File havoc_demon_9b6047883014e32c66300962e067762ee768a7a3f981ca51b1ce60ae7452421b.exe
Function:
Loading..
140000000
140000000 struct IMAGE_DOS_HEADER
140000000 struct IMAGE_DOS_HEADER
140000000 e_magic uint16 0x5a4d ; IMAGE_DOS_SIGNATURE
140000002 e_cblp int 144
140000004 e_cp int 3
140000006 e_crlc int 0
140000008 e_cparhdr int 4
14000000a e_minalloc int 0
14000000c e_maxalloc int 65535
14000000e e_ss uint16 0x0000
140000010 e_sp uint16 0x00b8
140000012 e_csum uint16 0x0000
140000014 e_ip uint16 0x0000
140000016 e_cs uint16 0x0000
140000018 e_lfarlc uint16 0x0040
14000001a e_ovno int 0
14000001c e_res [4]uint16 {0, 0, 0, 0}
140000024 e_oemid uint16 0x0000
140000026 e_oeminfo uint16 0x0000
140000028 e_res2 [10]uint16 {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
14000003c e_lfanew uint32 0x140000080
140000002 e_cblp int 144
140000004 e_cp int 3
140000006 e_crlc int 0
140000008 e_cparhdr int 4
14000000a e_minalloc int 0
14000000c e_maxalloc int 65535
14000000e e_ss uint16 0x0000
140000010 e_sp uint16 0x00b8
140000012 e_csum uint16 0x0000
140000014 e_ip uint16 0x0000
140000016 e_cs uint16 0x0000
140000018 e_lfarlc uint16 0x0040
14000001a e_ovno int 0
14000001c e_res [4]uint16 {0, 0, 0, 0}
140000024 e_oemid uint16 0x0000
140000026 e_oeminfo uint16 0x0000
140000028 e_res2 [10]uint16 {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
14000003c e_lfanew uint32 0x140000080
140000040
140000040 struct IMAGE_DOS_STUB
140000079 140000040 struct IMAGE_DOS_STUB
140000040 PushCS uint8 0x0e
140000041 PopDS uint8 0x1f
140000042 MovDX uint8 0xba
140000043 MessageOffset uint16 0x14000004e
140000045 MovAH9 uint16 0x09b4
140000047 Int21Print uint16 0x21cd
140000049 MovAX uint8 0xb8
14000004a ExitCode uint16 0x4c01
14000004c Int21Exit uint16 0x21cd
14000004e Message ascii "This program cannot be run in DOS mode.\r\r\n$"
140000041 PopDS uint8 0x1f
140000042 MovDX uint8 0xba
140000043 MessageOffset uint16 0x14000004e
140000045 MovAH9 uint16 0x09b4
140000047 Int21Print uint16 0x21cd
140000049 MovAX uint8 0xb8
14000004a ExitCode uint16 0x4c01
14000004c Int21Exit uint16 0x21cd
14000004e Message ascii "This program cannot be run in DOS mode.\r\r\n$"
140000079 00 00 00 00 00 00 00 .......
140000080
140000080 struct IMAGE_NT_HEADERS
140000080 struct IMAGE_NT_HEADERS
140000080 Signature uint32 0x00004550 ; IMAGE_NT_SIGNATURE — "PE\0\0" magic
140000084 FileHeader.Machine uint16 0x8664 ; IMAGE_FILE_MACHINE_AMD64
140000086 FileHeader.NumberOfSections int 19
140000088 FileHeader.TimeDateStamp uint32 0x64f30a8c
14000008c FileHeader.PointerToSymbolTable uint32 0x00056000
140000090 FileHeader.NumberOfSymbols int 3463
140000094 FileHeader.SizeOfOptionalHeader int 240
140000096 FileHeader.Characteristics uint16 0x0026 ; IMAGE_FILE_EXECUTABLE_IMAGE|IMAGE_FILE_LINE_NUMS_STRIPPED|IMAGE_FILE_LARGE_ADDRESS_AWARE
140000098 OptionalHeader.Magic uint16 0x020b ; PE32+ (x86_64)
14000009a OptionalHeader.MajorLinkerVersion int 2
14000009b OptionalHeader.MinorLinkerVersion int 40
14000009c OptionalHeader.SizeOfCode int 140800
1400000a0 OptionalHeader.SizeOfInitializedData int 182272
1400000a4 OptionalHeader.SizeOfUninitializedData int 3072
1400000a8 OptionalHeader.AddressOfEntryPoint uint32 0x1400222c0
1400000ac OptionalHeader.BaseOfCode uint32 0x00001000
1400000b0 OptionalHeader.ImageBase uint64 0x0000000140000000
1400000b8 OptionalHeader.SectionAlignment uint32 0x00001000
1400000bc OptionalHeader.FileAlignment uint32 0x00000200
1400000c0 OptionalHeader.MajorOperatingSystemVersion int 4
1400000c2 OptionalHeader.MinorOperatingSystemVersion int 0
1400000c4 OptionalHeader.MajorImageVersion int 0
1400000c6 OptionalHeader.MinorImageVersion int 0
1400000c8 OptionalHeader.MajorSubsystemVersion int 5
1400000ca OptionalHeader.MinorSubsystemVersion int 2
1400000cc OptionalHeader.Win32VersionValue uint32 0x00000000
1400000d0 OptionalHeader.SizeOfImage uint32 0x00063000
1400000d4 OptionalHeader.SizeOfHeaders uint32 0x00000600
1400000d8 OptionalHeader.CheckSum uint32 0x0007190d
1400000dc OptionalHeader.Subsystem uint16 0x0003 ; IMAGE_SUBSYSTEM_WINDOWS_CUI
1400000de OptionalHeader.DllCharacteristics uint16 0x0560 ; IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA|IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE|IMAGE_DLLCHARACTERISTICS_NX_COMPAT|IMAGE_DLLCHARACTERISTICS_NO_SEH
1400000e0 OptionalHeader.SizeOfStackReserve uint64 0x0000000000200000
1400000e8 OptionalHeader.SizeOfStackCommit uint64 0x0000000000001000
1400000f0 OptionalHeader.SizeOfHeapReserve uint64 0x0000000000100000
1400000f8 OptionalHeader.SizeOfHeapCommit uint64 0x0000000000001000
140000100 OptionalHeader.LoaderFlags uint32 0x00000000
140000104 OptionalHeader.NumberOfRvaAndSizes int 16
140000108 OptionalHeader.DataDirectory.ExportTable.VirtualAddress uint32 0x00000000
14000010c OptionalHeader.DataDirectory.ExportTable.Size int 0
140000110 OptionalHeader.DataDirectory.ImportTable.VirtualAddress uint32 0x140031000
140000114 OptionalHeader.DataDirectory.ImportTable.Size int 1848
140000118 OptionalHeader.DataDirectory.Resource.VirtualAddress uint32 0x00000000
14000011c OptionalHeader.DataDirectory.Resource.Size int 0
140000120 OptionalHeader.DataDirectory.Exception.VirtualAddress uint32 0x0002e000
140000124 OptionalHeader.DataDirectory.Exception.Size int 1128
140000128 OptionalHeader.DataDirectory.Security.VirtualAddress uint32 0x00000000
14000012c OptionalHeader.DataDirectory.Security.Size int 0
140000130 OptionalHeader.DataDirectory.BaseReloc.VirtualAddress uint32 0x140034000
140000134 OptionalHeader.DataDirectory.BaseReloc.Size int 264
140000138 OptionalHeader.DataDirectory.Debug.VirtualAddress uint32 0x00000000
14000013c OptionalHeader.DataDirectory.Debug.Size int 0
140000140 OptionalHeader.DataDirectory.Architecture.VirtualAddress uint32 0x00000000
140000144 OptionalHeader.DataDirectory.Architecture.Size int 0
140000148 OptionalHeader.DataDirectory.GlobalPtr.VirtualAddress uint32 0x00000000
14000014c OptionalHeader.DataDirectory.GlobalPtr.Size int 0
140000150 OptionalHeader.DataDirectory.TLS.VirtualAddress uint32 0x14002bcc0
140000154 OptionalHeader.DataDirectory.TLS.Size int 40
140000158 OptionalHeader.DataDirectory.LoadConfig.VirtualAddress uint32 0x00000000
14000015c OptionalHeader.DataDirectory.LoadConfig.Size int 0
140000160 OptionalHeader.DataDirectory.BoundImport.VirtualAddress uint32 0x00000000
140000164 OptionalHeader.DataDirectory.BoundImport.Size int 0
140000168 OptionalHeader.DataDirectory.IAT.VirtualAddress uint32 0x1400311e0
14000016c OptionalHeader.DataDirectory.IAT.Size int 416
140000170 OptionalHeader.DataDirectory.DelayImport.VirtualAddress uint32 0x00000000
140000174 OptionalHeader.DataDirectory.DelayImport.Size int 0
140000178 OptionalHeader.DataDirectory.CLRRuntime.VirtualAddress uint32 0x00000000
14000017c OptionalHeader.DataDirectory.CLRRuntime.Size int 0
140000180 OptionalHeader.DataDirectory.Reserved.VirtualAddress uint32 0x00000000
140000184 OptionalHeader.DataDirectory.Reserved.Size int 0
140000084 FileHeader.Machine uint16 0x8664 ; IMAGE_FILE_MACHINE_AMD64
140000086 FileHeader.NumberOfSections int 19
140000088 FileHeader.TimeDateStamp uint32 0x64f30a8c
14000008c FileHeader.PointerToSymbolTable uint32 0x00056000
140000090 FileHeader.NumberOfSymbols int 3463
140000094 FileHeader.SizeOfOptionalHeader int 240
140000096 FileHeader.Characteristics uint16 0x0026 ; IMAGE_FILE_EXECUTABLE_IMAGE|IMAGE_FILE_LINE_NUMS_STRIPPED|IMAGE_FILE_LARGE_ADDRESS_AWARE
140000098 OptionalHeader.Magic uint16 0x020b ; PE32+ (x86_64)
14000009a OptionalHeader.MajorLinkerVersion int 2
14000009b OptionalHeader.MinorLinkerVersion int 40
14000009c OptionalHeader.SizeOfCode int 140800
1400000a0 OptionalHeader.SizeOfInitializedData int 182272
1400000a4 OptionalHeader.SizeOfUninitializedData int 3072
1400000a8 OptionalHeader.AddressOfEntryPoint uint32 0x1400222c0
1400000ac OptionalHeader.BaseOfCode uint32 0x00001000
1400000b0 OptionalHeader.ImageBase uint64 0x0000000140000000
1400000b8 OptionalHeader.SectionAlignment uint32 0x00001000
1400000bc OptionalHeader.FileAlignment uint32 0x00000200
1400000c0 OptionalHeader.MajorOperatingSystemVersion int 4
1400000c2 OptionalHeader.MinorOperatingSystemVersion int 0
1400000c4 OptionalHeader.MajorImageVersion int 0
1400000c6 OptionalHeader.MinorImageVersion int 0
1400000c8 OptionalHeader.MajorSubsystemVersion int 5
1400000ca OptionalHeader.MinorSubsystemVersion int 2
1400000cc OptionalHeader.Win32VersionValue uint32 0x00000000
1400000d0 OptionalHeader.SizeOfImage uint32 0x00063000
1400000d4 OptionalHeader.SizeOfHeaders uint32 0x00000600
1400000d8 OptionalHeader.CheckSum uint32 0x0007190d
1400000dc OptionalHeader.Subsystem uint16 0x0003 ; IMAGE_SUBSYSTEM_WINDOWS_CUI
1400000de OptionalHeader.DllCharacteristics uint16 0x0560 ; IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA|IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE|IMAGE_DLLCHARACTERISTICS_NX_COMPAT|IMAGE_DLLCHARACTERISTICS_NO_SEH
1400000e0 OptionalHeader.SizeOfStackReserve uint64 0x0000000000200000
1400000e8 OptionalHeader.SizeOfStackCommit uint64 0x0000000000001000
1400000f0 OptionalHeader.SizeOfHeapReserve uint64 0x0000000000100000
1400000f8 OptionalHeader.SizeOfHeapCommit uint64 0x0000000000001000
140000100 OptionalHeader.LoaderFlags uint32 0x00000000
140000104 OptionalHeader.NumberOfRvaAndSizes int 16
140000108 OptionalHeader.DataDirectory.ExportTable.VirtualAddress uint32 0x00000000
14000010c OptionalHeader.DataDirectory.ExportTable.Size int 0
140000110 OptionalHeader.DataDirectory.ImportTable.VirtualAddress uint32 0x140031000
140000114 OptionalHeader.DataDirectory.ImportTable.Size int 1848
140000118 OptionalHeader.DataDirectory.Resource.VirtualAddress uint32 0x00000000
14000011c OptionalHeader.DataDirectory.Resource.Size int 0
140000120 OptionalHeader.DataDirectory.Exception.VirtualAddress uint32 0x0002e000
140000124 OptionalHeader.DataDirectory.Exception.Size int 1128
140000128 OptionalHeader.DataDirectory.Security.VirtualAddress uint32 0x00000000
14000012c OptionalHeader.DataDirectory.Security.Size int 0
140000130 OptionalHeader.DataDirectory.BaseReloc.VirtualAddress uint32 0x140034000
140000134 OptionalHeader.DataDirectory.BaseReloc.Size int 264
140000138 OptionalHeader.DataDirectory.Debug.VirtualAddress uint32 0x00000000
14000013c OptionalHeader.DataDirectory.Debug.Size int 0
140000140 OptionalHeader.DataDirectory.Architecture.VirtualAddress uint32 0x00000000
140000144 OptionalHeader.DataDirectory.Architecture.Size int 0
140000148 OptionalHeader.DataDirectory.GlobalPtr.VirtualAddress uint32 0x00000000
14000014c OptionalHeader.DataDirectory.GlobalPtr.Size int 0
140000150 OptionalHeader.DataDirectory.TLS.VirtualAddress uint32 0x14002bcc0
140000154 OptionalHeader.DataDirectory.TLS.Size int 40
140000158 OptionalHeader.DataDirectory.LoadConfig.VirtualAddress uint32 0x00000000
14000015c OptionalHeader.DataDirectory.LoadConfig.Size int 0
140000160 OptionalHeader.DataDirectory.BoundImport.VirtualAddress uint32 0x00000000
140000164 OptionalHeader.DataDirectory.BoundImport.Size int 0
140000168 OptionalHeader.DataDirectory.IAT.VirtualAddress uint32 0x1400311e0
14000016c OptionalHeader.DataDirectory.IAT.Size int 416
140000170 OptionalHeader.DataDirectory.DelayImport.VirtualAddress uint32 0x00000000
140000174 OptionalHeader.DataDirectory.DelayImport.Size int 0
140000178 OptionalHeader.DataDirectory.CLRRuntime.VirtualAddress uint32 0x00000000
14000017c OptionalHeader.DataDirectory.CLRRuntime.Size int 0
140000180 OptionalHeader.DataDirectory.Reserved.VirtualAddress uint32 0x00000000
140000184 OptionalHeader.DataDirectory.Reserved.Size int 0
140000188
140000188 struct IMAGE_SECTION_HEADER
140000188 struct IMAGE_SECTION_HEADER
140000188 Name ascii ".text"
140000190 VirtualSize uint32 0x00022508
140000194 VirtualAddress uint32 0x140001000
140000198 SizeOfRawData uint32 0x00022600
14000019c PointerToRawData uint32 0x00000600
1400001a0 PointerToRelocations uint32 0x00000000
1400001a4 PointerToLineNumbers uint32 0x00000000
1400001a8 NumberOfRelocations int 0
1400001aa NumberOfLineNumbers int 0
1400001ac Characteristics uint32 0x60000060 ; IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
140000190 VirtualSize uint32 0x00022508
140000194 VirtualAddress uint32 0x140001000
140000198 SizeOfRawData uint32 0x00022600
14000019c PointerToRawData uint32 0x00000600
1400001a0 PointerToRelocations uint32 0x00000000
1400001a4 PointerToLineNumbers uint32 0x00000000
1400001a8 NumberOfRelocations int 0
1400001aa NumberOfLineNumbers int 0
1400001ac Characteristics uint32 0x60000060 ; IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
1400001b0
1400001b0 struct IMAGE_SECTION_HEADER
1400001b0 struct IMAGE_SECTION_HEADER
1400001b0 Name ascii ".data"
1400001b8 VirtualSize uint32 0x00001040
1400001bc VirtualAddress uint32 0x140024000
1400001c0 SizeOfRawData uint32 0x00001200
1400001c4 PointerToRawData uint32 0x00022c00
1400001c8 PointerToRelocations uint32 0x00000000
1400001cc PointerToLineNumbers uint32 0x00000000
1400001d0 NumberOfRelocations int 0
1400001d2 NumberOfLineNumbers int 0
