filenamePEview - Control.exe
size67584 (0x10800)
md5ec63e8be0717bd92c0ffbf7a21749a54
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x6c
blocks_in_file1
num_relocs0
header_paragraphs2
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0
checksum0
ip0x11
cs0
reloc_table_offset0x40
overlay_number0
reserved00x336e695700000000
oem_id0x2032
oem_info0x7250
reserved20x6172676f
reserved30xa0d216d
reserved40xba09b424
reserved50x21cd0100
reserved60x21cd4cb4
lfanew0x60

DOS stub

00000000: 57 69 6e 33 32 20 50 72  6f 67 72 61 6d 21 0d 0a  |Win32 Program!..|
00000010: 24 b4 09 ba 00 01 cd 21  b4 4c cd 21 60 00 00 00  |$......!.L.!`...|
00000020: 47 6f 4c 69 6e 6b 2c 20  47 6f 41 73 6d 20 77 77  |GoLink, GoAsm ww|
00000030: 77 2e 47 6f 44 65 76 54  6f 6f 6c 2e 63 6f 6d 00  |w.GoDevTool.com.|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4dd1b0d7
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion0.38
SizeOfCode0x8200
SizeOfInitializedData0x8200
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x15000
SizeOfHeaders0x400
CheckSum0x19710
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x10000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
code0x10000x81100x8200R-X CODE
data0xa0000x12780x400RW- IDATA
const0xc0000x33b00x3400R-- IDATA
.rsrc0x100000x3b000x3c00R-- IDATA
.idata0x140000xd560xe00R-X CODE

Data Directory

typevasize
EXPORT00
IMPORT0x142640xa0
RESOURCE0x100000x3b00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x143040x1b4
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#141360
BITMAP#26160
ICON#116400
ICON#27440
ICON#32960
MENU#112700
DIALOG#18060
DIALOG#21840
DIALOG#34460
STRING#312300
STRING#410920
STRING#11620
STRING#121360
ACCELERATORS#1560
GROUP_ICON#1480
VERSION#17400
MANIFEST#15370
idlangstring
324105Commands for working with files.
334105Commands for customizing this window.
344105Commands for accessing view history.
354105Commands for displaying Help.
364105Open an existing file.
374105Close the current file.
384105Quit PEview.
394105Show or hide the toolbar.
404105Show or hide the status bar.
414105Show or hide the treeview.
424105Show or hide the header.
434105Options for displaying the address.
444105Display the address as an offset from the start of the file.
454105Display the address as an offset from the start of the view.
464105Display the address for sections as a relative virtual address.
474105Display the address as a virtual address or as an offset from the start of an OBJ file.
484105Options for displaying raw data.
494105Display the raw data in BYTE format.
504105Display the raw data in WORD format.
514105Display the raw data in DWORD format.
524105Change the split position between the two panes.
534105Change the current font.
544105Change additional program settings.
554105Go back one step in the view history list.
564105Go forward one step in the view history list.
574105Go to next item in contents.
584105Go to previous item in contents.
594105Save additional view position for the current view to the view history list.
604105Display program information, version number, and copyright.
1674105Open
1754105File Offset
1764105View Offset
1774105RVA
1784105VA
1804105BYTE
1814105WORD
1824105DWORD
1864105Back
1874105Forward
1884105Next
1894105Previous
module_namehintordfunction_name
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll568RegCreateKeyExA
ADVAPI32.dll637RegSetValueExA
ADVAPI32.dll573RegDeleteKeyA
ADVAPI32.dll615RegQueryInfoKeyA
KERNEL32.dll281ExitProcess
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll390GetCommandLineA
KERNEL32.dll446GetCurrentDirectoryA
KERNEL32.dll1100SetCurrentDirectoryA
KERNEL32.dll1052SearchPathA
KERNEL32.dll136CreateFileA
KERNEL32.dll137CreateFileMappingA
KERNEL32.dll855MapViewOfFile
KERNEL32.dll496GetFileSize
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll82CloseHandle
KERNEL32.dll514GetLastError
KERNEL32.dll349FormatMessageA
KERNEL32.dll1048RtlUnwind
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll454GetDateFormatA
KERNEL32.dll661GetTimeFormatA
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll1260VirtualFree
KERNEL32.dll1297WideCharToMultiByte
USER32.dll761TranslateAcceleratorA
USER32.dll764TranslateMessage
USER32.dll174DispatchMessageA
USER32.dll345GetMessageA
USER32.dll155DefWindowProcA
USER32.dll494LoadImageA
USER32.dll588RegisterClassExA
USER32.dll109CreateWindowExA
USER32.dll171DialogBoxParamA
USER32.dll709SetWindowPlacement
USER32.dll785UpdateWindow
USER32.dll484LoadAcceleratorsA
USER32.dll331GetMenu
USER32.dll673SetMenuItemInfoA
USER32.dll631SendMessageA
USER32.dll658SetFocus
USER32.dll382GetSystemMetrics
USER32.dll747SystemParametersInfoA
USER32.dll379GetSysColor
USER32.dll166DestroyWindow
USER32.dll567PostQuitMessage
USER32.dll71ClientToScreen
USER32.dll412GetWindowRect
USER32.dll411GetWindowPlacement
USER32.dll276GetClientRect
USER32.dll710SetWindowPos
USER32.dll650SetCursorPos
USER32.dll648SetCursor
USER32.dll640SetCapture
USER32.dll72ClipCursor
USER32.dll289GetDC
USER32.dll196DrawFocusRect
USER32.dll612ReleaseCapture
USER32.dll613ReleaseDC
USER32.dll288GetCursorPos
USER32.dll246FillRect
USER32.dll446InvalidateRect
USER32.dll714SetWindowTextA
USER32.dll565PostMessageA
USER32.dll659SetForegroundWindow
USER32.dll526MessageBoxA
USER32.dll735ShowWindow
USER32.dll586RedrawWindow
USER32.dll295GetDlgItem
USER32.dll218EndDialog
USER32.dll516MapDialogRect
USER32.dll699SetTimer
USER32.dll483KillTimer
USER32.dll405GetWindowLongA
USER32.dll707SetWindowLongA
USER32.dll688SetScrollInfo
USER32.dll373GetScrollInfo
USER32.dll623ScrollDC
USER32.dll14BeginPaint
USER32.dll220EndPaint
GDI32.dll631SelectObject
GDI32.dll230DeleteObject
GDI32.dll48CreateCompatibleDC
GDI32.dll19BitBlt
GDI32.dll227DeleteDC
GDI32.dll639SetBkMode
GDI32.dll678SetTextColor
GDI32.dll75CreatePen
GDI32.dll61CreateFontIndirectA
GDI32.dll446GetCharacterPlacementA
GDI32.dll311ExtTextOutA
GDI32.dll570MoveToEx
GDI32.dll566LineTo
COMDLG32.dll11GetOpenFileNameA
COMDLG32.dll2ChooseFontA
COMCTL32.dll102InitCommonControlsEx
COMCTL32.dll107MenuHelp
SHELL32.dll29DragQueryFileA
SHELL32.dll27DragFinish

StringTable 040904E4

CompanyNameWayne J. Radburn
FileDescriptionPE/COFF File Viewer
FileVersion0.9.9.0
InternalNamePEview
LegalCopyrightCopyright© 1997-2011 Wayne J. Radburn
OriginalFilenamePEview.exe
ProductNamePEview
ProductVersion0.9.9.0

VS_FIXEDFILEINFO

FileVersion0.9.9.0
ProductVersion0.9.9.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
067584EXE05/16/2011 23:18:47#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK