00400000 e_magic uint16 0x5a4d ; IMAGE_DOS_SIGNATURE
00400002 e_cblp int 0
00400004 e_cp int 0
00400006 e_crlc int 0
00400008 e_cparhdr int 0
0040000a e_minalloc int 0
0040000c e_maxalloc int 0
0040000e e_ss uint16 0x0000
00400010 e_sp uint16 0x0000
00400012 e_csum uint16 0x0000
00400014 e_ip uint16 0x0000
00400016 e_cs uint16 0x0000
00400018 e_lfarlc uint16 0x0000
0040001a e_ovno int 0
0040001c e_res [4]uint16 {0, 0, 0, 0}
00400024 e_oemid uint16 0x0000
00400026 e_oeminfo uint16 0x0000
00400028 e_res2 [10]uint16 {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
0040003c e_lfanew uint32 0x400040

00400040 Signature uint32 0x00004550 ; IMAGE_NT_SIGNATURE — "PE\0\0" magic
00400044 FileHeader.Machine uint16 0x014c ; IMAGE_FILE_MACHINE_I386
00400046 FileHeader.NumberOfSections int 3
00400048 FileHeader.TimeDateStamp uint32 0x00000000
0040004c FileHeader.PointerToSymbolTable uint32 0x00000000
00400050 FileHeader.NumberOfSymbols int 0
00400054 FileHeader.SizeOfOptionalHeader int 224
00400056 FileHeader.Characteristics uint16 0x030f ; IMAGE_FILE_RELOCS_STRIPPED|IMAGE_FILE_EXECUTABLE_IMAGE|IMAGE_FILE_LINE_NUMS_STRIPPED|IMAGE_FILE_LOCAL_SYMS_STRIPPED|IMAGE_FILE_32BIT_MACHINE|IMAGE_FILE_DEBUG_STRIPPED
00400058 OptionalHeader.Magic uint16 0x010b ; PE32 (x86_32)
0040005a OptionalHeader.MajorLinkerVersion int 0
0040005b OptionalHeader.MinorLinkerVersion int 0
0040005c OptionalHeader.SizeOfCode int 106496
00400060 OptionalHeader.SizeOfInitializedData int 94208
00400064 OptionalHeader.SizeOfUninitializedData int 5636096
00400068 OptionalHeader.AddressOfEntryPoint uint32 0x401218
0040006c OptionalHeader.BaseOfCode uint32 0x00001000
00400070 OptionalHeader.BaseOfData uint32 0x0000440c
00400074 OptionalHeader.ImageBase uint32 0x00400000
00400078 OptionalHeader.SectionAlignment uint32 0x00001000
0040007c OptionalHeader.FileAlignment uint32 0x00000200
00400080 OptionalHeader.MajorOperatingSystemVersion int 4
00400082 OptionalHeader.MinorOperatingSystemVersion int 0
00400084 OptionalHeader.MajorImageVersion int 1
00400086 OptionalHeader.MinorImageVersion int 0
00400088 OptionalHeader.MajorSubsystemVersion int 4
0040008a OptionalHeader.MinorSubsystemVersion int 0
0040008c OptionalHeader.Win32VersionValue uint32 0x00000000
00400090 OptionalHeader.SizeOfImage uint32 0x00052000
00400094 OptionalHeader.SizeOfHeaders uint32 0x00000200
00400098 OptionalHeader.CheckSum uint32 0x00000000
0040009c OptionalHeader.Subsystem uint16 0x0002 ; IMAGE_SUBSYSTEM_WINDOWS_GUI
0040009e OptionalHeader.DllCharacteristics uint16 0x0000
004000a0 OptionalHeader.SizeOfStackReserve uint32 0x00100000
004000a4 OptionalHeader.SizeOfStackCommit uint32 0x00004500
004000a8 OptionalHeader.SizeOfHeapReserve uint32 0x00100000
004000ac OptionalHeader.SizeOfHeapCommit uint32 0x00001000
004000b0 OptionalHeader.LoaderFlags uint32 0x00000000
004000b4 OptionalHeader.NumberOfRvaAndSizes int 16
004000b8 OptionalHeader.DataDirectory.ExportTable.VirtualAddress uint32 0x00000000
004000bc OptionalHeader.DataDirectory.ExportTable.Size int 0
004000c0 OptionalHeader.DataDirectory.ImportTable.VirtualAddress uint32 0x451000
004000c4 OptionalHeader.DataDirectory.ImportTable.Size int 40
004000c8 OptionalHeader.DataDirectory.Resource.VirtualAddress uint32 0x00033000
004000cc OptionalHeader.DataDirectory.Resource.Size int 10296
004000d0 OptionalHeader.DataDirectory.Exception.VirtualAddress uint32 0x00000000
004000d4 OptionalHeader.DataDirectory.Exception.Size int 0
004000d8 OptionalHeader.DataDirectory.Security.VirtualAddress uint32 0x00000000
004000dc OptionalHeader.DataDirectory.Security.Size int 0
004000e0 OptionalHeader.DataDirectory.BaseReloc.VirtualAddress uint32 0x00000000
004000e4 OptionalHeader.DataDirectory.BaseReloc.Size int 0
004000e8 OptionalHeader.DataDirectory.Debug.VirtualAddress uint32 0x00000000
004000ec OptionalHeader.DataDirectory.Debug.Size int 0
004000f0 OptionalHeader.DataDirectory.Architecture.VirtualAddress uint32 0x00000000
004000f4 OptionalHeader.DataDirectory.Architecture.Size int 0
004000f8 OptionalHeader.DataDirectory.GlobalPtr.VirtualAddress uint32 0x00000000
004000fc OptionalHeader.DataDirectory.GlobalPtr.Size int 0
00400100 OptionalHeader.DataDirectory.TLS.VirtualAddress uint32 0x00000000
00400104 OptionalHeader.DataDirectory.TLS.Size int 0
00400108 OptionalHeader.DataDirectory.LoadConfig.VirtualAddress uint32 0x00000000
0040010c OptionalHeader.DataDirectory.LoadConfig.Size int 0
00400110 OptionalHeader.DataDirectory.BoundImport.VirtualAddress uint32 0x00000000
00400114 OptionalHeader.DataDirectory.BoundImport.Size int 0
00400118 OptionalHeader.DataDirectory.IAT.VirtualAddress uint32 0x00000000
0040011c OptionalHeader.DataDirectory.IAT.Size int 0
00400120 OptionalHeader.DataDirectory.DelayImport.VirtualAddress uint32 0x00000000
00400124 OptionalHeader.DataDirectory.DelayImport.Size int 0
00400128 OptionalHeader.DataDirectory.CLRRuntime.VirtualAddress uint32 0x00000000
0040012c OptionalHeader.DataDirectory.CLRRuntime.Size int 0
00400130 OptionalHeader.DataDirectory.Reserved.VirtualAddress uint32 0x00000000
00400134 OptionalHeader.DataDirectory.Reserved.Size int 0

00400138 Name ascii ""
00400140 VirtualSize uint32 0x00032000
00400144 VirtualAddress uint32 0x401000
00400148 SizeOfRawData uint32 0x0002e400
0040014c PointerToRawData uint32 0x00000200
00400150 PointerToRelocations uint32 0x00000000
00400154 PointerToLineNumbers uint32 0x00000000
00400158 NumberOfRelocations int 0
0040015a NumberOfLineNumbers int 0
0040015c Characteristics uint32 0xc00000e0 ; IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE

00400160 Name ascii ""
00400168 VirtualSize uint32 0x0001e000
0040016c VirtualAddress uint32 0x433000
00400170 SizeOfRawData uint32 0x0001d200
00400174 PointerToRawData uint32 0x0002e600
00400178 PointerToRelocations uint32 0x00000000
0040017c PointerToLineNumbers uint32 0x00000000
00400180 NumberOfRelocations int 0
00400182 NumberOfLineNumbers int 0
00400184 Characteristics uint32 0xe0000020 ; IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE

00400188 Name ascii ".imports"
00400190 VirtualSize uint32 0x00001000
00400194 VirtualAddress uint32 0x451000
00400198 SizeOfRawData uint32 0x00000200
0040019c PointerToRawData uint32 0x0004b800
004001a0 PointerToRelocations uint32 0x00000000
004001a4 PointerToLineNumbers uint32 0x00000000
004001a8 NumberOfRelocations int 0
004001aa NumberOfLineNumbers int 0
004001ac Characteristics uint32 0xc0000040 ; IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
004001b0
004001b0 // align 0x1000 uint32_t