ViIvanov

DumpBin System.Windows.Forms.dll

Feb 25th, 2014
143
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.81 KB | None | 0 0
  1. C:\Program Files (x86)\Microsoft Visual Studio 12.0>DumpBin /Headers "C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll"
  2. Microsoft (R) COFF/PE Dumper Version 12.00.21005.1
  3. Copyright (C) Microsoft Corporation. All rights reserved.
  4.  
  5.  
  6. Dump of file C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
  7.  
  8. PE signature found
  9.  
  10. File Type: DLL
  11.  
  12. FILE HEADER VALUES
  13. 14C machine (x86)
  14. 3 number of sections
  15. 52004310 time date stamp Tue Aug 06 04:28:00 2013
  16. 0 file pointer to symbol table
  17. 0 number of symbols
  18. E0 size of optional header
  19. 2022 characteristics
  20. Executable
  21. Application can handle large (>2GB) addresses
  22. DLL
  23.  
  24. OPTIONAL HEADER VALUES
  25. 10B magic # (PE32)
  26. 11.00 linker version
  27. 47E600 size of code
  28. 14400 size of initialized data
  29. 0 size of uninitialized data
  30. 480336 entry point (7B4D0336)
  31. 2000 base of code
  32. 482000 base of data
  33. 7B050000 image base (7B050000 to 7B4E9FFF)
  34. 2000 section alignment
  35. 200 file alignment
  36. 4.00 operating system version
  37. 0.00 image version
  38. 6.00 subsystem version
  39. 0 Win32 version
  40. 49A000 size of image
  41. 200 size of headers
  42. 4A6F80 checksum
  43. 3 subsystem (Windows CUI)
  44. 8560 DLL characteristics
  45. High Entropy Virtual Addresses
  46. Dynamic base
  47. NX compatible
  48. No structured exception handler
  49. Terminal Server Aware
  50. 100000 size of stack reserve
  51. 1000 size of stack commit
  52. 100000 size of heap reserve
  53. 1000 size of heap commit
  54. 0 loader flags
  55. 10 number of directories
  56. 0 [ 0] RVA [size] of Export Directory
  57. 4802E4 [ 4F] RVA [size] of Import Directory
  58. 482000 [ 14070] RVA [size] of Resource Directory
  59. 0 [ 0] RVA [size] of Exception Directory
  60. 492C00 [ 6080] RVA [size] of Certificates Directory
  61. 498000 [ C] RVA [size] of Base Relocation Directory
  62. 480264 [ 1C] RVA [size] of Debug Directory
  63. 0 [ 0] RVA [size] of Architecture Directory
  64. 0 [ 0] RVA [size] of Global Pointer Directory
  65. 0 [ 0] RVA [size] of Thread Storage Directory
  66. 0 [ 0] RVA [size] of Load Configuration Directory
  67. 0 [ 0] RVA [size] of Bound Import Directory
  68. 2000 [ 8] RVA [size] of Import Address Table Directory
  69. 0 [ 0] RVA [size] of Delay Import Directory
  70. 2008 [ 48] RVA [size] of COM Descriptor Directory
  71. 0 [ 0] RVA [size] of Reserved Directory
  72.  
  73.  
  74. SECTION HEADER #1
  75. .text name
  76. 47E5E4 virtual size
  77. 2000 virtual address (7B052000 to 7B4D05E3)
  78. 47E600 size of raw data
  79. 200 file pointer to raw data (00000200 to 0047E7FF)
  80. 0 file pointer to relocation table
  81. 0 file pointer to line numbers
  82. 0 number of relocations
  83. 0 number of line numbers
  84. 60000020 flags
  85. Code
  86. Execute Read
  87.  
  88. Debug Directories
  89.  
  90. Time Type Size RVA Pointer
  91. -------- ------ -------- -------- --------
  92. 52004310 cv 31 00480280 47E480 Format: RSDS, {E090FA0C-D5AD-4882-AB10-706D596AC328}, 1, System.Windows.Forms.pdb
  93.  
  94. SECTION HEADER #2
  95. .rsrc name
  96. 14070 virtual size
  97. 482000 virtual address (7B4D2000 to 7B4E606F)
  98. 14200 size of raw data
  99. 47E800 file pointer to raw data (0047E800 to 004929FF)
  100. 0 file pointer to relocation table
  101. 0 file pointer to line numbers
  102. 0 number of relocations
  103. 0 number of line numbers
  104. 40000040 flags
  105. Initialized Data
  106. Read Only
  107.  
  108. SECTION HEADER #3
  109. .reloc name
  110. C virtual size
  111. 498000 virtual address (7B4E8000 to 7B4E800B)
  112. 200 size of raw data
  113. 492A00 file pointer to raw data (00492A00 to 00492BFF)
  114. 0 file pointer to relocation table
  115. 0 file pointer to line numbers
  116. 0 number of relocations
  117. 0 number of line numbers
  118. 42000040 flags
  119. Initialized Data
  120. Discardable
  121. Read Only
  122.  
  123. Summary
  124.  
  125. 2000 .reloc
  126. 16000 .rsrc
  127. 480000 .text
  128.  
  129. C:\Program Files (x86)\Microsoft Visual Studio 12.0>
Add Comment
Please, Sign In to add comment