46620 (588405), страница 14
Текст из файла (страница 14)
Flags: 818Eh
OPTIONAL HEADER :
Magic 010Bh ( PE32 : normal 32-bit )
Linker version 2.25
Size of code 0010EA00h
Size of initialized data 0005CE00h
Size of uninitialized data 00000000h
Address of Entry Point (RVA) 0010F780h
Base of code 00001000h
Base of data 00110000h
Image base 00400000h
Section Alignment 00001000h
File Alignment 00000200h
Required OS version 4.00
Image version 0.00
Subsystem version 4.00
Reserved1 0
Size of image 00172000h ( 1515520 bytes)
Size of headers 00000400h
Checksum 00000000h
Subsystem 0002h (Image runs in the Windows GUI subsystem)
DLL Characteristics 0000h
Size of Stack Reserve 00100000h
Size of Stack Commit 00004000h
Size of Heap Reserve 00100000h
Size of Heap Commit 00001000h
loader flags 00000000h (obsolete)
Number of Data Directory 00000010h
DATA DIRECTORY (Virtual Address and Size)
Export Directory rva: 00000000h size: 00000000h
Import Directory rva: 00116000h size: 00002AD8h
Resource Directory rva: 00131000h size: 00040A00h
Exception table rva: 00000000h size: 00000000h
Security table rva: 00000000h size: 00000000h
Base Relocation table rva: 0011B000h size: 00015F10h
Debug Directory rva: 00000000h size: 00000000h
Architecture Specific Data rva: 00000000h size: 00000000h
Global Pointer rva: 00000000h size: 00000000h
TLS Directory rva: 0011A000h size: 00000018h
Load config table rva: 00000000h size: 00000000h
Bound Import table rva: 00000000h size: 00000000h
Import Address Table rva: 00000000h size: 00000000h
Delay import descriptor rva: 00000000h size: 00000000h
COM descriptor rva: 00000000h size: 00000000h
unused rva: 00000000h size: 00000000h
SECTION TABLE
01 CODE
VirtSize: 0010E820h VirtAddr: 00001000h
raw data offs: 00000400h raw data size: 0010EA00h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: 60000020h
CODE EXECUTE READ ALIGN_DEFAULT(16)
02 DATA
VirtSize: 00003454h VirtAddr: 00110000h
raw data offs: 0010EE00h raw data size: 00003600h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: C0000040h
INITIALIZED_DATA READ WRITE ALIGN_DEFAULT(16)
03 BSS
VirtSize: 00001279h VirtAddr: 00114000h
raw data offs: 00112400h raw data size: 00000000h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: C0000000h
READ WRITE ALIGN_DEFAULT(16)
04 .idata
VirtSize: 00002AD8h VirtAddr: 00116000h
raw data offs: 00112400h raw data size: 00002C00h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: C0000040h
INITIALIZED_DATA READ WRITE ALIGN_DEFAULT(16)
05 .tls
VirtSize: 00000060h VirtAddr: 00119000h
raw data offs: 00115000h raw data size: 00000000h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: C0000000h
READ WRITE ALIGN_DEFAULT(16)
06 .rdata
VirtSize: 00000018h VirtAddr: 0011A000h
raw data offs: 00115000h raw data size: 00000200h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: 50000040h
INITIALIZED_DATA SHARED READ ALIGN_DEFAULT(16)
07 .reloc
VirtSize: 00015F10h VirtAddr: 0011B000h
raw data offs: 00115200h raw data size: 00016000h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: 50000040h
INITIALIZED_DATA SHARED READ ALIGN_DEFAULT(16)
08 .rsrc
VirtSize: 00040A00h VirtAddr: 00131000h
raw data offs: 0012B200h raw data size: 00040A00h
relocation offs: 00000000h relocations: 00000000h
line # offs: 00000000h line #'s: 00000000h
characteristics: 50000040h
INITIALIZED_DATA SHARED READ ALIGN_DEFAULT(16)
IMPORTS TABLE:
kernel32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00116950h
Import Address Table RVA: 0011617Ch
First thunk RVA: 0011617Ch
Ordn Name
----------
0 DeleteCriticalSection
0 LeaveCriticalSection
0 EnterCriticalSection
0 InitializeCriticalSection
0 VirtualFree
0 VirtualAlloc
0 LocalFree
0 LocalAlloc
0 GetCurrentThreadId
0 InterlockedDecrement
0 InterlockedIncrement
0 VirtualQuery
0 WideCharToMultiByte
0 MultiByteToWideChar
0 lstrlenA
0 lstrcpynA
0 LoadLibraryExA
0 GetThreadLocale
0 GetStartupInfoA
0 GetProcAddress
0 GetModuleHandleA
0 GetModuleFileNameA
0 GetLocaleInfoA
0 GetLastError
0 GetCommandLineA
0 FreeLibrary
0 FindFirstFileA
0 FindClose
0 ExitProcess
0 ExitThread
0 CreateThread
0 WriteFile
0 UnhandledExceptionFilter
0 SetFilePointer
0 SetEndOfFile
0 RtlUnwind
0 ReadFile
0 RaiseException
0 GetStdHandle
0 GetFileSize
0 GetFileType
0 CreateFileA
0 CloseHandle
user32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00116C4Eh
Import Address Table RVA: 0011622Ch
First thunk RVA: 0011622Ch
Ordn Name
----------
0 GetKeyboardType
0 LoadStringA
0 MessageBoxA
0 CharNextA
advapi32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00116C94h
Import Address Table RVA: 00116240h
First thunk RVA: 00116240h
Ordn Name
----------
0 RegQueryValueExA
0 RegOpenKeyExA
0 RegCloseKey
oleaut32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00116CD4h
Import Address Table RVA: 00116250h
First thunk RVA: 00116250h
Ordn Name
----------
0 SysFreeString
0 SysReAllocStringLen
0 SysAllocStringLen
kernel32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00116D1Ch
Import Address Table RVA: 00116260h
First thunk RVA: 00116260h
Ordn Name
----------
0 TlsSetValue
0 TlsGetValue
0 LocalAlloc
0 GetModuleHandleA
advapi32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00116D68h
Import Address Table RVA: 00116274h
First thunk RVA: 00116274h
Ordn Name
----------
0 SetSecurityDescriptorDacl
0 RegQueryValueExA
0 RegOpenKeyExA
0 RegCloseKey
0 InitializeSecurityDescriptor
kernel32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00116DE4h
Import Address Table RVA: 0011628Ch
First thunk RVA: 0011628Ch
Ordn Name
----------
0 lstrcpyA
0 WriteFile
0 WaitForSingleObject
0 VirtualQuery
0 VirtualAlloc
0 UnmapViewOfFile
0 Sleep
0 SizeofResource
0 SetThreadLocale
0 SetFilePointer
0 SetEvent
0 SetErrorMode
0 SetEndOfFile
0 SearchPathA
0 ResumeThread
0 ResetEvent
0 ReleaseMutex
0 ReadFile
0 OpenMutexA
0 OpenFileMappingA
0 OpenEventA
0 MultiByteToWideChar
0 MulDiv
0 MapViewOfFile
0 LockResource
0 LoadResource
0 LoadLibraryA
0 LeaveCriticalSection
0 IsDBCSLeadByte
0 InitializeCriticalSection
0 GlobalUnlock
0 GlobalSize
0 GlobalReAlloc
0 GlobalHandle
0 GlobalLock
0 GlobalFree
0 GlobalFindAtomA
0 GlobalDeleteAtom
0 GlobalAlloc
0 GlobalAddAtomA
0 GetVersionExA
0 GetVersion
0 GetUserDefaultLCID
0 GetTickCount
0 GetThreadLocale
0 GetTempPathA
0 GetTempFileNameA
0 GetSystemInfo
0 GetSystemDefaultLCID
0 GetStringTypeExA
0 GetStdHandle
0 GetProfileStringA
0 GetProcAddress
0 GetModuleHandleA
0 GetModuleFileNameA
0 GetLocaleInfoA
0 GetLocalTime
0 GetLastError
0 GetExitCodeThread
0 GetDiskFreeSpaceA
0 GetDateFormatA
0 GetCurrentThreadId
0 GetCurrentProcessId
0 GetCurrentDirectoryA
0 GetCPInfo
0 GetACP
0 FreeResource
0 InterlockedIncrement
0 InterlockedDecrement
0 FreeLibrary
0 FormatMessageA
0 FindResourceA
0 FindFirstFileA
0 FindClose
0 FileTimeToLocalFileTime
0 FileTimeToDosDateTime
0 FatalAppExitA
0 EnumCalendarInfoA
0 EnterCriticalSection
0 DeleteFileA
0 DeleteCriticalSection
0 CreateThread
0 CreateMutexA
0 CreateFileMappingA
0 CreateFileA
0 CreateEventA
0 CompareStringA
0 CloseHandle
version.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 001173ECh
Import Address Table RVA: 001163F0h
First thunk RVA: 001163F0h
Ordn Name
----------
0 VerQueryValueA
0 GetFileVersionInfoSizeA
0 GetFileVersionInfoA
gdi32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 0011743Ah
Import Address Table RVA: 00116400h
First thunk RVA: 00116400h
Ordn Name
----------
0 UnrealizeObject
0 StretchBlt
0 StartPage
0 StartDocA
0 SetWindowOrgEx
0 SetWindowExtEx
0 SetWinMetaFileBits
0 SetViewportOrgEx
0 SetViewportExtEx
0 SetTextColor
0 SetTextAlign
0 SetStretchBltMode
0 SetROP2
0 SetPixel
0 SetMapMode
0 SetEnhMetaFileBits
0 SetDIBColorTable
0 SetBrushOrgEx
0 SetBkMode
0 SetBkColor
0 SetAbortProc
0 SelectPalette
0 SelectObject
0 SelectClipRgn
0 SaveDC
0 RestoreDC
0 Rectangle
0 RectVisible
0 RealizePalette
0 Polyline
0 PolyPolyline
0 PlayEnhMetaFile
0 PatBlt
0 MoveToEx
0 MaskBlt
0 LineTo
0 LPtoDP
0 IntersectClipRect
0 GetWindowOrgEx
0 GetWinMetaFileBits
0 GetTextMetricsA
0 GetTextExtentPointA
0 GetTextExtentPoint32A
0 GetSystemPaletteEntries
0 GetStockObject
0 GetRgnBox
0 GetPixel
0 GetPaletteEntries
0 GetObjectA
0 GetNearestColor
0 GetEnhMetaFilePaletteEntries
0 GetEnhMetaFileHeader
0 GetEnhMetaFileDescriptionA
0 GetEnhMetaFileBits
0 GetDeviceCaps
0 GetDIBits
0 GetDIBColorTable
0 GetDCOrgEx
0 GetCurrentPositionEx
0 GetClipBox
0 GetBrushOrgEx
0 GetBitmapBits
0 ExtTextOutA
0 ExtCreatePen
0 ExcludeClipRect
0 EndPage
0 EndDoc
0 Ellipse
0 DeleteObject
0 DeleteEnhMetaFile
0 DeleteDC
0 CreateSolidBrush
0 CreateRectRgn
0 CreatePenIndirect
0 CreatePalette
0 CreateICA
0 CreateHalftonePalette
0 CreateFontIndirectA
0 CreateEnhMetaFileA
0 CreateDIBitmap
0 CreateDIBSection
0 CreateDCA
0 CreateCompatibleDC
0 CreateCompatibleBitmap
0 CreateBrushIndirect
0 CreateBitmap
0 CopyEnhMetaFileA
0 CombineRgn
0 CloseEnhMetaFile
0 BitBlt
0 AbortDoc
user32.dll
Import Lookup Table RVA: 00000000h (Unbound IAT)
TimeDateStamp: 00000000h
ForwarderChain: 00000000h
DLL Name RVA: 00117A3Ch
Import Address Table RVA: 00116570h
First thunk RVA: 00116570h
Ordn Name
![](https://s.studizba.com/z.php?f=/templates/si/i/noavatar.png&w=100&h=100&t=1"){kind=avatar}
