124 lines · yaml
1--- !COFF2OptionalHeader:3 AddressOfEntryPoint: 40964 ImageBase: 41943045 SectionAlignment: 40966 FileAlignment: 5127 MajorOperatingSystemVersion: 68 MinorOperatingSystemVersion: 09 MajorImageVersion: 010 MinorImageVersion: 011 MajorSubsystemVersion: 612 MinorSubsystemVersion: 013 Subsystem: IMAGE_SUBSYSTEM_WINDOWS_CUI14 DLLCharacteristics: [ IMAGE_DLL_CHARACTERISTICS_NX_COMPAT, IMAGE_DLL_CHARACTERISTICS_TERMINAL_SERVER_AWARE ]15 SizeOfStackReserve: 104857616 SizeOfStackCommit: 409617 SizeOfHeapReserve: 104857618 SizeOfHeapCommit: 409619 ExportTable:20 RelativeVirtualAddress: 021 Size: 022 ImportTable:23 RelativeVirtualAddress: 828824 Size: 6025 ResourceTable:26 RelativeVirtualAddress: 027 Size: 028 ExceptionTable:29 RelativeVirtualAddress: 030 Size: 031 CertificateTable:32 RelativeVirtualAddress: 033 Size: 034 BaseRelocationTable:35 RelativeVirtualAddress: 036 Size: 037 Debug:38 RelativeVirtualAddress: 039 Size: 040 Architecture:41 RelativeVirtualAddress: 042 Size: 043 GlobalPtr:44 RelativeVirtualAddress: 045 Size: 046 TlsTable:47 RelativeVirtualAddress: 048 Size: 049 LoadConfigTable:50 RelativeVirtualAddress: 051 Size: 052 BoundImport:53 RelativeVirtualAddress: 054 Size: 055 IAT:56 RelativeVirtualAddress: 836857 Size: 2058 DelayImportDescriptor:59 RelativeVirtualAddress: 060 Size: 061 ClrRuntimeHeader:62 RelativeVirtualAddress: 063 Size: 064header:65 Machine: IMAGE_FILE_MACHINE_I38666 Characteristics: [ IMAGE_FILE_RELOCS_STRIPPED, IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_32BIT_MACHINE ]67sections:68 - Name: .text69 Characteristics: [ IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ ]70 VirtualAddress: 409671 VirtualSize: 6072 SectionData: A1003040000FBE008B0D043040000FBE0901C1A1083040000FBE10A1103040000FBE0001D001C8C39090909090909090A1502040002B0508204000C373 SizeOfRawData: 51274 - Name: .rdata75 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ]76 VirtualAddress: 819277 VirtualSize: 25478 SectionData: 3377115566228844000000000000000001000000[[SYMBOL0=B0200000]]0030000020000000[[SYMBOL1=B4200000]]0430000020000000[[SYMBOL2=BC200000]]0830000020000000BC2000000C30000020000000B02000001030000020000000FFFFFFFF00000000FFFFFFFF000000009C2000000000000000000000DC200000B0200000A82000000000000000000000ED200000BC2000000000000000000000000000000000000000000000C4200000CC20000000000000D420000000000000C4200000CC20000000000000D420000000000000000073796D310000000073796D320000000073796D3300006578706F7274312E693338362E646C6C006578706F7274322E693338362E646C6C0079 SizeOfRawData: 51280 - Name: .data81 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ]82 VirtualAddress: 1228883 VirtualSize: 2084 SectionData: B1204000B6204000BD204000BD204000B220400085 SizeOfRawData: 51286symbols:87 - Name: _start88 Value: 089 SectionNumber: 190 SimpleType: IMAGE_SYM_TYPE_NULL91 ComplexType: IMAGE_SYM_DTYPE_FUNCTION92 StorageClass: IMAGE_SYM_CLASS_EXTERNAL93 - Name: _local2a94 Value: 495 SectionNumber: [[SECTION_OF_LOCAL2A=3]]96 SimpleType: IMAGE_SYM_TYPE_NULL97 ComplexType: IMAGE_SYM_DTYPE_NULL98 StorageClass: IMAGE_SYM_CLASS_EXTERNAL99 - Name: _local3a100 Value: 8101 SectionNumber: 3102 SimpleType: IMAGE_SYM_TYPE_NULL103 ComplexType: IMAGE_SYM_DTYPE_NULL104 StorageClass: IMAGE_SYM_CLASS_EXTERNAL105 - Name: __pei386_runtime_relocator106 Value: 48107 SectionNumber: 1108 SimpleType: IMAGE_SYM_TYPE_NULL109 ComplexType: IMAGE_SYM_DTYPE_FUNCTION110 StorageClass: IMAGE_SYM_CLASS_EXTERNAL111 - Name: ___RUNTIME_PSEUDO_RELOC_LIST_END__112 Value: [[END=80]]113 SectionNumber: 2114 SimpleType: IMAGE_SYM_TYPE_NULL115 ComplexType: IMAGE_SYM_DTYPE_NULL116 StorageClass: IMAGE_SYM_CLASS_EXTERNAL117 - Name: ___RUNTIME_PSEUDO_RELOC_LIST__118 Value: [[BEGIN=8]]119 SectionNumber: [[SECTION_OF_BEGIN=2]]120 SimpleType: IMAGE_SYM_TYPE_NULL121 ComplexType: IMAGE_SYM_DTYPE_NULL122 StorageClass: IMAGE_SYM_CLASS_EXTERNAL123...124