Manalyze report for 9d7ffaae7794875a44f4aaf6b312151ccdd9d07842bab85fe3cacadd18240e38

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2026-Jun-22 13:40:27
TLS Callbacks	2 callback(s) detected.
Debug artifacts	Embedded COFF debugging symbols

Plugin Output

Suspicious	The PE is possibly packed.	`Unusual section name found: .xdata` `Unusual section name found: /4` `Unusual section name found: /19` `Unusual section name found: /31` `Unusual section name found: /45` `Unusual section name found: /57` `Unusual section name found: /70` `Unusual section name found: /81` `Unusual section name found: /92`
Suspicious	The file contains overlay data.	`37655 bytes of data starting at offset 0x6fc00.`
Malicious	VirusTotal score: 17/70 (Scanned on 2026-06-25 23:08:32)	`ALYac: Trojan.Druid.1` `AVG: Win64:MalwareX-gen [Trj]` `AhnLab-V3: Trojan/Win.Druid.R773111` `Arcabit: Trojan.Druid.1` `Avast: Win64:MalwareX-gen [Trj]` `Avira: TR/W64.MalwareX` `BitDefender: Trojan.Druid.1` `CTX: dll.trojan.druid` `Cynet: Malicious (score: 99)` `Elastic: malicious (moderate confidence)` `Emsisoft: Trojan.Druid.1 (B)` `F-Secure: Trojan.TR/W64.MalwareX` `GData: Trojan.Druid.1` `Kingsoft: Win64.Troj.dllhijack.v` `MicroWorld-eScan: Trojan.Druid.1` `Microsoft: Trojan:Win64/DLLHijack.NXD!MTB` `VIPRE: Trojan.Druid.1`

Hashes

MD5	`c4163dd37745849d966ea86013b3bfb5`
SHA1	`431701dec370ace7fe188465cb23dcedf63d3459`
SHA256	`9d7ffaae7794875a44f4aaf6b312151ccdd9d07842bab85fe3cacadd18240e38`
SHA3	`731bb3d2d4767205f0dbe78a44c12b826267ac3d66a67534e6184ffcd571692f`
SSDeep	`6144:l60rW0Qp68eUaHXJOVLpY74WA30jzEpPI8qsNcKY8zMY9O8eAk:l60eaO/lzMynk`
Imports Hash	`add223b86234ff984568e7b6a014df39`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`19`
TimeDateStamp	2026-Jun-22 13:40:27
PointerToSymbolTable	`0x6fc00`
NumberOfSymbols	`1475`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE` `IMAGE_FILE_LINE_NUMS_STRIPPED`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`2.0`
SizeOfCode	`0x2800`
SizeOfInitializedData	`0x5bc00`
SizeOfUninitializedData	`0xa00`
AddressOfEntryPoint	`0x00000000000013E0 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x6d780000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`5.2`
Win32VersionValue	`0`
SizeOfImage	`0x7b000`
SizeOfHeaders	`0x600`
Checksum	`0x80885`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`409c6d584bbb95e025027c2a2d83bd65`
SHA1	`b292b1d44f9ea298be72bb91331c78ee96a0b7ec`
SHA256	`9d63603c3ff6f7dda175495a5831033e2c21d63f378fc219cf07c5b1b4b87f6f`
SHA3	`41f9a097f9a09a15be7aff2a011955c109aea17eed51e4908a9eb5e692b69465`
VirtualSize	`0x2690`
VirtualAddress	`0x1000`
SizeOfRawData	`0x2800`
PointerToRawData	`0x600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`5.45095`

.data

MD5	`c20f57daaa66545155e6542dc6e525c6`
SHA1	`1b0f12b0ef9a95aa2c7489f2fd530f0216887b43`
SHA256	`add29851c9eec91d94956bca299ac5dafbf6b15ade353191275ce910f4040af5`
SHA3	`1665a2d7e710fd0c63b57762587fb0f617a9f16b8cec87d5e4f2ffbe2bd03204`
VirtualSize	`0x10150`
VirtualAddress	`0x4000`
SizeOfRawData	`0x10200`
PointerToRawData	`0x2e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.7451`

.rdata

MD5	`dbb44735752233dd4ad4b33641017296`
SHA1	`049db3b1bb7b3e68496d3d093aa511406929d68f`
SHA256	`57c1f1c415f37b88c8b02dcfad41c306e3e282f9c3362984d33760ecc9a3a4c7`
SHA3	`1abec7a5fa4e5f8376ac4cd96d742a254fc4f2cfd8bc66980a0bf9d2fb711979`
VirtualSize	`0x42bd0`
VirtualAddress	`0x15000`
SizeOfRawData	`0x42c00`
PointerToRawData	`0x13000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.79036`

.pdata

MD5	`cf37ad884ced2e851db6fc796ab18ea8`
SHA1	`1ff4e526570fbeed089961a65f2026478ccb6324`
SHA256	`1f7253014246ae9155ffca5ac259afd73fa29b108edca99ff4ee38324587dbba`
SHA3	`3a581ee7a59f1e6be36aaa44572c3487359229313d13702270824a9f998d44fc`
VirtualSize	`0xe70`
VirtualAddress	`0x58000`
SizeOfRawData	`0x1000`
PointerToRawData	`0x55c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.40178`

.xdata

MD5	`e5297dfc2f91c2ca1dfa66f985d08578`
SHA1	`0db6263028bf45120fa4be0bb244bba5c000c14d`
SHA256	`5fd9de441ed6fb71cfe3f007d5ecd6713eb228500284b2a1c2eeb0b8d42c26d9`
SHA3	`bbaec9129ee97553cebd1793299cba465d8975a00ed96736b89c94d4191e55f7`
VirtualSize	`0xa04`
VirtualAddress	`0x59000`
SizeOfRawData	`0xc00`
PointerToRawData	`0x56c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.06356`

.bss

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x980`
VirtualAddress	`0x5a000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.edata

MD5	`4504e14323fecef8381e636fa44e8022`
SHA1	`2d33df791eb8beefad859fa1784dd588820c1fa0`
SHA256	`4a1ed4a9816142ec5748fb0e9bf1ea8dba756e006c8c4c98cede2dbb3ae6666a`
SHA3	`267a2b18bbf61714dfcef3e2893576195c72d1ab511dc3a0a857033431051e5a`
VirtualSize	`0x2288`
VirtualAddress	`0x5b000`
SizeOfRawData	`0x2400`
PointerToRawData	`0x57800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.13058`

.idata

MD5	`59ad476c94a3dbd9cba0bc2948a04f61`
SHA1	`90fcebf28703b33b19fe39b1af2d9f9c989f47b6`
SHA256	`ca0b5756fe5c018f1210e31fd1cfbdfc0cd1a2a17ca159aa77184f546eff8297`
SHA3	`f385d8978b16085f0b78b6cfa4505dfc4660a9ae38118803078bdfd3a527b13c`
VirtualSize	`0x71c`
VirtualAddress	`0x5e000`
SizeOfRawData	`0x800`
PointerToRawData	`0x59c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.02444`

.CRT

MD5	`26819dd7d843e3aaab3bf1c0097ea641`
SHA1	`a5f9b3309ed716c13af067b52dd59b222b18f017`
SHA256	`8700e95db26e41b6cf9f5c24010b0e298505ebb671159a9753f07961770c7081`
SHA3	`38c8e899224cdd1d8ee53b30e15405b784722569337b0a4438ebd48617397b1d`
VirtualSize	`0x58`
VirtualAddress	`0x5f000`
SizeOfRawData	`0x200`
PointerToRawData	`0x5a400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.201539`

.tls

MD5	`1b00c363edc75b9b63c29e4721444d4f`
SHA1	`8e33ef9c0108975dc72298a3ae2064835a6edf9d`
SHA256	`c592d125301595cd0319cc6247416ae90ec8b921260d2b819c69d4968a83deb2`
SHA3	`29be4286784b69c8caa470077598005cc2e384b20ea9418e20db13f7e558d93f`
VirtualSize	`0x68`
VirtualAddress	`0x60000`
SizeOfRawData	`0x200`
PointerToRawData	`0x5a600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.24124`

.reloc

MD5	`9a7a77315a8c68cbdc768834a683e9dd`
SHA1	`9fc1afa6c25445be38a177d4e79dcc2ee9db4c81`
SHA256	`c3ebb95fd0f8a2978f2ca8f1c881980e04882bc7946ed0613148290988a05242`
SHA3	`9c7dd649e8aa0083842431f7a39dde59ff82323a313428c7c903d45f85e3b67d`
VirtualSize	`0x4110`
VirtualAddress	`0x61000`
SizeOfRawData	`0x4200`
PointerToRawData	`0x5a800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_2BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_512BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.42142`

/4

MD5	`3daa89a62dd76cd37e559b5c506d01c1`
SHA1	`d7237702ecab8ab3f4cf683618baa27ded3f9125`
SHA256	`c8b80856845c50828b6e6f3d10c1e83c4f5aa5d2faef844e64ceb6001d5e5a11`
SHA3	`4e5e9e0f0e584ad43289b1e2fc549a6eda2ff82870b561f317d5a0fdf6da1150`
VirtualSize	`0x310`
VirtualAddress	`0x66000`
SizeOfRawData	`0x400`
PointerToRawData	`0x5ea00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`1.37795`

/19

MD5	`74628f7c9ae2a02e697feb6f3a052e17`
SHA1	`ff932553ae9163a821e5e96e8ca259e834ec077c`
SHA256	`7e42ee34bd9eb764b956f6e1d3539779e0978945756e40fbca6636c20a8e164b`
SHA3	`0206dbe3bd9d9fbdeddee716f4ed9eb1c8ebde8195796c98fe4b9d1ea5f08fe2`
VirtualSize	`0x9a1c`
VirtualAddress	`0x67000`
SizeOfRawData	`0x9c00`
PointerToRawData	`0x5ee00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.95886`

/31

MD5	`617da769c4ea5a691cb8a2bf04474232`
SHA1	`f63196494e387b68d1ebf71a7ea2f562a3ae45bf`
SHA256	`dab7e73d06399d9fbb94deb76d1d04dd0b472ee893787bae64f273f76ad003fe`
SHA3	`790a3cc84b5396f98e74a9021a28c5c4af6248268ef9e6827a9609e132220a05`
VirtualSize	`0x1625`
VirtualAddress	`0x71000`
SizeOfRawData	`0x1800`
PointerToRawData	`0x68a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.44262`

/45

MD5	`96d7c75f5f6d9ae2d3bb1887d92a49a1`
SHA1	`5dff502426a272d6a7801ce4b5abf53642d25a80`
SHA256	`3a92100fe21a7f2d43f5c48f216e11313edcb076742163fa0e22df132d83f063`
SHA3	`e6365cb1107055929c217bc4f30a846eb48358920da5a1ec6a6db6d87a510576`
VirtualSize	`0x1471`
VirtualAddress	`0x73000`
SizeOfRawData	`0x1600`
PointerToRawData	`0x6a200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.55126`

/57

MD5	`be369010f47a685e12193a96e35635db`
SHA1	`9f1ab8801ecc80e000fef754fde0e4833934202e`
SHA256	`23df7f8c0ea57e29d2a466f3f4bc3bc1718205e815fa8f5b9ab16d98a1c41fe8`
SHA3	`108cd3e59986d9c524a4eee40caa4569d36475c64fc843d7f130e329a369f835`
VirtualSize	`0xa18`
VirtualAddress	`0x75000`
SizeOfRawData	`0xc00`
PointerToRawData	`0x6b800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_2048BYTES` `IMAGE_SCN_ALIGN_32BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_8192BYTES` `IMAGE_SCN_ALIGN_8BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.00248`

/70

MD5	`786a85e4e51a48bc8a3129bf00c60fa3`
SHA1	`b0318c9f7f8729a22e08bca1e04e958738dfaf75`
SHA256	`e057accf13f6c41327ec30792f64b9f340447501d7269029da466a160024b522`
SHA3	`ca40f2b8606d9dfbc25ed6a1169803d1e4c34d38e074da61ce55270e9c3a796d`
VirtualSize	`0x12e`
VirtualAddress	`0x76000`
SizeOfRawData	`0x200`
PointerToRawData	`0x6c400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`3.42849`

/81

MD5	`3906efde7d1f23aa70c32c0bb6c0511c`
SHA1	`7a61d5cbf54435fbdac13a8fe480662ec92c9bb2`
SHA256	`ade5b815545f426986390ffdb2592b4ea6f2a27eedb50393a2d926b17ca6a28b`
SHA3	`02d779f18e8ee2e4cddad40167f46df5ed8faf07302542466fcf81ab179a103c`
VirtualSize	`0x2e50`
VirtualAddress	`0x77000`
SizeOfRawData	`0x3000`
PointerToRawData	`0x6c600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`2.27935`

/92

MD5	`d0bbe15d06a55ed7ff30753ed519f32a`
SHA1	`cda0e33fad68f06e8fbd12ef487b86cbcd9b2c15`
SHA256	`646d9286deeb0508a051a991656fa255c0b368ad6e9eb5b4601e8a6e0ccf9db9`
SHA3	`d17242229c1b4ec69532026a7f6c1c657d3d66bd44a28d0abae6d36cc196b6a7`
VirtualSize	`0x550`
VirtualAddress	`0x7a000`
SizeOfRawData	`0x600`
PointerToRawData	`0x6f600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_ALIGN_1024BYTES` `IMAGE_SCN_ALIGN_16BYTES` `IMAGE_SCN_ALIGN_1BYTES` `IMAGE_SCN_ALIGN_256BYTES` `IMAGE_SCN_ALIGN_4096BYTES` `IMAGE_SCN_ALIGN_4BYTES` `IMAGE_SCN_ALIGN_64BYTES` `IMAGE_SCN_ALIGN_MASK` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`1.37594`

