PESCAN.IO - Analysis Report Basic

File Structure
Analysis Image
PE Chart Code
Header PE (light blue)
Executable sections (pink)
Non-executable sections (black)
External injected code (red)
File Structure in red = malformed or corrupted header
Chart Code For Other Files
Printable characters (blue)
Non-printable characters (black)
Information
Icon: Icon
Size: 1,22 MB
SHA-256 Hash: EF68D1599E79D32704D602BB352C92D9EB5F710E342EE1697E371A4DBA4FD89B
SHA-1 Hash: 8BC3B28C2B051A8259D7D12744E4C5FE09C6C2AB
MD5 Hash: 34601F1E94BEBBCBAA08BA31E4C48961
Imphash: 59DD7AE6BEF680B839D5A65E314EE5CE
MajorOSVersion: 5
MinorOSVersion: 1
CheckSum: 0013B6F4
EntryPoint (rva): 6F24
SizeOfHeaders: 400
SizeOfImage: 137000
ImageBase: 400000
Architecture: x86
ImportTable: 22BF0
IAT: 1B000
Characteristics: 122
TimeDateStamp: 6A97D8D3
Date: 02/09/2026 8:05:39
File Type: EXE
Number Of Sections: 5
ASLR: Enabled
Section Names: .text, .rdata, .data, .rsrc, .reloc
Number Of Executable Sections: 1
Subsystem: Windows GUI
UAC Execution Level Manifest: asInvoker
Sections Info
Section Name Flags ROffset RSize VOffset VSizeEntropyChi2
.text
0x60000020
Code
Executable
Readable
 400 19E00 1000 19D70
6.6391
541624.66
.rdata
0x40000040
Initialized Data
Readable
 1A200 8800 1B000 86CE
5.0252
1723506.65
.data
0xC0000040
Initialized Data
Readable
Writeable
 22A00 A00 24000 14AC
2.4034
352235.4
.rsrc
0x40000040
Initialized Data
Readable
 23400 10E600 26000 10E57C
7.9842
41939.04
.reloc
0x42000040
Initialized Data
GP-Relative
Readable
 131A00 1600 135000 1534
6.4896
27237.36
Description
OriginalFilename: BraveUpdateSetup.exe
CompanyName: BraveSoftware Inc.
ProductName: BraveSoftware Update
FileVersion: 1.3.361.151
FileDescription: BraveSoftware Update Setup
ProductVersion: 1.3.361.151
Language: English (United States) (ID=0x409)
CodePage: Unicode (UTF-16 LE) (0x4B0)
Binder/Joiner/Crypter
Dropper code detected (EOF) - 2,84 KB
Entry Point
The section number (1) - (.text) have the Entry Point
Information -> EntryPoint (calculated) - 6324
Code -> E8A3020000E97AFEFFFF558BEC8B4508568B483C03C80FB741148D511803D00FB741066BF02803F23BD674198B4D0C3B4A0C
Assembler
|CALL 0X4071CC
|JMP 0X406DA8
|PUSH EBP
|MOV EBP, ESP
|MOV EAX, DWORD PTR [EBP + 8]
|PUSH ESI
|MOV ECX, DWORD PTR [EAX + 0X3C]
|ADD ECX, EAX
|MOVZX EAX, WORD PTR [ECX + 0X14]
|LEA EDX, [ECX + 0X18]
|ADD EDX, EAX
|MOVZX EAX, WORD PTR [ECX + 6]
|IMUL ESI, EAX, 0X28
|ADD ESI, EDX
|CMP EDX, ESI
|JE 0X406F69
|MOV ECX, DWORD PTR [EBP + 0XC]
|CMP ECX, DWORD PTR [EDX + 0XC]
Signatures
CheckSum Integrity Problem:
• Header: 1292020
• Calculated: 1298120
Rich Signature Analyzer:
Code -> F72AC6ABB34BA8F8B34BA8F8B34BA8F8F833ABF9B84BA8F8F833ADF9224BA8F8F833ACF9A74BA8F8A3CFABF9A64BA8F8A3CFACF9A14BA8F8A3CFADF9824BA8F8F8CEA1F9B44BA8F8F833A9F9BC4BA8F8B34BA9F8314BA8F8F8CE57F8B24BA8F8B34B3FF8844BA8F8F8CEAAF9B24BA8F852696368B34BA8F8
Footprint md5 Hash -> 10957528F0D98DD11283357EF25ACAA0
• The Rich header apparently has not been modified
Certificate - Digital Signature:
• The file is signed and the signature is correct
Packer/Compiler
Compiler: Microsoft Visual Studio
Detect It Easy (die)
• PE: compiler: EP:Microsoft Visual C/C++(2017 v.15.5-6)[EXE32]
• PE: compiler: Microsoft Visual C/C++(-)[-]
• PE: linker: Microsoft Linker(14.41**)[-]
• PE: Sign tool: Windows Authenticode(2.0)[PKCS 7]
• Entropy: 7.89321
Suspicious Functions
Library Function Description
KERNEL32.DLL CopyFileW Copies an existing file to a new file.
KERNEL32.DLL WriteFile Writes data to a specified file or input/output (I/O) device.
KERNEL32.DLL GetModuleHandleW Retrieves a handle to the specified module.
KERNEL32.DLL GetProcAddress Retrieves the address of an exported function or variable from the specified dynamic-link library (DLL).
KERNEL32.DLL IsDebuggerPresent Determines if the calling process is being debugged by a user-mode debugger.
KERNEL32.DLL GetTempPathW Retrieves the temporary directory path.
KERNEL32.DLL CreateFileW Creates or opens a file object.
KERNEL32.DLL ReadFile Reads data from a file.
KERNEL32.DLL FindNextFileW Continues file and directory enumeration.
KERNEL32.DLL FindClose Closes a file search handle.
KERNEL32.DLL CloseHandle Closes an open object handle.
KERNEL32.DLL UnmapViewOfFile Unmaps a mapped file view.
KERNEL32.DLL MapViewOfFile Maps a file into memory.
KERNEL32.DLL CreateFileMappingW Creates a file mapping object.
KERNEL32.DLL CreateProcessW Creates and starts a new process.
ADVAPI32.DLL RegCreateKeyExW Creates or opens a registry key.
ADVAPI32.DLL RegSetValueExW Writes data to a registry value.
Windows REG (UNICODE)
Software\Temp
Software\BraveSoftware\Promo
Software\Promo
File Access
USER32.dll
SHELL32.dll
ole32.dll
ADVAPI32.dll
SHLWAPI.dll
KERNEL32.dll
.dat
@.dat
Temp
File Access (UNICODE)
BraveUpdateSetup.exe
kernel32.dll
mscoree.dll
Temp
ProgramFiles
AppData
Interest's Words
PADDINGX
exec
attrib
start
ping
URLs
http://schemas.microsoft.com/SMI/2005/WindowsSettings
http://ocsp.digicert.com
http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
http://cacerts.digicert.com/DigiCertTrustedRootG4.crt
http://crl3.digicert.com/DigiCertTrustedRootG4.crl
http://cacerts.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crt
http://crl3.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crl
http://www.digicert.com/CPS0
http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl
http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl
http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt
Strings/Hex Code Found With The File Rules
Rule Type Encoding Matched (Word)
Hex Hex Pattern PEB AntiDebug (Flag BeingDebugged)
Entry Point Hex Pattern Microsoft Visual C++ 8
Entry Point Hex Pattern Microsoft Visual C++ 8
Entry Point Hex Pattern Microsoft Visual C++ v7.0
Entry Point Hex Pattern PE-Exe Executable Image
Entry Point Hex Pattern VC8 - Microsoft Corporation
Resources
Path DataRVA Size FileOffset CodeText
\B\102\0 26824 106037 23C24 5D00008000D0766F000000000000001B0EFE30A40BA52C5A7B2997ADD2C800983B40FD86FCBE1EFB7AF64456421A4966B22F].....vo..........0...,Z{)......;@......z.DVB.If./
\BRAVEUPDATE\1\0 12C85C 4 129C5C 01000000....
\ICON\1\1033 12C860 128 129C60 2800000010000000200000000100040000000000C00000000000000000000000100000001000000000000000000080000080(....... .........................................
\ICON\2\1033 12C988 568 129D88 2800000010000000200000000100080000000000400100000000000000000000000100000001000000000000800080008000(....... ...........@.............................
\ICON\3\1033 12CEF0 2E8 12A2F0 2800000020000000400000000100040000000000800200000000000000000000100000001000000000000000000080000080(... ...@.........................................
\ICON\4\1033 12D1D8 8A8 12A5D8 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000800080008000(... ...@.........................................
\ICON\5\1033 12DA80 668 12AE80 2800000030000000600000000100040000000000000600000000000000000000000000000000000000000000000080000080(...0............................................
\ICON\6\1033 12E0E8 EA8 12B4E8 2800000030000000600000000100080000000000800A00000000000000000000000100000000000000000000800080008000(...0............................................
\STRING\1321\1025 12EF90 13E 12C390 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1026 12F0D0 1AA 12C4D0 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1027 12F27C 196 12C67C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1028 12F414 CC 12C814 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1029 12F4E0 18A 12C8E0 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1030 12F66C 15A 12CA6C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1031 12F7C8 16A 12CBC8 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1032 12F934 1B0 12CD34 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1033 12FAE4 134 12CEE4 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1035 12FC18 188 12D018 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1036 12FDA0 1C0 12D1A0 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1037 12FF60 142 12D360 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1038 1300A4 164 12D4A4 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1039 130208 150 12D608 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1040 130358 1B0 12D758 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1041 130508 FE 12D908 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1042 130608 F2 12DA08 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1043 1306FC 1B0 12DAFC 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1044 1308AC 180 12DCAC 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1045 130A2C 190 12DE2C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1046 130BBC 15E 12DFBC 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1048 130D1C 1C6 12E11C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1049 130EE4 196 12E2E4 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1050 13107C 19C 12E47C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1051 131218 180 12E618 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1053 131398 1A0 12E798 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1054 131538 15A 12E938 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1055 131694 15A 12EA94 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1056 1317F0 12C 12EBF0 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1057 13191C 178 12ED1C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1058 131A94 16E 12EE94 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1060 131C04 1BC 12F004 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1061 131DC0 14C 12F1C0 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1062 131F0C 1D8 12F30C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1063 1320E4 188 12F4E4 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1065 13226C 138 12F66C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1066 1323A4 158 12F7A4 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1081 1324FC 13C 12F8FC 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1086 132638 15C 12FA38 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1089 132794 172 12FB94 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1093 132908 136 12FD08 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1095 132A40 152 12FE40 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1097 132B94 14E 12FF94 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1098 132CE4 154 1300E4 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1099 132E38 156 130238 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1100 132F90 19A 130390 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1102 13312C 178 13052C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1118 1332A4 F0 1306A4 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\1124 133394 17C 130794 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\2052 133510 CE 130910 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\2057 1335E0 134 1309E0 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\2058 133714 152 130B14 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\2070 133868 188 130C68 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\3082 1339F0 1AA 130DF0 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\STRING\1321\3098 133B9C 1BE 130F9C 0000000000000000000000000000000010004F006D0061006800610043006F006D00700061006E0079004E0061006D006500..................O.m.a.h.a.C.o.m.p.a.n.y.N.a.m.e.
\GROUP_ICON\101\1033 133D5C 5A 13115C 000001000600101010000100040028010000010010100000010008006805000002002020100001000400E802000003002020000001000800A8080000040030301000010004006806000005003030000001000800A80E00000600..............(.............h..... ............ ............00......h.....00............
\VERSION\1\1033 133DB8 334 1311B8 340334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE0000010003004.4...V.S._.V.E.R.S.I.O.N._.I.N.F.O...............
\24\1\0 1340EC 48E 1314EC 3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D227574662D38223F3E0A3C617373656D626C792078<?xml version="1.0" encoding="utf-8"?>.<assembly x
Intelligent String
• 1.3.361.151
• BraveUpdateSetup.exe
• mscoree.dll
• kernel32.dll
• .exe
• mi_exe_stub.pdb
• .tls
• .bss
• <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
• :060U00Uq]dL.g?O0U0E1-Q!m0U0y+m0k0$+0http://ocsp.digicert.com0C+07http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0EU>0<0:864http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0U

Flow Anomalies
Offset FlowVA Section Description
4AF 41B070 .text CALL [static] | Indirect call to absolute memory address
528 41B04C .text CALL [static] | Indirect call to absolute memory address
532 41B038 .text CALL [static] | Indirect call to absolute memory address
557 41B158 .text CALL [static] | Indirect call to absolute memory address
562 41B14C .text CALL [static] | Indirect call to absolute memory address
570 41B134 .text CALL [static] | Indirect call to absolute memory address
5BD 41B160 .text CALL [static] | Indirect call to absolute memory address
5CF 41B08C .text CALL [static] | Indirect call to absolute memory address
5EA 41B090 .text CALL [static] | Indirect call to absolute memory address
620 41B0E4 .text CALL [static] | Indirect call to absolute memory address
635 41B0E0 .text CALL [static] | Indirect call to absolute memory address
6A4 41B0DC .text CALL [static] | Indirect call to absolute memory address
95B 41B170 .text CALL [static] | Indirect call to absolute memory address
9AD 41B1B0 .text CALL [static] | Indirect call to absolute memory address
A13 41B148 .text CALL [static] | Indirect call to absolute memory address
A21 41B130 .text CALL [static] | Indirect call to absolute memory address
A2B 41B038 .text CALL [static] | Indirect call to absolute memory address
AC6 41B174 .text CALL [static] | Indirect call to absolute memory address
B03 41B140 .text CALL [static] | Indirect call to absolute memory address
B24 41B140 .text CALL [static] | Indirect call to absolute memory address
B8A 41B1A4 .text CALL [static] | Indirect call to absolute memory address
C52 41B1B4 .text CALL [static] | Indirect call to absolute memory address
CBA 41B1A0 .text CALL [static] | Indirect call to absolute memory address
D3D 41B148 .text CALL [static] | Indirect call to absolute memory address
DBC 41B150 .text CALL [static] | Indirect call to absolute memory address
1269 41B1A0 .text CALL [static] | Indirect call to absolute memory address
13C2 41B1AC .text CALL [static] | Indirect call to absolute memory address
13F3 41B07C .text CALL [static] | Indirect call to absolute memory address
14B2 41B178 .text CALL [static] | Indirect call to absolute memory address
164C 41B100 .text CALL [static] | Indirect call to absolute memory address
1689 41B150 .text CALL [static] | Indirect call to absolute memory address
16A0 41B13C .text CALL [static] | Indirect call to absolute memory address
1752 41B07C .text CALL [static] | Indirect call to absolute memory address
17CE 41B178 .text CALL [static] | Indirect call to absolute memory address
1822 41B130 .text CALL [static] | Indirect call to absolute memory address
182C 41B038 .text CALL [static] | Indirect call to absolute memory address
1856 41B150 .text CALL [static] | Indirect call to absolute memory address
1860 41B130 .text CALL [static] | Indirect call to absolute memory address
18BA 41B0D4 .text CALL [static] | Indirect call to absolute memory address
1941 41B15C .text CALL [static] | Indirect call to absolute memory address
194F 41B158 .text CALL [static] | Indirect call to absolute memory address
195A 41B14C .text CALL [static] | Indirect call to absolute memory address
1976 41B0FC .text CALL [static] | Indirect call to absolute memory address
1988 41B134 .text CALL [static] | Indirect call to absolute memory address
19A1 41B0F4 .text CALL [static] | Indirect call to absolute memory address
19AC 41B100 .text CALL [static] | Indirect call to absolute memory address
19F6 41B07C .text CALL [static] | Indirect call to absolute memory address
1A2D 41B16C .text CALL [static] | Indirect call to absolute memory address
