prot.map

一个简单的软件加壳程序

 prot

 Timestamp is 421aef9f (Tue Feb 22 16:38:55 2005)

 Preferred load address is 00400000

 Start         Length     Name                   Class
 0001:00000000 00003d92H .text                   CODE
 0002:00000000 000000c8H .idata$5                DATA
 0002:000000c8 00000078H .idata$2                DATA
 0002:00000140 00000014H .idata$3                DATA
 0002:00000154 000000c8H .idata$4                DATA
 0002:0000021c 00000324H .idata$6                DATA
 0002:00000540 00000000H .edata                  DATA
 0003:00000000 000004dcH .data                   DATA
 0003:000004e0 00000818H .bss                    DATA
 0004:00000000 0000027cH .rsrc$01                DATA
 0004:00000280 00013680H .rsrc$02                DATA

  Address         Publics by Value              Rva+Base     Lib:Object

 0001:0000061c       _start                     0040161c f   prot.obj
 0001:00000676       _DlgProc@16                00401676 f   prot.obj
 0001:0000087b       _ChildDlgProc1@16          0040187b f   prot.obj
 0001:000009c3       _ChildDlgProc2@16          004019c3 f   prot.obj
 0001:00000e61       _ChildDlgProc3@16          00401e61 f   prot.obj
 0001:000011ef       _FileIsExe@0               004021ef f   prot.obj
 0001:00001364       _ProtTheFile@0             00402364 f   prot.obj
 0001:000018fc       _CreateBakFile@4           004028fc f   prot.obj
 0001:00001952       _ProtCode@0                00402952 f   prot.obj
 0001:00001a4c       _MoveImpTable@0            00402a4c f   prot.obj
 0001:00001ae9       _ClsImpTable@0             00402ae9 f   prot.obj
 0001:00001b6a       _MoveRes@12                00402b6a f   prot.obj
 0001:00001c0f       _MergeSection@0            00402c0f f   prot.obj
 0001:00001c84       _PackFile@0                00402c84 f   prot.obj
 0001:00001f4a       _DisposeShell@0            00402f4a f   prot.obj
 0001:000022a6       _ClsSectionName@0          004032a6 f   prot.obj
 0001:000022c9       _ClsRelocation@0           004032c9 f   prot.obj
 0001:00002352       _SaveTheSet@0              00403352 f   prot.obj
 0001:0000251a       _MakeFunkCode@4            0040351a f   prot.obj
 0001:00002603       _FindFirstResADDR@0        00403603 f   prot.obj
 0001:00002699       _MoveString@8              00403699 f   prot.obj
 0001:000026c1       _ClsString@4               004036c1 f   prot.obj
 0001:000026eb       _GetIntegral@8             004036eb f   prot.obj
 0001:0000270a       _AddLine@4                 0040370a f   prot.obj
 0001:000027a4       _CloseHandle@4             004037a4 f   kernel32:kernel32.dll
 0001:000027aa       _CopyFileA@12              004037aa f   kernel32:kernel32.dll
 0001:000027b0       _CreateFileA@28            004037b0 f   kernel32:kernel32.dll
 0001:000027b6       _ExitProcess@4             004037b6 f   kernel32:kernel32.dll
 0001:000027bc       _GetFileSize@8             004037bc f   kernel32:kernel32.dll
 0001:000027c2       _GetModuleHandleA@4        004037c2 f   kernel32:kernel32.dll
 0001:000027c8       _GetPrivateProfileIntA@16  004037c8 f   kernel32:kernel32.dll
 0001:000027ce       _ReadFile@20               004037ce f   kernel32:kernel32.dll
 0001:000027d4       _RtlZeroMemory@8           004037d4 f   kernel32:kernel32.dll
 0001:000027da       _SetFilePointer@16         004037da f   kernel32:kernel32.dll
 0001:000027e0       _VirtualAlloc@16           004037e0 f   kernel32:kernel32.dll
 0001:000027e6       _VirtualFree@12            004037e6 f   kernel32:kernel32.dll
 0001:000027ec       _WriteFile@20              004037ec f   kernel32:kernel32.dll
 0001:000027f2       _WritePrivateProfileStringA@16 004037f2 f   kernel32:kernel32.dll
 0001:000027f8       _BeginPaint@8              004037f8 f   user32:user32.dll
 0001:000027fe       _CheckDlgButton@12         004037fe f   user32:user32.dll
 0001:00002804       _CreateDialogParamA@20     00403804 f   user32:user32.dll
 0001:0000280a       _DialogBoxParamA@20        0040380a f   user32:user32.dll
 0001:00002810       _EnableWindow@8            00403810 f   user32:user32.dll
 0001:00002816       _EndPaint@8                00403816 f   user32:user32.dll
 0001:0000281c       _FillRect@12               0040381c f   user32:user32.dll
 0001:00002822       _GetDC@4                   00403822 f   user32:user32.dll
 0001:00002828       _GetDlgItem@8              00403828 f   user32:user32.dll
 0001:0000282e       _LoadBitmapA@8             0040382e f   user32:user32.dll
 0001:00002834       _PostQuitMessage@4         00403834 f   user32:user32.dll
 0001:0000283a       _ReleaseDC@8               0040383a f   user32:user32.dll
 0001:00002840       _SendDlgItemMessageA@20    00403840 f   user32:user32.dll
 0001:00002846       _SendMessageA@16           00403846 f   user32:user32.dll
 0001:0000284c       _SetDlgItemTextA@12        0040384c f   user32:user32.dll
 0001:00002852       _SetTimer@16               00403852 f   user32:user32.dll
 0001:00002858       _ShowWindow@8              00403858 f   user32:user32.dll
 0001:0000285e       _InitCommonControls@0      0040385e f   comctl32:comctl32.dll
 0001:00002864       _GetOpenFileNameA@4        00403864 f   comdlg32:comdlg32.dll
 0001:0000286a       _BitBlt@36                 0040386a f   gdi32:gdi32.dll
 0001:00002870       _CreateCompatibleBitmap@12 00403870 f   gdi32:gdi32.dll
 0001:00002876       _CreateCompatibleDC@4      00403876 f   gdi32:gdi32.dll
 0001:0000287c       _CreateFontIndirectA@4     0040387c f   gdi32:gdi32.dll
 0001:00002882       _CreateSolidBrush@4        00403882 f   gdi32:gdi32.dll
 0001:00002888       _GetTextExtentPoint32A@16  00403888 f   gdi32:gdi32.dll
 0001:0000288e       _SelectObject@8            0040388e f   gdi32:gdi32.dll
 0001:00002894       _SetBkMode@8               00403894 f   gdi32:gdi32.dll
 0001:0000289a       _SetTextColor@8            0040389a f   gdi32:gdi32.dll
 0001:000028a0       _TextOutA@20               004038a0 f   gdi32:gdi32.dll
 0001:000028a6       _ShellExecuteA@24          004038a6 f   shell32:shell32.dll
 0001:00003382       _aP_workmem_size           00404382     aplib:aplib.obj
 0001:00003388       _aP_max_packed_size        00404388     aplib:aplib.obj
 0001:00003396       _aP_pack                   00404396     aplib:aplib.obj
 0002:00000000       __imp__InitCommonControls@0 00405000     comctl32:comctl32.dll
 0002:00000004       \177comctl32_NULL_THUNK_DATA 00405004     comctl32:comctl32.dll
 0002:00000008       __imp__GetOpenFileNameA@4  00405008     comdlg32:comdlg32.dll
 0002:0000000c       \177comdlg32_NULL_THUNK_DATA 0040500c     comdlg32:comdlg32.dll
 0002:00000010       __imp__TextOutA@20         00405010     gdi32:gdi32.dll
 0002:00000014       __imp__SetTextColor@8      00405014     gdi32:gdi32.dll
 0002:00000018       __imp__CreateCompatibleBitmap@12 00405018     gdi32:gdi32.dll
 0002:0000001c       __imp__CreateCompatibleDC@4 0040501c     gdi32:gdi32.dll
 0002:00000020       __imp__BitBlt@36           00405020     gdi32:gdi32.dll
 0002:00000024       __imp__CreateSolidBrush@4  00405024     gdi32:gdi32.dll
 0002:00000028       __imp__GetTextExtentPoint32A@16 00405028     gdi32:gdi32.dll
 0002:0000002c       __imp__SetBkMode@8         0040502c     gdi32:gdi32.dll
 0002:00000030       __imp__CreateFontIndirectA@4 00405030     gdi32:gdi32.dll
 0002:00000034       __imp__SelectObject@8      00405034     gdi32:gdi32.dll
 0002:00000038       \177gdi32_NULL_THUNK_DATA  00405038     gdi32:gdi32.dll
 0002:0000003c       __imp__VirtualFree@12      0040503c     kernel32:kernel32.dll
 0002:00000040       __imp__ReadFile@20         00405040     kernel32:kernel32.dll
 0002:00000044       __imp__CopyFileA@12        00405044     kernel32:kernel32.dll
 0002:00000048       __imp__WritePrivateProfileStringA@16 00405048     kernel32:kernel32.dll
 0002:0000004c       __imp__WriteFile@20        0040504c     kernel32:kernel32.dll
 0002:00000050       __imp__RtlZeroMemory@8     00405050     kernel32:kernel32.dll
 0002:00000054       __imp__VirtualAlloc@16     00405054     kernel32:kernel32.dll
 0002:00000058       __imp__SetFilePointer@16   00405058     kernel32:kernel32.dll
 0002:0000005c       __imp__CreateFileA@28      0040505c     kernel32:kernel32.dll
 0002:00000060       __imp__GetModuleHandleA@4  00405060     kernel32:kernel32.dll
 0002:00000064       __imp__GetPrivateProfileIntA@16 00405064     kernel32:kernel32.dll
 0002:00000068       __imp__GetFileSize@8       00405068     kernel32:kernel32.dll
 0002:0000006c       __imp__ExitProcess@4       0040506c     kernel32:kernel32.dll
 0002:00000070       __imp__CloseHandle@4       00405070     kernel32:kernel32.dll
 0002:00000074       \177kernel32_NULL_THUNK_DATA 00405074     kernel32:kernel32.dll
 0002:00000078       __imp__ShellExecuteA@24    00405078     shell32:shell32.dll
 0002:0000007c       \177shell32_NULL_THUNK_DATA 0040507c     shell32:shell32.dll
 0002:00000080       __imp__ShowWindow@8        00405080     user32:user32.dll
 0002:00000084       __imp__SendDlgItemMessageA@20 00405084     user32:user32.dll
 0002:00000088       __imp__ReleaseDC@8         00405088     user32:user32.dll
 0002:0000008c       __imp__PostQuitMessage@4   0040508c     user32:user32.dll
 0002:00000090       __imp__SetTimer@16         00405090     user32:user32.dll
 0002:00000094       __imp__SendMessageA@16     00405094     user32:user32.dll
 0002:00000098       __imp__GetDlgItem@8        00405098     user32:user32.dll
 0002:0000009c       __imp__SetDlgItemTextA@12  0040509c     user32:user32.dll
 0002:000000a0       __imp__FillRect@12         004050a0     user32:user32.dll
 0002:000000a4       __imp__EndPaint@8          004050a4     user32:user32.dll
 0002:000000a8       __imp__EnableWindow@8      004050a8     user32:user32.dll
 0002:000000ac       __imp__DialogBoxParamA@20  004050ac     user32:user32.dll
 0002:000000b0       __imp__CreateDialogParamA@20 004050b0     user32:user32.dll
 0002:000000b4       __imp__CheckDlgButton@12   004050b4     user32:user32.dll
 0002:000000b8       __imp__BeginPaint@8        004050b8     user32:user32.dll
 0002:000000bc       __imp__GetDC@4             004050bc     user32:user32.dll
 0002:000000c0       __imp__LoadBitmapA@8       004050c0     user32:user32.dll
 0002:000000c4       \177user32_NULL_THUNK_DATA 004050c4     user32:user32.dll
 0002:000000c8       __IMPORT_DESCRIPTOR_kernel32 004050c8     kernel32:kernel32.dll
 0002:000000dc       __IMPORT_DESCRIPTOR_user32 004050dc     user32:user32.dll
 0002:000000f0       __IMPORT_DESCRIPTOR_comctl32 004050f0     comctl32:comctl32.dll
 0002:00000104       __IMPORT_DESCRIPTOR_comdlg32 00405104     comdlg32:comdlg32.dll
 0002:00000118       __IMPORT_DESCRIPTOR_gdi32  00405118     gdi32:gdi32.dll
 0002:0000012c       __IMPORT_DESCRIPTOR_shell32 0040512c     shell32:shell32.dll
 0002:00000140       __NULL_IMPORT_DESCRIPTOR   00405140     kernel32:kernel32.dll

 entry point at        0001:0000061c

 Static symbols