| | | |
Offset 11, 15 lines modified | Offset 11, 15 lines modified |
11 | PE·Header: | 11 | PE·Header: |
12 | » ·········Magic·(0x010b):·0x010b | 12 | » ·········Magic·(0x010b):·0x010b |
13 | » ·············LMajor·(6):·0x08 | 13 | » ·············LMajor·(6):·0x08 |
14 | » ·············LMinor·(0):·0x00 | 14 | » ·············LMinor·(0):·0x00 |
15 | » ··············Code·Size:·0x00010a00 | 15 | » ··············Code·Size:·0x00010a00 |
16 | » ··Initialized·Data·Size:·0x00000600 | 16 | » ··Initialized·Data·Size:·0x00000600 |
17 | » Uninitialized·Data·Size:·0x00000000 | 17 | » Uninitialized·Data·Size:·0x00000000 |
18 | » ········Entry·Point·RVA:·0x0001292e | 18 | » ········Entry·Point·RVA:·0x000128fe |
19 | » ·» ··Code·Base·RVA:·0x00002000 | 19 | » ·» ··Code·Base·RVA:·0x00002000 |
20 | » » ··Data·Base·RVA:·0x00014000 | 20 | » » ··Data·Base·RVA:·0x00014000 |
| |
| |
21 | NT·Header: | 21 | NT·Header: |
22 | » ···Image·Base·(0x400000):·0x00400000 | 22 | » ···Image·Base·(0x400000):·0x00400000 |
23 | » Section·Alignment·(8192):·0x00002000 | 23 | » Section·Alignment·(8192):·0x00002000 |
Offset 29, 27 lines modified | Offset 29, 27 lines modified |
29 | » ··» ··User·Major·(0):·0x0000 | 29 | » ··» ··User·Major·(0):·0x0000 |
30 | » ··» ··User·Minor·(0):·0x0000 | 30 | » ··» ··User·Minor·(0):·0x0000 |
31 | » ··» Subsys·major·(4):·0x0004 | 31 | » ··» Subsys·major·(4):·0x0004 |
32 | » ··» Subsys·minor·(0):·0x0000 | 32 | » ··» Subsys·minor·(0):·0x0000 |
33 | » ·» ·······Reserverd:·0x00000000 | 33 | » ·» ·······Reserverd:·0x00000000 |
34 | » ·» ······Image·Size:·0x00018000 | 34 | » ·» ······Image·Size:·0x00018000 |
35 | » ·» ·····Header·Size:·0x00000200 | 35 | » ·» ·····Header·Size:·0x00000200 |
36 | » ············Checksum·(0):·0x00020b82 | 36 | » ············Checksum·(0):·0x000174e8 |
37 | » ···············Subsystem:·0x0003 | 37 | » ···············Subsystem:·0x0003 |
38 | » ···········DLL·Flags·(0):·0x8540 | 38 | » ···········DLL·Flags·(0):·0x8540 |
39 | » ·Stack·Reserve·Size·(1M):·0x00100000 | 39 | » ·Stack·Reserve·Size·(1M):·0x00100000 |
40 | » Stack·commit·Size·(4096):·0x00001000 | 40 | » Stack·commit·Size·(4096):·0x00001000 |
41 | » ··Heap·Reserve·Size·(1M):·0x00100000 | 41 | » ··Heap·Reserve·Size·(1M):·0x00100000 |
42 | » ·Heap·Commit·Size·(4096):·0x00001000 | 42 | » ·Heap·Commit·Size·(4096):·0x00001000 |
43 | » ······Loader·flags·(0x1):·0x00000000 | 43 | » ······Loader·flags·(0x1):·0x00000000 |
44 | » ···Data·Directories·(16):·0x00000010 | 44 | » ···Data·Directories·(16):·0x00000010 |
| |
45 | Data·directories: | 45 | Data·directories: |
46 | » ·····Export·Table:·0x00000000·[0x00000000] | 46 | » ·····Export·Table:·0x00000000·[0x00000000] |
47 | » ·····Import·Table:·0x000128e0·[0x0000004b] | 47 | » ·····Import·Table:·0x000128b0·[0x0000004b] |
48 | » ···Resource·Table:·0x00014000·[0x000003f4] | 48 | » ···Resource·Table:·0x00014000·[0x000003f4] |
49 | » ··Exception·Table:·0x00000000·[0x00000000] | 49 | » ··Exception·Table:·0x00000000·[0x00000000] |
