Skip to content

Instantly share code, notes, and snippets.

@adeii

adeii/gist:b2d1015ab08a14e2fb75beafc3616ff5

Created February 23, 2025 14:41
Show Gist options
  • Save adeii/b2d1015ab08a14e2fb75beafc3616ff5 to your computer and use it in GitHub Desktop.
Save adeii/b2d1015ab08a14e2fb75beafc3616ff5 to your computer and use it in GitHub Desktop.
Download ZIP
pre-Chrome 133 x86
Raw
gistfile1.txt
CHROME 130/133 x86 - not working yet
------------------
chrome.exe
===========
b8: 06
C0: 06
110-Security Directory RVA / Size --> 00000000
55 89 E5 53 57 56 83 EC 18 89 D6 89 CF A1 40 60 -- 55 89 E5 53 57 56 83 EC 78 89 D6 89 CF A1 40 60
5B 00 31 E8 89 45 F0 66 0F 76 C0 8D 45 E0 F3 0F -- 5B 00 31 E8 89 45 F0 66 0F 76 C0 8D 45 A0 F3 0F
7F 00 8D 5D DC C7 03 FF FF FF FF 53 6A 10 50 FF -- 7F 00 8D 5D DC C7 03 FF FF FF FF 53 6A 20 50 FF
..
83 3B 10 0F 94 C3 20 C3 80 FB 01 75 27 80 7D E0 -- 83 3B 20 0F 94 C3 20 C3 80 FB 01 75 27 80 7D A0
..
89 4D E1 29 D0 83 C0 13 89 47 18 F3 0F 6F 45 E0 -- 89 4D E1 29 D0 83 C0 13 89 47 18 E9 37 91 06 00
..
83 C4 18 5E 5F 5B 5D C3 CC CC CC CC CC CC CC CC -- 83 C4 78 5E 5F 5B 5D C3 CC CC CC CC CC CC CC CC
F9 E8 AA 1C 01 00 8D 8D 44 FF FF FF 84 C0 74 0A --
F9 E8 AA 1C 01 00 8D 8D 44 FF FF FF 90 90 90 90
FF 5A 59 FF E0
CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC --
CC CC CC CC CC CC CC F3 0F 6F 45 A0 F3 0F 7F 06 F3 0F 6F 45 B0 F3 0F 7F 46 10 E9 B5 6E F9 FF CC ---which one?
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
USERENV.dll -> USERENX.dll (hidden)
KERNEL32.dll -> KERNEL64.dll (CFF explorer-Import directory)
-------------------------------------------------------------------------
chrome_proxy.exe
================
b8: 06
C0: 06
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) 620063007200790070
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
chrome_elf.dll
==============
b8: 06
C0: 06
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
chrome.dll
==========
b8: 06
C0: 06
110-Security Directory RVA / Size --> 00000000
85 C0 74 4E 31 F6 B8 0A 00 00 00 56 50 FF 75 DC -- 90 90 90 90 31 F6 B8 0A 00 00 00 56 50 FF 75 DC
FF D1 31 FF 80 BD EC FE FF FF 00 0F 85 06 07 00 00 C7 85 00 FF FF FF 00 00 00 00 F6 85 E4 FE FF --
FF D1 31 FF 80 BD EC FE FF FF 00 90 90 90 90 90 90 C7 85 00 FF FF FF 00 00 00 00 F6 85 E4 FE FF 20kom
6B 13
8D 55 08 83 C4 04 84 C0 B8 02 08 00 00 B9 00 09 00 00 0F 45 C8 89 4D E4 E9 A7 FA FF FF 8D 45 10 --+
8D 55 08 83 C4 04 84 C0 B8 02 08 00 00 B9 00 00 00 00 0F 45 C8 89 4D E4 E9 A7 FA FF FF 8D 45 10
1C 31 E8 89 45 F0 8B 07 F7 47 20 40 00 10 00 0F 85 30 01 00 00 8D 5D 3C 89 45 D4 C7 00 FF FF FF --+
1C 31 E8 89 45 F0 8B 07 90 90 90 90 90 90 90 90 90 90 90 90 90 8D 5D 3C 89 45 D4 C7 00 FF FF FF
FF FF CC CC CC CC CC CC CC CC CC CC CC CC CC CC
55 89 E5 53 57 56 83 EC 28 A1 40 30 DE 1B 31 E8 --
B8 07 00 00 00 C3 83 EC 28 A1 40 30 DE 1B 31 E8
40 21 1C 31 E8 8kom.
00 31 C0 40 50 53 68 0F 00 00 10 50 FF 75 D8 FF --+
00 31 C0 40 50 53 68 0F 00 00 00 50 FF 75 D8 FF
C2 20 1C 85 C0 74 3B 8B 45 E8 8B 4D EC 89 C2 09 --+
C2 20 1C 90 90 90 90 8B 45 E8 8B 4D EC 89 C2 09
DC 2B 06 84 C0 0F 85 B1 FA FF FF CC 0F 0B 6A 2A --
DC 2B 06 84 C0 E9 B2 FA FF FF 90 CC 0F 0B 6A 2A 2kom.
74 24 20 FF 15 F4 BF 20 1C 85 FF 0F 94 C0 83 7C 24 04 00 0F 95 C1 30 C1 0F 84 B6 01 00 00 89 64 --+
74 24 20 FF 15 F4 BF 20 1C 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 89 64
CF 00 01 00 0F A3 CA 73 0B 8B 0C 85 D8 71 3E 1B --
CF 00 01 00 0F A3 CA 90 90 8B 0C 85 D8 71 3E 1B nema kao
A3 04 00 00 0F A3 CA 73 0B 8B 48 10 3B 0D 28 C3??
40 21 1C 31 E8 89 44 24 28 E8 32 0D B7 00 83 F8 02 0F 85 29 01 00 00 8D 7C 24 24 C7 07 04 00 00 --
40 21 1C 31 E8 89 44 24 28 E8 32 0D B7 00 90 90 90 90 90 90 90 90 90 8D 7C 24 24 C7 07 04 00 00
.. (x7)
83 F8 02 0F 85 AC 00 00 00 89 F1 BA FF FF 00 80 -- 90 90 90 90 90 90 90 90 90 89 F1 BA FF FF 00 80
EB D1 E8 89 5E BA 00 83 F8 02 74 ED E9 97 00 00 -- EB D1 E8 89 5E BA 00 83 F8 02 EB ED E9 97 00 00
EB D1 E8 99 0C B7 00 83 F8 02 0F 85 99 00 00 00 ???C133
CC CC
55 89 E5 53 57 56 83 E4 F8 81 EC C0 00 00 00 89 --
B8 01 00 00 00 C2 04 00 90 81 EC C0 00 00 00 89
..
FC 0A B7 00 83 F8 02 0F 85 3C 01 00 00 8B 7D 08 -- FC 0A B7 00 90 90 90 90 90 90 90 90 90 8B 7D 08
21 1C 31 E8 89 45 F0 E8 84 5B BA 00 83 F8 02 0F -- 21 1C 31 E8 89 45 F0 E8 84 5B BA 00 90 90 90 90
85 2B 01 00 00 89 75 C8 8B 77 48 85 F6 74 15 C7 -- 90 90 90 90 90 89 75 C8 8B 77 48 85 F6 74 15 C7
01 00 00 E8 28 08 B7 00 83 F8 02 0F 85 AF 03 00 -- 01 00 00 E8 28 08 B7 00 90 90 90 90 90 90 90 90
00 31 C0 48 8D BC 24 30 01 00 00 89 47 04 89 07 -- 90 31 C0 48 8D BC 24 30 01 00 00 89 47 04 89 07
DE 1B 31 E8 89 45 F0 E8 34 56 BA 00 83 F8 02 0F 85 D3 00 00 00 89 D9 E8 14 07 00 00 8D 55 EC C7 --
DE 1B 31 E8 89 45 F0 E8 34 56 BA 00 90 90 90 90 90 90 90 90 90 89 D9 E8 14 07 00 00 8D 55 EC C7
21 1C 31 E8 89 45 F0 E8 54 04 B7 00 83 F8 02 0F 85 D3 00 00 00 89 D9 E8 E4 06 00 00 8D 55 EC C7 c133
CC CC
55 89 E5 56 89 CE E8 45 55 BA 00 83 F8 02 75 12 -- 55 89 E5 56 89 CE E8 45 55 BA 00 90 90 90 90 90
55 89 E5 56 89 CE E8 65 03 B7 00 83 F8 02 75 12 c133
.. (x3)
E8 89 45 F4 E8 07 55 BA 00 83 F8 02 75 37 8D 55 -- E8 89 45 F4 E8 07 55 BA 00 90 90 90 90 90 8D 55
E8 89 45 F4 E8 27 03 B7 00 83 F8 02 75 37 8D 55 c133
.. (x3)
CC CC
55 89 E5 53 56 89 CE E8 B4 54 BA 00 83 F8 02 75 21 89 F1 E8 28 05 00 00 89 C3 84 C0 75 06 89 D8
55 89 E5 53 56 89 CE E8 B4 54 BA 00 90 90 90 90 90 89 F1 E8 28 05 00 00 89 C3 84 C0 75 06 89 D8
55 89 E5 53 56 89 CE E8 D4 02 B7 00 83 F8 02 75 c133
.. (x3)
E8 89 45 F4 E8 67 54 BA 00 83 F8 02 75 69 8D 55 -- E8 89 45 F4 E8 67 54 BA 00 90 90 90 90 90 8D 55
E8 89 45 F4 E8 87 02 B7 00 83 F8 02 75 69 8D 55 c133
.. (x8)
30 DE 1B 31 E8 89 44 24 38 E8 D2 53 BA 00 83 F8 02 0F 85 16 01 00 00 8D 5C 24 20 53 E8 EF 45 48 --
30 DE 1B 31 E8 89 44 24 38 E8 D2 53 BA 00 90 90 90 90 90 90 90 90 90 8D 5C 24 20 53 E8 EF 45 48
40 21 1C 31 E8 89 44 24 38 E8 F2 01 B7 00 83 F8 02 0F 85 16 01 00 00 8D 5C 24 20 53 E8 5F 07 C9 c133
30 DE 1B 31 E8 89 44 24 48 E8 42 51 BA 00 83 F8 02 0F 85 10 01 00 00 8B 7E 4C 8B 07 8B 48 24 FF --
30 DE 1B 31 E8 89 44 24 48 E8 42 51 BA 00 90 90 90 90 90 90 90 90 90 8B 7E 4C 8B 07 8B 48 24 FF
40 21 1C 31 E8 89 44 24 48 E8 92 FF B6 00 83 F8 02 0F 85 10 01 00 00 8B 7E 4C 8B 07 8B 48 24 FF C133
