DumpBin PresentationFramework

C:\Program Files (x86)\Microsoft Visual Studio 12.0>DumpBin /Headers "C:\Windows\Microsoft.Net\assembly\GAC_MSIL\PresentationFra
mework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll"
Microsoft (R) COFF/PE Dumper Version 12.00.21005.1
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\Microsoft.Net\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramewo
rk.dll

PE signature found

File Type: DLL

FILE HEADER VALUES
             14C machine (x86)
               3 number of sections
        52467EE1 time date stamp Sat Sep 28 11:01:53 2013
               0 file pointer to symbol table
               0 number of symbols
              E0 size of optional header
            2022 characteristics
                   Executable
                   Application can handle large (>2GB) addresses
                   DLL

OPTIONAL HEADER VALUES
             10B magic # (PE32)
           11.00 linker version
          5AF800 size of code
           36C00 size of initialized data
               0 size of uninitialized data
          5B133E entry point (56BC133E)
            2000 base of code
          5B2000 base of data
        56610000 image base (56610000 to 56BFBFFF)
            2000 section alignment
             200 file alignment
            4.00 operating system version
            0.00 image version
            6.00 subsystem version
               0 Win32 version
          5EC000 size of image
             200 size of headers
          5EE9B9 checksum
               3 subsystem (Windows CUI)
            8560 DLL characteristics
                   High Entropy Virtual Addresses
                   Dynamic base
                   NX compatible
                   No structured exception handler
                   Terminal Server Aware
          100000 size of stack reserve
            1000 size of stack commit
          100000 size of heap reserve
            1000 size of heap commit
               0 loader flags
              10 number of directories
               0 [       0] RVA [size] of Export Directory
          5B12E9 [      4F] RVA [size] of Import Directory
          5B2000 [   3686C] RVA [size] of Resource Directory
               0 [       0] RVA [size] of Exception Directory
          5E6600 [    3E80] RVA [size] of Certificates Directory
          5EA000 [       C] RVA [size] of Base Relocation Directory
          5B1268 [      1C] RVA [size] of Debug Directory
               0 [       0] RVA [size] of Architecture Directory
               0 [       0] RVA [size] of Global Pointer Directory
               0 [       0] RVA [size] of Thread Storage Directory
               0 [       0] RVA [size] of Load Configuration Directory
               0 [       0] RVA [size] of Bound Import Directory
            2000 [       8] RVA [size] of Import Address Table Directory
               0 [       0] RVA [size] of Delay Import Directory
            2008 [      48] RVA [size] of COM Descriptor Directory
               0 [       0] RVA [size] of Reserved Directory


SECTION HEADER #1
   .text name
  5AF754 virtual size
    2000 virtual address (56612000 to 56BC1753)
  5AF800 size of raw data
     200 file pointer to raw data (00000200 to 005AF9FF)
       0 file pointer to relocation table
       0 file pointer to line numbers
       0 number of relocations
       0 number of line numbers
60000020 flags
         Code
         Execute Read

  Debug Directories

        Time Type       Size      RVA  Pointer
    -------- ------ -------- -------- --------
    52467EE1 cv           32 005B1284   5AF484    Format: RSDS, {DFC846E9-C04D-43C3-8AC5-C4B87C25BCEF}, 1, PresentationFramework
.pdb

SECTION HEADER #2
   .rsrc name
   3686C virtual size
  5B2000 virtual address (56BC2000 to 56BF886B)
   36A00 size of raw data
  5AFA00 file pointer to raw data (005AFA00 to 005E63FF)
       0 file pointer to relocation table
       0 file pointer to line numbers
       0 number of relocations
       0 number of line numbers
40000040 flags
         Initialized Data
         Read Only

SECTION HEADER #3
  .reloc name
       C virtual size
  5EA000 virtual address (56BFA000 to 56BFA00B)
     200 size of raw data
  5E6400 file pointer to raw data (005E6400 to 005E65FF)
       0 file pointer to relocation table
       0 file pointer to line numbers
       0 number of relocations
       0 number of line numbers
42000040 flags
         Initialized Data
         Discardable
         Read Only

  Summary

        2000 .reloc
       38000 .rsrc
      5B0000 .text

C:\Program Files (x86)\Microsoft Visual Studio 12.0>