| | | |
Offset 11, 15 lines modified | Offset 11, 15 lines modified |
11 | PE·Header: | 11 | PE·Header: |
12 | » ·········Magic·(0x010b):·0x010b | 12 | » ·········Magic·(0x010b):·0x010b |
13 | » ·············LMajor·(6):·0x08 | 13 | » ·············LMajor·(6):·0x08 |
14 | » ·············LMinor·(0):·0x00 | 14 | » ·············LMinor·(0):·0x00 |
15 | » ··············Code·Size:·0x00039c00 | 15 | » ··············Code·Size:·0x00039c00 |
16 | » ··Initialized·Data·Size:·0x00000a00 | 16 | » ··Initialized·Data·Size:·0x00000a00 |
17 | » Uninitialized·Data·Size:·0x00000000 | 17 | » Uninitialized·Data·Size:·0x00000000 |
18 | » ········Entry·Point·RVA:·0x0003bb6e | 18 | » ········Entry·Point·RVA:·0x0003bbce |
19 | » ·» ··Code·Base·RVA:·0x00002000 | 19 | » ·» ··Code·Base·RVA:·0x00002000 |
20 | » » ··Data·Base·RVA:·0x0003c000 | 20 | » » ··Data·Base·RVA:·0x0003c000 |
| |
| |
21 | NT·Header: | 21 | NT·Header: |
22 | » ···Image·Base·(0x400000):·0x00400000 | 22 | » ···Image·Base·(0x400000):·0x00400000 |
23 | » Section·Alignment·(8192):·0x00002000 | 23 | » Section·Alignment·(8192):·0x00002000 |
Offset 29, 27 lines modified | Offset 29, 27 lines modified |
29 | » ··» ··User·Major·(0):·0x0000 | 29 | » ··» ··User·Major·(0):·0x0000 |
30 | » ··» ··User·Minor·(0):·0x0000 | 30 | » ··» ··User·Minor·(0):·0x0000 |
31 | » ··» Subsys·major·(4):·0x0004 | 31 | » ··» Subsys·major·(4):·0x0004 |
32 | » ··» Subsys·minor·(0):·0x0000 | 32 | » ··» Subsys·minor·(0):·0x0000 |
33 | » ·» ·······Reserverd:·0x00000000 | 33 | » ·» ·······Reserverd:·0x00000000 |
34 | » ·» ······Image·Size:·0x00042000 | 34 | » ·» ······Image·Size:·0x00042000 |
35 | » ·» ·····Header·Size:·0x00000400 | 35 | » ·» ·····Header·Size:·0x00000400 |
36 | » ············Checksum·(0):·0x0003f897 | 36 | » ············Checksum·(0):·0x00043e14 |
37 | » ···············Subsystem:·0x0003 | 37 | » ···············Subsystem:·0x0003 |
38 | » ···········DLL·Flags·(0):·0x8540 | 38 | » ···········DLL·Flags·(0):·0x8540 |
39 | » ·Stack·Reserve·Size·(1M):·0x00100000 | 39 | » ·Stack·Reserve·Size·(1M):·0x00100000 |
40 | » Stack·commit·Size·(4096):·0x00001000 | 40 | » Stack·commit·Size·(4096):·0x00001000 |
41 | » ··Heap·Reserve·Size·(1M):·0x00100000 | 41 | » ··Heap·Reserve·Size·(1M):·0x00100000 |
42 | » ·Heap·Commit·Size·(4096):·0x00001000 | 42 | » ·Heap·Commit·Size·(4096):·0x00001000 |
43 | » ······Loader·flags·(0x1):·0x00000000 | 43 | » ······Loader·flags·(0x1):·0x00000000 |
44 | » ···Data·Directories·(16):·0x00000010 | 44 | » ···Data·Directories·(16):·0x00000010 |
| |
45 | Data·directories: | 45 | Data·directories: |
46 | » ·····Export·Table:·0x00000000·[0x00000000] | 46 | » ·····Export·Table:·0x00000000·[0x00000000] |
47 | » ·····Import·Table:·0x0003bb20·[0x0000004b] | 47 | » ·····Import·Table:·0x0003bb80·[0x0000004b] |
48 | » ···Resource·Table:·0x0003e000·[0x00000474] | 48 | » ···Resource·Table:·0x0003e000·[0x00000474] |
49 | » ··Exception·Table:·0x00000000·[0x00000000] | 49 | » ··Exception·Table:·0x00000000·[0x00000000] |
50 | » Certificate·Table:·0x00000000·[0x00000000] | 50 | » Certificate·Table:·0x00000000·[0x00000000] |
51 | » ······Reloc·Table:·0x00040000·[0x0000000c] | 51 | » ······Reloc·Table:·0x00040000·[0x0000000c] |
52 | » ············Debug:·0x00000000·[0x00000000] | 52 | » ············Debug:·0x00000000·[0x00000000] |
53 | » ········Copyright:·0x00000000·[0x00000000] | 53 | » ········Copyright:·0x00000000·[0x00000000] |
54 | » ·······Global·Ptr:·0x00000000·[0x00000000] | 54 | » ·······Global·Ptr:·0x00000000·[0x00000000] |
Offset 57, 15 lines modified | Offset 57, 15 lines modified |
57 | » Load·Config·Table:·0x00000000·[0x00000000] | 57 | » Load·Config·Table:·0x00000000·[0x00000000] |
58 | » ·····Bound·Import:·0x00000000·[0x00000000] | 58 | » ·····Bound·Import:·0x00000000·[0x00000000] |
59 | » ··············IAT:·0x00002000·[0x00000008] | 59 | » ··············IAT:·0x00002000·[0x00000008] |
60 | » Delay·Import·Desc:·0x00000000·[0x00000000] | 60 | » Delay·Import·Desc:·0x00000000·[0x00000000] |
61 | » ·······CLI·Header:·0x00002008·[0x00000048] | 61 | » ·······CLI·Header:·0x00002008·[0x00000048] |
| |
62 | » Name:·.text | 62 | » Name:·.text |
63 | » ···Virtual·Size:·0x00039b74 | 63 | » ···Virtual·Size:·0x00039bd4 |
64 | » Virtual·Address:·0x00002000 | 64 | » Virtual·Address:·0x00002000 |
65 | » ··Raw·Data·Size:·0x00039c00 | 65 | » ··Raw·Data·Size:·0x00039c00 |
66 | » ···Raw·Data·Ptr:·0x00000400 | 66 | » ···Raw·Data·Ptr:·0x00000400 |
67 | » ······Reloc·Ptr:·0x00000000 | 67 | » ······Reloc·Ptr:·0x00000000 |
68 | » ·····LineNo·Ptr:·0x00000000 | 68 | » ·····LineNo·Ptr:·0x00000000 |
69 | » ····Reloc·Count:·0x0000 | 69 | » ····Reloc·Count:·0x0000 |
70 | » ·····Line·Count:·0x0000 | 70 | » ·····Line·Count:·0x0000 |
Offset 103, 31 lines modified | Offset 103, 31 lines modified |
103 | » ····Reloc·Count:·0x0000 | 103 | » ····Reloc·Count:·0x0000 |
104 | » ·····Line·Count:·0x0000 | 104 | » ·····Line·Count:·0x0000 |
105 | » Flags:·data,·discard,·read,· | 105 | » Flags:·data,·discard,·read,· |
| |
106 | ··········CLI·header·size:·72 | 106 | ··········CLI·header·size:·72 |
107 | ·········Runtime·required:·2.5 | 107 | ·········Runtime·required:·2.5 |
108 | ····················Flags:·ilonly,·32/64,·no-trackdebug,·strongnamesigned | 108 | ····················Flags:·ilonly,·32/64,·no-trackdebug,·strongnamesigned |
109 | » ·········Metadata:·0x00017fbc·[0x00023b64] | 109 | » ·········Metadata:·0x00017fbc·[0x00023bbc] |
110 | » Entry·Point·Token:·0x00000000 | 110 | » Entry·Point·Token:·0x00000000 |
111 | » ·····Resources·at:·0x00000000·[0x00000000] | 111 | » ·····Resources·at:·0x00000000·[0x00000000] |
112 | » ···Strong·Name·at:·0x00017f3c·[0x00000080] | 112 | » ···Strong·Name·at:·0x00017f3c·[0x00000080] |
113 | » ··Code·Manager·at:·0x00000000·[0x00000000] | 113 | » ··Code·Manager·at:·0x00000000·[0x00000000] |
114 | » ··VTableFixups·at:·0x00000000·[0x00000000] | 114 | » ··VTableFixups·at:·0x00000000·[0x00000000] |
115 | » ·····EAT·jumps·at:·0x00000000·[0x00000000] | 115 | » ·····EAT·jumps·at:·0x00000000·[0x00000000] |
| |
116 | Strong·name: | 116 | Strong·name: |
117 | » ·B4·4E·E0·7D·AF·3B·2E·38·56·C4·49·F4·F7·FC·BA·A6 | 117 | » ·A9·FE·D6·5A·14·3D·CF·E5·A4·91·D9·F8·92·F9·53·11 |
118 | » ·30·05·72·F7·1D·4D·EC·B3·94·69·A0·E8·CB·AF·3F·5A | 118 | » ·F1·22·18·C4·ED·93·69·FD·27·52·5C·F5·5D·9B·FE·78 |
119 | » ·DE·AF·75·D9·59·6C·9C·AC·B3·6E·0A·89·2E·62·D8·6E | 119 | » ·84·22·FF·15·B7·91·96·04·35·06·C5·DB·6B·8A·7E·53 |
120 | » ·49·19·26·19·8D·18·1E·29·D9·07·39·55·05·DB·AB·EF | 120 | » ·67·91·0A·69·E0·14·CB·ED·4E·5C·AF·6C·65·EA·1D·69 |
121 | » ·86·AA·4A·AC·15·0C·4F·0B·E9·C0·FF·A5·AD·8E·84·85 | 121 | » ·EF·DF·02·6E·4C·10·71·C9·79·5A·1C·49·79·FF·31·02 |
122 | » ·5A·E1·29·C8·E7·1A·7D·B5·ED·E4·70·1E·BC·7E·68·47 | 122 | » ·B9·35·2D·AF·2C·75·20·FE·BA·1A·AE·6C·42·B2·EC·5D |
123 | » ·38·1B·F0·57·0D·AB·E3·1B·E0·B1·72·65·07·5B·0E·F7 | 123 | » ·88·10·AD·BD·6B·14·58·86·1D·3E·EE·A5·23·15·F6·A8 |
124 | » ·89·55·DA·F5·21·91·2C·CA·E1·C2·97·40·E0·0F·19·66 | 124 | » ·CE·E0·A7·78·F7·C7·56·07·E4·EC·D1·C3·44·C1·A5·68 |
| |
125 | Public·key: | 125 | Public·key: |
126 | » ·00·24·00·00·04·80·00·00·94·00·00·00·06·02·00·00 | 126 | » ·00·24·00·00·04·80·00·00·94·00·00·00·06·02·00·00 |
127 | » ·00·24·00·00·52·53·41·31·00·04·00·00·11·00·00·00 | 127 | » ·00·24·00·00·52·53·41·31·00·04·00·00·11·00·00·00 |
128 | » ·41·D9·7F·25·DF·AA·46·0B·BA·D7·FF·91·16·1F·C1·C7 | 128 | » ·41·D9·7F·25·DF·AA·46·0B·BA·D7·FF·91·16·1F·C1·C7 |
129 | » ·8F·4B·85·2E·9D·2C·0D·D9·96·69·5C·A8·BA·F4·29·5D | 129 | » ·8F·4B·85·2E·9D·2C·0D·D9·96·69·5C·A8·BA·F4·29·5D |
130 | » ·27·E0·C6·09·A6·2B·95·F9·66·21·EE·83·15·D1·92·23 | 130 | » ·27·E0·C6·09·A6·2B·95·F9·66·21·EE·83·15·D1·92·23 |
Offset 140, 15 lines modified | Offset 140, 15 lines modified |
140 | Metadata·header: | 140 | Metadata·header: |
141 | ···········Version:·1.1 | 141 | ···········Version:·1.1 |
142 | ····Version·string:·v4.0.30319 | 142 | ····Version·string:·v4.0.30319 |
| |
143 | Metadata·pointers: | 143 | Metadata·pointers: |
144 | » Tables·(#~):·0x0000006c·-·0x0000e940·[59604·==·0x0000e8d4] | 144 | » Tables·(#~):·0x0000006c·-·0x0000e940·[59604·==·0x0000e8d4] |
145 | » ····Strings:·0x0000e940·-·0x00016b78·[33336·==·0x00008238] | 145 | » ····Strings:·0x0000e940·-·0x00016b78·[33336·==·0x00008238] |
146 | » ·······Blob:·0x00020f40·-·0x00023b64·[11300·==·0x00002c24] | 146 | » ·······Blob:·0x00020f40·-·0x00023bbc·[11388·==·0x00002c7c] |
147 | » User·string:·0x00016b78·-·0x00020f30·[41912·==·0x0000a3b8] | 147 | » User·string:·0x00016b78·-·0x00020f30·[41912·==·0x0000a3b8] |
148 | » ·······GUID:·0x00020f30·-·0x00020f40·[16·==·0x00000010] | 148 | » ·······GUID:·0x00020f30·-·0x00020f40·[16·==·0x00000010] |
149 | Rows: | 149 | Rows: |
150 | Table·Module:·1·records·(10·bytes,·at·164b0) | 150 | Table·Module:·1·records·(10·bytes,·at·164b0) |
151 | Table·TypeRef:·218·records·(6·bytes,·at·164ba) | 151 | Table·TypeRef:·218·records·(6·bytes,·at·164ba) |
152 | Table·TypeDef:·268·records·(14·bytes,·at·169d6) | 152 | Table·TypeDef:·268·records·(14·bytes,·at·169d6) |
153 | Table·Field:·662·records·(6·bytes,·at·1787e) | 153 | Table·Field:·662·records·(6·bytes,·at·1787e) |