b249e4354d88ad697f04dfed594a3305cf2f0520872883b4cf5b90ba82d3c762
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-May-11 18:56:39 |
| Detected languages |
English - United States
|
| TLS Callbacks | 2 callback(s) detected. |
| CompanyName | Flole Systems |
| FileDescription | Flole-Inverter-Tool |
| FileVersion | 2025-05-11-20:50:06 |
| InternalName | Flole-Inverter-Tool |
| LegalCopyright | Copyright Flole 2025 |
| OriginalFilename | Flole-Inverter-Tool.exe |
| ProductName | Flole-Inverter-Tool |
| ProductVersion | 2025-05-11-20:50:06 |
Plugin Output
| Info | Matching compiler(s): | Microsoft Visual C++ 6.0 - 8.0 |
| Suspicious | PEiD Signature: | HQR data file |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to MD5 Uses constants related to SHA1 Uses constants related to SHA256 Uses constants related to SHA512 Uses constants related to Whirlpool Uses constants related to AES Uses constants related to Blowfish Uses constants related to Twofish Uses known Diffie-Helman primes Microsoft's Cryptography API |
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Safe | VirusTotal score: 0/71 (Scanned on 2025-05-29 00:26:25) | All the AVs think this file is safe. |
Hashes
| MD5 | 6d4087fece31a65422c49b40f1ceb2b6 🔍 |
|---|---|
| SHA1 | d23a9cd7d8f1f8e67e836df60f0fcd0f37fc8a1b 🔍 |
| SHA256 | b249e4354d88ad697f04dfed594a3305cf2f0520872883b4cf5b90ba82d3c762 🔍 |
| SHA3 | 0e5c594b1f06d5902dd60b7d4d294823d90a15929861bbe1d6d3819b6080d411 🔍 |
| SSDeep | 98304:OWNFlZB3JAC4Gt1f3vb9No3F3kw6YHl7ci2mOQ4oS:OWNFlZB3JAPGt1fj9NoNQ7BQ4H 🔍 |
| Imports Hash | d6b42785e58cfa3a34e0f2d877325516 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x128 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2025-May-11 18:56:39 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x57e200 |
| SizeOfInitializedData | 0x239200 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00512B19 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x580000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x7bb000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | 91c3a88b793ce63dff62b48c21906d0a 🔍 |
|---|---|
| SHA1 | ce4cb26c583d2ca505514549a865e9918feda7fc 🔍 |
| SHA256 | b277c4a108d876efac6ca7f77cf7460991beff0836e81b88a860174921654a52 🔍 |
| SHA3 | a48a35172a9f5587d5f8309296fa00984371e766760d49c34b03945f4644a888 🔍 |
| VirtualSize | 0x57e190 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x57e200 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.61459 |
.rdata
| MD5 | 12d0c86c86b97928d65f691d1830cc00 🔍 |
|---|---|
| SHA1 | f8ac14a093e20af0fea7763017bc553644718472 🔍 |
| SHA256 | 11380018b1c11b5b1e47715cb1aeedbdfd6c1361e87e92e5792e7b325949a493 🔍 |
| SHA3 | af60fec14ed71c41c5e14efc32d098a2b08666d185ab13ec364dfc5c48cbfd3e 🔍 |
| VirtualSize | 0x1be78a |
| VirtualAddress | 0x580000 |
| SizeOfRawData | 0x1be800 |
| PointerToRawData | 0x57e600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.60818 |
.data
| MD5 | 26b0452cfcdf7051a3fa2d9be99d5608 🔍 |
|---|---|
| SHA1 | 197ac582498634e66a48c8eba8a8bbf60bf02e19 🔍 |
| SHA256 | b94861c6584c1bf9acaba6f75e1c9fb1ee8b6db54e41ef76539ef9e7dc42b3f2 🔍 |
| SHA3 | bae3bc03c724ba2c53651d6977df933601d55bc39d5882653d6e9415368e9a90 🔍 |
| VirtualSize | 0x3e50c |
| VirtualAddress | 0x73f000 |
| SizeOfRawData | 0x2f600 |
| PointerToRawData | 0x73ce00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 5.09057 |
.rsrc
| MD5 | 686fe07379315e1e39e9f963be1fa582 🔍 |
|---|---|
| SHA1 | 3ff0d2da3a62cd9f10aeeff6946570fbf2604149 🔍 |
| SHA256 | fcea558f8f67ed3e81a8d28d7fdecc944c6297a04d6a02a07b550d0c1ed2d960 🔍 |
| SHA3 | 98f3633b266a0800f1e716f9e97aaf3711829d8af8f462491c850593bb8a23fd 🔍 |
| VirtualSize | 0x2818 |
| VirtualAddress | 0x77e000 |
| SizeOfRawData | 0x2a00 |
| PointerToRawData | 0x76c400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.36845 |
.reloc
| MD5 | 82238447865ea41413b8f57b03f2f14d 🔍 |
|---|---|
| SHA1 | 1bc74e1af9902dbd444eeb74749f2749d6f2cd14 🔍 |
| SHA256 | 5050dee4920e21b72931efd13c6ce292f2a46fabc4da94c60139b130515955b4 🔍 |
| SHA3 | a8e3d022812cf061ed45cd0e10ffd6297122fe7b829e9fcdae5d048b7e27a7d4 🔍 |
| VirtualSize | 0x39850 |
| VirtualAddress | 0x781000 |
| SizeOfRawData | 0x39a00 |
| PointerToRawData | 0x76ee00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.60103 |
Imports
| GDI32.dll |
GetOutlineTextMetricsA
GetFontUnicodeRanges GetGlyphIndicesW SetMapMode GetGlyphOutlineW CreateSolidBrush StretchDIBits GetFontData GetCharWidth32A CreateFontIndirectW GetDeviceCaps ExtTextOutW SetTextAlign SetTextColor SaveDC RestoreDC GdiFlush CreateDIBSection ModifyWorldTransform SetWorldTransform GetWorldTransform SetGraphicsMode DeleteObject ExtSelectClipRgn SelectClipRgn IntersectClipRect GetGraphicsMode GetClipRgn GetClipBox ExtCreateRegion CreateRectRgn SetBkMode SelectObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap BitBlt GetTextMetricsA |
|---|---|
| WS2_32.dll |
__WSAFDIsSet
closesocket connect recv select send socket gethostname WSAStartup WSACleanup sendto recvfrom listen htonl WSAIoctl setsockopt htons getsockname getpeername bind accept WSASetLastError ntohs WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent WSAGetLastError getsockopt ioctlsocket freeaddrinfo getaddrinfo |
| bcrypt.dll |
BCryptGenRandom
|
| ADVAPI32.dll |
CryptAcquireContextW
CryptReleaseContext CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt |
| CRYPT32.dll |
CertCloseStore
CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertOpenSystemStoreA CertOpenStore CryptStringToBinaryW PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringW CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain |
| KERNEL32.dll |
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime GetDriveTypeW SetStdHandle FreeLibraryAndExitThread ExitProcess SetFilePointerEx GetModuleFileNameW GetCommandLineA GetCommandLineW ReadConsoleW GetConsoleOutputCP GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale EnumSystemLocalesW FlushFileBuffers HeapSize GetTimeZoneInformation SetEndOfFile IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RemoveDirectoryW GetUserDefaultLCID DeleteFileA GetTempPathA CloseHandle GetLastError SetLastError CreateIoCompletionPort GetQueuedCompletionStatus PostQueuedCompletionStatus EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent WaitForSingleObject SleepEx CreateEventW SetWaitableTimer WaitForMultipleObjects QueueUserAPC TerminateThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetVersionExA GetModuleFileNameA LocalFree FormatMessageA CreateWaitableTimerA GetModuleHandleA GetModuleHandleW GetWindowsDirectoryA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte FindClose GetStdHandle QueryPerformanceCounter GetCurrentProcess GetCurrentProcessId GetSystemInfo VirtualAlloc VirtualProtect VirtualFree VirtualLock VirtualUnlock GetProcAddress GetProcessWorkingSetSize GetConsoleMode FreeLibrary LoadLibraryA GetCurrentThreadId GetTickCount InitializeCriticalSection TryEnterCriticalSection CreateFileW DeleteFileW FormatMessageW LoadLibraryW FindFirstFileExW FindNextFileW GetFullPathNameW MapViewOfFile UnmapViewOfFile CreateFileMappingA GetFullPathNameA GetFileAttributesExA GetLongPathNameA GetSystemTimeAsFileTime CreateFileA GetFileSizeEx ReadFile HeapAlloc HeapReAlloc HeapFree GetProcessHeap WriteFile GetOverlappedResult CancelIo ResetEvent CreateEventA ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx QueryPerformanceFrequency GetSystemDirectoryW Sleep MoveFileExW WaitForSingleObjectEx GetEnvironmentVariableA GetFileType PeekNamedPipe VerSetConditionMask VerifyVersionInfoW ExitThread CreateThread LoadLibraryExW RtlUnwind InterlockedPushEntrySList GetStartupInfoW IsDebuggerPresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer IsProcessorFeaturePresent GetModuleHandleExW WakeConditionVariable GetFileInformationByHandleEx CopyFileW AreFileApisANSI SetFileAttributesW GetFileInformationByHandle GetFileAttributesExW CreateDirectoryW GetCurrentDirectoryW TryAcquireSRWLockExclusive GetNativeSystemInfo GetExitCodeThread SleepConditionVariableSRW WakeAllConditionVariable GetLocaleInfoEx RaiseException WriteConsoleW |
| USER32.dll |
DispatchMessageA
TranslateMessage GetMessageA GetSystemMetrics DefWindowProcW SendMessageA RegisterClassW FillRect IntersectRect InflateRect ReleaseDC GetDC GetMessageTime PeekMessageW GetAncestor SystemParametersInfoA ScreenToClient GetCursor GetCursorPos SetCursor ShowCursor InvalidateRect GetUpdateRect EndPaint BeginPaint KillTimer SetTimer ReleaseCapture SetCapture GetAsyncKeyState SetFocus EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetDoubleClickTime DefWindowProcA TrackMouseEvent LoadIconA LoadCursorA EnumChildWindows SetWindowLongW GetWindowLongW MessageBoxW GetWindowRect GetClientRect EnableMenuItem GetSystemMenu SetWindowPos MoveWindow ShowWindow CreateWindowExW |
| SHELL32.dll |
ShellExecuteExA
DragQueryFileA DragQueryFileW ShellExecuteA |
| ole32.dll |
CoInitialize
OleInitialize ReleaseStgMedium RevokeDragDrop RegisterDragDrop OleUninitialize CoCreateInstance |
Delayed Imports
FcAtomicCreate
| Ordinal | 1 |
|---|---|
| Address | 0x416480 |
FcAtomicDeleteNew
| Ordinal | 2 |
|---|---|
| Address | 0x416550 |
FcAtomicDestroy
| Ordinal | 3 |
|---|---|
| Address | 0x4151e0 |
FcAtomicLock
| Ordinal | 4 |
|---|---|
| Address | 0x416560 |
FcAtomicNewFile
| Ordinal | 5 |
|---|---|
| Address | 0x322e00 |
FcAtomicOrigFile
| Ordinal | 6 |
|---|---|
| Address | 0x35aae0 |
FcAtomicReplaceOrig
| Ordinal | 7 |
|---|---|
| Address | 0x416610 |
FcAtomicUnlock
| Ordinal | 8 |
|---|---|
| Address | 0x416640 |
FcBlanksAdd
| Ordinal | 9 |
|---|---|
| Address | 0x67010 |
FcBlanksCreate
| Ordinal | 10 |
|---|---|
| Address | 0x67010 |
FcBlanksDestroy
| Ordinal | 11 |
|---|---|
| Address | 0x28240 |
FcBlanksIsMember
| Ordinal | 12 |
|---|---|
| Address | 0x67010 |
FcCacheCopySet
| Ordinal | 13 |
|---|---|
| Address | 0x408620 |
FcCacheCreateTagFile
| Ordinal | 14 |
|---|---|
| Address | 0x408690 |
FcCacheDir
| Ordinal | 15 |
|---|---|
| Address | 0x408860 |
FcCacheNumFont
| Ordinal | 16 |
|---|---|
| Address | 0x408ab0 |
FcCacheNumSubdir
| Ordinal | 17 |
|---|---|
| Address | 0x32e460 |
FcCacheSubdir
| Ordinal | 18 |
|---|---|
| Address | 0x408e40 |
FcCharSetAddChar
| Ordinal | 19 |
|---|---|
| Address | 0x4045f0 |
FcCharSetCopy
| Ordinal | 20 |
|---|---|
| Address | 0x404640 |
FcCharSetCount
| Ordinal | 21 |
|---|---|
| Address | 0x404670 |
FcCharSetCoverage
| Ordinal | 22 |
|---|---|
| Address | 0x404730 |
FcCharSetCreate
| Ordinal | 23 |
|---|---|
| Address | 0x4047a0 |
FcCharSetDelChar
| Ordinal | 24 |
|---|---|
| Address | 0x4047d0 |
FcCharSetDestroy
| Ordinal | 25 |
|---|---|
| Address | 0x404830 |
FcCharSetEqual
| Ordinal | 26 |
|---|---|
| Address | 0x4048b0 |
FcCharSetFirstPage
| Ordinal | 27 |
|---|---|
| Address | 0x404b30 |
FcCharSetHasChar
| Ordinal | 28 |
|---|---|
| Address | 0x4051c0 |
FcCharSetIntersect
| Ordinal | 29 |
|---|---|
| Address | 0x405220 |
FcCharSetIntersectCount
| Ordinal | 30 |
|---|---|
| Address | 0x405240 |
FcCharSetIsSubset
| Ordinal | 31 |
|---|---|
| Address | 0x405480 |
FcCharSetMerge
| Ordinal | 32 |
|---|---|
| Address | 0x405610 |
FcCharSetNew
| Ordinal | 33 |
|---|---|
| Address | 0x4047a0 |
FcCharSetNextPage
| Ordinal | 34 |
|---|---|
| Address | 0x405760 |
FcCharSetSubtract
| Ordinal | 35 |
|---|---|
| Address | 0x405e90 |
FcCharSetSubtractCount
| Ordinal | 36 |
|---|---|
| Address | 0x405eb0 |
FcCharSetUnion
| Ordinal | 37 |
|---|---|
| Address | 0x4060b0 |
FcConfigAppFontAddDir
| Ordinal | 38 |
|---|---|
| Address | 0x3f6430 |
FcConfigAppFontAddFile
| Ordinal | 39 |
|---|---|
| Address | 0x3f6570 |
FcConfigAppFontClear
| Ordinal | 40 |
|---|---|
| Address | 0x3f66e0 |
FcConfigBuildFonts
| Ordinal | 41 |
|---|---|
| Address | 0x3f67b0 |
FcConfigCreate
| Ordinal | 42 |
|---|---|
| Address | 0x3f6ea0 |
FcConfigDestroy
| Ordinal | 43 |
|---|---|
| Address | 0x3f7130 |
FcConfigEnableHome
| Ordinal | 44 |
|---|---|
| Address | 0x3f7230 |
FcConfigFileInfoIterGet
| Ordinal | 45 |
|---|---|
| Address | 0x3f8120 |
FcConfigFileInfoIterInit
| Ordinal | 46 |
|---|---|
| Address | 0x3f81b0 |
FcConfigFileInfoIterNext
| Ordinal | 47 |
|---|---|
| Address | 0x3f81d0 |
FcConfigFilename
| Ordinal | 48 |
|---|---|
| Address | 0x3f8210 |
FcConfigGetBlanks
| Ordinal | 49 |
|---|---|
| Address | 0x67010 |
FcConfigGetCache
| Ordinal | 50 |
|---|---|
| Address | 0x67010 |
FcConfigGetCacheDirs
| Ordinal | 51 |
|---|---|
| Address | 0x3f8280 |
FcConfigGetConfigDirs
| Ordinal | 52 |
|---|---|
| Address | 0x3f8340 |
FcConfigGetConfigFiles
| Ordinal | 53 |
|---|---|
| Address | 0x3f8400 |
FcConfigGetCurrent
| Ordinal | 54 |
|---|---|
| Address | 0x3f84c0 |
FcConfigGetFilename
| Ordinal | 55 |
|---|---|
| Address | 0x3f84d0 |
FcConfigGetFontDirs
| Ordinal | 56 |
|---|---|
| Address | 0x3f8720 |
FcConfigGetFonts
| Ordinal | 57 |
|---|---|
| Address | 0x3f87e0 |
FcConfigGetRescanInterval
| Ordinal | 58 |
|---|---|
| Address | 0x3f89c0 |
FcConfigGetRescanInverval
| Ordinal | 59 |
|---|---|
| Address | 0x3f89c0 |
FcConfigGetSysRoot
| Ordinal | 60 |
|---|---|
| Address | 0x3f8a80 |
FcConfigHome
| Ordinal | 61 |
|---|---|
| Address | 0x3f8b30 |
FcConfigParseAndLoad
| Ordinal | 62 |
|---|---|
| Address | 0x410390 |
FcConfigParseAndLoadFromMemory
| Ordinal | 63 |
|---|---|
| Address | 0x410600 |
FcConfigReference
| Ordinal | 64 |
|---|---|
| Address | 0x3f9430 |
FcConfigSetCurrent
| Ordinal | 65 |
|---|---|
| Address | 0x3f9500 |
FcConfigSetRescanInterval
| Ordinal | 66 |
|---|---|
| Address | 0x3f95a0 |
FcConfigSetRescanInverval
| Ordinal | 67 |
|---|---|
| Address | 0x3f9660 |
FcConfigSetSysRoot
| Ordinal | 68 |
|---|---|
| Address | 0x3f9720 |
FcConfigSubstitute
| Ordinal | 69 |
|---|---|
| Address | 0x3f97e0 |
FcConfigSubstituteWithPat
| Ordinal | 70 |
|---|---|
| Address | 0x3f9800 |
FcConfigUptoDate
| Ordinal | 71 |
|---|---|
| Address | 0x3fa240 |
FcDefaultSubstitute
| Ordinal | 72 |
|---|---|
| Address | 0x3fe9a0 |
FcDirCacheClean
| Ordinal | 73 |
|---|---|
| Address | 0x4093c0 |
FcDirCacheCreateUUID
| Ordinal | 74 |
|---|---|
| Address | 0x63940 |
FcDirCacheDeleteUUID
| Ordinal | 75 |
|---|---|
| Address | 0x4098b0 |
FcDirCacheLoad
| Ordinal | 76 |
|---|---|
| Address | 0x4098d0 |
FcDirCacheLoadFile
| Ordinal | 77 |
|---|---|
| Address | 0x409930 |
FcDirCacheRead
| Ordinal | 78 |
|---|---|
| Address | 0x407880 |
FcDirCacheRescan
| Ordinal | 79 |
|---|---|
| Address | 0x4079b0 |
FcDirCacheUnlink
| Ordinal | 80 |
|---|---|
| Address | 0x409ef0 |
FcDirCacheUnload
| Ordinal | 81 |
|---|---|
| Address | 0x408ac0 |
FcDirCacheValid
| Ordinal | 82 |
|---|---|
| Address | 0x409ff0 |
FcDirSave
| Ordinal | 83 |
|---|---|
| Address | 0x67010 |
FcDirScan
| Ordinal | 84 |
|---|---|
| Address | 0x407ad0 |
FcFileIsDir
| Ordinal | 85 |
|---|---|
| Address | 0x407dc0 |
FcFileScan
| Ordinal | 86 |
|---|---|
| Address | 0x407e80 |
FcFini
| Ordinal | 87 |
|---|---|
| Address | 0x3fae20 |
FcFontList
| Ordinal | 88 |
|---|---|
| Address | 0x3fb1f0 |
FcFontMatch
| Ordinal | 89 |
|---|---|
| Address | 0x400030 |
FcFontRenderPrepare
| Ordinal | 90 |
|---|---|
| Address | 0x4000c0 |
FcFontSetAdd
| Ordinal | 91 |
|---|---|
| Address | 0x3fab30 |
FcFontSetCreate
| Ordinal | 92 |
|---|---|
| Address | 0x3fab90 |
FcFontSetDestroy
| Ordinal | 93 |
|---|---|
| Address | 0x3face0 |
FcFontSetList
| Ordinal | 94 |
|---|---|
| Address | 0x3fb270 |
FcFontSetMatch
| Ordinal | 95 |
|---|---|
| Address | 0x400710 |
FcFontSetPrint
| Ordinal | 96 |
|---|---|
| Address | 0x406990 |
FcFontSetSort
| Ordinal | 97 |
|---|---|
| Address | 0x400c40 |
FcFontSetSortDestroy
| Ordinal | 98 |
|---|---|
| Address | 0x401180 |
FcFontSort
| Ordinal | 99 |
|---|---|
| Address | 0x401190 |
FcFreeTypeCharIndex
| Ordinal | 100 |
|---|---|
| Address | 0x401270 |
FcFreeTypeCharSet
| Ordinal | 101 |
|---|---|
| Address | 0x401340 |
FcFreeTypeCharSetAndSpacing
| Ordinal | 102 |
|---|---|
| Address | 0x4014a0 |
FcFreeTypeQuery
| Ordinal | 103 |
|---|---|
| Address | 0x401510 |
FcFreeTypeQueryAll
| Ordinal | 104 |
|---|---|
| Address | 0x4015a0 |
FcFreeTypeQueryFace
| Ordinal | 105 |
|---|---|
| Address | 0x4018c0 |
FcGetDefaultLangs
| Ordinal | 106 |
|---|---|
| Address | 0x3ff090 |
FcGetLangs
| Ordinal | 107 |
|---|---|
| Address | 0x40ae50 |
FcGetVersion
| Ordinal | 108 |
|---|---|
| Address | 0x3fae40 |
FcInit
| Ordinal | 109 |
|---|---|
| Address | 0x3fae50 |
FcInitBringUptoDate
| Ordinal | 110 |
|---|---|
| Address | 0x3fae60 |
FcInitLoadConfig
| Ordinal | 111 |
|---|---|
| Address | 0x3faf10 |
FcInitLoadConfigAndFonts
| Ordinal | 112 |
|---|---|
| Address | 0x3faf20 |
FcInitReinitialize
| Ordinal | 113 |
|---|---|
| Address | 0x3fb1a0 |
FcLangGetCharSet
| Ordinal | 114 |
|---|---|
| Address | 0x40b020 |
FcLangNormalize
| Ordinal | 115 |
|---|---|
| Address | 0x40b1d0 |
FcLangSetAdd
| Ordinal | 116 |
|---|---|
| Address | 0x40b4e0 |
FcLangSetCompare
| Ordinal | 117 |
|---|---|
| Address | 0x40b550 |
FcLangSetContains
| Ordinal | 118 |
|---|---|
| Address | 0x40b850 |
FcLangSetCopy
| Ordinal | 119 |
|---|---|
| Address | 0x40bba0 |
FcLangSetCreate
| Ordinal | 120 |
|---|---|
| Address | 0x40bca0 |
FcLangSetDel
| Ordinal | 121 |
|---|---|
| Address | 0x40bcd0 |
FcLangSetDestroy
| Ordinal | 122 |
|---|---|
| Address | 0x40bd30 |
FcLangSetEqual
| Ordinal | 123 |
|---|---|
| Address | 0x40bd60 |
FcLangSetGetLangs
| Ordinal | 124 |
|---|---|
| Address | 0x40bdd0 |
FcLangSetHasLang
| Ordinal | 125 |
|---|---|
| Address | 0x40be80 |
FcLangSetHash
| Ordinal | 126 |
|---|---|
| Address | 0x40c020 |
FcLangSetSubtract
| Ordinal | 127 |
|---|---|
| Address | 0x40c2e0 |
FcLangSetUnion
| Ordinal | 128 |
|---|---|
| Address | 0x40c300 |
FcMatrixCopy
| Ordinal | 129 |
|---|---|
| Address | 0x40c590 |
FcMatrixEqual
| Ordinal | 130 |
|---|---|
| Address | 0x40c5c0 |
FcMatrixMultiply
| Ordinal | 131 |
|---|---|
| Address | 0x40c640 |
FcMatrixRotate
| Ordinal | 132 |
|---|---|
| Address | 0x40c6e0 |
FcMatrixScale
| Ordinal | 133 |
|---|---|
| Address | 0x40c760 |
FcMatrixShear
| Ordinal | 134 |
|---|---|
| Address | 0x40c7e0 |
FcNameConstant
| Ordinal | 135 |
|---|---|
| Address | 0x40c8f0 |
FcNameGetConstant
| Ordinal | 136 |
|---|---|
| Address | 0x40ce30 |
FcNameGetConstantFor
| Ordinal | 137 |
|---|---|
| Address | 0x40ce80 |
FcNameGetObjectType
| Ordinal | 138 |
|---|---|
| Address | 0x40cee0 |
FcNameParse
| Ordinal | 139 |
|---|---|
| Address | 0x40cf00 |
FcNameRegisterConstants
| Ordinal | 140 |
|---|---|
| Address | 0x67010 |
FcNameRegisterObjectTypes
| Ordinal | 141 |
|---|---|
| Address | 0x67010 |
FcNameUnparse
| Ordinal | 142 |
|---|---|
| Address | 0x40d1a0 |
FcNameUnregisterConstants
| Ordinal | 143 |
|---|---|
| Address | 0x67010 |
FcNameUnregisterObjectTypes
| Ordinal | 144 |
|---|---|
| Address | 0x67010 |
FcObjectSetAdd
| Ordinal | 145 |
|---|---|
| Address | 0x3fbe40 |
FcObjectSetBuild
| Ordinal | 146 |
|---|---|
| Address | 0x3fbf30 |
FcObjectSetCreate
| Ordinal | 147 |
|---|---|
| Address | 0x3fab90 |
FcObjectSetDestroy
| Ordinal | 148 |
|---|---|
| Address | 0x3fbfa0 |
FcObjectSetVaBuild
| Ordinal | 149 |
|---|---|
| Address | 0x3fbff0 |
FcPatternAdd
| Ordinal | 150 |
|---|---|
| Address | 0x3fc060 |
FcPatternAddBool
| Ordinal | 151 |
|---|---|
| Address | 0x3fc090 |
FcPatternAddCharSet
| Ordinal | 152 |
|---|---|
| Address | 0x3fc0d0 |
FcPatternAddDouble
| Ordinal | 153 |
|---|---|
| Address | 0x3fc110 |
FcPatternAddFTFace
| Ordinal | 154 |
|---|---|
| Address | 0x3fc150 |
FcPatternAddInteger
| Ordinal | 155 |
|---|---|
| Address | 0x3fc190 |
FcPatternAddLangSet
| Ordinal | 156 |
|---|---|
| Address | 0x3fc1d0 |
FcPatternAddMatrix
| Ordinal | 157 |
|---|---|
| Address | 0x3fc210 |
FcPatternAddRange
| Ordinal | 158 |
|---|---|
| Address | 0x3fc250 |
FcPatternAddString
| Ordinal | 159 |
|---|---|
| Address | 0x3fc290 |
FcPatternAddWeak
| Ordinal | 160 |
|---|---|
| Address | 0x3fc300 |
FcPatternBuild
| Ordinal | 161 |
|---|---|
| Address | 0x3fc400 |
FcPatternCreate
| Ordinal | 162 |
|---|---|
| Address | 0x3fc600 |
FcPatternDel
| Ordinal | 163 |
|---|---|
| Address | 0x3fc630 |
FcPatternDestroy
| Ordinal | 164 |
|---|---|
| Address | 0x3fc6c0 |
FcPatternDuplicate
| Ordinal | 165 |
|---|---|
| Address | 0x3fc740 |
FcPatternEqual
| Ordinal | 166 |
|---|---|
| Address | 0x3fc840 |
FcPatternEqualSubset
| Ordinal | 167 |
|---|---|
| Address | 0x3fc990 |
FcPatternFilter
| Ordinal | 168 |
|---|---|
| Address | 0x3fca50 |
FcPatternFindIter
| Ordinal | 169 |
|---|---|
| Address | 0x3fcb60 |
FcPatternGet
| Ordinal | 170 |
|---|---|
| Address | 0x3fcc20 |
FcPatternGetBool
| Ordinal | 171 |
|---|---|
| Address | 0x3fcc50 |
FcPatternGetCharSet
| Ordinal | 172 |
|---|---|
| Address | 0x3fcca0 |
FcPatternGetDouble
| Ordinal | 173 |
|---|---|
| Address | 0x3fccf0 |
FcPatternGetFTFace
| Ordinal | 174 |
|---|---|
| Address | 0x3fcd60 |
FcPatternGetInteger
| Ordinal | 175 |
|---|---|
| Address | 0x3fcdb0 |
FcPatternGetLangSet
| Ordinal | 176 |
|---|---|
| Address | 0x3fce10 |
FcPatternGetMatrix
| Ordinal | 177 |
|---|---|
| Address | 0x3fce60 |
FcPatternGetRange
| Ordinal | 178 |
|---|---|
| Address | 0x3fceb0 |
FcPatternGetString
| Ordinal | 179 |
|---|---|
| Address | 0x3fcf00 |
FcPatternGetWithBinding
| Ordinal | 180 |
|---|---|
| Address | 0x3fcf50 |
FcPatternHash
| Ordinal | 181 |
|---|---|
| Address | 0x3fcf80 |
FcPatternIterEqual
| Ordinal | 182 |
|---|---|
| Address | 0x3fd010 |
FcPatternIterGetObject
| Ordinal | 183 |
|---|---|
| Address | 0x3fd0d0 |
FcPatternIterGetValue
| Ordinal | 184 |
|---|---|
| Address | 0x3fd100 |
FcPatternIterIsValid
| Ordinal | 185 |
|---|---|
| Address | 0x3fd1a0 |
FcPatternIterNext
| Ordinal | 186 |
|---|---|
| Address | 0x3fd1b0 |
FcPatternIterStart
| Ordinal | 187 |
|---|---|
| Address | 0x3fd200 |
FcPatternIterValueCount
| Ordinal | 188 |
|---|---|
| Address | 0x3fd230 |
FcPatternPrint
| Ordinal | 189 |
|---|---|
| Address | 0x406ec0 |
FcPatternReference
| Ordinal | 190 |
|---|---|
| Address | 0x3fdad0 |
FcPatternRemove
| Ordinal | 191 |
|---|---|
| Address | 0x3fdb10 |
FcPatternVaBuild
| Ordinal | 192 |
|---|---|
| Address | 0x3fdf20 |
FcRangeCopy
| Ordinal | 193 |
|---|---|
| Address | 0x415110 |
FcRangeCreateDouble
| Ordinal | 194 |
|---|---|
| Address | 0x415160 |
FcRangeCreateInteger
| Ordinal | 195 |
|---|---|
| Address | 0x415190 |
FcRangeDestroy
| Ordinal | 196 |
|---|---|
| Address | 0x4151e0 |
FcRangeGetDouble
| Ordinal | 197 |
|---|---|
| Address | 0x415200 |
FcStrBasename
| Ordinal | 198 |
|---|---|
| Address | 0x40d860 |
FcStrBuildFilename
| Ordinal | 199 |
|---|---|
| Address | 0x40dbb0 |
FcStrCmp
| Ordinal | 200 |
|---|---|
| Address | 0x40e010 |
FcStrCmpIgnoreCase
| Ordinal | 201 |
|---|---|
| Address | 0x40e1b0 |
FcStrCopy
| Ordinal | 202 |
|---|---|
| Address | 0x40e4f0 |
FcStrCopyFilename
| Ordinal | 203 |
|---|---|
| Address | 0x40e500 |
FcStrDirname
| Ordinal | 204 |
|---|---|
| Address | 0x40e5c0 |
FcStrDowncase
| Ordinal | 205 |
|---|---|
| Address | 0x40e640 |
FcStrFree
| Ordinal | 206 |
|---|---|
| Address | 0x32c420 |
FcStrListCreate
| Ordinal | 207 |
|---|---|
| Address | 0x40eb30 |
FcStrListDone
| Ordinal | 208 |
|---|---|
| Address | 0x40eb60 |
FcStrListFirst
| Ordinal | 209 |
|---|---|
| Address | 0x40ebd0 |
FcStrListNext
| Ordinal | 210 |
|---|---|
| Address | 0x40ebe0 |
FcStrPlus
| Ordinal | 211 |
|---|---|
| Address | 0x40ed60 |
FcStrSetAdd
| Ordinal | 212 |
|---|---|
| Address | 0x40ee60 |
FcStrSetAddFilename
| Ordinal | 213 |
|---|---|
| Address | 0x40eea0 |
FcStrSetCreate
| Ordinal | 214 |
|---|---|
| Address | 0x40f1c0 |
FcStrSetDel
| Ordinal | 215 |
|---|---|
| Address | 0x40f240 |
FcStrSetDestroy
| Ordinal | 216 |
|---|---|
| Address | 0x40f320 |
FcStrSetEqual
| Ordinal | 217 |
|---|---|
| Address | 0x40f380 |
FcStrSetMember
| Ordinal | 218 |
|---|---|
| Address | 0x40f470 |
FcStrStr
| Ordinal | 219 |
|---|---|
| Address | 0x40f4e0 |
FcStrStrIgnoreCase
| Ordinal | 220 |
|---|---|
| Address | 0x40f560 |
FcUcs4ToUtf8
| Ordinal | 221 |
|---|---|
| Address | 0x40f800 |
FcUtf16Len
| Ordinal | 222 |
|---|---|
| Address | 0x40f8c0 |
FcUtf16ToUcs4
| Ordinal | 223 |
|---|---|
| Address | 0x40f9e0 |
FcUtf8Len
| Ordinal | 224 |
|---|---|
| Address | 0x40faa0 |
FcUtf8ToUcs4
| Ordinal | 225 |
|---|---|
| Address | 0x40fbd0 |
FcValueDestroy
| Ordinal | 226 |
|---|---|
| Address | 0x3fe100 |
FcValueEqual
| Ordinal | 227 |
|---|---|
| Address | 0x3fe170 |
FcValuePrint
| Ordinal | 228 |
|---|---|
| Address | 0x4075e0 |
FcValueSave
| Ordinal | 229 |
|---|---|
| Address | 0x3fe850 |
FcWeightFromOpenType
| Ordinal | 230 |
|---|---|
| Address | 0x415f30 |
FcWeightFromOpenTypeDouble
| Ordinal | 231 |
|---|---|
| Address | 0x415f60 |
FcWeightToOpenType
| Ordinal | 232 |
|---|---|
| Address | 0x416030 |
FcWeightToOpenTypeDouble
| Ordinal | 233 |
|---|---|
| Address | 0x416060 |
cairo_dwrite_font_face_create_for_dwrite_fontface
| Ordinal | 234 |
|---|---|
| Address | 0x359200 |
