API tools faq
paste
Advertisement
Sweetening

PDANET.exe Private Header Dump

Sweetening
Jun 12th, 2024
65
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 22.72 KB | None | 0 0
raw download clone embed print report
  1. $ objdump -p "C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe"
  2.  
  3. C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe: file format pei-i386
  4.  
  5. Characteristics 0x103
  6. relocations stripped
  7. executable
  8. 32 bit words
  9.  
  10. Time/Date Tue Apr 07 10:55:42 2015
  11. Magic 010b (PE32)
  12. MajorLinkerVersion 8
  13. MinorLinkerVersion 0
  14. SizeOfCode 000bd000
  15. SizeOfInitializedData 00043000
  16. SizeOfUninitializedData 00000000
  17. AddressOfEntryPoint 000352be
  18. BaseOfCode 00001000
  19. BaseOfData 000be000
  20. ImageBase 00400000
  21. SectionAlignment 00001000
  22. FileAlignment 00001000
  23. MajorOSystemVersion 4
  24. MinorOSystemVersion 0
  25. MajorImageVersion 0
  26. MinorImageVersion 0
  27. MajorSubsystemVersion 4
  28. MinorSubsystemVersion 0
  29. Win32Version 00000000
  30. SizeOfImage 00107000
  31. SizeOfHeaders 00001000
  32. CheckSum 0010f578
  33. Subsystem 00000002 (Windows GUI)
  34. DllCharacteristics 00000000
  35. SizeOfStackReserve 00100000
  36. SizeOfStackCommit 00001000
  37. SizeOfHeapReserve 00100000
  38. SizeOfHeapCommit 00001000
  39. LoaderFlags 00000000
  40. NumberOfRvaAndSizes 00000010
  41.  
  42. The Data Directory
  43. Entry 0 00000000 00000000 Export Directory [.edata (or where ever we found it)]
  44. Entry 1 000e2760 00000140 Import Directory [parts of .idata]
  45. Entry 2 000f8000 0000e768 Resource Directory [.rsrc]
  46. Entry 3 00000000 00000000 Exception Directory [.pdata]
  47. Entry 4 00101000 00001738 Security Directory
  48. Entry 5 00000000 00000000 Base Relocation Directory [.reloc]
  49. Entry 6 000be580 0000001c Debug Directory
  50. Entry 7 00000000 00000000 Description Directory
  51. Entry 8 00000000 00000000 Special Directory
  52. Entry 9 00000000 00000000 Thread Storage Directory [.tls]
  53. Entry a 000dcd30 00000040 Load Configuration Directory
  54. Entry b 00000000 00000000 Bound Import Directory
  55. Entry c 000be000 000004e0 Import Address Table Directory
  56. Entry d 000e266c 00000040 Delay Import Directory
  57. Entry e 00000000 00000000 CLR Runtime Header
  58. Entry f 00000000 00000000 Reserved
  59.  
  60. There is an import table in .rdata at 0x4e2760
  61.  
  62. The Import Tables (interpreted .rdata section contents)
  63. vma: Hint Time Forward DLL First
  64. Table Stamp Chain Name Thunk
  65. 000e2760 000e2cd4 00000000 00000000 000e2d8e 000be434
  66.  
  67. DLL Name: WINMM.dll
  68. vma: Hint/Ord Member-Name Bound-To
  69. e2d80 10 PlaySoundA
  70.  
  71. 000e2774 000e2ba0 00000000 00000000 000e2dea 000be300
  72.  
  73. DLL Name: SHLWAPI.dll
  74. vma: Hint/Ord Member-Name Bound-To
  75. e2d98 295 UrlEscapeA
  76. e2dca 152 SHDeleteValueA
  77. e2db4 113 PathRemoveFileSpecA
  78. e2da6 29 PathAppendA
  79. e2ddc 161 SHGetValueA
  80.  
  81. 000e2788 000e2b60 00000000 00000000 000e2e82 000be2c0
  82.  
  83. DLL Name: RASAPI32.dll
  84. vma: Hint/Ord Member-Name Bound-To
  85. e2e10 107 RasSetEntryPropertiesA
  86. e2e3c 75 RasHangUpA
  87. e2e4a 20 RasDialA
  88. e2e70 32 RasEnumEntriesA
  89. e2e56 105 RasSetEntryDialParamsA
  90. e2df6 62 RasGetEntryPropertiesA
  91. e2e2a 30 RasEnumDevicesA
  92.  
  93. 000e279c 000e2cbc 00000000 00000000 000e2ef0 000be41c
  94.  
  95. DLL Name: WININET.dll
  96. vma: Hint/Ord Member-Name Bound-To
  97. e2ee0 146 InternetOpenA
  98. e2e90 105 InternetCloseHandle
  99. e2ea6 154 InternetReadFile
  100. e2eba 87 HttpQueryInfoA
  101. e2ecc 147 InternetOpenUrlA
  102.  
  103. 000e27b0 000e2cdc 00000000 00000000 000e2f44 000be43c
  104.  
  105. DLL Name: WS2_32.dll
  106. vma: Hint/Ord Member-Name Bound-To
  107. 80000034 52 <none>
  108. 8000000e 14 <none>
  109. 80000003 3 <none>
  110. 80000013 19 <none>
  111. 8000000f 15 <none>
  112. 80000010 16 <none>
  113. 80000004 4 <none>
  114. 80000015 21 <none>
  115. 8000000a 10 <none>
  116. 8000006f 111 <none>
  117. 8000000c 12 <none>
  118. 80000009 9 <none>
  119. 80000074 116 <none>
  120. 8000000b 11 <none>
  121. 80000014 20 <none>
  122. 80000012 18 <none>
  123. 80000097 151 <none>
  124. 80000011 17 <none>
  125. 80000008 8 <none>
  126. e2f2a 44 WSALookupServiceBeginW
  127. e2f12 47 WSALookupServiceNextW
  128. e2efc 45 WSALookupServiceEnd
  129. 80000073 115 <none>
  130. 80000017 23 <none>
  131.  
  132. 000e27c4 000e2b80 00000000 00000000 000e2fca 000be2e0
  133.  
  134. DLL Name: SETUPAPI.dll
  135. vma: Hint/Ord Member-Name Bound-To
  136. e2f70 327 SetupDiGetDeviceInterfaceDetailA
  137. e2f50 285 SetupDiDestroyDeviceInfoList
  138. e2fb2 305 SetupDiGetClassDevsA
  139. e2f94 289 SetupDiEnumDeviceInterfaces
  140.  
  141. 000e27d8 000e2904 00000000 00000000 000e33f6 000be064
  142.  
  143. DLL Name: KERNEL32.dll
  144. vma: Hint/Ord Member-Name Bound-To
  145. e3c74 540 HeapSize
  146. e3c60 325 GetCurrentThread
  147. e3c3c 867 TlsAlloc
  148. e4090 682 ReadConsoleInputA
  149. e40a4 765 SetConsoleMode
  150. e3c48 870 TlsSetValue
  151. e3c56 868 TlsFree
  152. e3c80 260 GetCPInfo
  153. e3c2e 869 TlsGetValue
  154. e3c1e 441 GetStdHandle
  155. e3c10 185 ExitProcess
  156. e3c02 530 HeapCreate
  157. e3f2e 237 FlushConsoleInputBuffer
  158. e3f18 516 GlobalMemoryStatus
  159. e3f0a 488 GetVersion
  160. e3ef0 787 SetEnvironmentVariableA
  161. e3ede 59 CompareStringW
  162. e3ecc 58 CompareStringA
  163. e3ebc 784 SetEndOfFile
  164. e3eac 931 WriteConsoleW
  165. e3e96 309 GetConsoleOutputCP
  166. e3e86 921 WriteConsoleA
  167. e3bf4 532 HeapDestroy
  168. e3be4 192 FatalAppExitA
  169. e3bd2 439 GetStartupInfoA
  170. e3bc0 272 GetCommandLineA
  171. e3bac 569 IsDebuggerPresent
  172. e2fd8 522 GlobalUnlock
  173. e2fe8 515 GlobalLock
  174. e2ff6 504 GlobalAlloc
  175. e3004 629 MultiByteToWideChar
  176. e301a 916 WideCharToMultiByte
  177. e3030 152 EnterCriticalSection
  178. e3048 593 LeaveCriticalSection
  179. e3060 912 WaitForSingleObject
  180. e3076 239 FlushInstructionCache
  181. e308e 322 GetCurrentProcess
  182. e30a2 973 lstrlenW
  183. e30ae 52 CloseHandle
  184. e30bc 111 CreateThread
  185. e30cc 972 lstrlenA
  186. e30d8 326 GetCurrentThreadId
  187. e30ee 381 GetModuleFileNameA
  188. e3104 131 DeleteFileA
  189. e3112 79 CreateEventA
  190. e3122 719 ResetEvent
  191. e3130 679 RaiseException
  192. e3142 808 SetLastError
  193. e3152 854 Sleep
  194. e315a 863 TerminateThread
  195. e316c 369 GetLastError
  196. e317c 248 FreeLibrary
  197. e318a 416 GetProcAddress
  198. e319c 594 LoadLibraryA
  199. e31ac 547 InitializeCriticalSection
  200. e3c8c 403 GetOEMCP
  201. e31e0 489 GetVersionExA
  202. e31f0 790 SetEvent
  203. e31fc 83 CreateFileA
  204. e320a 556 InterlockedIncrement
  205. e3222 552 InterlockedDecrement
  206. e323a 963 lstrcmpiA
  207. e3246 567 IsDBCSLeadByte
  208. e3258 853 SizeofResource
  209. e326a 599 LoadResource
  210. e327a 227 FindResourceA
  211. e328a 595 LoadLibraryExA
  212. e329c 383 GetModuleHandleA
  213. e32b0 404 GetOverlappedResult
  214. e32c6 910 WaitForMultipleObjects
  215. e32e0 138 DeviceIoControl
  216. e32f2 42 CancelIo
  217. e32fe 932 WriteFile
  218. e330a 693 ReadFile
  219. e3316 944 WriteProfileStringA
  220. e332c 960 lstrcmpA
  221. e3338 966 lstrcpyA
  222. e3344 969 lstrcpynA
  223. e3350 742 SetCommTimeouts
  224. e3362 917 WinExec
  225. e336c 957 lstrcatA
  226. e3378 107 CreateSemaphoreA
  227. e338c 707 ReleaseSemaphore
  228. e33a0 479 GetTickCount
  229. e33b0 653 OutputDebugStringA
  230. e33c6 553 InterlockedExchange
  231. e33dc 600 LocalAlloc
  232. e33ea 604 LocalFree
  233. e3b8e 842 SetUnhandledExceptionFilter
  234. e3b72 878 UnhandledExceptionFilter
  235. e3b5e 862 TerminateProcess
  236. e3b44 458 GetSystemTimeAsFileTime
  237. e3b2a 482 GetTimeZoneInformation
  238. e3b1c 538 HeapReAlloc
  239. e3b10 727 RtlUnwind
  240. e3b00 904 VirtualQuery
  241. e3af0 453 GetSystemInfo
  242. e3ade 902 VirtualProtect
  243. e3ace 897 VirtualAlloc
  244. e3ac0 899 VirtualFree
  245. e3aa4 572 IsProcessorFeaturePresent
  246. e3a98 528 HeapAlloc
  247. e3a86 419 GetProcessHeap
  248. e3a7a 534 HeapFree
  249. e3a5c 550 InterlockedCompareExchange
  250. e3d38 343 GetEnvironmentStringsW
  251. e3a4a 474 GetThreadLocale
  252. e3a38 372 GetLocaleInfoA
  253. e3a2e 253 GetACP
  254. e3d52 804 SetHandleCount
  255. e3d64 358 GetFileType
  256. e3d72 675 QueryPerformanceCounter
  257. e3d8c 323 GetCurrentProcessId
  258. e3da2 750 SetConsoleCtrlHandler
  259. e3dba 373 GetLocaleInfoW
  260. e3dcc 795 SetFilePointer
  261. e3dde 823 SetStdHandle
  262. e3dee 238 FlushFileBuffers
  263. e3e02 442 GetStringTypeA
  264. e3e14 445 GetStringTypeW
  265. e3e26 480 GetTimeFormatA
  266. e3e38 327 GetDateFormatA
  267. e3e4a 483 GetUserDefaultLCID
  268. e3e60 175 EnumSystemLocalesA
  269. e3e76 577 IsValidLocale
  270. e3c98 575 IsValidCodePage
  271. e3caa 580 LCMapStringA
  272. e3cba 581 LCMapStringW
  273. e3cca 290 GetConsoleCP
  274. e3cda 307 GetConsoleMode
  275. e3cec 246 FreeEnvironmentStringsA
  276. e3d06 341 GetEnvironmentStrings
  277. e3d1e 247 FreeEnvironmentStringsW
  278. e40b6 655 PeekConsoleInputA
  279. e31c8 129 DeleteCriticalSection
  280. e40ca 401 GetNumberOfConsoleInputEvents
  281.  
  282. 000e27ec 000e2bb8 00000000 00000000 000e37fa 000be318
  283.  
  284. DLL Name: USER32.dll
  285. vma: Hint/Ord Member-Name Bound-To
  286. e35d6 27 CallWindowProcA
  287. e35c8 448 LoadImageA
  288. e35e8 414 IsChild
  289. e35f2 196 EnableWindow
  290. e3602 153 DestroyWindow
  291. e3612 514 PostMessageA
  292. e3622 15 BringWindowToTop
  293. e3636 247 GetClassInfoExA
  294. e3648 442 LoadCursorA
  295. e3656 535 RegisterClassExA
  296. e366a 96 CreateWindowExA
  297. e367c 433 IsWindowVisible
  298. e368e 634 SetTimer
  299. e369a 437 KillTimer
  300. e36a6 516 PostQuitMessage
  301. e35b6 142 DefWindowProcA
  302. e35aa 325 GetParent
  303. e359e 362 GetWindow
  304. e3586 665 SystemParametersInfoA
  305. e3574 474 MapWindowPoints
  306. e3566 479 MessageBoxA
  307. e3558 658 ShowWindow
  308. e3548 255 GetClientRect
  309. e3528 643 SetWindowPos
  310. e3516 646 SetWindowTextA
  311. e3506 571 SendMessageA
  312. e34f4 366 GetWindowLongA
  313. e34e2 640 SetWindowLongA
  314. e34c6 493 MsgWaitForMultipleObjects
  315. e34b6 512 PeekMessageA
  316. e34a4 432 IsWindowUnicode
  317. e3496 318 GetMessageW
  318. e3488 314 GetMessageA
  319. e3474 682 TranslateMessage
  320. e3460 162 DispatchMessageW
  321. e344c 161 DispatchMessageA
  322. e343c 502 OpenClipboard
  323. e342a 193 EmptyClipboard
  324. e3416 586 SetClipboardData
  325. e3404 66 CloseClipboard
  326. e36b8 599 SetForegroundWindow
  327. e36ce 429 IsWindow
  328. e36da 289 GetKeyState
  329. e36e8 42 CharNextA
  330. e36f4 227 FindWindowA
  331. e3f48 691 UnregisterClassA
  332. e3f5c 359 GetUserObjectInformationW
  333. e3f78 328 GetProcessWindowStation
  334. e3f92 270 GetDesktopWindow
  335. e3702 232 FlashWindowEx
  336. e3712 235 GetActiveWindow
  337. e37dc 540 RegisterDeviceNotificationA
  338. e37c2 551 RegisterWindowMessageA
  339. e37b2 267 GetCursorPos
  340. e37a6 454 LoadMenuA
  341. e3798 345 GetSubMenu
  342. e378a 145 DeleteMenu
  343. e3778 194 EnableMenuItem
  344. e3768 57 CheckMenuItem
  345. e375a 487 ModifyMenuA
  346. e3748 676 TrackPopupMenu
  347. e373a 151 DestroyMenu
  348. e3724 277 GetDoubleClickTime
  349. e3538 372 GetWindowRect
  350.  
