file format elf64-x86-64 Sections: Idx Name Size VMA LMA File off Algn Flags 0 START 00000000 0000000000000000 0000000000000000 00000040 2**0 CONTENTS, READONLY 1 PEISDLL0 0000000f 0000000000000000 0000000000000000 00000040 2**0 CONTENTS, READONLY 2 PEISDLL1 00000009 0000000000000000 0000000000000000 0000004f 2**0 CONTENTS, RELOC, READONLY 3 PEMAIN01 00000012 0000000000000000 0000000000000000 00000058 2**0 CONTENTS, RELOC, READONLY 4 PEICONS1 00000007 0000000000000000 0000000000000000 0000006a 2**0 CONTENTS, RELOC, READONLY 5 PEICONS2 00000009 0000000000000000 0000000000000000 00000071 2**0 CONTENTS, RELOC, READONLY 6 PETLSHAK 00000010 0000000000000000 0000000000000000 0000007a 2**0 CONTENTS, RELOC, READONLY 7 PEMAIN02 00000001 0000000000000000 0000000000000000 0000008a 2**0 CONTENTS, READONLY 8 PEMAIN03 00000000 0000000000000000 0000000000000000 0000008b 2**0 CONTENTS, READONLY 9 NRV_HEAD 00000060 0000000000000000 0000000000000000 0000008b 2**0 CONTENTS, READONLY 10 NRV2B 00000083 0000000000000000 0000000000000000 000000eb 2**0 CONTENTS, RELOC, READONLY 11 NRV2D 00000091 0000000000000000 0000000000000000 0000016e 2**0 CONTENTS, RELOC, READONLY 12 NRV2E 000000aa 0000000000000000 0000000000000000 000001ff 2**0 CONTENTS, RELOC, READONLY 13 LZMA_HEAD 00000014 0000000000000000 0000000000000000 000002a9 2**0 CONTENTS, RELOC, READONLY 14 LZMA_ELF00 0000005a 0000000000000000 0000000000000000 000002bd 2**0 CONTENTS, READONLY 15 LZMA_DEC10 000009f7 0000000000000000 0000000000000000 00000317 2**0 CONTENTS, READONLY 16 LZMA_DEC20 000009f7 0000000000000000 0000000000000000 00000d0e 2**0 CONTENTS, READONLY 17 LZMA_DEC30 00000014 0000000000000000 0000000000000000 00001705 2**0 CONTENTS, READONLY 18 LZMA_TAIL 00000002 0000000000000000 0000000000000000 00001719 2**0 CONTENTS, READONLY 19 PEMAIN10 00000001 0000000000000000 0000000000000000 0000171b 2**0 CONTENTS, READONLY 20 PETLSHAK2 00000004 0000000000000000 0000000000000000 0000171c 2**0 CONTENTS, READONLY 21 PECTTPOS 00000007 0000000000000000 0000000000000000 00001720 2**0 CONTENTS, RELOC, READONLY 22 PECTTNUL 00000003 0000000000000000 0000000000000000 00001727 2**0 CONTENTS, READONLY 23 PEFILTER49 0000004d 0000000000000000 0000000000000000 0000172a 2**0 CONTENTS, RELOC, READONLY 24 PEIMPORT 00000034 0000000000000000 0000000000000000 00001777 2**0 CONTENTS, RELOC, READONLY 25 PEIBYORD 00000002 0000000000000000 0000000000000000 000017ab 2**0 CONTENTS, RELOC, READONLY 26 PEK32ORD 00000012 0000000000000000 0000000000000000 000017ad 2**0 CONTENTS, RELOC, READONLY 27 PEIMORD1 0000000a 0000000000000000 0000000000000000 000017bf 2**0 CONTENTS, RELOC, READONLY 28 PEIMPOR2 00000021 0000000000000000 0000000000000000 000017c9 2**0 CONTENTS, RELOC, READONLY 29 PEIERDLL 0000000b 0000000000000000 0000000000000000 000017ea 2**0 CONTENTS, READONLY 30 PEIEREXE 00000006 0000000000000000 0000000000000000 000017f5 2**0 CONTENTS, RELOC, READONLY 31 PEIMDONE 00000004 0000000000000000 0000000000000000 000017fb 2**0 CONTENTS, READONLY 32 PERELOC1 00000007 0000000000000000 0000000000000000 000017ff 2**0 CONTENTS, RELOC, READONLY 33 PERELOC2 00000004 0000000000000000 0000000000000000 00001806 2**0 CONTENTS, READONLY 34 PERELOC3 