1B30 41B1CC .text CALL [static] | Indirect call to absolute memory address
1DA2 41B078 .text CALL [static] | Indirect call to absolute memory address
1E75 41B1C4 .text CALL [static] | Indirect call to absolute memory address
1EED 41B07C .text CALL [static] | Indirect call to absolute memory address
1F1C 41B000 .text CALL [static] | Indirect call to absolute memory address
1F2D 41B138 .text CALL [static] | Indirect call to absolute memory address
1F50 41B004 .text CALL [static] | Indirect call to absolute memory address
1F60 41B008 .text CALL [static] | Indirect call to absolute memory address
1FB2 41B07C .text CALL [static] | Indirect call to absolute memory address
201C 41B028 .text CALL [static] | Indirect call to absolute memory address
2023 41B064 .text CALL [static] | Indirect call to absolute memory address
2039 41B1D8 .text CALL [static] | Indirect call to absolute memory address
2101 41B1B4 .text CALL [static] | Indirect call to absolute memory address
224F 41B1D4 .text JMP [static] | Indirect jump to absolute memory address
2287 41B154 .text CALL [static] | Indirect call to absolute memory address
2674 41B15C .text CALL [static] | Indirect call to absolute memory address
2704 41B0B8 .text CALL [static] | Indirect call to absolute memory address
2724 41B0B8 .text CALL [static] | Indirect call to absolute memory address
2BBF 41B144 .text CALL [static] | Indirect call to absolute memory address
2C8B 41B164 .text CALL [static] | Indirect call to absolute memory address
2D45 41B0FC .text CALL [static] | Indirect call to absolute memory address
2D5A 41B180 .text CALL [static] | Indirect call to absolute memory address
2D6D 41B184 .text CALL [static] | Indirect call to absolute memory address
2D8D 41B188 .text CALL [static] | Indirect call to absolute memory address
2DA4 41B100 .text CALL [static] | Indirect call to absolute memory address
2DC5 41B17C .text CALL [static] | Indirect call to absolute memory address
2DD8 41B100 .text CALL [static] | Indirect call to absolute memory address
2DEB 41B100 .text CALL [static] | Indirect call to absolute memory address
2E12 41B150 .text CALL [static] | Indirect call to absolute memory address
2E7D 41B0F8 .text CALL [static] | Indirect call to absolute memory address
2F25 41B0FC .text CALL [static] | Indirect call to absolute memory address
2F59 41B18C .text CALL [static] | Indirect call to absolute memory address
2FA1 41B0F8 .text CALL [static] | Indirect call to absolute memory address
2FC6 41B078 .text CALL [static] | Indirect call to absolute memory address
2FF2 41B100 .text CALL [static] | Indirect call to absolute memory address
3033 41B18C .text CALL [static] | Indirect call to absolute memory address
3102 41B020 .text CALL [static] | Indirect call to absolute memory address
313D 41B194 .text CALL [static] | Indirect call to absolute memory address
3147 41B038 .text CALL [static] | Indirect call to absolute memory address
3159 41B190 .text CALL [static] | Indirect call to absolute memory address
316A 41B198 .text CALL [static] | Indirect call to absolute memory address
32B8 41B138 .text CALL [static] | Indirect call to absolute memory address
3302 41B138 .text CALL [static] | Indirect call to absolute memory address
332F 41B138 .text CALL [static] | Indirect call to absolute memory address
337F 41B10C .text CALL [static] | Indirect call to absolute memory address
338C 41B1BC .text CALL [static] | Indirect call to absolute memory address
3399 41B1B8 .text CALL [static] | Indirect call to absolute memory address
442C 41B1C8 .text CALL [static] | Indirect call to absolute memory address
6260 41B1E0 .text CALL [static] | Indirect call to absolute memory address
6591 41B0A4 .text CALL [static] | Indirect call to absolute memory address
65A0 41B120 .text CALL [static] | Indirect call to absolute memory address
65A9 41B124 .text CALL [static] | Indirect call to absolute memory address
133000 N/A *Overlay* 604B00000002020030824B4B06092A864886F70D | K......0.KK..*.H...
Extra Analysis
Metric Value Percentage
Ascii Code 845561 66,2267%
Null Byte Code 53629 4,2004%
© 2026 All rights reserved.