jpg Timestamp is 615c0f47 (Tue Oct 05 16:39:35 2021) Preferred load address is 10000000 Start Length Name Class 0001:00000000 000015c4H .text CODE 0001:000015d0 000000baH .text$x CODE 0002:00000000 00000080H .idata$5 DATA 0002:00000080 00000098H .rdata DATA 0002:00000118 00000044H .rdata$r DATA 0002:0000015c 00000b54H .xdata$x DATA 0002:00000cb0 0000003cH .idata$2 DATA 0002:00000cec 00000014H .idata$3 DATA 0002:00000d00 00000080H .idata$4 DATA 0002:00000d80 00000184H .idata$6 DATA 0002:00000f10 00000042H .edata DATA 0003:00000000 00000004H .CRT$XCA DATA 0003:00000004 00000004H .CRT$XCZ DATA 0003:00000008 00000004H .CRT$XIA DATA 0003:0000000c 00000004H .CRT$XIZ DATA 0003:00000010 0000d3a0H .data DATA 0003:0000d3b0 00000048H .bss DATA Address Publics by Value Rva+Base Lib:Object 0001:00000000 _ExtRawDllMain@12 10001000 f jpg.obj 0001:00000030 ?DllMainSaveFile@@YA_NPAD@Z 10001030 f jpg.obj 0001:00000080 ?upcaseA@@YIDD@Z 10001080 f jpg.obj 0001:00000090 ?strcmpiA@@YIHPBD0@Z 10001090 f jpg.obj 0001:000001c0 ?myfree@@YAXPAX@Z 100011c0 f jpg.obj 0001:000002f0 ?myrealloc@@YAPAXPAXI@Z 100012f0 f jpg.obj 0001:00000390 ?bbssss_gwegd4524_lfgdsdfsfhg_aaaaaa@@YAXPAX@Z 10001390 f jpg.obj 0001:00000500 ?TTTTT_PPPPP_XSDSF45345@@YAP6GHXZPAXPBD@Z 10001500 f jpg.obj 0001:000006a0 ?BBB__SADBGJY__DSFGHFHDKASQW@@YAPAXPBX@Z 100016a0 f jpg.obj 0001:00001150 ?spacedecryption@@YAXPADH0@Z 10002150 f jpg.obj 0001:00001200 ?AAA___JKASDANS____JOSDAS__HJGD@@YAXPBD@Z 10002200 f jpg.obj 0001:00001300 _Shellex 10002300 f jpg.obj 0001:00001310 _DllMain@12 10002310 f jpg.obj 0001:00001370 ?AfxGetModuleState@@YGPAVAFX_MODULE_STATE@@XZ 10002370 f mfc42:MFC42.DLL 0001:00001376 ?AfxTermExtensionModule@@YGXAAUAFX_EXTENSION_MODULE@@H@Z 10002376 f mfc42:MFC42.DLL 0001:0000137c ??0CDynLinkLibrary@@QAE@AAUAFX_EXTENSION_MODULE@@H@Z 1000237c f mfc42:MFC42.DLL 0001:00001382 ??2@YAPAXI@Z 10002382 f mfc42:MFC42.DLL 0001:00001388 ?AfxInitExtensionModule@@YGHAAUAFX_EXTENSION_MODULE@@PAUHINSTANCE__@@@Z 10002388 f mfc42:MFC42.DLL 0001:0000138e ??0type_info@@AAE@ABV0@@Z 1000238e f msvcrt:ti_inst.obj 0001:00001399 ??_Gtype_info@@UAEPAXI@Z 10002399 f i msvcrt:ti_inst.obj 0001:00001399 ??_Etype_info@@UAEPAXI@Z 10002399 f i msvcrt:ti_inst.obj 0001:000013b5 ??4type_info@@AAEAAV0@ABV0@@Z 100023b5 f msvcrt:ti_inst.obj 0001:000013ba ___CxxFrameHandler 100023ba f msvcrt:MSVCRT.dll 0001:000013c0 __CxxThrowException@8 100023c0 f msvcrt:MSVCRT.dll 0001:000013c6 __CRT_INIT@12 100023c6 f msvcrt:crtdll.obj 0001:00001471 __DllMainCRTStartup@12 10002471 f msvcrt:crtdll.obj 0001:0000150e ??3@YAXPAX@Z 1000250e f msvcrt:MSVCRT.dll 0001:00001514 ??1type_info@@UAE@XZ 10002514 f msvcrt:MSVCRT.dll 0001:0000151a _free 1000251a f msvcrt:MSVCRT.dll 0001:00001520 __initterm 10002520 f msvcrt:MSVCRT.dll 0001:00001526 __onexit 10002526 f msvcrt:atonexit.obj 0001:00001552 _atexit 10002552 f msvcrt:atonexit.obj 0001:00001564 _malloc 10002564 f msvcrt:MSVCRT.dll 0001:0000156a ___dllonexit 1000256a f msvcrt:MSVCRT.dll 0001:00001570 _CloseHandle@4 10002570 f kernel32:KERNEL32.dll 0001:00001576 _WriteFile@20 10002576 f kernel32:KERNEL32.dll 0001:0000157c _CreateFileA@28 1000257c f kernel32:KERNEL32.dll 0001:00001582 _GetProcessHeap@0 10002582 f kernel32:KERNEL32.dll 0001:00001588 _GetProcAddress@8 10002588 f kernel32:KERNEL32.dll 0001:0000158e _LoadLibraryA@4 1000258e f kernel32:KERNEL32.dll 0001:00001594 _HeapAlloc@12 10002594 f kernel32:KERNEL32.dll 0001:0000159a _HeapReAlloc@16 1000259a f kernel32:KERNEL32.dll 0001:000015a0 _VirtualFree@12 100025a0 f kernel32:KERNEL32.dll 0001:000015a6 _FreeLibrary@4 100025a6 f kernel32:KERNEL32.dll 0001:000015ac _VirtualAlloc@16 100025ac f kernel32:KERNEL32.dll 0001:000015b2 _IsBadReadPtr@8 100025b2 f kernel32:KERNEL32.dll 0001:000015b8 _Sleep@4 100025b8 f kernel32:KERNEL32.dll 0001:000015be _ExitProcess@4 100025be f kernel32:KERNEL32.dll 0002:00000000 __imp__CreateFileA@28 10003000 kernel32:KERNEL32.dll 0002:00000004 __imp__WriteFile@20 10003004 kernel32:KERNEL32.dll 0002:00000008 __imp__CloseHandle@4 10003008 kernel32:KERNEL32.dll 0002:0000000c __imp__GetProcAddress@8 1000300c kernel32:KERNEL32.dll 0002:00000010 __imp__LoadLibraryA@4 10003010 kernel32:KERNEL32.dll 0002:00000014 __imp__ExitProcess@4 10003014 kernel32:KERNEL32.dll 0002:00000018 __imp__Sleep@4 10003018 kernel32:KERNEL32.dll 0002:0000001c __imp__IsBadReadPtr@8 1000301c kernel32:KERNEL32.dll 0002:00000020 __imp__VirtualAlloc@16 10003020 kernel32:KERNEL32.dll 0002:00000024 __imp__FreeLibrary@4 10003024 kernel32:KERNEL32.dll 0002:00000028 __imp__VirtualFree@12 10003028 kernel32:KERNEL32.dll 0002:0000002c __imp__HeapReAlloc@16 1000302c kernel32:KERNEL32.dll 0002:00000030 __imp__HeapAlloc@12 10003030 kernel32:KERNEL32.dll 0002:00000034 __imp__GetProcessHeap@0 10003034 kernel32:KERNEL32.dll 0002:00000038 \177KERNEL32_NULL_THUNK_DATA 10003038 kernel32:KERNEL32.dll 0002:0000003c __imp_?AfxGetModuleState@@YGPAVAFX_MODULE_STATE@@XZ 1000303c mfc42:MFC42.DLL 0002:00000040 __imp_??2@YAPAXI@Z 10003040 mfc42:MFC42.DLL 0002:00000044 __imp_??0CDynLinkLibrary@@QAE@AAUAFX_EXTENSION_MODULE@@H@Z 10003044 mfc42:MFC42.DLL 0002:00000048 __imp_?AfxTermExtensionModule@@YGXAAUAFX_EXTENSION_MODULE@@H@Z 10003048 mfc42:MFC42.DLL 0002:0000004c __imp_?AfxInitExtensionModule@@YGHAAUAFX_EXTENSION_MODULE@@PAUHINSTANCE__@@@Z 1000304c mfc42:MFC42.DLL 0002:00000050 \177MFC42_NULL_THUNK_DATA 10003050 mfc42:MFC42.DLL 0002:00000054 __imp____dllonexit 10003054 msvcrt:MSVCRT.dll 0002:00000058 __imp___adjust_fdiv 10003058 msvcrt:MSVCRT.dll 0002:0000005c __imp__malloc 1000305c msvcrt:MSVCRT.dll 0002:00000060 __imp___initterm 10003060 msvcrt:MSVCRT.dll 0002:00000064 __imp__free 10003064 msvcrt:MSVCRT.dll 0002:00000068 __imp_??1type_info@@UAE@XZ 10003068 msvcrt:MSVCRT.dll 0002:0000006c __imp_??3@YAXPAX@Z 1000306c msvcrt:MSVCRT.dll 0002:00000070 __imp___CxxThrowException@8 10003070 msvcrt:MSVCRT.dll 0002:00000074 __imp____CxxFrameHandler 10003074 msvcrt:MSVCRT.dll 0002:00000078 __imp___onexit 10003078 msvcrt:MSVCRT.dll 0002:0000007c \177MSVCRT_NULL_THUNK_DATA 1000307c msvcrt:MSVCRT.dll 0002:000000a0 _IID_IDocHostUIHandlerDispatch 100030a0 mfcs42:stdafx.obj 0002:000000b0 _IID_IInternalConnection 100030b0 mfcs42:stdafx.obj 0002:000000c0 _IID_IAxWinAmbientDispatch 100030c0 mfcs42:stdafx.obj 0002:000000d0 _IID_IAxWinHostWindow 100030d0 mfcs42:stdafx.obj 0002:000000e0 _IID_IRegistrar 100030e0 mfcs42:stdafx.obj 0002:000000f0 _CLSID_Registrar 100030f0 mfcs42:stdafx.obj 0002:00000100 _LIBID_ATLLib 10003100 mfcs42:stdafx.obj 0002:00000114 ??_7type_info@@6B@ 10003114 msvcrt:ti_inst.obj 0002:00000118 ??_R1A@?0A@A@type_info@@8 10003118 msvcrt:ti_inst.obj 0002:00000130 ??_R2type_info@@8 10003130 msvcrt:ti_inst.obj 0002:00000138 ??_R3type_info@@8 10003138 msvcrt:ti_inst.obj 0002:00000148 ??_R4type_info@@6B@ 10003148 msvcrt:ti_inst.obj 0002:0000015c __CT??_R0H@84 1000315c jpg.obj 0002:00000178 __CTA1H 10003178 jpg.obj 0002:00000180 __TI1H 10003180 jpg.obj 0002:00000cb0 __IMPORT_DESCRIPTOR_MFC42 10003cb0 mfc42:MFC42.DLL 0002:00000cc4 __IMPORT_DESCRIPTOR_MSVCRT 10003cc4 msvcrt:MSVCRT.dll 0002:00000cd8 __IMPORT_DESCRIPTOR_KERNEL32 10003cd8 kernel32:KERNEL32.dll 0002:00000cec __NULL_IMPORT_DESCRIPTOR 10003cec mfc42:MFC42.DLL 0003:00000000 ___xc_a 10004000 msvcrt:cinitexe.obj 0003:00000004 ___xc_z 10004004 msvcrt:cinitexe.obj 0003:00000008 ___xi_a 10004008 msvcrt:cinitexe.obj 0003:0000000c ___xi_z 1000400c msvcrt:cinitexe.obj 0003:00000010 __pRawDllMain 10004010 jpg.obj 0003:00000018 ?DllMainMyFileBuf@@3PAEA 10004018 jpg.obj 0003:0000d018 ?shellex@@3PADA 10011018 jpg.obj 0003:0000d040 ?dll_info@@3UDLL_INFO@@A 10011040 jpg.obj 0003:0000d32c ?MyFileTabLe@@3PAEA 1001132c jpg.obj 0003:0000d334 ??_R0H@8 10011334 jpg.obj 0003:0000d340 ??_C@_0N@IDOE@kernel32?4dll?$AA@ 10011340 jpg.obj 0003:0000d350 ??_C@_08OCIF@HeapFree?$AA@ 10011350 jpg.obj 0003:0000d35c ??_C@_0N@JGH@KERNEL32?4dll?$AA@ 1001135c jpg.obj 0003:0000d36c ??_C@_0P@KCCK@VirtualProtect?$AA@ 1001136c jpg.obj 0003:0000d37c ??_C@_0M@JIPL@VirtualFree?$AA@ 1001137c jpg.obj 0003:0000d388 ?GUID_ATLVer30@ATL@@3U_GUID@@A 10011388 mfcs42:stdafx.obj 0003:0000d398 ??_R0?AVtype_info@@@8 10011398 msvcrt:ti_inst.obj 0003:0000d3b0 __afxForceEXTDLL 100113b0 jpg.obj 0003:0000d3c8 __afxForceEXCLUDE 100113c8 mfcs42:nolib.obj 0003:0000d3cc ?ATL_CREATE_OBJECT@CComApartment@ATL@@2IA 100113cc mfcs42:stdafx.obj 0003:0000d3d0 ?m_libid@CComModule@ATL@@2U_GUID@@A 100113d0 mfcs42:stdafx.obj 0003:0000d3e0 ?_pModule@ATL@@3PAVCComModule@1@A 100113e0 mfcs42:stdafx.obj 0003:0000d3e4 __afxForceSTDAFX 100113e4 mfcs42:stdafx.obj 0003:0000d3ec __adjust_fdiv 100113ec 0003:0000d3f0 ___onexitend 100113f0 0003:0000d3f4 ___onexitbegin 100113f4 entry point at 0001:00001471 Static symbols 0001:00000a90 ?CopySections@@YAXPBEPAU_IMAGE_NT_HEADERS@@PAUMEMORYMODULE@@@Z 10001a90 f jpg.obj 0001:00000c20 ?FinalizeSections@@YAXPAUMEMORYMODULE@@@Z 10001c20 f jpg.obj 0001:00000de0 ?BuildImportTable@@YAHPAUMEMORYMODULE@@@Z 10001de0 f jpg.obj 0001:00001040 ?PerformBaseRelocation@@YAXPAUMEMORYMODULE@@K@Z 10002040 f jpg.obj