parentPEview9small.exe
filenamePEview9small.unpacked.exe
size67584 (0x10800)
md5f212eab0b0600ac312a204d2819101a2
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x6c
blocks_in_file1
num_relocs0
header_paragraphs2
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0
checksum0
ip0x11
cs0
reloc_table_offset0x40
overlay_number0
reserved00x336e695700000000
oem_id0x2032
oem_info0x7250
reserved20x6172676f
reserved30xa0d216d
reserved40xba09b424
reserved50x21cd0100
reserved60x21cd4cb4
lfanew0x60

DOS stub

00000000: 57 69 6e 33 32 20 50 72  6f 67 72 61 6d 21 0d 0a  |Win32 Program!..|
00000010: 24 b4 09 ba 00 01 cd 21  b4 4c cd 21 60 00 00 00  |$......!.L.!`...|
00000020: 47 6f 4c 69 6e 6b 2c 20  47 6f 41 73 6d 20 77 77  |GoLink, GoAsm ww|
00000030: 77 2e 47 6f 44 65 76 54  6f 6f 6c 2e 63 6f 6d 00  |w.GoDevTool.com.|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4dd1b0d7
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion0.38
SizeOfCode0x8200
SizeOfInitializedData0x8200
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x15000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x10000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
code0x10000x81100x8200R-X CODE
data0xa0000x12780x400RW- IDATA
const0xc0000x33b00x3400R-- IDATA
.rsrc0x100000x3b000x3c00R-- IDATA
.idata0x140000xd560xe00R-X CODE

Data Directory

typevasize
EXPORT00
IMPORT0x142640xa0
RESOURCE0x100000x3b00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#141360
BITMAP#26160
ICON#116400
ICON#27440
ICON#32960
MENU#112700
DIALOG#18060
DIALOG#21840
DIALOG#34460
STRING#312300
STRING#410920
STRING#11620
STRING#121360
ACCELERATORS#1560
GROUP_ICON#1480
VERSION#17400
MANIFEST#15370
idlangstring
324105Commands for working with files.
334105Commands for customizing this window.
344105Commands for accessing view history.
354105Commands for displaying Help.
364105Open an existing file.
374105Close the current file.
384105Quit PEview.
394105Show or hide the toolbar.
404105Show or hide the status bar.
414105Show or hide the treeview.
424105Show or hide the header.
434105Options for displaying the address.
444105Display the address as an offset from the start of the file.
454105Display the address as an offset from the start of the view.
464105Display the address for sections as a relative virtual address.
474105Display the address as a virtual address or as an offset from the start of an OBJ file.
484105Options for displaying raw data.
494105Display the raw data in BYTE format.
504105Display the raw data in WORD format.
514105Display the raw data in DWORD format.
524105Change the split position between the two panes.
534105Change the current font.
544105Change additional program settings.
554105Go back one step in the view history list.
564105Go forward one step in the view history list.
574105Go to next item in contents.
584105Go to previous item in contents.
594105Save additional view position for the current view to the view history list.
604105Display program information, version number, and copyright.
1674105Open
1754105File Offset
1764105View Offset
1774105RVA
1784105VA
1804105BYTE
1814105WORD
1824105DWORD
1864105Back
1874105Forward
1884105Next
1894105Previous
module_namehintordfunction_name
KERNEL32.DLLExitProcess
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetCommandLineA
KERNEL32.DLLGetCurrentDirectoryA
KERNEL32.DLLSetCurrentDirectoryA
KERNEL32.DLLSearchPathA
KERNEL32.DLLCreateFileA
KERNEL32.DLLCreateFileMappingA
KERNEL32.DLLMapViewOfFile
KERNEL32.DLLGetFileSize
KERNEL32.DLLUnmapViewOfFile
KERNEL32.DLLCloseHandle
KERNEL32.DLLGetLastError
KERNEL32.DLLFormatMessageA
KERNEL32.DLLRtlUnwind
KERNEL32.DLLFileTimeToSystemTime
KERNEL32.DLLGetDateFormatA
KERNEL32.DLLGetTimeFormatA
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLVirtualFree
KERNEL32.DLLWideCharToMultiByte
ADVAPI32.dllRegOpenKeyExA
ADVAPI32.dllRegQueryValueExA
ADVAPI32.dllRegCloseKey
ADVAPI32.dllRegCreateKeyExA
ADVAPI32.dllRegSetValueExA
ADVAPI32.dllRegDeleteKeyA
ADVAPI32.dllRegQueryInfoKeyA
COMCTL32.dllInitCommonControlsEx
COMCTL32.dllMenuHelp
COMDLG32.dllGetOpenFileNameA
COMDLG32.dllChooseFontA
GDI32.dllSelectObject
GDI32.dllDeleteObject
GDI32.dllCreateCompatibleDC
GDI32.dllBitBlt
GDI32.dllDeleteDC
GDI32.dllSetBkMode
GDI32.dllSetTextColor
GDI32.dllCreatePen
GDI32.dllCreateFontIndirectA
GDI32.dllGetCharacterPlacementA
GDI32.dllExtTextOutA
GDI32.dllMoveToEx
GDI32.dllLineTo
SHELL32.dllDragQueryFileA
SHELL32.dllDragFinish
USER32.dllTranslateAcceleratorA
USER32.dllTranslateMessage
USER32.dllDispatchMessageA
USER32.dllGetMessageA
USER32.dllDefWindowProcA
USER32.dllLoadImageA
USER32.dllRegisterClassExA
USER32.dllCreateWindowExA
USER32.dllDialogBoxParamA
USER32.dllSetWindowPlacement
USER32.dllUpdateWindow
USER32.dllLoadAcceleratorsA
USER32.dllGetMenu
USER32.dllSetMenuItemInfoA
USER32.dllSendMessageA
USER32.dllSetFocus
USER32.dllGetSystemMetrics
USER32.dllSystemParametersInfoA
USER32.dllGetSysColor
USER32.dllDestroyWindow
USER32.dllPostQuitMessage
USER32.dllClientToScreen
USER32.dllGetWindowRect
USER32.dllGetWindowPlacement
USER32.dllGetClientRect
USER32.dllSetWindowPos
USER32.dllSetCursorPos
USER32.dllSetCursor
USER32.dllSetCapture
USER32.dllClipCursor
USER32.dllGetDC
USER32.dllDrawFocusRect
USER32.dllReleaseCapture
USER32.dllReleaseDC
USER32.dllGetCursorPos
USER32.dllFillRect
USER32.dllInvalidateRect
USER32.dllSetWindowTextA
USER32.dllPostMessageA
USER32.dllSetForegroundWindow
USER32.dllMessageBoxA
USER32.dllShowWindow
USER32.dllRedrawWindow
USER32.dllGetDlgItem
USER32.dllEndDialog
USER32.dllMapDialogRect
USER32.dllSetTimer
USER32.dllKillTimer
USER32.dllGetWindowLongA
USER32.dllSetWindowLongA
USER32.dllSetScrollInfo
USER32.dllGetScrollInfo
USER32.dllScrollDC
USER32.dllBeginPaint
USER32.dllEndPaint

StringTable 040904E4

CompanyNameWayne J. Radburn
FileDescriptionPE/COFF File Viewer
FileVersion0.9.9.0
InternalNamePEview
LegalCopyrightCopyright© 1997-2011 Wayne J. Radburn
OriginalFilenamePEview.exe
ProductNamePEview
ProductVersion0.9.9.0

VS_FIXEDFILEINFO

FileVersion0.9.9.0
ProductVersion0.9.9.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
067584EXE05/16/2011 23:18:47#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK