Dump of file zlib1.dll PE signature found File Type: DLL FILE HEADER VALUES 14C machine (x86) 5 number of sections 507E1F13 time date stamp Wed Oct 17 05:59:31 2012 0 file pointer to symbol table 0 number of symbols E0 size of optional header 2102 characteristics Executable 32 bit word machine DLL OPTIONAL HEADER VALUES 10B magic # (PE32) 10.00 linker version A400 size of code 5C00 size of initialized data 0 size of uninitialized data AEA4 entry point (5A4CAEA4) 1000 base of code C000 base of data 5A4C0000 image base (5A4C0000 to 5A4D3FFF) 1000 section alignment 200 file alignment 5.01 operating system version 0.00 image version 5.01 subsystem version 0 Win32 version 14000 size of image 400 size of headers 0 checksum 2 subsystem (Windows GUI) 140 DLL characteristics Dynamic base NX compatible 100000 size of stack reserve 1000 size of stack commit 100000 size of heap reserve 1000 size of heap commit 0 loader flags 10 number of directories 10700 [ 694] RVA [size] of Export Directory 1030C [ 3C] RVA [size] of Import Directory 12000 [ 390] RVA [size] of Resource Directory 0 [ 0] RVA [size] of Exception Directory 0 [ 0] RVA [size] of Certificates Directory 13000 [ 3F4] RVA [size] of Base Relocation Directory C0D0 [ 1C] RVA [size] of Debug Directory 0 [ 0] RVA [size] of Architecture Directory 0 [ 0] RVA [size] of Global Pointer Directory 0 [ 0] RVA [size] of Thread Storage Directory 10200 [ 40] RVA [size] of Load Configuration Directory 0 [ 0] RVA [size] of Bound Import Directory C000 [ BC] RVA [size] of Import Address Table Directory 0 [ 0] RVA [size] of Delay Import Directory 0 [ 0] RVA [size] of COM Descriptor Directory 0 [ 0] RVA [size] of Reserved Directory SECTION HEADER #1 .text name A3AE virtual size 1000 virtual address (5A4C1000 to 5A4CB3AD) A400 size of raw data 400 file pointer to raw data (00000400 to 0000A7FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 60000020 flags Code Execute Read SECTION HEADER #2 .rdata name 4D94 virtual size C000 virtual address (5A4CC000 to 5A4D0D93) 4E00 size of raw data A800 file pointer to raw data (0000A800 to 0000F5FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only Debug Directories Time Type Size RVA Pointer -------- ------- -------- -------- -------- 507E1F13 cv 44 00010248 EA48 Format: RSDS, {73F7AA07-0923-4107-9668-D6C4030E4F50}, 1, C:\ThePowderToy\VSTPT\PreReq\zlib\zlib1.pdb SECTION HEADER #3 .data name 398 virtual size 11000 virtual address (5A4D1000 to 5A4D1397) 200 size of raw data F600 file pointer to raw data (0000F600 to 0000F7FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000040 flags Initialized Data Read Write SECTION HEADER #4 .rsrc name 390 virtual size 12000 virtual address (5A4D2000 to 5A4D238F) 400 size of raw data F800 file pointer to raw data (0000F800 to 0000FBFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only SECTION HEADER #5 .reloc name 4BE virtual size 13000 virtual address (5A4D3000 to 5A4D34BD) 600 size of raw data FC00 file pointer to raw data (0000FC00 to 000101FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 42000040 flags Initialized Data Discardable Read Only Summary 1000 .data 5000 .rdata 1000 .reloc 1000 .rsrc B000 .text