30 DE 1B 31 E8 89 44 24 08 E8 62 4F BA 00 83 F8 02 75 44 89 E7 57 E8 85 41 48 FB 83 C4 04 8B 46 --
30 DE 1B 31 E8 89 44 24 08 E8 62 4F BA 00 90 90 90 90 90 89 E7 57 E8 85 41 48 FB 83 C4 04 8B 46
40 21 1C 31 E8 89 44 24 08 E8 B2 FD B6 00 83 F8 02 75 44 89 E7 57 E8 25 03 C9 FA 83 C4 04 8B 46 c133
30 DE 1B 31 E8 89 44 24 20 E8 F2 4E BA 00 83 F8 02 0F 85 BE 00 00 00 89 34 24 83 7E 48 00 0F 84 --
30 DE 1B 31 E8 89 44 24 20 E8 F2 4E BA 00 90 90 90 90 90 90 90 90 90 89 34 24 83 7E 48 00 0F 84
40 21 1C 31 E8 89 44 24 20 E8 42 FD B6 00 83 F8 02 0F 85 AD 00 00 00 89 34 24 83 7E 48 00 0F 84 c133
30 DE 1B 31 E8 89 45 F0 E8 04 4E BA 00 83 F8 02 0F 85 7E 01 00 00 89 7D C8 8B 76 48 85 F6 0F 84 --
30 DE 1B 31 E8 89 45 F0 E8 04 4E BA 00 90 90 90 90 90 90 90 90 90 89 7D C8 8B 76 48 85 F6 0F 84
40 21 1C 31 E8 89 45 F0 E8 64 FC B6 00 83 F8 02 0F 85 4C 01 00 00 89 75 C8 8B 77 48 85 F6 0F 84 c133
30 DE 1B 31 E8 89 45 F0 E8 54 4C BA 00 83 F8 02 0F 85 3B 01 00 00 31 DB 8D 45 D4 89 18 89 58 04 --
30 DE 1B 31 E8 89 45 F0 E8 54 4C BA 00 90 90 90 90 90 90 90 90 90 31 DB 8D 45 D4 89 18 89 58 04
40 21 1C 31 E8 89 45 F0 E8 E4 FA B6 00 83 F8 02 0F 85 1D 01 00 00 31 DB 8D 45 D4 89 18 89 58 04 c133
30 DE 1B 31 E8 89 45 F0 E8 42 49 BA 00 83 F8 02 0F 85 CB 01 00 00 31 C0 48 8D 75 E4 89 06 89 --
30 DE 1B 31 E8 89 45 F0 E8 42 49 BA 00 90 90 90 90 90 90 90 90 90 31 C0 48 8D 75 E4 89 06 89
40 21 1C 31 E8 89 45 F0 E8 32 F8 B6 00 83 F8 02 0F 85 CB 01 00 00 31 C0 48 8D 75 E4 89 06 89 c133
C3 41 1B 9A BB D3 6A 46 87 FC FE 67 55 6A 3B 65 -> 5A EE 59 B8 38 D8 5B 4B A2 E8 1A DC 7D 93 DB 48
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 (62->78)
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden)
bcryptprimitives.dll -> xcryptprimitives.dll (hidden)
user32.dll -> user64.dll (hidden)
mfplat.dll -> xfplat.dll (hidden)
netapi32.dll -> netapi64.dll (hidden)
kernel32.dll -> kernel64.dll
userenv.dll -> userenx.dll
winhttp.dll -> winxttp.dll
-------------------------------------------------------------------------
chrome_wer.exe
=======================
B8- Major Subsystem --> 06
C0- Major Subsystem --> 06
110-Security Directory RVA / Size --> 00000000
-------------------------------------------------------------------------
chrome_pwa_launcher.exe
=======================
B8- Major Subsystem --> 06
C0- Major Subsystem --> 06
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78)
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
notification_helper.exe
=======================
b8: 06
C0: 06
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-------------------------------------------------------------------------
mojo_core.dll
=============
b8: 06
C0: 06
110-Security Directory RVA / Size --> 00000000
b.c.r.y.p.t... -> x.c.r.y.p.t... (hidden) 62 00 63 00 72 00 79 00 70 00 74 00 70 00 -> 78 00 63 00 72 00 79 00 70 00 74 00 70 00 (62->78) x2
KERNEL32.dll -> KERNEL64.dll
-----------------------------------------------------------------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment