| --- !COFF |
| OptionalHeader: |
| AddressOfEntryPoint: 4144 |
| ImageBase: 1073741824 |
| SectionAlignment: 4096 |
| FileAlignment: 512 |
| MajorOperatingSystemVersion: 6 |
| MinorOperatingSystemVersion: 0 |
| MajorImageVersion: 0 |
| MinorImageVersion: 0 |
| MajorSubsystemVersion: 6 |
| MinorSubsystemVersion: 0 |
| Subsystem: IMAGE_SUBSYSTEM_WINDOWS_CUI |
| DLLCharacteristics: [ IMAGE_DLL_CHARACTERISTICS_HIGH_ENTROPY_VA, IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE, IMAGE_DLL_CHARACTERISTICS_NX_COMPAT, IMAGE_DLL_CHARACTERISTICS_TERMINAL_SERVER_AWARE ] |
| SizeOfStackReserve: 1048576 |
| SizeOfStackCommit: 4096 |
| SizeOfHeapReserve: 1048576 |
| SizeOfHeapCommit: 4096 |
| ExportTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| ImportTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| ResourceTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| ExceptionTable: |
| RelativeVirtualAddress: 16384 |
| Size: 24 |
| CertificateTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| BaseRelocationTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| Debug: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| Architecture: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| GlobalPtr: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| TlsTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| LoadConfigTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| BoundImport: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| IAT: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| DelayImportDescriptor: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| ClrRuntimeHeader: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| header: |
| Machine: IMAGE_FILE_MACHINE_AMD64 |
| Characteristics: [ IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LARGE_ADDRESS_AWARE ] |
| sections: |
| - Name: .text |
| Characteristics: [ IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 4096 |
| VirtualSize: 87 |
| SectionData: 50894C24048B0DF51F0000034C240489C859C3662E0F1F8400000000000F1F00C3662E0F1F8400000000000F1F440000554883EC30488D6C2430E8E1FFFFFFC745FC00000000B902000000E8B0FFFFFF904883C4305DC3 |
| - Name: .rdata |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 8192 |
| VirtualSize: 20 |
| SectionData: 0101010001020000010A03350A03055201500000 |
| - Name: .data |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ] |
| VirtualAddress: 12288 |
| VirtualSize: 4 |
| SectionData: '01000000' |
| - Name: .pdata |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 16384 |
| VirtualSize: 24 |
| SectionData: '001000001310000000200000301000005710000008200000' |
| symbols: [] |
| ... |