Static | ZeroBOX

PE Compile Time

1970-01-01 09:00:00

PE Imphash

0117a0095c2d1e0d2c4b69ac02367c52

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0007f10c 0x0007f200 6.37660460729
.data 0x00081000 0x00000340 0x00000400 3.81513705176
.rdata 0x00082000 0x000faa30 0x000fac00 5.80923173147
.bss 0x0017d000 0x000061f0 0x00000000 0.0
.idata 0x00184000 0x00000b6c 0x00000c00 4.22804871809
.rsrc 0x00185000 0x000064d9 0x00006600 4.71175107914

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00188ca8 0x000023a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x00188ca8 0x000023a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x00188ca8 0x000023a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_ICON 0x00188ca8 0x000023a8 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x0018b080 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x0018b080 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x0018b094 0x0000031c LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x0018b3b0 0x00000129 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text

Imports

Library KERNEL32.DLL:
0x58421c AddAtomA
0x584220 CreateSemaphoreA
0x584224 ExitProcess
0x584228 FindAtomA
0x58422c GetAtomNameA
0x584234 GetConsoleMode
0x58423c GetLastError
0x584240 GetStdHandle
0x58424c ReleaseSemaphore
0x584260 SetLastError
0x584268 Sleep
0x58426c TlsAlloc
0x584270 TlsFree
0x584274 TlsGetValue
0x584278 TlsSetValue
0x58427c WaitForSingleObject
0x584280 WriteConsoleOutputA
Library msvcrt.dll:
0x58428c _chmod
0x584290 _close
0x584294 _dup
0x584298 _fdopen
0x58429c _fstat
0x5842a0 _isatty
0x5842a4 _lseek
0x5842a8 _open
0x5842ac _read
0x5842b0 _rmdir
0x5842b4 _setmode
0x5842b8 _sopen
0x5842bc _stat
0x5842c0 _strdup
0x5842c4 _stricmp
0x5842c8 _unlink
0x5842cc _utime
0x5842d0 _write
Library msvcrt.dll:
0x5842dc __getmainargs
0x5842e0 __mb_cur_max
0x5842e4 __p__environ
0x5842e8 __p__fmode
0x5842ec __set_app_type
0x5842f0 _assert
0x5842f4 _cexit
0x5842f8 _errno
0x5842fc _get_osfhandle
0x584300 _iob
0x584304 _isctype
0x584308 _kbhit
0x58430c _onexit
0x584310 _pctype
0x584314 _setmode
0x584318 abort
0x58431c atexit
0x584320 atoi
0x584324 calloc
0x584328 clearerr
0x58432c clock
0x584330 exit
0x584334 fclose
0x584338 fflush
0x58433c fopen
0x584340 fprintf
0x584344 fputc
0x584348 fputs
0x58434c fread
0x584350 free
0x584354 fseek
0x584358 ftell
0x58435c fwrite
0x584360 getenv
0x584364 malloc
0x584368 memcmp
0x58436c memcpy
0x584370 memmove
0x584374 memset
0x584378 printf
0x58437c putchar
0x584380 qsort
0x584384 rand
0x584388 realloc
0x58438c rename
0x584390 signal
0x584394 sprintf
0x584398 srand
0x58439c sscanf
0x5843a0 strcat
0x5843a4 strchr
0x5843a8 strcmp
0x5843ac strcpy
0x5843b0 strcspn
0x5843b4 strerror
0x5843b8 strlen
0x5843bc strncmp
0x5843c0 strrchr
0x5843c4 strstr
0x5843c8 strtol
0x5843cc strtoul
0x5843d0 time
0x5843d4 tolower
0x5843d8 vfprintf

!This program cannot be run in DOS mode.
`.data
.rdata
.idata
jthp H
;^@tQV
u-;CXs
)H )H,[^_]
F<@;F@
F<@;F@
G<@;G@
u-;CXs
)H )H,[^_]
F<@;F@
u-;CXs
)H )H,[^_]
F<@;F@
F<@;F@
B<@;B@
u-;CXs
)P )P,[^_]
F<@;F@
F<@;F@
G<@;G@
,-B<,w
jmhS&H
jmhS&H
j8h]'H
j8h]'H
j<hP)H
jAhP)H
jBhP)H
jMhP)H
jYhZ0H
jvhZ0H
jYhZ0H
jvhZ0H
jZhu0H
jwhu0H
jZhu0H
jwhu0H
XZh$2H
XZh05H
Y[hA5H
XZh(7H
Y[h>7H
Y[h"8H
_XhJ9H
XZh)<H
PRhB<H
t#h02H
XZh(?H
YXhl@H
jEh BH
Zu#jGh BH
jEh BH
_u#jGh BH
j[h BH
u*j\h BH
j[h BH
u*j\h BH
u*jmh BH
u*jmh BH
PShqBH
0Rh^FH
VPRhzGH
thOHH
~(h0\H
}Oh7]H
}"h>]H
jjhp]H
jkhp]H
jrhp]H
jshp]H
jdhp]H
YVhi_H
t=h4JI
tZh$#N
YPh'N
YPh3'N
=UPX!t
=UPX!t
=UPX!t
jPh3vS
jPh3vS
jPh3vS
jPh3vS
C 9C$r
B 9B$sR1
A 9A$r<
B 9B$s
jPhxkV
jPhxkV
RPh!mV
sDhmmV
jPhxkV
jPhxkV
jHhxkV
jPhxkV
jPhxkV
jPhxkV
j3hcoV
j3hcoV
jHhxkV
jHhxkV
jHhxkV
jHhxkV
C$;C w
=UPX!t
=UPX!t
f=MZuL
G|;X$}(;p(}#
H|;Y(}=
F|;X(}
[^[^_]
<=t"<#t
:t;;S }
T$89Ptv"
T$89Pp
t$89ql
D$89Ep
|$89}lw
;t$\tg
FB;t$4
FB;t$4
H(9P$s
P$9P v
T$4;T$8
$;\$8r
;l$4t,
;|$8tV
wM;\$0u
T$X9T$0
T$X9T$0
;l$8s4
t+9_$v&
$;l$8r
L$p;L$lv
;L$lv2;L$t
VP;VTtE
VP;VTu
J;T$(s
L$X;L$Tv
;L$Tv2;L$\
;D$@tm
;L$Xv';L$\
;L$pv';L$t
9,$wY@9
UWVSQR
sF;T$0r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$0r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$,r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$0r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$0r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$,r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$0r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$0r@
;<$w&;t$
ZY[^_]
UWVSQR
sF;T$,r@
;<$w&;t$
ZY[^_]
T$p+T$t
t$@9t$Ls
L$X)T$p
{P9{Du
V0;V8r
D$H9D$xsx;
L$H9L$xs%
V0;V8r
T$p+T$t
t$@9t$Ls
L$X)T$p
{P9{Du
|$p9~P
V0;V8r
9l$hsk;L$tve1
9l$hs
V0;V8r
T$p+T$t
t$@9t$Ls
L$X)T$p
{P9{Du
|$p9~P
V0;V8r
9l$hsk;L$tve1
9l$hs
V0;V8r
E@;D$l
M@;H s
M@;H(s
T$h)T$h)
\$l;\$hv
\$t)\$h
\$p)]@
M(;L$8
L$$!D$
OC9\$$s
_D)Op)
L$P9Q`
;|$0wY
)Kd)Sh
)Kd)Sh
)Kd)Sh
)Kd)Sh
)Kd)Sh
l$49l$8
s>)T$4
s@)|$,
9L$ sn
\$L9\$Hv
L$ *D$D
T$$;D$(
Ttpu$;t$L
4A;t$H
;D$Ls*
|$\f9D
|$\f9D
t$Tf9D
t$Tf9D
|$Lf9D
|$Lf9D
G;L$4f
F;t$d~
|$09\$0
\$L9\$0
E;l$$~
t+;T$ t
]$;u t,PP
t#WWRP
7[[^_]
_Z[^_]
B4CUNG
PPh(iW
$Info: This file is packed with the UPX executable packer http://upx.sf.net $
$Id: UPX 3.08 Copyright (C) 1996-2011 the UPX Team. All Rights Reserved. $
$Id: UPX (C) 1996-2011 the UPX Team. All Rights Reserved. http://upx.sf.net $
-------------------- ------ ----------- -----------
../../../src/c_init.cpp
c->init
o == -1
now == -1
con_mode == CON_INIT
con != me
con == &console_none
../../../src/c_screen.cpp
screen == NULL
../../../src/compress.cpp
buf != NULL
method > 0
level > 0
*dst_len >= MemBuffer::getSizeForCompression(src_len)
unknown compression method
*dst_len > 0
src_len < *dst_len
unknown decompression method
(int)overlap_overhead > 0
../../../src/compress_lzma.cpp
M_IS_LZMA(method)
level > 0
cresult != NULL
NCompress::NLZMA::FindMatchFinder(matchfinder) >= 0
os.b_pos == 5
is.b_pos <= src_len
os.b_pos <= *dst_len
os.b_pos == *dst_len
is.b_pos == src_len
cresult->method == method
cresult->result_lzma.pos_bits == (unsigned) s.Properties.pb
cresult->result_lzma.lit_pos_bits == (unsigned) s.Properties.lp
cresult->result_lzma.lit_context_bits == (unsigned) s.Properties.lc
cresult->result_lzma.num_probs == (unsigned) LzmaGetNumProbs(&s.Properties)
src_out <= src_len
dst_out <= *dst_len
../../../src/compress_nrv.cpp
level > 0
cresult != NULL
unknown compression method 1
unknown compression method 2
unknown compression method 3
../../../src/compress_ucl.cpp
level > 0
cresult != NULL
unknown compression method
unknown decompression method
../../../src/compress_zlib.cpp
method == M_DEFLATE
level > 0
cresult != NULL
s.total_in <= src_len
s.total_out <= *dst_len
option '--exact' does not work with this file
filter problem
already packed by UPX
not packed by UPX
checksum error
compressed data violation
bad loader
out of memory
premature end of file
(null)
class
rename error
close failed
bad read
read error
bad write
write error
bad seek 1
bad seek 2
bad seek 3
seek error
bad tell
tell error
../../../src/file.cpp
(unsigned)len <= buf->getSize()
<stdout>
!opt->to_stdout
lseek error
../../../src/filter.cpp
n_filters <= 254
filter_id >= 0 && filter_id <= 255
filter_map[filter_id] == 0xff
filters[index].id == id
filter-1
filter-2
unfilter-1
unfilter-2
unfilter-3
unfilter-4
scan-1
scan-2
../../../src/filter/sub8.h
(int)f->calls > 0
../../../src/filter/sub16.h
../../../src/filter/sub32.h
../../../src/filter/cto.h
jc + addvalue < (1u << 24)
b[ic+1] != cto8
../../../src/filter/ctoj.h
../../../src/filter/ctok.h
../../../src/filter/ctojr.h
../../../src/filter/ppcbxx.h
(~(~0u<<W_CTO) & (word>>(24+2 - W_CTO))) != cto8
Dec 12th 2011
Ultimate Packer for eXecutables
Copyright (C) 1996 - %s
UPX %-10s Markus Oberhumer, Laszlo Molnar & John Reiser %14s
Usage: %s [-123456789dlthVL] [-qvfk] [-o file] %sfile..
../../../src/help.cpp
names_count < 64
Commands:
--best compress best (can be slow for big files)
-1 compress faster -9 compress better
%s -d decompress -l list compressed file
-t test compressed file -V display version number
-h give %s help -L display software license
Options:
--no-color, --mono, --color, --no-progress change look
-k keep backup files
-q be quiet -v be verbose
-oFILE write output to 'FILE'
-f force compression of suspicious files
Compression tuning options:
--brute try all available compression methods & filters [slow]
--ultra-brute try even more compression variants [very slow]
Backup options:
-k, --backup keep backup files
--no-backup no backup files [default]
Overlay options:
--overlay=copy copy any extra data attached to the file [default]
--overlay=strip strip any extra data attached to the file [DANGEROUS]
--overlay=skip don't compress a file with an overlay
Options for djgpp2/coff:
--coff produce COFF output [default: EXE]
Options for dos/com:
--8086 make compressed com work on any 8086
Options for dos/exe:
--8086 make compressed exe work on any 8086
--no-reloc put no relocations in to the exe header
Options for dos/sys:
--8086 make compressed sys work on any 8086
Options for ps1/exe:
--8-bit uses 8 bit size compression [default: 32 bit]
--8mib-ram 8 megabyte memory limit [default: 2 MiB]
--boot-only disables client/host transfer compatibility
--no-align don't align to 2048 bytes [enables: --console-run]
Options for watcom/le:
--le produce LE output [default: EXE]
Options for win32/pe, rtm32/pe & arm/pe:
--compress-exports=0 do not compress the export section
--compress-exports=1 compress the export section [default]
--compress-icons=0 do not compress any icons
--compress-icons=1 compress all but the first icon
--compress-icons=2 compress all but the first icon directory [default]
--compress-icons=3 compress all icons
--compress-resources=0 do not compress any resources at all
--keep-resource=list do not compress resources specified by list
--strip-relocs=0 do not strip relocations
--strip-relocs=1 strip relocations [default]
file.. executables to (de)compress
This version supports:
%-32s %s
Type '%s --help' for more detailed help.
UPX comes with ABSOLUTELY NO WARRANTY; for details visit http://upx.sf.net
This program may be used freely, and you are welcome to
redistribute it under certain conditions.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
UPX License Agreement for more details.
You should have received a copy of the UPX License Agreement
along with this program; see the file LICENSE.
If not, visit one of the following pages:
http://upx.sourceforge.net
http://www.oberhumer.com/opensource/upx/
Markus F.X.J. Oberhumer Laszlo Molnar
<markus@oberhumer.com> <ml1050@users.sourceforge.net>
upx %s
NRV data compression library %s
UCL data compression library %s
zlib data compression library %s
LZMA SDK version %s
Copyright (C) 1996-2011 Markus Franz Xaver Johannes Oberhumer
Copyright (C) 1996-2011 Laszlo Molnar
Copyright (C) 2000-2011 John F. Reiser
Copyright (C) 2002-2011 Jens Medoch
Copyright (C) 1995-2005 Jean-loup Gailly and Mark Adler
Copyright (C) 1999-2006 Igor Pavlov
UPX comes with ABSOLUTELY NO WARRANTY; for details type '%s -L'.
unexpected value in page map table
TIPPACH
already packed with PMWLITE
unsupported fixup record
16-bit selector alias fixup not yet supported
../../../src/linker.cpp
name != NULL
input != NULL
section != NULL
nextl != NULL
%*d %1023s %x %*d %*d %x 2**%d
unknown section %s
unknown symbol %s
relocations != NULL
RELOCATION RECORDS FOR [%[^]]
%x %99s %1023s
000000000
fffffffff
strlen(p) == 8
endptr && *endptr == '\0'
symbols != NULL
name[0]
name[strlen(name)-1] != ':'
findSymbol(name, false) == NULL
%x g *ABS* %x %1023s
offset == 0
%x%*c%*c%*c%*c%*c%*c%*c%*c %1023s %*x %1023s
strcmp(section, "*ABS*") != 0
9 + c_len == (unsigned) plen
14 + c_len == (unsigned) plen
(unsigned) plen < u_len
Sections:
pos != -1
SYMBOL TABLE:
psymbols != NULL
RELOCATION RECORDS FOR
prelocs != NULL
sections
sname[0]
sname[strlen(sname)-1] != ':'
findSection(sname, false) == NULL
sname != NULL
tail != section
!reloc_done
undefined symbol '%s' referenced
can not apply reloc '%s:%x' without section '
section->offset < value
defineSymbol: symbol '%s' already defined
%-28s 0x%08x | %-28s 0x%08x
%-42s%-28s 0x%08x
unknown relocation type '%s
R_X86_64_
target out of range (%d) in reloc %s:%x
R_ARM_PC24
R_ARM_ABS32
R_ARM_THM_CALL
R_ARM_THM_XPC22
R_ARM_THM_PC22
R_ARM_ABS8
(len & 1) == 0
(outputlen & 1) == 0
R_68K_
R_MIPS_HI16
R_MIPS_LO16
R_MIPS_PC16
R_MIPS_26
R_MIPS_32
R_PPC_
ADDR32
unaligned word diplacement
R_386_
target out of range (%d,%d,%d) in reloc %s:%x
../../../src/main.cpp
%s: out of memory
%s: illegal method option -- %d/%d
%s: invalid argument in option '%s'
%s: invalid value for option '%s'
%s: invalid string '%s' in environment variable '%s'
%s: illegal option in environment variable '%s'
cannot use both '%s' and '%s'
i <= argc
--overlay=strip
--exact
--stdout
%s: cannot use '--stdout' when compressing
%s: need exactly one argument when using '%s'
longopts->name[0] != '\0'
longopts->name[0] != '-'
(longopts->has_arg & 0xf) == 1
~}|{zyx
upx_adler32(d, 4) == 0x09f003f7
upx_adler32(d, 4, 0) == 0x09ec03f6
upx_adler32(d, 4, 1) == 0x09f003f7
get_be16(d) == 0xfffe
bele->get16(d) == 0xfffe
get_be16_signed(d) == -2
get_be24(d) == 0xfffefd
bele->get24(d) == 0xfffefd
get_be24_signed(d) == -259
get_be32(d) == 0xfffefdfc
bele->get32(d) == 0xfffefdfc
get_be32_signed(d) == -66052
get_le16(d) == 0xfeff
bele->get16(d) == 0xfeff
get_le16_signed(d) == -257
get_le24(d) == 0xfdfeff
bele->get24(d) == 0xfdfeff
get_le24_signed(d) == -131329
get_le32(d) == 0xfcfdfeff
bele->get32(d) == 0xfcfdfeff
get_le32_signed(d) == -50462977
get_le64_signed(d) == ACC_INT64_C(-506097522914230529)
find_be16(d, 2, 0xfffe) == 0
find_le16(d, 2, 0xfeff) == 0
find_be32(d, 4, 0xfffefdfc) == 0
find_le32(d, 4, 0xfcfdfeff) == 0
get_be16_signed(d) == 32638
get_be24_signed(d) == 8355453
get_be32_signed(d) == 2138996092
get_be64_signed(d) == ACC_INT64_C(9186918263483431288)
%s: option '-o' more than once given
%s: missing output name
%s: output name too long
/usr/local/lib/upx/upxX
%s: option '--script' more than once given
%s: missing script name
%s: script name too long
%s: internal error in getopt (%d)
ultra-brute
no-progress
silent
verbose
disable-random-id
backup
no-backup
overlay
skip-overlay
no-overlay
copy-overlay
strip-overlay
no-color
no-lzma
compress-exports
compress-icons
compress-resources
strip-loadconf
strip-relocs
keep-resource
decompress
fileinfo
file-info
license
uncompress
version
force-compress
no-env
no-mode
no-owner
no-time
output
dump-stub-loader
fake-stub-version
fake-stub-year
all-filters
all-methods
filter
no-filter
crp-nrv-cf
crp-nrv-sl
crp-nrv-hl
crp-nrv-pl
crp-nrv-mo
crp-nrv-mm
crp-nrv-ms
crp-ucl-cf
crp-ucl-sl
crp-ucl-hl
crp-ucl-pl
crp-ucl-mo
crp-ucl-mm
crp-ucl-ms
crp-lzma-pb
crp-lzma-lp
crp-lzma-lc
crp-lzma-ds
crp-lzma-fb
crp-zlib-ml
crp-zlib-wb
crp-zlib-st
crp-ms
split-segments
no-reloc
blocksize
force-execve
is_ptinterp
use_ptinterp
make_ptinterp
FreeBSD
freebsd
NetBSD
netbsd
OpenBSD
openbsd
unmap-all-pages
boot-only
no-align
8mib-ram
8mb-ram
mp-compress-task
mp-query-format
mp-query-num-tasks
ucl_init() failed - check your UCL installation !
library version conflict (%lx, %lx) - check your UCL installation !
nrv_init() failed - check your NRV installation !
library version conflict (%lx, %lx) - check your NRV installation !
--version
--help
--no-env
123456789
123456789hH?V
../../../src/mem.cpp
(int)uncompressed_size > 0
(int)extra >= 0
block not allocated
memory clobbered before allocated block 1
memory clobbered before allocated block 2
memory clobbered past end of allocated block
(int)b_size > 0
(int)off >= 0
(int)len >= 0
off <= b_size
len <= b_size
off + len <= b_size
b_size == 0
b == NULL
(int)size > 0
(int)total > 0
unhandled exception: %s
internal error: unhandled exception!
this file has possibly been modified/hacked; take care!
[WARNING] %s
Writing %s: %ld bytes
file format elf32-littlearm
Sections:
Idx Name Size VMA LMA File off Algn Flags
0 DllStart 00000008 00000000 00000000 00000034 2**0 CONTENTS, RELOC, READONLY
1 ExeStart 00000054 00000000 00000000 0000003c 2**0 CONTENTS, RELOC, READONLY
2 Prh
0004c 00000000 00000000 00000094 2**0 CONTENTS, RELOC, READONLY
4 Relocs 00000060 00000000 00000000 000000e0 2**0 CONTENTS, RELOC, READONLY
5 Imports 000000bc 00000000 0R
2d_decompress_8 00000100 00000000 00000000 00000334 2**0 CONTENTS, RELOC, READONLY
10 Call2D 00000004 00000000 00000000 00000434 2**0 CONTENTS, RELOC, READONLY
11 .ucl_nrv2b_decompress_8 000000c4 00000000 00000000 00000438 2**0 CONTENTS, RELOC, READONLY
12 Call2B 00000004 00000000 00000000 000004fc 2**0 CONTENTS, RELOC, READONLY
13 CallLZMA 00000054 00000000 00000000 00000500 2**0 CONTENTS, RELOC, READONLY
14 LZMA_DECODE 00000000 00000000 00000000 00000554 2**0 CONTENTS, READONLY
15 LZMA_DEC10 00000938 00000000 00000000 00000554 2**0 CONTENTS, RELOC, READONLY
SYMBOL TABLE:
00000000 l d ExeStart
00000000 ExeStart
00000000 l d Unfilter_0x50
00000000 Unfilter_0x50
00000000 l d Relocs
00000000 Relocs
00000000 l d Imports
00000000 Imports
00000000 l d .ucl_nrv2e_decompress_8
00000000 .ucl_nrv2e_decompress_8
00000000 l d .ucl_nrv2d_decompress_8
00000000 .ucl_nrv2d_decompress_8
00000000 l d .ucl_nrv2b_decompress_8
00000000 .ucl_nrv2b_decompress_8
00000000 l d CallLZMA
00000000 CallLZMA
00000000 l d LZMA_DECODE
00000000 LZMA_DECODE
00000000 l d LZMA_DEC10
00000000 LZMA_DEC10
00000000 l d DllStart
00000000 DllStart
00000000 l d ProcessEnd
00000000 ProcessEnd
00000000 l d UPX1HEAD
00000000 UPX1HEAD
00000000 l d Call2E
00000000 Call2E
00000000 l d Call2D
00000000 Call2D
00000000 l d Call2B
00000000 Call2B
0000002c g ExeStart
00000000 SRC0
00000034 g ExeStart
00000000 DST0
0000003c g ExeStart
00000000 IATT
0000004c g ExeStart
00000000 ENTR
00000044 g Unfilter_0x50
00000000 FIBS
00000048 g Unfilter_0x50
00000000 FIBE
0000005c g Relocs
00000000 BREL
000000b0 g Imports
00000000 BIMP
000000b4 g Imports
00000000 ONAM
00000000 *UND*
00000000 start_of_compressed
00000000 *UND*
00000000 compressed_length
00000000 *UND*
00000000 start_of_uncompressed
00000000 *UND*
00000000 uncompressed_length
00000000 *UND*
00000000 original_entry
00000000 *UND*
00000000 filter_buffer_start
00000000 *UND*
00000000 filter_buffer_end
00000000 *UND*
00000000 start_of_relocs
00000000 *UND*
00000000 start_of_imports
00000000 *UND*
00000000 start_of_dll_names
00000000 g F .ucl_nrv2e_decompress_8
00000114 ucl_nrv2e_decompress_8
00000000 g F .ucl_nrv2d_decompress_8
00000100 ucl_nrv2d_decompress_8
00000000 g F .ucl_nrv2b_decompress_8
000000c4 ucl_nrv2b_decompress_8
00000000 *UND*
00000000 lzma_u_len
00000000 *UND*
00000000 lzma_stack_adjust
00000000 *UND*
00000000 lzma_c_len
00000000 *UND*
00000000 lzma_properties
RELOCATION RECORDS FOR [DllStart]:
OFFSET TYPE VALUE
00000004 R_ARM_PC24 ExeStart
RELOCATION RECORDS FOR [ExeStart]:
OFFSET TYPE VALUE
00000014 R_ARM_PC24 ExeStart
0000001c R_ARM_PC24 ExeStart
0000002c R_ARM_ABS32 start_of_compressed
00000030 R_ARM_ABS32 compressed_length
00000034 R_ARM_ABS32 start_of_uncompressed
00000038 R_ARM_ABS32 uncompressed_length
0000004c R_ARM_ABS32 original_entry
RELOCATION RECORDS FOR [Unfilter_0x50]:
OFFSET TYPE VALUE
00000010 R_ARM_PC24 Unfilter_0x50
00000020 R_ARM_PC24 Unfilter_0x50
00000040 R_ARM_PC24 Unfilter_0x50
00000044 R_ARM_ABS32 filter_buffer_start
00000048 R_ARM_ABS32 filter_buffer_end
RELOCATION RECORDS FOR [Relocs]:
OFFSET TYPE VALUE
00000010 R_ARM_PC24 Relocs
00000058 R_ARM_PC24 Relocs
0000005c R_ARM_ABS32 start_of_relocs
RELOCATION RECORDS FOR [Imports]:
OFFSET TYPE VALUE
0000000c R_ARM_PC24 Imports
00000010 R_ARM_PC24 Imports
0000002c R_ARM_PC24 Imports
00000034 R_ARM_PC24 Imports
00000040 R_ARM_PC24 Imports
00000054 R_ARM_PC24 Imports
00000058 R_ARM_PC24 Imports
00000068 R_ARM_PC24 Imports
0000006c R_ARM_PC24 Imports
00000080 R_ARM_PC24 Imports
00000088 R_ARM_PC24 Imports
0000009c R_ARM_PC24 Imports
000000b0 R_ARM_ABS32 start_of_imports
000000b4 R_ARM_ABS32 start_of_dll_names
RELOCATION RECORDS FOR [.ucl_nrv2e_decompress_8]:
OFFSET TYPE VALUE
00000010 R_ARM_PC24 .ucl_nrv2e_decompress_8
00000044 R_ARM_PC24 .ucl_nrv2e_decompress_8
00000048 R_ARM_PC24 .ucl_nrv2e_decompress_8
00000050 R_ARM_PC24 .ucl_nrv2e_decompress_8
0000005c R_ARM_PC24 .ucl_nrv2e_decompress_8
00000068 R_ARM_PC24 .ucl_nrv2e_decompress_8
00000074 R_ARM_PC24 .ucl_nrv2e_decompress_8
00000078 R_ARM_PC24 .ucl_nrv2e_decompress_8
00000084 R_ARM_PC24 .ucl_nrv2e_decompress_8
00000094 R_ARM_PC24 .ucl_nrv2e_decompress_8
0000009c R_ARM_PC24 .ucl_nrv2e_decompress_8
000000a0 R_ARM_PC24 .ucl_nrv2e_decompress_8
000000a8 R_ARM_PC24 .ucl_nrv2e_decompress_8
000000ac R_ARM_PC24 .ucl_nrv2e_decompress_8
000000b8 R_ARM_PC24 .ucl_nrv2e_decompress_8
000000bc R_ARM_PC24 .ucl_nrv2e_decompress_8
000000c4 R_ARM_PC24 .ucl_nrv2e_decompress_8
000000d0 R_ARM_PC24 .ucl_nrv2e_decompress_8
000000d4 R_ARM_PC24 .ucl_nrv2e_decompress_8
000000dc R_ARM_PC24 .ucl_nrv2e_decompress_8
000000e4 R_ARM_PC24 .ucl_nrv2e_decompress_8
0000010c R_ARM_PC24 .ucl_nrv2e_decompress_8
00000110 R_ARM_PC24 .ucl_nrv2e_decompress_8
RELOCATION RECORDS FOR [Call2E]:
OFFSET TYPE VALUE
00000000 R_ARM_PC24 ucl_nrv2e_decompress_8
RELOCATION RECORDS FOR [.ucl_nrv2d_decompress_8]:
OFFSET TYPE VALUE
00000010 R_ARM_PC24 .ucl_nrv2d_decompress_8
00000044 R_ARM_PC24 .ucl_nrv2d_decompress_8
00000048 R_ARM_PC24 .ucl_nrv2d_decompress_8
00000050 R_ARM_PC24 .ucl_nrv2d_decompress_8
0000005c R_ARM_PC24 .ucl_nrv2d_decompress_8
00000068 R_ARM_PC24 .ucl_nrv2d_decompress_8
00000074 R_ARM_PC24 .ucl_nrv2d_decompress_8
00000078 R_ARM_PC24 .ucl_nrv2d_decompress_8
00000084 R_ARM_PC24 .ucl_nrv2d_decompress_8
00000094 R_ARM_PC24 .ucl_nrv2d_decompress_8
0000009c R_ARM_PC24 .ucl_nrv2d_decompress_8
000000a4 R_ARM_PC24 .ucl_nrv2d_decompress_8
000000b0 R_ARM_PC24 .ucl_nrv2d_decompress_8
000000b8 R_ARM_PC24 .ucl_nrv2d_decompress_8
000000c4 R_ARM_PC24 .ucl_nrv2d_decompress_8
000000d0 R_ARM_PC24 .ucl_nrv2d_decompress_8
000000d4 R_ARM_PC24 .ucl_nrv2d_decompress_8
000000f8 R_ARM_PC24 .ucl_nrv2d_decompress_8
000000fc R_ARM_PC24 .ucl_nrv2d_decompress_8
RELOCATION RECORDS FOR [Call2D]:
OFFSET TYPE VALUE
00000000 R_ARM_PC24 ucl_nrv2d_decompress_8
RELOCATION RECORDS FOR [.ucl_nrv2b_decompress_8]:
OFFSET TYPE VALUE
00000010 R_ARM_PC24 .ucl_nrv2b_decompress_8
00000048 R_ARM_PC24 .ucl_nrv2b_decompress_8
00000050 R_ARM_PC24 .ucl_nrv2b_decompress_8
00000054 R_ARM_PC24 .ucl_nrv2b_decompress_8
00000064 R_ARM_PC24 .ucl_nrv2b_decompress_8
00000068 R_ARM_PC24 .ucl_nrv2b_decompress_8
0000006c R_ARM_PC24 .ucl_nrv2b_decompress_8
00000078 R_ARM_PC24 .ucl_nrv2b_decompress_8
00000088 R_ARM_PC24 .ucl_nrv2b_decompress_8
0000008c R_ARM_PC24 .ucl_nrv2b_decompress_8
00000094 R_ARM_PC24 .ucl_nrv2b_decompress_8
0000009c R_ARM_PC24 .ucl_nrv2b_decompress_8
000000a0 R_ARM_PC24 .ucl_nrv2b_decompress_8
000000bc R_ARM_PC24 .ucl_nrv2b_decompress_8
000000c0 R_ARM_PC24 .ucl_nrv2b_decompress_8
RELOCATION RECORDS FOR [Call2B]:
OFFSET TYPE VALUE
00000000 R_ARM_PC24 ucl_nrv2b_decompress_8
RELOCATION RECORDS FOR [CallLZMA]:
OFFSET TYPE VALUE
0000001c R_ARM_PC24 CallLZMA
00000038 R_ARM_PC24 LZMA_DECODE
00000040 R_ARM_PC24 CallLZMA
00000044 R_ARM_ABS32 lzma_u_len
00000048 R_ARM_ABS32 lzma_stack_adjust
0000004c R_ARM_ABS32 lzma_c_len
00000050 R_ARM_ABS32 lzma_properties
RELOCATION RECORDS FOR [LZMA_DEC10]:
OFFSET TYPE VALUE
00000074 R_ARM_PC24 LZMA_DEC10
00000090 R_ARM_PC24 LZMA_DEC10
000000b8 R_ARM_PC24 LZMA_DEC10
000000cc R_ARM_PC24 LZMA_DEC10
000000f4 R_ARM_PC24 LZMA_DEC10
00000100 R_ARM_PC24 LZMA_DEC10
00000108 R_ARM_PC24 LZMA_DEC10
00000144 R_ARM_PC24 LZMA_DEC10
00000190 R_ARM_PC24 LZMA_DEC10
000001cc R_ARM_PC24 LZMA_DEC10
000001d8 R_ARM_PC24 LZMA_DEC10
00000204 R_ARM_PC24 LZMA_DEC10
00000218 R_ARM_PC24 LZMA_DEC10
00000220 R_ARM_PC24 LZMA_DEC10
00000234 R_ARM_PC24 LZMA_DEC10
0000023c R_ARM_PC24 LZMA_DEC10
00000240 R_ARM_PC24 LZMA_DEC10
0000024c R_ARM_PC24 LZMA_DEC10
00000258 R_ARM_PC24 LZMA_DEC10
000002a4 R_ARM_PC24 LZMA_DEC10
000002c8 R_ARM_PC24 LZMA_DEC10
000002e8 R_ARM_PC24 LZMA_DEC10
00000304 R_ARM_PC24 LZMA_DEC10
0000030c R_ARM_PC24 LZMA_DEC10
0000033c R_ARM_PC24 LZMA_DEC10
00000388 R_ARM_PC24 LZMA_DEC10
000003a0 R_ARM_PC24 LZMA_DEC10
000003a8 R_ARM_PC24 LZMA_DEC10
000003cc R_ARM_PC24 LZMA_DEC10
000003e0 R_ARM_PC24 LZMA_DEC10
000003e8 R_ARM_PC24 LZMA_DEC10
00000424 R_ARM_PC24 LZMA_DEC10
00000438 R_ARM_PC24 LZMA_DEC10
0000046c R_ARM_PC24 LZMA_DEC10
00000484 R_ARM_PC24 LZMA_DEC10
0000048c R_ARM_PC24 LZMA_DEC10
000004b0 R_ARM_PC24 LZMA_DEC10
000004d4 R_ARM_PC24 LZMA_DEC10
000004ec R_ARM_PC24 LZMA_DEC10
000004f4 R_ARM_PC24 LZMA_DEC10
00000518 R_ARM_PC24 LZMA_DEC10
0000053c R_ARM_PC24 LZMA_DEC10
00000598 R_ARM_PC24 LZMA_DEC10
000005a0 R_ARM_PC24 LZMA_DEC10
000005c0 R_ARM_PC24 LZMA_DEC10
000005e4 R_ARM_PC24 LZMA_DEC10
000005fc R_ARM_PC24 LZMA_DEC10
00000604 R_ARM_PC24 LZMA_DEC10
00000624 R_ARM_PC24 LZMA_DEC10
00000648 R_ARM_PC24 LZMA_DEC10
00000680 R_ARM_PC24 LZMA_DEC10
0000068c R_ARM_PC24 LZMA_DEC10
000006d0 R_ARM_PC24 LZMA_DEC10
000006ec R_ARM_PC24 LZMA_DEC10
0000071c R_ARM_PC24 LZMA_DEC10
00000728 R_ARM_PC24 LZMA_DEC10
0000076c R_ARM_PC24 LZMA_DEC10
0000077c R_ARM_PC24 LZMA_DEC10
0000079c R_ARM_PC24 LZMA_DEC10
000007b8 R_ARM_PC24 LZMA_DEC10
000007c4 R_ARM_PC24 LZMA_DEC10
000007d0 R_ARM_PC24 LZMA_DEC10
000007f4 R_ARM_PC24 LZMA_DEC10
00000820 R_ARM_PC24 LZMA_DEC10
0000082c R_ARM_PC24 LZMA_DEC10
0000087c R_ARM_PC24 LZMA_DEC10
00000888 R_ARM_PC24 LZMA_DEC10
000008a0 R_ARM_PC24 LZMA_DEC10
000008e8 R_ARM_PC24 LZMA_DEC10
000008f4 R_ARM_PC24 LZMA_DEC10
000008fc R_ARM_PC24 LZMA_DEC10
00000904 R_ARM_PC24 LZMA_DEC10
00000928 R_ARM_PC24 LZMA_DEC10
pGPGXG
,wT-e1\
,wX-e1\
],e1#rA2\,e
:#r93\,e
-$rY2\,e
5,wT.e1\
i1\,\#
$e1\,P;
,wD-e1\
],e1#ra2\,e
e1\,,w8-e1\
$e1\,,w@-e1\
],e1#r12\,e
,e1#r]2\,e
|-e1#rQ2\,e
=D&w1\
)ENq1\
(MEn,e
,w8-e1\
%],e1#r]2\,e
(Mam,e
7e1#rU2\,e
$M-e,e
:#rU3\,e
X\,e
MYk,e
W\,e
-Enl1\
-E~m1\
-Enm1\
4e1#r]B\,e
,wT2f1\
yd+6Wc,e
$,wX-e1\
!],e1G6
sd+5e.
-EZr1\
$,wX-e1\
vP2CB\,
-],e1G6
,e1_y]
,wX-e1\
,wT-e1\
%],e1#ra2\,e
M}q,e
,w@-e1\
],e1#rA2\,e
(,w0-e1\
aDZe1\e
$e1\,,wX-e1\
$e1\,,wX-e1\
)$ra2\,e
$M}Y,d
,wX-e1\
)],e1G6
uq ,wX-e1\
)],e1G6
)],e1G
$:\,e
!$rY1\,d
-],e1G6
-],e1G6
e1\,,wX-e5\
1NF],e
$e1\,P;
+d1H2N
M%O,d
%E6W1\
c1\-e1\
)EFP1\
\,e1G6
(+d1],e1#r
d1\-e1\
+d1$rM2\,e
e1\,,w
)E:]1\
<+d1],e1#r)2\,e
c1\-e1\
)E*[1\
d1\-e1\
+d1],e1
$Mi<,d
d1\-e1\
d1\-e1\
0\,,w<-e1\
+d1E.\1\
%],e1#ra2\,e
e1\,P;
"rd2#r]2\,e
m1\,NLY
11 NRVLED00 00000001 00000000 00000000 0000009a 2**0 CONTENTS, READONLY
12 NRVGTD00 00000007 00000000 00000000 0000009b 2**0 CONTENTS, READONLY
13 NRVDECO2 00000016 00000000 00000000 000000a2 2**0 CONTENTS, RELOC, READONLY
14 CALLTR16 0000000b 00000000 00000000 000000b8 2**0 CONTENTS, RELOC, READONLY
15 CT16I286 00000003 00000000 00000000 000000c3 2**0 CONTENTS, READONLY
16 CT16SUB0 00000002 00000000 00000000 000000c6 2**0 CONTENTS, READONLY
17 CT16I086 00000008 00000000 00000000 000000c8 2**0 CONTENTS, READONLY
18 CALLTRI2 00000003 00000000 00000000 000000d0 2**0 CONTENTS, RELOC, READONLY
19 CT16E800 00000002 00000000 00000000 000000d3 2**0 CONTENTS, READONLY
20 CT16E900 00000002 00000000 00000000 000000d5 2**0 CONTENTS, READONLY
21 CALLTRI5 00000006 00000000 00000000 000000d7 2**0 CONTENTS, RELOC, READONLY
22 CT16JEND 00000002 00000000 00000000 000000dd 2**0 CONTENTS, RELOC, READONLY
23 CT16JUL2 00000002 00000000 00000000 000000df 2**0 CONTENTS, RELOC, READONLY
24 CT16I287 00000003 00000000 00000000 000000e1 2**0 CONTENTS, READONLY
25 CT16SUB1 00000002 00000000 00000000 000000e4 2**0 CONTENTS, READONLY
26 CT16I087 00000008 00000000 00000000 000000e6 2**0 CONTENTS, READONLY
27 CALLTRI6 00000003 00000000 00000000 000000ee 2**0 CONTENTS, RELOC, READONLY
28 CORETURN 00000001 00000000 00000000 000000f1 2**0 CONTENTS, READONLY
SYMBOL TABLE:
00000000 l d NRV2B160
00000000 NRV2B160
00000000 l d NRVDECO2
00000000 NRVDECO2
00000000 l d CALLTR16
00000000 CALLTR16
00000000 l d CALLTRI5
00000000 CALLTRI5
00000000 l d CALLTRI6
00000000 CALLTRI6
00000000 l d COMMAIN1
00000000 COMMAIN1
00000000 l d COMSBBBP
00000000 COMSBBBP
00000000 l d COMPSHDI
00000000 COMPSHDI
00000000 l d COMCALLT
00000000 COMCALLT
00000000 l d COMMAIN2
00000000 COMMAIN2
00000000 l d UPX1HEAD
00000000 UPX1HEAD
00000000 l d COMCUTPO
00000000 COMCUTPO
00000000 l d NRVDDONE
00000000 NRVDDONE
00000000 l d NRVDRETU
00000000 NRVDRETU
00000000 l d NRVDECO1
00000000 NRVDECO1
00000000 l d NRVLED00
00000000 NRVLED00
00000000 l d NRVGTD00
00000000 NRVGTD00
00000000 l d CT16I286
00000000 CT16I286
00000000 l d CT16SUB0
00000000 CT16SUB0
00000000 l d CT16I086
00000000 CT16I086
00000000 l d CALLTRI2
00000000 CALLTRI2
00000000 l d CT16E800
00000000 CT16E800
00000000 l d CT16E900
00000000 CT16E900
00000000 l d CT16JEND
00000000 CT16JEND
00000000 l d CT16JUL2
00000000 CT16JUL2
00000000 l d CT16I287
00000000 CT16I287
00000000 l d CT16SUB1
00000000 CT16SUB1
00000000 l d CT16I087
00000000 CT16I087
00000000 l d CORETURN
00000000 CORETURN
00000000 *UND*
00000000 sp_limit
00000000 *UND*
00000000 bytes_to_copy
00000000 *UND*
00000000 copy_source
00000000 *UND*
00000000 copy_destination
00000000 *UND*
00000000 neg_e_len
00000000 *UND*
00000000 calltrick_calls
RELOCATION RECORDS FOR [COMMAIN1]:
OFFSET TYPE VALUE
00000002 R_386_16 sp_limit
00000009 R_386_16 bytes_to_copy
0000000c R_386_16 copy_source
0000000f R_386_16 copy_destination
0000001c R_386_8 neg_e_len
RELOCATION RECORDS FOR [COMMAIN2]:
OFFSET TYPE VALUE
00000001 R_386_PC16 NRV2B160
RELOCATION RECORDS FOR [NRV2B160]:
OFFSET TYPE VALUE
00000002 R_386_PC16 NRVDECO2
00000008 R_386_PC16 NRVDECO2
RELOCATION RECORDS FOR [NRVDDONE]:
OFFSET TYPE VALUE
00000001 R_386_PC8 NRVDECO2
RELOCATION RECORDS FOR [NRVDRETU]:
OFFSET TYPE VALUE
00000001 R_386_PC8 NRVDECO2
RELOCATION RECORDS FOR [NRVDECO1]:
OFFSET TYPE VALUE
00000001 R_386_PC8 NRV2B160
00000010 R_386_PC16 NRVDECO2
00000018 R_386_PC16 NRVDECO2
RELOCATION RECORDS FOR [NRVDECO2]:
OFFSET TYPE VALUE
00000007 R_386_PC8 NRV2B160
RELOCATION RECORDS FOR [CALLTR16]:
OFFSET TYPE VALUE
00000002 R_386_16 calltrick_calls
RELOCATION RECORDS FOR [CALLTRI2]:
OFFSET TYPE VALUE
00000002 R_386_PC8 CALLTR16
RELOCATION RECORDS FOR [CALLTRI5]:
OFFSET TYPE VALUE
00000002 R_386_16 calltrick_calls
RELOCATION RECORDS FOR [CT16JEND]:
OFFSET TYPE VALUE
00000001 R_386_PC8 NRVDECO2
RELOCATION RECORDS FOR [CT16JUL2]:
OFFSET TYPE VALUE
00000001 R_386_PC8 CALLTRI6
RELOCATION RECORDS FOR [CALLTRI6]:
OFFSET TYPE VALUE
00000002 R_386_PC8 CALLTRI5
dos/com
i086-dos16.com
file is too small
file is too big for dos/com
COMCUTPO
../../../src/p_com.cpp
e_len > 0 && e_len < 128
d_len > 0 && d_len < 256
calltrick_calls
sp_limit
bytes_to_copy
copy_source
copy_destination
neg_e_len
NRV2B160
NRVLED00
NRVDECO2
NRVGTD00
NRVDDONE
NRVDECO1
NRVDRETU
COMCALLT
COMMAIN2,UPX1HEAD,COMCUTPO,NRV2B160
COMSBBBP
COMPSHDI
COMMAIN1
ft->calls > 0
filter_id > 0
isValidFilter(filter_id)
CORETURN
CALLTRI2
CT16I086
CT16I286,CT16SUB0
CT16SUB0
CALLTR16
CALLTRI6
CT16I087
CT16I287,CT16SUB1
CT16SUB1
CT16JEND
CT16JUL2
CALLTRI5
CT16E800
CT16E900
file damaged
stub.h generated from stub.asm by djasm, on Sun Nov 30 19:33:30 2003
The STUB.EXE stub loader is Copyright (C) 1993-1995 DJ Delorie.
