1
0
mirror of https://github.com/rbmm/SC synced 2026-06-08 17:03:41 +00:00
Files
rbmm 97e37278db *
2025-12-12 12:25:34 +02:00

147 lines
9.9 KiB
Plaintext

hello
Timestamp is 693beb76 (Fri Dec 12 12:16:22 2025)
Preferred load address is 00400000
Start Length Name Class
0001:00000000 0000039cH .text$mn CODE
0001:0000039c 000003c0H .text$mn$cpp CODE
0001:0000075c 00000024H .text$mn$cpp$r CODE
0001:00000780 00000880H .text$mn$cpp$s CODE
0001:00001000 00000210H .text$mn$cpp$u CODE
0001:00001210 00000000H .text$mn$cpp$v CODE
0001:00001210 00000006H .text$nm CODE
0001:00001216 000000cdH .text$zz CODE
0002:00000000 00000000H .idata$5 DATA
0002:00000000 000000b0H .rdata DATA
0002:000000b0 00000000H .edata DATA
0002:000000b0 00000064H .rdata$zzzdbg DATA
0002:00000114 00000000H .idata$2 DATA
0002:00000114 00000000H .idata$3 DATA
0002:00000114 00000000H .idata$4 DATA
0002:00000114 00000000H .idata$6 DATA
0003:00000000 00000000H .data DATA
0003:00000000 00000008H .bss DATA
Address Publics by Value Rva+Base Lib:Object
0000:00000000 ___AbsoluteZero 00000000 <absolute>
0000:00000000 ___arm64x_extra_rfe_table 00000000 <absolute>
0000:00000000 ___arm64x_extra_rfe_table_size 00000000 <absolute>
0000:00000000 ___arm64x_native_entrypoint 00000000 <absolute>
0000:00000000 ___arm64x_redirection_metadata 00000000 <absolute>
0000:00000000 ___arm64x_redirection_metadata_count 00000000 <absolute>
0000:00000000 ___dynamic_value_reloc_table 00000000 <absolute>
0000:00000000 ___enclave_config 00000000 <absolute>
0000:00000000 ___guard_check_icall_a64n_fptr 00000000 <absolute>
0000:00000000 ___guard_eh_cont_count 00000000 <absolute>
0000:00000000 ___guard_eh_cont_table 00000000 <absolute>
0000:00000000 ___guard_fids_count 00000000 <absolute>
0000:00000000 ___guard_fids_table 00000000 <absolute>
0000:00000000 ___guard_flags 00000000 <absolute>
0000:00000000 ___guard_iat_count 00000000 <absolute>
0000:00000000 ___guard_iat_table 00000000 <absolute>
0000:00000000 ___guard_longjmp_count 00000000 <absolute>
0000:00000000 ___guard_longjmp_table 00000000 <absolute>
0000:00000000 ___hybrid_auxiliary_delayload_iat 00000000 <absolute>
0000:00000000 ___hybrid_auxiliary_delayload_iat_copy 00000000 <absolute>
0000:00000000 ___hybrid_auxiliary_iat 00000000 <absolute>
0000:00000000 ___hybrid_auxiliary_iat_copy 00000000 <absolute>
0000:00000000 ___hybrid_code_map 00000000 <absolute>
0000:00000000 ___hybrid_code_map_count 00000000 <absolute>
0000:00000000 ___hybrid_image_info_bitfield 00000000 <absolute>
0000:00000000 ___volatile_metadata 00000000 <absolute>
0000:00000000 ___x64_code_ranges_to_entry_points 00000000 <absolute>
