mirror of
https://github.com/rbmm/SC
synced 2026-06-08 17:03:41 +00:00
rbmm
105 lines
6.7 KiB
Plaintext
105 lines
6.7 KiB
Plaintext
Seci
|
|
|
|
Timestamp is 67a527d2 (Thu Feb 6 23:21:22 2025)
|
|
|
|
Preferred load address is 00400000
|
|
|
|
Start Length Name Class
|
|
0001:00000000 000001caH .text$mn CODE
|
|
0001:000001ca 00000396H .text$mn$cpp CODE
|
|
0001:00000560 00000aa0H .text$mn$cpp$s CODE
|
|
0001:00001000 00000100H .text$mn$cpp$u CODE
|
|
0001:00001100 00000000H .text$mn$cpp$v CODE
|
|
0001:00001100 00000006H .text$nm CODE
|
|
0001:00001106 000000d2H .text$zz CODE
|
|
0002:00000000 00000000H .idata$5 DATA
|
|
0002:00000000 000000b0H .rdata DATA
|
|
0002:000000b0 00000000H .edata DATA
|
|
0002:000000b0 00000060H .rdata$zzzdbg DATA
|
|
0002:00000110 00000000H .idata$2 DATA
|
|
0002:00000110 00000000H .idata$3 DATA
|
|
0002:00000110 00000000H .idata$4 DATA
|
|
0002:00000110 00000000H .idata$6 DATA
|
|
0003:00000000 00000000H .data DATA
|
|
0003:00000000 00000008H .bss DATA
|
|
|
|
Address Publics by Value Rva+Base Lib:Object
|
|
|
|
0000:00000000 ___AbsoluteZero 00000000 <absolute>
|
|
0000:00000000 ___arm64x_extra_rfe_table 00000000 <absolute>
|
|
0000:00000000 ___arm64x_extra_rfe_table_size 00000000 <absolute>
|
|
0000:00000000 ___arm64x_native_entrypoint 00000000 <absolute>
|
|
0000:00000000 ___arm64x_redirection_metadata 00000000 <absolute>
|
|
0000:00000000 ___arm64x_redirection_metadata_count 00000000 <absolute>
|
|
0000:00000000 ___dynamic_value_reloc_table 00000000 <absolute>
|
|
0000:00000000 ___enclave_config 00000000 <absolute>
|
|
0000:00000000 ___guard_check_icall_a64n_fptr 00000000 <absolute>
|
|
0000:00000000 ___guard_eh_cont_count 00000000 <absolute>
|
|
0000:00000000 ___guard_eh_cont_table 00000000 <absolute>
|
|
0000:00000000 ___guard_fids_count 00000000 <absolute>
|
|
0000:00000000 ___guard_fids_table 00000000 <absolute>
|
|
0000:00000000 ___guard_flags 00000000 <absolute>
|
|
0000:00000000 ___guard_iat_count 00000000 <absolute>
|
|
0000:00000000 ___guard_iat_table 00000000 <absolute>
|
|
0000:00000000 ___guard_longjmp_count 00000000 <absolute>
|
|
0000:00000000 ___guard_longjmp_table 00000000 <absolute>
|
|
0000:00000000 ___hybrid_auxiliary_delayload_iat 00000000 <absolute>
|
|
0000:00000000 ___hybrid_auxiliary_delayload_iat_copy 00000000 <absolute>
|
|
0000:00000000 ___hybrid_auxiliary_iat 00000000 <absolute>
|
|
0000:00000000 ___hybrid_auxiliary_iat_copy 00000000 <absolute>
|
|
0000:00000000 ___hybrid_code_map 00000000 <absolute>
|
|
0000:00000000 ___hybrid_code_map_count 00000000 <absolute>
|
|
0000:00000000 ___hybrid_image_info_bitfield 00000000 <absolute>
|
|
0000:00000000 ___volatile_metadata 00000000 <absolute>
|
|
0000:00000000 ___x64_code_ranges_to_entry_points 00000000 <absolute>
|
|
0000:00000000 ___x64_code_ranges_to_entry_points_count 00000000 <absolute>
|
|
0000:00000000 ___ImageBase 00400000 <linker-defined>
|
|
0001:00000000 ?epASM@@YGXXZ 00401000 f x86.obj
|
|
0001:00000037 ?__Address@@YIPAXPBX@Z 00401037 f x86.obj
|
|
0001:0000004a __alloca_probe 0040104a f x86.obj
|
|
0001:0000004a __chkstk 0040104a f x86.obj
|
|
0001:000000e2 _VirtualProtect@16 004010e2 f x86.obj
|
|
0001:00000103 _LoadLibraryW@4 00401103 f x86.obj
|
|
0001:00000124 _SeciAllocateAndSetCallFlags@8 00401124 f x86.obj
|
|
0001:00000145 _RtlImageDirectoryEntryToData@16 00401145 f x86.obj
|
|
0001:00000166 _RtlInitUnicodeString@8 00401166 f x86.obj
|
|
0001:00000187 _LdrLoadDll@16 00401187 f x86.obj
|
|
0001:000001a8 _LdrGetProcedureAddress@16 004011a8 f x86.obj
|
|
0001:000001ca ?MySeciAllocateAndSetCallFlags@@YGJKPAH@Z 004011ca f ep.obj
|
|
0001:000001f2 ?OnApc@@YGXKKPAX@Z 004011f2 f ep.obj
|
|
0001:00000361 ?GetNtBase@@YGPAXXZ 00401361 f ScEntry:GetFuncAddr.obj
|
|
0001:00000374 ?get_hmod@@YIPAXPB_W@Z 00401374 f ScEntry:GetFuncAddr.obj
|
|
0001:000003be ?GetFuncAddressEx@@YIPAXPAU_IMAGE_DOS_HEADER@@PBD@Z 004013be f ScEntry:GetFuncAddr.obj
|
|
0001:00000560 ??_C@_1BI@LOPIEHPM@?$AAU?$AAS?$AAE?$AAR?$AAM?$AAG?$AAR?$AA?4?$AAD?$AAL?$AAL@FNODOBFM@ 00401560 ep.obj
|
|
0001:00001100 ?sc_end@@YGPAXXZ 00402100 f ScEntry:prepare.obj
|
|
0001:00001106 ?ScEntry@@YGXPAU_PEB@@@Z 00402106 f ScEntry:prepare.obj
|
|
0002:00000000 ??_C@_0BF@EKFKPNAI@RtlInitUnicodeString@ 00403000 ScEntry:prepare.obj
|
|
0002:00000018 ??_C@_1BI@NEOFKCPM@?$AAp?$AAr?$AAe?$AAp?$AAa?$AAr?$AAe?$AA?4?$AAd?$AAl?$AAl@ 00403018 ScEntry:prepare.obj
|
|
0002:00000030 ??_C@_0L@HOFGLFDL@LdrLoadDll@ 00403030 ScEntry:prepare.obj
|
|
0002:0000003c ??_C@_0BH@GKPJJDBO@LdrGetProcedureAddress@ 0040303c ScEntry:prepare.obj
|
|
0002:00000054 ??_C@_0N@FIGJGHFN@LdrUnloadDll@ 00403054 ScEntry:prepare.obj
|
|
0002:00000064 ??_C@_0BD@JDDPIELM@RtlExitUserProcess@ 00403064 ScEntry:prepare.obj
|
|
0003:00000000 ___@@_PchSym_@00@UfhvihUsziibUwlxfnvmghUtrgsfyUhxUgnkUdrmDCUivovzhvUhvxrUhgwzucOlyq@4B2008FD98C1DD4 00404000 stdafx.obj
|
|
0003:00000004 ___@@_PchSym_@00@UfhvihUsziibUwlxfnvmghUtrgsfyUhxUgnkUdrmDCUivovzhvUhxvmgibUhgwzucOlyq@4B2008FD98C1DD4 00404004 ScEntry:stdafx.obj
|
|
|
|
entry point at 0001:00001106
|
|
|
|
Static symbols
|
|
|
|
0000:ffffa000 .debug$S 00400000 ntdllp:ntdll.dll
|
|
0000:ffffa000 .debug$S 00400000 ntdllp:ntdll.dll
|
|
0002:ffffd000 .idata$6 00400000 ntdllp:ntdll.dll
|
|
0001:0000000a common_imp_call 0040100a f x86.obj
|
|
0001:00000075 protect 00401075 f x86.obj
|
|
0001:00001000 ?_VirtualProtect@16 00402000 x86.obj
|
|
0001:00001000 @imp_begin@ 00402000 x86.obj
|
|
0001:00001014 ?_LoadLibraryW@4 00402014 x86.obj
|
|
0001:00001028 @kernel32 00402028 x86.obj
|
|
0001:00001048 ?_SeciAllocateAndSetCallFlags@8 00402048 x86.obj
|
|
0001:00001068 @secur32 00402068 x86.obj
|
|
0001:00001084 ?_RtlImageDirectoryEntryToData@16 00402084 x86.obj
|
|
0001:000010a8 ?_RtlInitUnicodeString@8 004020a8 x86.obj
|
|
0001:000010c4 ?_LdrLoadDll@16 004020c4 x86.obj
|
|
0001:000010d4 ?_LdrGetProcedureAddress@16 004020d4 x86.obj
|
|
0001:000010f0 @ntdllp 004020f0 x86.obj
|