1400001d4 Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
1400001b8 VirtualSize uint32 0x00001040
1400001bc VirtualAddress uint32 0x140024000
1400001c0 SizeOfRawData uint32 0x00001200
1400001c4 PointerToRawData uint32 0x00022c00
1400001c8 PointerToRelocations uint32 0x00000000
1400001cc PointerToLineNumbers uint32 0x00000000
1400001d0 NumberOfRelocations int 0
1400001d2 NumberOfLineNumbers int 0
1400001d4 Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
1400001d8
1400001d8 struct IMAGE_SECTION_HEADER
1400001d8 struct IMAGE_SECTION_HEADER
1400001d8 Name ascii ".rdata"
1400001e0 VirtualSize uint32 0x00007600
1400001e4 VirtualAddress uint32 0x140026000
1400001e8 SizeOfRawData uint32 0x00007600
1400001ec PointerToRawData uint32 0x00023e00
1400001f0 PointerToRelocations uint32 0x00000000
1400001f4 PointerToLineNumbers uint32 0x00000000
1400001f8 NumberOfRelocations int 0
1400001fa NumberOfLineNumbers int 0
1400001fc Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
1400001e0 VirtualSize uint32 0x00007600
1400001e4 VirtualAddress uint32 0x140026000
1400001e8 SizeOfRawData uint32 0x00007600
1400001ec PointerToRawData uint32 0x00023e00
1400001f0 PointerToRelocations uint32 0x00000000
1400001f4 PointerToLineNumbers uint32 0x00000000
1400001f8 NumberOfRelocations int 0
1400001fa NumberOfLineNumbers int 0
1400001fc Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
140000200
140000200 struct IMAGE_SECTION_HEADER
140000200 struct IMAGE_SECTION_HEADER
140000200 Name ascii ".pdata"
140000208 VirtualSize uint32 0x00000468
14000020c VirtualAddress uint32 0x14002e000
140000210 SizeOfRawData uint32 0x00000600
140000214 PointerToRawData uint32 0x0002b400
140000218 PointerToRelocations uint32 0x00000000
14000021c PointerToLineNumbers uint32 0x00000000
140000220 NumberOfRelocations int 0
140000222 NumberOfLineNumbers int 0
140000224 Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
140000208 VirtualSize uint32 0x00000468
14000020c VirtualAddress uint32 0x14002e000
140000210 SizeOfRawData uint32 0x00000600
140000214 PointerToRawData uint32 0x0002b400
140000218 PointerToRelocations uint32 0x00000000
14000021c PointerToLineNumbers uint32 0x00000000
140000220 NumberOfRelocations int 0
140000222 NumberOfLineNumbers int 0
140000224 Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
140000228
140000228 struct IMAGE_SECTION_HEADER
140000228 struct IMAGE_SECTION_HEADER
140000228 Name ascii ".xdata"
140000230 VirtualSize uint32 0x00000424
140000234 VirtualAddress uint32 0x14002f000
140000238 SizeOfRawData uint32 0x00000600
14000023c PointerToRawData uint32 0x0002ba00
140000240 PointerToRelocations uint32 0x00000000
140000244 PointerToLineNumbers uint32 0x00000000
140000248 NumberOfRelocations int 0
14000024a NumberOfLineNumbers int 0
14000024c Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
140000230 VirtualSize uint32 0x00000424
140000234 VirtualAddress uint32 0x14002f000
140000238 SizeOfRawData uint32 0x00000600
14000023c PointerToRawData uint32 0x0002ba00
140000240 PointerToRelocations uint32 0x00000000
140000244 PointerToLineNumbers uint32 0x00000000
140000248 NumberOfRelocations int 0
14000024a NumberOfLineNumbers int 0
14000024c Characteristics uint32 0x40000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
140000250
140000250 struct IMAGE_SECTION_HEADER
140000250 struct IMAGE_SECTION_HEADER
140000250 Name ascii ".bss"
140000258 VirtualSize uint32 0x00000b40
14000025c VirtualAddress uint32 0x140030000
140000260 SizeOfRawData uint32 0x00000000
140000264 PointerToRawData uint32 0x00000000
140000268 PointerToRelocations uint32 0x00000000
14000026c PointerToLineNumbers uint32 0x00000000
140000270 NumberOfRelocations int 0
140000272 NumberOfLineNumbers int 0
140000274 Characteristics uint32 0xc0000080 ; IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
140000258 VirtualSize uint32 0x00000b40
14000025c VirtualAddress uint32 0x140030000
140000260 SizeOfRawData uint32 0x00000000
140000264 PointerToRawData uint32 0x00000000
140000268 PointerToRelocations uint32 0x00000000
14000026c PointerToLineNumbers uint32 0x00000000
140000270 NumberOfRelocations int 0
140000272 NumberOfLineNumbers int 0
140000274 Characteristics uint32 0xc0000080 ; IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
140000278
140000278 struct IMAGE_SECTION_HEADER
140000278 struct IMAGE_SECTION_HEADER
140000278 Name ascii ".idata"
140000280 VirtualSize uint32 0x00000738
140000284 VirtualAddress uint32 0x140031000
140000288 SizeOfRawData uint32 0x00000800
14000028c PointerToRawData uint32 0x0002c000
140000290 PointerToRelocations uint32 0x00000000
140000294 PointerToLineNumbers uint32 0x00000000
140000298 NumberOfRelocations int 0
14000029a NumberOfLineNumbers int 0
14000029c Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
140000280 VirtualSize uint32 0x00000738
140000284 VirtualAddress uint32 0x140031000
140000288 SizeOfRawData uint32 0x00000800
14000028c PointerToRawData uint32 0x0002c000
140000290 PointerToRelocations uint32 0x00000000
140000294 PointerToLineNumbers uint32 0x00000000
140000298 NumberOfRelocations int 0
14000029a NumberOfLineNumbers int 0
14000029c Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
1400002a0
1400002a0 struct IMAGE_SECTION_HEADER
1400002a0 struct IMAGE_SECTION_HEADER
1400002a0 Name ascii ".CRT"
1400002a8 VirtualSize uint32 0x00000060
1400002ac VirtualAddress uint32 0x140032000
1400002b0 SizeOfRawData uint32 0x00000200
1400002b4 PointerToRawData uint32 0x0002c800
1400002b8 PointerToRelocations uint32 0x00000000
1400002bc PointerToLineNumbers uint32 0x00000000
1400002c0 NumberOfRelocations int 0
1400002c2 NumberOfLineNumbers int 0
1400002c4 Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
1400002a8 VirtualSize uint32 0x00000060
1400002ac VirtualAddress uint32 0x140032000
1400002b0 SizeOfRawData uint32 0x00000200
1400002b4 PointerToRawData uint32 0x0002c800
1400002b8 PointerToRelocations uint32 0x00000000
1400002bc PointerToLineNumbers uint32 0x00000000
1400002c0 NumberOfRelocations int 0
1400002c2 NumberOfLineNumbers int 0
1400002c4 Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
1400002c8
1400002c8 struct IMAGE_SECTION_HEADER
1400002c8 struct IMAGE_SECTION_HEADER
1400002c8 Name ascii ".tls"
1400002d0 VirtualSize uint32 0x00000010
1400002d4 VirtualAddress uint32 0x140033000
1400002d8 SizeOfRawData uint32 0x00000200
1400002dc PointerToRawData uint32 0x0002ca00
1400002e0 PointerToRelocations uint32 0x00000000
1400002e4 PointerToLineNumbers uint32 0x00000000
1400002e8 NumberOfRelocations int 0
1400002ea NumberOfLineNumbers int 0
1400002ec Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
1400002d0 VirtualSize uint32 0x00000010
1400002d4 VirtualAddress uint32 0x140033000
1400002d8 SizeOfRawData uint32 0x00000200
1400002dc PointerToRawData uint32 0x0002ca00
1400002e0 PointerToRelocations uint32 0x00000000
1400002e4 PointerToLineNumbers uint32 0x00000000
1400002e8 NumberOfRelocations int 0
1400002ea NumberOfLineNumbers int 0
1400002ec Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
1400002f0
1400002f0 struct IMAGE_SECTION_HEADER
1400002f0 struct IMAGE_SECTION_HEADER
1400002f0 Name ascii ".reloc"
1400002f8 VirtualSize uint32 0x00000108
1400002fc VirtualAddress uint32 0x140034000
140000300 SizeOfRawData uint32 0x00000200
140000304 PointerToRawData uint32 0x0002cc00
140000308 PointerToRelocations uint32 0x00000000
14000030c PointerToLineNumbers uint32 0x00000000
140000310 NumberOfRelocations int 0
140000312 NumberOfLineNumbers int 0
140000314 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
1400002f8 VirtualSize uint32 0x00000108
1400002fc VirtualAddress uint32 0x140034000
140000300 SizeOfRawData uint32 0x00000200
140000304 PointerToRawData uint32 0x0002cc00
140000308 PointerToRelocations uint32 0x00000000
14000030c PointerToLineNumbers uint32 0x00000000
140000310 NumberOfRelocations int 0
140000312 NumberOfLineNumbers int 0
140000314 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000318
140000318 struct IMAGE_SECTION_HEADER
140000318 struct IMAGE_SECTION_HEADER
140000318 Name ascii "/4"
140000320 VirtualSize uint32 0x00000680
140000324 VirtualAddress uint32 0x140035000
140000328 SizeOfRawData uint32 0x00000800
14000032c PointerToRawData uint32 0x0002ce00
140000330 PointerToRelocations uint32 0x00000000
140000334 PointerToLineNumbers uint32 0x00000000
140000338 NumberOfRelocations int 0
14000033a NumberOfLineNumbers int 0
14000033c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000320 VirtualSize uint32 0x00000680
140000324 VirtualAddress uint32 0x140035000
140000328 SizeOfRawData uint32 0x00000800
14000032c PointerToRawData uint32 0x0002ce00
140000330 PointerToRelocations uint32 0x00000000
140000334 PointerToLineNumbers uint32 0x00000000