Imports

KERNEL32.dll	`DeleteCriticalSection` `DisableThreadLibraryCalls` `EnterCriticalSection` `FreeConsole` `GetCurrentProcess` `GetCurrentProcessId` `GetCurrentThreadId` `GetLastError` `GetSystemTimeAsFileTime` `GetTickCount` `HeapAlloc` `HeapCreate` `HeapDestroy` `InitializeCriticalSection` `LeaveCriticalSection` `QueryPerformanceCounter` `RtlAddFunctionTable` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlVirtualUnwind` `SetUnhandledExceptionFilter` `Sleep` `TerminateProcess` `TlsGetValue` `UnhandledExceptionFilter` `VirtualProtect` `VirtualQuery`
msvcrt.dll	`__dllonexit` `__iob_func` `_amsg_exit` `_initterm` `_lock` `_onexit` `_unlock` `abort` `calloc` `free` `fwrite` `malloc` `memcpy` `signal` `strlen` `strncmp` `vfprintf`
RPCRT4.dll	`UuidFromStringA`

Delayed Imports

CreateLexer

Ordinal	`1`
Address	`0x156a`

GetLexerCount

Ordinal	`2`
Address	`0x1575`

GetLexerFactory

Ordinal	`3`
Address	`0x1580`

GetLexerName

Ordinal	`4`
Address	`0x158b`

GetLibraryPropertyNames

Ordinal	`5`
Address	`0x1596`

GetNameSpace

Ordinal	`6`
Address	`0x15a1`

LexerNameFromID

Ordinal	`7`
Address	`0x15ac`

SetLibraryProperty

Ordinal	`8`
Address	`0x15b7`

build_activate_menu_item

Ordinal	`9`
Address	`0x15c2`

build_get_current_menu_item

Ordinal	`10`
Address	`0x15cd`

build_get_group_count

Ordinal	`11`
Address	`0x15d8`

build_remove_menu_item

Ordinal	`12`
Address	`0x15e3`

build_set_menu_item

Ordinal	`13`
Address	`0x15ee`

dialogs_show_input

Ordinal	`14`
Address	`0x15f9`

dialogs_show_input_numeric

Ordinal	`15`
Address	`0x1604`

dialogs_show_msgbox

Ordinal	`16`
Address	`0x160f`

dialogs_show_question

Ordinal	`17`
Address	`0x161a`

dialogs_show_save_as

Ordinal	`18`
Address	`0x1625`

document_close

Ordinal	`19`
Address	`0x1630`

document_compare_by_display_name

Ordinal	`20`
Address	`0x163b`

document_compare_by_tab_order

Ordinal	`21`
Address	`0x1646`

document_compare_by_tab_order_reverse

Ordinal	`22`
Address	`0x1651`

document_find_by_filename

Ordinal	`23`
Address	`0x165c`

document_find_by_id

Ordinal	`24`
Address	`0x1667`

document_find_by_real_path

Ordinal	`25`
Address	`0x1672`

document_get_basename_for_display

Ordinal	`26`
Address	`0x167d`

document_get_current

Ordinal	`27`
Address	`0x1688`

document_get_from_page

Ordinal	`28`
Address	`0x1693`

document_get_notebook_page

Ordinal	`29`
Address	`0x169e`

document_get_status_color

Ordinal	`30`
Address	`0x16a9`

document_get_type

Ordinal	`31`
Address	`0x16b4`

document_index

Ordinal	`32`
Address	`0x16bf`

document_new_file

Ordinal	`33`
Address	`0x16ca`

document_open_file

Ordinal	`34`
Address	`0x16d5`

document_open_files

Ordinal	`35`
Address	`0x16e0`

document_reload_force

Ordinal	`36`
Address	`0x16eb`

document_remove_page

Ordinal	`37`
Address	`0x16f6`

document_rename_file

Ordinal	`38`
Address	`0x1701`

document_save_file

Ordinal	`39`
Address	`0x170c`

document_save_file_as

Ordinal	`40`
Address	`0x1717`

document_set_encoding

Ordinal	`41`
Address	`0x1722`

document_set_filetype

Ordinal	`42`
Address	`0x172d`

document_set_text_changed

Ordinal	`43`
Address	`0x1738`

editor_create_widget

Ordinal	`44`
Address	`0x1743`

editor_find_snippet

Ordinal	`45`
Address	`0x174e`

editor_get_eol_char

Ordinal	`46`
Address	`0x1759`

editor_get_eol_char_len

Ordinal	`47`
Address	`0x1764`

editor_get_eol_char_mode

Ordinal	`48`
Address	`0x176f`

editor_get_eol_char_name

Ordinal	`49`
Address	`0x177a`

editor_get_indent_prefs

Ordinal	`50`
Address	`0x1785`

editor_get_type

Ordinal	`51`
Address	`0x1790`

editor_get_word_at_pos

Ordinal	`52`
Address	`0x179b`

editor_goto_pos

Ordinal	`53`
Address	`0x17a6`

editor_indicator_clear

Ordinal	`54`
Address	`0x17b1`

editor_indicator_set_on_line

Ordinal	`55`
Address	`0x17bc`

editor_indicator_set_on_range

Ordinal	`56`
Address	`0x17c7`

editor_insert_snippet

Ordinal	`57`
Address	`0x17d2`

editor_insert_text_block

Ordinal	`58`
Address	`0x17dd`

editor_set_indent_type

Ordinal	`59`
Address	`0x17e8`

editor_set_indent_width

Ordinal	`60`
Address	`0x17f3`

encodings_convert_to_utf8

Ordinal	`61`
Address	`0x17fe`

encodings_convert_to_utf8_from_charset

Ordinal	`62`
Address	`0x1809`

encodings_get_charset_from_index

Ordinal	`63`
Address	`0x1814`

filetype_get_type

Ordinal	`64`
Address	`0x181f`

filetypes_detect_from_file

Ordinal	`65`
Address	`0x182a`

filetypes_get_display_name

Ordinal	`66`
Address	`0x1835`

filetypes_get_sorted_by_name

Ordinal	`67`
Address	`0x1840`

filetypes_index

Ordinal	`68`
Address	`0x184b`

filetypes_lookup_by_name

Ordinal	`69`
Address	`0x1856`

geany_api_version

Ordinal	`70`
Address	`0x1861`

geany_object_get_type

Ordinal	`71`
Address	`0x186c`

geany_plugin_register

Ordinal	`72`
Address	`0x1877`

geany_plugin_register_full

Ordinal	`73`
Address	`0x1882`

geany_plugin_register_proxy

Ordinal	`74`
Address	`0x188d`

geany_plugin_set_data

Ordinal	`75`
Address	`0x1898`

highlighting_get_style

Ordinal	`76`
Address	`0x18a3`

highlighting_is_code_style

Ordinal	`77`
Address	`0x18ae`

highlighting_is_comment_style

Ordinal	`78`
Address	`0x18b9`

highlighting_is_string_style

Ordinal	`79`
Address	`0x18c4`

highlighting_set_styles

Ordinal	`80`
Address	`0x18cf`

interface_prefs

Ordinal	`81`
Address	`0x18da`

keybindings_get_item

Ordinal	`82`
Address	`0x18e5`

keybindings_get_modifiers

Ordinal	`83`
Address	`0x18f0`

keybindings_load_keyfile

Ordinal	`84`
Address	`0x18fb`

keybindings_send_command

Ordinal	`85`
Address	`0x1906`

keybindings_set_item

Ordinal	`86`
Address	`0x1911`

keybindings_set_item_full

Ordinal	`87`
Address	`0x191c`

main_init_headless

Ordinal	`88`
Address	`0x1927`

main_is_realized

Ordinal	`89`
Address	`0x1932`

main_lib

Ordinal	`90`
Address	`0x193d`

main_locale_init

Ordinal	`91`
Address	`0x1955`

main_reload_configuration

Ordinal	`92`
Address	`0x1960`

msgwin_clear_tab

Ordinal	`93`
Address	`0x196b`

msgwin_compiler_add

Ordinal	`94`
Address	`0x1976`

msgwin_compiler_add_string

Ordinal	`95`
Address	`0x1981`

msgwin_msg_add

Ordinal	`96`
Address	`0x198c`

msgwin_msg_add_string

Ordinal	`97`
Address	`0x1997`

msgwin_set_messages_dir

Ordinal	`98`
Address	`0x19a2`

msgwin_status_add

Ordinal	`99`
Address	`0x19ad`

msgwin_status_add_string

Ordinal	`100`
Address	`0x19b8`

msgwin_switch_tab

Ordinal	`101`
Address	`0x19c3`

navqueue_goto_line

Ordinal	`102`
Address	`0x19ce`

plugin_add_toolbar_item

Ordinal	`103`
Address	`0x19d9`

plugin_builder_connect_signals

Ordinal	`104`
Address	`0x19e4`

plugin_get_document_data

Ordinal	`105`
Address	`0x19ef`

plugin_idle_add

Ordinal	`106`
Address	`0x19fa`

plugin_module_make_resident

Ordinal	`107`
Address	`0x1a05`

plugin_set_document_data

Ordinal	`108`
Address	`0x1a10`

plugin_set_document_data_full

Ordinal	`109`
Address	`0x1a1b`

plugin_set_key_group

Ordinal	`110`
Address	`0x1a26`

plugin_set_key_group_full

Ordinal	`111`
Address	`0x1a31`

plugin_show_configure

Ordinal	`112`
Address	`0x1a3c`

plugin_signal_connect

Ordinal	`113`
Address	`0x1a47`

plugin_timeout_add

Ordinal	`114`
Address	`0x1a52`

plugin_timeout_add_seconds

Ordinal	`115`
Address	`0x1a5d`

project_write_config

Ordinal	`116`
Address	`0x1a68`

sci_delete_marker_at_line

Ordinal	`117`
Address	`0x1a73`

sci_end_undo_action

Ordinal	`118`
Address	`0x1a7e`

sci_ensure_line_is_visible

Ordinal	`119`
Address	`0x1a89`

sci_find_matching_brace

Ordinal	`120`
Address	`0x1a94`

sci_find_text

Ordinal	`121`
Address	`0x1a9f`

sci_get_char_at

Ordinal	`122`
Address	`0x1aaa`

sci_get_col_from_position

Ordinal	`123`
Address	`0x1ab5`

sci_get_contents

Ordinal	`124`
Address	`0x1ac0`

sci_get_contents_range

Ordinal	`125`
Address	`0x1acb`

sci_get_current_line

Ordinal	`126`
Address	`0x1ad6`

sci_get_current_position

Ordinal	`127`
Address	`0x1ae1`

sci_get_length

Ordinal	`128`
Address	`0x1aec`

sci_get_lexer

Ordinal	`129`
Address	`0x1af7`

sci_get_line

Ordinal	`130`
Address	`0x1b02`

sci_get_line_count

Ordinal	`131`
Address	`0x1b0d`

sci_get_line_end_position

Ordinal	`132`
Address	`0x1b18`

sci_get_line_from_position

Ordinal	`133`
Address	`0x1b23`

sci_get_line_indentation

Ordinal	`134`
Address	`0x1b2e`

sci_get_line_is_visible

Ordinal	`135`
Address	`0x1b39`

sci_get_line_length

Ordinal	`136`
Address	`0x1b44`

sci_get_position_from_line

Ordinal	`137`
Address	`0x1b4f`

sci_get_selected_text

Ordinal	`138`
Address	`0x1b5a`

sci_get_selected_text_length

Ordinal	`139`
Address	`0x1b65`

sci_get_selected_text_length2

Ordinal	`140`
Address	`0x1b70`

sci_get_selection_contents

Ordinal	`141`
Address	`0x1b7b`

sci_get_selection_end

Ordinal	`142`
Address	`0x1b86`

sci_get_selection_mode

Ordinal	`143`
Address	`0x1b91`

sci_get_selection_start

Ordinal	`144`
Address	`0x1b9c`

sci_get_style_at

Ordinal	`145`
Address	`0x1ba7`

sci_get_tab_width

Ordinal	`146`
Address	`0x1bb2`

sci_get_text

Ordinal	`147`
Address	`0x1bbd`

sci_get_text_range

Ordinal	`148`
Address	`0x1bc8`

sci_goto_line

Ordinal	`149`
Address	`0x1bd3`

sci_has_selection

Ordinal	`150`
Address	`0x1bde`

sci_indicator_clear

Ordinal	`151`
Address	`0x1be9`

sci_indicator_set

Ordinal	`152`
Address	`0x1bf4`

sci_insert_text

Ordinal	`153`
Address	`0x1bff`

sci_is_marker_set_at_line

Ordinal	`154`
Address	`0x1c0a`

sci_replace_sel

Ordinal	`155`
Address	`0x1c15`

sci_replace_target

Ordinal	`156`
Address	`0x1c20`

sci_scroll_caret

Ordinal	`157`
Address	`0x1c2b`

sci_send_command

Ordinal	`158`
Address	`0x1c36`

sci_set_current_position

Ordinal	`159`
Address	`0x1c41`

sci_set_font

Ordinal	`160`
Address	`0x1c4c`

sci_set_line_indentation

Ordinal	`161`
Address	`0x1c57`

sci_set_marker_at_line

Ordinal	`162`
Address	`0x1c62`

sci_set_selection_end

Ordinal	`163`
Address	`0x1c6d`

sci_set_selection_mode

Ordinal	`164`
Address	`0x1c78`

sci_set_selection_start

Ordinal	`165`
Address	`0x1c83`

sci_set_target_end

Ordinal	`166`
Address	`0x1c8e`

sci_set_target_start

Ordinal	`167`
Address	`0x1c99`

sci_set_text

