| | | |
Offset 11, 15 lines modified | Offset 11, 15 lines modified |
11 | PE·Header: | 11 | PE·Header: |
12 | » ·········Magic·(0x010b):·0x010b | 12 | » ·········Magic·(0x010b):·0x010b |
13 | » ·············LMajor·(6):·0x08 | 13 | » ·············LMajor·(6):·0x08 |
14 | » ·············LMinor·(0):·0x00 | 14 | » ·············LMinor·(0):·0x00 |
15 | » ··············Code·Size:·0x00010a00 | 15 | » ··············Code·Size:·0x00010a00 |
16 | » ··Initialized·Data·Size:·0x00000600 | 16 | » ··Initialized·Data·Size:·0x00000600 |
17 | » Uninitialized·Data·Size:·0x00000000 | 17 | » Uninitialized·Data·Size:·0x00000000 |
18 | » ········Entry·Point·RVA:·0x0001290e | 18 | » ········Entry·Point·RVA:·0x0001292e |
19 | » ·» ··Code·Base·RVA:·0x00002000 | 19 | » ·» ··Code·Base·RVA:·0x00002000 |
20 | » » ··Data·Base·RVA:·0x00014000 | 20 | » » ··Data·Base·RVA:·0x00014000 |
| |
| |
21 | NT·Header: | 21 | NT·Header: |
22 | » ···Image·Base·(0x400000):·0x00400000 | 22 | » ···Image·Base·(0x400000):·0x00400000 |
23 | » Section·Alignment·(8192):·0x00002000 | 23 | » Section·Alignment·(8192):·0x00002000 |
Offset 29, 27 lines modified | Offset 29, 27 lines modified |
29 | » ··» ··User·Major·(0):·0x0000 | 29 | » ··» ··User·Major·(0):·0x0000 |
30 | » ··» ··User·Minor·(0):·0x0000 | 30 | » ··» ··User·Minor·(0):·0x0000 |
31 | » ··» Subsys·major·(4):·0x0004 | 31 | » ··» Subsys·major·(4):·0x0004 |
32 | » ··» Subsys·minor·(0):·0x0000 | 32 | » ··» Subsys·minor·(0):·0x0000 |
33 | » ·» ·······Reserverd:·0x00000000 | 33 | » ·» ·······Reserverd:·0x00000000 |
34 | » ·» ······Image·Size:·0x00018000 | 34 | » ·» ······Image·Size:·0x00018000 |
35 | » ·» ·····Header·Size:·0x00000200 | 35 | » ·» ·····Header·Size:·0x00000200 |
36 | » ············Checksum·(0):·0x000189f1 | 36 | » ············Checksum·(0):·0x0001de8a |
37 | » ···············Subsystem:·0x0003 | 37 | » ···············Subsystem:·0x0003 |
38 | » ···········DLL·Flags·(0):·0x8540 | 38 | » ···········DLL·Flags·(0):·0x8540 |
39 | » ·Stack·Reserve·Size·(1M):·0x00100000 | 39 | » ·Stack·Reserve·Size·(1M):·0x00100000 |
40 | » Stack·commit·Size·(4096):·0x00001000 | 40 | » Stack·commit·Size·(4096):·0x00001000 |
41 | » ··Heap·Reserve·Size·(1M):·0x00100000 | 41 | » ··Heap·Reserve·Size·(1M):·0x00100000 |
42 | » ·Heap·Commit·Size·(4096):·0x00001000 | 42 | » ·Heap·Commit·Size·(4096):·0x00001000 |
43 | » ······Loader·flags·(0x1):·0x00000000 | 43 | » ······Loader·flags·(0x1):·0x00000000 |
44 | » ···Data·Directories·(16):·0x00000010 | 44 | » ···Data·Directories·(16):·0x00000010 |
| |
45 | Data·directories: | 45 | Data·directories: |
46 | » ·····Export·Table:·0x00000000·[0x00000000] | 46 | » ·····Export·Table:·0x00000000·[0x00000000] |
47 | » ·····Import·Table:·0x000128c0·[0x0000004b] | 47 | » ·····Import·Table:·0x000128e0·[0x0000004b] |
48 | » ···Resource·Table:·0x00014000·[0x000003f4] | 48 | » ···Resource·Table:·0x00014000·[0x000003f4] |
49 | » ··Exception·Table:·0x00000000·[0x00000000] | 49 | » ··Exception·Table:·0x00000000·[0x00000000] |
50 | » Certificate·Table:·0x00000000·[0x00000000] | 50 | » Certificate·Table:·0x00000000·[0x00000000] |
51 | » ······Reloc·Table:·0x00016000·[0x0000000c] | 51 | » ······Reloc·Table:·0x00016000·[0x0000000c] |
52 | » ············Debug:·0x00000000·[0x00000000] | 52 | » ············Debug:·0x00000000·[0x00000000] |
53 | » ········Copyright:·0x00000000·[0x00000000] | 53 | » ········Copyright:·0x00000000·[0x00000000] |
54 | » ·······Global·Ptr:·0x00000000·[0x00000000] | 54 | » ·······Global·Ptr:·0x00000000·[0x00000000] |
Offset 57, 15 lines modified | Offset 57, 15 lines modified |
57 | » Load·Config·Table:·0x00000000·[0x00000000] | 57 | » Load·Config·Table:·0x00000000·[0x00000000] |
58 | » ·····Bound·Import:·0x00000000·[0x00000000] | 58 | » ·····Bound·Import:·0x00000000·[0x00000000] |
59 | » ··············IAT:·0x00002000·[0x00000008] | 59 | » ··············IAT:·0x00002000·[0x00000008] |
60 | » Delay·Import·Desc:·0x00000000·[0x00000000] | 60 | » Delay·Import·Desc:·0x00000000·[0x00000000] |
61 | » ·······CLI·Header:·0x00002008·[0x00000048] | 61 | » ·······CLI·Header:·0x00002008·[0x00000048] |
| |
62 | » Name:·.text | 62 | » Name:·.text |
63 | » ···Virtual·Size:·0x00010914 | 63 | » ···Virtual·Size:·0x00010934 |
64 | » Virtual·Address:·0x00002000 | 64 | » Virtual·Address:·0x00002000 |
65 | » ··Raw·Data·Size:·0x00010a00 | 65 | » ··Raw·Data·Size:·0x00010a00 |
66 | » ···Raw·Data·Ptr:·0x00000200 | 66 | » ···Raw·Data·Ptr:·0x00000200 |
67 | » ······Reloc·Ptr:·0x00000000 | 67 | » ······Reloc·Ptr:·0x00000000 |
68 | » ·····LineNo·Ptr:·0x00000000 | 68 | » ·····LineNo·Ptr:·0x00000000 |
69 | » ····Reloc·Count:·0x0000 | 69 | » ····Reloc·Count:·0x0000 |
70 | » ·····Line·Count:·0x0000 | 70 | » ·····Line·Count:·0x0000 |
Offset 92, 31 lines modified | Offset 92, 31 lines modified |
92 | » ····Reloc·Count:·0x0000 | 92 | » ····Reloc·Count:·0x0000 |
93 | » ·····Line·Count:·0x0000 | 93 | » ·····Line·Count:·0x0000 |
94 | » Flags:·data,·discard,·read,· | 94 | » Flags:·data,·discard,·read,· |
| |
95 | ··········CLI·header·size:·72 | 95 | ··········CLI·header·size:·72 |
96 | ·········Runtime·required:·2.5 | 96 | ·········Runtime·required:·2.5 |
97 | ····················Flags:·ilonly,·32/64,·no-trackdebug,·strongnamesigned | 97 | ····················Flags:·ilonly,·32/64,·no-trackdebug,·strongnamesigned |
98 | » ·········Metadata:·0x00007fc4·[0x0000a8f4] | 98 | » ·········Metadata:·0x00007fc4·[0x0000a91c] |
99 | » Entry·Point·Token:·0x00000000 | 99 | » Entry·Point·Token:·0x00000000 |
100 | » ·····Resources·at:·0x00000000·[0x00000000] | 100 | » ·····Resources·at:·0x00000000·[0x00000000] |
101 | » ···Strong·Name·at:·0x00007f44·[0x00000080] | 101 | » ···Strong·Name·at:·0x00007f44·[0x00000080] |
102 | » ··Code·Manager·at:·0x00000000·[0x00000000] | 102 | » ··Code·Manager·at:·0x00000000·[0x00000000] |
103 | » ··VTableFixups·at:·0x00000000·[0x00000000] | 103 | » ··VTableFixups·at:·0x00000000·[0x00000000] |
104 | » ·····EAT·jumps·at:·0x00000000·[0x00000000] | 104 | » ·····EAT·jumps·at:·0x00000000·[0x00000000] |
| |
105 | Strong·name: | 105 | Strong·name: |
106 | » ·2B·66·30·43·11·FF·E0·2B·6F·20·A0·F3·F9·BC·3F·1D | |
107 | » ·E4·AF·D7·F9·FD·AE·0D·31·9D·5E·C7·84·A5·D8·B9·82 | |
108 | » ·29·CA·E8·F7·63·31·4A·2C·B1·50·4A·C4·D5·92·C5·92 | |
109 | » ·47·53·B2·EE·71·52·67·5B·B6·9B·B5·59·A3·F6·7C·0B | |
110 | » ·19·30·16·2A·65·49·DC·60·FE·AF·1F·3F·90·52·9D·18 | |
111 | » ·E6·F0·6B·DA·FA·72·AD·C6·79·EA·66·A7·94·21·8D·64 | |
112 | » ·A0·E3·71·2F·3C·5C·99·D4·7A·5F·B3·71·65·38·E0·48 | |
113 | » ·30·FE·3A·B4·6C·23·BD·4F·CD·4C·28·F0·D0·5E·88·71 | 106 | » ·05·C4·C7·33·63·4B·5C·D8·F3·0A·C0·D0·B7·78·9D·E5 |
| 107 | » ·5A·5A·4B·3B·A6·2B·D3·D5·25·E6·2E·92·CB·E2·AF·7C |
| 108 | » ·47·C0·23·44·99·04·BE·4C·5F·E6·A3·C7·58·15·5D·C7 |
| 109 | » ·8F·65·FF·B1·52·46·4D·47·13·54·EB·7E·BE·96·32·8B |
| 110 | » ·BF·37·E0·AE·8D·4F·70·32·1C·15·11·50·1E·3C·45·8A |
| 111 | » ·E2·1D·79·C2·4A·32·E9·7C·BE·DA·D7·36·98·9C·9A·90 |
| 112 | » ·D8·DA·64·C8·DA·46·47·C5·08·0F·F0·96·05·A6·F8·63 |
| 113 | » ·AB·A4·63·62·7A·C1·CC·C8·F9·DD·6A·09·05·E4·74·7E |
| |
114 | Public·key: | 114 | Public·key: |
115 | » ·00·24·00·00·04·80·00·00·94·00·00·00·06·02·00·00 | 115 | » ·00·24·00·00·04·80·00·00·94·00·00·00·06·02·00·00 |
116 | » ·00·24·00·00·52·53·41·31·00·04·00·00·01·00·01·00 | 116 | » ·00·24·00·00·52·53·41·31·00·04·00·00·01·00·01·00 |
117 | » ·79·15·99·77·D2·D0·3A·8E·6B·EA·7A·2E·74·E8·D1·AF | 117 | » ·79·15·99·77·D2·D0·3A·8E·6B·EA·7A·2E·74·E8·D1·AF |
118 | » ·CC·93·E8·85·19·74·95·2B·B4·80·A1·2C·91·34·47·4D | 118 | » ·CC·93·E8·85·19·74·95·2B·B4·80·A1·2C·91·34·47·4D |
119 | » ·04·06·24·47·C3·7E·0E·68·C0·80·53·6F·CF·3C·3F·BE | 119 | » ·04·06·24·47·C3·7E·0E·68·C0·80·53·6F·CF·3C·3F·BE |
Offset 129, 15 lines modified | Offset 129, 15 lines modified |
129 | Metadata·header: | 129 | Metadata·header: |
130 | ···········Version:·1.1 | 130 | ···········Version:·1.1 |
131 | ····Version·string:·v4.0.30319 | 131 | ····Version·string:·v4.0.30319 |
| |
132 | Metadata·pointers: | 132 | Metadata·pointers: |
133 | » Tables·(#~):·0x0000006c·-·0x00006680·[26132·==·0x00006614] | 133 | » Tables·(#~):·0x0000006c·-·0x00006680·[26132·==·0x00006614] |
134 | » ····Strings:·0x00006680·-·0x00009a24·[13220·==·0x000033a4] | 134 | » ····Strings:·0x00006680·-·0x00009a24·[13220·==·0x000033a4] |
135 | » ·······Blob:·0x00009eac·-·0x0000a8f4·[2632·==·0x00000a48] | 135 | » ·······Blob:·0x00009eac·-·0x0000a91c·[2672·==·0x00000a70] |
136 | » User·string:·0x00009a24·-·0x00009e9c·[1144·==·0x00000478] | 136 | » User·string:·0x00009a24·-·0x00009e9c·[1144·==·0x00000478] |
137 | » ·······GUID:·0x00009e9c·-·0x00009eac·[16·==·0x00000010] | 137 | » ·······GUID:·0x00009e9c·-·0x00009eac·[16·==·0x00000010] |
138 | Rows: | 138 | Rows: |
139 | Table·Module:·1·records·(10·bytes,·at·629c) | 139 | Table·Module:·1·records·(10·bytes,·at·629c) |
140 | Table·TypeRef:·60·records·(6·bytes,·at·62a6) | 140 | Table·TypeRef:·60·records·(6·bytes,·at·62a6) |
141 | Table·TypeDef:·48·records·(14·bytes,·at·640e) | 141 | Table·TypeDef:·48·records·(14·bytes,·at·640e) |
142 | Table·Field:·113·records·(6·bytes,·at·66ae) | 142 | Table·Field:·113·records·(6·bytes,·at·66ae) |