| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Aug-10 02:42:42 |
| Detected languages |
English - United States
|
| Suspicious | The PE is possibly packed. |
Section .text is both writable and executable.
Unusual section name found: .r4v3n0 Unusual section name found: .r4v3n1 Unusual section name found: .r4v3n2 |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Malicious | VirusTotal score: 42/72 (Scanned on 2026-02-07 10:39:22) |
ALYac:
Application.Generic.4339207
AVG: Win64:MalwareX-gen [Trj] AhnLab-V3: Unwanted/Win.Crack.R718565 Alibaba: Packed:Win64/VMProtect.3aeffcde Antiy-AVL: GrayWare/Win32.Wacapew Arcabit: Application.Generic.D423607 Avast: Win64:MalwareX-gen [Trj] BitDefender: Application.Generic.4339207 Bkav: W64.AIDetectMalware CAT-QuickHeal: Trojan.Ghanarava.177025767048e316 CTX: dll.trojan.vmprotect CrowdStrike: win/malicious_confidence_90% (D) Cylance: Unsafe Cynet: Malicious (score: 99) DeepInstinct: MALICIOUS ESET-NOD32: Win64/Packed.VMProtect.AC suspicious application Elastic: malicious (high confidence) Emsisoft: Application.Generic.4339207 (B) Fortinet: Riskware/Application GData: Application.Generic.4339207 Google: Detected Gridinsoft: Trojan.Heur!.03210022 K7AntiVirus: Trojan ( 005aeb761 ) K7GW: Trojan ( 005aeb761 ) Lionic: Trojan.Win32.VMProtect.4!c Malwarebytes: Malware.AI.3974741752 MaxSecure: Trojan.Malware.324995110.susgen McAfeeD: ti!40C14A38BCE5 MicroWorld-eScan: Application.Generic.4339207 Microsoft: PUA:Win32/GameHack Paloalto: generic.ml Panda: PUP/Generic Sangfor: PUP.Win64.Packed.V5gx Skyhigh: BehavesLike.Win64.Dropper.tc Sophos: Generic Reputation PUA (PUA) Symantec: PUA.Gen.2 TrellixENS: Artemis!0D1ADD43E0A4 VIPRE: Application.Generic.4339207 Varist: W64/ABTrojan.RGAA-8559 Webroot: W32.Malware.Gen Zillya: Trojan.VMProtect.Win64.25466 alibabacloud: VirTool:Win/Packed.VMProtect.AW |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 9 |
| TimeDateStamp | 2025-Aug-10 02:42:42 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x471400 |
| SizeOfInitializedData | 0x25200 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00000000014EF2F6 (Section: .r4v3n2) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x180000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x194c000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0xd8e6d4 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| KERNEL32.dll |
GetModuleHandleA
VirtualQuery VirtualFree VirtualAlloc GetSystemInfo HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep GetLastError HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetProcAddress GetCurrentProcessId FlushInstructionCache SetThreadContext OpenThread SetThreadAffinityMask GetStdHandle SetConsoleMode GetConsoleMode DisableThreadLibraryCalls DeleteFileA AllocConsole SetConsoleTitleW LoadLibraryA GetPrivateProfileStringA TerminateProcess CopyFileA GetFileAttributesA SetEnvironmentVariableA CreateDirectoryA LeaveCriticalSection InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeCriticalSection DeleteCriticalSection OutputDebugStringA GetLargePageMinimum UnmapViewOfFile CreateFileMappingW MapViewOfFile LocalFree FormatMessageA GetLocaleInfoEx GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW EnterCriticalSection |
|---|---|
| USER32.dll |
MessageBoxA
GetAsyncKeyState |
| SHELL32.dll |
SHGetFolderPathA
|
| MSVCP140.dll |
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Throw_Cpp_error@std@@YAXH@Z ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Xinvalid_argument@std@@YAXPEBD@Z ?id@?$ctype@D@std@@2V0locale@2@A _Cnd_do_broadcast_at_thread_exit _Thrd_detach ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Winerror_map@std@@YAHH@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Id_cnt@id@locale@std@@0HA ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?good@ios_base@std@@QEBA_NXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z |
| ntdll.dll |
RtlVirtualUnwind
RtlLookupFunctionEntry RtlCaptureContext |
| VCRUNTIME140_1.dll |
__CxxFrameHandler4
|
| VCRUNTIME140.dll |
__current_exception_context
__std_exception_destroy __std_exception_copy __std_type_info_destroy_list __C_specific_handler memcmp memcpy _CxxThrowException memset __current_exception __std_terminate memmove |
| api-ms-win-crt-runtime-l1-1-0.dll |
_cexit
_initterm exit _invalid_parameter_noinfo_noreturn _seh_filter_dll _initterm_e _crt_atexit abort _configure_narrow_argv _register_onexit_function _initialize_narrow_environment _initialize_onexit_table _errno terminate _beginthreadex _execute_onexit_table |
| api-ms-win-crt-heap-l1-1-0.dll |
realloc
free _callnewh malloc |
| api-ms-win-crt-stdio-l1-1-0.dll |
fsetpos
ungetc _fseeki64 fgetpos fwrite __stdio_common_vsprintf setvbuf fread fflush fputc freopen_s __acrt_iob_func _get_stream_buffer_pointers puts fgetc __stdio_common_vsprintf_s fclose |
| api-ms-win-crt-string-l1-1-0.dll |
strcpy_s
strcat_s |
| api-ms-win-crt-filesystem-l1-1-0.dll |
_unlock_file
_lock_file |
| api-ms-win-crt-convert-l1-1-0.dll |
strtol
|
| api-ms-win-crt-locale-l1-1-0.dll |
___lc_codepage_func
|
| Ordinal | 1 |
|---|---|
| Address | 0x457230 |
| Ordinal | 2 |
|---|---|
| Address | 0x455400 |
| Ordinal | 3 |
|---|---|
| Address | 0x460ef0 |
| Ordinal | 4 |
|---|---|
| Address | 0x45ed00 |
| Ordinal | 5 |
|---|---|
| Address | 0x464830 |
| Ordinal | 6 |
|---|---|
| Address | 0x467400 |
| Ordinal | 7 |
|---|---|
| Address | 0x462000 |
| Ordinal | 8 |
|---|---|
| Address | 0x454c90 |
| Ordinal | 9 |
|---|---|
| Address | 0x4672c0 |
| Ordinal | 10 |
|---|---|
| Address | 0x467460 |
| Ordinal | 11 |
|---|---|
| Address | 0x4638d0 |
| Ordinal | 12 |
|---|---|
| Address | 0x455480 |
| Ordinal | 13 |
|---|---|
| Address | 0x455480 |
| Ordinal | 14 |
|---|---|
| Address | 0x455480 |
| Ordinal | 15 |
|---|---|
| Address | 0x45eeb0 |
| Ordinal | 16 |
|---|---|
| Address | 0x4648b0 |
| Ordinal | 17 |
|---|---|
| Address | 0x4672e0 |
| Ordinal | 18 |
|---|---|
| Address | 0x462030 |
| Ordinal | 19 |
|---|---|
| Address | 0x454d20 |
| Ordinal | 20 |
|---|---|
| Address | 0x4672e0 |
| Ordinal | 21 |