Ordinal	`168`
Address	`0x1ca4`

sci_start_undo_action

Ordinal	`169`
Address	`0x1caf`

scintilla_get_type

Ordinal	`170`
Address	`0x1cba`

scintilla_new

Ordinal	`171`
Address	`0x1cc5`

scintilla_object_get_type

Ordinal	`172`
Address	`0x1cd0`

scintilla_object_new

Ordinal	`173`
Address	`0x1cdb`

scintilla_object_send_message

Ordinal	`174`
Address	`0x1ce6`

scintilla_send_message

Ordinal	`175`
Address	`0x1cf1`

scnotification_get_type

Ordinal	`176`
Address	`0x1cfc`

search_show_find_in_files_dialog

Ordinal	`177`
Address	`0x1d07`

sidebar_create_store_openfiles

Ordinal	`178`
Address	`0x1d12`

sidebar_openfiles_add

Ordinal	`179`
Address	`0x1d1d`

spawn_async

Ordinal	`180`
Address	`0x1d28`

spawn_check_command

Ordinal	`181`
Address	`0x1d33`

spawn_kill_process

Ordinal	`182`
Address	`0x1d3e`

spawn_sync

Ordinal	`183`
Address	`0x1d49`

spawn_with_callbacks

Ordinal	`184`
Address	`0x1d54`

spawn_write_data

Ordinal	`185`
Address	`0x1d5f`

stash_group_add_boolean

Ordinal	`186`
Address	`0x1d6a`

stash_group_add_combo_box

Ordinal	`187`
Address	`0x1d75`

stash_group_add_combo_box_entry

Ordinal	`188`
Address	`0x1d80`

stash_group_add_double

Ordinal	`189`
Address	`0x1d8b`

stash_group_add_entry

Ordinal	`190`
Address	`0x1d96`

stash_group_add_integer

Ordinal	`191`
Address	`0x1da1`

stash_group_add_radio_buttons

Ordinal	`192`
Address	`0x1dac`

stash_group_add_spin_button_integer

Ordinal	`193`
Address	`0x1db7`

stash_group_add_string

Ordinal	`194`
Address	`0x1dc2`

stash_group_add_string_vector

Ordinal	`195`
Address	`0x1dcd`

stash_group_add_toggle_button

Ordinal	`196`
Address	`0x1dd8`

stash_group_add_widget_property

Ordinal	`197`
Address	`0x1de3`

stash_group_display

Ordinal	`198`
Address	`0x1dee`

stash_group_free

Ordinal	`199`
Address	`0x1df9`

stash_group_free_settings

Ordinal	`200`
Address	`0x1e04`

stash_group_get_type

Ordinal	`201`
Address	`0x1e0f`

stash_group_load_from_file

Ordinal	`202`
Address	`0x1e1a`

stash_group_load_from_key_file

Ordinal	`203`
Address	`0x1e25`

stash_group_new

Ordinal	`204`
Address	`0x1e30`

stash_group_save_to_file

Ordinal	`205`
Address	`0x1e3b`

stash_group_save_to_key_file

Ordinal	`206`
Address	`0x1e46`

stash_group_update

Ordinal	`207`
Address	`0x1e51`

symbols_get_context_separator

Ordinal	`208`
Address	`0x1e5c`

templates_get_template_fileheader

Ordinal	`209`
Address	`0x1e67`

tm_get_real_path

Ordinal	`210`
Address	`0x1e72`

tm_source_file_free

Ordinal	`211`
Address	`0x1e7d`

tm_source_file_get_type

Ordinal	`212`
Address	`0x1e88`

tm_source_file_new

Ordinal	`213`
Address	`0x1e93`

tm_tag_get_type

Ordinal	`214`
Address	`0x1e9e`

tm_workspace_add_source_file

Ordinal	`215`
Address	`0x1ea9`

tm_workspace_add_source_files

Ordinal	`216`
Address	`0x1eb4`

tm_workspace_remove_source_file

Ordinal	`217`
Address	`0x1ebf`

tm_workspace_remove_source_files

Ordinal	`218`
Address	`0x1eca`

ui_add_document_sensitive

Ordinal	`219`
Address	`0x1ed5`

ui_button_new_with_image

Ordinal	`220`
Address	`0x1ee0`

ui_combo_box_add_to_history

Ordinal	`221`
Address	`0x1eeb`

ui_dialog_vbox_new

Ordinal	`222`
Address	`0x1ef6`

ui_entry_add_clear_icon

Ordinal	`223`
Address	`0x1f01`

ui_frame_new_with_alignment

Ordinal	`224`
Address	`0x1f0c`

ui_get_gtk_settings_integer

Ordinal	`225`
Address	`0x1f17`

ui_image_menu_item_new

Ordinal	`226`
Address	`0x1f22`

ui_is_keyval_enter_or_return

Ordinal	`227`
Address	`0x1f2d`

ui_lookup_stock_label

Ordinal	`228`
Address	`0x1f38`

ui_lookup_widget

Ordinal	`229`
Address	`0x1f43`

ui_menu_add_document_items

Ordinal	`230`
Address	`0x1f4e`

ui_menu_add_document_items_sorted

Ordinal	`231`
Address	`0x1f59`

ui_path_box_new

Ordinal	`232`
Address	`0x1f64`

ui_progress_bar_start

Ordinal	`233`
Address	`0x1f6f`

ui_progress_bar_stop

Ordinal	`234`
Address	`0x1f7a`

ui_set_statusbar

Ordinal	`235`
Address	`0x1f85`

ui_table_add_row

Ordinal	`236`
Address	`0x1f90`

ui_tree_view_set_tooltip_text_column

Ordinal	`237`
Address	`0x1f9b`

ui_widget_modify_font_from_string

Ordinal	`238`
Address	`0x1fa6`

ui_widget_set_tooltip_text

Ordinal	`239`
Address	`0x1fb1`

utils_copy_environment

Ordinal	`240`
Address	`0x1fbc`

utils_find_open_xml_tag

Ordinal	`241`
Address	`0x1fc7`

utils_find_open_xml_tag_pos

Ordinal	`242`
Address	`0x1fd2`

utils_get_date_time

Ordinal	`243`
Address	`0x1fdd`

utils_get_file_list

Ordinal	`244`
Address	`0x1fe8`

utils_get_file_list_full

Ordinal	`245`
Address	`0x1ff3`

utils_get_locale_from_utf8

Ordinal	`246`
Address	`0x1ffe`

utils_get_real_path

Ordinal	`247`
Address	`0x2009`

utils_get_setting_boolean

Ordinal	`248`
Address	`0x2014`

utils_get_setting_double

Ordinal	`249`
Address	`0x201f`

utils_get_setting_integer

Ordinal	`250`
Address	`0x202a`

utils_get_setting_string

Ordinal	`251`
Address	`0x2035`

utils_get_utf8_from_locale

Ordinal	`252`
Address	`0x2040`

utils_mkdir

Ordinal	`253`
Address	`0x204b`

utils_open_browser

Ordinal	`254`
Address	`0x2056`

utils_remove_ext_from_filename

Ordinal	`255`
Address	`0x2061`

utils_spawn_async

Ordinal	`256`
Address	`0x206c`

utils_spawn_sync

Ordinal	`257`
Address	`0x2077`

utils_str_casecmp

Ordinal	`258`
Address	`0x2082`

utils_str_equal

Ordinal	`259`
Address	`0x208d`

utils_str_middle_truncate

Ordinal	`260`
Address	`0x2098`

utils_str_remove_chars

Ordinal	`261`
Address	`0x20a3`

utils_string_replace_all

Ordinal	`262`
Address	`0x20ae`

utils_string_replace_first

Ordinal	`263`
Address	`0x20b9`

utils_strv_find_common_prefix

Ordinal	`264`
Address	`0x20c4`

utils_strv_find_lcs

Ordinal	`265`
Address	`0x20cf`

utils_strv_new

Ordinal	`266`
Address	`0x20da`

utils_strv_shorten_file_list

Ordinal	`267`
Address	`0x20e5`

utils_write_file

Ordinal	`268`
Address	`0x20f0`

Version Info

TLS Callbacks

StartAddressOfRawData	`0x6d7e0000`
EndAddressOfRawData	`0x6d7e0060`
AddressOfIndex	`0x6d7da8cc`
AddressOfCallbacks	`0x6d7df030`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_TYPE_REG`
Callbacks	`0x000000006D782D80` `0x000000006D782D50`

Load Configuration

RICH Header

Errors

[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /31!
[*] Warning: Tried to read outside the COFF string table to get the name of section /45!
[*] Warning: Tried to read outside the COFF string table to get the name of section /57!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /81!
[*] Warning: Tried to read outside the COFF string table to get the name of section /92!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF String Table's reported size is bigger than the remaining bytes!
[*] Warning: Section .bss has a size of 0!

Leave a comment

No comments yet.