Example - PE File

Here is an example of the tool output:

Don’t forget to check our pefile tool and our file entropy article.

File Name: iexplore.exe
MD5 Hash: dde5a0dfaf7c6370fb36402d7a746ed3
SHA1 Hash: b9c32e97aa5d16bd6a70d6cb5d3b492289b7bd2f
File Entropy: 6.60
NT Offset: 000000e8
Overlay Count: 0
File-Overlay: 00003c30 (15408 bytes)

File Attributes:

[ ]System.
[X]Archive.
[ ]Read only.
[ ]Hidden.
[ ]Compressed.
[ ]Encrypted.
[ ]Normal.
[ ]Offline.

Time Stamp:

Creation Time: 2013.3.15 1:2:16
Last Access Time: 2013.3.15 1:2:16
Last Write Time: 2013.2.2 4:19:4
File Size: 757296 bytes

File Version Info:

Signature: 0xfeef04bdL
StrucVersion: 1.0
File Version: 9.0.8112.16470
Product Version: 9.0.8112.16470
FileType: 0x00000001L The file contains an application.
FileOS: 0x00040004L The file was designed for Windows NT.

Image ConfigInformation:

TimeDateStamp: 00000000
MajorVersion: 00000000
MinorVersion: 00000000
GlobalFlagsClear: 00000000
GlobalFlagsSet: 00000000
CriticalSectionDefaultTimeout: 00000000
DeCommitFreeBlockThreshold: 00000000
DeCommitTotalFreeThreshold: 00000000
LockPrefixTable: 00000000
MaximumAllocationSize: 00000000
VirtualMemoryThreshold: 00000000
ProcessAffinityMask: 00000000
ProcessHeapFlags: 00000000
CSDVersion: 00000000
Reserved1: 00000000
EditList: 00000000

Header Information:

Signature: 00004550
Is System Image: 0
Is DOS Image: 0
Size Of Image: 757296 bytes
Machine: x86 (0x014c)
NumberOfSections: 00000004
TimeDateStamp: 510C8801 [Sat Feb 02 05:29:05 2013 ]
PointerToSymbolTable: 00000000
NumberOfSymbols: 00000000
SizeOfOptionalHeader: 000000E0

Characteristics information:

The file is executable (there are no unresolved external references).
Computer supports 32-bit words.

Magic:

HDR, The file is an executable image.
MajorLinkerVersion: 0000000A
MinorLinkerVersion: 00000000
SizeOfCode: 00006A00
SizeOfInitializedData: 000AE400
SizeOfUninitializedData: 00000000
BaseOfData: 00008000
AddressOfEntryPoint: 000028A0
BaseOfCode: 00001000
ImageBase: 00400000
SectionAlignment: 00001000
FileAlignment: 00000200
MajorOperatingSystemVersion: 00000006
MinorOperatingSystemVersion: 00000001
MajorImageVersion: 00000006
MinorImageVersion: 00000001
MajorSubsystemVersion: 00000006
MinorSubsystemVersion: 00000000
Win32VersionValue: 00000000
SizeOfImage: 000B8000
SizeOfHeaders: 00000400
CheckSum: 000BCDAE

Subsystem:

Windows graphical user interface (GUI) subsystem…

Dll Characteristics:

SizeOfStackReserve: 00100000
SizeOfStackCommit: 0000E000
SizeOfHeapReserve: 00100000
SizeOfHeapCommit: 00001000
LoaderFlags: 00000000
NumberOfRvaAndSizes: 00000010
VirtualAddress: 00006E58
Size: 000000C8
VirtualAddress: 00009000
Size: 000AD498
VirtualAddress: 000B5200
Size: 00003C30
VirtualAddress: 000B7000
Size: 000004E8
VirtualAddress: 00007970
Size: 00000038
VirtualAddress: 00004D30
Size: 00000040
VirtualAddress: 00001000
Size: 0000020C
VirtualAddress: 00006DB4
Size: 00000060

Data directory sections:

Section Name: .text

Characteristics information:
Section contains executable code.
Section can be executed as code.
Section can be read.
VirtualSize: 000069D1 (27089)
NumberOfRelocations: 00000000
NumberOfLinenumbers: 00000000
PointerToLinenumbers: 00000000
PointerToRawData: 00000400 (1024)
PointerToRelocations: 00000000
SizeOfRawData: 00006A00 (27136)
VirtualAddress: 00001000 (4096)
Entropy: 5.80
MD5: 1b3adc934aaa9402ef7e13a44550c23b

Section Name: .data

Characteristics information:
Section contains initialized data.
Section can be read.
Section can be written to.
VirtualSize: 0000069C (1692)
NumberOfRelocations: 00000000
NumberOfLinenumbers: 00000000
PointerToLinenumbers: 00000000
PointerToRawData: 00006E00 (28160)
PointerToRelocations: 00000000
SizeOfRawData: 00000800 (2048)
VirtualAddress: 00008000 (32768)
Entropy: 0.25
MD5: 2ebef405bc29b203fed328a0afba242d

Section Name: .rsrc

Characteristics information:
Section contains initialized data.
Section can be read.
VirtualSize: 000AD498 (709784)
NumberOfRelocations: 00000000
NumberOfLinenumbers: 00000000
PointerToLinenumbers: 00000000
PointerToRawData: 00007600 (30208)
PointerToRelocations: 00000000
SizeOfRawData: 000AD600 (710144)
VirtualAddress: 00009000 (36864)
Entropy: 6.58
MD5: af7489311bf19c672d851bbf86ff60e3

Section Name: .reloc

Characteristics information:
Section contains initialized data.
Section can be discarded as needed.
Section can be read.
VirtualSize: 000004E8 (1256)
NumberOfRelocations: 00000000
NumberOfLinenumbers: 00000000
PointerToLinenumbers: 00000000
PointerToRawData: 000B4C00 (740352)
PointerToRelocations: 00000000
SizeOfRawData: 00000600 (1536)
VirtualAddress: 000B7000 (749568)
Entropy: 5.95
MD5: d70dc2876fb4a525537710fdf9761845

DOS Signature: 5A4D

PE Signature:4550
Optional Header Magic Num: 10B

Imported DLL List:

Imported DLL [0]: ADVAPI32.dll

func: EventWrite (Address: 000071A4)
func: GetTraceEnableFlags (Address: 000071B2)
func: RegQueryValueExW (Address: 000071C8)
func: EventUnregister (Address: 000071DC)
func: GetTraceLoggerHandle (Address: 000071EE)
func: TraceEvent (Address: 00007206)
func: UnregisterTraceGuids (Address: 00007214)
func: RegOpenKeyExW (Address: 0000722C)
func: EventRegister (Address: 0000723C)
func: GetTraceEnableLevel (Address: 0000724C)
func: RegCloseKey (Address: 00007262)
func: RegisterTraceGuidsW (Address: 00007270)
12 functions imported (0 ordinal)

Imported DLL [1]: KERNEL32.dll

func: Wow64DisableWow64FsRedirection (Address: 00007286)
func: Wow64RevertWow64FsRedirection (Address: 000072A8)
func: TerminateProcess (Address: 000072C8)
func: CreateFileW (Address: 000072DC)
func: lstrlenW (Address: 000072EA)
func: VerifyVersionInfoW (Address: 000072F6)
func: GetLastError (Address: 0000730C)
func: GetProcAddress (Address: 0000731C)
func: LocalAlloc (Address: 0000732E)
func: IsWow64Process (Address: 0000733C)
func: HeapSetInformation (Address: 0000734E)
func: GetFileTime (Address: 00007364)
func: DeleteCriticalSection (Address: 00007372)
func: CloseHandle (Address: 0000738A)
func: GetWindowsDirectoryW (Address: 00007398)
func: LocalFree (Address: 000073B0)
func: ExpandEnvironmentStringsW (Address: 000073BC)
func: LoadLibraryW (Address: 000073D8)
func: InitializeCriticalSection (Address: 000073E8)
func: GetModuleHandleW (Address: 00007404)
func: GetCurrentProcess (Address: 00007418)
func: VerSetConditionMask (Address: 0000742C)
func: SetDllDirectoryW (Address: 00007442)
func: CreateProcessW (Address: 00007456)
func: SetErrorMode (Address: 00007468)
func: RaiseException (Address: 00007478)
func: LoadLibraryA (Address: 0000748A)
func: GetSystemDefaultLCID (Address: 0000749A)
func: GetUserDefaultLCID (Address: 000074B2)
func: EnterCriticalSection (Address: 000074C8)
func: GetModuleFileNameW (Address: 000074E0)
func: LeaveCriticalSection (Address: 000074F6)
func: InitializeCriticalSectionAndSpinCount (Address: 0000750E)
func: GetVersionExA (Address: 00007536)
func: FreeLibrary (Address: 00007546)
func: UnhandledExceptionFilter (Address: 00007554)
func: GetSystemTimeAsFileTime (Address: 00007570)
func: GetCurrentProcessId (Address: 0000758A)
func: GetCurrentThreadId (Address: 000075A0)
func: GetTickCount (Address: 000075B6)
func: QueryPerformanceCounter (Address: 000075C6)
func: GetModuleHandleA (Address: 000075E0)
func: SetUnhandledExceptionFilter (Address: 000075F4)
func: GetStartupInfoW (Address: 00007612)
func: InterlockedCompareExchange (Address: 00007624)
func: Sleep (Address: 00007642)
func: InterlockedExchange (Address: 0000764A)
func: GetCurrentDirectoryW (Address: 00007660)
func: GetCommandLineW (Address: 00007678)
49 functions imported (0 ordinal)

Imported DLL [2]: USER32.dll

func: IsWindowEnabled (Address: 0000768A)
func: LoadStringW (Address: 0000769C)
func: CharNextW (Address: 000076AA)
func: GetWindowThreadProcessId (Address: 000076B6)
func: AllowSetForegroundWindow (Address: 000076D2)
func: SendMessageTimeoutW (Address: 000076EE)
func: FindWindowExW (Address: 00007704)
func: MessageBoxW (Address: 00007714)
func: IsWindowVisible (Address: 00007722)
9 functions imported (0 ordinal)

Imported DLL [3]: msvcrt.dll

func: ??3@YAXPAX@Z (Address: 00007734)
func: ??2@YAPAXI@Z (Address: 00007744)
func: wcschr (Address: 00007754)
func: iswalpha (Address: 0000775E)
func: _onexit (Address: 0000776A)
func: _lock (Address: 00007774)
func: __dllonexit (Address: 0000777C)
func: _unlock (Address: 0000778A)
func: _controlfp (Address: 00007794)
func: _except_handler4_common (Address: 000077A2)
func: ?terminate@@YAXXZ (Address: 000077BC)
func: __set_app_type (Address: 000077D0)
func: __p__fmode (Address: 000077E2)
func: __p__commode (Address: 000077F0)
func: __setusermatherr (Address: 00007800)
func: _amsg_exit (Address: 00007814)
func: _initterm (Address: 00007822)
func: _wcmdln (Address: 0000782E)
func: exit (Address: 00007838)
func: _XcptFilter (Address: 00007840)
func: _exit (Address: 0000784E)
func: _cexit (Address: 00007856)
func: __wgetmainargs (Address: 00007860)
func: wcsncmp (Address: 00007872)
func: iswspace (Address: 0000787C)
func: _vsnwprintf (Address: 00007888)
func: memset (Address: 00007896)
27 functions imported (0 ordinal)

Imported DLL [4]: SHLWAPI.dll

func: SHGetValueW (Address: 000078A0)
func: SHRegGetValueW (Address: 000078AE)
func: SHSetValueW (Address: 000078C0)
func: UrlApplySchemeW (Address: 000078CE)
func: PathIsURLW (Address: 000078E0)
func: PathFindFileNameW (Address: 000078EE)
func: UrlCreateFromPathW (Address: 00007902)
func: StrStrW (Address: 00007918)
func: UrlCanonicalizeW (Address: 00007922)
11 functions imported (2 ordinal)

Imported DLL [5]: SHELL32.dll

func: CommandLineToArgvW (Address: 00007936)
1 functions imported (0 ordinal)

Imported DLL [6]: ole32.dll

func: CoUninitialize (Address: 0000794C)
func: CoInitialize (Address: 0000795E)
2 functions imported (0 ordinal)

Imported DLL [7]: urlmon.dll

2 functions imported (2 ordinal)

Imported DLL [8]: iertutil.dll

9 functions imported (9 ordinal)
9 DLL s Imported.

Stream (ADS) Information:

No Stream Found.

