# Analysis Report: 223b65ac4158c6b75a84bdb6b91efe60770e41fc9a5db47acd0e4d0c491d6ba5.dll **SHA256:** 223b65ac4158c6b75a84bdb6b91efe60770e41fc9a5db47acd0e4d0c491d6ba5 ## File Info ```text /tmp/223b65ac4158c6b75a84bdb6b91efe60770e41fc9a5db47acd0e4d0c491d6ba5: PE32 executable for MS Windows 4.00 (DLL), Intel i386 (stripped to external PDB), 9 sections ``` ## Detect-It-Easy (DIE) ```text PE32 Linker: GNU linker ld (GNU Binutils)(2.36)[DLL32] Compiler: MinGW(GCC: (GNU) 10.3.0) ``` ## TrID ```text TrID/32 - File Identifier v2.24 - (C) 2003-16 By M.Pontello Definitions found: 21363 Analyzing... Collecting data from file: /tmp/223b65ac4158c6b75a84bdb6b91efe60770e41fc9a5db47acd0e4d0c491d6ba5 34.9% (.EXE) Microsoft Visual C++ compiled executable (generic) (16529/12/5) 13.9% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2) 13.7% (.EXE) Win64 Executable (generic) (6522/11/2) 10.6% (.EXE) Win16 NE executable (generic) (5038/12/1) 9.5% (.EXE) Win32 Executable (generic) (4504/4/1) ``` ## Magika ```text /tmp/223b65ac4158c6b75a84bdb6b91efe60770e41fc9a5db47acd0e4d0c491d6ba5: PE Windows executable (executable) ``` ## PE Check ```text PE check for '/tmp/223b65ac4158c6b75a84bdb6b91efe60770e41fc9a5db47acd0e4d0c491d6ba5': Entropy: 5.349825 (Min=0.0, Max=8.0) Size: 3854336 MD5 hash: 52968f3b5645beb7f1b208dd3f84678b SHA-1 hash: e299da7f96a41f5104bad5380ae02e7edead3a9b SHA-256 hash: 223b65ac4158c6b75a84bdb6b91efe60770e41fc9a5db47acd0e4d0c491d6ba5 SHA-512 hash: b43be78a2b9d781d0b1e2d70e0a235febd514983802b0f017ea43bb4c1441c654d81bff391f80d806abc7054444dc5ce18ea3b689e688619cb8b46cdc9f80ba1 .text entropy: 6.352793 (Min=0.0, Max=8.0) .data entropy: 4.320148 (Min=0.0, Max=8.0) .rdata entropy: 5.414275 (Min=0.0, Max=8.0) .bss entropy: 0.000000 (Min=0.0, Max=8.0) .edata entropy: 0.748022 (Min=0.0, Max=8.0) .idata entropy: 4.798646 (Min=0.0, Max=8.0) .CRT entropy: 0.199108 (Min=0.0, Max=8.0) .tls entropy: 0.000000 (Min=0.0, Max=8.0) .reloc entropy: 5.900492 (Min=0.0, Max=8.0) Dump Info: ----------DOS_HEADER---------- [IMAGE_DOS_HEADER] 0x0 0x0 e_magic: 0x5A4D 0x2 0x2 e_cblp: 0x90 0x4 0x4 e_cp: 0x3 0x6 0x6 e_crlc: 0x0 0x8 0x8 e_cparhdr: 0x4 0xA 0xA e_minalloc: 0x0 0xC 0xC e_maxalloc: 0xFFFF 0xE 0xE e_ss: 0x0 0x10 0x10 e_sp: 0xB8 0x12 0x12 e_csum: 0x0 0x14 0x14 e_ip: 0x0 0x16 0x16 e_cs: 0x0 0x18 0x18 e_lfarlc: 0x40 0x1A 0x1A e_ovno: 0x0 0x1C 0x1C e_res: 0x24 0x24 e_oemid: 0x0 0x26 0x26 e_oeminfo: 0x0 0x28 0x28 e_res2: 0x3C 0x3C e_lfanew: 0x80 ----------NT_HEADERS---------- [IMAGE_NT_HEADERS] 0x80 0x0 Signature: 0x4550 ----------FILE_HEADER---------- [IMAGE_FILE_HEADER] 0x84 0x0 Machine: 0x14C 0x86 0x2 NumberOfSections: 0x9 0x88 0x4 TimeDateStamp: 0x6A1227B5 [Sat May 23 22:18:29 2026 UTC] 0x8C 0x8 PointerToSymbolTable: 0x0 0x90 0xC NumberOfSymbols: 0x0 0x94 0x10 SizeOfOptionalHeader: 0xE0 0x96 0x12 Characteristics: 0x230E Flags: IMAGE_FILE_32BIT_MACHINE, IMAGE_FILE_DEBUG_STRIPPED, IMAGE_FILE_DLL, IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LINE_NUMS_STRIPPED, IMAGE_FILE_LOCAL_SYMS_STRIPPED ----------OPTIONAL_HEADER---------- [IMAGE_OPTIONAL_HEADER] 0x98 0x0 Magic: 0x10B 0x9A 0x2 MajorLinkerVersion: 0x2 0x9B 0x3 MinorLinkerVersion: 0x24 0x9C 0x4 SizeOfCode: 0xCE00 0xA0 0x8 SizeOfInitializedData: 0x3ACC00 0xA4 0xC SizeOfUninitializedData: 0xC00 0xA8 0x10 AddressOfEntryPoint: 0x13B0 0xAC 0x14 BaseOfCode: 0x1000 0xB0 0x18 BaseOfData: 0xE000 0xB4 0x1C ImageBase: 0x70F00000 0xB8 0x20 SectionAlignment: 0x1000 0xBC 0x24 FileAlignment: 0x200 0xC0 0x28 MajorOperatingSystemVersion: 0x4 0xC2 0x2A MinorOperatingSystemVersion: 0x0 0xC4 0x2C MajorImageVersion: 0x1 0xC6 0x2E MinorImageVersion: 0x0 0xC8 0x30 MajorSubsystemVersion: 0x4 0xCA 0x32 MinorSubsystemVersion: 0x0 0xCC 0x34 Reserved1: 0x0 0xD0 0x38 SizeOfImage: 0x3B4000 0xD4 0x3C SizeOfHeaders: 0x400 0xD8 0x40 CheckSum: 0x3B2460 0xDC 0x44 Subsystem: 0x2 0xDE 0x46 DllCharacteristics: 0x140 0xE0 0x48 SizeOfStackReserve: 0x200000 0xE4 0x4C SizeOfStackCommit: 0x1000 0xE8 0x50 SizeOfHeapReserve: 0x100000 0xEC 0x54 SizeOfHeapCommit: 0x1000 0xF0 0x58 LoaderFlags: 0x0 0xF4 0x5C NumberOfRvaAndSizes: 0x10 DllCharacteristics: IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE, IMAGE_DLLCHARACTERISTICS_NX_COMPAT ----------PE Sections---------- [IMAGE_SECTION_HEADER] 0x178 0x0 Name: .text 0x180 0x8 Misc: 0xCDF4 0x180 0x8 Misc_PhysicalAddress: 0xCDF4 0x180 0x8 Misc_VirtualSize: 0xCDF4 0x184 0xC VirtualAddress: 0x1000 0x188 0x10 SizeOfRawData: 0xCE00 0x18C 0x14 PointerToRawData: 0x400 0x190 0x18 PointerToRelocations: 0x0 0x194 0x1C PointerToLinenumbers: 0x0 0x198 0x20 NumberOfRelocations: 0x0 0x19A 0x22 NumberOfLinenumbers: 0x0 0x19C 0x24 Characteristics: 0x60500060 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ Entropy: 6.352793 (Min=0.0, Max=8.0) MD5 hash: fde475a2b01c9e7f16c871acd4486b1a SHA-1 hash: 8416d4bdba8c0fe08d55a2168d10814a2869e26c SHA-256 hash: 4797e3e9fe8a38bac3094d6a93f6003a6a251a1b246ab238468bda8f4c14d622 SHA-512 hash: 4041be1cdcb96d0c75bba3c7b67e05a0836145b470b147244a6eedc16e9ffb84e6019fa00d062d80734bdf7dfe50f428b2b8c63586936c50ea95e8c9a8fe2ecf [IMAGE_SECTION_HEADER] 0x1A0 0x0 Name: .data 0x1A8 0x8 Misc: 0x293560 0x1A8 0x8 Misc_PhysicalAddress: 0x293560 0x1A8 0x8 Misc_VirtualSize: 0x293560 0x1AC 0xC VirtualAddress: 0xE000 0x1B0 0x10 SizeOfRawData: 0x293600 0x1B4 0x14 PointerToRawData: 0xD200 0x1B8 0x18 PointerToRelocations: 0x0 0x1BC 0x1C PointerToLinenumbers: 0x0 0x1C0 0x20 NumberOfRelocations: 0x0 0x1C2 0x22 NumberOfLinenumbers: 0x0 0x1C4 0x24 Characteristics: 0xC0600040 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE Entropy: 4.320148 (Min=0.0, Max=8.0) MD5 hash: b47d45752a358de130844bf5f72675f2 SHA-1 hash: 2effa85bcf8817a3f61fccfa407483f43d05e490 SHA-256 hash: d9244c6922a54c9fc7b5726d7a33dd6934fbe5fef434d8fde77e4c2cd1e9b2ea SHA-512 hash: c2bbd00b4fee95f1564fadf0271108e93c0c1e54d88914c2ce308fd6e06a52cf8797b02f1e0131576e14419ca646bf4cfbe6720be71d0bd800bfcfe8188a79ab [IMAGE_SECTION_HEADER] 0x1C8 0x0 Name: .rdata 0x1D0 0x8 Misc: 0x2660 0x1D0 0x8 Misc_PhysicalAddress: 0x2660 0x1D0 0x8 Misc_VirtualSize: 0x2660 0x1D4 0xC VirtualAddress: 0x2A2000 0x1D8 0x10 SizeOfRawData: 0x2800 0x1DC 0x14 PointerToRawData: 0x2A0800 0x1E0 0x18 PointerToRelocations: 0x0 0x1E4 0x1C PointerToLinenumbers: 0x0 0x1E8 0x20 NumberOfRelocations: 0x0 0x1EA 0x22 NumberOfLinenumbers: 0x0 0x1EC 0x24 Characteristics: 0x40600040 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ Entropy: 5.414275 (Min=0.0, Max=8.0) MD5 hash: b27e51ca38ed6a55cd8b7723c63f5136 SHA-1 hash: 72fb72640114fcc115c779c8e123190fb510a967 SHA-256 hash: 41e60fc40431e494b36d7a020e3a50cc729acafefc38474d142c81322de45890 SHA-512 hash: dd5fd63a5da110c59eeb86f9c4b601c362f02ceba6aa8c3659210d956add02182346a9e1f3f949416a897ab4380476ca92582b7ae19827a18e1ea96156b65e09 [IMAGE_SECTION_HEADER] 0x1F0 0x0 Name: .bss 0x1F8 0x8 Misc: 0xB30 0x1F8 0x8 Misc_PhysicalAddress: 0xB30 0x1F8 0x8 Misc_VirtualSize: 0xB30 0x1FC 0xC VirtualAddress: 0x2A5000 0x200 0x10 SizeOfRawData: 0x0 0x204 0x14 PointerToRawData: 0x0 0x208 0x18 PointerToRelocations: 0x0 0x20C 0x1C PointerToLinenumbers: 0x0 0x210 0x20 NumberOfRelocations: 0x0 0x212 0x22 NumberOfLinenumbers: 0x0 0x214 0x24 Characteristics: 0xC0600080 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE Entropy: 0.000000 (Min=0.0, Max=8.0) MD5 hash: d41d8cd98f00b204e9800998ecf8427e SHA-1 hash: da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA-256 hash: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 SHA-512 hash: cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e [IMAGE_SECTION_HEADER] 0x218 0x0 Name: .edata 0x220 0x8 Misc: 0x45 0x220 0x8 Misc_PhysicalAddress: 0x45 0x220 0x8 Misc_VirtualSize: 0x45 0x224 0xC VirtualAddress: 0x2A6000 0x228 0x10 SizeOfRawData: 0x200 0x22C 0x14 PointerToRawData: 0x2A3000 0x230 0x18 PointerToRelocations: 0x0 0x234 0x1C PointerToLinenumbers: 0x0 0x238 0x20 NumberOfRelocations: 0x0 0x23A 0x22 NumberOfLinenumbers: 0x0 0x23C 0x24 Characteristics: 0x40300040 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ Entropy: 0.748022 (Min=0.0, Max=8.0) MD5 hash: 19f059e0b9b99599ecb89eaba28a970e SHA-1 hash: 27147f8876cee46fed7267d0e92a8c382139c111 SHA-256 hash: 58077ede7236ad6e91e1fffff4b01f60565b6630ce251b71404e19dd407db95b SHA-512 hash: 79cb838f496cde00910ec26ef3825c242abc441e1fe84cd1ee096fa1a217d9f543b9406f6899b66e5691bdcb454e3e17c9478d53a9ffe788fbd1f6d0a2b5f218 [IMAGE_SECTION_HEADER] 0x240 0x0 Name: .idata 0x248 0x8 Misc: 0x5F0 0x248 0x8 Misc_PhysicalAddress: 0x5F0 0x248 0x8 Misc_VirtualSize: 0x5F0 0x24C 0xC VirtualAddress: 0x2A7000 0x250 0x10 SizeOfRawData: 0x600 0x254 0x14 PointerToRawData: 0x2A3200 0x258 0x18 PointerToRelocations: 0x0 0x25C 0x1C PointerToLinenumbers: 0x0 0x260 0x20 NumberOfRelocations: 0x0 0x262 0x22 NumberOfLinenumbers: 0x0 0x264 0x24 Characteristics: 0xC0300040 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE Entropy: 4.798646 (Min=0.0, Max=8.0) MD5 hash: 4b207e2f8acd9abb240a6a336c3c650f SHA-1 hash: 77dbf19d046af94a6b768acd8286d83beaae8b6b SHA-256 hash: 64b0f036a938206e07c787532a28e4077caa32384c3101e7dec6a3c9d38251fe SHA-512 hash: 5660709b93b11fed5e5efcb240e1153cbd3e2310098b65f14a1740581d4de9c1c8469b1bd964c8af638300c2b7381c3d6eb7bc6d3989a103d372eec6eba9dca4 [IMAGE_SECTION_HEADER] 0x268 0x0 Name: .CRT 0x270 0x8 Misc: 0x2C 0x270 0x8 Misc_PhysicalAddress: 0x2C 0x270 0x8 Misc_VirtualSize: 0x2C 0x274 0xC VirtualAddress: 0x2A8000 0x278 0x10 SizeOfRawData: 0x200 0x27C 0x14 PointerToRawData: 0x2A3800 0x280 0x18 PointerToRelocations: 0x0 0x284 0x1C PointerToLinenumbers: 0x0 0x288 0x20 NumberOfRelocations: 0x0 0x28A 0x22 NumberOfLinenumbers: 0x0 0x28C 0x24 Characteristics: 0xC0300040 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE Entropy: 0.199108 (Min=0.0, Max=8.0) MD5 hash: 30a3c995d81bf8de110d464863aba1ef SHA-1 hash: eb901956442e10f4ecd2077f7b70f17790067ef8 SHA-256 hash: f7af1a7e229a9ca52d4b122847f3a3389076e9dc2c9d16c1e7d60f0f5b2f5be1 SHA-512 hash: 2431ac64800076be9cc89bce573c3dfda555d4126bf126ddb1aba32936d1ecfde0a2c07096d8c623a3ece5dc342f09c79d88dde7d9c2ddaa33cda4e073255ce1 [IMAGE_SECTION_HEADER] 0x290 0x0 Name: .tls 0x298 0x8 Misc: 0x8 0x298 0x8 Misc_PhysicalAddress: 0x8 0x298 0x8 Misc_VirtualSize: 0x8 0x29C 0xC VirtualAddress: 0x2A9000 0x2A0 0x10 SizeOfRawData: 0x200 0x2A4 0x14 PointerToRawData: 0x2A3A00 0x2A8 0x18 PointerToRelocations: 0x0 0x2AC 0x1C PointerToLinenumbers: 0x0 0x2B0 0x20 NumberOfRelocations: 0x0 0x2B2 0x22 NumberOfLinenumbers: 0x0 0x2B4 0x24 Characteristics: 0xC0300040 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE Entropy: 0.000000 (Min=0.0, Max=8.0) MD5 hash: bf619eac0cdf3f68d496ea9344137e8b SHA-1 hash: 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 SHA-256 hash: 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 SHA-512 hash: df40d4a774e0b453a5b87c00d6f0ef5d753143454e88ee5f7b607134598294c7905ccbcf94bbc46e474db6eb44e56a6dbb6d9a1be9d4fb5d1b5f2d0c6ed34bfe [IMAGE_SECTION_HEADER] 0x2B8 0x0 Name: .reloc 0x2C0 0x8 Misc: 0x109368 0x2C0 0x8 Misc_PhysicalAddress: 0x109368 0x2C0 0x8 Misc_VirtualSize: 0x109368 0x2C4 0xC VirtualAddress: 0x2AA000 0x2C8 0x10 SizeOfRawData: 0x109400 0x2CC 0x14 PointerToRawData: 0x2A3C00 0x2D0 0x18 PointerToRelocations: 0x0 0x2D4 0x1C PointerToLinenumbers: 0x0 0x2D8 0x20 NumberOfRelocations: 0x0 0x2DA 0x22 NumberOfLinenumbers: 0x0 0x2DC 0x24 Characteristics: 0x42300040 Flags: IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ Entropy: 5.900492 (Min=0.0, Max=8.0) MD5 hash: e0e06383aacb1d8a41e93eda856734c0 SHA-1 hash: 8fc1853056ed552d73b639c31cf49b8678d29a7c SHA-256 hash: e7c069cf8befa9f40e9d21d37f6d86c2d6aded7d652fcb963d1402237a160317 SHA-512 hash: 82f4e54f51d5aff54cf71ab15813aaf6bbd345c50b2253e9fef4aad163e359301c7e88538cc91b5b2fd38a0148340c7b3b048ff381f468a0dce64da617ce7497 ----------Directories---------- [IMAGE_DIRECTORY_ENTRY_EXPORT] 0xF8 0x0 VirtualAddress: 0x2A6000 0xFC 0x4 Size: 0x45 [IMAGE_DIRECTORY_ENTRY_IMPORT] 0x100 0x0 VirtualAddress: 0x2A7000 0x104 0x4 Size: 0x5F0 [IMAGE_DIRECTORY_ENTRY_RESOURCE] 0x108 0x0 VirtualAddress: 0x0 0x10C 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_EXCEPTION] 0x110 0x0 VirtualAddress: 0x0 0x114 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_SECURITY] 0x118 0x0 VirtualAddress: 0x0 0x11C 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_BASERELOC] 0x120 0x0 VirtualAddress: 0x2AA000 0x124 0x4 Size: 0x109368 [IMAGE_DIRECTORY_ENTRY_DEBUG] 0x128 0x0 VirtualAddress: 0x0 0x12C 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_COPYRIGHT] 0x130 0x0 VirtualAddress: 0x0 0x134 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_GLOBALPTR] 0x138 0x0 VirtualAddress: 0x0 0x13C 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_TLS] 0x140 0x0 VirtualAddress: 0x2A3C64 0x144 0x4 Size: 0x18 [IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG] 0x148 0x0 VirtualAddress: 0x0 0x14C 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT] 0x150 0x0 VirtualAddress: 0x0 0x154 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_IAT] 0x158 0x0 VirtualAddress: 0x2A7124 0x15C 0x4 Size: 0xE8 [IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT] 0x160 0x0 VirtualAddress: 0x0 0x164 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR] 0x168 0x0 VirtualAddress: 0x0 0x16C 0x4 Size: 0x0 [IMAGE_DIRECTORY_ENTRY_RESERVED] 0x170 0x0 VirtualAddress: 0x0 0x174 0x4 Size: 0x0 ----------Exported symbols---------- [IMAGE_EXPORT_DIRECTORY] 0x2A3000 0x0 Characteristics: 0x0 0x2A3004 0x4 TimeDateStamp: 0x6A1227B5 [Sat May 23 22:18:29 2026 UTC] 0x2A3008 0x8 MajorVersion: 0x0 0x2A300A 0xA MinorVersion: 0x0 0x2A300C 0xC Name: 0x2A6032 0x2A3010 0x10 Base: 0x1 0x2A3014 0x14 NumberOfFunctions: 0x1 0x2A3018 0x18 NumberOfNames: 0x1 0x2A301C 0x1C AddressOfFunctions: 0x2A6028 0x2A3020 0x20 AddressOfNames: 0x2A602C 0x2A3024 0x24 AddressOfNameOrdinals: 0x2A6030 payload.dll Ordinal RVA Name 1 0x0000B52C OpenCL ----------Imported symbols---------- [IMAGE_IMPORT_DESCRIPTOR] 0x2A3200 0x0 OriginalFirstThunk: 0x2A703C 0x2A3200 0x0 Characteristics: 0x2A703C 0x2A3204 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC] 0x2A3208 0x8 ForwarderChain: 0x0 0x2A320C 0xC Name: 0x2A7548 0x2A3210 0x10 FirstThunk: 0x2A7124 KERNEL32.dll.ConvertThreadToFiber Hint[167] KERNEL32.dll.CreateEventA Hint[192] KERNEL32.dll.CreateFiber Hint[196] KERNEL32.dll.DeleteCriticalSection Hint[277] KERNEL32.dll.EnterCriticalSection Hint[310] KERNEL32.dll.GetLastError Hint[617] KERNEL32.dll.GetModuleHandleExA Hint[638] KERNEL32.dll.GetModuleHandleW Hint[640] KERNEL32.dll.GetProcAddress Hint[694] KERNEL32.dll.InitializeCriticalSection Hint[877] KERNEL32.dll.IsDBCSLeadByteEx Hint[909] KERNEL32.dll.LeaveCriticalSection Hint[973] KERNEL32.dll.MultiByteToWideChar Hint[1024] KERNEL32.dll.OpenEventA Hint[1042] KERNEL32.dll.Sleep Hint[1386] KERNEL32.dll.SwitchToFiber Hint[1395] KERNEL32.dll.TlsGetValue Hint[1421] KERNEL32.dll.VirtualAlloc Hint[1460] KERNEL32.dll.VirtualProtect Hint[1469] KERNEL32.dll.VirtualQuery Hint[1472] KERNEL32.dll.WideCharToMultiByte Hint[1522] [IMAGE_IMPORT_DESCRIPTOR] 0x2A3214 0x0 OriginalFirstThunk: 0x2A7094 0x2A3214 0x0 Characteristics: 0x2A7094 0x2A3218 0x4 TimeDateStamp: 0x0 [Thu Jan 1 00:00:00 1970 UTC] 0x2A321C 0x8 ForwarderChain: 0x0 0x2A3220 0xC Name: 0x2A75E4 0x2A3224 0x10 FirstThunk: 0x2A717C msvcrt.dll.__mb_cur_max Hint[70] msvcrt.dll._amsg_exit Hint[145] msvcrt.dll._errno Hint[222] msvcrt.dll._initterm Hint[353] msvcrt.dll._iob Hint[357] msvcrt.dll._lock Hint[462] msvcrt.dll._unlock Hint[844] msvcrt.dll.abort Hint[1065] msvcrt.dll.atoi Hint[1068] msvcrt.dll.calloc Hint[1074] msvcrt.dll.exit Hint[1086] msvcrt.dll.fclose Hint[1089] msvcrt.dll.fgets Hint[1095] msvcrt.dll.fopen Hint[1100] msvcrt.dll.fputc Hint[1105] msvcrt.dll.free Hint[1110] msvcrt.dll.fwrite Hint[1124] msvcrt.dll.isspace Hint[1146] msvcrt.dll.localeconv Hint[1166] msvcrt.dll.malloc Hint[1171] msvcrt.dll.memcpy Hint[1179] msvcrt.dll.memset Hint[1181] msvcrt.dll.qsort Hint[1194] msvcrt.dll.realloc Hint[1199] msvcrt.dll.srand Hint[1213] msvcrt.dll.setlocale Hint[1206] msvcrt.dll.strchr Hint[1219] msvcrt.dll.strcmp Hint[1220] msvcrt.dll.strerror Hint[1225] msvcrt.dll.strlen Hint[1227] msvcrt.dll.strncmp Hint[1230] msvcrt.dll.strtol Hint[1242] msvcrt.dll.time Hint[1254] msvcrt.dll.vfprintf Hint[1267] msvcrt.dll.wcslen Hint[1293] ----------TLS---------- [IMAGE_TLS_DIRECTORY] 0x2A2464 0x0 StartAddressOfRawData: 0x711A9000 0x2A2468 0x4 EndAddressOfRawData: 0x711A9004 0x2A246C 0x8 AddressOfIndex: 0x711A5028 0x2A2470 0xC AddressOfCallBacks: 0x711A8018 0x2A2474 0x10 SizeOfZeroFill: 0x0 0x2A2478 0x14 Characteristics: 0x0 ----------Base relocations---------- [IMAGE_BASE_RELOCATION] 0x2A3C00 0x0 VirtualAddress: 0x1000 0x2A3C04 0x4 SizeOfBlock: 0x154 [IMAGE_BASE_RELOCATION] 0x2A3D54 0x0 VirtualAddress: 0x2000 0x2A3D58 0x4 SizeOfBlock: 0x2C [IMAGE_BASE_RELOCATION] 0x2A3D80 0x0 VirtualAddress: 0x3000 0x2A3D84 0x4 SizeOfBlock: 0x24 [IMAGE_BASE_RELOCATION] 0x2A3DA4 0x0 VirtualAddress: 0x4000 0x2A3DA8 0x4 SizeOfBlock: 0x10 [IMAGE_BASE_RELOCATION] 0x2A3DB4 0x0 VirtualAddress: 0x5000 0x2A3DB8 0x4 SizeOfBlock: 0xC [IMAGE_BASE_RELOCATION] 0x2A3DC0 0x0 VirtualAddress: 0x6000 0x2A3DC4 0x4 SizeOfBlock: 0x10 [IMAGE_BASE_RELOCATION] 0x2A3DD0 0x0 VirtualAddress: 0x7000 0x2A3DD4 0x4 SizeOfBlock: 0x30 [IMAGE_BASE_RELOCATION] 0x2A3E00 0x0 VirtualAddress: 0x8000 0x2A3E04 0x4 SizeOfBlock: 0x28 [IMAGE_BASE_RELOCATION] 0x2A3E28 0x0 VirtualAddress: 0x9000 0x2A3E2C 0x4 SizeOfBlock: 0x8C [IMAGE_BASE_RELOCATION] 0x2A3EB4 0x0 VirtualAddress: 0xA000 0x2A3EB8 0x4 SizeOfBlock: 0x48 [IMAGE_BASE_RELOCATION] 0x2A3EFC 0x0 VirtualAddress: 0xB000 0x2A3F00 0x4 SizeOfBlock: 0x10C [IMAGE_BASE_RELOCATION] 0x2A4008 0x0 VirtualAddress: 0xC000 0x2A400C 0x4 SizeOfBlock: 0xA4 [IMAGE_BASE_RELOCATION] 0x2A40AC 0x0 VirtualAddress: 0xD000 0x2A40B0 0x4 SizeOfBlock: 0xD4 [IMAGE_BASE_RELOCATION] 0x2A4180 0x0 VirtualAddress: 0xE000 0x2A4184 0x4 SizeOfBlock: 0x1C [IMAGE_BASE_RELOCATION] 0x2A419C 0x0 VirtualAddress: 0x91000 0x2A41A0 0x4 SizeOfBlock: 0x138 [IMAGE_BASE_RELOCATION] 0x2A42D4 0x0 VirtualAddress: 0x92000 0x2A42D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A4ADC 0x0 VirtualAddress: 0x93000 0x2A4AE0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A52E4 0x0 VirtualAddress: 0x94000 0x2A52E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A5AEC 0x0 VirtualAddress: 0x95000 0x2A5AF0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A62F4 0x0 VirtualAddress: 0x96000 0x2A62F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A6AFC 0x0 VirtualAddress: 0x97000 0x2A6B00 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A7304 0x0 VirtualAddress: 0x98000 0x2A7308 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A7B0C 0x0 VirtualAddress: 0x99000 0x2A7B10 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A8314 0x0 VirtualAddress: 0x9A000 0x2A8318 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A8B1C 0x0 VirtualAddress: 0x9B000 0x2A8B20 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A9324 0x0 VirtualAddress: 0x9C000 0x2A9328 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2A9B2C 0x0 VirtualAddress: 0x9D000 0x2A9B30 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AA334 0x0 VirtualAddress: 0x9E000 0x2AA338 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AAB3C 0x0 VirtualAddress: 0x9F000 0x2AAB40 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AB344 0x0 VirtualAddress: 0xA0000 0x2AB348 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2ABB4C 0x0 VirtualAddress: 0xA1000 0x2ABB50 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AC354 0x0 VirtualAddress: 0xA2000 0x2AC358 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2ACB5C 0x0 VirtualAddress: 0xA3000 0x2ACB60 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AD364 0x0 VirtualAddress: 0xA4000 0x2AD368 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2ADB6C 0x0 VirtualAddress: 0xA5000 0x2ADB70 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AE374 0x0 VirtualAddress: 0xA6000 0x2AE378 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AEB7C 0x0 VirtualAddress: 0xA7000 0x2AEB80 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AF384 0x0 VirtualAddress: 0xA8000 0x2AF388 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2AFB8C 0x0 VirtualAddress: 0xA9000 0x2AFB90 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B0394 0x0 VirtualAddress: 0xAA000 0x2B0398 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B0B9C 0x0 VirtualAddress: 0xAB000 0x2B0BA0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B13A4 0x0 VirtualAddress: 0xAC000 0x2B13A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B1BAC 0x0 VirtualAddress: 0xAD000 0x2B1BB0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B23B4 0x0 VirtualAddress: 0xAE000 0x2B23B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B2BBC 0x0 VirtualAddress: 0xAF000 0x2B2BC0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B33C4 0x0 VirtualAddress: 0xB0000 0x2B33C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B3BCC 0x0 VirtualAddress: 0xB1000 0x2B3BD0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B43D4 0x0 VirtualAddress: 0xB2000 0x2B43D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B4BDC 0x0 VirtualAddress: 0xB3000 0x2B4BE0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B53E4 0x0 VirtualAddress: 0xB4000 0x2B53E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B5BEC 0x0 VirtualAddress: 0xB5000 0x2B5BF0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B63F4 0x0 VirtualAddress: 0xB6000 0x2B63F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B6BFC 0x0 VirtualAddress: 0xB7000 0x2B6C00 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B7404 0x0 VirtualAddress: 0xB8000 0x2B7408 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B7C0C 0x0 VirtualAddress: 0xB9000 0x2B7C10 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B8414 0x0 VirtualAddress: 0xBA000 0x2B8418 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B8C1C 0x0 VirtualAddress: 0xBB000 0x2B8C20 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B9424 0x0 VirtualAddress: 0xBC000 0x2B9428 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2B9C2C 0x0 VirtualAddress: 0xBD000 0x2B9C30 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BA434 0x0 VirtualAddress: 0xBE000 0x2BA438 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BAC3C 0x0 VirtualAddress: 0xBF000 0x2BAC40 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BB444 0x0 VirtualAddress: 0xC0000 0x2BB448 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BBC4C 0x0 VirtualAddress: 0xC1000 0x2BBC50 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BC454 0x0 VirtualAddress: 0xC2000 0x2BC458 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BCC5C 0x0 VirtualAddress: 0xC3000 0x2BCC60 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BD464 0x0 VirtualAddress: 0xC4000 0x2BD468 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BDC6C 0x0 VirtualAddress: 0xC5000 0x2BDC70 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BE474 0x0 VirtualAddress: 0xC6000 0x2BE478 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BEC7C 0x0 VirtualAddress: 0xC7000 0x2BEC80 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BF484 0x0 VirtualAddress: 0xC8000 0x2BF488 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2BFC8C 0x0 VirtualAddress: 0xC9000 0x2BFC90 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C0494 0x0 VirtualAddress: 0xCA000 0x2C0498 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C0C9C 0x0 VirtualAddress: 0xCB000 0x2C0CA0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C14A4 0x0 VirtualAddress: 0xCC000 0x2C14A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C1CAC 0x0 VirtualAddress: 0xCD000 0x2C1CB0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C24B4 0x0 VirtualAddress: 0xCE000 0x2C24B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C2CBC 0x0 VirtualAddress: 0xCF000 0x2C2CC0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C34C4 0x0 VirtualAddress: 0xD0000 0x2C34C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C3CCC 0x0 VirtualAddress: 0xD1000 0x2C3CD0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C44D4 0x0 VirtualAddress: 0xD2000 0x2C44D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C4CDC 0x0 VirtualAddress: 0xD3000 0x2C4CE0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C54E4 0x0 VirtualAddress: 0xD4000 0x2C54E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C5CEC 0x0 VirtualAddress: 0xD5000 0x2C5CF0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C64F4 0x0 VirtualAddress: 0xD6000 0x2C64F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C6CFC 0x0 VirtualAddress: 0xD7000 0x2C6D00 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C7504 0x0 VirtualAddress: 0xD8000 0x2C7508 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C7D0C 0x0 VirtualAddress: 0xD9000 0x2C7D10 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C8514 0x0 VirtualAddress: 0xDA000 0x2C8518 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C8D1C 0x0 VirtualAddress: 0xDB000 0x2C8D20 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C9524 0x0 VirtualAddress: 0xDC000 0x2C9528 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2C9D2C 0x0 VirtualAddress: 0xDD000 0x2C9D30 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CA534 0x0 VirtualAddress: 0xDE000 0x2CA538 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CAD3C 0x0 VirtualAddress: 0xDF000 0x2CAD40 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CB544 0x0 VirtualAddress: 0xE0000 0x2CB548 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CBD4C 0x0 VirtualAddress: 0xE1000 0x2CBD50 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CC554 0x0 VirtualAddress: 0xE2000 0x2CC558 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CCD5C 0x0 VirtualAddress: 0xE3000 0x2CCD60 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CD564 0x0 VirtualAddress: 0xE4000 0x2CD568 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CDD6C 0x0 VirtualAddress: 0xE5000 0x2CDD70 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CE574 0x0 VirtualAddress: 0xE6000 0x2CE578 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CED7C 0x0 VirtualAddress: 0xE7000 0x2CED80 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CF584 0x0 VirtualAddress: 0xE8000 0x2CF588 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2CFD8C 0x0 VirtualAddress: 0xE9000 0x2CFD90 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D0594 0x0 VirtualAddress: 0xEA000 0x2D0598 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D0D9C 0x0 VirtualAddress: 0xEB000 0x2D0DA0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D15A4 0x0 VirtualAddress: 0xEC000 0x2D15A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D1DAC 0x0 VirtualAddress: 0xED000 0x2D1DB0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D25B4 0x0 VirtualAddress: 0xEE000 0x2D25B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D2DBC 0x0 VirtualAddress: 0xEF000 0x2D2DC0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D35C4 0x0 VirtualAddress: 0xF0000 0x2D35C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D3DCC 0x0 VirtualAddress: 0xF1000 0x2D3DD0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D45D4 0x0 VirtualAddress: 0xF2000 0x2D45D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D4DDC 0x0 VirtualAddress: 0xF3000 0x2D4DE0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D55E4 0x0 VirtualAddress: 0xF4000 0x2D55E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D5DEC 0x0 VirtualAddress: 0xF5000 0x2D5DF0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D65F4 0x0 VirtualAddress: 0xF6000 0x2D65F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D6DFC 0x0 VirtualAddress: 0xF7000 0x2D6E00 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D7604 0x0 VirtualAddress: 0xF8000 0x2D7608 