Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- C:\Program Files (x86)\Microsoft Visual Studio 12.0>DumpBin /Headers "C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll"
- Microsoft (R) COFF/PE Dumper Version 12.00.21005.1
- Copyright (C) Microsoft Corporation. All rights reserved.
- Dump of file C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- PE signature found
- File Type: DLL
- FILE HEADER VALUES
- 14C machine (x86)
- 3 number of sections
- 52004310 time date stamp Tue Aug 06 04:28:00 2013
- 0 file pointer to symbol table
- 0 number of symbols
- E0 size of optional header
- 2022 characteristics
- Executable
- Application can handle large (>2GB) addresses
- DLL
- OPTIONAL HEADER VALUES
- 10B magic # (PE32)
- 11.00 linker version
- 47E600 size of code
- 14400 size of initialized data
- 0 size of uninitialized data
- 480336 entry point (7B4D0336)
- 2000 base of code
- 482000 base of data
- 7B050000 image base (7B050000 to 7B4E9FFF)
- 2000 section alignment
- 200 file alignment
- 4.00 operating system version
- 0.00 image version
- 6.00 subsystem version
- 0 Win32 version
- 49A000 size of image
- 200 size of headers
- 4A6F80 checksum
- 3 subsystem (Windows CUI)
- 8560 DLL characteristics
- High Entropy Virtual Addresses
- Dynamic base
- NX compatible
- No structured exception handler
- Terminal Server Aware
- 100000 size of stack reserve
- 1000 size of stack commit
- 100000 size of heap reserve
- 1000 size of heap commit
- 0 loader flags
- 10 number of directories
- 0 [ 0] RVA [size] of Export Directory
- 4802E4 [ 4F] RVA [size] of Import Directory
- 482000 [ 14070] RVA [size] of Resource Directory
- 0 [ 0] RVA [size] of Exception Directory
- 492C00 [ 6080] RVA [size] of Certificates Directory
- 498000 [ C] RVA [size] of Base Relocation Directory
- 480264 [ 1C] RVA [size] of Debug Directory
- 0 [ 0] RVA [size] of Architecture Directory
- 0 [ 0] RVA [size] of Global Pointer Directory
- 0 [ 0] RVA [size] of Thread Storage Directory
- 0 [ 0] RVA [size] of Load Configuration Directory
- 0 [ 0] RVA [size] of Bound Import Directory
- 2000 [ 8] RVA [size] of Import Address Table Directory
- 0 [ 0] RVA [size] of Delay Import Directory
- 2008 [ 48] RVA [size] of COM Descriptor Directory
- 0 [ 0] RVA [size] of Reserved Directory
- SECTION HEADER #1
- .text name
- 47E5E4 virtual size
- 2000 virtual address (7B052000 to 7B4D05E3)
- 47E600 size of raw data
- 200 file pointer to raw data (00000200 to 0047E7FF)
- 0 file pointer to relocation table
- 0 file pointer to line numbers
- 0 number of relocations
- 0 number of line numbers
- 60000020 flags
- Code
- Execute Read
- Debug Directories
- Time Type Size RVA Pointer
- -------- ------ -------- -------- --------
- 52004310 cv 31 00480280 47E480 Format: RSDS, {E090FA0C-D5AD-4882-AB10-706D596AC328}, 1, System.Windows.Forms.pdb
- SECTION HEADER #2
- .rsrc name
- 14070 virtual size
- 482000 virtual address (7B4D2000 to 7B4E606F)
- 14200 size of raw data
- 47E800 file pointer to raw data (0047E800 to 004929FF)
- 0 file pointer to relocation table
- 0 file pointer to line numbers
- 0 number of relocations
- 0 number of line numbers
- 40000040 flags
- Initialized Data
- Read Only
- SECTION HEADER #3
- .reloc name
- C virtual size
- 498000 virtual address (7B4E8000 to 7B4E800B)
- 200 size of raw data
- 492A00 file pointer to raw data (00492A00 to 00492BFF)
- 0 file pointer to relocation table
- 0 file pointer to line numbers
- 0 number of relocations
- 0 number of line numbers
- 42000040 flags
- Initialized Data
- Discardable
- Read Only
- Summary
- 2000 .reloc
- 16000 .rsrc
- 480000 .text
- C:\Program Files (x86)\Microsoft Visual Studio 12.0>
Add Comment
Please, Sign In to add comment