc
KERNEL32.dll		GlobalFree
KERNEL32.dll		QueryPerformanceFrequency
KERNEL32.dll		QueryPerformanceCounter
KERNEL32.dll		CreateToolhelp32Snapshot
KERNEL32.dll		Process32FirstW
KERNEL32.dll		GetCurrentProcessId
KERNEL32.dll		Process32NextW
KERNEL32.dll		CloseHandle
KERNEL32.dll		Sleep
KERNEL32.dll		GetTickCount
KERNEL32.dll		DeleteCriticalSection
KERNEL32.dll		ExitProcess
KERNEL32.dll		GetStdHandle
KERNEL32.dll		GetConsoleScreenBufferInfo
KERNEL32.dll		SetConsoleTextAttribute
KERNEL32.dll		CreateThread
KERNEL32.dll		OpenProcess
KERNEL32.dll		GetModuleHandleW
KERNEL32.dll		GetProcAddress
KERNEL32.dll		K32EnumProcessModulesEx
KERNEL32.dll		K32GetModuleBaseNameA
KERNEL32.dll		SetEvent
KERNEL32.dll		ResetEvent
KERNEL32.dll		WaitForSingleObjectEx
KERNEL32.dll		CreateEventW
KERNEL32.dll		IsDebuggerPresent
KERNEL32.dll		UnhandledExceptionFilter
KERNEL32.dll		SetUnhandledExceptionFilter
KERNEL32.dll		IsProcessorFeaturePresent
KERNEL32.dll		GetCurrentThreadId
KERNEL32.dll		GetSystemTimeAsFileTime
KERNEL32.dll		InitializeSListHead
KERNEL32.dll		LeaveCriticalSection
KERNEL32.dll		GetCurrentProcess
KERNEL32.dll		TerminateProcess
KERNEL32.dll		EnterCriticalSection
USER32.dll		GetSystemMetrics
USER32.dll		MessageBoxW
USER32.dll		MoveWindow
USER32.dll		FindWindowW
USER32.dll		SetWindowLongW
USER32.dll		SetWindowPos
USER32.dll		CreateWindowExW
USER32.dll		SetCapture
USER32.dll		RegisterClassExW
USER32.dll		LoadIconW
USER32.dll		DispatchMessageW
USER32.dll		TranslateMessage
USER32.dll		PeekMessageW
USER32.dll		DefWindowProcW
USER32.dll		PostQuitMessage
USER32.dll		GetKeyboardState
USER32.dll		DestroyWindow
USER32.dll		GetAsyncKeyState
USER32.dll		SendInput
USER32.dll		MapVirtualKeyW
USER32.dll		GetWindowRect
USER32.dll		ReleaseCapture
USER32.dll		GetCapture
USER32.dll		LoadCursorW
USER32.dll		SetCursor
USER32.dll		ScreenToClient
USER32.dll		GetCursorPos
USER32.dll		IsChild
USER32.dll		GetForegroundWindow
USER32.dll		SetCursorPos
USER32.dll		ClientToScreen
USER32.dll		GetKeyState
USER32.dll		GetClientRect
USER32.dll		SetClipboardData
USER32.dll		EmptyClipboard
USER32.dll		CloseClipboard
USER32.dll		GetClipboardData
USER32.dll		OpenClipboard
USER32.dll		FindWindowA
MSVCP140.dll		public: int __cdecl std::basic_istream<char, struct std::char_traits<char> >::peek(void) __ptr64 ?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
MSVCP140.dll		protected: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const & __ptr64) __ptr64 ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
MSVCP140.dll		protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) __ptr64 ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
MSVCP140.dll		protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char * __ptr64, __int64) __ptr64 ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
MSVCP140.dll		protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const * __ptr64, __int64) __ptr64 ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
MSVCP140.dll		protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char * __ptr64, __int64) __ptr64 ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
MSVCP140.dll		protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) __ptr64 ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
MSVCP140.dll		protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) __ptr64 ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
MSVCP140.dll		public: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) __ptr64 ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
MSVCP140.dll		public: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) __ptr64 ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
MSVCP140.dll		public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::snextc(void) __ptr64 ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
MSVCP140.dll		public: bool __cdecl std::basic_istream<char, struct std::char_traits<char> >::_Ipfx(bool) __ptr64 ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
MSVCP140.dll		public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sbumpc(void) __ptr64 ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
MSVCP140.dll		public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sgetc(void) __ptr64 ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
MSVCP140.dll		public: class std::locale __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::getloc(void)const __ptr64 ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
MSVCP140.dll		struct _iobuf * __ptr64 __cdecl std::_Fiopen(char const * __ptr64, int, int) ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
MSVCP140.dll		public: static unsigned __int64 __cdecl std::time_put<char, class std::ostreambuf_iterator<char, struct std::char_traits<char> > >::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64) ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
MSVCP140.dll		public: static class std::locale::id std::time_put<char, class std::ostreambuf_iterator<char, struct std::char_traits<char> > >::id ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
MSVCP140.dll		bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP140.dll		private: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Getgloballocale(void) ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
MSVCP140.dll		public: static unsigned __int64 __cdecl std::codecvt<char, char, struct _Mbstatet>::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64) ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
MSVCP140.dll		public: __cdecl std::_Lockit::~_Lockit(void) __ptr64 ??1_Lockit@std@@QEAA@XZ
MSVCP140.dll		private: static int std::locale::id::_Id_cnt ?_Id_cnt@id@locale@std@@0HA
MSVCP140.dll		public: static class std::locale::id std::codecvt<char, char, struct _Mbstatet>::id ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
MSVCP140.dll		public: __cdecl std::_Lockit::_Lockit(int) __ptr64 ??0_Lockit@std@@QEAA@H@Z
MSVCP140.dll		void __cdecl std::_Xlength_error(char const * __ptr64) ?_Xlength_error@std@@YAXPEBD@Z
MSVCP140.dll		void __cdecl std::_Xbad_alloc(void) ?_Xbad_alloc@std@@YAXXZ
MSVCP140.dll		void __cdecl std::_Xbad_function_call(void) ?_Xbad_function_call@std@@YAXXZ
MSVCP140.dll		void __cdecl std::_Xout_of_range(char const * __ptr64) ?_Xout_of_range@std@@YAXPEBD@Z
MSVCP140.dll		public: virtual __cdecl std::ios_base::~ios_base(void) __ptr64 ??1ios_base@std@@UEAA@XZ
MSVCP140.dll		_Xtime_get_ticks
MSVCP140.dll		protected: __cdecl std::ios_base::ios_base(void) __ptr64 ??0ios_base@std@@IEAA@XZ
MSVCP140.dll		protected: void __cdecl std::ios_base::_Init(void) __ptr64 ?_Init@ios_base@std@@IEAAXXZ