00000030 0000000000000000 0000000000000000 0000180a 2**0 CONTENTS, RELOC, READONLY 35 REL64BIG 0000000a 0000000000000000 0000000000000000 0000183a 2**0 CONTENTS, RELOC, READONLY 36 RELOC64J 00000002 0000000000000000 0000000000000000 00001844 2**0 CONTENTS, RELOC, READONLY 37 PERLOHI0 0000000a 0000000000000000 0000000000000000 00001846 2**0 CONTENTS, RELOC, READONLY 38 PERELLO0 0000000b 0000000000000000 0000000000000000 00001850 2**0 CONTENTS, READONLY 39 PERELHI0 0000000e 0000000000000000 0000000000000000 0000185b 2**0 CONTENTS, READONLY 40 PEDEPHAK 0000004b 0000000000000000 0000000000000000 00001869 2**0 CONTENTS, RELOC, READONLY 41 PETLSC 0000001b 0000000000000000 0000000000000000 000018b4 2**0 CONTENTS, RELOC, READONLY 42 PEMAIN20 00000004 0000000000000000 0000000000000000 000018cf 2**0 CONTENTS, READONLY 43 CLEARSTACK 00000010 0000000000000000 0000000000000000 000018d3 2**0 CONTENTS, READONLY 44 PEMAIN21 00000000 0000000000000000 0000000000000000 000018e3 2**0 CONTENTS, READONLY 45 PEISDLL9 0000000f 0000000000000000 0000000000000000 000018e3 2**0 CONTENTS, READONLY 46 PERETURN 00000004 0000000000000000 0000000000000000 000018f2 2**0 CONTENTS, READONLY 47 PEDOJUMP 00000005 0000000000000000 0000000000000000 000018f6 2**0 CONTENTS, RELOC, READONLY 48 PETLSC2 00000026 0000000000000000 0000000000000000 000018fb 2**0 CONTENTS, RELOC, READONLY 49 UPX1HEAD 00000020 0000000000000000 0000000000000000 00001921 2**0 CONTENTS, READONLY SYMBOL TABLE: 0000000000000000 l d NRV_HEAD 0000000000000000 NRV_HEAD 0000000000000000 l PEIMDONE 0000000000000000 imports_done 000000000000002b l PEIMPORT 0000000000000000 next_func 000000000000000a l PEIMORD1 0000000000000000 byname 0000000000000018 l PEIMPOR2 0000000000000000 next_imp 000000000000000a l PEIMPOR2 0000000000000000 first_imp 0000000000000002 l RELOC64J 0000000000000000 reloc_endx 0000000000000013 l PERELOC3 0000000000000000 reloc_add 0000000000000000 l d PETLSC2 0000000000000000 PETLSC2 0000000000000000 l d PEMAIN21 0000000000000000 PEMAIN21 0000000000000000 l d START 0000000000000000 START 0000000000000000 l d PEISDLL0 0000000000000000 PEISDLL0 0000000000000000 l d PEISDLL1 0000000000000000 PEISDLL1 0000000000000000 l d PEMAIN01 0000000000000000 PEMAIN01 0000000000000000 l d PEICONS1 0000000000000000 PEICONS1 0000000000000000 l d PEICONS2 0000000000000000 PEICONS2 0000000000000000 l d PETLSHAK 0000000000000000 PETLSHAK 0000000000000000 l d PEMAIN02 0000000000000000 PEMAIN02 0000000000000000 l d PEMAIN03 0000000000000000 PEMAIN03 0000000000000000 l d NRV2B 0000000000000000 NRV2B 0000000000000000 l d NRV2D 0000000000000000 NRV2D 0000000000000000 l d NRV2E 0000000000000000 NRV2E 0000000000000000 l d LZMA_HEAD 0000000000000000 LZMA_HEAD 0000000000000000 l d LZMA_ELF00 0000000000000000 LZMA_ELF00 0000000000000000 l d LZMA_DEC10 0000000000000000 LZMA_DEC10 0000000000000000 l d LZMA_DEC20 0000000000000000 LZMA_DEC20 0000000000000000 l d LZMA_DEC30 0000000000000000 LZMA_DEC30 0000000000000000 l d LZMA_TAIL 0000000000000000 LZMA_TAIL 0000000000000000 l d PEMAIN10 0000000000000000 PEMAIN10 0000000000000000 l d PETLSHAK2 0000000000000000 PETLSHAK2 0000000000000000 l d PECTTPOS 0000000000000000 PECTTPOS 0000000000000000 l d PECTTNUL 0000000000000000 PECTTNUL 0000000000000000 l d PEFILTER49 0000000000000000 PEFILTER49 0000000000000000 l d PEIMPORT 0000000000000000 PEIMPORT 0000000000000000 l d PEIBYORD 0000000000000000 PEIBYORD 0000000000000000 l d PEK32ORD 0000000000000000 PEK32ORD 0000000000000000 l d PEIMORD1 0000000000000000 PEIMORD1 0000000000000000 l d PEIMPOR2 0000000000000000 PEIMPOR2 0000000000000000 l d PEIERDLL 0000000000000000 PEIERDLL 0000000000000000 l d PEIEREXE 0000000000000000 PEIEREXE 0000000000000000 l d PEIMDONE 0000000000000000 PEIMDONE 0000000000000000 l d PERELOC1 0000000000000000 PERELOC1 0000000000000000 l d PERELOC2 0000000000000000 PERELOC2 0000000000000000 l d PERELOC3 0000000000000000 PERELOC3 0000000000000000 l d REL64BIG 0000000000000000 REL64BIG 0000000000000000 l d RELOC64J 0000000000000000 RELOC64J 0000000000000000 l d PERLOHI0 0000000000000000 PERLOHI0 0000000000000000 l d PERELLO0 0000000000000000 PERELLO0 0000000000000000 l d PERELHI0 0000000000000000 PERELHI0 0000000000000000 l d PEDEPHAK 0000000000000000 PEDEPHAK 0000000000000000 l d PETLSC 0000000000000000 PETLSC 0000000000000000 l d PEMAIN20 0000000000000000 PEMAIN20 0000000000000000 l d CLEARSTACK 0000000000000000 CLEARSTACK 0000000000000000 l d PEISDLL9 0000000000000000 PEISDLL9 0000000000000000 l d PERETURN 0000000000000000 PERETURN 0000000000000000 l d PEDOJUMP 0000000000000000 PEDOJUMP 0000000000000000 l d UPX1HEAD 0000000000000000 UPX1HEAD 0000000000000000 *UND* 0000000000000000 start_of_compressed 0000000000000000 *UND* 0000000000000000 start_of_uncompressed 0000000000000000 *UND* 0000000000000000 icon_offset 0000000000000000 *UND* 0000000000000000 icon_delta 0000000000000000 *UND* 0000000000000000 tls_address 0000000000000000 *UND* 0000000000000000 tls_value 0000000000000000 *UND* 0000000000000000 lzma_u_len 0000000000000000 *UND* 0000000000000000 lzma_c_len 0000000000000000 *UND* 0000000000000000 filter_buffer_start 0000000000000000 *UND* 0000000000000000 filter_length 0000000000000000 *UND* 0000000000000000 filter_cto 0000000000000000 *UND* 0000000000000000 compressed_imports 0000000000000000 *UND* 0000000000000000 start_of_imports 0000000000000000 *UND* 0000000000000000 LoadLibraryA 0000000000000000 *UND* 0000000000000000 kernel32_ordinals 0000000000000000 *UND* 0000000000000000 GetProcAddress 0000000000000000 *UND* 0000000000000000 ExitProcess 0000000000000000 *UND* 0000000000000000 start_of_relocs 0000000000000000 *UND* 0000000000000000 reloc_delt 0000000000000000 *UND* 0000000000000000 VirtualProtect 0000000000000000 *UND* 0000000000000000 vp_base 0000000000000000 *UND* 0000000000000000 vp_size 0000000000000000 *UND* 0000000000000000 swri 0000000000000000 *UND* 0000000000000000 tls_module_base 0000000000000000 *UND* 0000000000000000 original_entry 0000000000000000 *UND* 0000000000000000 tls_callbacks_ptr RELOCATION RECORDS FOR [PEISDLL1]: OFFSET TYPE VALUE 0000000000000005 R_X86_64_PC32 PEMAIN21-0x0000000000000004 RELOCATION RECORDS FOR [PEMAIN01]: OFFSET TYPE VALUE 0000000000000007 R_X86_64_PC32 start_of_compressed-0x0000000000000004 000000000000000e R_X86_64_32S start_of_uncompressed RELOCATION RECORDS FOR [PEICONS1]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S icon_offset RELOCATION RECORDS FOR [PEICONS2]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S icon_offset 0000000000000007 R_X86_64_16 icon_delta+0x0000000000008000 RELOCATION RECORDS FOR [PETLSHAK]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S tls_address 000000000000000b R_X86_64_32 tls_value+0x0000000080000000 RELOCATION RECORDS FOR [NRV2B]: OFFSET TYPE VALUE 000000000000007d R_X86_64_PC32 NRV_HEAD+0x000000000000001b RELOCATION RECORDS FOR [NRV2D]: OFFSET TYPE VALUE 0000000000000088 R_X86_64_PC32 NRV_HEAD+0x000000000000001b RELOCATION RECORDS FOR [NRV2E]: OFFSET TYPE VALUE 00000000000000a1 R_X86_64_PC32 NRV_HEAD+0x000000000000001b RELOCATION RECORDS FOR [LZMA_HEAD]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_32 lzma_u_len+0x0000000080000000 0000000000000010 R_X86_64_32 lzma_c_len+0x0000000080000000 RELOCATION RECORDS FOR [PECTTPOS]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S filter_buffer_start RELOCATION RECORDS FOR [PEFILTER49]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_32 filter_length 0000000000000006 R_X86_64_8 filter_cto RELOCATION RECORDS FOR [PEIMPORT]: OFFSET TYPE VALUE 0000000000000007 R_X86_64_32S compressed_imports 0000000000000010 R_X86_64_PC8 imports_done 0000000000000018 R_X86_64_32S start_of_imports 0000000000000025 R_X86_64_PC32 LoadLibraryA-0x0000000000000004 RELOCATION RECORDS FOR [PEIBYORD]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_PC8 byname RELOCATION RECORDS FOR [PEK32ORD]: OFFSET TYPE VALUE 000000000000000c R_X86_64_32S kernel32_ordinals 0000000000000011 R_X86_64_PC8 next_imp RELOCATION RECORDS FOR [PEIMORD1]: OFFSET TYPE VALUE 0000000000000009 R_X86_64_PC8 first_imp RELOCATION RECORDS FOR [PEIMPOR2]: OFFSET TYPE VALUE 000000000000000f R_X86_64_PC32 GetProcAddress-0x0000000000000004 0000000000000020 R_X86_64_PC8 next_func RELOCATION RECORDS FOR [PEIEREXE]: OFFSET TYPE VALUE 0000000000000002 R_X86_64_PC32 ExitProcess-0x0000000000000004 RELOCATION RECORDS FOR [PERELOC1]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S start_of_relocs RELOCATION RECORDS FOR [PERELOC3]: OFFSET TYPE VALUE 000000000000000e R_X86_64_PC8 reloc_endx RELOCATION RECORDS FOR [REL64BIG]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_PC8 reloc_add RELOCATION RECORDS FOR [RELOC64J]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_PC8 reloc_add RELOCATION RECORDS FOR [PERLOHI0]: OFFSET TYPE VALUE 0000000000000006 R_X86_64_32S reloc_delt RELOCATION RECORDS FOR [PEDEPHAK]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_PC32 VirtualProtect-0x0000000000000004 000000000000000a R_X86_64_32S vp_base 000000000000000f R_X86_64_32 vp_size+0x0000000080000000 000000000000002c R_X86_64_32S swri RELOCATION RECORDS FOR [PETLSC]: OFFSET TYPE VALUE 0000000000000002 R_X86_64_PC32 PETLSC2-0x0000000000000005 000000000000000a R_X86_64_32S tls_module_base 0000000000000016 R_X86_64_PC32 PETLSC2-0x0000000000000004 RELOCATION RECORDS FOR [PEDOJUMP]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_PC32 original_entry-0x0000000000000004 RELOCATION RECORDS FOR [PETLSC2]: OFFSET TYPE VALUE 0000000000000005 R_X86_64_PC32 tls_callbacks_ptr-0x0000000000000004