Microsoft (R) COFF/PE Dumper Version 8.00.50727.42
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file tiny.exe

PE signature found

File Type: EXECUTABLE IMAGE

FILE HEADER VALUES
             14C machine (x86)
               1 number of sections
        4545BE5D time date stamp Mon Oct 30 00:57:01 2006
               0 file pointer to symbol table
               0 number of symbols
              E0 size of optional header
             103 characteristics
                   Relocations stripped
                   Executable
                   32 bit word machine

OPTIONAL HEADER VALUES
             10B magic # (PE32)
            8.00 linker version
               4 size of code
               0 size of initialized data
               0 size of uninitialized data
             160 entry point (00400160)
             160 base of code
             164 base of data
          400000 image base (00400000 to 00400163)
               1 section alignment
               1 file alignment
            4.00 operating system version
            0.00 image version
            4.00 subsystem version
               0 Win32 version
             164 size of image
             160 size of headers
               0 checksum
               2 subsystem (Windows GUI)
             400 DLL characteristics
                   No structured exception handler
          100000 size of stack reserve
            1000 size of stack commit
          100000 size of heap reserve
            1000 size of heap commit
               0 loader flags
              10 number of directories
               0 [       0] RVA [size] of Export Directory
               0 [       0] RVA [size] of Import Directory
               0 [       0] RVA [size] of Resource Directory
               0 [       0] RVA [size] of Exception Directory
               0 [       0] RVA [size] of Certificates Directory
               0 [       0] RVA [size] of Base Relocation Directory
               0 [       0] RVA [size] of Debug Directory
               0 [       0] RVA [size] of Architecture Directory
               0 [       0] RVA [size] of Global Pointer Directory
               0 [       0] RVA [size] of Thread Storage Directory
               0 [       0] RVA [size] of Load Configuration Directory
               0 [       0] RVA [size] of Bound Import Directory
               0 [       0] RVA [size] of Import Address Table Directory
               0 [       0] RVA [size] of Delay Import Directory
               0 [       0] RVA [size] of COM Descriptor Directory
               0 [       0] RVA [size] of Reserved Directory


SECTION HEADER #1
   .text name
       4 virtual size
     160 virtual address (00400160 to 00400163)
       4 size of raw data
     160 file pointer to raw data (00000160 to 00000163)
       0 file pointer to relocation table
       0 file pointer to line numbers
       0 number of relocations
       0 number of line numbers
60000020 flags
         Code
         Execute Read

  00400160: 6A 2A              push        2Ah
  00400162: 58                 pop         eax
  00400163: C3                 ret

  Summary

           4 .text