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D7E0C 0x0 VirtualAddress: 0xF9000 0x2D7E10 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D8614 0x0 VirtualAddress: 0xFA000 0x2D8618 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D8E1C 0x0 VirtualAddress: 0xFB000 0x2D8E20 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D9624 0x0 VirtualAddress: 0xFC000 0x2D9628 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2D9E2C 0x0 VirtualAddress: 0xFD000 0x2D9E30 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DA634 0x0 VirtualAddress: 0xFE000 0x2DA638 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DAE3C 0x0 VirtualAddress: 0xFF000 0x2DAE40 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DB644 0x0 VirtualAddress: 0x100000 0x2DB648 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DBE4C 0x0 VirtualAddress: 0x101000 0x2DBE50 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DC654 0x0 VirtualAddress: 0x102000 0x2DC658 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DCE5C 0x0 VirtualAddress: 0x103000 0x2DCE60 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DD664 0x0 VirtualAddress: 0x104000 0x2DD668 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DDE6C 0x0 VirtualAddress: 0x105000 0x2DDE70 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DE674 0x0 VirtualAddress: 0x106000 0x2DE678 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DEE7C 0x0 VirtualAddress: 0x107000 0x2DEE80 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DF684 0x0 VirtualAddress: 0x108000 0x2DF688 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2DFE8C 0x0 VirtualAddress: 0x109000 0x2DFE90 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E0694 0x0 VirtualAddress: 0x10A000 0x2E0698 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E0E9C 0x0 VirtualAddress: 0x10B000 0x2E0EA0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E16A4 0x0 VirtualAddress: 0x10C000 0x2E16A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E1EAC 0x0 VirtualAddress: 0x10D000 0x2E1EB0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E26B4 0x0 VirtualAddress: 0x10E000 0x2E26B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E2EBC 0x0 VirtualAddress: 0x10F000 0x2E2EC0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E36C4 0x0 VirtualAddress: 0x110000 0x2E36C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E3ECC 0x0 VirtualAddress: 0x111000 0x2E3ED0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E46D4 0x0 VirtualAddress: 0x112000 0x2E46D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E4EDC 0x0 VirtualAddress: 0x113000 0x2E4EE0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E56E4 0x0 VirtualAddress: 0x114000 0x2E56E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E5EEC 0x0 VirtualAddress: 0x115000 0x2E5EF0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E66F4 0x0 VirtualAddress: 0x116000 0x2E66F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E6EFC 0x0 VirtualAddress: 0x117000 0x2E6F00 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E7704 0x0 VirtualAddress: 0x118000 0x2E7708 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E7F0C 0x0 VirtualAddress: 0x119000 0x2E7F10 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E8714 0x0 VirtualAddress: 0x11A000 0x2E8718 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E8F1C 0x0 VirtualAddress: 0x11B000 0x2E8F20 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E9724 0x0 VirtualAddress: 0x11C000 0x2E9728 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2E9F2C 0x0 VirtualAddress: 0x11D000 0x2E9F30 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EA734 0x0 VirtualAddress: 0x11E000 0x2EA738 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EAF3C 0x0 VirtualAddress: 0x11F000 0x2EAF40 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EB744 0x0 VirtualAddress: 0x120000 0x2EB748 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EBF4C 0x0 VirtualAddress: 0x121000 0x2EBF50 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EC754 0x0 VirtualAddress: 0x122000 0x2EC758 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2ECF5C 0x0 VirtualAddress: 0x123000 0x2ECF60 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2ED764 0x0 VirtualAddress: 0x124000 0x2ED768 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EDF6C 0x0 VirtualAddress: 0x125000 0x2EDF70 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EE774 0x0 VirtualAddress: 0x126000 0x2EE778 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EEF7C 0x0 VirtualAddress: 0x127000 0x2EEF80 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EF784 0x0 VirtualAddress: 0x128000 0x2EF788 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2EFF8C 0x0 VirtualAddress: 0x129000 0x2EFF90 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F0794 0x0 VirtualAddress: 0x12A000 0x2F0798 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F0F9C 0x0 VirtualAddress: 0x12B000 0x2F0FA0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F17A4 0x0 VirtualAddress: 0x12C000 0x2F17A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F1FAC 0x0 VirtualAddress: 0x12D000 0x2F1FB0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F27B4 0x0 VirtualAddress: 0x12E000 0x2F27B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F2FBC 0x0 VirtualAddress: 0x12F000 0x2F2FC0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F37C4 0x0 VirtualAddress: 0x130000 0x2F37C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F3FCC 0x0 VirtualAddress: 0x131000 0x2F3FD0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F47D4 0x0 VirtualAddress: 0x132000 0x2F47D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F4FDC 0x0 VirtualAddress: 0x133000 0x2F4FE0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F57E4 0x0 VirtualAddress: 0x134000 0x2F57E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F5FEC 0x0 VirtualAddress: 0x135000 0x2F5FF0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F67F4 0x0 VirtualAddress: 0x136000 0x2F67F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F6FFC 0x0 VirtualAddress: 0x137000 0x2F7000 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F7804 0x0 VirtualAddress: 0x138000 0x2F7808 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F800C 0x0 VirtualAddress: 0x139000 0x2F8010 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F8814 0x0 VirtualAddress: 0x13A000 0x2F8818 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F901C 0x0 VirtualAddress: 0x13B000 0x2F9020 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2F9824 0x0 VirtualAddress: 0x13C000 0x2F9828 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FA02C 0x0 VirtualAddress: 0x13D000 0x2FA030 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FA834 0x0 VirtualAddress: 0x13E000 0x2FA838 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FB03C 0x0 VirtualAddress: 0x13F000 0x2FB040 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FB844 0x0 VirtualAddress: 0x140000 0x2FB848 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FC04C 0x0 VirtualAddress: 0x141000 0x2FC050 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FC854 0x0 VirtualAddress: 0x142000 0x2FC858 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FD05C 0x0 VirtualAddress: 0x143000 0x2FD060 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FD864 0x0 VirtualAddress: 0x144000 0x2FD868 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FE06C 0x0 VirtualAddress: 0x145000 0x2FE070 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FE874 0x0 VirtualAddress: 0x146000 0x2FE878 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FF07C 0x0 VirtualAddress: 0x147000 0x2FF080 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x2FF884 0x0 VirtualAddress: 0x148000 0x2FF888 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30008C 0x0 VirtualAddress: 0x149000 0x300090 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x300894 0x0 VirtualAddress: 0x14A000 0x300898 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30109C 0x0 VirtualAddress: 0x14B000 0x3010A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3018A4 0x0 VirtualAddress: 0x14C000 0x3018A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3020AC 0x0 VirtualAddress: 0x14D000 0x3020B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3028B4 0x0 VirtualAddress: 0x14E000 0x3028B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3030BC 0x0 VirtualAddress: 0x14F000 0x3030C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3038C4 0x0 VirtualAddress: 0x150000 0x3038C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3040CC 0x0 VirtualAddress: 0x151000 0x3040D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3048D4 0x0 VirtualAddress: 0x152000 0x3048D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3050DC 0x0 VirtualAddress: 0x153000 0x3050E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3058E4 0x0 VirtualAddress: 0x154000 0x3058E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3060EC 0x0 VirtualAddress: 0x155000 0x3060F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3068F4 0x0 VirtualAddress: 0x156000 0x3068F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3070FC 0x0 VirtualAddress: 0x157000 0x307100 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x307904 0x0 VirtualAddress: 0x158000 0x307908 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30810C 0x0 VirtualAddress: 0x159000 0x308110 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x308914 0x0 VirtualAddress: 0x15A000 0x308918 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30911C 0x0 VirtualAddress: 0x15B000 0x309120 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x309924 0x0 VirtualAddress: 0x15C000 0x309928 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30A12C 0x0 VirtualAddress: 0x15D000 0x30A130 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30A934 0x0 VirtualAddress: 0x15E000 0x30A938 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30B13C 0x0 VirtualAddress: 0x15F000 0x30B140 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30B944 0x0 VirtualAddress: 0x160000 0x30B948 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30C14C 0x0 VirtualAddress: 0x161000 0x30C150 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30C954 0x0 VirtualAddress: 0x162000 0x30C958 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30D15C 0x0 VirtualAddress: 0x163000 0x30D160 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30D964 0x0 VirtualAddress: 0x164000 0x30D968 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30E16C 0x0 VirtualAddress: 0x165000 0x30E170 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30E974 0x0 VirtualAddress: 0x166000 0x30E978 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30F17C 0x0 VirtualAddress: 0x167000 0x30F180 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x30F984 0x0 VirtualAddress: 0x168000 0x30F988 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31018C 0x0 VirtualAddress: 0x169000 0x310190 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x310994 0x0 VirtualAddress: 0x16A000 0x310998 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31119C 0x0 VirtualAddress: 0x16B000 0x3111A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3119A4 0x0 VirtualAddress: 0x16C000 0x3119A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3121AC 0x0 VirtualAddress: 0x16D000 0x3121B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3129B4 0x0 VirtualAddress: 0x16E000 0x3129B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3131BC 0x0 VirtualAddress: 0x16F000 0x3131C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3139C4 0x0 VirtualAddress: 0x170000 0x3139C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3141CC 0x0 VirtualAddress: 0x171000 0x3141D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3149D4 0x0 VirtualAddress: 0x172000 0x3149D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3151DC 0x0 VirtualAddress: 0x173000 0x3151E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3159E4 0x0 VirtualAddress: 0x174000 0x3159E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3161EC 0x0 VirtualAddress: 0x175000 0x3161F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3169F4 0x0 VirtualAddress: 0x176000 0x3169F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3171FC 0x0 VirtualAddress: 0x177000 0x317200 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x317A04 0x0 VirtualAddress: 0x178000 0x317A08 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31820C 0x0 VirtualAddress: 0x179000 0x318210 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x318A14 0x0 VirtualAddress: 0x17A000 0x318A18 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31921C 0x0 VirtualAddress: 0x17B000 0x319220 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x319A24 0x0 VirtualAddress: 0x17C000 0x319A28 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31A22C 0x0 VirtualAddress: 0x17D000 0x31A230 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31AA34 0x0 VirtualAddress: 0x17E000 0x31AA38 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31B23C 0x0 VirtualAddress: 0x17F000 0x31B240 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31BA44 0x0 VirtualAddress: 0x180000 0x31BA48 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31C24C 0x0 VirtualAddress: 0x181000 0x31C250 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31CA54 0x0 VirtualAddress: 0x182000 0x31CA58 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31D25C 0x0 VirtualAddress: 0x183000 0x31D260 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31DA64 0x0 VirtualAddress: 0x184000 0x31DA68 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31E26C 0x0 VirtualAddress: 0x185000 0x31E270 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31EA74 0x0 VirtualAddress: 0x186000 0x31EA78 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31F27C 0x0 VirtualAddress: 0x187000 0x31F280 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x31FA84 0x0 VirtualAddress: 0x188000 0x31FA88 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32028C 0x0 VirtualAddress: 0x189000 0x320290 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x320A94 0x0 VirtualAddress: 0x18A000 0x320A98 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32129C 0x0 VirtualAddress: 0x18B000 0x3212A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x321AA4 0x0 VirtualAddress: 0x18C000 0x321AA8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3222AC 0x0 VirtualAddress: 0x18D000 0x3222B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x322AB4 0x0 VirtualAddress: 0x18E000 0x322AB8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3232BC 0x0 VirtualAddress: 0x18F000 0x3232C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x323AC4 0x0 VirtualAddress: 0x190000 0x323AC8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3242CC 0x0 VirtualAddress: 0x191000 0x3242D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x324AD4 0x0 VirtualAddress: 0x192000 0x324AD8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3252DC 0x0 VirtualAddress: 0x193000 0x3252E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x325AE4 0x0 VirtualAddress: 0x194000 0x325AE8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3262EC 0x0 VirtualAddress: 0x195000 0x3262F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x326AF4 0x0 VirtualAddress: 0x196000 0x326AF8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3272FC 0x0 VirtualAddress: 0x197000 0x327300 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x327B04 0x0 VirtualAddress: 0x198000 0x327B08 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32830C 0x0 VirtualAddress: 0x199000 0x328310 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x328B14 0x0 VirtualAddress: 0x19A000 0x328B18 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32931C 0x0 VirtualAddress: 0x19B000 0x329320 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x329B24 0x0 VirtualAddress: 0x19C000 0x329B28 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32A32C 0x0 VirtualAddress: 0x19D000 0x32A330 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32AB34 0x0 VirtualAddress: 0x19E000 0x32AB38 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32B33C 0x0 VirtualAddress: 0x19F000 0x32B340 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32BB44 0x0 VirtualAddress: 0x1A0000 0x32BB48 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32C34C 0x0 VirtualAddress: 0x1A1000 0x32C350 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32CB54 0x0 VirtualAddress: 0x1A2000 0x32CB58 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32D35C 0x0 VirtualAddress: 0x1A3000 0x32D360 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32DB64 0x0 VirtualAddress: 0x1A4000 0x32DB68 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32E36C 0x0 VirtualAddress: 0x1A5000 0x32E370 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32EB74 0x0 VirtualAddress: 0x1A6000 0x32EB78 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32F37C 0x0 VirtualAddress: 0x1A7000 0x32F380 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x32FB84 0x0 VirtualAddress: 0x1A8000 0x32FB88 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33038C 0x0 VirtualAddress: 0x1A9000 0x330390 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x330B94 0x0 VirtualAddress: 0x1AA000 0x330B98 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33139C 0x0 VirtualAddress: 0x1AB000 0x3313A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x331BA4 0x0 VirtualAddress: 0x1AC000 0x331BA8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3323AC 0x0 VirtualAddress: 0x1AD000 0x3323B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x332BB4 0x0 VirtualAddress: 0x1AE000 0x332BB8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3333BC 0x0 VirtualAddress: 0x1AF000 0x3333C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x333BC4 0x0 VirtualAddress: 0x1B0000 0x333BC8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3343CC 0x0 VirtualAddress: 0x1B1000 0x3343D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x334BD4 0x0 VirtualAddress: 0x1B2000 0x334BD8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3353DC 0x0 VirtualAddress: 0x1B3000 0x3353E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x335BE4 0x0 VirtualAddress: 0x1B4000 0x335BE8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3363EC 0x0 VirtualAddress: 0x1B5000 0x3363F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x336BF4 0x0 VirtualAddress: 0x1B6000 0x336BF8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3373FC 0x0 VirtualAddress: 0x1B7000 0x337400 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x337C04 0x0 VirtualAddress: 0x1B8000 0x337C08 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33840C 0x0 VirtualAddress: 0x1B9000 0x338410 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x338C14 0x0 VirtualAddress: 0x1BA000 0x338C18 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33941C 0x0 VirtualAddress: 0x1BB000 0x339420 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x339C24 0x0 VirtualAddress: 0x1BC000 0x339C28 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33A42C 0x0 VirtualAddress: 0x1BD000 0x33A430 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33AC34 0x0 VirtualAddress: 0x1BE000 0x33AC38 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33B43C 0x0 VirtualAddress: 0x1BF000 0x33B440 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33BC44 0x0 VirtualAddress: 0x1C0000 0x33BC48 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33C44C 0x0 VirtualAddress: 0x1C1000 0x33C450 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33CC54 0x0 VirtualAddress: 0x1C2000 0x33CC58 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33D45C 0x0 VirtualAddress: 0x1C3000 0x33D460 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33DC64 0x0 VirtualAddress: 0x1C4000 0x33DC68 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33E46C 0x0 VirtualAddress: 0x1C5000 0x33E470 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33EC74 0x0 VirtualAddress: 0x1C6000 0x33EC78 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33F47C 0x0 VirtualAddress: 0x1C7000 0x33F480 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x33FC84 0x0 VirtualAddress: 0x1C8000 0x33FC88 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34048C 0x0 VirtualAddress: 0x1C9000 0x340490 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x340C94 0x0 VirtualAddress: 0x1CA000 0x340C98 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34149C 0x0 VirtualAddress: 0x1CB000 0x3414A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x341CA4 0x0 VirtualAddress: 0x1CC000 0x341CA8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3424AC 0x0 VirtualAddress: 0x1CD000 0x3424B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x342CB4 0x0 VirtualAddress: 0x1CE000 0x342CB8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3434BC 0x0 VirtualAddress: 0x1CF000 0x3434C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x343CC4 0x0 VirtualAddress: 0x1D0000 0x343CC8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3444CC 0x0 VirtualAddress: 0x1D1000 0x3444D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x344CD4 0x0 VirtualAddress: 0x1D2000 0x344CD8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3454DC 0x0 VirtualAddress: 0x1D3000 0x3454E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x345CE4 0x0 VirtualAddress: 0x1D4000 0x345CE8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3464EC 0x0 VirtualAddress: 0x1D5000 0x3464F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x346CF4 0x0 VirtualAddress: 0x1D6000 0x346CF8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3474FC 0x0 VirtualAddress: 0x1D7000 0x347500 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x347D04 0x0 VirtualAddress: 0x1D8000 0x347D08 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34850C 0x0 VirtualAddress: 0x1D9000 0x348510 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x348D14 0x0 VirtualAddress: 0x1DA000 0x348D18 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34951C 0x0 VirtualAddress: 0x1DB000 0x349520 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x349D24 0x0 VirtualAddress: 0x1DC000 0x349D28 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34A52C 0x0 VirtualAddress: 0x1DD000 0x34A530 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34AD34 0x0 VirtualAddress: 0x1DE000 0x34AD38 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34B53C 0x0 VirtualAddress: 0x1DF000 0x34B540 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34BD44 0x0 VirtualAddress: 0x1E0000 0x34BD48 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34C54C 0x0 VirtualAddress: 0x1E1000 0x34C550 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34CD54 0x0 VirtualAddress: 0x1E2000 0x34CD58 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34D55C 0x0 VirtualAddress: 0x1E3000 0x34D560 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34DD64 0x0 VirtualAddress: 0x1E4000 0x34DD68 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34E56C 0x0 VirtualAddress: 0x1E5000 0x34E570 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34ED74 0x0 VirtualAddress: 0x1E6000 0x34ED78 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34F57C 0x0 VirtualAddress: 0x1E7000 0x34F580 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x34FD84 0x0 VirtualAddress: 0x1E8000 0x34FD88 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35058C 0x0 VirtualAddress: 0x1E9000 0x350590 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x350D94 0x0 VirtualAddress: 0x1EA000 0x350D98 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35159C 0x0 VirtualAddress: 0x1EB000 0x3515A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x351DA4 0x0 VirtualAddress: 0x1EC000 0x351DA8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3525AC 0x0 VirtualAddress: 0x1ED000 0x3525B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x352DB4 0x0 VirtualAddress: 0x1EE000 0x352DB8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3535BC 0x0 VirtualAddress: 0x1EF000 0x3535C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x353DC4 0x0 VirtualAddress: 0x1F0000 0x353DC8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3545CC 0x0 VirtualAddress: 0x1F1000 0x3545D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x354DD4 0x0 VirtualAddress: 0x1F2000 0x354DD8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3555DC 0x0 VirtualAddress: 0x1F3000 0x3555E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x355DE4 0x0 VirtualAddress: 0x1F4000 0x355DE8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3565EC 0x0 VirtualAddress: 0x1F5000 0x3565F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x356DF4 0x0 VirtualAddress: 0x1F6000 0x356DF8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3575FC 0x0 VirtualAddress: 0x1F7000 0x357600 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x357E04 0x0 VirtualAddress: 0x1F8000 0x357E08 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35860C 0x0 VirtualAddress: 0x1F9000 0x358610 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x358E14 0x0 VirtualAddress: 0x1FA000 0x358E18 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35961C 0x0 VirtualAddress: 0x1FB000 0x359620 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x359E24 0x0 VirtualAddress: 0x1FC000 0x359E28 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35A62C 0x0 VirtualAddress: 0x1FD000 0x35A630 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35AE34 0x0 VirtualAddress: 0x1FE000 0x35AE38 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35B63C 0x0 VirtualAddress: 0x1FF000 0x35B640 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35BE44 0x0 VirtualAddress: 0x200000 0x35BE48 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35C64C 0x0 VirtualAddress: 0x201000 0x35C650 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35CE54 0x0 VirtualAddress: 0x202000 0x35CE58 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35D65C 0x0 VirtualAddress: 0x203000 0x35D660 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35DE64 0x0 VirtualAddress: 0x204000 0x35DE68 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35E66C 0x0 VirtualAddress: 0x205000 0x35E670 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35EE74 0x0 VirtualAddress: 0x206000 0x35EE78 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35F67C 0x0 VirtualAddress: 0x207000 0x35F680 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x35FE84 0x0 VirtualAddress: 0x208000 0x35FE88 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36068C 0x0 VirtualAddress: 0x209000 0x360690 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x360E94 0x0 VirtualAddress: 0x20A000 0x360E98 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36169C 0x0 VirtualAddress: 0x20B000 0x3616A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x361EA4 0x0 VirtualAddress: 0x20C000 0x361EA8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3626AC 0x0 VirtualAddress: 0x20D000 0x3626B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x362EB4 0x0 VirtualAddress: 0x20E000 0x362EB8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3636BC 0x0 VirtualAddress: 0x20F000 0x3636C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x363EC4 0x0 VirtualAddress: 0x210000 0x363EC8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3646CC 0x0 VirtualAddress: 0x211000 0x3646D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x364ED4 0x0 VirtualAddress: 0x212000 0x364ED8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3656DC 0x0 VirtualAddress: 0x213000 0x3656E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x365EE4 0x0 VirtualAddress: 0x214000 0x365EE8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3666EC 0x0 VirtualAddress: 0x215000 0x3666F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x366EF4 0x0 VirtualAddress: 0x216000 0x366EF8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3676FC 0x0 VirtualAddress: 0x217000 0x367700 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x367F04 0x0 VirtualAddress: 0x218000 0x367F08 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36870C 0x0 VirtualAddress: 0x219000 0x368710 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x368F14 0x0 VirtualAddress: 0x21A000 0x368F18 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36971C 0x0 VirtualAddress: 0x21B000 0x369720 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x369F24 0x0 VirtualAddress: 0x21C000 0x369F28 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36A72C 0x0 VirtualAddress: 0x21D000 0x36A730 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36AF34 0x0 VirtualAddress: 0x21E000 0x36AF38 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36B73C 0x0 VirtualAddress: 0x21F000 0x36B740 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36BF44 0x0 VirtualAddress: 0x220000 0x36BF48 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36C74C 0x0 VirtualAddress: 0x221000 0x36C750 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36CF54 0x0 VirtualAddress: 0x222000 0x36CF58 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36D75C 0x0 VirtualAddress: 0x223000 0x36D760 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36DF64 0x0 VirtualAddress: 0x224000 0x36DF68 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36E76C 0x0 VirtualAddress: 0x225000 0x36E770 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36EF74 0x0 VirtualAddress: 0x226000 0x36EF78 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36F77C 0x0 VirtualAddress: 0x227000 0x36F780 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x36FF84 0x0 VirtualAddress: 0x228000 0x36FF88 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37078C 0x0 VirtualAddress: 0x229000 0x370790 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x370F94 0x0 VirtualAddress: 0x22A000 0x370F98 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37179C 0x0 VirtualAddress: 0x22B000 0x3717A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x371FA4 0x0 VirtualAddress: 0x22C000 0x371FA8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3727AC 0x0 VirtualAddress: 0x22D000 0x3727B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x372FB4 0x0 VirtualAddress: 0x22E000 0x372FB8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3737BC 0x0 VirtualAddress: 0x22F000 0x3737C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x373FC4 0x0 VirtualAddress: 0x230000 0x373FC8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3747CC 0x0 VirtualAddress: 0x231000 0x3747D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x374FD4 0x0 VirtualAddress: 0x232000 0x374FD8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3757DC 0x0 VirtualAddress: 0x233000 0x3757E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x375FE4 0x0 VirtualAddress: 0x234000 0x375FE8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3767EC 0x0 VirtualAddress: 0x235000 0x3767F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x376FF4 0x0 VirtualAddress: 0x236000 0x376FF8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3777FC 0x0 VirtualAddress: 0x237000 0x377800 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x378004 0x0 VirtualAddress: 0x238000 0x378008 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37880C 0x0 VirtualAddress: 0x239000 0x378810 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x379014 0x0 VirtualAddress: 0x23A000 0x379018 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37981C 0x0 VirtualAddress: 0x23B000 0x379820 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37A024 0x0 VirtualAddress: 0x23C000 0x37A028 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37A82C 0x0 VirtualAddress: 0x23D000 0x37A830 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37B034 0x0 VirtualAddress: 0x23E000 0x37B038 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37B83C 0x0 VirtualAddress: 0x23F000 0x37B840 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37C044 0x0 VirtualAddress: 0x240000 0x37C048 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37C84C 0x0 VirtualAddress: 0x241000 0x37C850 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37D054 0x0 VirtualAddress: 0x242000 0x37D058 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37D85C 0x0 VirtualAddress: 0x243000 0x37D860 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37E064 0x0 VirtualAddress: 0x244000 0x37E068 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37E86C 0x0 VirtualAddress: 0x245000 0x37E870 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37F074 0x0 VirtualAddress: 0x246000 0x37F078 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x37F87C 0x0 VirtualAddress: 0x247000 0x37F880 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x380084 0x0 VirtualAddress: 0x248000 0x380088 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38088C 0x0 VirtualAddress: 0x249000 0x380890 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x381094 0x0 VirtualAddress: 0x24A000 0x381098 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38189C 0x0 VirtualAddress: 0x24B000 0x3818A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3820A4 0x0 VirtualAddress: 0x24C000 0x3820A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3828AC 0x0 VirtualAddress: 0x24D000 0x3828B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3830B4 0x0 VirtualAddress: 0x24E000 0x3830B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3838BC 0x0 VirtualAddress: 0x24F000 0x3838C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3840C4 0x0 VirtualAddress: 0x250000 0x3840C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3848CC 0x0 VirtualAddress: 0x251000 0x3848D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3850D4 0x0 VirtualAddress: 0x252000 0x3850D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3858DC 0x0 VirtualAddress: 0x253000 0x3858E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3860E4 0x0 VirtualAddress: 0x254000 0x3860E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3868EC 0x0 VirtualAddress: 0x255000 0x3868F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3870F4 0x0 VirtualAddress: 0x256000 0x3870F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3878FC 0x0 VirtualAddress: 0x257000 0x387900 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x388104 0x0 VirtualAddress: 0x258000 0x388108 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38890C 0x0 VirtualAddress: 0x259000 0x388910 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x389114 0x0 VirtualAddress: 0x25A000 0x389118 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38991C 0x0 VirtualAddress: 0x25B000 0x389920 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38A124 0x0 VirtualAddress: 0x25C000 0x38A128 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38A92C 0x0 VirtualAddress: 0x25D000 0x38A930 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38B134 0x0 VirtualAddress: 0x25E000 0x38B138 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38B93C 0x0 VirtualAddress: 0x25F000 0x38B940 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38C144 0x0 VirtualAddress: 0x260000 0x38C148 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38C94C 0x0 VirtualAddress: 0x261000 0x38C950 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38D154 0x0 VirtualAddress: 0x262000 0x38D158 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38D95C 0x0 VirtualAddress: 0x263000 0x38D960 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38E164 0x0 VirtualAddress: 0x264000 0x38E168 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38E96C 0x0 VirtualAddress: 0x265000 0x38E970 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38F174 0x0 VirtualAddress: 0x266000 0x38F178 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x38F97C 0x0 VirtualAddress: 0x267000 0x38F980 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x390184 0x0 VirtualAddress: 0x268000 0x390188 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39098C 0x0 VirtualAddress: 0x269000 0x390990 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x391194 0x0 VirtualAddress: 0x26A000 0x391198 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39199C 0x0 VirtualAddress: 0x26B000 0x3919A0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3921A4 0x0 VirtualAddress: 0x26C000 0x3921A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3929AC 0x0 VirtualAddress: 0x26D000 0x3929B0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3931B4 0x0 VirtualAddress: 0x26E000 0x3931B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3939BC 0x0 VirtualAddress: 0x26F000 0x3939C0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3941C4 0x0 VirtualAddress: 0x270000 0x3941C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3949CC 0x0 VirtualAddress: 0x271000 0x3949D0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3951D4 0x0 VirtualAddress: 0x272000 0x3951D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3959DC 0x0 VirtualAddress: 0x273000 0x3959E0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3961E4 0x0 VirtualAddress: 0x274000 0x3961E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3969EC 0x0 VirtualAddress: 0x275000 0x3969F0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3971F4 0x0 VirtualAddress: 0x276000 0x3971F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3979FC 0x0 VirtualAddress: 0x277000 0x397A00 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x398204 0x0 VirtualAddress: 0x278000 0x398208 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x398A0C 0x0 VirtualAddress: 0x279000 0x398A10 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x399214 0x0 VirtualAddress: 0x27A000 0x399218 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x399A1C 0x0 VirtualAddress: 0x27B000 0x399A20 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39A224 0x0 VirtualAddress: 0x27C000 0x39A228 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39AA2C 0x0 VirtualAddress: 0x27D000 0x39AA30 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39B234 0x0 VirtualAddress: 0x27E000 0x39B238 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39BA3C 0x0 VirtualAddress: 0x27F000 0x39BA40 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39C244 0x0 VirtualAddress: 0x280000 0x39C248 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39CA4C 0x0 VirtualAddress: 0x281000 0x39CA50 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39D254 0x0 VirtualAddress: 0x282000 0x39D258 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39DA5C 0x0 VirtualAddress: 0x283000 0x39DA60 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39E264 0x0 VirtualAddress: 0x284000 0x39E268 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39EA6C 0x0 VirtualAddress: 0x285000 0x39EA70 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39F274 0x0 VirtualAddress: 0x286000 0x39F278 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x39FA7C 0x0 VirtualAddress: 0x287000 0x39FA80 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A0284 0x0 VirtualAddress: 0x288000 0x3A0288 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A0A8C 0x0 VirtualAddress: 0x289000 0x3A0A90 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A1294 0x0 VirtualAddress: 0x28A000 0x3A1298 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A1A9C 0x0 VirtualAddress: 0x28B000 0x3A1AA0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A22A4 0x0 VirtualAddress: 0x28C000 0x3A22A8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A2AAC 0x0 VirtualAddress: 0x28D000 0x3A2AB0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A32B4 0x0 VirtualAddress: 0x28E000 0x3A32B8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A3ABC 0x0 VirtualAddress: 0x28F000 0x3A3AC0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A42C4 0x0 VirtualAddress: 0x290000 0x3A42C8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A4ACC 0x0 VirtualAddress: 0x291000 0x3A4AD0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A52D4 0x0 VirtualAddress: 0x292000 0x3A52D8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A5ADC 0x0 VirtualAddress: 0x293000 0x3A5AE0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A62E4 0x0 VirtualAddress: 0x294000 0x3A62E8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A6AEC 0x0 VirtualAddress: 0x295000 0x3A6AF0 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A72F4 0x0 VirtualAddress: 0x296000 0x3A72F8 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A7AFC 0x0 VirtualAddress: 0x297000 0x3A7B00 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A8304 0x0 VirtualAddress: 0x298000 0x3A8308 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A8B0C 0x0 VirtualAddress: 0x299000 0x3A8B10 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A9314 0x0 VirtualAddress: 0x29A000 0x3A9318 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3A9B1C 0x0 VirtualAddress: 0x29B000 0x3A9B20 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3AA324 0x0 VirtualAddress: 0x29C000 0x3AA328 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3AAB2C 0x0 VirtualAddress: 0x29D000 0x3AAB30 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3AB334 0x0 VirtualAddress: 0x29E000 0x3AB338 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3ABB3C 0x0 VirtualAddress: 0x29F000 0x3ABB40 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3AC344 0x0 VirtualAddress: 0x2A0000 0x3AC348 0x4 SizeOfBlock: 0x808 [IMAGE_BASE_RELOCATION] 0x3ACB4C 0x0 VirtualAddress: 0x2A1000 0x3ACB50 0x4 SizeOfBlock: 0x2AC [IMAGE_BASE_RELOCATION] 0x3ACDF8 0x0 VirtualAddress: 0x2A2000 0x3ACDFC 0x4 SizeOfBlock: 0x14 [IMAGE_BASE_RELOCATION] 0x3ACE0C 0x0 VirtualAddress: 0x2A3000 0x3ACE10 0x4 SizeOfBlock: 0xFC [IMAGE_BASE_RELOCATION] 0x3ACF08 0x0 VirtualAddress: 0x2A4000 0x3ACF0C 0x4 SizeOfBlock: 0x50 [IMAGE_BASE_RELOCATION] 0x3ACF58 0x0 VirtualAddress: 0x2A8000 0x3ACF5C 0x4 SizeOfBlock: 0x10 Signature: No signature PEiD: Error: signature database missing Entry point: ep: 0x000013b0 ep address: 0x70f013b0 Section: .text ep offset: 0x000007b0 TLS Callbacks: Section: .CRT Number of callbacks: 2 Address: 0x70f01540 Address: 0x70f014f0 Overlay: No overlay ``` ## Read PE ```text --- STDERR --- Error: crun: executable file `readpe` not found in $PATH: No such file or directory: OCI runtime attempted to invoke a command that was not found Exit Code: 127 ``` ## objdump ```text DLL Name: KERNEL32.dll vma: Ordinal Hint Member-Name Bound-To 002a7124 00a7 ConvertThreadToFiber 002a7128 00c0 CreateEventA 002a712c 00c4 CreateFiber 002a7130 0115 DeleteCriticalSection 002a7134 0136 EnterCriticalSection 002a7138 0269 GetLastError 002a713c 027e GetModuleHandleExA 002a7140 0280 GetModuleHandleW 002a7144 02b6 GetProcAddress 002a7148 036d InitializeCriticalSection 002a714c 038d IsDBCSLeadByteEx 002a7150 03cd LeaveCriticalSection 002a7154 0400 MultiByteToWideChar 002a7158 0412 OpenEventA 002a715c 056a Sleep 002a7160 0573 SwitchToFiber 002a7164 058d TlsGetValue 002a7168 05b4 VirtualAlloc 002a716c 05bd VirtualProtect -- DLL Name: msvcrt.dll vma: Ordinal Hint Member-Name Bound-To 002a717c 0046 __mb_cur_max 002a7180 0091 _amsg_exit 002a7184 00de _errno 002a7188 0161 _initterm 002a718c 0165 _iob 002a7190 01ce _lock 002a7194 034c _unlock 002a7198 0429 abort 002a719c 042c atoi 002a71a0 0432 calloc 002a71a4 043e exit 002a71a8 0441 fclose 002a71ac 0447 fgets 002a71b0 044c fopen 002a71b4 0451 fputc 002a71b8 0456 free 002a71bc 0464 fwrite 002a71c0 047a isspace 002a71c4 048e localeconv ``` ## rabin2 imports ```text nth vaddr bind type lib name ------------------------------------------ 1 0x711a7124 NONE FUNC KERNEL32.dll ConvertThreadToFiber 2 0x711a7128 NONE FUNC KERNEL32.dll CreateEventA 3 0x711a712c NONE FUNC KERNEL32.dll CreateFiber 4 0x711a7130 NONE FUNC KERNEL32.dll DeleteCriticalSection 5 0x711a7134 NONE FUNC KERNEL32.dll EnterCriticalSection 6 0x711a7138 NONE FUNC KERNEL32.dll GetLastError 7 0x711a713c NONE FUNC KERNEL32.dll GetModuleHandleExA 8 0x711a7140 NONE FUNC KERNEL32.dll GetModuleHandleW 9 0x711a7144 NONE FUNC KERNEL32.dll GetProcAddress 10 0x711a7148 NONE FUNC KERNEL32.dll InitializeCriticalSection 11 0x711a714c NONE FUNC KERNEL32.dll IsDBCSLeadByteEx 12 0x711a7150 NONE FUNC KERNEL32.dll LeaveCriticalSection 13 0x711a7154 NONE FUNC KERNEL32.dll MultiByteToWideChar 14 0x711a7158 NONE FUNC KERNEL32.dll OpenEventA 15 0x711a715c NONE FUNC KERNEL32.dll Sleep 16 0x711a7160 NONE FUNC KERNEL32.dll SwitchToFiber 17 0x711a7164 NONE FUNC KERNEL32.dll TlsGetValue 18 0x711a7168 NONE FUNC KERNEL32.dll VirtualAlloc 19 0x711a716c NONE FUNC KERNEL32.dll VirtualProtect 20 0x711a7170 NONE FUNC KERNEL32.dll VirtualQuery 21 0x711a7174 NONE FUNC KERNEL32.dll WideCharToMultiByte 1 0x711a717c NONE FUNC msvcrt.dll __mb_cur_max 2 0x711a7180 NONE FUNC msvcrt.dll _amsg_exit 3 0x711a7184 NONE FUNC msvcrt.dll _errno 4 0x711a7188 NONE FUNC msvcrt.dll _initterm 5 0x711a718c NONE FUNC msvcrt.dll _iob 6 0x711a7190 NONE FUNC msvcrt.dll _lock 7 0x711a7194 NONE FUNC msvcrt.dll _unlock 8 0x711a7198 NONE FUNC msvcrt.dll abort 9 0x711a719c NONE FUNC msvcrt.dll atoi 10 0x711a71a0 NONE FUNC msvcrt.dll calloc 11 0x711a71a4 NONE FUNC msvcrt.dll exit 12 0x711a71a8 NONE FUNC msvcrt.dll fclose 13 0x711a71ac NONE FUNC msvcrt.dll fgets 14 0x711a71b0 NONE FUNC msvcrt.dll fopen 15 0x711a71b4 NONE FUNC msvcrt.dll fputc 16 0x711a71b8 NONE FUNC msvcrt.dll free 17 0x711a71bc NONE FUNC msvcrt.dll fwrite 18 0x711a71c0 NONE FUNC msvcrt.dll isspace 19 0x711a71c4 NONE FUNC msvcrt.dll localeconv 20 0x711a71c8 NONE FUNC msvcrt.dll malloc 21 0x711a71cc NONE FUNC msvcrt.dll memcpy 22 0x711a71d0 NONE FUNC msvcrt.dll memset 23 0x711a71d4 NONE FUNC msvcrt.dll qsort 24 0x711a71d8 NONE FUNC msvcrt.dll realloc 25 0x711a71dc NONE FUNC msvcrt.dll srand 26 0x711a71e0 NONE FUNC msvcrt.dll setlocale 27 0x711a71e4 NONE FUNC msvcrt.dll strchr 28 0x711a71e8 NONE FUNC msvcrt.dll strcmp 29 0x711a71ec NONE FUNC msvcrt.dll strerror 30 0x711a71f0 NONE FUNC msvcrt.dll strlen 31 0x711a71f4 NONE FUNC msvcrt.dll strncmp 32 0x711a71f8 NONE FUNC msvcrt.dll strtol 33 0x711a71fc NONE FUNC msvcrt.dll time 34 0x711a7200 NONE FUNC msvcrt.dll vfprintf 35 0x711a7204 NONE FUNC msvcrt.dll wcslen ``` ## rabin2 exports ```text nth paddr vaddr bind type size lib name demangled ----------------------------------------------------------------------- 1 0x0000a92c 0x70f0b52c GLOBAL FUNC 0 payload.dll OpenCL ```