Resource Information:

Types: MUI

Name: 1
Language: 1033
ResInfo: 2b7efd8
Size: 192
Types: WEVT_TEMPLATE
Name: 1
Language: 1033
ResInfo: 4b9098
Size: 39970
Types: ICON
Name: 1
Language: 1033
ResInfo: 4b90a8
Size: 1640
Name: 2
Language: 1033
ResInfo: 4b90b8
Size: 744
Name: 3
Language: 1033
ResInfo: 4b90c8
Size: 488
Name: 4
Language: 1033
ResInfo: 4b90d8
Size: 296
Name: 5
Language: 1033
ResInfo: 4b90e8
Size: 3752
Name: 6
Language: 1033
ResInfo: 4b90f8
Size: 2216
Name: 7
Language: 1033
ResInfo: 4b9108
Size: 1736
Name: 8
Language: 1033
ResInfo: 4b9118
Size: 1384
Name: 9
Language: 1033
ResInfo: 4b9128
Size: 52209
Name: 10
Language: 1033
ResInfo: 4b9138
Size: 9640
Name: 11
Language: 1033
ResInfo: 4b9148
Size: 4264
Name: 12
Language: 1033
ResInfo: 4b9158
Size: 2440
Name: 13
Language: 1033
ResInfo: 4b9168
Size: 1128
Name: 14
Language: 1033
ResInfo: 4b9178
Size: 1640
Name: 15
Language: 1033
ResInfo: 4b9188
Size: 744
Name: 16
Language: 1033
ResInfo: 4b9198
Size: 488
Name: 17
Language: 1033
ResInfo: 4b91a8
Size: 296
Name: 18
Language: 1033
ResInfo: 4b91b8
Size: 3752
Name: 19
Language: 1033
ResInfo: 4b91c8
Size: 2216
Name: 20
Language: 1033
ResInfo: 4b91d8
Size: 1736
Name: 21
Language: 1033
ResInfo: 4b91e8
Size: 1384
Name: 22
Language: 1033
ResInfo: 4b91f8
Size: 38866
Name: 23
Language: 1033
ResInfo: 4b9208
Size: 9640
Name: 24
Language: 1033
ResInfo: 4b9218
Size: 4264
Name: 25
Language: 1033
ResInfo: 4b9228
Size: 2440
Name: 26
Language: 1033
ResInfo: 4b9238
Size: 1128
Name: 27
Language: 1033
ResInfo: 4b9248
Size: 744
Name: 28
Language: 1033
ResInfo: 4b9258
Size: 2216
Name: 29
Language: 1033
ResInfo: 4b9268
Size: 4264
Name: 30
Language: 1033
ResInfo: 4b9278
Size: 744
Name: 31
Language: 1033
ResInfo: 4b9288
Size: 744
Name: 32
Language: 1033
ResInfo: 4b9298
Size: 296
Name: 33
Language: 1033
ResInfo: 4b92a8
Size: 2216
Name: 34
Language: 1033
ResInfo: 4b92b8
Size: 1384
Name: 35
Language: 1033
ResInfo: 4b92c8
Size: 4264
Name: 36
Language: 1033
ResInfo: 4b92d8
Size: 1128
Name: 37
Language: 1033
ResInfo: 4b92e8
Size: 744
Name: 38
Language: 1033
ResInfo: 4b92f8
Size: 296
Name: 39
Language: 1033
ResInfo: 4b9308
Size: 2216
Name: 40
Language: 1033
ResInfo: 4b9318
Size: 1384
Name: 41
Language: 1033
ResInfo: 4b9328
Size: 4264
Name: 42
Language: 1033
ResInfo: 4b9338
Size: 1128
Name: 43
Language: 1033
ResInfo: 4b9348
Size: 744
Name: 44
Language: 1033
ResInfo: 4b9358
Size: 2216
Name: 45
Language: 1033
ResInfo: 4b9368
Size: 4264
Name: 46
Language: 1033
ResInfo: 4b9378
Size: 744
Name: 47
Language: 1033
ResInfo: 4b9388
Size: 2216
Name: 48
Language: 1033
ResInfo: 4b9398
Size: 4264
Name: 49
Language: 1033
ResInfo: 4b93a8
Size: 744
Name: 50
Language: 1033
ResInfo: 4b93b8
Size: 296
Name: 51
Language: 1033
ResInfo: 4b93c8
Size: 2216
Name: 52
Language: 1033
ResInfo: 4b93d8
Size: 1384
Name: 53
Language: 1033
ResInfo: 4b93e8
Size: 4264
Name: 54
Language: 1033
ResInfo: 4b93f8
Size: 1128
Name: 55
Language: 1033
ResInfo: 4b9408
Size: 744
Name: 56
Language: 1033
ResInfo: 4b9418
Size: 296
Name: 57
Language: 1033
ResInfo: 4b9428
Size: 296
Name: 58
Language: 1033
ResInfo: 4b9438
Size: 1384
Name: 59
Language: 1033
ResInfo: 4b9448
Size: 1128
Name: 60
Language: 1033
ResInfo: 4b9458
Size: 296
Name: 61
Language: 1033
ResInfo: 4b9468
Size: 1384
Name: 62
Language: 1033
ResInfo: 4b9478
Size: 1128
Name: 63
Language: 1033
ResInfo: 4b9488
Size: 296
Name: 64
Language: 1033
ResInfo: 4b9498
Size: 1384
Name: 65
Language: 1033
ResInfo: 4b94a8
Size: 1128
Name: 66
Language: 1033
ResInfo: 4b94b8
Size: 1640
Name: 67
Language: 1033
ResInfo: 4b94c8
Size: 744
Name: 68
Language: 1033
ResInfo: 4b94d8
Size: 296
Name: 69
Language: 1033
ResInfo: 4b94e8
Size: 3752
Name: 70
Language: 1033
ResInfo: 4b94f8
Size: 2216
Name: 71
Language: 1033
ResInfo: 4b9508
Size: 1384
Name: 72
Language: 1033
ResInfo: 4b9518
Size: 9640
Name: 73
Language: 1033
ResInfo: 4b9528
Size: 4264
Name: 74
Language: 1033
ResInfo: 4b9538
Size: 1128
Name: 75
Language: 1033
ResInfo: 4b9548
Size: 744
Name: 76
Language: 1033
ResInfo: 4b9558
Size: 296
Name: 77
Language: 1033
ResInfo: 4b9568
Size: 2216
Name: 78
Language: 1033
ResInfo: 4b9578
Size: 1384
Name: 79
Language: 1033
ResInfo: 4b9588
Size: 4264
Name: 80
Language: 1033
ResInfo: 4b9598
Size: 1128
Name: 81
Language: 1033
ResInfo: 4b95a8
Size: 744
Name: 82
Language: 1033
ResInfo: 4b95b8
Size: 296
Name: 83
Language: 1033
ResInfo: 4b95c8
Size: 2216
Name: 84
Language: 1033
ResInfo: 4b95d8
Size: 1384
Name: 85
Language: 1033
ResInfo: 4b95e8
Size: 4264
Name: 86
Language: 1033
ResInfo: 4b95f8
Size: 1128
Name: 87
Language: 1033
ResInfo: 4b9608
Size: 744
Name: 88
Language: 1033
ResInfo: 4b9618
Size: 296
Name: 89
Language: 1033
ResInfo: 4b9628
Size: 2216
Name: 90
Language: 1033
ResInfo: 4b9638
Size: 1384
Name: 91
Language: 1033
ResInfo: 4b9648
Size: 4264
Name: 92
Language: 1033
ResInfo: 4b9658
Size: 1128
Name: 93
Language: 1033
ResInfo: 4b9668
Size: 744
Name: 94
Language: 1033
ResInfo: 4b9678
Size: 296
Name: 95
Language: 1033
ResInfo: 4b9688
Size: 2216
Name: 96
Language: 1033
ResInfo: 4b9698
Size: 1384
Name: 97
Language: 1033
ResInfo: 4b96a8
Size: 4264
Name: 98
Language: 1033
ResInfo: 4b96b8
Size: 1128
Name: 99
Language: 1033
ResInfo: 4b96c8
Size: 744
Name: 100
Language: 1033
ResInfo: 4b96d8
Size: 296
Name: 101
Language: 1033
ResInfo: 4b96e8
Size: 2216
Name: 102
Language: 1033
ResInfo: 4b96f8
Size: 1384
Name: 103
Language: 1033
ResInfo: 4b9708
Size: 4264
Name: 104
Language: 1033
ResInfo: 4b9718
Size: 1128
Name: 105
Language: 1033
ResInfo: 4b9728
Size: 744
Name: 106
Language: 1033
ResInfo: 4b9738
Size: 296
Name: 107
Language: 1033
ResInfo: 4b9748
Size: 2216
Name: 108
Language: 1033
ResInfo: 4b9758
Size: 1384
Name: 109
Language: 1033
ResInfo: 4b9768
Size: 4264
Name: 110
Language: 1033
ResInfo: 4b9778
Size: 1128
Name: 111
Language: 1033
ResInfo: 4b9788
Size: 744
Name: 112
Language: 1033
ResInfo: 4b9798
Size: 2216
Name: 113
Language: 1033
ResInfo: 4b97a8
Size: 4264
Name: 114
Language: 1033
ResInfo: 4b97b8
Size: 744
Name: 115
Language: 1033
ResInfo: 4b97c8
Size: 2216
Name: 116
Language: 1033
ResInfo: 4b97d8
Size: 4264
Name: 117
Language: 1033
ResInfo: 4b97e8
Size: 1640
Name: 118
Language: 1033
ResInfo: 4b97f8
Size: 744
Name: 119
Language: 1033
ResInfo: 4b9808
Size: 296
Name: 120
Language: 1033
ResInfo: 4b9818
Size: 3752
Name: 121
Language: 1033
ResInfo: 4b9828
Size: 2216
Name: 122
Language: 1033
ResInfo: 4b9838
Size: 1384
Name: 123
Language: 1033
ResInfo: 4b9848
Size: 16716
Name: 124
Language: 1033
ResInfo: 4b9858
Size: 9640
Name: 125
Language: 1033
ResInfo: 4b9868
Size: 4264
Name: 126
Language: 1033
ResInfo: 4b9878
Size: 1128
Name: 127
Language: 1033
ResInfo: 4b9888
Size: 1640
Name: 128
Language: 1033
ResInfo: 4b9898
Size: 744
Name: 129
Language: 1033
ResInfo: 4b98a8
Size: 488
Name: 130
Language: 1033
ResInfo: 4b98b8
Size: 296
Name: 131
Language: 1033
ResInfo: 4b98c8
Size: 3752
Name: 132
Language: 1033
ResInfo: 4b98d8
Size: 2216
Name: 133
Language: 1033
ResInfo: 4b98e8
Size: 1736
Name: 134
Language: 1033
ResInfo: 4b98f8
Size: 1384
Name: 135
Language: 1033
ResInfo: 4b9908
Size: 52209
Name: 136
Language: 1033
ResInfo: 4b9918
Size: 9640
Name: 137
Language: 1033
ResInfo: 4b9928
Size: 4264
Name: 138
Language: 1033
ResInfo: 4b9938
Size: 2440
Name: 139
Language: 1033
ResInfo: 4b9948
Size: 1128
Name: 140
Language: 1033
ResInfo: 4b9958
Size: 1640
Name: 141
Language: 1033
ResInfo: 4b9968
Size: 744
Name: 142
Language: 1033
ResInfo: 4b9978
Size: 488
Name: 143
Language: 1033
ResInfo: 4b9988
Size: 296
Name: 144
Language: 1033
ResInfo: 4b9998
Size: 3752
Name: 145
Language: 1033
ResInfo: 4b99a8
Size: 2216
Name: 146
Language: 1033
ResInfo: 4b99b8
Size: 1736
Name: 147
Language: 1033
ResInfo: 4b99c8
Size: 1384
Name: 148
Language: 1033
ResInfo: 4b99d8
Size: 38866
Name: 149
Language: 1033
ResInfo: 4b99e8
Size: 9640
Name: 150
Language: 1033
ResInfo: 4b99f8
Size: 4264
Name: 151
Language: 1033
ResInfo: 4b9a08
Size: 2440
Name: 152
Language: 1033
ResInfo: 4b9a18
Size: 1128
Name: 153
Language: 1033
ResInfo: 4b9a28
Size: 1640
Name: 154
Language: 1033
ResInfo: 4b9a38
Size: 744
Name: 155
Language: 1033
ResInfo: 4b9a48
Size: 488
Name: 156
Language: 1033
ResInfo: 4b9a58
Size: 296
Name: 157
Language: 1033
ResInfo: 4b9a68
Size: 3752
Name: 158
Language: 1033
ResInfo: 4b9a78
Size: 2216
Name: 159
Language: 1033
ResInfo: 4b9a88
Size: 1736
Name: 160
Language: 1033
ResInfo: 4b9a98
Size: 1384
Name: 161
Language: 1033
ResInfo: 4b9aa8
Size: 52209
Name: 162
Language: 1033
ResInfo: 4b9ab8
Size: 9640
Name: 163
Language: 1033
ResInfo: 4b9ac8
Size: 4264
Name: 164
Language: 1033
ResInfo: 4b9ad8
Size: 2440
Name: 165
Language: 1033
ResInfo: 4b9ae8
Size: 1128
Name: 166
Language: 1033
ResInfo: 4b9af8
Size: 1640
Name: 167
Language: 1033
ResInfo: 4b9b08
Size: 744
Name: 168
Language: 1033
ResInfo: 4b9b18
Size: 488
Name: 169
Language: 1033
ResInfo: 4b9b28
Size: 296
Name: 170
Language: 1033
ResInfo: 4b9b38
Size: 3752
Name: 171
Language: 1033
ResInfo: 4b9b48
Size: 2216
Name: 172
Language: 1033
ResInfo: 4b9b58
Size: 1736
Name: 173
Language: 1033
ResInfo: 4b9b68
Size: 1384
Name: 174
Language: 1033
ResInfo: 4b9b78
Size: 38866
Name: 175
Language: 1033
ResInfo: 4b9b88
Size: 9640
Name: 176
Language: 1033
ResInfo: 4b9b98
Size: 4264
Name: 177
Language: 1033
ResInfo: 4b9ba8
Size: 2440
Name: 178
Language: 1033
ResInfo: 4b9bb8
Size: 1128
Types: STRING
Name: 35
Language: 1033
ResInfo: 2b7efe8
Size: 42
Name: 44
Language: 1033
ResInfo: 2b7eff8
Size: 354
Name: 45
Language: 1033
ResInfo: 2b7f008
Size: 1210
Name: 46
Language: 1033
ResInfo: 2b7f018
Size: 66
Types: MESSAGETABLE
Name: 1
Language: 1033
ResInfo: 2b7f028
Size: 804
Types: ICON GROUP
Name: 7
Language: 1033
ResInfo: 4b9bc8
Size: 188
Name: 9
Language: 1033
ResInfo: 4b9bd8
Size: 188
Name: 17
Language: 1033
ResInfo: 4b9be8
Size: 188
Name: 19
Language: 1033
ResInfo: 4b9bf8
Size: 188
Name: 32528
Language: 1033
ResInfo: 4b9c08
Size: 188
Name: 32529
Language: 1033
ResInfo: 4b9c18
Size: 188
Name: 32534
Language: 1033
ResInfo: 4b9c28
Size: 48
Name: 32535
Language: 1033
ResInfo: 4b9c38
Size: 20
Name: 32536
Language: 1033
ResInfo: 4b9c48
Size: 90
Name: 32537
Language: 1033
ResInfo: 4b9c58
Size: 90
Name: 32538
Language: 1033
ResInfo: 4b9c68
Size: 48
Name: 32539
Language: 1033
ResInfo: 4b9c78
Size: 48
Name: 32540
Language: 1033
ResInfo: 4b9c88
Size: 34
Name: 32541
Language: 1033
ResInfo: 4b9c98
Size: 90
Name: 32542
Language: 1033
ResInfo: 4b9ca8
Size: 90
Name: 32543
Language: 1033
ResInfo: 4b9cb8
Size: 48
Name: 32544
Language: 1033
ResInfo: 4b9cc8
Size: 48
Name: 32545
Language: 1033
ResInfo: 4b9cd8
Size: 48
Name: 32546
Language: 1033
ResInfo: 4b9ce8
Size: 90
Name: 32547
Language: 1033
ResInfo: 4b9cf8
Size: 132
Name: 32548
Language: 1033
ResInfo: 4b9d08
Size: 90
Name: 32549
Language: 1033
ResInfo: 4b9d18
Size: 90
Name: 32550
Language: 1033
ResInfo: 4b9d28
Size: 90
Name: 32551
Language: 1033
ResInfo: 4b9d38
Size: 90
Name: 32552
Language: 1033
ResInfo: 4b9d48
Size: 48
Name: 32553
Language: 1033
ResInfo: 4b9d58
Size: 48
Name: 32554
Language: 1033
ResInfo: 4b9d68
Size: 146
Types: VERSION
Name: 1
Language: 1033
ResInfo: 2b7f038
Size: 1548