100 MS-DOS EXECUTABLE FILE 101 Technical File Information: 102 (Load High) 103 DYNAMIC LINK LIBRARY FILE 104 WINDOWS EXECUTABLE FILE 105 Library: 106 Microsoft/IBM OS/2 107 Microsoft Windows 108 Microsoft DOS4.x 109 Microsoft Windows 386 110 Unknown 111 Support for EAs and Long File Names 112 Runs in 3.x Protected Mode 113 Supports Proportional Fonts 114 Contains a Fast-Load Area 115 Bit 116 offset - 117 length - 119 entries - 120 segments - 121 bytes 122 SINGLEDATA 123 MULTIPLEDATA 124 PROTMODE 125 NOTWINDOWCOMPAT 126 WINDOWAPI 127 WINDOWCOMPAT 128 First Segment contains Loader 129 Linker detected Errors 130 Resides above EMS Bank Line 131 Per-Process Initialization 132 Global Initialization 133 is set 134 Segment Table 135 Num 136 Type 137 Offset 138 Length 139 Alloc 140 Flags 141 type 142 DATA 143 CODE 144 READONLY 145 EXECUTEONLY 146 READWRITE 147 EXECUTEREAD 148 , SHARED 149 , NONSHARED 150 , PRELOAD 151 , LOADONCALL 152 , EXPANDDOWN 153 , NOEXPANDDOWN 154 , CONFORMING 155 , NONCONFORMING 156 , NOIOPL 157 , IOPL 158 , 286 DPL = 1 159 , 32-bit 160 , HUGE 161 , relocs 162 , iterated 163 , (moveable) 164 , (fixed) 165 , (discardable) 166 , (nondiscardable) 167 , (shared) 168 , (nonshared) 169 Resident-Name Table (Exported Functions) 170 Nonresident-Name Table (Exported Functions) 171 Entry Table Index 172 Name 173 Imported-Name Table (Link-Time Imports) 174 WINDOWS EXECUTABLE 175 WINDOWS EXECUTABLE FILE 176 Image Optional Header 178 Intel x86 179 MIPS R3000 180 DEC Alpha AXP 181 Relocation info stripped from file. 182 File is executable. 183 Line numbers stripped from file. 184 Local symbols stripped from file. 186 Low bytes of machine word are reversed. 187 32 bit word machine. 188 Debugging info stripped from file in .DBG file 189 System File. 190 File is a DLL. 191 High bytes of machine word are reversed. 192 Unknown subsystem. 193 Image doesn't require a subsystem. 194 Image runs in the Windows GUI subsystem. 195 Image runs in the Windows character subsystem. 196 Image runs in the OS/2 character subsystem. 197 Image run in the Posix character subsystem.. 198 Dll has a process initialization routine. 199 Dll has a thread termination routine. 200 Dll has a thread initialization routine. 201 Break on load. 202 Debug on load. 203 VA - Export Directory: 204 Size - Export Directory: 205 VA - Import Directory: 206 Size - Import Directory: 209 Size - Resource Directory: 210 VA - Exception Directory: 211 Size - Exception Directory: 212 VA - Security Directory: 213 Size - Security Directory: 215 Size - Base Relocation Table: 216 VA - Debug Directory: 217 Size - Debug Directory: 218 VA - Copyright Directory: 219 Size - Copyright Directory: 220 VA - Machine Value (GP): 221 Size - Machine Value (GP): 222 VA - TLS Directory: 223 Size - TLS Directory: 224 VA - Load Configuration Directory: 225 Size - Load Configuration Directory: 226 .edata 227 .idata 228 - No exported functions 229 Ordinal 230 Entry Point 232 Function Name 233 Section contains code 234 Section contains initialized data 235 Section contains uninitialized data 236 Section contains comments or other information 237 Section contains an overlay 238 Section contents will not become part of image 239 Section contents comdat 240 Section can be discarded 241 Section is not cachable 242 Section is not pageable 243 Section is shareable 244 Section is executable 245 Section is readable 246 Section is writeable 247 MIPS R4000 248 Motorola PPC 249 MIPS R10000 250 Run From Swap if Removable 251 Run From Swap if Remote 252 Only run on Uniprocessor Machine 253 VA - Resource Directory: 254 VA - Base Relocation Table: 255 VA - Bound Import: 256 Size - Bound Import: 257 VA - Import Address Table: 258 Size - Import Address Table: 259 VA - Reserved: 260 Size - Reserved: 500 Header Information 501 Signature: 502 Last Page Size: 503 Total Pages in File: 504 Relocation Items: 505 Paragraphs in Header: 506 Minimum Extra Paragraphs: 507 Maximum Extra Paragraphs: 508 Initial Stack Segment: 509 Initial Stack Pointer: 510 Complemented Checksum: 511 Initial Instruction Pointer: 512 Initial Code Segment: 513 Relocation Table Offset: 514 Overlay Number: 515 Reserved: 516 Offset to New Header: 517 Memory Needed: 518 General Information 519 Module Name: 520 Description: 521 Operating System: 522 Linker Version: 523 Checksum: 524 Automatic Data Segment: 525 Initial Heap Size: 527 Initial CS:IP: 528 Initial SS:SP: 529 Additional Information: 530 Fast-Load Start: 531 Fast-Load Length: 532 Expected Windows Version: 533 Entry Table: 534 Segment Table: 535 Resource Table: 536 Resident-Name Table: 537 Module-Reference Table: 538 Imported-Names Table: 539 Nonresident-Name Table: 540 Moveable Entry Points: 541 Alignment: 542 Flags: 543 Image File Header 544 Machine: 545 Number of Sections: 546 Symbols Pointer: 547 Number of Symbols: 548 Size of Optional Header 549 Magic: 551 Size of Code: 552 Size of Initialized Data: 553 Size of Uninitialized Data: 554 Address of Entry Point: 555 Base of Code: 556 Base of Data: 557 Image Base: 558 Section Alignment: 559 File Alignment: 560 Operating System Version: 561 Image Version: 562 Subsystem Version: 563 Reserved1: 564 Size of Image: 565 Size of Headers: 567 Subsystem: 568 DLL Characteristics: 569 Size of Stack Reserve: 570 Size of Stack Commit: 571 Size of Heap Reserve: 572 Size of Heap Commit: 573 Loader Flags: 574 Size of Data Directory: 575 Data Directory: 576 Section Table 577 Section name: 578 Virtual Size: 579 Virtual Address: 580 Size of raw data: 581 Pointer to Raw Data: 582 Pointer to Relocations: 583 Pointer to Line Numbers: 584 Number of Relocations: 585 Number of Line Numbers: 586 Export Table 587 Name: 588 Characteristics: 589 Time Date Stamp: 590 Version: 591 Base: 592 Number of Functions: 593 Number of Names: 594 Import Table 595 Link Version: