Wabbitemu.exe - Wabbitemu Z80 Emulator

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	Wabbitemu.exe
size	4739584 (0x485200)
md5	90b2f91c4014eb9d42f51a3e3b1fd162

type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x138

Rich Header

lib id	version	times used
241	40116	12
243	40116	187
242	40116	25
259	23406	26
260	23406	21
261	23406	54
261	23013	2
206	65501	7
208	65501	1
170	30319	7
158	30319	2
203	65501	39
1	0	472
265	23506	104
255	23506	1
151	0	1
258	23506	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x56d2a328
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x46d000
SizeOfInitializedData	0x19000
SizeOfUninitializedData	0x43a000
AddressOfEntryPoint	0x8a7920
BaseOfCode	0x43b000
BaseOfData	0x8a8000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x8c1000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

UPX v0.89.6 - v1.02 / v1.05 - v1.22

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
UPX0	0x1000	0x43a000	0	RWX UDATA
UPX1	0x43b000	0x46d000	0x46cc00	RWX IDATA
.rsrc	0x8a8000	0x19000	0x18200	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x8bfd94	0x448
RESOURCE	0x8a8000	0x17d94
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x8c01dc	0x18
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x8a7b0c	0x18
LOAD_CONFIG	0x8a7b2c	0x5c
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0xca7b24	0xca7b2c	0x4d47c8	0	0	0x300000

show previews

type	name	size
AFX_DIALOG_LAYOUT	#1019	2
CALCPROG	#158	428
CALCPROG	#183	384
CALCPROG	#184	651
CALCPROG	#185	397
CALCPROG	#186	351
CALCPROG	#198	376
EXE	#171	8192
HEX	#131	39452
HEX	#132	39452
HEX	#133	39452
HEX	#134	39452
HEX	#197	39452
HEX	#10000	39452
PNG	TI-73	780979
PNG	TI-81	122140
PNG	TI-81KEYMAP	8135
PNG	TI-82	131495
PNG	TI-82KEYMAP	7673
PNG	TI-83	280678
PNG	TI-83+	337471
PNG	TI-83+KEYMAP	12227
PNG	TI-83+SE	702462
PNG	TI-83KEYMAP	8774
PNG	TI-84+	339411
PNG	TI-84+CSE	364694
PNG	TI-84+CSEKEYMAP	14547
PNG	TI-84+SE	431958
PNG	TI-84+SEKEYMAP	14545
PNG	TI-85	124215
PNG	TI-85KEYMAP	8142
PNG	TI-86	338862
PNG	TI-86KEYMAP	10498
REGISTRY	#194	817
REGISTRY	#1100	771
TEXT	#204	3846
TYPELIB	#1	22796
BITMAP	CALCTI83P	3368
BITMAP	CALCTI83PSE	3368
BITMAP	CATALOG	73768
BITMAP	CHEVRON	1064
BITMAP	CHEVRON7	1064
BITMAP	CLOSE	2120
BITMAP	DBBREAK	1064
BITMAP	DBGOTO	1066
BITMAP	DBMEMBREAK	1064
BITMAP	DBRUN	1064
BITMAP	DBSTEP	1066
BITMAP	DBSTEPOVER	1064
BITMAP	DBSTOP	1064
BITMAP	EXPANDPANEBUTTONS	5440
BITMAP	HOMESCREEN	73768
BITMAP	SKINPICKER	12456
BITMAP	TBBACK	168
BITMAP	TBDOWNARROW	1064
BITMAP	TBDOWNARROW7	1064
BITMAP	TBFRAMELEFT	424
BITMAP	TBFRAMEMIDDLE	424
BITMAP	TBFRAMERIGHT	424
BITMAP	TBHOTFRAME	424
BITMAP	TBHOTFRAMELEFT	424
BITMAP	TBHOTFRAMEMIDDLE	424
BITMAP	TBLEFT	424
BITMAP	TBLEFT7	424
BITMAP	TBRIGHT	11560
BITMAP	TBRIGHT7	11560
BITMAP	TIVARICONS	17514
ICON	#1	49439
ICON	#2	9640
ICON	#3	4264
ICON	#4	1128
ICON	#5	1128
MENU	#169	176
MENU	#10000	1278
MENU	#10001	100
MENU	#10002	128
MENU	#10003	104
MENU	#10004	292
MENU	#10005	152
MENU	#10006	82
MENU	#10007	296
MENU	#10008	778
DIALOG	#101	176
DIALOG	#104	226
DIALOG	#106	1294
DIALOG	#157	526
DIALOG	#159	1106
DIALOG	#168	90
DIALOG	#172	282
DIALOG	#175	688
DIALOG	#177	948
DIALOG	#178	284
DIALOG	#179	768
DIALOG	#187	708
DIALOG	#191	124
DIALOG	#1000	202
DIALOG	#1001	1054
DIALOG	#1002	948
DIALOG	#1005	870
DIALOG	#1006	520
DIALOG	#1007	716
DIALOG	#1010	802
DIALOG	#1011	274
DIALOG	#1015	496
DIALOG	#1016	308
DIALOG	#1017	548
DIALOG	#1018	368
DIALOG	#1019	694
DIALOG	#1020	858
DIALOG	#1021	1190
DIALOG	#1022	730
DIALOG	#1023	504
ACCELERATORS	DISASMACCEL	104
ACCELERATORS	Z80ACCEL	72
GROUP_ICON	A	62
GROUP_ICON	W	20
VERSION	#1	708
MANIFEST	#1	796

module_name	ord	function_name
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		ExitProcess
ADVAPI32.dll		RegCloseKey
AVIFIL32.dll		AVIFileExit
COMCTL32.dll	412
COMDLG32.dll		GetOpenFileNameA
dbghelp.dll		MiniDumpWriteDump
GDI32.dll		LineTo
gdiplus.dll		GdipFree
MSIMG32.dll		AlphaBlend
MSVFW32.dll		ICCompressorChoose
ole32.dll		DoDragDrop
OLEAUT32.dll	19
SHELL32.dll	74
SHLWAPI.dll		PathCombineA
USER32.dll		GetDC
UxTheme.dll		IsAppThemed
VERSION.dll		VerQueryValueA
WININET.dll		FtpPutFileA
WINMM.dll		waveOutOpen

StringTable 040904b0

CompanyName	Revsoft
FileDescription	Wabbitemu Z80 Emulator
FileVersion	1.9.5.21
InternalName	Wabbitemu
LegalCopyright	Copyright (C) 2014
OriginalFilename	Wabbitemu.exe
ProductName	Wabbitemu
ProductVersion	1.0.0.2

VS_FIXEDFILEINFO

FileVersion	1.9.5.21
ProductVersion	1.0.0.2
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
474b84	49439	PNG	(256 x 256)	#
480ca3	17757	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x4195d0

[?] can't find file_offset of VA 0x41a2f8

[?] can't find file_offset of VA 0x429d78

[?] can't find file_offset of VA 0x425d00

[?] can't find file_offset of VA 0x41f490

[?] can't find file_offset of VA 0x423b48

[?] can't find file_offset of VA 0x426128

[?] can't find file_offset of VA 0x423f70

[?] can't find file_offset of VA 0x424398

[?] can't find file_offset of VA 0x4232f0

[?] can't find file_offset of VA 0x423720

[?] can't find file_offset of VA 0x4247c0

[?] can't find file_offset of VA 0x426558

[?] can't find file_offset of VA 0x41fe80

[?] can't find file_offset of VA 0x429950

[?] can't find file_offset of VA 0x422df8

[?] can't find file_offset of VA 0x4297a8

[?] can't find file_offset of VA 0x422fa0

[?] can't find file_offset of VA 0x422c50

[?] can't find file_offset of VA 0x423148

[?] can't find file_offset of VA 0x429600

[?] can't find file_offset of VA 0x41fcd8

[?] can't find file_offset of VA 0x41ff28

[?] can't find file_offset of VA 0x41b020

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x419150