50 | » Certificate·Table:·0x00000000·[0x00000000] | 50 | » Certificate·Table:·0x00000000·[0x00000000] |
51 | » ······Reloc·Table:·0x00016000·[0x0000000c] | 51 | » ······Reloc·Table:·0x00016000·[0x0000000c] |
52 | » ············Debug:·0x00000000·[0x00000000] | 52 | » ············Debug:·0x00000000·[0x00000000] |
53 | » ········Copyright:·0x00000000·[0x00000000] | 53 | » ········Copyright:·0x00000000·[0x00000000] |
54 | » ·······Global·Ptr:·0x00000000·[0x00000000] | 54 | » ·······Global·Ptr:·0x00000000·[0x00000000] |
Offset 57, 15 lines modified | Offset 57, 15 lines modified |
57 | » Load·Config·Table:·0x00000000·[0x00000000] | 57 | » Load·Config·Table:·0x00000000·[0x00000000] |
58 | » ·····Bound·Import:·0x00000000·[0x00000000] | 58 | » ·····Bound·Import:·0x00000000·[0x00000000] |
59 | » ··············IAT:·0x00002000·[0x00000008] | 59 | » ··············IAT:·0x00002000·[0x00000008] |
60 | » Delay·Import·Desc:·0x00000000·[0x00000000] | 60 | » Delay·Import·Desc:·0x00000000·[0x00000000] |
61 | » ·······CLI·Header:·0x00002008·[0x00000048] | 61 | » ·······CLI·Header:·0x00002008·[0x00000048] |
| |
62 | » Name:·.text | 62 | » Name:·.text |
63 | » ···Virtual·Size:·0x00010934 | 63 | » ···Virtual·Size:·0x00010904 |
64 | » Virtual·Address:·0x00002000 | 64 | » Virtual·Address:·0x00002000 |
65 | » ··Raw·Data·Size:·0x00010a00 | 65 | » ··Raw·Data·Size:·0x00010a00 |
66 | » ···Raw·Data·Ptr:·0x00000200 | 66 | » ···Raw·Data·Ptr:·0x00000200 |
67 | » ······Reloc·Ptr:·0x00000000 | 67 | » ······Reloc·Ptr:·0x00000000 |
68 | » ·····LineNo·Ptr:·0x00000000 | 68 | » ·····LineNo·Ptr:·0x00000000 |
69 | » ····Reloc·Count:·0x0000 | 69 | » ····Reloc·Count:·0x0000 |
70 | » ·····Line·Count:·0x0000 | 70 | » ·····Line·Count:·0x0000 |
Offset 92, 31 lines modified | Offset 92, 31 lines modified |
92 | » ····Reloc·Count:·0x0000 | 92 | » ····Reloc·Count:·0x0000 |
93 | » ·····Line·Count:·0x0000 | 93 | » ·····Line·Count:·0x0000 |
94 | » Flags:·data,·discard,·read,· | 94 | » Flags:·data,·discard,·read,· |
| |
95 | ··········CLI·header·size:·72 | 95 | ··········CLI·header·size:·72 |
96 | ·········Runtime·required:·2.5 | 96 | ·········Runtime·required:·2.5 |
97 | ····················Flags:·ilonly,·32/64,·no-trackdebug,·strongnamesigned | 97 | ····················Flags:·ilonly,·32/64,·no-trackdebug,·strongnamesigned |
98 | » ·········Metadata:·0x00007fc4·[0x0000a91c] | 98 | » ·········Metadata:·0x00007fc4·[0x0000a8e0] |
99 | » Entry·Point·Token:·0x00000000 | 99 | » Entry·Point·Token:·0x00000000 |
100 | » ·····Resources·at:·0x00000000·[0x00000000] | 100 | » ·····Resources·at:·0x00000000·[0x00000000] |
101 | » ···Strong·Name·at:·0x00007f44·[0x00000080] | 101 | » ···Strong·Name·at:·0x00007f44·[0x00000080] |
102 | » ··Code·Manager·at:·0x00000000·[0x00000000] | 102 | » ··Code·Manager·at:·0x00000000·[0x00000000] |
103 | » ··VTableFixups·at:·0x00000000·[0x00000000] | 103 | » ··VTableFixups·at:·0x00000000·[0x00000000] |
104 | » ·····EAT·jumps·at:·0x00000000·[0x00000000] | 104 | » ·····EAT·jumps·at:·0x00000000·[0x00000000] |
| |
105 | Strong·name: | 105 | Strong·name: |
