- DOS Header
- NT Header
- Rich Header
- Sections
- Export
- Imports
- Resource
- Relocations
- Load config
- IAT
- Delay import
FileHeader
| Characteristics | 0x2102 | 8450 |
| Machine | 0x14c | 332 |
| NumberOfSections | 0x5 | 5 |
| NumberOfSymbols | 0x0 | 0 |
| PointerToSymbolTable | 0x0 | 0 |
| SizeOfOptionalHeader | 0xe0 | 224 |
| TimeDateStamp | 0x61e82e3d | 1642606141 |
OptionalHeader
| AddressOfEntryPoint | 0x3457c | 214396 |
| BaseOfCode | 0x1000 | 4096 |
| BaseOfData | 0x4a000 | 303104 |
| CheckSum | 0xa68ed | 682221 |
| DataDirectory | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] |
| DllCharacteristics | 0x0 | 0 |
| FileAlignment | 0x1000 | 4096 |
| ImageBase | 0x10000000 | 268435456 |
| LoaderFlags | 0x0 | 0 |
| Magic | 0x10b | 267 |
| MajorImageVersion | 0x0 | 0 |
| MajorLinkerVersion | 0x8 | 8 |
| MajorOperatingSystemVersion | 0x4 | 4 |
| MajorSubsystemVersion | 0x4 | 4 |
| MinorImageVersion | 0x0 | 0 |
| MinorLinkerVersion | 0x0 | 0 |
| MinorOperatingSystemVersion | 0x0 | 0 |
| MinorSubsystemVersion | 0x0 | 0 |
| NumberOfRvaAndSizes | 0x10 | 16 |
| SectionAlignment | 0x1000 | 4096 |
| SizeOfCode | 0x49000 | 299008 |
| SizeOfHeaders | 0x1000 | 4096 |
| SizeOfHeapCommit | 0x1000 | 4096 |
| SizeOfHeapReserve | 0x100000 | 1048576 |
| SizeOfImage | 0x9d000 | 643072 |
| SizeOfInitializedData | 0x4f000 | 323584 |
| SizeOfStackCommit | 0x1000 | 4096 |
| SizeOfStackReserve | 0x100000 | 1048576 |
| SizeOfUninitializedData | 0x0 | 0 |
| Subsystem | 0x2 | 2 |
| Win32VersionValue | 0x0 | 0 |