mirror of
https://github.com/vivisect/vivisect
synced 2026-06-08 18:04:23 +00:00
10ac973208
example:
```
PE Binary:
DllName: 'dbghelp.dll'
00000000 (64) IMAGE_DOS_HEADER: IMAGE_DOS_HEADER
00000000 (02) e_magic: 0x00005a4d (23117)
00000002 (02) e_cblp: 0x00000090 (144)
00000004 (02) e_cp: 0x00000003 (3)
00000006 (02) e_crlc: 0x00000000 (0)
00000008 (02) e_cparhdr: 0x00000004 (4)
0000000a (02) e_minalloc: 0x00000000 (0)
0000000c (02) e_maxalloc: 0x0000ffff (65535)
0000000e (02) e_ss: 0x00000000 (0)
00000010 (02) e_sp: 0x000000b8 (184)
00000012 (02) e_csum: 0x00000000 (0)
00000014 (02) e_ip: 0x00000000 (0)
00000016 (02) e_cs: 0x00000000 (0)
00000018 (02) e_lfarlc: 0x00000040 (64)
0000001a (02) e_ovno: 0x00000000 (0)
0000001c (08) e_res: VArray
0000001c (02) 0: 0x00000000 (0)
0000001e (02) 1: 0x00000000 (0)
00000020 (02) 2: 0x00000000 (0)
00000022 (02) 3: 0x00000000 (0)
00000024 (02) e_oemid: 0x00000000 (0)
00000026 (02) e_oeminfo: 0x00000000 (0)
00000028 (20) e_res2: VArray
00000028 (02) 0: 0x00000000 (0)
0000002a (02) 1: 0x00000000 (0)
0000002c (02) 2: 0x00000000 (0)
0000002e (02) 3: 0x00000000 (0)
00000030 (02) 4: 0x00000000 (0)
00000032 (02) 5: 0x00000000 (0)
00000034 (02) 6: 0x00000000 (0)
00000036 (02) 7: 0x00000000 (0)
00000038 (02) 8: 0x00000000 (0)
0000003a (02) 9: 0x00000000 (0)
0000003c (04) e_lfanew: 0x00000110 (272)
00000000 (264) IMAGE_NT_HEADERS64: IMAGE_NT_HEADERS64
00000000 (04) Signature: 50450000
00000004 (20) FileHeader: IMAGE_FILE_HEADER
00000004 (02) Machine: 0x00008664 (34404)
00000006 (02) NumberOfSections: 0x00000006 (6)
00000008 (04) TimeDateStamp: 0x50498a0d (1346996749)
0000000c (04) PointerToSymbolTable: 0x00000000 (0)
00000010 (04) NumberOfSymbols: 0x00000000 (0)
00000014 (02) SizeOfOptionalHeader: 0x000000f0 (240)
00000016 (02) Characteristics: 0x00002022 (8226)
00000018 (240) OptionalHeader: IMAGE_OPTIONAL_HEADER64
00000018 (02) Magic: 0b02
0000001a (01) MajorLinkerVersion: 0x0000000a (10)
0000001b (01) MinorLinkerVersion: 0x0000000a (10)
0000001c (04) SizeOfCode: 0x00137e00 (1277440)
00000020 (04) SizeOfInitializedData: 0x00035600 (218624)
00000024 (04) SizeOfUninitializedData: 0x00000000 (0)
00000028 (04) AddressOfEntryPoint: 0x00081840 (530496)
0000002c (04) BaseOfCode: 0x00001000 (4096)
00000030 (08) ImageBase: 0x103000000 (4345298944)
00000038 (04) SectionAlignment: 0x00001000 (4096)
0000003c (04) FileAlignment: 0x00000200 (512)
00000040 (02) MajorOperatingSystemVersion: 0x00000006 (6)
00000042 (02) MinorOperatingSystemVersion: 0x00000002 (2)
00000044 (02) MajorImageVersion: 0x00000006 (6)
00000046 (02) MinorImageVersion: 0x00000002 (2)
00000048 (02) MajorSubsystemVersion: 0x00000005 (5)
0000004a (02) MinorSubsystemVersion: 0x00000002 (2)
0000004c (04) Win32VersionValue: 0x00000000 (0)
00000050 (04) SizeOfImage: 0x00170000 (1507328)
00000054 (04) SizeOfHeaders: 0x00000400 (1024)
00000058 (04) CheckSum: 0x00162df4 (1453556)
0000005c (02) Subsystem: 0x00000003 (3)
0000005e (02) DllCharacteristics: 0x00000140 (320)
00000060 (08) SizeOfStackReserve: 0x00040000 (262144)
00000068 (08) SizeOfStackCommit: 0x00001000 (4096)
00000070 (08) SizeOfHeapReserve: 0x00100000 (1048576)
00000078 (08) SizeOfHeapCommit: 0x00001000 (4096)
00000080 (04) LoaderFlags: 0x00000000 (0)
00000084 (04) NumberOfRvaAndSizes: 0x00000010 (16)
00000088 (128) DataDirectory: VArray
00000088 (08) 0: IMAGE_DATA_DIRECTORY
00000088 (04) VirtualAddress: 0x00137590 (1275280)
0000008c (04) Size: 0x000017c9 (6089)
00000090 (08) 1: IMAGE_DATA_DIRECTORY
00000090 (04) VirtualAddress: 0x00166000 (1466368)
00000094 (04) Size: 0x00000050 (80)
00000098 (08) 2: IMAGE_DATA_DIRECTORY
00000098 (04) VirtualAddress: 0x00168000 (1474560)
0000009c (04) Size: 0x00000620 (1568)
000000a0 (08) 3: IMAGE_DATA_DIRECTORY
000000a0 (04) VirtualAddress: 0x00158000 (1409024)
000000a4 (04) Size: 0x0000dc5c (56412)
000000a8 (08) 4: IMAGE_DATA_DIRECTORY
000000a8 (04) VirtualAddress: 0x00155400 (1397760)
000000ac (04) Size: 0x00003bd0 (15312)
000000b0 (08) 5: IMAGE_DATA_DIRECTORY
000000b0 (04) VirtualAddress: 0x00169000 (1478656)
000000b4 (04) Size: 0x00004238 (16952)
000000b8 (08) 6: IMAGE_DATA_DIRECTORY
000000b8 (04) VirtualAddress: 0x000010b0 (4272)
000000bc (04) Size: 0x0000001c (28)
000000c0 (08) 7: IMAGE_DATA_DIRECTORY
000000c0 (04) VirtualAddress: 0x00000000 (0)
000000c4 (04) Size: 0x00000000 (0)
000000c8 (08) 8: IMAGE_DATA_DIRECTORY
000000c8 (04) VirtualAddress: 0x00000000 (0)
000000cc (04) Size: 0x00000000 (0)
000000d0 (08) 9: IMAGE_DATA_DIRECTORY
000000d0 (04) VirtualAddress: 0x00000000 (0)
000000d4 (04) Size: 0x00000000 (0)
000000d8 (08) 10: IMAGE_DATA_DIRECTORY
000000d8 (04) VirtualAddress: 0x00028b10 (166672)
000000dc (04) Size: 0x00000070 (112)
000000e0 (08) 11: IMAGE_DATA_DIRECTORY
000000e0 (04) VirtualAddress: 0x00000000 (0)
000000e4 (04) Size: 0x00000000 (0)
000000e8 (08) 12: IMAGE_DATA_DIRECTORY
000000e8 (04) VirtualAddress: 0x00166688 (1468040)
000000ec (04) Size: 0x00000638 (1592)
000000f0 (08) 13: IMAGE_DATA_DIRECTORY
000000f0 (04) VirtualAddress: 0x00137520 (1275168)
000000f4 (04) Size: 0x00000040 (64)
000000f8 (08) 14: IMAGE_DATA_DIRECTORY
000000f8 (04) VirtualAddress: 0x00000000 (0)
000000fc (04) Size: 0x00000000 (0)
00000100 (08) 15: IMAGE_DATA_DIRECTORY
00000100 (04) VirtualAddress: 0x00000000 (0)
00000104 (04) Size: 0x00000000 (0)
Sections
00000000 (40) IMAGE_SECTION_HEADER: IMAGE_SECTION_HEADER
00000000 (08) Name: .text
00000008 (04) VirtualSize: 0x00137d59 (1277273)
0000000c (04) VirtualAddress: 0x00001000 (4096)
00000010 (04) SizeOfRawData: 0x00137e00 (1277440)
00000014 (04) PointerToRawData: 0x00000400 (1024)
00000018 (04) PointerToRelocations: 0x00000000 (0)
0000001c (04) PointerToLineNumbers: 0x00000000 (0)