  351. 000e2800 000e28a0 00000000 00000000 000e38b4 000be000
  352.  
  353. DLL Name: ADVAPI32.dll
  354. vma: Hint/Ord Member-Name Bound-To
  355. e3806 459 RegCloseKey
  356. e3826 465 RegCreateKeyExA
  357. e3838 517 RegSetValueExW
  358. e384a 503 RegQueryValueExA
  359. e385e 492 RegOpenKeyExA
  360. e386e 468 RegDeleteKeyA
  361. e387e 472 RegDeleteValueA
  362. e3890 497 RegQueryInfoKeyA
  363. e38a4 478 RegEnumKeyExA
  364. e3814 516 RegSetValueExA
  365. e4050 176 DeregisterEventSource
  366. e4068 532 ReportEventA
  367. e4078 521 RegisterEventSourceA
  368.  
  369. 000e2814 000e2b94 00000000 00000000 000e38e6 000be2f4
  370.  
  371. DLL Name: SHELL32.dll
  372. vma: Hint/Ord Member-Name Bound-To
  373. e38c2 263 ShellExecuteA
  374. e38d2 275 Shell_NotifyIconA
  375.  
  376. 000e2828 000e2d54 00000000 00000000 000e39a2 000be4b4
  377.  
  378. DLL Name: ole32.dll
  379. vma: Hint/Ord Member-Name Bound-To
  380. e394e 101 CoTaskMemFree
  381. e395e 261 OleUninitialize
  382. e393a 102 CoTaskMemRealloc
  383. e3980 6 CLSIDFromProgID
  384. e3992 310 StringFromIID
  385. e3928 100 CoTaskMemAlloc
  386. e3918 59 CoInitialize
  387. e3906 105 CoUninitialize
  388. e3970 238 OleInitialize
  389. e38f2 16 CoCreateInstance
  390.  
  391. 000e283c 000e2b28 00000000 00000000 000e39ac 000be288
  392.  
  393. DLL Name: OLEAUT32.dll
  394. vma: Hint/Ord Member-Name Bound-To
  395. 80000008 8 <none>
  396. 80000009 9 <none>
  397. 8000000a 10 <none>
  398. 80000004 4 <none>
  399. 80000002 2 <none>
  400. 80000096 150 <none>
  401. 80000095 149 <none>
  402. 80000007 7 <none>
  403. 800000a1 161 <none>
  404. 80000139 313 <none>
  405. 80000115 277 <none>
  406. 80000006 6 <none>
  407. 80000092 146 <none>
  408.  
  409. 000e2850 000e2d40 00000000 00000000 000e3a00 000be4a0
  410.  
  411. DLL Name: WTSAPI32.dll
  412. vma: Hint/Ord Member-Name Bound-To
  413. e39dc 26 WTSUnRegisterSessionNotification
  414. e39ba 17 WTSRegisterSessionNotification
  415.  
  416. 000e2864 000e2d4c 00000000 00000000 000e3a20 000be4ac
  417.  
  418. DLL Name: iphlpapi.dll
  419. vma: Hint/Ord Member-Name Bound-To
  420. e3a0e 28 GetAdaptersInfo
  421.  
  422. 000e2878 000e28d8 00000000 00000000 000e4046 000be038
  423.  
  424. DLL Name: GDI32.dll
  425. vma: Hint/Ord Member-Name Bound-To
  426. e403a 46 CreateDCA
  427. e3fb2 143 DeleteObject
  428. e3fc2 330 GetBitmapBits
  429. e3fd2 18 BitBlt
  430. e3fdc 405 GetObjectA
  431. e3fea 526 SelectObject
  432. e3ffa 44 CreateCompatibleBitmap
  433. e4014 363 GetDeviceCaps
  434. e3fa6 140 DeleteDC
  435. e4024 45 CreateCompatibleDC
  436.  
  437. 000e288c 00000000 00000000 00000000 00000000 00000000
  438.  
  439. There is a debug directory in .rdata at 0x4be580
  440.  
  441. Type Size Rva Offset
  442. 2 CodeView 00000049 000dcd78 000dcd78
  443. (format RSDS signature 08d599e791c1479499cb40452864cf67 age 1)
  444.  
  445. The .rsrc Resource Directory section:
  446. 000 Type Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 2, IDs: 7
  447. 010 Entry: name: [val: 80000508 len 7]: TYPELIB, Value: 0x80000058
  448. 058 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  449. 068 Entry: ID: 0x000001, Value: 0x80000198
  450. 198 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  451. 1a8 Entry: ID: 0x000409, Value: 0x0003a8
  452. 3a8 Leaf: Addr: 0x0f853c, Size: 0x000c18, Codepage: 1252
  453. 018 Entry: name: [val: 80000518 len 4]: WAVE, Value: 0x80000070
  454. 070 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  455. 080 Entry: ID: 0x0007d0, Value: 0x800001b0
  456. 1b0 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  457. 1c0 Entry: ID: 0x000409, Value: 0x0003b8
  458. 3b8 Leaf: Addr: 0x0f9154, Size: 0x00409a, Codepage: 1252
  459. 020 Entry: ID: 0x000002, Value: 0x80000088
  460. 088 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 1, IDs: 0
  461. 098 Entry: name: [val: 80000522 len 11]: IDB_BITMAP1, Value: 0x800001c8
  462. 1c8 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  463. 1d8 Entry: ID: 0x000409, Value: 0x0003c8
  464. 3c8 Leaf: Addr: 0x0fd1f0, Size: 0x0004e8, Codepage: 1252
  465. 028 Entry: ID: 0x000003, Value: 0x800000a0
  466. 0a0 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 10
  467. 0b0 Entry: ID: 0x000001, Value: 0x800001e0
  468. 1e0 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  469. 1f0 Entry: ID: 0x000409, Value: 0x0003d8
  470. 3d8 Leaf: Addr: 0x0fd6d8, Size: 0x0025a8, Codepage: 1252
  471. 0b8 Entry: ID: 0x000002, Value: 0x800001f8
  472. 1f8 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  473. 208 Entry: ID: 0x000409, Value: 0x0003e8
  474. 3e8 Leaf: Addr: 0x0ffc80, Size: 0x0010a8, Codepage: 1252
  475. 0c0 Entry: ID: 0x000003, Value: 0x80000210
  476. 210 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  477. 220 Entry: ID: 0x000409, Value: 0x0003f8
  478. 3f8 Leaf: Addr: 0x100d28, Size: 0x000468, Codepage: 1252
  479. 0c8 Entry: ID: 0x000004, Value: 0x80000228
  480. 228 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  481. 238 Entry: ID: 0x000409, Value: 0x000408
  482. 408 Leaf: Addr: 0x101190, Size: 0x000568, Codepage: 1252
  483. 0d0 Entry: ID: 0x000005, Value: 0x80000240
  484. 240 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  485. 250 Entry: ID: 0x000409, Value: 0x000418
  486. 418 Leaf: Addr: 0x1016f8, Size: 0x000568, Codepage: 1252
  487. 0d8 Entry: ID: 0x000006, Value: 0x80000258
  488. 258 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  489. 268 Entry: ID: 0x000409, Value: 0x000428
  490. 428 Leaf: Addr: 0x101c60, Size: 0x000568, Codepage: 1252
  491. 0e0 Entry: ID: 0x000007, Value: 0x80000270
  492. 270 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  493. 280 Entry: ID: 0x000409, Value: 0x000438
  494. 438 Leaf: Addr: 0x1021c8, Size: 0x0025a8, Codepage: 1252
  495. 0e8 Entry: ID: 0x000008, Value: 0x80000288
  496. 288 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  497. 298 Entry: ID: 0x000409, Value: 0x000448
  498. 448 Leaf: Addr: 0x104770, Size: 0x0010a8, Codepage: 1252
  499. 0f0 Entry: ID: 0x000009, Value: 0x800002a0
  500. 2a0 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  501. 2b0 Entry: ID: 0x000409, Value: 0x000458
  502. 458 Leaf: Addr: 0x105818, Size: 0x000468, Codepage: 1252
  503. 0f8 Entry: ID: 0x00000a, Value: 0x800002b8
  504. 2b8 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  505. 2c8 Entry: ID: 0x000409, Value: 0x000468
  506. 468 Leaf: Addr: 0x105c80, Size: 0x000568, Codepage: 1252
  507. 030 Entry: ID: 0x000004, Value: 0x80000100
  508. 100 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  509. 110 Entry: ID: 0x00006d, Value: 0x800002d0
  510. 2d0 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  511. 2e0 Entry: ID: 0x000409, Value: 0x000478
  512. 478 Leaf: Addr: 0x1061e8, Size: 0x00026c, Codepage: 1252
  513. 038 Entry: ID: 0x000006, Value: 0x80000118
  514. 118 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  515. 128 Entry: ID: 0x000007, Value: 0x800002e8
  516. 2e8 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  517. 2f8 Entry: ID: 0x000409, Value: 0x000488
  518. 488 Leaf: Addr: 0x106454, Size: 0x0001fe, Codepage: 1252
  519. 040 Entry: ID: 0x000009, Value: 0x80000130
  520. 130 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  521. 140 Entry: ID: 0x00006d, Value: 0x80000300
  522. 300 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  523. 310 Entry: ID: 0x000409, Value: 0x000498
  524. 498 Leaf: Addr: 0x106654, Size: 0x000010, Codepage: 1252
  525. 048 Entry: ID: 0x00000e, Value: 0x80000148
  526. 148 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 5
  527. 158 Entry: ID: 0x00006b, Value: 0x80000318
  528. 318 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  529. 328 Entry: ID: 0x000409, Value: 0x0004a8
  530. 4a8 Leaf: Addr: 0x106664, Size: 0x000030, Codepage: 1252
  531. 160 Entry: ID: 0x000081, Value: 0x80000330
  532. 330 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  533. 340 Entry: ID: 0x000409, Value: 0x0004b8
  534. 4b8 Leaf: Addr: 0x106694, Size: 0x000014, Codepage: 1252
  535. 168 Entry: ID: 0x000082, Value: 0x80000348
  536. 348 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  537. 358 Entry: ID: 0x000409, Value: 0x0004c8
  538. 4c8 Leaf: Addr: 0x1066a8, Size: 0x000014, Codepage: 1252
  539. 170 Entry: ID: 0x000083, Value: 0x80000360
  540. 360 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  541. 370 Entry: ID: 0x000409, Value: 0x0004d8
  542. 4d8 Leaf: Addr: 0x1066bc, Size: 0x000014, Codepage: 1252
  543. 178 Entry: ID: 0x0000a0, Value: 0x80000378
  544. 378 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  545. 388 Entry: ID: 0x000409, Value: 0x0004e8
  546. 4e8 Leaf: Addr: 0x1066d0, Size: 0x00003e, Codepage: 1252
  547. 050 Entry: ID: 0x000018, Value: 0x80000180
  548. 180 Name Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  549. 190 Entry: ID: 0x000001, Value: 0x80000390
  550. 390 Language Table: Char: 0, Time: 00000000, Ver: 4/0, Num Names: 0, IDs: 1
  551. 3a0 Entry: ID: 0x000409, Value: 0x0004f8
  552. 4f8 Leaf: Addr: 0x106710, Size: 0x000056, Codepage: 1252
  553. String table starts at offset: 0x508
  554. Resources start at offset: 0x53c
  555.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!