cairo_dwrite_font_face_get_measuring_mode
| Ordinal | 235 |
|---|---|
| Address | 0x359310 |
cairo_dwrite_font_face_get_rendering_params
| Ordinal | 236 |
|---|---|
| Address | 0x359320 |
cairo_dwrite_font_face_set_measuring_mode
| Ordinal | 237 |
|---|---|
| Address | 0x359330 |
cairo_dwrite_font_face_set_rendering_params
| Ordinal | 238 |
|---|---|
| Address | 0x359340 |
1
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x21e2 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.85331 |
| Detected Filetype | PNG graphic file |
| MD5 | 03a8c45bfbd6e2ae311ae87b31010637 🔍 |
| SHA1 | ed55079669e6eab0374eae4a72ce8032453d09d9 🔍 |
| SHA256 | 653f9520e6a57a87ed489081fc075a9593e35fced6d189e0e977723e98c484de 🔍 |
| SHA3 | f3dc9967d4bb76d244e77fd15823caecc7a05db3fef95d8f1967b9b66101cbf3 🔍 |
IDI_ELEMENTS_APP_ICON
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.51664 |
| Detected Filetype | Icon file |
| MD5 | b3dc401e0b149d21d09ce87db4ecbd80 🔍 |
| SHA1 | aaf12a2a426fa767b6ca7b69d3909c0b31ef4d8b 🔍 |
| SHA256 | b3abe24294775a9017c504b7f1e0fc7a983cfabc9f92e9eaa8970fb17ed3e093 🔍 |
| SHA3 | 5c94e2304c241fc48890c4629382befb38904d7eb3ee0f8c4961bf857138cb3e 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x334 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.32152 |
| MD5 | be595d4bcb83b78fe54cdd836628fb15 🔍 |
| SHA1 | 48e822a17ec52847de5b23a72fb4300b34ee360b 🔍 |
| SHA256 | a34191b4082c6127c7e3bdc461f88384bd6af7e1f3b6c892361eb3493196864a 🔍 |
| SHA3 | a508940f84c251a024a7701d4202e122406654656e01405a71e24157d9d1c081 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x17d |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.91161 |
| MD5 | 1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍 |
| SHA1 | 4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍 |
| SHA256 | 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍 |
| SHA3 | 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.0 |
| ProductVersion | 0.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_DLL
|
| Language | English - United States |
| CompanyName | Flole Systems |
| FileDescription | Flole-Inverter-Tool |
| FileVersion (#2) | 2025-05-11-20:50:06 |
| InternalName | Flole-Inverter-Tool |
| LegalCopyright | Copyright Flole 2025 |
| OriginalFilename | Flole-Inverter-Tool.exe |
| ProductName | Flole-Inverter-Tool |
| ProductVersion (#2) | 2025-05-11-20:50:06 |
| Resource LangID | English - United States |
|---|
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-May-11 18:56:39 |
| Version | 0.0 |
| SizeofData | 1060 |
| AddressOfRawData | 0x70a0f0 |
| PointerToRawData | 0x7086f0 |
TLS Callbacks
| StartAddressOfRawData | 0xb0a528 |
|---|---|
| EndAddressOfRawData | 0xb0a929 |
| AddressOfIndex | 0xb7c9bc |
| AddressOfCallbacks | 0x980834 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
| Callbacks |
0x00913866
0x009130BD |
Load Configuration
| Size | 0xc0 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0xb41180 |
| SEHandlerTable | 0xb0751c |
| SEHandlerCount | 2301 |
RICH Header
| XOR Key | 0xb2e1d59e |
|---|---|
| Unmarked objects | 0 |
| ASM objects (27412) | 41 |
| 253 (33808) | 12 |
| C objects (33808) | 22 |
| ASM objects (33808) | 30 |
| C++ objects (33808) | 104 |
| C objects (27412) | 37 |
| C objects (CVTCIL) (27412) | 1 |
| C objects (33523) | 26 |
| C++ objects (27412) | 217 |
| Imports (27412) | 19 |
| Total imports | 386 |
| C objects (34123) | 341 |
| C++ objects (34123) | 421 |
| Exports (34123) | 1 |
| Resource objects (34123) | 1 |
| 151 | 2 |
| Linker (34123) | 1 |
Errors
Leave a comment
No comments yet.