90 lines
2.9 KiB
YAML
90 lines
2.9 KiB
YAML
|
--- !COFF
|
||
|
|
OptionalHeader:
|
||
|
|
AddressOfEntryPoint: 4144
|
||
|
|
ImageBase: 1073741824
|
||
|
|
SectionAlignment: 4096
|
||
|
|
FileAlignment: 512
|
||
|
|
MajorOperatingSystemVersion: 6
|
||
|
|
MinorOperatingSystemVersion: 0
|
||
|
|
MajorImageVersion: 0
|
||
|
|
MinorImageVersion: 0
|
||
|
|
MajorSubsystemVersion: 6
|
||
|
|
MinorSubsystemVersion: 0
|
||
|
|
Subsystem: IMAGE_SUBSYSTEM_WINDOWS_CUI
|
||
|
|
DLLCharacteristics: [ IMAGE_DLL_CHARACTERISTICS_HIGH_ENTROPY_VA, IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE, IMAGE_DLL_CHARACTERISTICS_NX_COMPAT, IMAGE_DLL_CHARACTERISTICS_TERMINAL_SERVER_AWARE ]
|
||
|
|
SizeOfStackReserve: 1048576
|
||
|
|
SizeOfStackCommit: 4096
|
||
|
|
SizeOfHeapReserve: 1048576
|
||
|
|
SizeOfHeapCommit: 4096
|
||
|
|
ExportTable:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
ImportTable:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
ResourceTable:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
ExceptionTable:
|
||
|
|
RelativeVirtualAddress: 16384
|
||
|
|
Size: 24
|
||
|
|
CertificateTable:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
BaseRelocationTable:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
Debug:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
Architecture:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
GlobalPtr:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
TlsTable:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
LoadConfigTable:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
BoundImport:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
IAT:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
DelayImportDescriptor:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
ClrRuntimeHeader:
|
||
|
|
RelativeVirtualAddress: 0
|
||
|
|
Size: 0
|
||
|
|
header:
|
||
|
|
Machine: IMAGE_FILE_MACHINE_AMD64
|
||
|
|
Characteristics: [ IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LARGE_ADDRESS_AWARE ]
|
||
|
|
sections:
|
||
|
|
- Name: .text
|
||
|
|
Characteristics: [ IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ ]
|
||
|
|
VirtualAddress: 4096
|
||
|
|
VirtualSize: 87
|
||
|
|
SectionData: 50894C24048B0DF51F0000034C240489C859C3662E0F1F8400000000000F1F00C3662E0F1F8400000000000F1F440000554883EC30488D6C2430E8E1FFFFFFC745FC00000000B902000000E8B0FFFFFF904883C4305DC3
|
||
|
|
- Name: .rdata
|
||
|
|
Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ]
|
||
|
|
VirtualAddress: 8192
|
||
|
|
VirtualSize: 20
|
||
|
|
SectionData: 0101010001020000010A03350A03055201500000
|
||
|
|
- Name: .data
|
||
|
|
Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ]
|
||
|
|
VirtualAddress: 12288
|
||
|
|
VirtualSize: 4
|
||
|
|
SectionData: '01000000'
|
||
|
|
- Name: .pdata
|
||
|
|
Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ]
|
||
|
|
VirtualAddress: 16384
|
||
|
|
VirtualSize: 24
|
||
|
|
SectionData: '001000001310000000200000301000005710000008200000'
|
||
|
|
symbols: []
|
||
|
|
...
|