Dump of file libz-1.dll PE signature found File Type: DLL FILE HEADER VALUES 14C machine (x86) A number of sections 4DB34C00 time date stamp Sun Apr 24 01:00:32 2011 0 file pointer to symbol table 0 number of symbols E0 size of optional header 230E characteristics Executable Line numbers stripped Symbols stripped 32 bit word machine Debug information stripped DLL OPTIONAL HEADER VALUES 10B magic # (PE32) 2.21 linker version 12C00 size of code 19400 size of initialized data C00 size of uninitialized data 10C0 entry point (655010C0) 1000 base of code 14000 base of data 65500000 image base (65500000 to 65520FFF) 1000 section alignment 200 file alignment 4.00 operating system version 1.00 image version 4.00 subsystem version 0 Win32 version 21000 size of image 400 size of headers 250DD checksum 3 subsystem (Windows CUI) 0 DLL characteristics 200000 size of stack reserve 1000 size of stack commit 100000 size of heap reserve 1000 size of heap commit 0 loader flags 10 number of directories 1C000 [ 78A] RVA [size] of Export Directory 1D000 [ 5DC] RVA [size] of Import Directory 0 [ 0] RVA [size] of Resource Directory 0 [ 0] RVA [size] of Exception Directory 0 [ 0] RVA [size] of Certificates Directory 20000 [ 5DC] RVA [size] of Base Relocation Directory 0 [ 0] RVA [size] of Debug Directory 0 [ 0] RVA [size] of Architecture Directory 0 [ 0] RVA [size] of Global Pointer Directory 1F000 [ 18] RVA [size] of Thread Storage Directory 0 [ 0] RVA [size] of Load Configuration Directory 0 [ 0] RVA [size] of Bound Import Directory 1D13C [ D8] RVA [size] of Import Address Table Directory 0 [ 0] RVA [size] of Delay Import Directory 0 [ 0] RVA [size] of COM Descriptor Directory 0 [ 0] RVA [size] of Reserved Directory SECTION HEADER #1 .text name 12C00 virtual size 1000 virtual address (65501000 to 65513BFF) 12C00 size of raw data 400 file pointer to raw data (00000400 to 00012FFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 60500060 flags Code Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Execute Read SECTION HEADER #2 .data name 5C virtual size 14000 virtual address (65514000 to 6551405B) 200 size of raw data 13000 file pointer to raw data (00013000 to 000131FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0300040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Read Write SECTION HEADER #3 .rdata name 4B00 virtual size 15000 virtual address (65515000 to 65519AFF) 4C00 size of raw data 13200 file pointer to raw data (00013200 to 00017DFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40600040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Read Only SECTION HEADER #4 .eh_fram name 4 virtual size 1A000 virtual address (6551A000 to 6551A003) 200 size of raw data 17E00 file pointer to raw data (00017E00 to 00017FFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0300040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Read Write SECTION HEADER #5 .bss name AB8 virtual size 1B000 virtual address (6551B000 to 6551BAB7) 0 size of raw data 0 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0400080 flags Uninitialized Data RESERVED - UNKNOWN Read Write SECTION HEADER #6 .edata name 78A virtual size 1C000 virtual address (6551C000 to 6551C789) 800 size of raw data 18000 file pointer to raw data (00018000 to 000187FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40300040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Read Only SECTION HEADER #7 .idata name 5DC virtual size 1D000 virtual address (6551D000 to 6551D5DB) 600 size of raw data 18800 file pointer to raw data (00018800 to 00018DFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0300040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Read Write SECTION HEADER #8 .CRT name 18 virtual size 1E000 virtual address (6551E000 to 6551E017) 200 size of raw data 18E00 file pointer to raw data (00018E00 to 00018FFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0300040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Read Write SECTION HEADER #9 .tls name 20 virtual size 1F000 virtual address (6551F000 to 6551F01F) 200 size of raw data 19000 file pointer to raw data (00019000 to 000191FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0300040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Read Write SECTION HEADER #A .reloc name 5DC virtual size 20000 virtual address (65520000 to 655205DB) 600 size of raw data 19200 file pointer to raw data (00019200 to 000197FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 42300040 flags Initialized Data RESERVED - UNKNOWN RESERVED - UNKNOWN Discardable Read Only Summary 1000 .CRT 1000 .bss 1000 .data 1000 .edata 1000 .eh_fram 1000 .idata 5000 .rdata 1000 .reloc 13000 .text 1000 .tls