Dump of file regex2.dll PE signature found File Type: DLL FILE HEADER VALUES 14C machine (x86) 8 number of sections 471F1A2F time date stamp Wed Oct 24 13:10:55 2007 0 file pointer to symbol table 0 number of symbols E0 size of optional header 230E characteristics Executable Line numbers stripped Symbols stripped 32 bit word machine Debug information stripped DLL OPTIONAL HEADER VALUES 10B magic # (PE32) 2.56 linker version 10A00 size of code 13200 size of initialized data 200 size of uninitialized data 1060 entry point (6C701060) 1000 base of code 12000 base of data 6C700000 image base (6C700000 to 6C718FFF) 1000 section alignment 200 file alignment 4.00 operating system version 2.07 image version 4.00 subsystem version 0 Win32 version 19000 size of image 400 size of headers 220D4 checksum 3 subsystem (Windows CUI) 0 DLL characteristics 200000 size of stack reserve 1000 size of stack commit 100000 size of heap reserve 1000 size of heap commit 0 loader flags 10 number of directories 15000 [ 193] RVA [size] of Export Directory 16000 [ 2A4] RVA [size] of Import Directory 17000 [ FD8] RVA [size] of Resource Directory 0 [ 0] RVA [size] of Exception Directory 0 [ 0] RVA [size] of Certificates Directory 18000 [ 45C] RVA [size] of Base Relocation Directory 0 [ 0] RVA [size] of Debug Directory 0 [ 0] RVA [size] of Architecture Directory 0 [ 0] RVA [size] of Global Pointer Directory 0 [ 0] RVA [size] of Thread Storage Directory 0 [ 0] RVA [size] of Load Configuration Directory 0 [ 0] RVA [size] of Bound Import Directory 0 [ 0] RVA [size] of Import Address Table Directory 0 [ 0] RVA [size] of Delay Import Directory 0 [ 0] RVA [size] of COM Descriptor Directory 0 [ 0] RVA [size] of Reserved Directory SECTION HEADER #1 .text name 10984 virtual size 1000 virtual address (6C701000 to 6C711983) 10A00 size of raw data 400 file pointer to raw data (00000400 to 00010DFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 60000060 flags Code Initialized Data Execute Read SECTION HEADER #2 .data name 30 virtual size 12000 virtual address (6C712000 to 6C71202F) 200 size of raw data 10E00 file pointer to raw data (00010E00 to 00010FFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000040 flags Initialized Data Read Write SECTION HEADER #3 .rdata name 860 virtual size 13000 virtual address (6C713000 to 6C71385F) A00 size of raw data 11000 file pointer to raw data (00011000 to 000119FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only SECTION HEADER #4 .bss name 100 virtual size 14000 virtual address (6C714000 to 6C7140FF) 0 size of raw data 0 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000080 flags Uninitialized Data Read Write SECTION HEADER #5 .edata name 193 virtual size 15000 virtual address (6C715000 to 6C715192) 200 size of raw data 11A00 file pointer to raw data (00011A00 to 00011BFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only SECTION HEADER #6 .idata name 2A4 virtual size 16000 virtual address (6C716000 to 6C7162A3) 400 size of raw data 11C00 file pointer to raw data (00011C00 to 00011FFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000040 flags Initialized Data Read Write SECTION HEADER #7 .rsrc name FD8 virtual size 17000 virtual address (6C717000 to 6C717FD7) 1000 size of raw data 12000 file pointer to raw data (00012000 to 00012FFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000040 flags Initialized Data Read Write SECTION HEADER #8 .reloc name 45C virtual size 18000 virtual address (6C718000 to 6C71845B) 600 size of raw data 13000 file pointer to raw data (00013000 to 000135FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 42000040 flags Initialized Data Discardable Read Only Summary 1000 .bss 1000 .data 1000 .edata 1000 .idata 1000 .rdata 1000 .reloc 1000 .rsrc 11000 .text