file format elf64-x86-64 Sections: Idx Name Size VMA LMA File off Algn Flags 0 START 0 0 0 040 2**0 CONTENTS 1 PEISDLL0 0f 0 0 040 2**0 CONTENTS 2 PEISEFI0 02 0 0 04f 2**0 CONTENTS 3 PEISDLL1 09 0 0 051 2**0 CONTENTS 4 PEMAIN01 012 0 0 05a 2**0 CONTENTS 5 PEICONS1 07 0 0 06c 2**0 CONTENTS 6 PEICONS2 09 0 0 073 2**0 CONTENTS 7 PETLSHAK 010 0 0 07c 2**0 CONTENTS 8 PEMAIN02 01 0 0 08c 2**0 CONTENTS 9 PEMAIN03 0 0 0 08d 2**0 CONTENTS 10 NRV_HEAD 060 0 0 08d 2**0 CONTENTS 11 NRV2B 083 0 0 0ed 2**0 CONTENTS 12 NRV2D 091 0 0 0170 2**0 CONTENTS 13 NRV2E 0aa 0 0 0201 2**0 CONTENTS 14 LZMA_HEAD 014 0 0 02ab 2**0 CONTENTS 15 LZMA_ELF00 05a 0 0 02bf 2**0 CONTENTS 16 LZMA_DEC20 0a01 0 0 0319 2**0 CONTENTS 17 LZMA_DEC30 014 0 0 0d1a 2**0 CONTENTS 18 LZMA_TAIL 02 0 0 0d2e 2**0 CONTENTS 19 PEMAIN10 01 0 0 0d30 2**0 CONTENTS 20 PETLSHAK2 04 0 0 0d31 2**0 CONTENTS 21 PECTTPOS 07 0 0 0d35 2**0 CONTENTS 22 PECTTNUL 03 0 0 0d3c 2**0 CONTENTS 23 PEFILTER49 052 0 0 0d3f 2**0 CONTENTS 24 PEIMPORT 034 0 0 0d91 2**0 CONTENTS 25 PEIBYORD 02 0 0 0dc5 2**0 CONTENTS 26 PEK32ORD 012 0 0 0dc7 2**0 CONTENTS 27 PEIMORD1 0a 0 0 0dd9 2**0 CONTENTS 28 PEIMPOR2 021 0 0 0de3 2**0 CONTENTS 29 PEIERDLL 0b 0 0 0e04 2**0 CONTENTS 30 PEIEREXE 06 0 0 0e0f 2**0 CONTENTS 31 PEIMDONE 04 0 0 0e15 2**0 CONTENTS 32 PERELOC1 07 0 0 0e19 2**0 CONTENTS 33 PERELOC2 04 0 0 0e20 2**0 CONTENTS 34 PERELOC3 030 0 0 0e24 2**0 CONTENTS 35 REL64BIG 0a 0 0 0e54 2**0 CONTENTS 36 RELOC64J 02 0 0 0e5e 2**0 CONTENTS 37 PERLOHI0 0a 0 0 0e60 2**0 CONTENTS 38 PERELLO0 0b 0 0 0e6a 2**0 CONTENTS 39 PERELHI0 0e 0 0 0e75 2**0 CONTENTS 40 PEDEPHAK 04b 0 0 0e83 2**0 CONTENTS 41 PETLSC 01b 0 0 0ece 2**0 CONTENTS 42 PEMAIN20 04 0 0 0ee9 2**0 CONTENTS 43 CLEARSTACK 010 0 0 0eed 2**0 CONTENTS 44 PEMAIN21 0 0 0 0efd 2**0 CONTENTS 45 PEISDLL9 0f 0 0 0efd 2**0 CONTENTS 46 PEISEFI9 02 0 0 0f0c 2**0 CONTENTS 47 PERETURN 04 0 0 0f0e 2**0 CONTENTS 48 PEDOJUMP 05 0 0 0f12 2**0 CONTENTS 49 PETLSC2 026 0 0 0f17 2**0 CONTENTS 50 UPX1HEAD 020 0 0 0f3d 2**0 CONTENTS SYMBOL TABLE: 0000000000000000 l d NRV_HEAD 0 NRV_HEAD 0000000000000000 l PEIMDONE 0 imports_done 000000000000002b l PEIMPORT 0 next_func 000000000000000a l PEIMORD1 0 byname 0000000000000018 l PEIMPOR2 0 next_imp 000000000000000a l PEIMPOR2 0 first_imp 0000000000000002 l RELOC64J 0 reloc_endx 0000000000000013 l PERELOC3 0 reloc_add 0000000000000000 l d PETLSC2 0 PETLSC2 0000000000000000 l d PEMAIN21 0 PEMAIN21 0000000000000000 l d START 0 START 0000000000000000 l d PEISDLL0 0 PEISDLL0 0000000000000000 l d PEISEFI0 0 PEISEFI0 0000000000000000 l d PEISDLL1 0 PEISDLL1 0000000000000000 l d PEMAIN01 0 PEMAIN01 0000000000000000 l d PEICONS1 0 PEICONS1 0000000000000000 l d PEICONS2 0 PEICONS2 0000000000000000 l d PETLSHAK 0 PETLSHAK 0000000000000000 l d PEMAIN02 0 PEMAIN02 0000000000000000 l d PEMAIN03 0 PEMAIN03 0000000000000000 l d NRV2B 0 NRV2B 0000000000000000 l d NRV2D 0 NRV2D 0000000000000000 l d NRV2E 0 NRV2E 0000000000000000 l d LZMA_HEAD 0 LZMA_HEAD 0000000000000000 l d LZMA_ELF00 0 LZMA_ELF00 0000000000000000 l d LZMA_DEC20 0 LZMA_DEC20 0000000000000000 l d LZMA_DEC30 0 LZMA_DEC30 0000000000000000 l d LZMA_TAIL 0 LZMA_TAIL 0000000000000000 l d PEMAIN10 0 PEMAIN10 0000000000000000 l d PETLSHAK2 0 PETLSHAK2 0000000000000000 l d PECTTPOS 0 PECTTPOS 0000000000000000 l d PECTTNUL 0 PECTTNUL 0000000000000000 l d PEFILTER49 0 PEFILTER49 0000000000000000 l d PEIMPORT 0 PEIMPORT 0000000000000000 l d PEIBYORD 0 PEIBYORD 0000000000000000 l d PEK32ORD 0 PEK32ORD 0000000000000000 l d PEIMORD1 0 PEIMORD1 0000000000000000 l d PEIMPOR2 0 PEIMPOR2 0000000000000000 l d PEIERDLL 0 PEIERDLL 0000000000000000 l d PEIEREXE 0 PEIEREXE 0000000000000000 l d PEIMDONE 0 PEIMDONE 0000000000000000 l d PERELOC1 0 PERELOC1 0000000000000000 l d PERELOC2 0 PERELOC2 0000000000000000 l d PERELOC3 0 PERELOC3 0000000000000000 l d REL64BIG 0 REL64BIG 0000000000000000 l d RELOC64J 0 RELOC64J 0000000000000000 l d PERLOHI0 0 PERLOHI0 0000000000000000 l d PERELLO0 0 PERELLO0 0000000000000000 l d PERELHI0 0 PERELHI0 0000000000000000 l d PEDEPHAK 0 PEDEPHAK 0000000000000000 l d PETLSC 0 PETLSC 0000000000000000 l d PEMAIN20 0 PEMAIN20 0000000000000000 l d CLEARSTACK 0 CLEARSTACK 0000000000000000 l d PEISDLL9 0 PEISDLL9 0000000000000000 l d PEISEFI9 0 PEISEFI9 0000000000000000 l d PERETURN 0 PERETURN 0000000000000000 l d PEDOJUMP 0 PEDOJUMP 0000000000000000 l d UPX1HEAD 0 UPX1HEAD 0000000000000000 *UND* 0 start_of_compressed 0000000000000000 *UND* 0 start_of_uncompressed 0000000000000000 *UND* 0 icon_offset 0000000000000000 *UND* 0 icon_delta 0000000000000000 *UND* 0 tls_address 0000000000000000 *UND* 0 tls_value 0000000000000000 *UND* 0 lzma_u_len 0000000000000000 *UND* 0 lzma_c_len 0000000000000000 *UND* 0 filter_buffer_start 0000000000000000 *UND* 0 filter_length 0000000000000000 *UND* 0 filter_cto 0000000000000000 *UND* 0 compressed_imports 0000000000000000 *UND* 0 start_of_imports 0000000000000000 *UND* 0 LoadLibraryA 0000000000000000 *UND* 0 kernel32_ordinals 0000000000000000 *UND* 0 GetProcAddress 0000000000000000 *UND* 0 ExitProcess 0000000000000000 *UND* 0 start_of_relocs 0000000000000000 *UND* 0 reloc_delt 0000000000000000 *UND* 0 VirtualProtect 0000000000000000 *UND* 0 vp_base 0000000000000000 *UND* 0 vp_size 0000000000000000 *UND* 0 swri 0000000000000000 *UND* 0 tls_module_base 0000000000000000 *UND* 0 original_entry 0000000000000000 *UND* 0 tls_callbacks_ptr RELOCATION RECORDS FOR [PEISDLL1]: OFFSET TYPE VALUE 0000000000000005 R_X86_64_PC32 PEMAIN21-0x0000000000000004 RELOCATION RECORDS FOR [PEMAIN01]: OFFSET TYPE VALUE 0000000000000007 R_X86_64_PC32 start_of_compressed-0x0000000000000004 000000000000000e R_X86_64_32S start_of_uncompressed RELOCATION RECORDS FOR [PEICONS1]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S icon_offset RELOCATION RECORDS FOR [PEICONS2]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S icon_offset 0000000000000007 R_X86_64_16 icon_delta+0x0000000000008000 RELOCATION RECORDS FOR [PETLSHAK]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S tls_address 000000000000000b R_X86_64_32 tls_value+0x0000000080000000 RELOCATION RECORDS FOR [NRV2B]: OFFSET TYPE VALUE 000000000000007d R_X86_64_PC32 NRV_HEAD+0x000000000000001b RELOCATION RECORDS FOR [NRV2D]: OFFSET TYPE VALUE 0000000000000088 R_X86_64_PC32 NRV_HEAD+0x000000000000001b RELOCATION RECORDS FOR [NRV2E]: OFFSET TYPE VALUE 00000000000000a1 R_X86_64_PC32 NRV_HEAD+0x000000000000001b RELOCATION RECORDS FOR [LZMA_HEAD]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_32 lzma_u_len+0x0000000080000000 0000000000000010 R_X86_64_32 lzma_c_len+0x0000000080000000 RELOCATION RECORDS FOR [PECTTPOS]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S filter_buffer_start RELOCATION RECORDS FOR [PEFILTER49]: OFFSET TYPE VALUE 0000000000000007 R_X86_64_32S filter_length 000000000000000c R_X86_64_8 filter_cto RELOCATION RECORDS FOR [PEIMPORT]: OFFSET TYPE VALUE 0000000000000007 R_X86_64_32S compressed_imports 0000000000000010 R_X86_64_PC8 imports_done 0000000000000018 R_X86_64_32S start_of_imports 0000000000000025 R_X86_64_PC32 LoadLibraryA-0x0000000000000004 RELOCATION RECORDS FOR [PEIBYORD]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_PC8 byname RELOCATION RECORDS FOR [PEK32ORD]: OFFSET TYPE VALUE 000000000000000c R_X86_64_32S kernel32_ordinals 0000000000000011 R_X86_64_PC8 next_imp RELOCATION RECORDS FOR [PEIMORD1]: OFFSET TYPE VALUE 0000000000000009 R_X86_64_PC8 first_imp RELOCATION RECORDS FOR [PEIMPOR2]: OFFSET TYPE VALUE 000000000000000f R_X86_64_PC32 GetProcAddress-0x0000000000000004 0000000000000020 R_X86_64_PC8 next_func RELOCATION RECORDS FOR [PEIEREXE]: OFFSET TYPE VALUE 0000000000000002 R_X86_64_PC32 ExitProcess-0x0000000000000004 RELOCATION RECORDS FOR [PERELOC1]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_32S start_of_relocs RELOCATION RECORDS FOR [PERELOC3]: OFFSET TYPE VALUE 000000000000000e R_X86_64_PC8 reloc_endx RELOCATION RECORDS FOR [REL64BIG]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_PC8 reloc_add RELOCATION RECORDS FOR [RELOC64J]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_PC8 reloc_add RELOCATION RECORDS FOR [PERLOHI0]: OFFSET TYPE VALUE 0000000000000006 R_X86_64_32S reloc_delt RELOCATION RECORDS FOR [PEDEPHAK]: OFFSET TYPE VALUE 0000000000000003 R_X86_64_PC32 VirtualProtect-0x0000000000000004 000000000000000a R_X86_64_32S vp_base 000000000000000f R_X86_64_32 vp_size+0x0000000080000000 000000000000002c R_X86_64_32S swri RELOCATION RECORDS FOR [PETLSC]: OFFSET TYPE VALUE 0000000000000002 R_X86_64_PC32 PETLSC2-0x0000000000000005 000000000000000a R_X86_64_32S tls_module_base 0000000000000016 R_X86_64_PC32 PETLSC2-0x0000000000000004 RELOCATION RECORDS FOR [PEDOJUMP]: OFFSET TYPE VALUE 0000000000000001 R_X86_64_PC32 original_entry-0x0000000000000004 RELOCATION RECORDS FOR [PETLSC2]: OFFSET TYPE VALUE 0000000000000005 R_X86_64_PC32 tls_callbacks_ptr-0x0000000000000004