MSVCP140.dll		public: char __cdecl std::basic_ios<char, struct std::char_traits<char> >::widen(char)const __ptr64 ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
MSVCP140.dll		public: void __cdecl std::ios_base::clear(int, bool) __ptr64 ?clear@ios_base@std@@QEAAXH_N@Z
MSVCP140.dll		protected: __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64 ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
MSVCP140.dll		public: virtual __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP140.dll		public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
MSVCP140.dll		public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
MSVCP140.dll		public: class std::locale __cdecl std::ios_base::getloc(void)const __ptr64 ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
MSVCP140.dll		public: class std::ostreambuf_iterator<char, struct std::char_traits<char> > __cdecl std::time_put<char, class std::ostreambuf_iterator<char, struct std::char_traits<char> > >::put(class std::ostreambuf_iterator<char, struct std::char_traits<char> >, class std::ios_base & __ptr64, char, struct tm const * __ptr64, char const * __ptr64, char const * __ptr64)const __ptr64 ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
MSVCP140.dll		_Thrd_sleep
MSVCP140.dll		class std::basic_ostream<char, struct std::char_traits<char> > std::cout ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
MSVCP140.dll		public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::put(char) __ptr64 ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
MSVCP140.dll		public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned int) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
MSVCP140.dll		__int64 const std::_BADOFF ?_BADOFF@std@@3_JB
IMM32.dll		ImmReleaseContext
IMM32.dll		ImmGetContext
IMM32.dll		ImmSetCompositionWindow
XINPUT1_3.dll	4
XINPUT1_3.dll	2
WS2_32.dll	115
WS2_32.dll	8
WS2_32.dll	9
WS2_32.dll	4
WS2_32.dll	19
WS2_32.dll	23
WS2_32.dll	16
WS2_32.dll	3
WS2_32.dll	116
VCRUNTIME140.dll		__C_specific_handler
VCRUNTIME140.dll		__vcrt_InitializeCriticalSectionEx
VCRUNTIME140.dll		strchr
VCRUNTIME140.dll		wcsstr
VCRUNTIME140.dll		__CxxFrameHandler3
VCRUNTIME140.dll		__std_terminate
VCRUNTIME140.dll		_CxxThrowException
VCRUNTIME140.dll		memmove
VCRUNTIME140.dll		__std_exception_copy
VCRUNTIME140.dll		memcpy
VCRUNTIME140.dll		__std_exception_destroy
VCRUNTIME140.dll		memcmp
VCRUNTIME140.dll		_purecall
VCRUNTIME140.dll		memset
VCRUNTIME140.dll		memchr
VCRUNTIME140.dll		strstr
api-ms-win-crt-time-l1-1-0.dll		_gmtime64
api-ms-win-crt-time-l1-1-0.dll		_time64
api-ms-win-crt-time-l1-1-0.dll		clock
api-ms-win-crt-time-l1-1-0.dll		_localtime64
api-ms-win-crt-time-l1-1-0.dll		strftime
api-ms-win-crt-math-l1-1-0.dll		atan2f
api-ms-win-crt-math-l1-1-0.dll		roundf
api-ms-win-crt-math-l1-1-0.dll		ceilf
api-ms-win-crt-math-l1-1-0.dll		__setusermatherr
api-ms-win-crt-math-l1-1-0.dll		sqrtf
api-ms-win-crt-math-l1-1-0.dll		sinf
api-ms-win-crt-math-l1-1-0.dll		cosf
api-ms-win-crt-math-l1-1-0.dll		_dsign
api-ms-win-crt-math-l1-1-0.dll		_dtest
api-ms-win-crt-math-l1-1-0.dll		fmod
api-ms-win-crt-math-l1-1-0.dll		floorf
api-ms-win-crt-math-l1-1-0.dll		floor
api-ms-win-crt-math-l1-1-0.dll		_fdtest
api-ms-win-crt-math-l1-1-0.dll		sqrt
api-ms-win-crt-runtime-l1-1-0.dll		_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll		terminate