106 | » ·73·C9·0F·EA·16·5B·B3·57·FB·5F·DC·57·22·AE·2A·D0 | 106 | » ·A2·25·06·5D·1E·DD·B1·61·5D·34·90·19·57·EB·DC·0A |
107 | » ·EF·1C·CC·83·2B·C8·40·92·4D·28·EA·B4·4B·5D·CC·27 | 107 | » ·16·0B·1D·14·42·06·35·21·18·82·1E·B1·49·7B·F7·2C |
108 | » ·47·5D·B6·23·14·A0·08·7F·F7·0A·03·F0·7C·FA·62·C7 | 108 | » ·71·4D·61·3A·FA·41·9A·1A·8B·FD·E1·69·8F·9F·9E·BD |
109 | » ·1D·5D·7E·98·52·B2·F1·5D·38·EA·54·6F·BD·F1·F8·28 | 109 | » ·E5·CE·93·C8·AA·A1·B3·3A·90·28·EB·27·9D·C5·CE·7E |
110 | » ·F2·04·89·62·87·E0·07·83·AA·D9·73·71·8A·F2·40·1C | 110 | » ·C8·E4·24·A1·90·79·79·57·0B·52·B6·92·45·27·CA·90 |
111 | » ·BD·3C·32·11·BF·8D·85·D7·56·03·57·E3·70·9B·9C·E6 | 111 | » ·D8·F6·1E·66·B8·28·97·7C·FA·D5·87·C5·A7·5E·E1·4E |
112 | » ·37·6B·1C·4D·CD·EA·29·F6·4B·D9·86·5A·55·B7·5C·B1 | 112 | » ·48·1D·0C·CE·24·55·38·51·4C·3B·4E·F6·0A·26·68·0D |
113 | » ·BA·BD·7F·44·92·C3·D6·97·AA·D7·06·04·C3·85·92·27 | 113 | » ·E0·9B·C0·12·9A·5F·69·15·C8·0E·17·4B·3A·97·4D·7A |
| |
114 | Public·key: | 114 | Public·key: |
115 | » ·00·24·00·00·04·80·00·00·94·00·00·00·06·02·00·00 | 115 | » ·00·24·00·00·04·80·00·00·94·00·00·00·06·02·00·00 |
116 | » ·00·24·00·00·52·53·41·31·00·04·00·00·01·00·01·00 | 116 | » ·00·24·00·00·52·53·41·31·00·04·00·00·01·00·01·00 |
117 | » ·79·15·99·77·D2·D0·3A·8E·6B·EA·7A·2E·74·E8·D1·AF | 117 | » ·79·15·99·77·D2·D0·3A·8E·6B·EA·7A·2E·74·E8·D1·AF |
118 | » ·CC·93·E8·85·19·74·95·2B·B4·80·A1·2C·91·34·47·4D | 118 | » ·CC·93·E8·85·19·74·95·2B·B4·80·A1·2C·91·34·47·4D |
119 | » ·04·06·24·47·C3·7E·0E·68·C0·80·53·6F·CF·3C·3F·BE | 119 | » ·04·06·24·47·C3·7E·0E·68·C0·80·53·6F·CF·3C·3F·BE |
Offset 129, 15 lines modified | Offset 129, 15 lines modified |
129 | Metadata·header: | 129 | Metadata·header: |
130 | ···········Version:·1.1 | 130 | ···········Version:·1.1 |
131 | ····Version·string:·v4.0.30319 | 131 | ····Version·string:·v4.0.30319 |
| |
132 | Metadata·pointers: | 132 | Metadata·pointers: |
133 | » Tables·(#~):·0x0000006c·-·0x00006680·[26132·==·0x00006614] | 133 | » Tables·(#~):·0x0000006c·-·0x00006680·[26132·==·0x00006614] |
134 | » ····Strings:·0x00006680·-·0x00009a24·[13220·==·0x000033a4] | 134 | » ····Strings:·0x00006680·-·0x00009a24·[13220·==·0x000033a4] |
135 | » ·······Blob:·0x00009eac·-·0x0000a91c·[2672·==·0x00000a70] | 135 | » ·······Blob:·0x00009eac·-·0x0000a8e0·[2612·==·0x00000a34] |
136 | » User·string:·0x00009a24·-·0x00009e9c·[1144·==·0x00000478] | 136 | » User·string:·0x00009a24·-·0x00009e9c·[1144·==·0x00000478] |
137 | » ·······GUID:·0x00009e9c·-·0x00009eac·[16·==·0x00000010] | 137 | » ·······GUID:·0x00009e9c·-·0x00009eac·[16·==·0x00000010] |
138 | Rows: | 138 | Rows: |
139 | Table·Module:·1·records·(10·bytes,·at·629c) | 139 | Table·Module:·1·records·(10·bytes,·at·629c) |
140 | Table·TypeRef:·60·records·(6·bytes,·at·62a6) | 140 | Table·TypeRef:·60·records·(6·bytes,·at·62a6) |
141 | Table·TypeDef:·48·records·(14·bytes,·at·640e) | 141 | Table·TypeDef:·48·records·(14·bytes,·at·640e) |
142 | Table·Field:·113·records·(6·bytes,·at·66ae) | 142 | Table·Field:·113·records·(6·bytes,·at·66ae) |