/ Tricks of the Windows Gam…ming Gurus (2nd Edition)
/ Disc2.iso / msdn_vcb / samples / vc98 / sdk / sdktools / winnt / walker / pefile.lib ![]() | < prev | next > |
AR Archive | 1998-03-30 | 4.5 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | AR Archive (archive/arArchive) | magic | Supported |
1% | dexvert | COFF Library (other/coffLibrary) | magic | Unsupported |
1% | dexvert | Sibelius Music / Score (music/sibeliusMusicScore) | ext | Unsupported |
1% | dexvert | IntelliFont Font (font/intelliFont) | ext | Unsupported |
1% | dexvert | Amiga Hunk Library/Object (other/amigaLibrary) | ext | Unsupported |
1% | dexvert | Amiga Shared Library (other/amigaSharedLibrary) | ext | Unsupported |
1% | dexvert | Chess Assistant File (other/chessAssistant) | ext | Unsupported |
100% | file | current ar archive | default | |
99% | file | data | default | |
77% | TrID | Common Object File Format (COFF) Library | default | |
22% | TrID | ar archive | default | |
100% | siegfried | fmt/1835 Archiver Format | default | |
100% | lsar | Ar | default | |
100% | gt2 | Microsoft C/C++ Bibliothek | default (weak) | |
100% | detectItEasy | Format: COFF Library (.LIB)(I386) | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 21 3c 61 72 63 68 3e 0a | 2f 20 20 20 20 20 20 20 |!<arch>.|/ |
|00000010| 20 20 20 20 20 20 20 20 | 38 39 31 32 35 36 38 38 | |89125688|
|00000020| 37 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |7 | |
|00000030| 30 20 20 20 20 20 20 20 | 38 32 34 20 20 20 20 20 |0 |824 |
|00000040| 20 20 60 0a 00 00 00 1b | 00 00 06 fa 00 00 0a 02 | `.....|........|
|00000050| 00 00 0b 38 00 00 0c 8a | 00 00 0c 8a 00 00 10 20 |...8....|....... |
|00000060| 00 00 10 20 00 00 11 7a | 00 00 11 7a 00 00 0f 40 |... ...z|...z...@|
|00000070| 00 00 0f 40 00 00 0f b4 | 00 00 0f b4 00 00 10 94 |...@....|........|
|00000080| 00 00 10 94 00 00 11 06 | 00 00 11 06 00 00 0e ce |........|........|
|00000090| 00 00 0e ce 00 00 0d 70 | 00 00 0d 70 00 00 0e 5a |.......p|...p...Z|
|000000a0| 00 00 0e 5a 00 00 0d dc | 00 00 0d dc 00 00 0c fa |...Z....|........|
|000000b0| 00 00 0c fa 5f 5f 49 4d | 50 4f 52 54 5f 44 45 53 |....__IM|PORT_DES|
|000000c0| 43 52 49 50 54 4f 52 5f | 50 45 46 69 6c 65 00 5f |CRIPTOR_|PEFile._|
|000000d0| 5f 4e 55 4c 4c 5f 49 4d | 50 4f 52 54 5f 44 45 53 |_NULL_IM|PORT_DES|
|000000e0| 43 52 49 50 54 4f 52 00 | 7f 50 45 46 69 6c 65 5f |CRIPTOR.|.PEFile_|
|000000f0| 4e 55 4c 4c 5f 54 48 55 | 4e 4b 5f 44 41 54 41 00 |NULL_THU|NK_DATA.|
|00000100| 5f 46 69 6c 65 48 65 61 | 64 65 72 4f 66 66 73 65 |_FileHea|derOffse|
|00000110| 74 40 34 00 5f 5f 69 6d | 70 5f 5f 46 69 6c 65 48 |t@4.__im|p__FileH|
|00000120| 65 61 64 65 72 4f 66 66 | 73 65 74 40 34 00 5f 4f |eaderOff|set@4._O|
|00000130| 70 74 69 6f 6e 61 6c 48 | 65 61 64 65 72 4f 66 66 |ptionalH|eaderOff|
|00000140| 73 65 74 40 34 00 5f 5f | 69 6d 70 5f 5f 4f 70 74 |set@4.__|imp__Opt|
|00000150| 69 6f 6e 61 6c 48 65 61 | 64 65 72 4f 66 66 73 65 |ionalHea|derOffse|
|00000160| 74 40 34 00 5f 53 65 63 | 74 69 6f 6e 48 65 61 64 |t@4._Sec|tionHead|
|00000170| 65 72 4f 66 66 73 65 74 | 40 34 00 5f 5f 69 6d 70 |erOffset|@4.__imp|
|00000180| 5f 5f 53 65 63 74 69 6f | 6e 48 65 61 64 65 72 4f |__Sectio|nHeaderO|
|00000190| 66 66 73 65 74 40 34 00 | 5f 49 6d 70 6f 72 74 44 |ffset@4.|_ImportD|
|000001a0| 69 72 65 63 74 6f 72 79 | 4f 66 66 73 65 74 40 34 |irectory|Offset@4|
|000001b0| 00 5f 5f 69 6d 70 5f 5f | 49 6d 70 6f 72 74 44 69 |.__imp__|ImportDi|
|000001c0| 72 65 63 74 6f 72 79 4f | 66 66 73 65 74 40 34 00 |rectoryO|ffset@4.|
|000001d0| 5f 4e 75 6d 4f 66 53 65 | 63 74 69 6f 6e 73 40 34 |_NumOfSe|ctions@4|
|000001e0| 00 5f 5f 69 6d 70 5f 5f | 4e 75 6d 4f 66 53 65 63 |.__imp__|NumOfSec|
|000001f0| 74 69 6f 6e 73 40 34 00 | 5f 52 65 74 72 69 65 76 |tions@4.|_Retriev|
|00000200| 65 4d 6f 64 75 6c 65 4e | 61 6d 65 40 38 00 5f 5f |eModuleN|ame@8.__|
|00000210| 69 6d 70 5f 5f 52 65 74 | 72 69 65 76 65 4d 6f 64 |imp__Ret|rieveMod|
|00000220| 75 6c 65 4e 61 6d 65 40 | 38 00 5f 52 65 74 72 69 |uleName@|8._Retri|
|00000230| 65 76 65 53 65 63 74 69 | 6f 6e 4e 61 6d 65 73 40 |eveSecti|onNames@|
|00000240| 31 32 00 5f 5f 69 6d 70 | 5f 5f 52 65 74 72 69 65 |12.__imp|__Retrie|
|00000250| 76 65 53 65 63 74 69 6f | 6e 4e 61 6d 65 73 40 31 |veSectio|nNames@1|
|00000260| 32 00 5f 47 65 74 4d 6f | 64 75 6c 65 45 6e 74 72 |2._GetMo|duleEntr|
|00000270| 79 50 6f 69 6e 74 40 34 | 00 5f 5f 69 6d 70 5f 5f |yPoint@4|.__imp__|
|00000280| 47 65 74 4d 6f 64 75 6c | 65 45 6e 74 72 79 50 6f |GetModul|eEntryPo|
|00000290| 69 6e 74 40 34 00 5f 47 | 65 74 49 6d 61 67 65 42 |int@4._G|etImageB|
|000002a0| 61 73 65 40 34 00 5f 5f | 69 6d 70 5f 5f 47 65 74 |ase@4.__|imp__Get|
|000002b0| 49 6d 61 67 65 42 61 73 | 65 40 34 00 5f 47 65 74 |ImageBas|e@4._Get|
|000002c0| 49 6d 70 6f 72 74 4d 6f | 64 75 6c 65 4e 61 6d 65 |ImportMo|duleName|
|000002d0| 73 40 31 32 00 5f 5f 69 | 6d 70 5f 5f 47 65 74 49 |s@12.__i|mp__GetI|
|000002e0| 6d 70 6f 72 74 4d 6f 64 | 75 6c 65 4e 61 6d 65 73 |mportMod|uleNames|
|000002f0| 40 31 32 00 5f 47 65 74 | 49 6d 70 6f 72 74 46 75 |@12._Get|ImportFu|
|00000300| 6e 63 74 69 6f 6e 4e 61 | 6d 65 73 42 79 4d 6f 64 |nctionNa|mesByMod|
|00000310| 75 6c 65 40 31 36 00 5f | 5f 69 6d 70 5f 5f 47 65 |ule@16._|_imp__Ge|
|00000320| 74 49 6d 70 6f 72 74 46 | 75 6e 63 74 69 6f 6e 4e |tImportF|unctionN|
|00000330| 61 6d 65 73 42 79 4d 6f | 64 75 6c 65 40 31 36 00 |amesByMo|dule@16.|
|00000340| 5f 47 65 74 45 78 70 6f | 72 74 46 75 6e 63 74 69 |_GetExpo|rtFuncti|
|00000350| 6f 6e 4e 61 6d 65 73 40 | 31 32 00 5f 5f 69 6d 70 |onNames@|12.__imp|
|00000360| 5f 5f 47 65 74 45 78 70 | 6f 72 74 46 75 6e 63 74 |__GetExp|ortFunct|
|00000370| 69 6f 6e 4e 61 6d 65 73 | 40 31 32 00 2f 20 20 20 |ionNames|@12./ |
|00000380| 20 20 20 20 20 20 20 20 | 20 20 20 20 38 39 31 32 | | 8912|
|00000390| 35 36 38 38 37 20 20 20 | 20 20 20 20 20 20 20 20 |56887 | |
|000003a0| 20 20 20 20 30 20 20 20 | 20 20 20 20 38 33 34 20 | 0 | 834 |
|000003b0| 20 20 20 20 20 20 60 0a | 0f 00 00 00 fa 06 00 00 | `.|........|
|000003c0| 02 0a 00 00 38 0b 00 00 | 8a 0c 00 00 20 10 00 00 |....8...|.... ...|
|000003d0| 7a 11 00 00 40 0f 00 00 | b4 0f 00 00 94 10 00 00 |z...@...|........|
|000003e0| 06 11 00 00 ce 0e 00 00 | 70 0d 00 00 5a 0e 00 00 |........|p...Z...|
|000003f0| dc 0d 00 00 fa 0c 00 00 | 1b 00 00 00 04 00 0f 00 |........|........|
|00000400| 0c 00 0e 00 0d 00 0b 00 | 07 00 08 00 05 00 09 00 |........|........|
|00000410| 0a 00 06 00 01 00 02 00 | 04 00 0f 00 0c 00 0e 00 |........|........|
|00000420| 0d 00 0b 00 07 00 08 00 | 05 00 09 00 0a 00 06 00 |........|........|
|00000430| 03 00 5f 46 69 6c 65 48 | 65 61 64 65 72 4f 66 66 |.._FileH|eaderOff|
|00000440| 73 65 74 40 34 00 5f 47 | 65 74 45 78 70 6f 72 74 |set@4._G|etExport|
|00000450| 46 75 6e 63 74 69 6f 6e | 4e 61 6d 65 73 40 31 32 |Function|Names@12|
|00000460| 00 5f 47 65 74 49 6d 61 | 67 65 42 61 73 65 40 34 |._GetIma|geBase@4|
|00000470| 00 5f 47 65 74 49 6d 70 | 6f 72 74 46 75 6e 63 74 |._GetImp|ortFunct|
|00000480| 69 6f 6e 4e 61 6d 65 73 | 42 79 4d 6f 64 75 6c 65 |ionNames|ByModule|
|00000490| 40 31 36 00 5f 47 65 74 | 49 6d 70 6f 72 74 4d 6f |@16._Get|ImportMo|
|000004a0| 64 75 6c 65 4e 61 6d 65 | 73 40 31 32 00 5f 47 65 |duleName|s@12._Ge|
|000004b0| 74 4d 6f 64 75 6c 65 45 | 6e 74 72 79 50 6f 69 6e |tModuleE|ntryPoin|
|000004c0| 74 40 34 00 5f 49 6d 70 | 6f 72 74 44 69 72 65 63 |t@4._Imp|ortDirec|
|000004d0| 74 6f 72 79 4f 66 66 73 | 65 74 40 34 00 5f 4e 75 |toryOffs|et@4._Nu|
|000004e0| 6d 4f 66 53 65 63 74 69 | 6f 6e 73 40 34 00 5f 4f |mOfSecti|ons@4._O|
|000004f0| 70 74 69 6f 6e 61 6c 48 | 65 61 64 65 72 4f 66 66 |ptionalH|eaderOff|
|00000500| 73 65 74 40 34 00 5f 52 | 65 74 72 69 65 76 65 4d |set@4._R|etrieveM|
|00000510| 6f 64 75 6c 65 4e 61 6d | 65 40 38 00 5f 52 65 74 |oduleNam|e@8._Ret|
|00000520| 72 69 65 76 65 53 65 63 | 74 69 6f 6e 4e 61 6d 65 |rieveSec|tionName|
|00000530| 73 40 31 32 00 5f 53 65 | 63 74 69 6f 6e 48 65 61 |s@12._Se|ctionHea|
|00000540| 64 65 72 4f 66 66 73 65 | 74 40 34 00 5f 5f 49 4d |derOffse|t@4.__IM|
|00000550| 50 4f 52 54 5f 44 45 53 | 43 52 49 50 54 4f 52 5f |PORT_DES|CRIPTOR_|
|00000560| 50 45 46 69 6c 65 00 5f | 5f 4e 55 4c 4c 5f 49 4d |PEFile._|_NULL_IM|
|00000570| 50 4f 52 54 5f 44 45 53 | 43 52 49 50 54 4f 52 00 |PORT_DES|CRIPTOR.|
|00000580| 5f 5f 69 6d 70 5f 5f 46 | 69 6c 65 48 65 61 64 65 |__imp__F|ileHeade|
|00000590| 72 4f 66 66 73 65 74 40 | 34 00 5f 5f 69 6d 70 5f |rOffset@|4.__imp_|
|000005a0| 5f 47 65 74 45 78 70 6f | 72 74 46 75 6e 63 74 69 |_GetExpo|rtFuncti|
|000005b0| 6f 6e 4e 61 6d 65 73 40 | 31 32 00 5f 5f 69 6d 70 |onNames@|12.__imp|
|000005c0| 5f 5f 47 65 74 49 6d 61 | 67 65 42 61 73 65 40 34 |__GetIma|geBase@4|
|000005d0| 00 5f 5f 69 6d 70 5f 5f | 47 65 74 49 6d 70 6f 72 |.__imp__|GetImpor|
|000005e0| 74 46 75 6e 63 74 69 6f | 6e 4e 61 6d 65 73 42 79 |tFunctio|nNamesBy|
|000005f0| 4d 6f 64 75 6c 65 40 31 | 36 00 5f 5f 69 6d 70 5f |Module@1|6.__imp_|
|00000600| 5f 47 65 74 49 6d 70 6f | 72 74 4d 6f 64 75 6c 65 |_GetImpo|rtModule|
|00000610| 4e 61 6d 65 73 40 31 32 | 00 5f 5f 69 6d 70 5f 5f |Names@12|.__imp__|
|00000620| 47 65 74 4d 6f 64 75 6c | 65 45 6e 74 72 79 50 6f |GetModul|eEntryPo|
|00000630| 69 6e 74 40 34 00 5f 5f | 69 6d 70 5f 5f 49 6d 70 |int@4.__|imp__Imp|
|00000640| 6f 72 74 44 69 72 65 63 | 74 6f 72 79 4f 66 66 73 |ortDirec|toryOffs|
|00000650| 65 74 40 34 00 5f 5f 69 | 6d 70 5f 5f 4e 75 6d 4f |et@4.__i|mp__NumO|
|00000660| 66 53 65 63 74 69 6f 6e | 73 40 34 00 5f 5f 69 6d |fSection|s@4.__im|
|00000670| 70 5f 5f 4f 70 74 69 6f | 6e 61 6c 48 65 61 64 65 |p__Optio|nalHeade|
|00000680| 72 4f 66 66 73 65 74 40 | 34 00 5f 5f 69 6d 70 5f |rOffset@|4.__imp_|
|00000690| 5f 52 65 74 72 69 65 76 | 65 4d 6f 64 75 6c 65 4e |_Retriev|eModuleN|
|000006a0| 61 6d 65 40 38 00 5f 5f | 69 6d 70 5f 5f 52 65 74 |ame@8.__|imp__Ret|
|000006b0| 72 69 65 76 65 53 65 63 | 74 69 6f 6e 4e 61 6d 65 |rieveSec|tionName|
|000006c0| 73 40 31 32 00 5f 5f 69 | 6d 70 5f 5f 53 65 63 74 |s@12.__i|mp__Sect|
|000006d0| 69 6f 6e 48 65 61 64 65 | 72 4f 66 66 73 65 74 40 |ionHeade|rOffset@|
|000006e0| 34 00 7f 50 45 46 69 6c | 65 5f 4e 55 4c 4c 5f 54 |4..PEFil|e_NULL_T|
|000006f0| 48 55 4e 4b 5f 44 41 54 | 41 00 50 45 46 69 6c 65 |HUNK_DAT|A.PEFile|
|00000700| 2e 64 6c 6c 2f 20 20 20 | 20 20 38 39 31 32 35 36 |.dll/ | 891256|
|00000710| 38 38 37 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |887 | |
|00000720| 20 20 30 20 20 20 20 20 | 20 20 37 31 35 20 20 20 | 0 | 715 |
|00000730| 20 20 20 20 60 0a 4c 01 | 03 00 37 80 1f 35 eb 01 | `.L.|..7..5..|
|00000740| 00 00 08 00 00 00 e0 00 | 00 01 0b 01 06 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 10 00 00 00 02 |........|........|
|00000770| 00 00 04 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 10 00 00 10 | 00 00 00 00 10 00 00 10 |........|........|
|000007a0| 00 00 00 00 00 00 10 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000810| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000820| 00 00 00 00 00 00 00 00 | 00 00 2e 64 65 62 75 67 |........|...debug|
|00000830| 24 53 00 00 00 00 00 00 | 00 00 41 00 00 00 6c 01 |$S......|..A...l.|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 40 00 |........|......@.|
|00000850| 10 42 2e 69 64 61 74 61 | 24 32 00 00 00 00 00 00 |.B.idata|$2......|
|00000860| 00 00 14 00 00 00 ad 01 | 00 00 c1 01 00 00 00 00 |........|........|
|00000870| 00 00 03 00 00 00 40 00 | 30 c0 2e 69 64 61 74 61 |......@.|0..idata|
|00000880| 24 36 00 00 00 00 00 00 | 00 00 0c 00 00 00 df 01 |$6......|........|
|00000890| 00 00 c1 01 00 00 00 00 | 00 00 00 00 00 00 40 00 |........|......@.|
|000008a0| 20 c0 02 00 00 00 11 00 | 09 00 00 00 00 00 0a 50 | .......|.......P|
|000008b0| 45 46 69 6c 65 2e 64 6c | 6c 28 00 13 10 07 00 00 |EFile.dl|l(......|
|000008c0| 00 03 00 00 00 00 00 00 | 00 06 00 00 00 95 1f 12 |........|........|
|000008d0| 4d 69 63 72 6f 73 6f 66 | 74 20 28 52 29 20 4c 49 |Microsof|t (R) LI|
|000008e0| 4e 4b 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |NK......|........|
|000008f0| 00 00 00 00 00 00 00 0c | 00 00 00 03 00 00 00 07 |........|........|
|00000900| 00 00 00 00 00 04 00 00 | 00 07 00 10 00 00 00 05 |........|........|
|00000910| 00 00 00 07 00 50 45 46 | 69 6c 65 2e 64 6c 6c 00 |.....PEF|ile.dll.|
|00000920| 00 40 63 6f 6d 70 2e 69 | 64 95 1f 04 00 ff ff 00 |.@comp.i|d.......|
|00000930| 00 03 00 00 00 00 00 04 | 00 00 00 00 00 00 00 02 |........|........|
|00000940| 00 00 00 02 00 2e 69 64 | 61 74 61 24 32 40 00 00 |......id|ata$2@..|
|00000950| c0 02 00 00 00 68 00 2e | 69 64 61 74 61 24 36 00 |.....h..|idata$6.|
|00000960| 00 00 00 03 00 00 00 03 | 00 2e 69 64 61 74 61 24 |........|..idata$|
|00000970| 34 40 00 00 c0 00 00 00 | 00 68 00 2e 69 64 61 74 |4@......|.h..idat|
|00000980| 61 24 35 40 00 00 c0 00 | 00 00 00 68 00 00 00 00 |a$5@....|...h....|
|00000990| 00 1f 00 00 00 00 00 00 | 00 00 00 00 00 02 00 00 |........|........|
|000009a0| 00 00 00 38 00 00 00 00 | 00 00 00 00 00 00 00 02 |...8....|........|
|000009b0| 00 50 00 00 00 5f 5f 49 | 4d 50 4f 52 54 5f 44 45 |.P...__I|MPORT_DE|
|000009c0| 53 43 52 49 50 54 4f 52 | 5f 50 45 46 69 6c 65 00 |SCRIPTOR|_PEFile.|
|000009d0| 5f 5f 4e 55 4c 4c 5f 49 | 4d 50 4f 52 54 5f 44 45 |__NULL_I|MPORT_DE|
|000009e0| 53 43 52 49 50 54 4f 52 | 00 7f 50 45 46 69 6c 65 |SCRIPTOR|..PEFile|
|000009f0| 5f 4e 55 4c 4c 5f 54 48 | 55 4e 4b 5f 44 41 54 41 |_NULL_TH|UNK_DATA|
|00000a00| 00 0a 50 45 46 69 6c 65 | 2e 64 6c 6c 2f 20 20 20 |..PEFile|.dll/ |
|00000a10| 20 20 38 39 31 32 35 36 | 38 38 37 20 20 20 20 20 | 891256|887 |
|00000a20| 20 20 20 20 20 20 20 20 | 20 20 30 20 20 20 20 20 | | 0 |
|00000a30| 20 20 32 35 30 20 20 20 | 20 20 20 20 60 0a 4c 01 | 250 | `.L.|
|00000a40| 02 00 37 80 1f 35 b9 00 | 00 00 02 00 00 00 00 00 |..7..5..|........|
|00000a50| 00 01 2e 64 65 62 75 67 | 24 53 00 00 00 00 00 00 |...debug|$S......|
|00000a60| 00 00 41 00 00 00 64 00 | 00 00 00 00 00 00 00 00 |..A...d.|........|
|00000a70| 00 00 00 00 00 00 40 00 | 10 42 2e 69 64 61 74 61 |......@.|.B.idata|
|00000a80| 24 33 00 00 00 00 00 00 | 00 00 14 00 00 00 a5 00 |$3......|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 40 00 |........|......@.|
|00000aa0| 30 c0 02 00 00 00 11 00 | 09 00 00 00 00 00 0a 50 |0.......|.......P|
|00000ab0| 45 46 69 6c 65 2e 64 6c | 6c 28 00 13 10 07 00 00 |EFile.dl|l(......|
|00000ac0| 00 03 00 00 00 00 00 00 | 00 06 00 00 00 95 1f 12 |........|........|
|00000ad0| 4d 69 63 72 6f 73 6f 66 | 74 20 28 52 29 20 4c 49 |Microsof|t (R) LI|
|00000ae0| 4e 4b 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |NK......|........|
|00000af0| 00 00 00 00 00 00 00 40 | 63 6f 6d 70 2e 69 64 95 |.......@|comp.id.|
|00000b00| 1f 04 00 ff ff 00 00 03 | 00 00 00 00 00 04 00 00 |........|........|
|00000b10| 00 00 00 00 00 02 00 00 | 00 02 00 1d 00 00 00 5f |........|......._|
|00000b20| 5f 4e 55 4c 4c 5f 49 4d | 50 4f 52 54 5f 44 45 53 |_NULL_IM|PORT_DES|
|00000b30| 43 52 49 50 54 4f 52 00 | 50 45 46 69 6c 65 2e 64 |CRIPTOR.|PEFile.d|
|00000b40| 6c 6c 2f 20 20 20 20 20 | 38 39 31 32 35 36 38 38 |ll/ |89125688|
|00000b50| 37 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |7 | |
|00000b60| 30 20 20 20 20 20 20 20 | 32 37 37 20 20 20 20 20 |0 |277 |
|00000b70| 20 20 60 0a 4c 01 03 00 | 37 80 1f 35 d5 00 00 00 | `.L...|7..5....|
|00000b80| 02 00 00 00 00 00 00 01 | 2e 64 65 62 75 67 24 53 |........|.debug$S|
|00000b90| 00 00 00 00 00 00 00 00 | 41 00 00 00 8c 00 00 00 |........|A.......|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 10 42 |........|....@..B|
|00000bb0| 2e 69 64 61 74 61 24 35 | 00 00 00 00 00 00 00 00 |.idata$5|........|
|00000bc0| 04 00 00 00 cd 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 40 00 30 c0 | 2e 69 64 61 74 61 24 34 |....@.0.|.idata$4|
|00000be0| 00 00 00 00 00 00 00 00 | 04 00 00 00 d1 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 30 c0 |........|....@.0.|
|00000c00| 02 00 00 00 11 00 09 00 | 00 00 00 00 0a 50 45 46 |........|.....PEF|
|00000c10| 69 6c 65 2e 64 6c 6c 28 | 00 13 10 07 00 00 00 03 |ile.dll(|........|
|00000c20| 00 00 00 00 00 00 00 06 | 00 00 00 95 1f 12 4d 69 |........|......Mi|
|00000c30| 63 72 6f 73 6f 66 74 20 | 28 52 29 20 4c 49 4e 4b |crosoft |(R) LINK|
|00000c40| 00 00 00 00 00 00 00 00 | 00 40 63 6f 6d 70 2e 69 |........|.@comp.i|
|00000c50| 64 95 1f 04 00 ff ff 00 | 00 03 00 00 00 00 00 04 |d.......|........|
|00000c60| 00 00 00 00 00 00 00 02 | 00 00 00 02 00 1c 00 00 |........|........|
|00000c70| 00 7f 50 45 46 69 6c 65 | 5f 4e 55 4c 4c 5f 54 48 |..PEFile|_NULL_TH|
|00000c80| 55 4e 4b 5f 44 41 54 41 | 00 0a 50 45 46 69 6c 65 |UNK_DATA|..PEFile|
|00000c90| 2e 64 6c 6c 2f 20 20 20 | 20 20 38 39 31 32 35 36 |.dll/ | 891256|
|00000ca0| 38 38 37 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |887 | |
|00000cb0| 20 20 30 20 20 20 20 20 | 20 20 35 31 20 20 20 20 | 0 | 51 |
|00000cc0| 20 20 20 20 60 0a 00 00 | ff ff 00 00 4c 01 37 80 | `...|....L.7.|
|00000cd0| 1f 35 1f 00 00 00 01 00 | 00 00 5f 46 69 6c 65 48 |.5......|.._FileH|
|00000ce0| 65 61 64 65 72 4f 66 66 | 73 65 74 40 34 00 50 45 |eaderOff|set@4.PE|
|00000cf0| 46 69 6c 65 2e 64 6c 6c | 00 0a 50 45 46 69 6c 65 |File.dll|..PEFile|
|00000d00| 2e 64 6c 6c 2f 20 20 20 | 20 20 38 39 31 32 35 36 |.dll/ | 891256|
|00000d10| 38 38 37 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |887 | |
|00000d20| 20 20 30 20 20 20 20 20 | 20 20 35 38 20 20 20 20 | 0 | 58 |
|00000d30| 20 20 20 20 60 0a 00 00 | ff ff 00 00 4c 01 37 80 | `...|....L.7.|
|00000d40| 1f 35 26 00 00 00 0c 00 | 00 00 5f 47 65 74 45 78 |.5&.....|.._GetEx|
|00000d50| 70 6f 72 74 46 75 6e 63 | 74 69 6f 6e 4e 61 6d 65 |portFunc|tionName|
|00000d60| 73 40 31 32 00 50 45 46 | 69 6c 65 2e 64 6c 6c 00 |s@12.PEF|ile.dll.|
|00000d70| 50 45 46 69 6c 65 2e 64 | 6c 6c 2f 20 20 20 20 20 |PEFile.d|ll/ |
|00000d80| 38 39 31 32 35 36 38 38 | 37 20 20 20 20 20 20 20 |89125688|7 |
|00000d90| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 | |0 |
|00000da0| 34 37 20 20 20 20 20 20 | 20 20 60 0a 00 00 ff ff |47 | `.....|
|00000db0| 00 00 4c 01 37 80 1f 35 | 1b 00 00 00 09 00 00 00 |..L.7..5|........|
|00000dc0| 5f 47 65 74 49 6d 61 67 | 65 42 61 73 65 40 34 00 |_GetImag|eBase@4.|
|00000dd0| 50 45 46 69 6c 65 2e 64 | 6c 6c 00 0a 50 45 46 69 |PEFile.d|ll..PEFi|
|00000de0| 6c 65 2e 64 6c 6c 2f 20 | 20 20 20 20 38 39 31 32 |le.dll/ | 8912|
|00000df0| 35 36 38 38 37 20 20 20 | 20 20 20 20 20 20 20 20 |56887 | |
|00000e00| 20 20 20 20 30 20 20 20 | 20 20 20 20 36 36 20 20 | 0 | 66 |
|00000e10| 20 20 20 20 20 20 60 0a | 00 00 ff ff 00 00 4c 01 | `.|......L.|
|00000e20| 37 80 1f 35 2e 00 00 00 | 0b 00 00 00 5f 47 65 74 |7..5....|...._Get|
|00000e30| 49 6d 70 6f 72 74 46 75 | 6e 63 74 69 6f 6e 4e 61 |ImportFu|nctionNa|
|00000e40| 6d 65 73 42 79 4d 6f 64 | 75 6c 65 40 31 36 00 50 |mesByMod|ule@16.P|
|00000e50| 45 46 69 6c 65 2e 64 6c | 6c 00 50 45 46 69 6c 65 |EFile.dl|l.PEFile|
|00000e60| 2e 64 6c 6c 2f 20 20 20 | 20 20 38 39 31 32 35 36 |.dll/ | 891256|
|00000e70| 38 38 37 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |887 | |
|00000e80| 20 20 30 20 20 20 20 20 | 20 20 35 36 20 20 20 20 | 0 | 56 |
|00000e90| 20 20 20 20 60 0a 00 00 | ff ff 00 00 4c 01 37 80 | `...|....L.7.|
|00000ea0| 1f 35 24 00 00 00 0a 00 | 00 00 5f 47 65 74 49 6d |.5$.....|.._GetIm|
|00000eb0| 70 6f 72 74 4d 6f 64 75 | 6c 65 4e 61 6d 65 73 40 |portModu|leNames@|
|00000ec0| 31 32 00 50 45 46 69 6c | 65 2e 64 6c 6c 00 50 45 |12.PEFil|e.dll.PE|
|00000ed0| 46 69 6c 65 2e 64 6c 6c | 2f 20 20 20 20 20 38 39 |File.dll|/ 89|
|00000ee0| 31 32 35 36 38 38 37 20 | 20 20 20 20 20 20 20 20 |1256887 | |
|00000ef0| 20 20 20 20 20 20 30 20 | 20 20 20 20 20 20 35 34 | 0 | 54|
|00000f00| 20 20 20 20 20 20 20 20 | 60 0a 00 00 ff ff 00 00 | |`.......|
|00000f10| 4c 01 37 80 1f 35 22 00 | 00 00 08 00 00 00 5f 47 |L.7..5".|......_G|
|00000f20| 65 74 4d 6f 64 75 6c 65 | 45 6e 74 72 79 50 6f 69 |etModule|EntryPoi|
|00000f30| 6e 74 40 34 00 50 45 46 | 69 6c 65 2e 64 6c 6c 00 |nt@4.PEF|ile.dll.|
|00000f40| 50 45 46 69 6c 65 2e 64 | 6c 6c 2f 20 20 20 20 20 |PEFile.d|ll/ |
|00000f50| 38 39 31 32 35 36 38 38 | 37 20 20 20 20 20 20 20 |89125688|7 |
|00000f60| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 | |0 |
|00000f70| 35 36 20 20 20 20 20 20 | 20 20 60 0a 00 00 ff ff |56 | `.....|
|00000f80| 00 00 4c 01 37 80 1f 35 | 24 00 00 00 04 00 00 00 |..L.7..5|$.......|
|00000f90| 5f 49 6d 70 6f 72 74 44 | 69 72 65 63 74 6f 72 79 |_ImportD|irectory|
|00000fa0| 4f 66 66 73 65 74 40 34 | 00 50 45 46 69 6c 65 2e |Offset@4|.PEFile.|
|00000fb0| 64 6c 6c 00 50 45 46 69 | 6c 65 2e 64 6c 6c 2f 20 |dll.PEFi|le.dll/ |
|00000fc0| 20 20 20 20 38 39 31 32 | 35 36 38 38 37 20 20 20 | 8912|56887 |
|00000fd0| 20 20 20 20 20 20 20 20 | 20 20 20 20 30 20 20 20 | | 0 |
|00000fe0| 20 20 20 20 34 38 20 20 | 20 20 20 20 20 20 60 0a | 48 | `.|
|00000ff0| 00 00 ff ff 00 00 4c 01 | 37 80 1f 35 1c 00 00 00 |......L.|7..5....|
|00001000| 05 00 00 00 5f 4e 75 6d | 4f 66 53 65 63 74 69 6f |...._Num|OfSectio|
|00001010| 6e 73 40 34 00 50 45 46 | 69 6c 65 2e 64 6c 6c 00 |ns@4.PEF|ile.dll.|
|00001020| 50 45 46 69 6c 65 2e 64 | 6c 6c 2f 20 20 20 20 20 |PEFile.d|ll/ |
|00001030| 38 39 31 32 35 36 38 38 | 37 20 20 20 20 20 20 20 |89125688|7 |
|00001040| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 | |0 |
|00001050| 35 35 20 20 20 20 20 20 | 20 20 60 0a 00 00 ff ff |55 | `.....|
|00001060| 00 00 4c 01 37 80 1f 35 | 23 00 00 00 02 00 00 00 |..L.7..5|#.......|
|00001070| 5f 4f 70 74 69 6f 6e 61 | 6c 48 65 61 64 65 72 4f |_Optiona|lHeaderO|
|00001080| 66 66 73 65 74 40 34 00 | 50 45 46 69 6c 65 2e 64 |ffset@4.|PEFile.d|
|00001090| 6c 6c 00 0a 50 45 46 69 | 6c 65 2e 64 6c 6c 2f 20 |ll..PEFi|le.dll/ |
|000010a0| 20 20 20 20 38 39 31 32 | 35 36 38 38 37 20 20 20 | 8912|56887 |
|000010b0| 20 20 20 20 20 20 20 20 | 20 20 20 20 30 20 20 20 | | 0 |
|000010c0| 20 20 20 20 35 33 20 20 | 20 20 20 20 20 20 60 0a | 53 | `.|
|000010d0| 00 00 ff ff 00 00 4c 01 | 37 80 1f 35 21 00 00 00 |......L.|7..5!...|
|000010e0| 06 00 00 00 5f 52 65 74 | 72 69 65 76 65 4d 6f 64 |...._Ret|rieveMod|
|000010f0| 75 6c 65 4e 61 6d 65 40 | 38 00 50 45 46 69 6c 65 |uleName@|8.PEFile|
|00001100| 2e 64 6c 6c 00 0a 50 45 | 46 69 6c 65 2e 64 6c 6c |.dll..PE|File.dll|
|00001110| 2f 20 20 20 20 20 38 39 | 31 32 35 36 38 38 37 20 |/ 89|1256887 |
|00001120| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 30 20 | | 0 |
|00001130| 20 20 20 20 20 20 35 36 | 20 20 20 20 20 20 20 20 | 56| |
|00001140| 60 0a 00 00 ff ff 00 00 | 4c 01 37 80 1f 35 24 00 |`.......|L.7..5$.|
|00001150| 00 00 07 00 00 00 5f 52 | 65 74 72 69 65 76 65 53 |......_R|etrieveS|
|00001160| 65 63 74 69 6f 6e 4e 61 | 6d 65 73 40 31 32 00 50 |ectionNa|mes@12.P|
|00001170| 45 46 69 6c 65 2e 64 6c | 6c 00 50 45 46 69 6c 65 |EFile.dl|l.PEFile|
|00001180| 2e 64 6c 6c 2f 20 20 20 | 20 20 38 39 31 32 35 36 |.dll/ | 891256|
|00001190| 38 38 37 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |887 | |
|000011a0| 20 20 30 20 20 20 20 20 | 20 20 35 34 20 20 20 20 | 0 | 54 |
|000011b0| 20 20 20 20 60 0a 00 00 | ff ff 00 00 4c 01 37 80 | `...|....L.7.|
|000011c0| 1f 35 22 00 00 00 03 00 | 00 00 5f 53 65 63 74 69 |.5".....|.._Secti|
|000011d0| 6f 6e 48 65 61 64 65 72 | 4f 66 66 73 65 74 40 34 |onHeader|Offset@4|
|000011e0| 00 50 45 46 69 6c 65 2e | 64 6c 6c 00 |.PEFile.|dll. |
+--------+-------------------------+-------------------------+--------+--------+