Turbo Dump Version 5.0.16.12 Copyright (c) 1988, 2000 Inprise Corporation Display of File TEST.EXE Old Executable Header DOS File Size CE00h ( 52736. ) Load Image Size 210h ( 528. ) Relocation Table entry count 0000h ( 0. ) Relocation Table address 0040h ( 64. ) Size of header record (in paragraphs) 0004h ( 4. ) Minimum Memory Requirement (in paragraphs) 000Fh ( 15. ) Maximum Memory Requirement (in paragraphs) FFFFh ( 65535. ) File load checksum 0000h ( 0. ) Overlay Number 001Ah ( 26. ) Initial Stack Segment (SS:SP) 0000:00B8 Program Entry Point (CS:IP) 0000:0000 Portable Executable (PE) File Header base: 00000200 CPU type 80386 Flags 30E [ executable backwards 32bit nodebug ] DLL flags 0000 [ ] Linker Version 5.0 Time stamp 3B18C83A : Sat Jun 02 12:04:26 2001 O/S Version 4.0 User Version 0.0 Subsystem Version 4.0 Subsystem 0003 [ Windows character ] Object count 00000008 Symbols offset 00000000 Symbols count 00000000 Optional header size 00E0 Magic # 10B Code size 00009000 Init Data size 00003000 Uninit Data size 00000000 Entry RVA 00001000 Image base 00400000 Code base 00001000 Data base 0000A000 Object/File align 00001000/00000200 Reserved 00000000 Image size 00013000 Header size 00000600 Checksum 00000000 Stack reserve/commit 00100000/00002000 Heap reserve/commit 00100000/00001000 Number interesting RVAs 00000010 Name RVA Size ------------------ -------- -------- Exports 00010000 00000068 Imports 0000F000 00000480 Resources 00011000 00000200 Exceptions 00000000 00000000 Security 00000000 00000000 Fixups 00012000 00000804 Debug 00000000 00000000 Description 00000000 00000000 Global Ptr 00000000 00000000 TLS 0000E000 00000018 Callbacks 00000000 00000000 Bound Imports 00000000 00000000 Import Addr Table 00000000 00000000 Delayed Imports 00000000 00000000 COM Runtime 00000000 00000000 reserved 00000000 00000000 Object table: # Name VirtSize RVA PhysSize Phys off Flags -- -------- -------- -------- -------- -------- -------- 01 .text 00009000 00001000 00008A00 00000600 60000020 [CER] 02 .data 00003000 0000A000 00002600 00009000 C0000040 [IRW] 03 .tls 00001000 0000D000 00000200 0000B600 C0000040 [IRW] 04 .rdata 00001000 0000E000 00000200 0000B800 50000040 [IRS] 05 .idata 00001000 0000F000 00000600 0000BA00 40000040 [IR] 06 .edata 00001000 00010000 00000200 0000C000 40000040 [IR] 07 .rsrc 00001000 00011000 00000200 0000C200 40000040 [IR] 08 .reloc 00001000 00012000 00000A00 0000C400 50000040 [IRS] Key to section flags: C - contains code E - executable I - contains initialized data R - readable S - shareable W - writeable ****************************************************************************** Section: Import ImportLookUpTblRVA:0000F03C Time Stamp: 00000000 Forwarder Chain: 00000000 (index of first forwarder reference) Imports from KERNEL32.DLL CloseHandle CreateFileA ExitProcess GetACP GetCPInfo GetCommandLineA GetCurrentThreadId GetEnvironmentStrings GetFileType GetLastError GetLocalTime GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeW GetVersion GetVersionExA GlobalMemoryStatus HeapAlloc HeapFree LoadLibraryA MultiByteToWideChar RaiseException RtlUnwind SetConsoleCtrlHandler SetFilePointer SetHandleCount TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree WideCharToMultiByte WriteFile Imports from USER32.DLL EnumThreadWindows MessageBoxA wsprintfA ****************************************************************************** Section: Exports Flags: 00000000 Time Stamp: 00000000 Major Version: 0000 Minor Version: 0000 Exports from test.exe 2 exported name(s), 2 export addresse(s). Ordinal base is 1. Sorted by Name: RVA Ord. Hint Name -------- ---- ---- ---- 00001059 1 0000 __GetExceptDLLinfo 0000A11C 2 0001 ___CPPdebugHook ****************************************************************************** Section: Resources Flags: 00000000 Time Stamp: 2AC2608D : Fri Sep 25 01:42:53 1992 Major Version: 0000 Minor Version: 0000 Resources: Type Name Lang Id -------------------------------------------- [0 named entries, 1 ID entries] type: RCData (10) (next directory @00000018) [1 named entries, 0 ID entries] DVCLAL (next directory @00000030) [0 named entries, 1 ID entries] type: Unknown (0) (data @00000048) Offset: 00011068 Size: 00000010 Code Page: 00000000 Reserved: 00000000 .