|---|---|
| Address | 0x467490 |
| Ordinal | 22 |
|---|---|
| Address | 0x463900 |
| Ordinal | 23 |
|---|---|
| Address | 0x4570e0 |
| Ordinal | 24 |
|---|---|
| Address | 0x454b30 |
| Ordinal | 25 |
|---|---|
| Address | 0x4553e0 |
| Ordinal | 26 |
|---|---|
| Address | 0x454b40 |
| Ordinal | 27 |
|---|---|
| Address | 0x454b70 |
| Ordinal | 28 |
|---|---|
| Address | 0x454da0 |
| Ordinal | 29 |
|---|---|
| Address | 0x466ad0 |
| Ordinal | 30 |
|---|---|
| Address | 0x466ed0 |
| Ordinal | 31 |
|---|---|
| Address | 0x467080 |
| Ordinal | 32 |
|---|---|
| Address | 0x46a360 |
| Ordinal | 33 |
|---|---|
| Address | 0x4813e0 |
| Ordinal | 34 |
|---|---|
| Address | 0x47c530 |
| Ordinal | 35 |
|---|---|
| Address | 0x4572e0 |
| Ordinal | 36 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 37 |
|---|---|
| Address | 0x461140 |
| Ordinal | 38 |
|---|---|
| Address | 0x4612d0 |
| Ordinal | 39 |
|---|---|
| Address | 0x461260 |
| Ordinal | 40 |
|---|---|
| Address | 0x461200 |
| Ordinal | 41 |
|---|---|
| Address | 0x4611d0 |
| Ordinal | 42 |
|---|---|
| Address | 0x4611a0 |
| Ordinal | 43 |
|---|---|
| Address | 0x461170 |
| Ordinal | 44 |
|---|---|
| Address | 0x461350 |
| Ordinal | 45 |
|---|---|
| Address | 0x469d90 |
| Ordinal | 46 |
|---|---|
| Address | 0x469f50 |
| Ordinal | 47 |
|---|---|
| Address | 0x4668c0 |
| Ordinal | 48 |
|---|---|
| Address | 0x46a4f0 |
| Ordinal | 49 |
|---|---|
| Address | 0x482800 |
| Ordinal | 50 |
|---|---|
| Address | 0x47d370 |
| Ordinal | 51 |
|---|---|
| Address | 0x478f40 |
| Ordinal | 52 |
|---|---|
| Address | 0x467420 |
| Ordinal | 53 |
|---|---|
| Address | 0x460f60 |
| Ordinal | 54 |
|---|---|
| Address | 0x4674e0 |
| Ordinal | 55 |
|---|---|
| Address | 0x467920 |
| Ordinal | 56 |
|---|---|
| Address | 0x467950 |
| Ordinal | 57 |
|---|---|
| Address | 0x467d80 |
| Ordinal | 58 |
|---|---|
| Address | 0x467c20 |
| Ordinal | 59 |
|---|---|
| Address | 0x467a00 |
| Ordinal | 60 |
|---|---|
| Address | 0x47af50 |
| Ordinal | 61 |
|---|---|
| Address | 0x4678b0 |
| Ordinal | 62 |
|---|---|
| Address | 0x467da0 |
| Ordinal | 63 |
|---|---|
| Address | 0x46a3c0 |
| Ordinal | 64 |
|---|---|
| Address | 0x455170 |
| Ordinal | 65 |
|---|---|
| Address | 0x4670b0 |
| Ordinal | 66 |
|---|---|
| Address | 0x46a580 |
| Ordinal | 67 |
|---|---|
| Address | 0x469e80 |
| Ordinal | 68 |
|---|---|
| Address | 0x46a1c0 |
| Ordinal | 69 |
|---|---|
| Address | 0x46a040 |
| Ordinal | 70 |
|---|---|
| Address | 0x476c80 |
| Ordinal | 71 |
|---|---|
| Address | 0x476c60 |
| Ordinal | 72 |
|---|---|
| Address | 0x464af0 |
| Ordinal | 73 |
|---|---|
| Address | 0x45f860 |
| Ordinal | 74 |
|---|---|
| Address | 0x460fd0 |
| Ordinal | 75 |
|---|---|
| Address | 0x45e410 |
| Ordinal | 76 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 77 |
|---|---|
| Address | 0x462330 |
| Ordinal | 78 |
|---|---|
| Address | 0x46ad00 |
| Ordinal | 79 |
|---|---|
| Address | 0x46aea0 |
| Ordinal | 80 |
|---|---|
| Address | 0x466c50 |
| Ordinal | 81 |
|---|---|
