Microsoft (R) COFF/PE Dumper Version 8.00.50727.42 Copyright (C) Microsoft Corporation. All rights reserved. Dump of file ClickCounter1.exe PE signature found File Type: EXECUTABLE IMAGE FILE HEADER VALUES 14C machine (x86) 3 number of sections 46E05085 time date stamp Thu Sep 06 14:09:57 2007 0 file pointer to symbol table 0 number of symbols E0 size of optional header 10E characteristics Executable Line numbers stripped Symbols stripped 32 bit word machine OPTIONAL HEADER VALUES 10B magic # (PE32) 8.00 linker version 400 size of code 600 size of initialized data 0 size of uninitialized data 23CE entry point (004023CE) 2000 base of code 4000 base of data 400000 image base (00400000 to 00407FFF) 2000 section alignment 200 file alignment 4.00 operating system version 0.00 image version 4.00 subsystem version 0 Win32 version 8000 size of image 200 size of headers 0 checksum 3 subsystem (Windows CUI) 400 DLL characteristics No structured exception handler 100000 size of stack reserve 1000 size of stack commit 100000 size of heap reserve 1000 size of heap commit 0 loader flags 10 number of directories 0 [ 0] RVA [size] of Export Directory 2378 [ 53] RVA [size] of Import Directory 4000 [ 2B8] RVA [size] of Resource Directory 0 [ 0] RVA [size] of Exception Directory 0 [ 0] RVA [size] of Certificates Directory 6000 [ C] RVA [size] of Base Relocation Directory 0 [ 0] RVA [size] of Debug Directory 0 [ 0] RVA [size] of Architecture Directory 0 [ 0] RVA [size] of Global Pointer Directory 0 [ 0] RVA [size] of Thread Storage Directory 0 [ 0] RVA [size] of Load Configuration Directory 0 [ 0] RVA [size] of Bound Import Directory 2000 [ 8] RVA [size] of Import Address Table Directory 0 [ 0] RVA [size] of Delay Import Directory 2008 [ 48] RVA [size] of COM Descriptor Directory 0 [ 0] RVA [size] of Reserved Directory SECTION HEADER #1 .text name 3D4 virtual size 2000 virtual address (00402000 to 004023D3) 400 size of raw data 200 file pointer to raw data (00000200 to 000005FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 60000020 flags Code Execute Read RAW DATA #1 00402000: B0 23 00 00 00 00 00 00 48 00 00 00 02 00 05 00 °#......H....... 00402010: 94 20 00 00 E4 02 00 00 01 00 00 00 01 00 00 06 . ..ä........... 00402020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00402030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00402040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00402050: 13 30 03 00 30 00 00 00 01 00 00 11 00 16 0A 2B .0..0..........+ 00402060: 27 00 72 01 00 00 70 06 8C 04 00 00 01 72 29 00 '.r...p......r). 00402070: 00 70 28 03 00 00 0A 28 04 00 00 0A 00 06 17 58 .p(....(.......X 00402080: 0A 28 05 00 00 0A 26 00 17 0B 2B D5 1E 02 28 06 .(....&...+Õ..(. 00402090: 00 00 0A 2A 42 53 4A 42 01 00 01 00 00 00 00 00 ...*BSJB........ 004020A0: 0C 00 00 00 76 32 2E 30 2E 35 30 37 32 37 00 00 ....v2.0.50727.. 004020B0: 00 00 05 00 6C 00 00 00 00 01 00 00 23 7E 00 00 ....l.......#~.. 004020C0: 6C 01 00 00 E4 00 00 00 23 53 74 72 69 6E 67 73 l...ä...#Strings 004020D0: 00 00 00 00 50 02 00 00 30 00 00 00 23 55 53 00 ....P...0...#US. 004020E0: 80 02 00 00 10 00 00 00 23 47 55 49 44 00 00 00 ........#GUID... 004020F0: 90 02 00 00 54 00 00 00 23 42 6C 6F 62 00 00 00 ....T...#Blob... 00402100: 00 00 00 00 02 00 00 01 47 14 02 00 09 00 00 00 ........G....... 00402110: 00 FA 01 33 00 16 00 00 01 00 00 00 06 00 00 00 .ú.3............ 00402120: 02 00 00 00 02 00 00 00 06 00 00 00 02 00 00 00 ................ 00402130: 01 00 00 00 01 00 00 00 01 00 00 00 00 00 0A 00 ................ 00402140: 01 00 00 00 00 00 06 00 47 00 40 00 06 00 79 00 ........G.@...y. 00402150: 59 00 06 00 99 00 59 00 06 00 B7 00 40 00 06 00 Y.....Y...·.@... 00402160: BD 00 40 00 06 00 CB 00 40 00 00 00 00 00 01 00 ½.@...Ë.@....... 00402170: 00 00 00 00 01 00 01 00 00 00 10 00 1C 00 29 00 ..............). 00402180: 05 00 01 00 01 00 50 20 00 00 00 00 96 00 4E 00 ......P ......N. 00402190: 0A 00 01 00 8C 20 00 00 00 00 86 18 53 00 0E 00 ..... ......S... 004021A0: 01 00 11 00 53 00 12 00 19 00 53 00 0E 00 29 00 ....S.....S...). 004021B0: C4 00 17 00 31 00 D3 00 1E 00 31 00 D9 00 23 00 Ä...1.Ó...1.Ù.#. 004021C0: 09 00 53 00 0E 00 2E 00 0B 00 2C 00 2E 00 13 00 ..S.......,..... 004021D0: 35 00 27 00 04 80 00 00 00 00 00 00 00 00 00 00 5.'............. 004021E0: 00 00 00 00 00 00 29 00 00 00 02 00 00 00 00 00 ......)......... 004021F0: 00 00 00 00 00 00 01 00 37 00 00 00 00 00 00 00 ........7....... 00402200: 00 3C 4D 6F 64 75 6C 65 3E 00 43 6C 69 63 6B 43 ..ClickC 00402210: 6F 75 6E 74 65 72 31 2E 65 78 65 00 43 6C 69 63 ounter1.exe.Clic 00402220: 6B 43 6F 75 6E 74 65 72 00 43 6C 69 63 6B 43 6F kCounter.ClickCo 00402230: 75 6E 74 65 72 31 00 6D 73 63 6F 72 6C 69 62 00 unter1.mscorlib. 00402240: 53 79 73 74 65 6D 00 4F 62 6A 65 63 74 00 4D 61 System.Object.Ma 00402250: 69 6E 00 2E 63 74 6F 72 00 53 79 73 74 65 6D 2E in..ctor.System. 00402260: 52 75 6E 74 69 6D 65 2E 43 6F 6D 70 69 6C 65 72 Runtime.Compiler 00402270: 53 65 72 76 69 63 65 73 00 43 6F 6D 70 69 6C 61 Services.Compila 00402280: 74 69 6F 6E 52 65 6C 61 78 61 74 69 6F 6E 73 41 tionRelaxationsA 00402290: 74 74 72 69 62 75 74 65 00 52 75 6E 74 69 6D 65 ttribute.Runtime 004022A0: 43 6F 6D 70 61 74 69 62 69 6C 69 74 79 41 74 74 CompatibilityAtt 004022B0: 72 69 62 75 74 65 00 49 6E 74 33 32 00 53 74 72 ribute.Int32.Str 004022C0: 69 6E 67 00 43 6F 6E 63 61 74 00 43 6F 6E 73 6F ing.Concat.Conso 004022D0: 6C 65 00 57 72 69 74 65 00 52 65 61 64 4C 69 6E le.Write.ReadLin 004022E0: 65 00 00 00 00 27 4E 00 75 00 6D 00 62 00 65 00 e....'N.u.m.b.e. 004022F0: 72 00 20 00 6F 00 66 00 20 00 63 00 6C 00 69 00 r. .o.f. .c.l.i. 00402300: 63 00 6B 00 73 00 20 00 3D 00 20 00 00 03 2E 00 c.k.s. .=. ..... 00402310: 00 00 00 00 75 C8 59 6B A5 58 41 46 A4 EF 02 A2 ....uÈYk¥XAF¤ï.¢ 00402320: AB 6E 33 22 00 08 B7 7A 5C 56 19 34 E0 89 03 00 «n3"..·z\V.4à... 00402330: 00 01 03 20 00 01 04 20 01 01 08 06 00 03 0E 1C ... ... ........ 00402340: 1C 1C 04 00 01 01 0E 03 00 00 0E 04 07 02 08 02 ................ 00402350: 08 01 00 08 00 00 00 00 00 1E 01 00 01 00 54 02 ..............T. 00402360: 16 57 72 61 70 4E 6F 6E 45 78 63 65 70 74 69 6F .WrapNonExceptio 00402370: 6E 54 68 72 6F 77 73 01 A0 23 00 00 00 00 00 00 nThrows. #...... 00402380: 00 00 00 00 BE 23 00 00 00 20 00 00 00 00 00 00 ....¾#... ...... 00402390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 004023A0: B0 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 °#.............. 004023B0: 00 00 5F 43 6F 72 45 78 65 4D 61 69 6E 00 6D 73 .._CorExeMain.ms 004023C0: 63 6F 72 65 65 2E 64 6C 6C 00 00 00 00 00 FF 25 coree.dll.....ÿ% 004023D0: 00 20 40 00 . @. clr Header: 48 cb 2.05 runtime version 2094 [ 2E4] RVA [size] of MetaData Directory 1 flags 6000001 entry point token 0 [ 0] RVA [size] of Resources Directory 0 [ 0] RVA [size] of StrongNameSignature Directory 0 [ 0] RVA [size] of CodeManagerTable Directory 0 [ 0] RVA [size] of VTableFixups Directory 0 [ 0] RVA [size] of ExportAddressTableJumps Directory 0 [ 0] RVA [size] of ManagedNativeHeader Directory Section contains the following imports: mscoree.dll 402000 Import Address Table 4023A0 Import Name Table 0 time date stamp 0 Index of first forwarder reference 0 _CorExeMain SECTION HEADER #2 .rsrc name 2B8 virtual size 4000 virtual address (00404000 to 004042B7) 400 size of raw data 600 file pointer to raw data (00000600 to 000009FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only RAW DATA #2 00404000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 00404010: 10 00 00 00 18 00 00 80 00 00 00 00 00 00 00 00 ................ 00404020: 00 00 00 00 00 00 01 00 01 00 00 00 30 00 00 80 ............0... 00404030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 ................ 00404040: 00 00 00 00 48 00 00 00 58 40 00 00 5C 02 00 00 ....H...X@..\... 00404050: 00 00 00 00 00 00 00 00 5C 02 34 00 00 00 56 00 ........\.4...V. 00404060: 53 00 5F 00 56 00 45 00 52 00 53 00 49 00 4F 00 S._.V.E.R.S.I.O. 00404070: 4E 00 5F 00 49 00 4E 00 46 00 4F 00 00 00 00 00 N._.I.N.F.O..... 00404080: BD 04 EF FE 00 00 01 00 00 00 00 00 00 00 00 00 ½.ïþ............ 00404090: 00 00 00 00 00 00 00 00 3F 00 00 00 00 00 00 00 ........?....... 004040A0: 04 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 004040B0: 00 00 00 00 44 00 00 00 01 00 56 00 61 00 72 00 ....D.....V.a.r. 004040C0: 46 00 69 00 6C 00 65 00 49 00 6E 00 66 00 6F 00 F.i.l.e.I.n.f.o. 004040D0: 00 00 00 00 24 00 04 00 00 00 54 00 72 00 61 00 ....$.....T.r.a. 004040E0: 6E 00 73 00 6C 00 61 00 74 00 69 00 6F 00 6E 00 n.s.l.a.t.i.o.n. 004040F0: 00 00 00 00 00 00 B0 04 BC 01 00 00 01 00 53 00 ......°.¼.....S. 00404100: 74 00 72 00 69 00 6E 00 67 00 46 00 69 00 6C 00 t.r.i.n.g.F.i.l. 00404110: 65 00 49 00 6E 00 66 00 6F 00 00 00 98 01 00 00 e.I.n.f.o....... 00404120: 01 00 30 00 30 00 30 00 30 00 30 00 34 00 62 00 ..0.0.0.0.0.4.b. 00404130: 30 00 00 00 2C 00 02 00 01 00 46 00 69 00 6C 00 0...,.....F.i.l. 00404140: 65 00 44 00 65 00 73 00 63 00 72 00 69 00 70 00 e.D.e.s.c.r.i.p. 00404150: 74 00 69 00 6F 00 6E 00 00 00 00 00 20 00 00 00 t.i.o.n..... ... 00404160: 30 00 08 00 01 00 46 00 69 00 6C 00 65 00 56 00 0.....F.i.l.e.V. 00404170: 65 00 72 00 73 00 69 00 6F 00 6E 00 00 00 00 00 e.r.s.i.o.n..... 00404180: 30 00 2E 00 30 00 2E 00 30 00 2E 00 30 00 00 00 0...0...0...0... 00404190: 44 00 12 00 01 00 49 00 6E 00 74 00 65 00 72 00 D.....I.n.t.e.r. 004041A0: 6E 00 61 00 6C 00 4E 00 61 00 6D 00 65 00 00 00 n.a.l.N.a.m.e... 004041B0: 43 00 6C 00 69 00 63 00 6B 00 43 00 6F 00 75 00 C.l.i.c.k.C.o.u. 004041C0: 6E 00 74 00 65 00 72 00 31 00 2E 00 65 00 78 00 n.t.e.r.1...e.x. 004041D0: 65 00 00 00 28 00 02 00 01 00 4C 00 65 00 67 00 e...(.....L.e.g. 004041E0: 61 00 6C 00 43 00 6F 00 70 00 79 00 72 00 69 00 a.l.C.o.p.y.r.i. 004041F0: 67 00 68 00 74 00 00 00 20 00 00 00 4C 00 12 00 g.h.t... ...L... 00404200: 01 00 4F 00 72 00 69 00 67 00 69 00 6E 00 61 00 ..O.r.i.g.i.n.a. 00404210: 6C 00 46 00 69 00 6C 00 65 00 6E 00 61 00 6D 00 l.F.i.l.e.n.a.m. 00404220: 65 00 00 00 43 00 6C 00 69 00 63 00 6B 00 43 00 e...C.l.i.c.k.C. 00404230: 6F 00 75 00 6E 00 74 00 65 00 72 00 31 00 2E 00 o.u.n.t.e.r.1... 00404240: 65 00 78 00 65 00 00 00 34 00 08 00 01 00 50 00 e.x.e...4.....P. 00404250: 72 00 6F 00 64 00 75 00 63 00 74 00 56 00 65 00 r.o.d.u.c.t.V.e. 00404260: 72 00 73 00 69 00 6F 00 6E 00 00 00 30 00 2E 00 r.s.i.o.n...0... 00404270: 30 00 2E 00 30 00 2E 00 30 00 00 00 38 00 08 00 0...0...0...8... 00404280: 01 00 41 00 73 00 73 00 65 00 6D 00 62 00 6C 00 ..A.s.s.e.m.b.l. 00404290: 79 00 20 00 56 00 65 00 72 00 73 00 69 00 6F 00 y. .V.e.r.s.i.o. 004042A0: 6E 00 00 00 30 00 2E 00 30 00 2E 00 30 00 2E 00 n...0...0...0... 004042B0: 30 00 00 00 00 00 00 00 0....... SECTION HEADER #3 .reloc name C virtual size 6000 virtual address (00406000 to 0040600B) 200 size of raw data A00 file pointer to raw data (00000A00 to 00000BFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 42000040 flags Initialized Data Discardable Read Only RAW DATA #3 00406000: 00 20 00 00 0C 00 00 00 D0 33 00 00 . ......Ð3.. BASE RELOCATIONS #3 2000 RVA, C SizeOfBlock 3D0 HIGHLOW 00402000 0 ABS Summary 2000 .reloc 2000 .rsrc 2000 .text