Microsoft (R) COFF Binary File Dumper Version 6.00.8447 Copyright (C) Microsoft Corp 1992-1998. All rights reserved. Dump of file MerSim.exe PE signature found File Type: EXECUTABLE IMAGE FILE HEADER VALUES 14C machine (i386) 9 number of sections 52A78BC1 time date stamp Tue Dec 10 15:46:41 2013 0 file pointer to symbol table 0 number of symbols E0 size of optional header 102 characteristics Executable 32 bit word machine OPTIONAL HEADER VALUES 10B magic # 12.00 linker version 39D000 size of code 81E00 size of initialized data 0 size of uninitialized data 380BEA RVA of entry point 1000 base of code 39F000 base of data 400000 image base 1000 section alignment 200 file alignment 6.00 operating system version 0.00 image version 6.00 subsystem version 0 Win32 version 436000 size of image 400 size of headers 421526 checksum 2 subsystem (Windows GUI) 8140 DLL characteristics RESERVED - UNKNOWN RESERVED - UNKNOWN Terminal Server Aware 10000000 size of stack reserve 1000 size of stack commit 100000 size of heap reserve 1000 size of heap commit 0 loader flags 10 number of directories 0 [ 0] RVA [size] of Export Directory 3D57BC [ B4] RVA [size] of Import Directory 40F000 [ 6BC] RVA [size] of Resource Directory 0 [ 0] RVA [size] of Exception Directory 0 [ 0] RVA [size] of Certificates Directory 410000 [ 25FE0] RVA [size] of Base Relocation Directory 0 [ 0] RVA [size] of Debug Directory 0 [ 0] RVA [size] of Architecture Directory 0 [ 0] RVA [size] of Special Directory 0 [ 0] RVA [size] of Thread Storage Directory 3D4EB0 [ 40] RVA [size] of Load Configuration Directory 0 [ 0] RVA [size] of Bound Import Directory 39F000 [ 4F8] RVA [size] of Import Address Table Directory 0 [ 0] RVA [size] of Delay Import Directory 0 [ 0] RVA [size] of Reserved Directory 0 [ 0] RVA [size] of Reserved Directory SECTION HEADER #1 .text name 39CB85 virtual size 1000 virtual address 39CC00 size of raw data 400 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 60000020 flags Code Execute Read SECTION HEADER #2 .text1 name 210 virtual size 39E000 virtual address 400 size of raw data 39D000 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 60000020 flags Code Execute Read SECTION HEADER #3 .rdata name 381C2 virtual size 39F000 virtual address 38200 size of raw data 39D400 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only SECTION HEADER #4 .data name 32B60 virtual size 3D8000 virtual address 21000 size of raw data 3D5600 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000040 flags Initialized Data Read Write SECTION HEADER #5 .trace name 1580 virtual size 40B000 virtual address 1600 size of raw data 3F6600 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only SECTION HEADER #6 _RDATA name 540 virtual size 40D000 virtual address 600 size of raw data 3F7C00 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only SECTION HEADER #7 .data1 name 760 virtual size 40E000 virtual address 800 size of raw data 3F8200 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000040 flags Initialized Data Read Write SECTION HEADER #8 .rsrc name 6BC virtual size 40F000 virtual address 800 size of raw data 3F8A00 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only SECTION HEADER #9 .reloc name 25FE0 virtual size 410000 virtual address 26000 size of raw data 3F9200 file pointer to raw data 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 42000040 flags Initialized Data Discardable Read Only Summary 33000 .data 1000 .data1 39000 .rdata 26000 .reloc 1000 .rsrc 39D000 .text 1000 .text1 2000 .trace 1000 _RDATA