| Address | 0x46acc0 |
| Ordinal | 82 |
|---|---|
| Address | 0x4677a0 |
| Ordinal | 83 |
|---|---|
| Address | 0x45f140 |
| Ordinal | 84 |
|---|---|
| Address | 0x463000 |
| Ordinal | 85 |
|---|---|
| Address | 0x455790 |
| Ordinal | 86 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 87 |
|---|---|
| Address | 0x460080 |
| Ordinal | 88 |
|---|---|
| Address | 0x467550 |
| Ordinal | 89 |
|---|---|
| Address | 0x460fe0 |
| Ordinal | 90 |
|---|---|
| Address | 0x460530 |
| Ordinal | 91 |
|---|---|
| Address | 0x456bb0 |
| Ordinal | 92 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 93 |
|---|---|
| Address | 0x461550 |
| Ordinal | 94 |
|---|---|
| Address | 0x461660 |
| Ordinal | 95 |
|---|---|
| Address | 0x460960 |
| Ordinal | 96 |
|---|---|
| Address | 0x46a0c0 |
| Ordinal | 97 |
|---|---|
| Address | 0x4608d0 |
| Ordinal | 98 |
|---|---|
| Address | 0x46acb0 |
| Ordinal | 99 |
|---|---|
| Address | 0x45f220 |
| Ordinal | 100 |
|---|---|
| Address | 0x466cb0 |
| Ordinal | 101 |
|---|---|
| Address | 0x4559d0 |
| Ordinal | 102 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 103 |
|---|---|
| Address | 0x455ea0 |
| Ordinal | 104 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 105 |
|---|---|
| Address | 0x455bc0 |
| Ordinal | 106 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 107 |
|---|---|
| Address | 0x456130 |
| Ordinal | 108 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 109 |
|---|---|
| Address | 0x456630 |
| Ordinal | 110 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 111 |
|---|---|
| Address | 0x461530 |
| Ordinal | 112 |
|---|---|
| Address | 0x461510 |
| Ordinal | 113 |
|---|---|
| Address | 0x4614f0 |
| Ordinal | 114 |
|---|---|
| Address | 0x463010 |
| Ordinal | 115 |
|---|---|
| Address | 0x45f800 |
| Ordinal | 116 |
|---|---|
| Address | 0x467fa0 |
| Ordinal | 117 |
|---|---|
| Address | 0x46ac90 |
| Ordinal | 118 |
|---|---|
| Address | 0x464ef0 |
| Ordinal | 119 |
|---|---|
| Address | 0x460f60 |
| Ordinal | 120 |
|---|---|
| Address | 0x460450 |
| Ordinal | 121 |
|---|---|
| Address | 0x4648b0 |
| Ordinal | 122 |
|---|---|
| Address | 0x463010 |
| Ordinal | 123 |
|---|---|
| Address | 0x465aa0 |
| Ordinal | 124 |
|---|---|
| Address | 0x4659c0 |
| Ordinal | 125 |
|---|---|
| Address | 0x465640 |
| Ordinal | 126 |
|---|---|
| Address | 0x465cc0 |
| Ordinal | 127 |
|---|---|
| Address | 0x465740 |
| Ordinal | 128 |
|---|---|
| Address | 0x466010 |
| Ordinal | 129 |
|---|---|
| Address | 0x466810 |
| Ordinal | 130 |
|---|---|
| Address | 0x466830 |
| Ordinal | 131 |
|---|---|
| Address | 0x465990 |
| Ordinal | 132 |
|---|---|
| Address | 0x465920 |
| Ordinal | 133 |
|---|---|
| Address | 0x4653d0 |
| Ordinal | 134 |
|---|---|
| Address | 0x45f450 |
| Ordinal | 135 |
|---|---|
| Address | 0x46b100 |
| Ordinal | 136 |
|---|---|
| Address | 0x464660 |
| Ordinal | 137 |
|---|---|
| Address | 0x46b030 |
| Ordinal | 138 |
|---|---|
| Address | 0x45ef60 |
| Ordinal | 139 |
|---|---|
| Address | 0x45ef30 |
| Ordinal | 140 |
|---|---|