api-ms-win-crt-runtime-l1-1-0.dll		_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll		_c_exit
api-ms-win-crt-runtime-l1-1-0.dll		__p___argv
api-ms-win-crt-runtime-l1-1-0.dll		__p___argc
api-ms-win-crt-runtime-l1-1-0.dll		_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll		_exit
api-ms-win-crt-runtime-l1-1-0.dll		_wassert
api-ms-win-crt-runtime-l1-1-0.dll		_errno
api-ms-win-crt-runtime-l1-1-0.dll		_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll		_initterm
api-ms-win-crt-runtime-l1-1-0.dll		_get_initial_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll		abort
api-ms-win-crt-runtime-l1-1-0.dll		_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll		_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll		_cexit
api-ms-win-crt-runtime-l1-1-0.dll		system
api-ms-win-crt-runtime-l1-1-0.dll		exit
api-ms-win-crt-runtime-l1-1-0.dll		_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll		_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll		_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll		_crt_atexit
api-ms-win-crt-heap-l1-1-0.dll		_set_new_mode
api-ms-win-crt-heap-l1-1-0.dll		malloc
api-ms-win-crt-heap-l1-1-0.dll		free
api-ms-win-crt-heap-l1-1-0.dll		_callnewh
api-ms-win-crt-string-l1-1-0.dll		strcpy
api-ms-win-crt-string-l1-1-0.dll		strcmp
api-ms-win-crt-string-l1-1-0.dll		wcslen
api-ms-win-crt-string-l1-1-0.dll		strncpy
api-ms-win-crt-string-l1-1-0.dll		tolower
api-ms-win-crt-string-l1-1-0.dll		strlen
api-ms-win-crt-string-l1-1-0.dll		isalnum
api-ms-win-crt-stdio-l1-1-0.dll		fread
api-ms-win-crt-stdio-l1-1-0.dll		__stdio_common_vsprintf_s
api-ms-win-crt-stdio-l1-1-0.dll		ftell
api-ms-win-crt-stdio-l1-1-0.dll		fclose
api-ms-win-crt-stdio-l1-1-0.dll		fseek
api-ms-win-crt-stdio-l1-1-0.dll		_wfopen
api-ms-win-crt-stdio-l1-1-0.dll		__stdio_common_vsprintf
api-ms-win-crt-stdio-l1-1-0.dll		fputc
api-ms-win-crt-stdio-l1-1-0.dll		_set_fmode
api-ms-win-crt-stdio-l1-1-0.dll		ungetc
api-ms-win-crt-stdio-l1-1-0.dll		_get_stream_buffer_pointers
api-ms-win-crt-stdio-l1-1-0.dll		setvbuf
api-ms-win-crt-stdio-l1-1-0.dll		fsetpos
api-ms-win-crt-stdio-l1-1-0.dll		__acrt_iob_func
api-ms-win-crt-stdio-l1-1-0.dll		fwrite
api-ms-win-crt-stdio-l1-1-0.dll		__p__commode
api-ms-win-crt-stdio-l1-1-0.dll		fgetpos
api-ms-win-crt-stdio-l1-1-0.dll		_fseeki64
api-ms-win-crt-stdio-l1-1-0.dll		fflush
api-ms-win-crt-stdio-l1-1-0.dll		__stdio_common_vfprintf
api-ms-win-crt-stdio-l1-1-0.dll		fgetc
api-ms-win-crt-stdio-l1-1-0.dll		__stdio_common_vsscanf
api-ms-win-crt-utility-l1-1-0.dll		rand
api-ms-win-crt-utility-l1-1-0.dll		qsort
api-ms-win-crt-utility-l1-1-0.dll		llabs
api-ms-win-crt-convert-l1-1-0.dll		strtoull
api-ms-win-crt-convert-l1-1-0.dll		strtoll
api-ms-win-crt-convert-l1-1-0.dll		strtod
api-ms-win-crt-filesystem-l1-1-0.dll		_lock_file
api-ms-win-crt-filesystem-l1-1-0.dll		_unlock_file
api-ms-win-crt-locale-l1-1-0.dll		localeconv
api-ms-win-crt-locale-l1-1-0.dll		_configthreadlocale
ntdll.dll		RtlLookupFunctionEntry
ntdll.dll		RtlCaptureContext
ntdll.dll		RtlVirtualUnwind
WTSAPI32.dll		WTSSendMessageW
KERNEL32.dll		GetSystemTimeAsFileTime
KERNEL32.dll		GetModuleHandleA
KERNEL32.dll		CreateEventA
KERNEL32.dll		GetModuleFileNameW
KERNEL32.dll		LoadLibraryA
KERNEL32.dll		TerminateProcess
KERNEL32.dll		GetCurrentProcess
KERNEL32.dll		CreateToolhelp32Snapshot
KERNEL32.dll		Thread32First
