MZ Header e_magic 5A4D e_cblp 656B e_cp 6E72 e_crlc 6C65 e_cparhdr 3233 e_minalloc 642E e_maxalloc 6C6C e_ss 0000 e_sp 4550 e_csum 0000 e_ip 014C e_cs 0002 e_lfarlc 0000 e_ovnovalue 0000 e_oemid 00E0 e_oeminfo 010F e_lfanew 00000010 e_res 0000 e_res 0000 e_res 0000 e_res 0000 e_res2 010B e_res2 0000 e_res2 0200 e_res2 0000 e_res2 0000 e_res2 0000 e_res2 0000 e_res2 0000 e_res2 48F5 e_res2 0000 ---------------------------------------------- PE Header NT Signature 00004550 Machine 014C NumberOfSections 0002 TimeDateStamp 00000000 PointerToSymbolTable 00000000 NumberOfSymbols 00000000 SizeOfOptionalHeader 00E0 Characteristics 010F Magic 010B MajorLinkerVersion 00 MinorLinkerVersion 00 SizeOfCode 00000200 SizeOfInitializedData 00000000 SizeOfUninitializedData 00000000 AddressOfEntryPoint 000048F5 BaseOfCode 00000010 ImageBase 00400000 SectionAlignment 00001000 FileAlignment 00000200 MajorOperatingSystemVersion 0004 MinorOperatingSystemVersion 0000 MajorImageVersion 0000 MinorImageVersion 0000 MajorSubsystemVersion 0004 MinorSubsystemVersion 0000 Win32VersionValue 00000000 SizeOfImage 00005000 SizeOfHeaders 00000200 CheckSum 00000000 Subsystem 0002 DllCharacteristics 0000 SizeOfStackReserve 00100000 SizeOfStackCommit 00001000 SizeOfHeapReserve 00100000 SizeOfHeapCommit 00001000 LoaderFlags 00000000 NumberOfRvaAndSizes 00000010 Export Directory (RVA) 00000000 Export Directory (Size) 00000000 Import Directory (RVA) 000048F1 Import Directory (Size) 00000014 Resource Directory (RVA) 00000000 Resource Directory (Size) 00000000 Exception Directory (RVA) 00000000 Exception Directory (Size) 00000000 Security Directory (RVA) 00000000 Security Directory (Size) 00000000 BaseReloc Directory (RVA) 00000000 BaseReloc Directory (Size) 00000000 Debug Directory (RVA) 00000000 Debug Directory (Size) 00000000 Architecture Directory (RVA) 00000000 Architecture Directory (Size) 00000000 GlobalPtr Directory (RVA) 00000000 GlobalPtr Directory (Size) 00000000 Tls Directory (RVA) 00000000 Tls Directory (Size) 00000000 LoadConfig Directory (RVA) 00000000 LoadConfig Directory (Size) 00000000 BoundImport Directory (RVA) 00000000 BoundImport Directory (Size) 00000000 IAT Directory (RVA) 00000000 IAT Directory (Size) 00000000 DelayImport Directory (RVA) 00000000 DelayImport Directory (Size) 00000000 ComDescriptor Directory (RVA) 00000000 ComDescriptor Directory (Size) 00000000 Reserved Directory (RVA) 00000000 Reserved Directory (Size) 00000000 Name 2dsFÒÃ VirtualSize 00003000 VirtualAddress 00001000 SizeOfRawData 00000000 PointerToRawData 00000000 PointerToRelocations 00000000 PointerToLinenumbers 00000000 NumberOfRelocations 00000000 NumberOfLineNumbers 00000000 Characteristics C00000E0 Name ÒuÛŠëÔ VirtualSize 00001000 VirtualAddress 00004000 SizeOfRawData 00000905 PointerToRawData 00000200 PointerToRelocations 00000000 PointerToLinenumbers 00000000 NumberOfRelocations 00000000 NumberOfLineNumbers 00000000 Characteristics 900000E0 ---------------------------------------------- Export Directory Not available ---------------------------------------------- Import Directory DLL Name kernel32.dll OriginalFirstThunk 0000400C TimeDateStamp FFB85EE9 ForwarderChain 000000FF Name 00000002 FirstThunk 0000400C Function Name LoadLibraryA Hint 0040 First Thunk 000048C6 Original First Thunk 000048C6 Function Name GetProcAddress Hint 0041 First Thunk 000048D3 Original First Thunk 000048D3 ---------------------------------------------- Resource Directory Not available ---------------------------------------------- Relocations Directory Not available ---------------------------------------------- TLS Directory Not available ---------------------------------------------- BoundImport Directory Not available ---------------------------------------------- ImportAddressTable Directory Not available ---------------------------------------------- ComHeaderDirectory