140000338 NumberOfRelocations int 0
14000033a NumberOfLineNumbers int 0
14000033c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000340
140000340 struct IMAGE_SECTION_HEADER
140000340 struct IMAGE_SECTION_HEADER
140000340 Name ascii "/19"
140000348 VirtualSize uint32 0x000128cd
14000034c VirtualAddress uint32 0x140036000
140000350 SizeOfRawData uint32 0x00012a00
140000354 PointerToRawData uint32 0x0002d600
140000358 PointerToRelocations uint32 0x00000000
14000035c PointerToLineNumbers uint32 0x00000000
140000360 NumberOfRelocations int 0
140000362 NumberOfLineNumbers int 0
140000364 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000348 VirtualSize uint32 0x000128cd
14000034c VirtualAddress uint32 0x140036000
140000350 SizeOfRawData uint32 0x00012a00
140000354 PointerToRawData uint32 0x0002d600
140000358 PointerToRelocations uint32 0x00000000
14000035c PointerToLineNumbers uint32 0x00000000
140000360 NumberOfRelocations int 0
140000362 NumberOfLineNumbers int 0
140000364 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000368
140000368 struct IMAGE_SECTION_HEADER
140000368 struct IMAGE_SECTION_HEADER
140000368 Name ascii "/31"
140000370 VirtualSize uint32 0x00003461
140000374 VirtualAddress uint32 0x140049000
140000378 SizeOfRawData uint32 0x00003600
14000037c PointerToRawData uint32 0x00040000
140000380 PointerToRelocations uint32 0x00000000
140000384 PointerToLineNumbers uint32 0x00000000
140000388 NumberOfRelocations int 0
14000038a NumberOfLineNumbers int 0
14000038c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000370 VirtualSize uint32 0x00003461
140000374 VirtualAddress uint32 0x140049000
140000378 SizeOfRawData uint32 0x00003600
14000037c PointerToRawData uint32 0x00040000
140000380 PointerToRelocations uint32 0x00000000
140000384 PointerToLineNumbers uint32 0x00000000
140000388 NumberOfRelocations int 0
14000038a NumberOfLineNumbers int 0
14000038c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000390
140000390 struct IMAGE_SECTION_HEADER
140000390 struct IMAGE_SECTION_HEADER
140000390 Name ascii "/45"
140000398 VirtualSize uint32 0x00006a6d
14000039c VirtualAddress uint32 0x14004d000
1400003a0 SizeOfRawData uint32 0x00006c00
1400003a4 PointerToRawData uint32 0x00043600
1400003a8 PointerToRelocations uint32 0x00000000
1400003ac PointerToLineNumbers uint32 0x00000000
1400003b0 NumberOfRelocations int 0
1400003b2 NumberOfLineNumbers int 0
1400003b4 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000398 VirtualSize uint32 0x00006a6d
14000039c VirtualAddress uint32 0x14004d000
1400003a0 SizeOfRawData uint32 0x00006c00
1400003a4 PointerToRawData uint32 0x00043600
1400003a8 PointerToRelocations uint32 0x00000000
1400003ac PointerToLineNumbers uint32 0x00000000
1400003b0 NumberOfRelocations int 0
1400003b2 NumberOfLineNumbers int 0
1400003b4 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
1400003b8
1400003b8 struct IMAGE_SECTION_HEADER
1400003b8 struct IMAGE_SECTION_HEADER
1400003b8 Name ascii "/57"
1400003c0 VirtualSize uint32 0x000021d0
1400003c4 VirtualAddress uint32 0x140054000
1400003c8 SizeOfRawData uint32 0x00002200
1400003cc PointerToRawData uint32 0x0004a200
1400003d0 PointerToRelocations uint32 0x00000000
1400003d4 PointerToLineNumbers uint32 0x00000000
1400003d8 NumberOfRelocations int 0
1400003da NumberOfLineNumbers int 0
1400003dc Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
1400003c0 VirtualSize uint32 0x000021d0
1400003c4 VirtualAddress uint32 0x140054000
1400003c8 SizeOfRawData uint32 0x00002200
1400003cc PointerToRawData uint32 0x0004a200
1400003d0 PointerToRelocations uint32 0x00000000
1400003d4 PointerToLineNumbers uint32 0x00000000
1400003d8 NumberOfRelocations int 0
1400003da NumberOfLineNumbers int 0
1400003dc Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
1400003e0
1400003e0 struct IMAGE_SECTION_HEADER
1400003e0 struct IMAGE_SECTION_HEADER
1400003e0 Name ascii "/70"
1400003e8 VirtualSize uint32 0x0000039d
1400003ec VirtualAddress uint32 0x140057000
1400003f0 SizeOfRawData uint32 0x00000400
1400003f4 PointerToRawData uint32 0x0004c400
1400003f8 PointerToRelocations uint32 0x00000000
1400003fc PointerToLineNumbers uint32 0x00000000
140000400 NumberOfRelocations int 0
140000402 NumberOfLineNumbers int 0
140000404 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
1400003e8 VirtualSize uint32 0x0000039d
