| filename | DB4BCD4067ACEA86521B3FCA4C91C747.exe | |
|---|---|---|
| size | 6514592 (0x6367a0) | |
| md5 | 7b4dc1629c260477f1da58959c8894bb | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x120 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 93 | 2067 | 2 |
| 93 | 2179 | 16 |
| 95 | 2179 | 6 |
| 28 | 9178 | 2 |
| 25 | 9210 | 6 |
| 1 | 0 | 728 |
| 93 | 3077 | 5 |
| 105 | 2067 | 1 |
| 96 | 3077 | 29 |
| 15 | 3077 | 8 |
| 95 | 3077 | 14 |
| 0 | 0 | 2 |
| 99 | 3077 | 247 |
| 92 | 3077 | 1 |
| 94 | 3052 | 1 |
| 90 | 3077 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| PREVIEW | 0x1000 | 0xf0aec4 | 0 | RWX CODE | |
| WeijunLi | 0xf0c000 | 0x12924 | 0x12924 | RWX CODE IDATA DISCARDABLE | |
| .rsrc UM | 0xf1f000 | 0x4b398 | 0x4b398 | RW- IDATA |
Data Directory
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.DLL | CreateProcessW | ||
| ADVAPI32.DLL | RegDeleteKeyW | ||
| COMCTL32.DLL | ImageList_Add | ||
| COMDLG32.DLL | GetSaveFileNameW | ||
| GDI32.DLL | CreateRectRgn | ||
| IMM32.DLL | ImmGetVirtualKey | ||
| MSIMG32.DLL | AlphaBlend | ||
| MSVCP71.DLL | public: class std::basic_istream<char, struct std::char_traits<char> > & __thiscall std::basic_istream<char, struct std::char_traits<char> >::seekg(class std::fpos<int>) ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z | ||
| MSVCR71.DLL | fflush | ||
| OLE32.DLL | CoUninitialize | ||
| OLEAUT32.DLL | 8 | ||
| SHELL32.DLL | ShellExecuteW | ||
| SHLWAPI.DLL | PathUnquoteSpacesW | ||
| USER32.DLL | GetWindowPlacement |
| ord | entry_va | function_name | |
|---|---|---|---|
| 1 | 0x1b4c30 | ??0CWriter@@QAE@XZ | |
| 2 | 0x1b4c60 | ??1CWriter@@QAE@XZ | |
| 3 | 0x1b4cc0 | ??4CReader@@QAEAAV0@ABV0@@Z | |
| 4 | 0x1b4c80 | ??4CWriter@@QAEAAV0@ABV0@@Z | |
| 5 | 0x1b4cb0 | ?GetVBRQuality@CReader@@QBEEXZ | |
| 6 | 0x1b4ca0 | ?IsProtected@CReader@@QBEHXZ |
StringTable 040904E4
| CompanyName | Adobe Systems®, Incorporated |
| FileDescription | Adobe Audition |
| FileVersion | 1.5.4124.1 |
| LegalCopyright | Adobe Systems®, Incorporated |
| OriginalFilename | Adobe Audition |
| ProductName | Audition |
| ProductVersion | 1.5 |
| ProductBuild | 4124.1 |
| Comments |
VS_FIXEDFILEINFO
| FileVersion | 1.5.4124.1 |
| ProductVersion | 1.5.4124.1 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x30003f |
| FileFlags | 2 |
| FileOS | 0x10004 |
| FileType | 1 |
| FileSubtype | 0 |
Scanning the drive for archives: 1 file, 6514592 bytes (6362 KiB) Errors: 1
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0xebf840
[?] can't find file_offset of VA 0xebfc40
[?] can't find file_offset of VA 0xec0040
[?] can't find file_offset of VA 0xec0440
[?] can't find file_offset of VA 0xebf440
[?] can't find file_offset of VA 0xe75728
[?] can't find file_offset of VA 0xe7a320
[?] can't find file_offset of VA 0xe7ef18
[?] can't find file_offset of VA 0xe8bfc0
[?] can't find file_offset of VA 0xe9e488
[?] can't find file_offset of VA 0xea3080
[?] can't find file_offset of VA 0xea40a8
[?] can't find file_offset of VA 0xea7fc8
[?] can't find file_offset of VA 0xeb5450
[?] can't find file_offset of VA 0xeb74d0
[?] can't find file_offset of VA 0xd0d970
[?] can't find file_offset of VA 0xd8d5a0
[?] can't find file_offset of VA 0xd99de0
[?] can't find file_offset of VA 0xda6f88
[?] can't find file_offset of VA 0xdbcb80
[?] can't find file_offset of VA 0xdd22a0
[?] can't find file_offset of VA 0xdda560
[?] can't find file_offset of VA 0xde4c18
[?] can't find file_offset of VA 0xdeb640
[?] can't find file_offset of VA 0xdf1a10
[?] can't find file_offset of VA 0xd23228
[?] can't find file_offset of VA 0xd28218
[?] can't find file_offset of VA 0xd2de90
[?] can't find file_offset of VA 0xd30f20
[?] can't find file_offset of VA 0xd34fc0
[?] can't find file_offset of VA 0xd38328
[?] can't find file_offset of VA 0xd3af50
[?] can't find file_offset of VA 0xd3c6f8
[?] can't find file_offset of VA 0xd3e228
[?] can't find file_offset of VA 0xd3f8a0
[?] can't find file_offset of VA 0xd426b0
[?] can't find file_offset of VA 0xd475c0
[?] can't find file_offset of VA 0xd49d00
[?] can't find file_offset of VA 0xd4dd38
[?] can't find file_offset of VA 0xd51e40
[?] can't find file_offset of VA 0xd535e0
[?] can't find file_offset of VA 0xd57ca0
[?] can't find file_offset of VA 0xd5b1b8
[?] can't find file_offset of VA 0xd5d6d0
[?] can't find file_offset of VA 0xd61f80
[?] can't find file_offset of VA 0xd66270
[?] can't find file_offset of VA 0xd690c0
[?] can't find file_offset of VA 0xd6acc0
[?] can't find file_offset of VA 0xd6cc48
[?] can't find file_offset of VA 0xd6e8e0
[?] can't find file_offset of VA 0xd705e8
[?] can't find file_offset of VA 0xd74528
[?] can't find file_offset of VA 0xd786b8
[?] can't find file_offset of VA 0xd80f30
[?] can't find file_offset of VA 0xd8ab40
[?] can't find file_offset of VA 0xdfbfa0
[?] can't find file_offset of VA 0xe27138
[?] can't find file_offset of VA 0xe522d0
[?] can't find file_offset of VA 0xe53088
[?] can't find file_offset of VA 0xe56fb8
[?] can't find file_offset of VA 0xe59028
[?] can't find file_offset of VA 0xe5d0a0
[?] can't find file_offset of VA 0xe60b38
[?] can't find file_offset of VA 0xe63820
[?] can't find file_offset of VA 0xe662d0
[?] can't find file_offset of VA 0xe694d8
[?] can't find file_offset of VA 0xe6cb08
[?] can't find file_offset of VA 0xe71510
[?] can't find file_offset of VA 0xd07ea0
[?] can't find file_offset of VA 0xd07ff0
[?] can't find file_offset of VA 0xd08140
[?] can't find file_offset of VA 0xd08290
[?] can't find file_offset of VA 0xd083e0
[?] can't find file_offset of VA 0xd08530
[?] can't find file_offset of VA 0xd08680
[?] can't find file_offset of VA 0xd087d0
[?] can't find file_offset of VA 0xd08920
[?] can't find file_offset of VA 0xd08a70
[?] can't find file_offset of VA 0xd08bc0
[?] can't find file_offset of VA 0xd08d10
[?] can't find file_offset of VA 0xd08e60
[?] can't find file_offset of VA 0xd08fb0
[?] can't find file_offset of VA 0xd09100
[?] can't find file_offset of VA 0xd09250
[?] can't find file_offset of VA 0xd093a0
[?] can't find file_offset of VA 0xd094f0
[?] can't find file_offset of VA 0xd09640
[?] can't find file_offset of VA 0xd09790
[?] can't find file_offset of VA 0xd09a98
[?] can't find file_offset of VA 0xd09da0
[?] can't find file_offset of VA 0xd0a0a8
[?] can't find file_offset of VA 0xd0a1f8
[?] can't find file_offset of VA 0xd0a348
[?] can't find file_offset of VA 0xd0a650
[?] can't find file_offset of VA 0xd0a958
[?] can't find file_offset of VA 0xd0ac60
[?] can't find file_offset of VA 0xd0af68
[?] can't find file_offset of VA 0xd0b0b8
[?] can't find file_offset of VA 0xd0b208
[?] can't find file_offset of VA 0xd0b510
[?] can't find file_offset of VA 0xd0b818
[?] too many errors getting resource data, stopped on 0 of 1
[?] can't find file_offset of VA 0x32f244