00000020 (02) NumberOfRelocations: 0x00000000 (0)
00000022 (02) NumberOfLineNumbers: 0x00000000 (0)
00000024 (04) Characteristics: 0x60000020 (1610612768)
00000000 (40) IMAGE_SECTION_HEADER: IMAGE_SECTION_HEADER
00000000 (08) Name: .data
00000008 (04) VirtualSize: 0x0001ee50 (126544)
0000000c (04) VirtualAddress: 0x00139000 (1282048)
00000010 (04) SizeOfRawData: 0x00006c00 (27648)
00000014 (04) PointerToRawData: 0x00138200 (1278464)
00000018 (04) PointerToRelocations: 0x00000000 (0)
0000001c (04) PointerToLineNumbers: 0x00000000 (0)
00000020 (02) NumberOfRelocations: 0x00000000 (0)
00000022 (02) NumberOfLineNumbers: 0x00000000 (0)
00000024 (04) Characteristics: 0xc0000040 (3221225536)
00000000 (40) IMAGE_SECTION_HEADER: IMAGE_SECTION_HEADER
00000000 (08) Name: .pdata
00000008 (04) VirtualSize: 0x0000dc5c (56412)
0000000c (04) VirtualAddress: 0x00158000 (1409024)
00000010 (04) SizeOfRawData: 0x0000de00 (56832)
00000014 (04) PointerToRawData: 0x0013ee00 (1306112)
00000018 (04) PointerToRelocations: 0x00000000 (0)
0000001c (04) PointerToLineNumbers: 0x00000000 (0)
00000020 (02) NumberOfRelocations: 0x00000000 (0)
00000022 (02) NumberOfLineNumbers: 0x00000000 (0)
00000024 (04) Characteristics: 0x40000040 (1073741888)
00000000 (40) IMAGE_SECTION_HEADER: IMAGE_SECTION_HEADER
00000000 (08) Name: .idata
00000008 (04) VirtualSize: 0x0000188c (6284)
0000000c (04) VirtualAddress: 0x00166000 (1466368)
00000010 (04) SizeOfRawData: 0x00001a00 (6656)
00000014 (04) PointerToRawData: 0x0014cc00 (1362944)
00000018 (04) PointerToRelocations: 0x00000000 (0)
0000001c (04) PointerToLineNumbers: 0x00000000 (0)
00000020 (02) NumberOfRelocations: 0x00000000 (0)
00000022 (02) NumberOfLineNumbers: 0x00000000 (0)
00000024 (04) Characteristics: 0x40000040 (1073741888)
00000000 (40) IMAGE_SECTION_HEADER: IMAGE_SECTION_HEADER
00000000 (08) Name: .rsrc
00000008 (04) VirtualSize: 0x00000620 (1568)
0000000c (04) VirtualAddress: 0x00168000 (1474560)
00000010 (04) SizeOfRawData: 0x00000800 (2048)
00000014 (04) PointerToRawData: 0x0014e600 (1369600)
00000018 (04) PointerToRelocations: 0x00000000 (0)
0000001c (04) PointerToLineNumbers: 0x00000000 (0)
00000020 (02) NumberOfRelocations: 0x00000000 (0)
00000022 (02) NumberOfLineNumbers: 0x00000000 (0)
00000024 (04) Characteristics: 0x40000040 (1073741888)
00000000 (40) IMAGE_SECTION_HEADER: IMAGE_SECTION_HEADER
00000000 (08) Name: .reloc
00000008 (04) VirtualSize: 0x000065be (26046)
0000000c (04) VirtualAddress: 0x00169000 (1478656)
00000010 (04) SizeOfRawData: 0x00006600 (26112)
00000014 (04) PointerToRawData: 0x0014ee00 (1371648)
00000018 (04) PointerToRelocations: 0x00000000 (0)
0000001c (04) PointerToLineNumbers: 0x00000000 (0)
00000020 (02) NumberOfRelocations: 0x00000000 (0)
00000022 (02) NumberOfLineNumbers: 0x00000000 (0)
00000024 (04) Characteristics: 0x42000040 (1107296320)
Resources
PDB Path: 'dbghelp.pdb'
```