1400003ec VirtualAddress uint32 0x140057000
1400003f0 SizeOfRawData uint32 0x00000400
1400003f4 PointerToRawData uint32 0x0004c400
1400003f8 PointerToRelocations uint32 0x00000000
1400003fc PointerToLineNumbers uint32 0x00000000
140000400 NumberOfRelocations int 0
140000402 NumberOfLineNumbers int 0
140000404 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000408
140000408 struct IMAGE_SECTION_HEADER
140000408 struct IMAGE_SECTION_HEADER
140000408 Name ascii "/81"
140000410 VirtualSize uint32 0x0000173f
140000414 VirtualAddress uint32 0x140058000
140000418 SizeOfRawData uint32 0x00001800
14000041c PointerToRawData uint32 0x0004c800
140000420 PointerToRelocations uint32 0x00000000
140000424 PointerToLineNumbers uint32 0x00000000
140000428 NumberOfRelocations int 0
14000042a NumberOfLineNumbers int 0
14000042c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000410 VirtualSize uint32 0x0000173f
140000414 VirtualAddress uint32 0x140058000
140000418 SizeOfRawData uint32 0x00001800
14000041c PointerToRawData uint32 0x0004c800
140000420 PointerToRelocations uint32 0x00000000
140000424 PointerToLineNumbers uint32 0x00000000
140000428 NumberOfRelocations int 0
14000042a NumberOfLineNumbers int 0
14000042c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000430
140000430 struct IMAGE_SECTION_HEADER
140000430 struct IMAGE_SECTION_HEADER
140000430 Name ascii "/97"
140000438 VirtualSize uint32 0x0000793d
14000043c VirtualAddress uint32 0x14005a000
140000440 SizeOfRawData uint32 0x00007a00
140000444 PointerToRawData uint32 0x0004e000
140000448 PointerToRelocations uint32 0x00000000
14000044c PointerToLineNumbers uint32 0x00000000
140000450 NumberOfRelocations int 0
140000452 NumberOfLineNumbers int 0
140000454 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000438 VirtualSize uint32 0x0000793d
14000043c VirtualAddress uint32 0x14005a000
140000440 SizeOfRawData uint32 0x00007a00
140000444 PointerToRawData uint32 0x0004e000
140000448 PointerToRelocations uint32 0x00000000
14000044c PointerToLineNumbers uint32 0x00000000
140000450 NumberOfRelocations int 0
140000452 NumberOfLineNumbers int 0
140000454 Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000458
140000458 struct IMAGE_SECTION_HEADER
140000458 struct IMAGE_SECTION_HEADER
140000458 Name ascii "/113"
140000460 VirtualSize uint32 0x0000054e
140000464 VirtualAddress uint32 0x140062000
140000468 SizeOfRawData uint32 0x00000600
14000046c PointerToRawData uint32 0x00055a00
140000470 PointerToRelocations uint32 0x00000000
140000474 PointerToLineNumbers uint32 0x00000000
140000478 NumberOfRelocations int 0
14000047a NumberOfLineNumbers int 0
14000047c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000480
140000480 // align 0x1000
140000460 VirtualSize uint32 0x0000054e
140000464 VirtualAddress uint32 0x140062000
140000468 SizeOfRawData uint32 0x00000600
14000046c PointerToRawData uint32 0x00055a00
140000470 PointerToRelocations uint32 0x00000000
140000474 PointerToLineNumbers uint32 0x00000000
140000478 NumberOfRelocations int 0
14000047a NumberOfLineNumbers int 0
14000047c Characteristics uint32 0x42000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
140000480
140000480 // align 0x1000
140001001
140001001 // align 0x10
140001001 // align 0x10
140001010
140001010pre_c_init:
140001010sub rsp, 40
140001014mov rax, [rip+0x2b435]
14000101bxor ecx, ecx
14000101dmov [rax], 1
140001023mov rax, [rip+0x2b436]
14000102amov [rax], 1
140001030mov rax, [rip+0x2b439]
140001037mov [rax], 1
14000103dmov rax, [rip+0x2b3ac]
140001044cmp [rax], 23117
140001049jne 0x14000105a
14000104bmovsxd rdx, [rax+60]
14000104fadd rax, rdx
140001052cmp [rax], 17744
140001058je 0x1400010c0
14000105a
14000105aloc_14000105a:
14000105amov rax, [rip+0x2b3df]
140001061mov [rip+0x2efa5], ecx
140001067mov eax, [rax]
140001069test eax, eax
14000106bje 0x1400010b0
14000106dmov ecx, 2
140001072call __set_app_type
140001077
140001077loc_140001077:
140001077call __p__fmode
14000107cmov rdx, [rip+0x2b49d]
140001083mov edx, [rdx]
140001085mov [rax], edx
140001087call __p__commode
14000108cmov rdx, [rip+0x2b46d]
140001093mov edx, [rdx]
140001095mov [rax], edx
140001097call _setargv
14000109cmov rax, [rip+0x2b2fd]
1400010a3cmp [rax], 1
1400010a6je 0x1400010f8
1400010a8xor eax, eax
1400010aaadd rsp, 40
1400010aeret
1400010af
1400010af 90 .
1400010b0
1400010b0loc_1400010b0:
1400010b0mov ecx, 1
1400010b5call __set_app_type
1400010bajmp 0x140001077
1400010bc
1400010bc 0f 1f 40 00 ..@.
1400010c0
1400010c0loc_1400010c0:
1400010c0movzx edx, [rax+24]
1400010c4cmp dx, 267
1400010c9je 0x140001110
1400010cbcmp dx, 523
1400010d0jne 0x14000105a
1400010d2cmp [rax+132], 14
1400010d9jbe 0x14000105a
1400010dfmov edx, [rax+248]
1400010e5xor ecx, ecx
1400010e7test edx, edx
1400010e9setne cl
1400010ecjmp 0x14000105a
1400010f1
1400010f1 0f 1f 80 00 00 00 00 .......
1400010f8
1400010f8loc_1400010f8:
1400010f8mov rcx, [rip+0x2b441]
1400010ffcall __mingw_setusermatherr
140001104xor eax, eax
140001106add rsp, 40
14000110aret
14000110b
14000110b 0f 1f 44 00 00 ..D..
140001110
140001110loc_140001110:
140001110cmp [rax+116], 14
140001114jbe 0x14000105a
14000111amov r8l, [rax+232]
140001121xor ecx, ecx
140001123test r8l, r8l
140001126setne cl
140001129jmp 0x14000105a
140001010
140001010pre_c_init:
140001010sub rsp, 40
140001014mov rax, [rip+0x2b435]
14000101bxor ecx, ecx
14000101dmov [rax], 1
140001023mov rax, [rip+0x2b436]
14000102amov [rax], 1
140001030mov rax, [rip+0x2b439]
140001037mov [rax], 1
14000103dmov rax, [rip+0x2b3ac]
140001044cmp [rax], 23117
140001049jne 0x14000105a
14000104bmovsxd rdx, [rax+60]
14000104fadd rax, rdx
140001052cmp [rax], 17744
140001058je 0x1400010c0
14000105a
14000105aloc_14000105a:
14000105amov rax, [rip+0x2b3df]
140001061mov [rip+0x2efa5], ecx
140001067mov eax, [rax]
140001069test eax, eax
14000106bje 0x1400010b0
14000106dmov ecx, 2
140001072call __set_app_type
140001077
140001077loc_140001077:
140001077call __p__fmode
14000107cmov rdx, [rip+0x2b49d]
140001083mov edx, [rdx]
140001085mov [rax], edx
140001087call __p__commode
14000108cmov rdx, [rip+0x2b46d]
140001093mov edx, [rdx]
140001095mov [rax], edx
140001097call _setargv
14000109cmov rax, [rip+0x2b2fd]
1400010a3cmp [rax], 1
1400010a6je 0x1400010f8
1400010a8xor eax, eax
1400010aaadd rsp, 40
1400010aeret
1400010af
1400010af 90 .
1400010b0
1400010b0loc_1400010b0:
1400010b0mov ecx, 1
1400010b5call __set_app_type
1400010bajmp 0x140001077
1400010bc
1400010bc 0f 1f 40 00 ..@.
1400010c0
1400010c0loc_1400010c0:
1400010c0movzx edx, [rax+24]
1400010c4cmp dx, 267
1400010c9je 0x140001110
1400010cbcmp dx, 523
1400010d0jne 0x14000105a
1400010d2cmp [rax+132], 14
1400010d9jbe 0x14000105a
1400010dfmov edx, [rax+248]
1400010e5xor ecx, ecx
1400010e7test edx, edx
1400010e9setne cl
1400010ecjmp 0x14000105a
1400010f1
1400010f1 0f 1f 80 00 00 00 00 .......
1400010f8
1400010f8loc_1400010f8:
1400010f8mov rcx, [rip+0x2b441]
1400010ffcall __mingw_setusermatherr
140001104xor eax, eax
140001106add rsp, 40
14000110aret
14000110b
14000110b 0f 1f 44 00 00 ..D..
140001110
140001110loc_140001110:
140001110cmp [rax+116], 14
140001114jbe 0x14000105a
14000111amov r8l, [rax+232]
140001121xor ecx, ecx
140001123test r8l, r8l
140001126setne cl
140001129jmp 0x14000105a
140001010
Loading..