1401cb68f
1401cb68f 00 .
1401cd000
1401cd000 struct IMAGE_RESOURCE_DIRECTORY
1401cd000 Characteristics uint32 0x00000000
1401cd004 TimeDateStamp uint32 0x00000000
1401cd008 MajorVersion int 0
1401cd00a MinorVersion int 0
1401cd00c NumberOfNamedEntries int 0
1401cd00e NumberOfIdEntries int 1
1401cd010
1401cd010 struct IMAGE_RESOURCE_TYPE_DIRECTORY_ENTRY
1401cd010 Name int 24 ; RT_MANIFEST
1401cd014 OffsetToData uint32 0x1401cd018
1401cd018
1401cd018 struct IMAGE_RESOURCE_DIRECTORY ← 0x1401cd014
1401cd018 Characteristics uint32 0x00000000
1401cd01c TimeDateStamp uint32 0x00000000
1401cd020 MajorVersion int 0
1401cd022 MinorVersion int 0
1401cd024 NumberOfNamedEntries int 0
1401cd026 NumberOfIdEntries int 1
1401cd028
1401cd028 struct IMAGE_RESOURCE_NAME_DIRECTORY_ENTRY
1401cd028 Name int 1
1401cd02c OffsetToData uint32 0x1401cd030
1401cd030
1401cd030 struct IMAGE_RESOURCE_DIRECTORY ← 0x1401cd02c
1401cd030 Characteristics uint32 0x00000000
1401cd034 TimeDateStamp uint32 0x00000000
1401cd038 MajorVersion int 0
1401cd03a MinorVersion int 0
1401cd03c NumberOfNamedEntries int 0
1401cd03e NumberOfIdEntries int 1
1401cd040
1401cd040 struct IMAGE_RESOURCE_LANGUAGE_DIRECTORY_ENTRY
1401cd040 Name uint32 0x00000000
1401cd044 OffsetToData uint32 0x1401cd048
1401cd048
1401cd048 struct IMAGE_RESOURCE_DATA_ENTRY ← 0x1401cd044
1401cd048 OffsetToData uint32 0x1401cd058
1401cd04c Size int 1167
1401cd050 CodePage int 0
1401cd054 Reserved uint32 0x00000000
1401cd058
1401cd058 string "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>\n<assembly xmlns=\"urn:schemas-microsoft-com:asm.v1\" manifestVersion=\"1.0\">\n <trustInfo xmlns=\"urn:schemas-microsoft-com:asm.v3\">\n <security>\n <requestedPrivileges>\n <requestedExecutionLevel level=\"asInvoker\"/>\n </requestedPrivileges>\n </security>\n </trustInfo>\n <compatibility xmlns=\"urn:schemas-microsoft-com:compatibility.v1\">\n <application>\n <!--The ID below indicates application support for Windows Vista -->\n <supportedOS Id=\"{e2011457-1546-43c5-a5fe-008deee3d3f0}\"/>\n <!--The ID below indicates application support for Windows 7 -->\n <supportedOS Id=\"{35138b9a-5d96-4fbd-8e2d-a2440225f93a}\"/>\n <!--The ID below indicates application support for Windows 8 -->\n <supportedOS Id=\"{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}\"/>\n <!--The ID below indicates application support for Windows 8.1 -->\n <supportedOS Id=\"{1f676c76-80e1-4239-95bb-83d0f6d0da78}\"/> \n <!--The ID below indicates application support for Windows 10 -->\n <supportedOS Id=\"{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}\"/> \n </application>\n </compatibility>\n</assembly>\n",0 ← 0x1401cd048
1401ce000
1401ce000 struct IMAGE_BASE_RELOCATION
1401ce000 VirtualAddress uint32 0x140104000
1401ce004 SizeOfBlock int 152
1401ce008
1401ce008 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce008 TypeOffset uint16 0x140104000
1401ce00a
1401ce00a struct IMAGE_BASE_RELOCATION_ENTRY
1401ce00a TypeOffset uint16 0x140104008
1401ce00c
1401ce00c struct IMAGE_BASE_RELOCATION_ENTRY
1401ce00c TypeOffset uint16 0x140104010
1401ce00e
1401ce00e struct IMAGE_BASE_RELOCATION_ENTRY
1401ce00e TypeOffset uint16 0x140104018
1401ce010
1401ce010 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce010 TypeOffset uint16 0x140104020
1401ce012
1401ce012 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce012 TypeOffset uint16 0x140104028
1401ce014
1401ce014 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce014 TypeOffset uint16 0x140104030
1401ce016
1401ce016 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce016 TypeOffset uint16 0x140104038
1401ce018
1401ce018 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce018 TypeOffset uint16 0x140104040
1401ce01a
1401ce01a struct IMAGE_BASE_RELOCATION_ENTRY
1401ce01a TypeOffset uint16 0x140104048
1401ce01c
1401ce01c struct IMAGE_BASE_RELOCATION_ENTRY
1401ce01c TypeOffset uint16 0x140104050
1401ce01e
1401ce01e struct IMAGE_BASE_RELOCATION_ENTRY
1401ce01e TypeOffset uint16 0x140104058
1401ce020
1401ce020 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce020 TypeOffset uint16 0x140104060
1401ce022
1401ce022 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce022 TypeOffset uint16 0x140104068
1401ce024
1401ce024 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce024 TypeOffset uint16 0x140104070
1401ce026
1401ce026 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce026 TypeOffset uint16 0x140104078
1401ce028
1401ce028 struct IMAGE_BASE_RELOCATION_ENTRY
1401ce028 TypeOffset uint16 0x140104080
1401ce02a
1401ce02a struct IMAGE_BASE_RELOCATION_ENTRY
1401ce02a TypeOffset uint16 0x140104088
1401ce02c
1401ce02c struct IMAGE_BASE_RELOCATION_ENTRY
1401ce02c TypeOffset uint16 0x140104090
1401ce02e
1401ce02e struct IMAGE_BASE_RELOCATION_ENTRY
1401ce02e TypeOffset uint16 0x140104098