Skip to content

Instantly share code, notes, and snippets.

@kennykerr
Last active March 17, 2022 22:02
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kennykerr/cc280cbbfd277e15996905316c170ed8 to your computer and use it in GitHub Desktop.
Save kennykerr/cc280cbbfd277e15996905316c170ed8 to your computer and use it in GitHub Desktop.
Microsoft (R) COFF/PE Dumper Version 14.31.31104.0
Copyright (C) Microsoft Corporation. All rights reserved.
Dump of file test.winmd
PE signature found
File Type: DLL
FILE HEADER VALUES
14C machine (x86)
1 number of sections
0 time date stamp
0 file pointer to symbol table
0 number of symbols
E0 size of optional header
2102 characteristics
Executable
32 bit word machine
DLL
OPTIONAL HEADER VALUES
10B magic # (PE32)
11.00 linker version
0 size of code
400 size of initialized data
0 size of uninitialized data
0 entry point
0 base of code
0 base of data
400000 image base (00400000 to 00400FFF)
1000 section alignment
200 file alignment
6.02 operating system version
0.00 image version
6.02 subsystem version
0 Win32 version
1000 size of image
200 size of headers
0 checksum
3 subsystem (Windows CUI)
540 DLL characteristics
Dynamic base
NX compatible
No structured exception handler
100000 size of stack reserve
0 size of stack commit
1000 size of heap reserve
0 size of heap commit
100000 loader flags
RESERVED - UNKNOWN
10 number of directories
0 [ 0] RVA [size] of Export Directory
0 [ 0] RVA [size] of Import Directory
0 [ 0] RVA [size] of Resource Directory
0 [ 0] RVA [size] of Exception Directory
0 [ 0] RVA [size] of Certificates Directory
0 [ 0] RVA [size] of Base Relocation Directory
0 [ 0] RVA [size] of Debug Directory
0 [ 0] RVA [size] of Architecture Directory
0 [ 0] RVA [size] of Global Pointer Directory
0 [ 0] RVA [size] of Thread Storage Directory
0 [ 0] RVA [size] of Load Configuration Directory
0 [ 0] RVA [size] of Bound Import Directory
0 [ 0] RVA [size] of Import Address Table Directory
0 [ 0] RVA [size] of Delay Import Directory
1000 [ 48] RVA [size] of COM Descriptor Directory
0 [ 0] RVA [size] of Reserved Directory
SECTION HEADER #1
.text name
BA virtual size
1000 virtual address (00401000 to 004010B9)
200 size of raw data
200 file pointer to raw data (00000200 to 000003FF)
0 file pointer to relocation table
0 file pointer to line numbers
0 number of relocations
0 number of line numbers
40000020 flags
Code
Read Only
RAW DATA #1
00401000: 48 00 00 00 02 00 05 00 48 10 00 00 72 00 00 00 H.......H...r...
00401010: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00401020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00401030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00401040: 00 00 00 00 00 00 00 00 42 53 4A 42 01 00 01 00 ........BSJB....
00401050: 00 00 00 00 14 00 00 00 57 69 6E 64 6F 77 73 52 ........WindowsR
00401060: 75 6E 74 69 6D 65 00 00 00 00 00 00 00 00 03 00 untime..........
00401070: 58 00 00 00 01 00 00 00 23 53 74 72 69 6E 67 73 X.......#Strings
00401080: 00 00 00 00 59 00 00 00 01 00 00 00 23 42 6C 6F ....Y.......#Blo
00401090: 62 00 00 00 5A 00 00 00 18 00 00 00 23 7E 00 00 b...Z.......#~..
004010A0: 00 00 00 00 00 00 02 00 05 01 00 00 00 00 00 00 ................
004010B0: 00 00 00 00 00 00 00 00 00 00 ..........
clr Header:
48 cb
2.05 runtime version
1048 [ 72] RVA [size] of MetaData Directory
1 flags
IL Only
0 entry point token
0 [ 0] RVA [size] of Resources Directory
0 [ 0] RVA [size] of StrongNameSignature Directory
0 [ 0] RVA [size] of CodeManagerTable Directory
0 [ 0] RVA [size] of VTableFixups Directory
0 [ 0] RVA [size] of ExportAddressTableJumps Directory
0 [ 0] RVA [size] of ManagedNativeHeader Directory
Summary
1000 .text
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment