| --- !COFF |
| OptionalHeader: |
| AddressOfEntryPoint: 4512 |
| ImageBase: 6442450944 |
| SectionAlignment: 4096 |
| FileAlignment: 512 |
| MajorOperatingSystemVersion: 6 |
| MinorOperatingSystemVersion: 0 |
| MajorImageVersion: 0 |
| MinorImageVersion: 0 |
| MajorSubsystemVersion: 6 |
| MinorSubsystemVersion: 0 |
| Subsystem: IMAGE_SUBSYSTEM_WINDOWS_GUI |
| DLLCharacteristics: [ IMAGE_DLL_CHARACTERISTICS_HIGH_ENTROPY_VA, IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE, IMAGE_DLL_CHARACTERISTICS_NX_COMPAT ] |
| SizeOfStackReserve: 1048576 |
| SizeOfStackCommit: 4096 |
| SizeOfHeapReserve: 1048576 |
| SizeOfHeapCommit: 4096 |
| ExportTable: |
| RelativeVirtualAddress: 6962976 |
| Size: 75 |
| ImportTable: |
| RelativeVirtualAddress: 6963051 |
| Size: 420 |
| ResourceTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| ExceptionTable: |
| RelativeVirtualAddress: 6995968 |
| Size: 1812 |
| CertificateTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| BaseRelocationTable: |
| RelativeVirtualAddress: 7004160 |
| Size: 156 |
| Debug: |
| RelativeVirtualAddress: 6987776 |
| Size: 28 |
| Architecture: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| GlobalPtr: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| TlsTable: |
| RelativeVirtualAddress: 6962168 |
| Size: 40 |
| LoadConfigTable: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| BoundImport: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| IAT: |
| RelativeVirtualAddress: 6965496 |
| Size: 2024 |
| DelayImportDescriptor: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| ClrRuntimeHeader: |
| RelativeVirtualAddress: 0 |
| Size: 0 |
| header: |
| Machine: IMAGE_FILE_MACHINE_AMD64 |
| Characteristics: [ IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LARGE_ADDRESS_AWARE, IMAGE_FILE_DLL ] |
| sections: |
| - Name: .text |
| Characteristics: [ IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 4096 |
| VirtualSize: 59030 |
| SectionData: '' |
| - Name: .rdata |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 65536 |
| VirtualSize: 6919008 |
| SectionData: '' |
| - Name: .buildid |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 6987776 |
| VirtualSize: 53 |
| SectionData: 00000000A9D795620000000002000000190000001CA06A001C040000525344535450075756EAA5DB4C4C44205044422E0100000000 |
| - Name: .data |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ] |
| VirtualAddress: 6991872 |
| VirtualSize: 1960 |
| SectionData: '' |
| - Name: .pdata |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 6995968 |
| VirtualSize: 1812 |
| SectionData: '' |
| - Name: .tls |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ] |
| VirtualAddress: 7000064 |
| VirtualSize: 16 |
| SectionData: '' |
| - Name: .reloc |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 7004160 |
| VirtualSize: 156 |
| SectionData: '' |
| - Name: .debug_info |
| Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ ] |
| VirtualAddress: 7008256 |
| VirtualSize: 64 |
| SectionData: DEADBEEFBAADF00D |
| symbols: [] |
| ... |