- DOS Header
- NT Header
- Rich Header
- Sections
- Imports
- Resource
- Exceptions
- Certificate
- Relocations
- IAT
- Delay import
FileHeader
| Characteristics | 0x22 | 34 |
| Machine | 0x8664 | 34404 |
| NumberOfSections | 0x6 | 6 |
| NumberOfSymbols | 0x0 | 0 |
| PointerToSymbolTable | 0x0 | 0 |
| SizeOfOptionalHeader | 0xf0 | 240 |
| TimeDateStamp | 0x5f64ebfa | 1600449530 |
OptionalHeader
| AddressOfEntryPoint | 0xc3aec | 801516 |
| BaseOfCode | 0x1000 | 4096 |
| CheckSum | 0x1475fe | 1340926 |
| DataDirectory | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] |
| DllCharacteristics | 0x8140 | 33088 |
| FileAlignment | 0x200 | 512 |
| ImageBase | 0x140000000 | 5368709120 |
| LoaderFlags | 0x0 | 0 |
| Magic | 0x20b | 523 |
| MajorImageVersion | 0x0 | 0 |
| MajorLinkerVersion | 0x9 | 9 |
| MajorOperatingSystemVersion | 0x5 | 5 |
| MajorSubsystemVersion | 0x5 | 5 |
| MinorImageVersion | 0x0 | 0 |
| MinorLinkerVersion | 0x0 | 0 |
| MinorOperatingSystemVersion | 0x2 | 2 |
| MinorSubsystemVersion | 0x2 | 2 |
| NumberOfRvaAndSizes | 0x10 | 16 |
| SectionAlignment | 0x1000 | 4096 |
| SizeOfCode | 0xc9a00 | 825856 |
| SizeOfHeaders | 0x400 | 1024 |
| SizeOfHeapCommit | 0x1000 | 4096 |
| SizeOfHeapReserve | 0x100000 | 1048576 |
| SizeOfImage | 0x141000 | 1314816 |
| SizeOfInitializedData | 0x74000 | 475136 |
| SizeOfStackCommit | 0x1000 | 4096 |
| SizeOfStackReserve | 0x100000 | 1048576 |
| SizeOfUninitializedData | 0x0 | 0 |
| Subsystem | 0x3 | 3 |
| Win32VersionValue | 0x0 | 0 |