Permission granted to use for any purpose provided this copyright
remains present and unmodified.
This only applies to the stub, and not necessarily the whole program.
$Id: stub.asm built 2003-11-30 19:33:30 by djasm $
@(#) stub.asm built 2003-11-30 19:33:30 by djasm
go32stub, v 2.04T
CWSDPMI.EXE
Load error: $: can't open$: not EXE$: not COFF (Check for viruses)$no DPMI - Get csdpmi*b.zip$no DOS memory$need DOS 3$can't switch mode$no DPMI selectors$no DPMI memory$
RVSPUWVS
t$t#t$l
D$t#D$h
D$t+D$\
.)D$H)
s`)L$4
D$t+D$\
)D$H)
9l$\w_
|[^_]UWVS
t$t#t$l
D$t#D$h
D$t+D$\
.)D$H)
s`)L$4
D$t+D$\
)D$H)
9l$\w_
-file format elf32-i386
Sections:
Idx Name Size VMA LMA File off Algn Flags
0 DJ2MAIN1 0000000c 00000000 00000000 00000034 2**0 CONTENTS, RELOC, READONLY
1 DJCALLT1 00000001 00000000 00000000 00000040 2**0 CONTENTS, READONLY
2 DJ2MAIN2 00000003 00000000 00000000 00000041 2**0 CONTENTS, READONLY
3 LZMA_INIT_STACK 00000010 00000000 00000000 00000044 2**0 CONTENTS, RELOC, READONLY
4 N2BSMA10 00000003 00000000 00000000 00000054 2**0 CONTENTS, RELOC, READONLY
5 N2BFAS10 00000002 00000000 00000000 00000057 2**0 CONTENTS, RELOC, READONLY
6 N2BFAS11 00000006 00000000 00000000 00000059 2**0 CONTENTS, READONLY
7 N2BDEC10 0000000b 00000000 00000000 0000005f 2**0 CONTENTS, READONLY
8 N2BSMA20 00000005 00000000 00000000 0000006a 2**0 CONTENTS, RELOC, READONLY
9 N2BFAS20 00000009 00000000 00000000 0000006f 2**0 CONTENTS, RELOC, READONLY
10 N2BDEC20 0000000d 00000000 00000000 00000078 2**0 CONTENTS, READONLY
11 N2BSMA30 0000000d 00000000 00000000 00000085 2**0 CONTENTS, RELOC, READONLY
12 N2BFAS30 0000000f 00000000 00000000 00000092 2**0 CONTENTS, RELOC, READONLY
13 N2BDEC30 0000003e 00000000 00000000 000000a1 2**0 CONTENTS, RELOC, READONLY
14 N2BSMA40 0000000d 00000000 00000000 000000df 2**0 CONTENTS, RELOC, READONLY
15 N2BFAS40 0000000f 00000000 00000000 000000ec 2**0 CONTENTS, RELOC, READONLY
16 N2BSMA50 00000002 00000000 00000000 000000fb 2**0 CONTENTS, READONLY
17 N2BFAS50 00000003 00000000 00000000 000000fd 2**0 CONTENTS, READONLY
18 N2BDEC50 00000009 00000000 00000000 00000100 2**0 CONTENTS, READONLY
19 N2BSMA60 0000000c 00000000 00000000 00000109 2**0 CONTENTS, RELOC, READONLY
20 N2BFAS60 00000019 00000000 00000000 00000115 2**0 CONTENTS, RELOC, READONLY
21 N2BFAS61 00000016 00000000 00000000 0000012e 2**0 CONTENTS, RELOC, READONLY
22 N2BDEC60 00000000 00000000 00000000 00000144 2**0 CONTENTS, READONLY
23 N2DSMA10 00000003 00000000 00000000 00000144 2**0 CONTENTS, RELOC, READONLY
24 N2DFAS10 00000002 00000000 00000000 00000147 2**0 CONTENTS, RELOC, READONLY
25 N2DFAS11 00000006 00000000 00000000 00000149 2**0 CONTENTS, READONLY
26 N2DDEC10 0000000b 00000000 00000000 0000014f 2**0 CONTENTS, READONLY
27 N2DSMA20 00000005 00000000 00000000 0000015a 2**0 CONTENTS, RELOC, READONLY
28 N2DFAS20 00000009 00000000 00000000 0000015f 2**0 CONTENTS, RELOC, READONLY
29 N2DDEC20 0000000d 00000000 00000000 00000168 2**0 CONTENTS, READONLY
30 N2DSMA30 0000000d 00000000 00000000 00000175 2**0 CONTENTS, RELOC, READONLY
31 N2DFAS30 0000000f 00000000 00000000 00000182 2**0 CONTENTS, RELOC, READONLY
32 N2DDEC30 00000052 00000000 00000000 00000191 2**0 CONTENTS, RELOC, READONLY
33 N2DSMA40 0000000d 00000000 00000000 000001e3 2**0 CONTENTS, RELOC, READONLY
34 N2DFAS40 0000000f 00000000 00000000 000001f0 2**0 CONTENTS, RELOC, READONLY
35 N2DSMA50 00000002 00000000 00000000 000001ff 2**0 CONTENTS, READONLY
36 N2DFAS50 00000003 00000000 00000000 00000201 2**0 CONTENTS, READONLY
37 N2DDEC50 00000009 00000000 00000000 00000204 2**0 CONTENTS, READONLY
38 N2DSMA60 0000000c 00000000 00000000 0000020d 2**0 CONTENTS, RELOC, READONLY
39 N2DFAS60 00000019 00000000 00000000 00000219 2**0 CONTENTS, RELOC, READONLY
40 N2DFAS61 00000016 00000000 00000000 00000232 2**0 CONTENTS, RELOC, READONLY
41 N2DDEC60 00000000 00000000 00000000 00000248 2**0 CONTENTS, READONLY
42 N2ESMA10 00000003 00000000 00000000 00000248 2**0 CONTENTS, RELOC, READONLY
43 N2EFAS10 00000002 00000000 00000000 0000024b 2**0 CONTENTS, RELOC, READONLY
44 N2EFAS11 00000006 00000000 00000000 0000024d 2**0 CONTENTS, READONLY
45 N2EDEC10 0000000b 00000000 00000000 00000253 2**0 CONTENTS, READONLY
46 N2ESMA20 00000005 00000000 00000000 0000025e 2**0 CONTENTS, RELOC, READONLY
47 N2EFAS20 00000009 00000000 00000000 00000263 2**0 CONTENTS, RELOC, READONLY
48 N2EDEC20 0000000d 00000000 00000000 0000026c 2**0 CONTENTS, READONLY
49 N2ESMA30 0000000d 00000000 00000000 00000279 2**0 CONTENTS, RELOC, READONLY
50 N2EFAS30 0000000f 00000000 00000000 00000286 2**0 CONTENTS, RELOC, READONLY
51 N2EDEC30 0000005f 00000000 00000000 00000295 2**0 CONTENTS, RELOC, READONLY
52 N2ESMA40 0000000d 00000000 00000000 000002f4 2**0 CONTENTS, RELOC, READONLY
53 N2EFAS40 0000000f 00000000 00000000 00000301 2**0 CONTENTS, RELOC, READONLY
54 N2ESMA50 00000002 00000000 00000000 00000310 2**0 CONTENTS, READONLY
55 N2EFAS50 00000003 00000000 00000000 00000312 2**0 CONTENTS, READONLY
56 N2EDEC50 00000009 00000000 00000000 00000315 2**0 CONTENTS, READONLY
57 N2ESMA60 0000000c 00000000 00000000 0000031e 2**0 CONTENTS, RELOC, READONLY
58 N2EFAS60 00000019 00000000 00000000 0000032a 2**0 CONTENTS, RELOC, READONLY
59 N2EFAS61 00000016 00000000 00000000 00000343 2**0 CONTENTS, RELOC, READONLY
60 N2EDEC60 00000000 00000000 00000000 00000359 2**0 CONTENTS, READONLY
61 LZMA_DEC00 0000002e 00000000 00000000 00000359 2**0 CONTENTS, RELOC, READONLY
62 LZMA_ELF00 00000048 00000000 00000000 00000387 2**0 CONTENTS, READONLY
63 LZMA_DEC10 00000a86 00000000 00000000 000003cf 2**0 CONTENTS, READONLY
64 LZMA_DEC20 00000a86 00000000 00000000 00000e55 2**0 CONTENTS, READONLY
65 LZMA_DEC30 0000001a 00000000 00000000 000018db 2**0 CONTENTS, READONLY
66 LZMA_DONE_STACK 00000005 00000000 00000000 000018f5 2**0 CONTENTS, READONLY
67 DJ2BSS00 00000007 00000000 00000000 000018fa 2**0 CONTENTS, RELOC, READONLY
68 DJCALLT2 00000001 00000000 00000000 00001901 2**0 CONTENTS, READONLY
69 CALLTR00 0000000e 00000000 00000000 00001902 2**0 CONTENTS, RELOC, READONLY
70 CTCLEVE1 00000005 00000000 00000000 00001910 2**0 CONTENTS, RELOC, READONLY
71 CALLTR01 00000005 00000000 00000000 00001915 2**0 CONTENTS, READONLY
72 CTBSHR01 00000004 00000000 00000000 0000191a 2**0 CONTENTS, READONLY
73 CTBROR01 00000002 00000000 00000000 0000191e 2**0 CONTENTS, READONLY
74 CTBSWA01 00000005 00000000 00000000 00001920 2**0 CONTENTS, READONLY
75 CALLTR02 0000000e 00000000 00000000 00001925 2**0 CONTENTS, RELOC, READONLY
76 CALLTR10 00000005 00000000 00000000 00001933 2**0 CONTENTS, RELOC, READONLY
77 CALLTRE8 00000002 00000000 00000000 00001938 2**0 CONTENTS, READONLY
78 CALLTRE9 00000002 00000000 00000000 0000193a 2**0 CONTENTS, READONLY
79 CALLTR11 00000004 00000000 00000000 0000193c 2**0 CONTENTS, RELOC, READONLY
80 CTCLEVE2 00000005 00000000 00000000 00001940 2**0 CONTENTS, RELOC, READONLY
81 CALLTR12 00000002 00000000 00000000 00001945 2**0 CONTENTS, READONLY
82 CTBSHR11 00000004 00000000 00000000 00001947 2**0 CONTENTS, READONLY
83 CTBROR11 00000002 00000000 00000000 0000194b 2**0 CONTENTS, READONLY
84 CTBSWA11 00000005 00000000 00000000 0000194d 2**0 CONTENTS, READONLY
85 CALLTR13 00000005 00000000 00000000 00001952 2**0 CONTENTS, RELOC, READONLY
86 ctok32.00 0000000c 00000000 00000000 00001957 2**0 CONTENTS, RELOC, READONLY
87 ctok32.10 0000000e 00000000 00000000 00001963 2**0 CONTENTS, RELOC, READONLY
88 ctok32.20 00000020 00000000 00000000 00001971 2**0 CONTENTS, RELOC, READONLY
89 ctok32.30 00000007 00000000 00000000 00001991 2**0 CONTENTS, RELOC, READONLY
90 ctok32.40 00000005 00000000 00000000 00001998 2**0 CONTENTS, RELOC, READONLY
91 DJRETURN 00000005 00000000 00000000 0000199d 2**0 CONTENTS, RELOC, READONLY
92 UPX1HEAD 00000020 00000000 00000000 000019a2 2**0 CONTENTS, READONLY
SYMBOL TABLE:
00000000 l d N2BSMA10
00000000 N2BSMA10
00000000 l d N2BFAS11
00000000 N2BFAS11
00000000 l d N2BDEC10
00000000 N2BDEC10
00000000 l d N2BDEC20
00000000 N2BDEC20
00000000 l d N2BDEC30
00000000 N2BDEC30
00000000 l d N2BDEC50
00000000 N2BDEC50
00000000 l d N2BFAS61
00000000 N2BFAS61
00000000 l d N2BDEC60
00000000 N2BDEC60
00000000 l d N2DSMA10
00000000 N2DSMA10
00000000 l d N2DFAS11
00000000 N2DFAS11
00000000 l d N2DDEC10
00000000 N2DDEC10
00000000 l d N2DDEC20
00000000 N2DDEC20
00000000 l d N2DDEC30
00000000 N2DDEC30
00000000 l d N2DDEC50
00000000 N2DDEC50
00000000 l d N2DFAS61
00000000 N2DFAS61
00000000 l d N2DDEC60
00000000 N2DDEC60
00000000 l d N2ESMA10
00000000 N2ESMA10
00000000 l d N2EFAS11
00000000 N2EFAS11
00000000 l d N2EDEC10
00000000 N2EDEC10
00000000 l d N2EDEC20
00000000 N2EDEC20
00000000 l d N2EDEC30
00000000 N2EDEC30
00000000 l d N2EDEC50
00000000 N2EDEC50
00000000 l d N2EFAS61
00000000 N2EFAS61
00000000 l d N2EDEC60
00000000 N2EDEC60
00000000 l d CALLTR00
00000000 CALLTR00
00000000 l d CALLTR10
00000000 CALLTR10
00000000 l d CALLTR11
00000000 CALLTR11
00000000 l d CALLTR13
00000000 CALLTR13
00000000 l d ctok32.00
00000000 ctok32.00
00000000 l d ctok32.10
00000000 ctok32.10
00000000 l d ctok32.20
00000000 ctok32.20
00000000 l d ctok32.40
00000000 ctok32.40
00000000 l d DJ2MAIN1
00000000 DJ2MAIN1
00000000 l d DJCALLT1
00000000 DJCALLT1
00000000 l d DJ2MAIN2
00000000 DJ2MAIN2
00000000 l d LZMA_INIT_STACK
00000000 LZMA_INIT_STACK
00000000 l d N2BFAS10
00000000 N2BFAS10
00000000 l d N2BSMA20
00000000 N2BSMA20
00000000 l d N2BFAS20
00000000 N2BFAS20
00000000 l d N2BSMA30
00000000 N2BSMA30
00000000 l d N2BFAS30
00000000 N2BFAS30
00000000 l d N2BSMA40
00000000 N2BSMA40
00000000 l d N2BFAS40
00000000 N2BFAS40
00000000 l d N2BSMA50
00000000 N2BSMA50
00000000 l d N2BFAS50
00000000 N2BFAS50
00000000 l d N2BSMA60
00000000 N2BSMA60
00000000 l d N2BFAS60
00000000 N2BFAS60
00000000 l d N2DFAS10
00000000 N2DFAS10
00000000 l d N2DSMA20
00000000 N2DSMA20
00000000 l d N2DFAS20
00000000 N2DFAS20
00000000 l d N2DSMA30
00000000 N2DSMA30
00000000 l d N2DFAS30
00000000 N2DFAS30
00000000 l d N2DSMA40
00000000 N2DSMA40
00000000 l d N2DFAS40
00000000 N2DFAS40
00000000 l d N2DSMA50
00000000 N2DSMA50
00000000 l d N2DFAS50
00000000 N2DFAS50
00000000 l d N2DSMA60
00000000 N2DSMA60
00000000 l d N2DFAS60
00000000 N2DFAS60
00000000 l d N2EFAS10
00000000 N2EFAS10
00000000 l d N2ESMA20
00000000 N2ESMA20
00000000 l d N2EFAS20
00000000 N2EFAS20
00000000 l d N2ESMA30
00000000 N2ESMA30
00000000 l d N2EFAS30
00000000 N2EFAS30
00000000 l d N2ESMA40
00000000 N2ESMA40
00000000 l d N2EFAS40
00000000 N2EFAS40
00000000 l d N2ESMA50
00000000 N2ESMA50
00000000 l d N2EFAS50
00000000 N2EFAS50
00000000 l d N2ESMA60
00000000 N2ESMA60
00000000 l d N2EFAS60
00000000 N2EFAS60
00000000 l d LZMA_DEC00
00000000 LZMA_DEC00
00000000 l d LZMA_ELF00
00000000 LZMA_ELF00
00000000 l d LZMA_DEC10
00000000 LZMA_DEC10
00000000 l d LZMA_DEC20
00000000 LZMA_DEC20
00000000 l d LZMA_DEC30
00000000 LZMA_DEC30
00000000 l d LZMA_DONE_STACK
00000000 LZMA_DONE_STACK
00000000 l d DJ2BSS00
00000000 DJ2BSS00
00000000 l d DJCALLT2
00000000 DJCALLT2
00000000 l d CTCLEVE1
00000000 CTCLEVE1
00000000 l d CALLTR01
00000000 CALLTR01
00000000 l d CTBSHR01
00000000 CTBSHR01
00000000 l d CTBROR01
00000000 CTBROR01
00000000 l d CTBSWA01
00000000 CTBSWA01
00000000 l d CALLTR02
00000000 CALLTR02
00000000 l d CALLTRE8
00000000 CALLTRE8
00000000 l d CALLTRE9
00000000 CALLTRE9
00000000 l d CTCLEVE2
00000000 CTCLEVE2
00000000 l d CALLTR12
00000000 CALLTR12
00000000 l d CTBSHR11
00000000 CTBSHR11
00000000 l d CTBROR11
00000000 CTBROR11
00000000 l d CTBSWA11
00000000 CTBSWA11
00000000 l d ctok32.30
00000000 ctok32.30
00000000 l d DJRETURN
00000000 DJRETURN
00000000 l d UPX1HEAD
00000000 UPX1HEAD
00000000 *UND*
00000000 start_of_compressed
00000000 *UND*
00000000 start_of_uncompressed
00000000 *UND*
00000000 stack_for_lzma
00000000 *UND*
00000000 lzma_stack_adjust
00000000 *UND*
00000000 lzma_u_len
00000000 *UND*
00000000 lzma_c_len
00000000 *UND*
00000000 lzma_properties
00000000 *UND*
00000000 length_of_bss
00000000 *UND*
00000000 filter_length
00000000 *UND*
00000000 filter_cto
00000000 *UND*
00000000 original_entry
RELOCATION RECORDS FOR [DJ2MAIN1]:
OFFSET TYPE VALUE
00000003 R_386_32 start_of_compressed
00000008 R_386_32 start_of_uncompressed
RELOCATION RECORDS FOR [LZMA_INIT_STACK]:
OFFSET TYPE VALUE
0000000c R_386_32 stack_for_lzma
RELOCATION RECORDS FOR [N2BSMA10]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2BDEC10
RELOCATION RECORDS FOR [N2BFAS10]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2BDEC10
RELOCATION RECORDS FOR [N2BSMA20]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2BSMA10
RELOCATION RECORDS FOR [N2BFAS20]:
OFFSET TYPE VALUE
00000003 R_386_PC8 N2BFAS11
RELOCATION RECORDS FOR [N2BSMA30]:
OFFSET TYPE VALUE
0000000c R_386_PC8 N2BDEC20
RELOCATION RECORDS FOR [N2BFAS30]:
OFFSET TYPE VALUE
00000003 R_386_PC8 N2BDEC20
0000000e R_386_PC8 N2BDEC20
RELOCATION RECORDS FOR [N2BDEC30]:
OFFSET TYPE VALUE
00000011 R_386_PC8 N2BDEC60
0000002f R_386_PC8 N2BDEC50
RELOCATION RECORDS FOR [N2BSMA40]:
OFFSET TYPE VALUE
0000000c R_386_PC8 N2BDEC30
RELOCATION RECORDS FOR [N2BFAS40]:
OFFSET TYPE VALUE
00000003 R_386_PC8 N2BDEC30
0000000e R_386_PC8 N2BDEC30
RELOCATION RECORDS FOR [N2BSMA60]:
OFFSET TYPE VALUE
00000008 R_386_PC32 N2BDEC10
RELOCATION RECORDS FOR [N2BFAS60]:
OFFSET TYPE VALUE
0000000a R_386_PC8 N2BFAS61
00000015 R_386_PC32 N2BDEC10
RELOCATION RECORDS FOR [N2BFAS61]:
OFFSET TYPE VALUE
00000012 R_386_PC32 N2BDEC10
RELOCATION RECORDS FOR [N2DSMA10]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2DDEC10
RELOCATION RECORDS FOR [N2DFAS10]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2DDEC10
RELOCATION RECORDS FOR [N2DSMA20]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2DSMA10
RELOCATION RECORDS FOR [N2DFAS20]:
OFFSET TYPE VALUE
00000003 R_386_PC8 N2DFAS11
RELOCATION RECORDS FOR [N2DSMA30]:
OFFSET TYPE VALUE
0000000c R_386_PC8 N2DDEC30
RELOCATION RECORDS FOR [N2DFAS30]:
OFFSET TYPE VALUE
00000005 R_386_PC8 N2DDEC30
0000000e R_386_PC8 N2DDEC30
RELOCATION RECORDS FOR [N2DDEC30]:
OFFSET TYPE VALUE
0000000f R_386_PC8 N2DDEC20
00000021 R_386_PC8 N2DDEC60
00000043 R_386_PC8 N2DDEC50
RELOCATION RECORDS FOR [N2DSMA40]:
OFFSET TYPE VALUE
0000000c R_386_PC8 N2DDEC30
RELOCATION RECORDS FOR [N2DFAS40]:
OFFSET TYPE VALUE
00000003 R_386_PC8 N2DDEC30
0000000e R_386_PC8 N2DDEC30
RELOCATION RECORDS FOR [N2DSMA60]:
OFFSET TYPE VALUE
00000008 R_386_PC32 N2DDEC10
RELOCATION RECORDS FOR [N2DFAS60]:
OFFSET TYPE VALUE
0000000a R_386_PC8 N2DFAS61
00000015 R_386_PC32 N2DDEC10
RELOCATION RECORDS FOR [N2DFAS61]:
OFFSET TYPE VALUE
00000012 R_386_PC32 N2DDEC10
RELOCATION RECORDS FOR [N2ESMA10]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2EDEC10
RELOCATION RECORDS FOR [N2EFAS10]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2EDEC10
RELOCATION RECORDS FOR [N2ESMA20]:
OFFSET TYPE VALUE
00000001 R_386_PC8 N2ESMA10
RELOCATION RECORDS FOR [N2EFAS20]:
OFFSET TYPE VALUE
00000003 R_386_PC8 N2EFAS11
RELOCATION RECORDS FOR [N2ESMA30]:
OFFSET TYPE VALUE
0000000c R_386_PC8 N2EDEC30
RELOCATION RECORDS FOR [N2EFAS30]:
OFFSET TYPE VALUE
00000005 R_386_PC8 N2EDEC30
0000000e R_386_PC8 N2EDEC30
RELOCATION RECORDS FOR [N2EDEC30]:
OFFSET TYPE VALUE
0000000f R_386_PC8 N2EDEC20
0000001e R_386_PC8 N2EDEC50
00000030 R_386_PC8 N2EDEC60
RELOCATION RECORDS FOR [N2ESMA40]:
OFFSET TYPE VALUE
0000000c R_386_PC8 N2EDEC30
RELOCATION RECORDS FOR [N2EFAS40]:
OFFSET TYPE VALUE
00000003 R_386_PC8 N2EDEC30
0000000e R_386_PC8 N2EDEC30
RELOCATION RECORDS FOR [N2ESMA60]:
OFFSET TYPE VALUE
00000008 R_386_PC32 N2EDEC10
RELOCATION RECORDS FOR [N2EFAS60]:
OFFSET TYPE VALUE
0000000a R_386_PC8 N2EFAS61
00000015 R_386_PC32 N2EDEC10
RELOCATION RECORDS FOR [N2EFAS61]:
OFFSET TYPE VALUE
00000012 R_386_PC32 N2EDEC10
RELOCATION RECORDS FOR [LZMA_DEC00]:
OFFSET TYPE VALUE
00000005 R_386_32 lzma_stack_adjust
00000014 R_386_32 lzma_u_len
0000001e R_386_32 lzma_c_len
0000002a R_386_32 lzma_properties
RELOCATION RECORDS FOR [DJ2BSS00]:
OFFSET TYPE VALUE
00000001 R_386_32 length_of_bss
RELOCATION RECORDS FOR [CALLTR00]:
OFFSET TYPE VALUE
00000001 R_386_32 filter_length
RELOCATION RECORDS FOR [CTCLEVE1]:
OFFSET TYPE VALUE
00000002 R_386_8 filter_cto
00000004 R_386_PC8 CALLTR00
RELOCATION RECORDS FOR [CALLTR02]:
OFFSET TYPE VALUE
0000000d R_386_PC8 CALLTR00
RELOCATION RECORDS FOR [CALLTR10]:
OFFSET TYPE VALUE
00000001 R_386_32 filter_length
RELOCATION RECORDS FOR [CALLTR11]:
OFFSET TYPE VALUE
00000003 R_386_PC8 CALLTR13
RELOCATION RECORDS FOR [CTCLEVE2]:
OFFSET TYPE VALUE
00000002 R_386_8 filter_cto
00000004 R_386_PC8 CALLTR11
RELOCATION RECORDS FOR [CALLTR13]:
OFFSET TYPE VALUE
00000004 R_386_PC8 CALLTR10
RELOCATION RECORDS FOR [ctok32.00]:
OFFSET TYPE VALUE
00000001 R_386_32 filter_length
00000006 R_386_PC8 ctok32.20
RELOCATION RECORDS FOR [ctok32.10]:
OFFSET TYPE VALUE
0000000d R_386_PC8 ctok32.20
RELOCATION RECORDS FOR [ctok32.20]:
OFFSET TYPE VALUE
00000005 R_386_PC8 ctok32.40
00000008 R_386_8 filter_cto
0000000a R_386_PC8 ctok32.40
RELOCATION RECORDS FOR [ctok32.30]:
OFFSET TYPE VALUE
00000006 R_386_PC8 ctok32.10
RELOCATION RECORDS FOR [ctok32.40]:
OFFSET TYPE VALUE
00000004 R_386_PC8 ctok32.00
RELOCATION RECORDS FOR [DJRETURN]:
OFFSET TYPE VALUE
00000001 R_386_PC32 original_entry
djgpp2/coff
i386-dos32.djgpp2.coff
LZMA_DONE_STACK
DJ2BSS00
LZMA_INIT_STACK
DJ2MAIN2
DJCALLT1
IDENTSTR,DJ2MAIN1
../../../src/p_djgpp2.cpp
ft->calls > 0
DJCALLT2
DJRETURN,+40C,UPX1HEAD
Adding stub: %ld bytes
go32stub
skipping djgpp symlink
can't handle DLM
coff header error
lsize % 4 == 0
original_entry
length_of_bss
bss->vaddr == ((size + 0x1ff) &~ 0x1ff) + (text->vaddr &~ 0x1ff)
stack_for_lzma
start_of_uncompressed
start_of_compressed
text->vaddr > hdrsize + lsize + sizeof(coff_hdr)
DJ2MAIN1
]_^VWU
]_^[X
file format elf32-i386
Sections:
Idx Name Size VMA LMA File off Algn Flags
0 DEVICEENTRY 0000002d 00000000 00000000 00000034 2**0 CONTENTS, RELOC, READONLY
1 LZMADEVICE 00000005 00000000 00000000 00000061 2**0 CONTENTS, RELOC, READONLY
2 DEVICEENTRY2 00000003 00000000 00000000 00000066 2**0 CONTENTS, READONLY
3 LZMAENTRY 00000011 00000000 00000000 00000069 2**0 CONTENTS, RELOC, READONLY
4 NRV2B160 0000000a 00000000 00000000 0000007a 2**0 CONTENTS, RELOC, READONLY
5 NRVDDONE 00000002 00000000 00000000 00000084 2**0 CONTENTS, RELOC, READONLY
6 NRVDRETU 00000002 00000000 00000000 00000086 2**0 CONTENTS, RELOC, READONLY
7 NRVDECO1 0000001e 00000000 00000000 00000088 2**0 CONTENTS, RELOC, READONLY
8 NRVLED00 00000001 00000000 00000000 000000a6 2**0 CONTENTS, READONLY
9 NRVGTD00 00000007 00000000 00000000 000000a7 2**0 CONTENTS, READONLY
10 NRVDECO2 00000017 00000000 00000000 000000ae 2**0 CONTENTS, RELOC, READONLY
11 CALLTR16 0000000b 00000000 00000000 000000c5 2**0 CONTENTS, RELOC, READONLY
12 CT16I286 00000003 00000000 00000000 000000d0 2**0 CONTENTS, READONLY
13 CT16SUB0 00000002 00000000 00000000 000000d3 2**0 CONTENTS, READONLY
14 CT16I086 00000008 00000000 00000000 000000d5 2**0 CONTENTS, READONLY
15 CALLTRI2 00000003 00000000 00000000 000000dd 2**0 CONTENTS, RELOC, READONLY
16 CT16E800 00000002 00000000 00000000 000000e0 2**0 CONTENTS, READONLY
17 CT16E900 00000002 00000000 00000000 000000e2 2**0 CONTENTS, READONLY
18 CALLTRI5 00000006 00000000 00000000 000000e4 2**0 CONTENTS, RELOC, READONLY
19 CT16JEND 00000002 00000000 00000000 000000ea 2**0 CONTENTS, RELOC, READONLY
20 CT16JUL2 00000002 00000000 00000000 000000ec 2**0 CONTENTS, RELOC, READONLY
21 CT16I287 00000003 00000000 00000000 000000ee 2**0 CONTENTS, READONLY
22 CT16SUB1 00000002 00000000 00000000 000000f1 2**0 CONTENTS, READONLY
23 CT16I087 00000008 00000000 00000000 000000f3 2**0 CONTENTS, READONLY
24 CALLTRI6 00000003 00000000 00000000 000000fb 2**0 CONTENTS, RELOC, READONLY
25 EXEENTRY 0000001c 00000000 00000000 000000fe 2**0 CONTENTS, RELOC, READONLY
26 LONGSUB 00000006 00000000 00000000 0000011a 2**0 CONTENTS, RELOC, READONLY
27 SHORTSUB 00000005 00000000 00000000 00000120 2**0 CONTENTS, RELOC, READONLY
28 JNCDOCOPY 00000005 00000000 00000000 00000125 2**0 CONTENTS, RELOC, READONLY
29 EXERELPU 00000001 00000000 00000000 0000012a 2**0 CONTENTS, READONLY
30 EXEMAIN4 00000009 00000000 00000000 0000012b 2**0 CONTENTS, RELOC, READONLY
31 EXEMAIN4B 00000003 00000000 00000000 00000134 2**0 CONTENTS, RELOC, READONLY
32 EXEMAIN4C 00000002 00000000 00000000 00000137 2**0 CONTENTS, READONLY
33 COMPRESSED_LZMA_START 00000000 00000000 00000000 00000139 2**0 CONTENTS, READONLY
34 UPX1HEAD 0000001b 00000000 00000000 00000139 2**0 CONTENTS, READONLY
35 EXECUTPO 00000000 00000000 00000000 00000154 2**0 CONTENTS, READONLY
36 NRV2B16S 0000000d 00000000 00000000 00000154 2**0 CONTENTS, RELOC, READONLY
37 N2B64K01 0000000b 00000000 00000000 00000161 2**0 CONTENTS, READONLY
38 NRV2BEX1 0000000b 00000000 00000000 0000016c 2**0 CONTENTS, RELOC, READONLY
39 N2BX8601 00000008 00000000 00000000 00000177 2**0 CONTENTS, READONLY
40 N2B28601 00000003 00000000 00000000 0000017f 2**0 CONTENTS, READONLY
41 NRV2BEX2 00000031 00000000 00000000 00000182 2**0 CONTENTS, RELOC, READONLY
42 N2BX8602 0000000e 00000000 00000000 000001b3 2**0 CONTENTS, READONLY
43 N2B28602 00000006 00000000 00000000 000001c1 2**0 CONTENTS, READONLY
44 NRV2BEX3 00000015 00000000 00000000 000001c7 2**0 CONTENTS, RELOC, READONLY
45 N2B64K02 0000000b 00000000 00000000 000001dc 2**0 CONTENTS, READONLY
46 NRV2BEX9 00000004 00000000 00000000 000001e7 2**0 CONTENTS, READONLY
47 NRV2D16S 0000000d 00000000 00000000 000001eb 2**0 CONTENTS, RELOC, READONLY
