124 lines · yaml
1--- !COFF2OptionalHeader:3 AddressOfEntryPoint: 40964 ImageBase: 53687091205 SectionAlignment: 40966 FileAlignment: 5127 MajorOperatingSystemVersion: 68 MinorOperatingSystemVersion: 09 MajorImageVersion: 010 MinorImageVersion: 011 MajorSubsystemVersion: 612 MinorSubsystemVersion: 013 Subsystem: IMAGE_SUBSYSTEM_WINDOWS_CUI14 DLLCharacteristics: [ IMAGE_DLL_CHARACTERISTICS_HIGH_ENTROPY_VA, IMAGE_DLL_CHARACTERISTICS_NX_COMPAT, IMAGE_DLL_CHARACTERISTICS_TERMINAL_SERVER_AWARE ]15 SizeOfStackReserve: 104857616 SizeOfStackCommit: 409617 SizeOfHeapReserve: 104857618 SizeOfHeapCommit: 409619 ExportTable:20 RelativeVirtualAddress: 021 Size: 022 ImportTable:23 RelativeVirtualAddress: 830424 Size: 6025 ResourceTable:26 RelativeVirtualAddress: 027 Size: 028 ExceptionTable:29 RelativeVirtualAddress: 030 Size: 031 CertificateTable:32 RelativeVirtualAddress: 033 Size: 034 BaseRelocationTable:35 RelativeVirtualAddress: 036 Size: 037 Debug:38 RelativeVirtualAddress: 039 Size: 040 Architecture:41 RelativeVirtualAddress: 042 Size: 043 GlobalPtr:44 RelativeVirtualAddress: 045 Size: 046 TlsTable:47 RelativeVirtualAddress: 048 Size: 049 LoadConfigTable:50 RelativeVirtualAddress: 051 Size: 052 BoundImport:53 RelativeVirtualAddress: 054 Size: 055 IAT:56 RelativeVirtualAddress: 840857 Size: 4058 DelayImportDescriptor:59 RelativeVirtualAddress: 060 Size: 061 ClrRuntimeHeader:62 RelativeVirtualAddress: 063 Size: 064header:65 Machine: IMAGE_FILE_MACHINE_AMD6466 Characteristics: [ IMAGE_FILE_RELOCS_STRIPPED, IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LARGE_ADDRESS_AWARE ]67sections:68 - Name: .text69 Characteristics: [ IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ ]70 VirtualAddress: 409671 VirtualSize: 6172 SectionData: 488B05F91F00000FBE00488B0DF71F00000FBE0901C1488B05F31F00000FBE10488B05F91F00000FBE0001D001C8C3908B051A1000002B05CC0F0000C373 SizeOfRawData: 51274 - Name: .rdata75 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ]76 VirtualAddress: 819277 VirtualSize: 31878 SectionData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izeOfRawData: 51280 - Name: .data81 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ]82 VirtualAddress: 1228883 VirtualSize: 4084 SectionData: E920004001000000F220004001000000D920004001000000D920004001000000EA2000400100000085 SizeOfRawData: 51286symbols:87 - Name: start88 Value: 089 SectionNumber: 190 SimpleType: IMAGE_SYM_TYPE_NULL91 ComplexType: IMAGE_SYM_DTYPE_FUNCTION92 StorageClass: IMAGE_SYM_CLASS_EXTERNAL93 - Name: local2a94 Value: 895 SectionNumber: [[SECTION_OF_LOCAL2A=3]]96 SimpleType: IMAGE_SYM_TYPE_NULL97 ComplexType: IMAGE_SYM_DTYPE_NULL98 StorageClass: IMAGE_SYM_CLASS_EXTERNAL99 - Name: local3a100 Value: 16101 SectionNumber: 3102 SimpleType: IMAGE_SYM_TYPE_NULL103 ComplexType: IMAGE_SYM_DTYPE_NULL104 StorageClass: IMAGE_SYM_CLASS_EXTERNAL105 - Name: _pei386_runtime_relocator106 Value: 48107 SectionNumber: 1108 SimpleType: IMAGE_SYM_TYPE_NULL109 ComplexType: IMAGE_SYM_DTYPE_FUNCTION110 StorageClass: IMAGE_SYM_CLASS_EXTERNAL111 - Name: __RUNTIME_PSEUDO_RELOC_LIST_END__112 Value: [[END=80]]113 SectionNumber: 2114 SimpleType: IMAGE_SYM_TYPE_NULL115 ComplexType: IMAGE_SYM_DTYPE_NULL116 StorageClass: IMAGE_SYM_CLASS_EXTERNAL117 - Name: __RUNTIME_PSEUDO_RELOC_LIST__118 Value: [[BEGIN=8]]119 SectionNumber: [[SECTION_OF_BEGIN=2]]120 SimpleType: IMAGE_SYM_TYPE_NULL121 ComplexType: IMAGE_SYM_DTYPE_NULL122 StorageClass: IMAGE_SYM_CLASS_EXTERNAL123...124