| Address | 0x461120 |
| Ordinal | 141 |
|---|---|
| Address | 0x4610d0 |
| Ordinal | 142 |
|---|---|
| Address | 0x45fe70 |
| Ordinal | 143 |
|---|---|
| Address | 0x46b0c0 |
| Ordinal | 144 |
|---|---|
| Address | 0x4672f0 |
| Ordinal | 145 |
|---|---|
| Address | 0x467320 |
| Ordinal | 146 |
|---|---|
| Address | 0x455650 |
| Ordinal | 147 |
|---|---|
| Address | 0x4610b0 |
| Ordinal | 148 |
|---|---|
| Address | 0x45fa50 |
| Ordinal | 149 |
|---|---|
| Address | 0x45f9c0 |
| Ordinal | 150 |
|---|---|
| Address | 0x4556f0 |
| Ordinal | 151 |
|---|---|
| Address | 0x4610b0 |
| Ordinal | 152 |
|---|---|
| Address | 0x45fb30 |
| Ordinal | 153 |
|---|---|
| Address | 0x4601d0 |
| Ordinal | 154 |
|---|---|
| Address | 0x45f500 |
| Ordinal | 155 |
|---|---|
| Address | 0x45e710 |
| Ordinal | 156 |
|---|---|
| Address | 0x456c20 |
| Ordinal | 157 |
|---|---|
| Address | 0x461770 |
| Ordinal | 158 |
|---|---|
| Address | 0x45e840 |
| Ordinal | 159 |
|---|---|
| Address | 0x456cc0 |
| Ordinal | 160 |
|---|---|
| Address | 0x4617c0 |
| Ordinal | 161 |
|---|---|
| Address | 0x461820 |
| Ordinal | 162 |
|---|---|
| Address | 0x4679a0 |
| Ordinal | 163 |
|---|---|
| Address | 0x467580 |
| Ordinal | 164 |
|---|---|
| Address | 0x46ae20 |
| Ordinal | 165 |
|---|---|
| Address | 0x4648b0 |
| Ordinal | 166 |
|---|---|
| Address | 0x462dd0 |
| Ordinal | 167 |
|---|---|
| Address | 0x462850 |
| Ordinal | 168 |
|---|---|
| Address | 0x46adf0 |
| Ordinal | 169 |
|---|---|
| Address | 0x46afd0 |
| Ordinal | 170 |
|---|---|
| Address | 0x4605a0 |
| Ordinal | 171 |
|---|---|
| Address | 0x461060 |
| Ordinal | 172 |
|---|---|
| Address | 0x45f4e0 |
| Ordinal | 173 |
|---|---|
| Address | 0x45f130 |
| Ordinal | 174 |
|---|---|
| Address | 0x4648c0 |
| Ordinal | 175 |
|---|---|
| Address | 0x462080 |
| Ordinal | 176 |
|---|---|
| Address | 0x4565f0 |
| Ordinal | 177 |
|---|---|
| Address | 0x466980 |
| Ordinal | 178 |
|---|---|
| Address | 0x466e60 |
| Ordinal | 179 |
|---|---|
| Address | 0x45ff30 |
| Ordinal | 180 |
|---|---|
| Address | 0x463080 |
| Ordinal | 181 |
|---|---|
| Address | 0x463020 |
| Ordinal | 182 |
|---|---|
| Address | 0x455560 |
| Ordinal | 183 |
|---|---|
| Address | 0x44ed60 |
| Ordinal | 184 |
|---|---|
| Address | 0x45f760 |
| Ordinal | 185 |
|---|---|
| Address | 0x461030 |
| Ordinal | 186 |
|---|---|
| Address | 0x45f340 |
| Ordinal | 187 |
|---|---|
| Address | 0x460ff0 |
| Ordinal | 188 |
|---|---|
| Address | 0x45f2f0 |
| Ordinal | 189 |
|---|---|
| Address | 0x4554b0 |
| Ordinal | 190 |
|---|---|
| Address | 0x466d40 |
| Ordinal | 191 |
|---|---|
| Address | 0x462d60 |
| Ordinal | 192 |
|---|---|
| Address | 0x46dab0 |
| Ordinal | 193 |
|---|---|
| Address | 0x462250 |
| Ordinal | 194 |
|---|---|
| Address | 0x467f70 |
| Ordinal | 195 |
|---|---|
| Address | 0x46ab10 |
| Ordinal | 196 |
|---|---|
| Address | 0x462f90 |
| Ordinal | 197 |
|---|---|
| Address | 0x462f40 |
| Ordinal | 198 |
|---|---|
| Address | 0x449f60 |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x180493040 |