KERNEL32.dll		GetCurrentProcessId
KERNEL32.dll		GetCurrentThreadId
KERNEL32.dll		OpenThread
KERNEL32.dll		Thread32Next
KERNEL32.dll		CloseHandle
KERNEL32.dll		SuspendThread
KERNEL32.dll		ResumeThread
KERNEL32.dll		WriteProcessMemory
KERNEL32.dll		GetSystemInfo
KERNEL32.dll		VirtualAlloc
KERNEL32.dll		VirtualProtect
KERNEL32.dll		VirtualFree
KERNEL32.dll		GetProcessAffinityMask
KERNEL32.dll		SetProcessAffinityMask
KERNEL32.dll		GetCurrentThread
KERNEL32.dll		SetThreadAffinityMask
KERNEL32.dll		Sleep
KERNEL32.dll		FreeLibrary
KERNEL32.dll		GetTickCount
KERNEL32.dll		SystemTimeToFileTime
KERNEL32.dll		FileTimeToSystemTime
KERNEL32.dll		GlobalFree
KERNEL32.dll		LocalAlloc
KERNEL32.dll		LocalFree
KERNEL32.dll		GetProcAddress
KERNEL32.dll		ExitProcess
KERNEL32.dll		EnterCriticalSection
KERNEL32.dll		LeaveCriticalSection
KERNEL32.dll		InitializeCriticalSection
KERNEL32.dll		DeleteCriticalSection
KERNEL32.dll		GetModuleHandleW
KERNEL32.dll		LoadResource
KERNEL32.dll		MultiByteToWideChar
KERNEL32.dll		FindResourceExW
KERNEL32.dll		FindResourceExA
KERNEL32.dll		WideCharToMultiByte
KERNEL32.dll		GetThreadLocale
KERNEL32.dll		GetUserDefaultLCID
KERNEL32.dll		GetSystemDefaultLCID
KERNEL32.dll		EnumResourceNamesA
KERNEL32.dll		EnumResourceNamesW
KERNEL32.dll		EnumResourceLanguagesA
KERNEL32.dll		EnumResourceLanguagesW
KERNEL32.dll		EnumResourceTypesA
KERNEL32.dll		EnumResourceTypesW
KERNEL32.dll		CreateFileW
KERNEL32.dll		LoadLibraryW
KERNEL32.dll		GetLastError
KERNEL32.dll		FlushFileBuffers
KERNEL32.dll		CreateFileA
KERNEL32.dll		WriteConsoleW
KERNEL32.dll		GetConsoleOutputCP
KERNEL32.dll		WriteConsoleA
KERNEL32.dll		SetStdHandle
KERNEL32.dll		FlsSetValue
KERNEL32.dll		GetCommandLineA
KERNEL32.dll		RaiseException
KERNEL32.dll		RtlPcToFileHeader
KERNEL32.dll		RtlLookupFunctionEntry
KERNEL32.dll		RtlUnwindEx
KERNEL32.dll		HeapFree
KERNEL32.dll		GetCPInfo
KERNEL32.dll		GetACP
KERNEL32.dll		GetOEMCP
KERNEL32.dll		IsValidCodePage
KERNEL32.dll		EncodePointer
KERNEL32.dll		DecodePointer
KERNEL32.dll		FlsGetValue
KERNEL32.dll		FlsFree
KERNEL32.dll		SetLastError
KERNEL32.dll		FlsAlloc
KERNEL32.dll		UnhandledExceptionFilter
KERNEL32.dll		SetUnhandledExceptionFilter
KERNEL32.dll		IsDebuggerPresent
KERNEL32.dll		RtlVirtualUnwind
KERNEL32.dll		RtlCaptureContext
KERNEL32.dll		HeapAlloc
KERNEL32.dll		LCMapStringA
KERNEL32.dll		LCMapStringW
KERNEL32.dll		SetHandleCount
KERNEL32.dll		GetStdHandle
KERNEL32.dll		GetFileType
KERNEL32.dll		GetStartupInfoA
KERNEL32.dll		GetModuleFileNameA
KERNEL32.dll		FreeEnvironmentStringsA
KERNEL32.dll		GetEnvironmentStrings
KERNEL32.dll		FreeEnvironmentStringsW
KERNEL32.dll		GetEnvironmentStringsW
KERNEL32.dll		HeapSetInformation
KERNEL32.dll		HeapCreate
KERNEL32.dll		HeapDestroy
KERNEL32.dll		QueryPerformanceCounter
KERNEL32.dll		GetStringTypeA
KERNEL32.dll		GetStringTypeW
KERNEL32.dll		GetLocaleInfoA
KERNEL32.dll		HeapSize
KERNEL32.dll		WriteFile
KERNEL32.dll		SetFilePointer
KERNEL32.dll		GetConsoleCP
KERNEL32.dll		GetConsoleMode
KERNEL32.dll		HeapReAlloc
KERNEL32.dll		InitializeCriticalSectionAndSpinCount
USER32.dll		GetUserObjectInformationW
USER32.dll		CharUpperBuffW
USER32.dll		MessageBoxW
USER32.dll		GetProcessWindowStation
KERNEL32.dll		LocalAlloc
KERNEL32.dll		LocalFree
KERNEL32.dll		GetModuleFileNameW
KERNEL32.dll		GetProcessAffinityMask
KERNEL32.dll		SetProcessAffinityMask
KERNEL32.dll		SetThreadAffinityMask
KERNEL32.dll		Sleep
KERNEL32.dll		ExitProcess
KERNEL32.dll		FreeLibrary
KERNEL32.dll		LoadLibraryA
KERNEL32.dll		GetModuleHandleA
KERNEL32.dll		GetProcAddress
USER32.dll		GetProcessWindowStation
USER32.dll		GetUserObjectInformationW

ord

entry_va

function_name

61 13 e8 12 0f 0a 7f 75  a9 37 87 86 eb c8 ab 73  |a......u.7.....s|
f7 7e 6e 18 55 c4 44 c5  d0 2c 67 45 54 5e c6 2f  |.~n.U.D..,gET^./|
ae ef f8 18 da 84 07 c0  3d 37 0f 47 e9 4c fa fa  |........=7.G.L..|
66 82 64 60 84 96 4d 83  32 d2 48 8e f5 39 4b ee  |f.d`..M.2.H..9K.|
ea 1f ac de e3 4a 9c 17  a2 67 87 24 37 ee 48 fd  |.....J...g.$7.H.|
fa c7 82 67 c7 bd 92 47  c1 a4 7b e2 ec 30 22 40  |...g...G..{..0"@|
5f 66 d5 11 c6 2a f4 ef  11 c6 1a 4b 6c 06 31 c6  |_f...*.....Kl.1.|
f7 24 e6 7a d5 b9 b8 4c  72 71 b2 51 ab 8d 11 6c  |.$.z...Lrq.Q...l|
4a 2f 59 a0 d2 d4 1d c8  33 76 fd 2e d5 4b 26 23  |J/Y.....3v...K&#|
93 92 bf 2b 98 70 b3 51  25 2d b0 2d 59 fa b3 45  |...+.p.Q%-.-Y..E|
5b 84 2f 40 0b 5f 74 a2  a5 3c 83 01 f5 dd eb 65  |[./@._t..<.....e|
fa b3 4f d0 ab 26 4d 18  34 6f cd 0e 50 8b 79 1d  |..O..&M.4o..P.y.|
b7 19 66 e8 a7 44 30 01  fb 82 8c 3d fe 40 1a 61  |..f..D0....=.@.a|
cb 48 6e 83 e2 88 24 68  e9 f4 77 4d 1e 31 25 cc  |.Hn...$h..wM.1%.|
f8 40 20 d5 92 5f d6 6c  b9 d7 0f 20 db 58 1f f2  |.@ .._.l... .X..|
99 39 87 a2 43 25 a9 8b  87 9c ac 0c 87 46 4c af  |.9..C%.......FL.|
2c 74 11 88 6c f2 c3 f2  5c eb 94 aa a6 f0 3b f5  |,t..l...\.....;.|
e9 0f 9a d1 84 71 a2 51  c0 6c 83 2c 80 85 5a 24  |.....q.Q.l.,..Z$|
51 d0 03 c4 89 a4 28 25  ce 96 3d a2 31 38 03 4d  |Q.....(%..=.18.M|
39 fa b9 75 96 43 2b 8c  bd 09 22 d5 35 91 8d 8e  |9..u.C+...".5...|
5f 18 d1 12 70 7e 07 16  f4 d1 b9 90 fe c1 df dd  |_...p~..........|
76 ce 0e 37 19 d5 ae 92  99 41 c5 f2 83 ec fa 58  |v..7.....A.....X|
3d ae 70 3d 5d 6b b7 df  24 b9 51 c0 4a 81 8d 91  |=.p=]k..$.Q.J...|
05 01 d0 07 63 4a ef 3e  66 82 3f b3 7d 01 85 e9  |....cJ.>f.?.}...|
c8 9c 63 d5 3e be 67 1f  26 92 5d c5 fd d3 1e d6  |..c.>.g.&.].....|
3b ad 52 16 7d 23 05 70  26 63 72 8a eb 99 6b b5  |;.R.}#.p&cr...k.|
54 8e 44 30 38 ae 14 73  b8 c0 4c f4 3b f6 f4 9d  |T.D08..s..L.;...|
63 13 75 5a 25 47 56 88  51 19 d6 2f 46 67 3a 2e  |c.uZ%GV.Q../Fg:.|
a1 57 c0 64 23 52 92 02  8f cd 22 66 57 0c 4b 5d  |.W.d#R...."fW.K]|
be 14 b2 8d cc 82 24 ef  d4 81 f8 1d bc 7e 54 ca  |......$......~T.|
ed 6a 99 4f 08 a8 8a 73  50 69 72 f7 d9 9b ae 0e  |.j.O...sPir.....|
fc b7 94 30 98 04 7d 10  10 1c 7a 92 32 d7 70 87  |...0..}...z.2.p.|
e2 61 a3 11 29 12 f6 75  92 e3 69 ca fe 8d 7e 2f  |.a..)..u..i...~/|
49 a8 39 01 e2 5f c9 d6  56 8c 8e 93 bc ce 1a 64  |I.9.._..V......d|
23 78 48 8c f9 55 a9 b6  67 b3 c4 c3 b8 32 f1 40  |#xH..U..g....2.@|
3b 36 55 09 3a 0d c2 38  71 9a 7d 66 a5 25 af 64  |;6U.:..8q.}f.%.d|
43 91 85 6a 1f 1b c4 ed  ce f2 d5 0b aa bb 0f c8  |C..j............|
e3 d3 30 11 de 66 75 a9  1b 32 a4 96 ec 7f 64 0f  |..0..fu..2....d.|
cb 30 6c 18 f6 f0 bf d1  c0 de 85 8f ac bf b3 51  |.0l............Q|
45 96 a3 27 c5 ab c4 28  86 e2 f1 73 c5 e3 bd 71  |E..'...(...s...q|
3b fd 21 43 10 c7 e7 a0  25 d9 4b 02 cb 39 11 e7  |;.!C....%.K..9..|
d5 3a 21 9d 19 81 e4 2f  54 61 6b 10 94 c0 97 19  |.:!..../Tak.....|
81 48 de 63 2e 75 db 99  5b e9 36 56 49 86 2b 1f  |.H.c.u..[.6VI.+.|
82 1f a9 0c b7 ec e0 c4  9e 85 29 c2 75 66 a0 9b  |..........).uf..|
83 fe 71 ad c8 33 0f 82  34 b8 e9 c7 19 69 db 8a  |..q..3..4....i..|
29 c5 56 4a 31 db 96 eb  f0 4a d7 28 37 88 5b 10  |).VJ1....J.(7.[.|
9b b8 ba 9f 8a 1e 4a 24  77 14 1b 51 64 09 ce c5  |......J$w..Qd...|
9c d6 d1 f7 4b 9b 37 32  ca 51 b6 1f 5a 40 9f 90  |....K.72.Q..Z@..|
15 ab 30 f8 d3 b7 2a 4a  dd ee 94 b5 07 ee 85 6d  |..0...*J.......m|
a4 1c 5b 76 81 61 c7 25  a1 dc 1a 4a 17 89 16 3f  |..[v.a.%...J...?|
b1 37 d9 be b8 66 1b c6  95 5d 35 79 11 8a 54 a3  |.7...f...]5y..T.|
fb 85 c5 6c fe 43 a4 d6  db d4 6b 11 d8 c4 bf be  |...l.C....k.....|
27 da 57 b7 ff f1 e4 6c  c1 1b 6e e5 47 2e e4 0d  |'.W....l..n.G...|
d0 a4 79 c3 26 3c 78 de  56 c6 a5 1e 3b b5 ed b5  |..y.&.>|
13 4f e9 f0 39 db 8b 5b  97 4d f1 e9 6d 91 82 88  |.O..9..[.M..m...|
4a 37 24 22 68 e5 12 20  f6 18 11 e4 73 16 b9 7b  |J7$"h.. ....s..{|
f8 9e 68 e1 2b 36 83 ac  97 88 3d f4 c1 64 69 44  |..h.+6....=..diD|
2e 20 17 ee 97 0e 0e a2  af 3f 4e 77 1a 3c 45 66  |. .......?Nw..b....J~../..k.|
bb 41 dd 94 c7 ea 4f eb  5a 9a f7 05 24 0e e5 1c  |.A....O.Z...$...|
80 d5 4f ac e0 18 7f b0  f5 ae 78 df bc 89 71 2b  |..O.......x...q+|
cb 52 50 72 13 52 4e 1e  db 64 58 8e c5 27 6c 9f  |.RPr.RN..dX..'l.|
94 9b ec a7 70 e4 44 b6  13 6a c1 f5 67 7c 12 6a  |....p.D..j..g|.j|
95 bc 33 08 14 fc 51 cf  31 c0 e7 5f 97 a0 88 37  |..3...Q.1.._...7|
e2 be 41 1e b9 74 5c dd  6c 09 18 c7 b4 85 79 b8  |..A..t\.l.....y.|
fa 72 54 8e 43 25 4e 46  2a 58 48 b1 0c bd 94 79  |.rT.C%NF*XH....y|
4d c2 e0 ea 50 34 27 2e  0f 86 a7 f0 f2 57 2b 2e  |M...P4'......W+.|
d6 85 95 01 ca 67 8b ca  0e 7a af 01 4d a3 bb 80  |.....g...z..M...|
a6 4c 78 ab 79 71 55 b0  f9 01 b1 50 25 0c 7f e4  |.Lx.yqU....P%...|
f5 31 6b a0 8b c5 25 28  16 97 e7 90 36 dd 7f 68  |.1k...%(....6..h|
b3 a8 46 42 ad e1 6e 75  a2 bd 88 88 81 9e a0 7f  |..FB..nu........|
19 d1 df f0 18 25 0b b0  70 c5 d0 e4 58 da b4 54  |.....%..p...X..T|
b1 45 9f d5 1b 1c 4a 0f  70 25 16 02 f1 71 0c 1e  |.E....J.p%...q..|
f4 e6 0f b9 b7 cf 01 b7  40 c0 5a 46 77 eb 04 e9  |........@.ZFw...|
ce b4 e9 50 a3 1b 18 13  be c1 d5 66 95 47 16 ea  |...P.......f.G..|
b3 97 2c 88 e5 f2 1f 97  1a e3 8c c1 0d c7 69 51  |..,...........iQ|
ae af 21 de dc 3d d8 1c  de c4 d8 26 bf c8 64 90  |..!..=.....&..d.|
72 2b 7a 2b 53 1f 50 2b  88 33 81 29 45 0a b7 b8  |r+z+S.P+.3.)E...|
67 8f d4 73 8f c7 e2 4b  93 01 43 74 f5 82 f2 3e  |g..s...K..Ct...>|
40 8f d3 38 e2 c9 d4 54  0a 53 66 92 80 2f 91 52  |@..8...T.Sf../.R|
84 54 a7 c5 39 e1 df bf  95 6f 4d 47 f3 e4 8e 29  |.T..9....oMG...)|
24 d4 a5 06 2b cd c0 77  90 0e 7f 55 53 1c f0 d3  |$...+..w...US...|
85 9f d1 4f 8b 96 4c 23  91 2b c1 59 a6 44 dc 08  |...O..L#.+.Y.D..|
95 30 f1 32 f9 66 7b fc  01 52 21 10 86 14 a1 f5  |.0.2.f{..R!.....|
5b 39 1d cd ec d4 7b 9e  a6 73 03 ab 31 59 d1 96  |[9....{..s..1Y..|
83 7a cc 9c cc 37 41 d0  37 31 36 a3 16 c4 46 f7  |.z...7A.716...F.|
70 8b ea 44 76 71 13 60  68 2e 04 01 e9 bf b9 13  |p..Dvq.`h.......|
cc b0 60 68 57 c4 a0 e5  7e 61 bd b4 b3 b9 51 99  |..`hW...~a....Q.|
9c a5 2c 77 75 22 8c 1c  5f e1 4e 5f 5c 78 32 43  |..,wu".._.N_\x2C|
c8 73 69 fe 82 f7 fe 2e  9c bb 48 ab 42 67 0e 22  |.si.......H.Bg."|
31 ba 68 f2 6b 03 b5 88  08 ba fb 93 c5 e8 30 6e  |1.h.k.........0n|
3e 08 b9 0b e8 1e 13 a4  44 be 7e 37 5b a3 17 da  |>.......D.~7[...|
ef 22 3d 84 0e 13 af 5f  d1 88 40 aa 19 57 78 5f  |."=...._..@..Wx_|
eb 57 b6 fd 59 69 e8 c4  a1 8c 19 c7 4b 28 5d 11  |.W..Yi......K(].|
8f 55 d8 3e c5 37 f1 5f  22 3f dc 79 7d f0 a7 e6  |.U.>.7._"?.y}...|
81 6f 58 0b 58 ee e0 0e  d1 6a 66 92 12 14 27 95  |.oX.X....jf...'.|
bc f3 fc f4 32 b4 c4 cc  4f 77 ab 97 cc c7 aa d7  |....2...Ow......|
a4 7e 2d ab 9d 28 ad 87  66 c2 c8 91 e5 e9 8c 3f  |.~-..(..f......?|
15 42 82 c5 23 b8 46 eb  a5 eb 18 5e 96 cd 45 0a  |.B..#.F....^..E.|
6f db d5 1a 93 72 58 39  66 23 b7 ff ac 0f f9 e7  |o....rX9f#......|
ab 24 54 8b 9e 51 67 0a  65 fc 22 6e 1b 5d 0d d7  |.$T..Qg.e."n.]..|
ec fe 88 58 db 8e bb 2e  4b 3e 3b e0 85 ce 30 6c  |...X....K>;...0l|
09 a7 71 6b de f2 ef f3  43 2e df 29 d2 b1 ee 23  |..qk....C..)...#|
1f 85 8d aa c6 24 87 f7  04 e8 f3 78 3f 57 44 2f  |.....$.....x?WD/|
26 7a ec c9 cf f4 f7 fb  66 29 77 37 e7 ea a7 ce  |&z......f)w7....|
fb b0 42 17 df b9 3f 2d  f0 1e 92 51 de 3c 1e 16  |..B...?-...Q.<..|
73 ed ef 50 95 92 6e f9  ea 37 26 04 39 0f 4b c1  |s..P..n..7&.9.K.|
ea 63 18 eb de bd 3c e3  e8 f9 5d b5 9d 71 fc 89  |.c....<...]..q..|
53 7b 33 6e 03 69 14 48  61 ca bc 3e 58 05 40 e8  |S{3n.i.Ha..>X.@.|
49 29 94 38 b5 81 a8 39  37 41 30 b8 e6 d2 ee f6  |I).8...97A0.....|
9d bc 87 55 23 ff ff 45  cd 75 9e 58 8c 1a 41 32  |...U#..E.u.X..A2|
e7 ad 51 50 86 3c 05 4e  97 56 f6 30 db 1f d9 51  |..QP.<.N.V.0...Q|
9b 70 4f fc 33 bb 1b 54  27 f0 c3 0a 4f fd 5c 13  |.pO.3..T'...O.\.|
8d c1 fa 4c a9 84 25 47  3d 46 36 b3 d1 77 76 8e  |...L..%G=F6..wv.|
8d f9 02 9c a4 e8 a2 da  5b 98 39 4f d0 45 f5 02  |........[.9O.E..|
71 5a 53 88 2b d9 31 ce  4e bd 03 21 cf 64 52 a6  |qZS.+.1.N..!.dR.|
27 60 ac b4 9d 36 a8 c4  c8 6c 1f e5 72 e8 c3 fa  |'`...6...l..r...|
42 90 ae 26 49 1d a4 8e  65 8e 87 9a 92 4e 4d 98  |B..&I...e....NM.|
0e cd eb 87 f5 38 14 7f  43 8e 2a d0 cb 44 50 7e  |.....8..C.*..DP~|
9f 21 f6 07 77 12 cd 39  0f 2d 03 02 8b 83 9b 65  |.!..w..9.-.....e|
de 91 74 1a 3c e4 9d 7e  14 c9 a2 d9 26 99 7b 0f  |..t.<..~....&.{.|
9e 6d 29 54 dd 64 53 03  4e 36 46 05 de 38 c6 13  |.m)T.dS.N6F..8..|
27 9e 8d 37 b2 97 53 39  f6 08 64 88 ff 0b f5 b4  |'..7..S9..d.....|
c7 7a d7 fa d8 21 2a a4  19 66 39 0d e4 81 ab ab  |.z...!*..f9.....|
6a 0c 91 6b 4e 11 96 a8  9b 5a de 2f 8c 22 c9 7a  |j..kN....Z./.".z|
1a 6f 26 aa f7 b8 1f 59  58 9f 55 cd 2a 5a 7b 3c  |.o&....YX.U.*Z{<|
1f 15 71 0b b7 74 9d 4c  a6 f4 17 de b2 4c ce 71  |..q..t.L.....L.q|
85 9a 4f 58 7c 01 d2 64  6b 68 a8 ba 6e a0 3a 55  |..OX|..dkh..n.:U|
b1 97 ae ab cd c7 73 a6  af ad 26 ee 0c 57 b4 ab  |......s...&..W..|
6e ed 9f b9 df 33 b8 88  a4 e8 d5 0e 29 17 c0 8f  |n....3......)...|
ff 97 61 a6 a1 78 72 be  c1 81 37 7b 67 7a fe 42  |..a..xr...7{gz.B|
ae 7b f7 cd 4d ec 97 0e  49 70 13 c3 fe e3 bb 81  |.{..M...Ip......|
5d ba b5 1b f7 d3 cf 1e  5e 90 8b 63 48 4b 03 d0  |].......^..cHK..|
13 7f ce d2 24 af 0c c3  13 70 2a 1e ce 91 ad 4b  |....$....p*....K|
11 4d 69 e9 cb 0f 90 d4  f8 20 f5 c9 e3 49 ed 75  |.Mi...... ...I.u|
dc 53 2c 4d 77 e0 06 f7  30 ff fa 21 a8 0e e7 8b  |.S,Mw...0..!....|
d5 3c 50 ba c9 41 8c 75  f9 15 df 95 a4 d2 bb 54  |.

module_name
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0xaee1c6
Functions(1)	0xaee1c0
NameOrdinals(1)	0xaee1c4

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	9313328	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x495cf4