Reversing : The Hacker's Guide to Reverse Engineering

0 file pointer to symbol table

0 number of symbols

E0 size of optional header

210E characteristics

Executable

Line numbers stripped

Symbols stripped

32 bit word machine

DLL

OPTIONAL HEADER VALUES

10B magic # (PE32)

7.10 linker version

5EE00 size of code

2E200 size of initialized data

0 size of uninitialized data

10EB9 entry point (77D50EB9)

1000 base of code

5B000 base of data

77D40000 image base (77D40000 to 77DCFFFF)

1000 section alignment

200 file alignment

5.01 operating system version

5.01 image version

4.00 subsystem version

0 Win32 version

90000 size of image

400 size of headers

9CA60 checksum

2 subsystem (Windows GUI)

0 DLL characteristics

40000 size of stack reserve

1000 size of stack commit

100000 size of heap reserve

1000 size of heap commit

0 loader flags

10 number of directories

38B8 [ 4BA9] RVA [size] of Export Directory

5E168 [ 50] RVA [size] of Import Directory

62000 [ 2A098] RVA [size] of Resource Directory

0 [ 0] RVA [size] of Exception Directory

0 [ 0] RVA [size] of Certificates Directory

8D000 [ 2DB4] RVA [size] of Base Relocation Directory

5FD48 [ 38] RVA [size] of Debug Directory

Listing 4.1 (continued)

134 Chapter 4