48 N2D64K01 0000000b 00000000 00000000 000001f8 2**0 CONTENTS, READONLY
49 NRV2DEX1 00000013 00000000 00000000 00000203 2**0 CONTENTS, RELOC, READONLY
50 N2DX8601 00000006 00000000 00000000 00000216 2**0 CONTENTS, READONLY
51 N2D28601 00000003 00000000 00000000 0000021c 2**0 CONTENTS, READONLY
52 NRV2DEX2 00000039 00000000 00000000 0000021f 2**0 CONTENTS, RELOC, READONLY
53 N2DX8602 0000000e 00000000 00000000 00000258 2**0 CONTENTS, READONLY
54 N2D28602 00000006 00000000 00000000 00000266 2**0 CONTENTS, READONLY
55 NRV2DEX3 00000015 00000000 00000000 0000026c 2**0 CONTENTS, RELOC, READONLY
56 N2D64K02 0000000b 00000000 00000000 00000281 2**0 CONTENTS, READONLY
57 NRV2DEX9 00000004 00000000 00000000 0000028c 2**0 CONTENTS, READONLY
58 NRV2E16S 0000000d 00000000 00000000 00000290 2**0 CONTENTS, RELOC, READONLY
59 N2E64K01 0000000b 00000000 00000000 0000029d 2**0 CONTENTS, READONLY
60 NRV2EEX1 00000013 00000000 00000000 000002a8 2**0 CONTENTS, RELOC, READONLY
61 N2EX8601 00000006 00000000 00000000 000002bb 2**0 CONTENTS, READONLY
62 N2E28601 00000003 00000000 00000000 000002c1 2**0 CONTENTS, READONLY
63 NRV2EEX2 0000003e 00000000 00000000 000002c4 2**0 CONTENTS, RELOC, READONLY
64 N2EX8602 0000000e 00000000 00000000 00000302 2**0 CONTENTS, READONLY
65 N2E28602 00000006 00000000 00000000 00000310 2**0 CONTENTS, READONLY
66 NRV2EEX3 00000015 00000000 00000000 00000316 2**0 CONTENTS, RELOC, READONLY
67 N2E64K02 0000000b 00000000 00000000 0000032b 2**0 CONTENTS, READONLY
68 NRV2EEX9 00000004 00000000 00000000 00000336 2**0 CONTENTS, READONLY
69 LZMA_DEC00 00000032 00000000 00000000 0000033a 2**0 CONTENTS, RELOC, READONLY
70 ignore_reloc_overflow 00000008 00000000 00000000 0000036c 2**0 CONTENTS, RELOC, READONLY
71 LZMA_DEC10 0000119b 00000000 00000000 00000374 2**0 CONTENTS, READONLY
72 LZMA_DEC20 0000122f 00000000 00000000 0000150f 2**0 CONTENTS, READONLY
73 LZMA_DEC30 00000001 00000000 00000000 0000273e 2**0 CONTENTS, READONLY
74 LZMA_DEC31 0000000c 00000000 00000000 0000273f 2**0 CONTENTS, RELOC, READONLY
75 LZMA_DEC32 00000005 00000000 00000000 0000274b 2**0 CONTENTS, RELOC, READONLY
76 LZMA_DEC33 00000007 00000000 00000000 00002750 2**0 CONTENTS, RELOC, READONLY
77 EXEMAIN5 00000001 00000000 00000000 00002757 2**0 CONTENTS, READONLY
78 EXEADJUS 00000007 00000000 00000000 00002758 2**0 CONTENTS, READONLY
79 EXENOADJ 00000002 00000000 00000000 0000275f 2**0 CONTENTS, READONLY
80 EXERELO1 0000001e 00000000 00000000 00002761 2**0 CONTENTS, RELOC, READONLY
81 EXEREL9A 00000012 00000000 00000000 0000277f 2**0 CONTENTS, RELOC, READONLY
82 EXERELO2 00000004 00000000 00000000 00002791 2**0 CONTENTS, READONLY
83 EXEREBIG 00000002 00000000 00000000 00002795 2**0 CONTENTS, RELOC, READONLY
84 EXERELO3 00000002 00000000 00000000 00002797 2**0 CONTENTS, RELOC, READONLY
85 EXEMAIN8 00000003 00000000 00000000 00002799 2**0 CONTENTS, READONLY
86 DEVICEEND 00000013 00000000 00000000 0000279c 2**0 CONTENTS, READONLY
87 EXESTACK 00000006 00000000 00000000 000027af 2**0 CONTENTS, RELOC, READONLY
88 EXESTASP 00000003 00000000 00000000 000027b5 2**0 CONTENTS, RELOC, READONLY
89 EXEJUMPF 00000005 00000000 00000000 000027b8 2**0 CONTENTS, RELOC, READONLY
90 EXERCSPO 00000004 00000000 00000000 000027bd 2**0 CONTENTS, RELOC, READONLY
91 EXERETIP 00000006 00000000 00000000 000027c1 2**0 CONTENTS, RELOC, READONLY
SYMBOL TABLE:
00000000 l d DEVICEENTRY
00000000 DEVICEENTRY
00000000 l d COMPRESSED_LZMA_START
00000000 COMPRESSED_LZMA_START
00000000 l d NRV2B160
00000000 NRV2B160
00000000 l d NRVDECO2
00000000 NRVDECO2
00000000 l d CALLTR16
00000000 CALLTR16
00000000 l d CALLTRI5
00000000 CALLTRI5
00000000 l d CALLTRI6
00000000 CALLTRI6
00000000 l d EXEENTRY
00000000 EXEENTRY
00000000 l d NRV2B16S
00000000 NRV2B16S
00000000 l d NRV2BEX2
00000000 NRV2BEX2
00000000 l d NRV2BEX3
00000000 NRV2BEX3
00000000 l d NRV2BEX9
00000000 NRV2BEX9
00000000 l d NRV2D16S
00000000 NRV2D16S
00000000 l d NRV2DEX2
00000000 NRV2DEX2
00000000 l d NRV2DEX3
00000000 NRV2DEX3
00000000 l d NRV2DEX9
00000000 NRV2DEX9
00000000 l d NRV2E16S
00000000 NRV2E16S
00000000 l d NRV2EEX2
00000000 NRV2EEX2
00000000 l d NRV2EEX3
00000000 NRV2EEX3
00000000 l d NRV2EEX9
00000000 NRV2EEX9
00000000 l d LZMA_DEC00
00000000 LZMA_DEC00
00000000 l d LZMA_DEC32
00000000 LZMA_DEC32
00000000 l d EXERELO1
00000000 EXERELO1
00000000 l d EXERELO2
00000000 EXERELO2
00000000 l d LZMADEVICE
00000000 LZMADEVICE
00000000 l d DEVICEENTRY2
00000000 DEVICEENTRY2
00000000 l d LZMAENTRY
00000000 LZMAENTRY
00000000 l d NRVDDONE
00000000 NRVDDONE
00000000 l d NRVDRETU
00000000 NRVDRETU
00000000 l d NRVDECO1
00000000 NRVDECO1
00000000 l d NRVLED00
00000000 NRVLED00
00000000 l d NRVGTD00
00000000 NRVGTD00
00000000 l d CT16I286
00000000 CT16I286
00000000 l d CT16SUB0
00000000 CT16SUB0
00000000 l d CT16I086
00000000 CT16I086
00000000 l d CALLTRI2
00000000 CALLTRI2
00000000 l d CT16E800
00000000 CT16E800
00000000 l d CT16E900
00000000 CT16E900
00000000 l d CT16JEND
00000000 CT16JEND
00000000 l d CT16JUL2
00000000 CT16JUL2
00000000 l d CT16I287
00000000 CT16I287
00000000 l d CT16SUB1
00000000 CT16SUB1
00000000 l d CT16I087
00000000 CT16I087
00000000 l d LONGSUB
00000000 LONGSUB
00000000 l d SHORTSUB
00000000 SHORTSUB
00000000 l d JNCDOCOPY
00000000 JNCDOCOPY
00000000 l d EXERELPU
00000000 EXERELPU
00000000 l d EXEMAIN4
00000000 EXEMAIN4
00000000 l d EXEMAIN4B
00000000 EXEMAIN4B
00000000 l d EXEMAIN4C
00000000 EXEMAIN4C
00000000 l d UPX1HEAD
00000000 UPX1HEAD
00000000 l d EXECUTPO
00000000 EXECUTPO
00000000 l d N2B64K01
00000000 N2B64K01
00000000 l d NRV2BEX1
00000000 NRV2BEX1
00000000 l d N2BX8601
00000000 N2BX8601
00000000 l d N2B28601
00000000 N2B28601
00000000 l d N2BX8602
00000000 N2BX8602
00000000 l d N2B28602
00000000 N2B28602
00000000 l d N2B64K02
00000000 N2B64K02
00000000 l d N2D64K01
00000000 N2D64K01
00000000 l d NRV2DEX1
00000000 NRV2DEX1
00000000 l d N2DX8601
00000000 N2DX8601
00000000 l d N2D28601
00000000 N2D28601
00000000 l d N2DX8602
00000000 N2DX8602
00000000 l d N2D28602
00000000 N2D28602
00000000 l d N2D64K02
00000000 N2D64K02
00000000 l d N2E64K01
00000000 N2E64K01
00000000 l d NRV2EEX1
00000000 NRV2EEX1
00000000 l d N2EX8601
00000000 N2EX8601
00000000 l d N2E28601
00000000 N2E28601
00000000 l d N2EX8602
00000000 N2EX8602
00000000 l d N2E28602
00000000 N2E28602
00000000 l d N2E64K02
00000000 N2E64K02
00000000 l d ignore_reloc_overflow
Antivirus Signature
Bkav Clean
Lionic Clean
tehtris Clean
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
Skyhigh Clean
Malwarebytes Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Cybereason Clean
Baidu Clean
VirIT Clean
Symantec Clean
ESET-NOD32 Clean
APEX Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
F-Secure Clean
BitDefenderTheta Clean
Zillya Clean
TrendMicro Clean
Trapmine Clean
CMC Clean
Sophos Clean
Ikarus Clean
Jiangmin Clean
Webroot Clean
Varist Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Google Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
TACHYON Clean
DeepInstinct Clean
Cylance Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
SentinelOne Clean
MaxSecure Clean
Fortinet Clean
Panda Clean
CrowdStrike Clean
No IRMA results available.