0000:00000000 ___x64_code_ranges_to_entry_points_count 00000000 <absolute>
0000:00000000 ___ImageBase 00400000 <linker-defined>
0001:00000000 ?epASM@@YGXXZ 00401000 f x86.obj
0001:00000037 ?__Address@@YIPAXPBX@Z 00401037 f x86.obj
0001:0000004a __alloca_probe 0040104a f x86.obj
0001:0000004a __chkstk 0040104a f x86.obj
0001:000000e2 @DnsMapRcodeToStatus@4 004010e2 f x86.obj
0001:00000103 @DnsStatusString@4 00401103 f x86.obj
0001:00000124 _FormatMessageW@28 00401124 f x86.obj
0001:00000145 _IsProcessCritical@8 00401145 f x86.obj
0001:00000166 _GetTickCount@0 00401166 f x86.obj
0001:00000187 _ExitProcess@4 00401187 f x86.obj
0001:000001a8 ?GetMartaExtensionInterface@@YGPAU_ACC_MARTA_FUNCTIONS@@XZ 004011a8 f x86.obj
0001:000001c9 _MessageBoxW@16 004011c9 f x86.obj
0001:000001ea __vsnwprintf 004011ea f x86.obj
0001:0000020b _DbgPrint 0040120b f x86.obj
0001:0000022c _RtlDispatchAPC@12 0040122c f x86.obj
0001:0000024d _LdrGetProcedureAddress@16 0040124d f x86.obj
0001:0000026e _LdrLoadDll@16 0040126e f x86.obj
0001:0000028f _RtlInitUnicodeString@8 0040128f f x86.obj
0001:000002b0 _CoCreateInstance@20 004012b0 f x86.obj
0001:000002d1 _CoInitializeEx@8 004012d1 f x86.obj
0001:000002f2 _CoTaskMemFree@4 004012f2 f x86.obj
0001:00000313 _CoUninitialize@0 00401313 f x86.obj
0001:00000340 ?istrlen@@YIKPBD@Z 00401340 f ScEntry:x86.obj
0001:00000355 ?istrcmp@@YIDPBD0@Z 00401355 f ScEntry:x86.obj
0001:00000370 __alloca_probe_16 00401370 f ntdllp:alloca16.obj
0001:00000386 __alloca_probe_8 00401386 ntdllp:alloca16.obj
0001:0000039c ?MsgBox@@YAHIPB_W0ZZ 0040139c f ep.obj
0001:000003ee ?ApcTest@@YGXK@Z 004013ee f ep.obj
0001:00000446 ?ComTest@@YGXXZ 00401446 f ep.obj
0001:00000558 ?ep@@YGXXZ 00401558 f ep.obj
0001:000005e3 ?GetNtBase@@YGPAXXZ 004015e3 f ScEntry:GetFuncAddr.obj
0001:000005f6 ?get_hmod@@YIPAXPB_W@Z 004015f6 f ScEntry:GetFuncAddr.obj
0001:00000640 ?GetFuncAddressEx@@YIPAXPAU_IMAGE_DOS_HEADER@@PBD@Z 00401640 f ScEntry:GetFuncAddr.obj
0001:0000075c __GUID_dc1c5a9c_e88a_4dde_a5a1_60f82a20aef7 0040175c ep.obj
0001:0000076c __GUID_d57c7288_d4ad_4768_be02_9d969532d960 0040176c ep.obj
0001:00000780 ??_C@_0O@HELLMLPH@ApcTest?$CI?$CFp?$CJ?$AN?6@FNODOBFM@ 00401780 ep.obj
0001:00000790 ??_C@_1CC@NKINBMBG@?$AA?$CF?$AAh?$AAs?$AA?$AN?$AA?6?$AAe?$AAn?$AAt?$AAr?$AAy?$AA?5?$AAa?$AAt?$AA?5?$AA?$CF@FNODOBFM@ 00401790 ep.obj
0001:000007c0 ??_C@_1M@BOLMKKCK@?$AAH?$AAe?$AAl?$AAl?$AAo@FNODOBFM@ 004017c0 ep.obj
0001:000007d0 ??_C@_17NCBHHMJ@?$AAC?$AAo?$AAm@FNODOBFM@ 004017d0 ep.obj
0001:000007e0 ??_C@_17LIFEJMDK@?$AAP?$AAO?$AAC@FNODOBFM@ 004017e0 ep.obj
0001:000007f0 ??_C@_19JKOIKNAD@?$AAD?$AAE?$AAM?$AAO@FNODOBFM@ 004017f0 ep.obj
0001:00000800 ??_C@_1BI@NOFJEJPO@?$AAt?$AAa?$AAb?$AAl?$AAe?$AA?5?$AAa?$AAt?$AA?5?$AA?$CF?$AAp@FNODOBFM@ 00401800 ep.obj
0001:00000820 ??_C@_1O@ONGICPAA@?$AAM?$AAa?$AAr?$AAt?$AAa?$AA?3@FNODOBFM@ 00401820 ep.obj
0001:00001210 ?sc_end@@YGPAXXZ 00402210 f ScEntry:prepare.obj
0001:00001216 ?ScEntry@@YGXPAU_PEB@@@Z 00402216 f ScEntry:prepare.obj
0002:00000000 ??_C@_0BF@EKFKPNAI@RtlInitUnicodeString@ 00403000 ScEntry:prepare.obj
0002:00000018 ??_C@_1BI@NEOFKCPM@?$AAp?$AAr?$AAe?$AAp?$AAa?$AAr?$AAe?$AA?4?$AAd?$AAl?$AAl@ 00403018 ScEntry:prepare.obj
0002:00000030 ??_C@_0L@HOFGLFDL@LdrLoadDll@ 00403030 ScEntry:prepare.obj
0002:0000003c ??_C@_0BH@GKPJJDBO@LdrGetProcedureAddress@ 0040303c ScEntry:prepare.obj
0002:00000054 ??_C@_0N@FIGJGHFN@LdrUnloadDll@ 00403054 ScEntry:prepare.obj
0002:00000064 ??_C@_0BD@JDDPIELM@RtlExitUserProcess@ 00403064 ScEntry:prepare.obj
0003:00000000 ___@@_PchSym_@00@UfhvihUsziibUwlxfnvmghUtrgsfyUhxUgnkUdrmDCUivovzhvUsvoolUhgwzucOlyq@4B2008FD98C1DD4 00404000 stdafx.obj
0003:00000004 ___@@_PchSym_@00@UfhvihUsziibUwlxfnvmghUtrgsfyUhxUgnkUdrmDCUivovzhvUhxvmgibUhgwzucOlyq@4B2008FD98C1DD4 00404004 ScEntry:stdafx.obj
entry point at 0001:00001216
Static symbols
0000:ffffa000 .debug$S 00400000 ntdllp:ntdll.dll
0000:ffffa000 .debug$S 00400000 ntdllp:ntdll.dll
0002:ffffd000 .idata$6 00400000 ntdllp:ntdll.dll
0001:0000000a common_imp_call 0040100a f x86.obj
0001:00000075 protect 00401075 f x86.obj
0001:00000370 $$000000 00401370 ntdllp:alloca16.obj
0001:00001000 ?@DnsMapRcodeToStatus@4 00402000 x86.obj
0001:00001000 @imp_begin@ 00402000 x86.obj
0001:00001018 ?@DnsStatusString@4 00402018 x86.obj
0001:0000102c @dnsapi 0040202c x86.obj
0001:00001048 ?_FormatMessageW@28 00402048 x86.obj
0001:0000105c ?_IsProcessCritical@8 0040205c x86.obj
0001:00001074 ?_GetTickCount@0 00402074 x86.obj
0001:00001088 ?_ExitProcess@4 00402088 x86.obj
0001:00001098 @kernel32 00402098 x86.obj
0001:000010b8 ??GetMartaExtensionInterface@@YGPAU_ACC_MARTA_FUNCTIONS@@XZ 004020b8 x86.obj
0001:000010d8 @ntmarta 004020d8 x86.obj
0001:000010f4 ?_MessageBoxW@16 004020f4 x86.obj
0001:00001104 @user32 00402104 x86.obj
0001:00001120 ?__vsnwprintf 00402120 x86.obj
0001:00001130 ?_DbgPrint 00402130 x86.obj
0001:00001140 ?_RtlDispatchAPC@12 00402140 x86.obj
0001:00001148 ?_LdrGetProcedureAddress@16 00402148 x86.obj
0001:00001164 ?_LdrLoadDll@16 00402164 x86.obj
0001:00001174 ?_RtlInitUnicodeString@8 00402174 x86.obj
0001:00001190 @ntdllp 00402190 x86.obj
0001:00001198 ?_CoCreateInstance@20 00402198 x86.obj
0001:000011b0 ?_CoInitializeEx@8 004021b0 x86.obj
0001:000011c4 ?_CoTaskMemFree@4 004021c4 x86.obj
0001:000011d8 ?_CoUninitialize@0 004021d8 x86.obj
0001:000011ec @ole32 004021ec x86.obj