ViIvanov

DumpBin PresentationFramework Win7 x64

Feb 27th, 2014
179
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.65 KB | None | 0 0
  1. C:\Program Files (x86)\Microsoft Visual Studio 12.0>DumpBin /Headers "C:\Windows\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad3
  2. 64e35\PresentationFramework.dll"
  3. Microsoft (R) COFF/PE Dumper Version 12.00.21005.1
  4. Copyright (C) Microsoft Corporation. All rights reserved.
  5.  
  6.  
  7. Dump of file C:\Windows\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
  8.  
  9. PE signature found
  10.  
  11. File Type: DLL
  12.  
  13. FILE HEADER VALUES
  14. 14C machine (x86)
  15. 3 number of sections
  16. 52312F13 time date stamp Thu Sep 12 07:03:47 2013
  17. 0 file pointer to symbol table
  18. 0 number of symbols
  19. E0 size of optional header
  20. 2022 characteristics
  21. Executable
  22. Application can handle large (>2GB) addresses
  23. DLL
  24.  
  25. OPTIONAL HEADER VALUES
  26. 10B magic # (PE32)
  27. 11.00 linker version
  28. 5AF800 size of code
  29. 35800 size of initialized data
  30. 0 size of uninitialized data
  31. 5B12C6 entry point (56BC12C6)
  32. 2000 base of code
  33. 5B2000 base of data
  34. 56610000 image base (56610000 to 56BF9FFF)
  35. 2000 section alignment
  36. 200 file alignment
  37. 4.00 operating system version
  38. 0.00 image version
  39. 6.00 subsystem version
  40. 0 Win32 version
  41. 5EA000 size of image
  42. 200 size of headers
  43. 5F127A checksum
  44. 3 subsystem (Windows CUI)
  45. 8560 DLL characteristics
  46. High Entropy Virtual Addresses
  47. Dynamic base
  48. NX compatible
  49. No structured exception handler
  50. Terminal Server Aware
  51. 100000 size of stack reserve
  52. 1000 size of stack commit
  53. 100000 size of heap reserve
  54. 1000 size of heap commit
  55. 0 loader flags
  56. 10 number of directories
  57. 0 [ 0] RVA [size] of Export Directory
  58. 5B1271 [ 4F] RVA [size] of Import Directory
  59. 5B2000 [ 35434] RVA [size] of Resource Directory
  60. 0 [ 0] RVA [size] of Exception Directory
  61. 5E5200 [ 3E80] RVA [size] of Certificates Directory
  62. 5E8000 [ C] RVA [size] of Base Relocation Directory
  63. 5B11F0 [ 1C] RVA [size] of Debug Directory
  64. 0 [ 0] RVA [size] of Architecture Directory
  65. 0 [ 0] RVA [size] of Global Pointer Directory
  66. 0 [ 0] RVA [size] of Thread Storage Directory
  67. 0 [ 0] RVA [size] of Load Configuration Directory
  68. 0 [ 0] RVA [size] of Bound Import Directory
  69. 2000 [ 8] RVA [size] of Import Address Table Directory
  70. 0 [ 0] RVA [size] of Delay Import Directory
  71. 2008 [ 48] RVA [size] of COM Descriptor Directory
  72. 0 [ 0] RVA [size] of Reserved Directory
  73.  
  74.  
  75. SECTION HEADER #1
  76. .text name
  77. 5AF6DC virtual size
  78. 2000 virtual address (56612000 to 56BC16DB)
  79. 5AF800 size of raw data
  80. 200 file pointer to raw data (00000200 to 005AF9FF)
  81. 0 file pointer to relocation table
  82. 0 file pointer to line numbers
  83. 0 number of relocations
  84. 0 number of line numbers
  85. 60000020 flags
  86. Code
  87. Execute Read
  88.  
  89. Debug Directories
  90.  
  91. Time Type Size RVA Pointer
  92. -------- ------ -------- -------- --------
  93. 52312F13 cv 32 005B120C 5AF40C Format: RSDS, {C48218D1-4EF1-4966-8F53-D83288F47DAF}, 1, PresentationFramework.pdb
  94.  
  95. SECTION HEADER #2
  96. .rsrc name
  97. 35434 virtual size
  98. 5B2000 virtual address (56BC2000 to 56BF7433)
  99. 35600 size of raw data
  100. 5AFA00 file pointer to raw data (005AFA00 to 005E4FFF)
  101. 0 file pointer to relocation table
  102. 0 file pointer to line numbers
  103. 0 number of relocations
  104. 0 number of line numbers
  105. 40000040 flags
  106. Initialized Data
  107. Read Only
  108.  
  109. SECTION HEADER #3
  110. .reloc name
  111. C virtual size
  112. 5E8000 virtual address (56BF8000 to 56BF800B)
  113. 200 size of raw data
  114. 5E5000 file pointer to raw data (005E5000 to 005E51FF)
  115. 0 file pointer to relocation table
  116. 0 file pointer to line numbers
  117. 0 number of relocations
  118. 0 number of line numbers
  119. 42000040 flags
  120. Initialized Data
  121. Discardable
  122. Read Only
  123.  
  124. Summary
  125.  
  126. 2000 .reloc
  127. 36000 .rsrc
  128. 5B0000 .text
  129.  
  130. C:\Program Files (x86)\Microsoft Visual Studio 12.0>
Add Comment
Please, Sign In to add comment