- DOS Header
- NT Header
- Rich Header
- Sections
- Export
- Imports
- Resource
- Exceptions
- Relocations
- Debugs
- Load config
- IAT
- Delay import
File header
Characteristics | 0x2022 | File is executable, Large Address Aware, File is a DLL |
Machine | 0x8664 | x64 |
Number of sections | 0x7 | 7 |
Number of symbols | 0x0 | 0 |
Pointer to symbol table | 0x0 | 0 |
Size of optional header | 0xf0 | 240B |
Time date stamp | 0x8b10cda7 | 2043-12-07 20:50:47.000Z |
Signature | 0x4550 | PE |
Optional header
Address of entrypoint | 0x1dd30 | 122160 |
Base of code | 0x1000 | 4096 |
Checksum | 0x3ad0f | 240911 |
Dll characteristics | 0x4160 | 16736 |
File alignment | 0x1000 | 4096 |
Image base | 0x180000000 | 6442450944 |
Loader flags | 0x0 | 0 |
Magic | 0x20b | PE32+ |
Major image version | 0xa | 10 |
Major linker version | 0xe | 14 |
Major os version | 0xa | 10 |
Major subsystem version | 0xa | EFI Application |
Minor image version | 0x0 | 0 |
Minor linker version | 0x1e | 30 |
Minor os version | 0x0 | 0 |
Minor subsystem version | 0x0 | Unknown |
Number of rva and sizes | 0x10 | 16B |
Section alignment | 0x1000 | 4096 |
Size of code | 0x20000 | 128.00KB |
Size of headers | 0x1000 | 4.00KB |
Size of heap commit | 0x1000 | 4.00KB |
Size of heap reserve | 0x100000 | 1.00MB |
Size of image | 0x32000 | 200.00KB |
Size of initialized data | 0x11000 | 68.00KB |
Size of stack commit | 0x1000 | 4.00KB |
Size of stack reserve | 0x40000 | 256.00KB |
Size of uninitialized data | 0x0 | 0B |
Subsystem | 0x3 | Windows CUI |
Win32 version value | 0x0 | 0 |
Data Directory
Size | Virtual Address | |
---|---|---|
Export Directory | 0x70 | 0x29d10 |
Import Directory | 0x294 | 0x29d80 |
Resource Directory | 0xc58 | 0x30000 |
Exception Directory | 0x1998 | 0x2d000 |
Security Directory | 0x0 | 0x0 |
Base Relocation Table | 0x374 | 0x31000 |
Debug Directory | 0x70 | 0x246f0 |
Architecture specific | 0x0 | 0x0 |
RVA of GlobalPointer | 0x0 | 0x0 |
TLS Directory | 0x0 | 0x0 |
Load Config Directory | 0x140 | 0x21b40 |
Bound Import Directory | 0x0 | 0x0 |
Import Address Table | 0x550 | 0x21c80 |
Delay Import Descriptors | 0x160 | 0x29608 |
COM Runtime Descriptor | 0x0 | 0x0 |
Reserved | 0x0 | 0x0 |