filename | Flash_Extractor.exe | |
---|---|---|
size | 8167424 (0x7ca000) | |
md5 | cf6a1409143c0ccf278ed479672b6905 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe8 |
Rich Header
lib id | version | times used |
---|---|---|
150 | 20413 | 1 |
149 | 21022 | 34 |
131 | 21022 | 124 |
109 | 50727 | 1 |
123 | 50727 | 21 |
1 | 0 | 275 |
132 | 21022 | 52 |
148 | 21022 | 1 |
145 | 21022 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x2b342e | 0x2b3600 | R-X CODE | |
.rdata | 0x2b5000 | 0x1d3ed0 | 0x1d4000 | R-- IDATA | |
.data | 0x489000 | 0x344044 | 0x342400 | RW- IDATA | |
.rsrc | 0x7ce000 | 0x200 | 0x200 | R-- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x4877f4 | 0xdc | |
RESOURCE | 0x7ce000 | 0x200 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0x41cb68 | 0x40 | |
Bound_IAT | 0 | 0 | |
IAT | 0x2b5000 | 0x438 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
USER32.dll | 421 | InsertMenuItemW | |
USER32.dll | 638 | SetLayeredWindowAttributes | |
USER32.dll | 428 | InvertRect | |
USER32.dll | 719 | TrackPopupMenu | |
USER32.dll | 253 | GetAncestor | |
USER32.dll | 539 | PeekMessageA | |
USER32.dll | 499 | MapWindowPoints | |
USER32.dll | 158 | DestroyMenu | |
USER32.dll | 101 | CreatePopupMenu | |
USER32.dll | 545 | PostThreadMessageA | |
USER32.dll | 624 | SetCursor | |
USER32.dll | 181 | DragDetect | |
USER32.dll | 771 | WindowFromPoint | |
USER32.dll | 381 | GetWindow | |
USER32.dll | 396 | GetWindowTextA | |
USER32.dll | 168 | DispatchMessageA | |
USER32.dll | 341 | GetParent | |
USER32.dll | 392 | GetWindowRect | |
USER32.dll | 269 | GetClientRect | |
USER32.dll | 679 | SetWindowPos | |
USER32.dll | 284 | GetDesktopWindow | |
USER32.dll | 606 | SendMessageA | |
USER32.dll | 426 | InvalidateRect | |
USER32.dll | 69 | ClientToScreen | |
USER32.dll | 266 | GetClassNameA | |
USER32.dll | 267 | GetClassNameW | |
USER32.dll | 209 | EnableWindow | |
USER32.dll | 367 | GetSystemMetrics | |
USER32.dll | 504 | MessageBoxA | |
USER32.dll | 680 | SetWindowRgn | |
USER32.dll | 397 | GetWindowTextLengthA | |
USER32.dll | 399 | GetWindowTextW | |
USER32.dll | 470 | LoadIconA | |
USER32.dll | 466 | LoadCursorA | |
USER32.dll | 564 | RegisterClassExA | |
USER32.dll | 192 | DrawIconEx | |
USER32.dll | 271 | GetClipboardData | |
USER32.dll | 149 | DefWindowProcA | |
USER32.dll | 206 | EmptyClipboard | |
USER32.dll | 242 | FindWindowExW | |
USER32.dll | 103 | CreateWindowExA | |
USER32.dll | 104 | CreateWindowExW | |
USER32.dll | 684 | SetWindowTextW | |
USER32.dll | 305 | GetKeyState | |
USER32.dll | 200 | DrawTextW | |
USER32.dll | 43 | CharLowerBuffW | |
USER32.dll | 596 | ScreenToClient | |
USER32.dll | 292 | GetFocus | |
USER32.dll | 553 | PtInRect | |
USER32.dll | 511 | MessageBoxW | |
USER32.dll | 246 | FrameRect | |
USER32.dll | 633 | SetFocus | |
USER32.dll | 216 | EnumChildWindows | |
USER32.dll | 239 | FillRect | |
USER32.dll | 13 | BeginDeferWindowPos | |
USER32.dll | 210 | EndDeferWindowPos | |
USER32.dll | 458 | IsWindowVisible | |
USER32.dll | 282 | GetDC | |
USER32.dll | 542 | PostMessageA | |
USER32.dll | 696 | ShowWindow | |
USER32.dll | 460 | IsZoomed | |
USER32.dll | 611 | SendMessageW | |
USER32.dll | 151 | DeferWindowPos | |
USER32.dll | 461 | KillTimer | |
USER32.dll | 257 | GetCapture | |
USER32.dll | 587 | ReleaseCapture | |
USER32.dll | 615 | SetCapture | |
USER32.dll | 65 | ChildWindowFromPoint | |
USER32.dll | 670 | SetTimer | |
USER32.dll | 544 | PostQuitMessage | |
USER32.dll | 330 | GetMessageA | |
USER32.dll | 160 | DestroyWindow | |
USER32.dll | 621 | SetClipboardData | |
USER32.dll | 71 | CloseClipboard | |
USER32.dll | 527 | OpenClipboard | |
USER32.dll | 157 | DestroyIcon | |
USER32.dll | 383 | GetWindowDC | |
USER32.dll | 588 | ReleaseDC | |
USER32.dll | 197 | DrawTextA | |
USER32.dll | 718 | TrackMouseEvent | |
USER32.dll | 385 | GetWindowLongA | |
USER32.dll | 676 | SetWindowLongA | |
USER32.dll | 725 | TranslateMessage | |
SHELL32.dll | 209 | SHGetPathFromIDListW | |
SHELL32.dll | 186 | SHGetFileInfoW | |
SHELL32.dll | 280 | ShellExecuteW | |
SHELL32.dll | 201 | SHGetMalloc | |
SHELL32.dll | 120 | SHBrowseForFolderW | |
SHELL32.dll | 7 | CommandLineToArgvW | |
GDI32.dll | 663 | StartDocW | |
GDI32.dll | 672 | TextOutW | |
GDI32.dll | 77 | CreateRectRgn | |
GDI32.dll | 604 | SelectClipRgn | |
GDI32.dll | 656 | SetViewportOrgEx | |
GDI32.dll | 58 | CreateFontA | |
GDI32.dll | 500 | GetStockObject | |
GDI32.dll | 45 | CreateCompatibleBitmap | |
GDI32.dll | 582 | Rectangle | |
GDI32.dll | 617 | SetBrushOrgEx | |
GDI32.dll | 613 | SetBkColor | |
GDI32.dll | 653 | SetTextColor | |
GDI32.dll | 72 | CreatePatternBrush | |
GDI32.dll | 82 | CreateSolidBrush | |
GDI32.dll | 73 | CreatePen | |
GDI32.dll | 208 | DeleteObject | |
GDI32.dll | 665 | StartPage | |
GDI32.dll | 18 | BitBlt | |
GDI32.dll | 221 | EndPage | |
GDI32.dll | 219 | EndDoc | |
GDI32.dll | 40 | CreateBitmap | |
GDI32.dll | 649 | SetStretchBltMode | |
GDI32.dll | 666 | StretchBlt | |
GDI32.dll | 482 | GetObjectA | |
GDI32.dll | 542 | MaskBlt | |
GDI32.dll | 437 | GetDeviceCaps | |
GDI32.dll | 46 | CreateCompatibleDC | |
GDI32.dll | 606 | SelectObject | |
GDI32.dll | 205 | DeleteDC | |
GDI32.dll | 11 | Arc | |
GDI32.dll | 545 | MoveToEx | |
GDI32.dll | 541 | LineTo | |
GDI32.dll | 217 | Ellipse | |
GDI32.dll | 593 | RoundRect | |
GDI32.dll | 671 | TextOutA | |
GDI32.dll | 436 | GetDIBits | |
GDI32.dll | 614 | SetBkMode | |
GDI32.dll | 79 | CreateRoundRectRgn | |
COMCTL32.dll | 110 | ImageList_ReplaceIcon | |
COMCTL32.dll | 83 | ImageList_Create | |
COMCTL32.dll | 112 | ImageList_SetBkColor | |
COMCTL32.dll | 79 | ImageList_AddMasked | |
COMCTL32.dll | 84 | ImageList_Destroy | |
COMCTL32.dll | 17 | ||
KERNEL32.dll | 367 | GetCommandLineA | |
KERNEL32.dll | 260 | ExitProcess | |
KERNEL32.dll | 544 | GetProcAddress | |
KERNEL32.dll | 505 | GetModuleHandleW | |
KERNEL32.dll | 721 | IsDebuggerPresent | |
KERNEL32.dll | 1045 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 1086 | UnhandledExceptionFilter | |
KERNEL32.dll | 425 | GetCurrentProcess | |
KERNEL32.dll | 1069 | TerminateProcess | |
KERNEL32.dll | 858 | RaiseException | |
KERNEL32.dll | 573 | GetStringTypeA | |
KERNEL32.dll | 591 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 576 | GetStringTypeW | |
KERNEL32.dll | 569 | GetStartupInfoA | |
KERNEL32.dll | 1020 | SetStdHandle | |
KERNEL32.dll | 1154 | WriteConsoleA | |
KERNEL32.dll | 669 | HeapAlloc | |
KERNEL32.dll | 673 | HeapFree | |
KERNEL32.dll | 502 | GetModuleHandleA | |
KERNEL32.dll | 500 | GetModuleFileNameA | |
KERNEL32.dll | 21 | AttachConsole | |
KERNEL32.dll | 368 | GetCommandLineW | |
KERNEL32.dll | 429 | GetCurrentThreadId | |
KERNEL32.dll | 114 | CreateEventA | |
KERNEL32.dll | 163 | CreateThread | |
KERNEL32.dll | 692 | InitializeCriticalSection | |
KERNEL32.dll | 1057 | Sleep | |
KERNEL32.dll | 896 | RemoveDirectoryW | |
KERNEL32.dll | 1076 | TlsGetValue | |
KERNEL32.dll | 1074 | TlsAlloc | |
KERNEL32.dll | 1077 | TlsSetValue | |
KERNEL32.dll | 1075 | TlsFree | |
KERNEL32.dll | 704 | InterlockedIncrement | |
KERNEL32.dll | 1004 | SetLastError | |
KERNEL32.dll | 700 | InterlockedDecrement | |
KERNEL32.dll | 753 | LoadLibraryA | |
KERNEL32.dll | 693 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 678 | HeapSize | |
KERNEL32.dll | 330 | FreeEnvironmentStringsA | |
KERNEL32.dll | 447 | GetEnvironmentStrings | |
KERNEL32.dll | 331 | FreeEnvironmentStringsW | |
KERNEL32.dll | 449 | GetEnvironmentStringsW | |
KERNEL32.dll | 1000 | SetHandleCount | |
KERNEL32.dll | 471 | GetFileType | |
KERNEL32.dll | 671 | HeapCreate | |
KERNEL32.dll | 1111 | VirtualFree | |
KERNEL32.dll | 852 | QueryPerformanceCounter | |
KERNEL32.dll | 426 | GetCurrentProcessId | |
KERNEL32.dll | 1108 | VirtualAlloc | |
KERNEL32.dll | 676 | HeapReAlloc | |
KERNEL32.dll | 347 | GetCPInfo | |
KERNEL32.dll | 338 | GetACP | |
KERNEL32.dll | 531 | GetOEMCP | |
KERNEL32.dll | 731 | IsValidCodePage | |
KERNEL32.dll | 488 | GetLocaleInfoA | |
KERNEL32.dll | 991 | SetFilePointer | |
KERNEL32.dll | 387 | GetConsoleCP | |
KERNEL32.dll | 405 | GetConsoleMode | |
KERNEL32.dll | 737 | LCMapStringA | |
KERNEL32.dll | 739 | LCMapStringW | |
KERNEL32.dll | 409 | GetConsoleOutputCP | |
KERNEL32.dll | 321 | FlushFileBuffers | |
KERNEL32.dll | 914 | RtlUnwind | |
KERNEL32.dll | 304 | FindNextFileW | |
KERNEL32.dll | 272 | FileTimeToSystemTime | |
KERNEL32.dll | 1066 | SystemTimeToFileTime | |
KERNEL32.dll | 614 | GetTickCount | |
KERNEL32.dll | 872 | ReadFile | |
KERNEL32.dll | 67 | CloseHandle | |
KERNEL32.dll | 793 | MulDiv | |
KERNEL32.dll | 663 | GlobalUnlock | |
KERNEL32.dll | 656 | GlobalLock | |
KERNEL32.dll | 645 | GlobalAlloc | |
KERNEL32.dll | 332 | FreeLibrary | |
KERNEL32.dll | 571 | GetStdHandle | |
KERNEL32.dll | 1194 | lstrcmpW | |
KERNEL32.dll | 281 | FindClose | |
KERNEL32.dll | 1146 | WideCharToMultiByte | |
KERNEL32.dll | 487 | GetLocalTime | |
KERNEL32.dll | 794 | MultiByteToWideChar | |
KERNEL32.dll | 992 | SetFilePointerEx | |
KERNEL32.dll | 765 | LocalFree | |
KERNEL32.dll | 328 | FormatMessageW | |
KERNEL32.dll | 486 | GetLastError | |
KERNEL32.dll | 469 | GetFileSizeEx | |
KERNEL32.dll | 973 | SetEndOfFile | |
KERNEL32.dll | 127 | CreateFileW | |
KERNEL32.dll | 202 | DeviceIoControl | |
KERNEL32.dll | 113 | CreateDirectoryW | |
KERNEL32.dll | 195 | DeleteFileW | |
KERNEL32.dll | 501 | GetModuleFileNameW | |
KERNEL32.dll | 453 | GetExitCodeProcess | |
KERNEL32.dll | 1124 | WaitForSingleObject | |
KERNEL32.dll | 151 | CreateProcessW | |
KERNEL32.dll | 756 | LoadLibraryW | |
KERNEL32.dll | 1164 | WriteConsoleW | |
KERNEL32.dll | 827 | OutputDebugStringW | |
KERNEL32.dll | 470 | GetFileTime | |
KERNEL32.dll | 589 | GetSystemTime | |
KERNEL32.dll | 120 | CreateFileA | |
KERNEL32.dll | 1067 | SystemTimeToTzSpecificLocalTime | |
KERNEL32.dll | 751 | LeaveCriticalSection | |
KERNEL32.dll | 217 | EnterCriticalSection | |
KERNEL32.dll | 190 | DeleteCriticalSection | |
KERNEL32.dll | 979 | SetEvent | |
KERNEL32.dll | 1165 | WriteFile | |
KERNEL32.dll | 292 | FindFirstFileW | |
COMDLG32.dll | 12 | GetOpenFileNameW | |
COMDLG32.dll | 19 | PrintDlgExA | |
COMDLG32.dll | 14 | GetSaveFileNameW | |
ole32.dll | 133 | CreateStreamOnHGlobal | |
ole32.dll | 61 | CoInitialize | |
ADVAPI32.dll | 498 | OpenSCManagerA | |
ADVAPI32.dll | 214 | DeleteService | |
ADVAPI32.dll | 88 | ControlService | |
ADVAPI32.dll | 704 | StartServiceA | |
ADVAPI32.dll | 125 | CreateServiceW | |
ADVAPI32.dll | 501 | OpenServiceW | |
ADVAPI32.dll | 83 | CloseServiceHandle | |
OLEPRO32.DLL | 251 | ||
WININET.dll | 87 | HttpOpenRequestW | |
WININET.dll | 90 | HttpSendRequestA | |
WININET.dll | 158 | InternetReadFile | |
WININET.dll | 154 | InternetQueryDataAvailable | |
WININET.dll | 113 | InternetConnectW | |
WININET.dll | 150 | InternetOpenA | |
WININET.dll | 106 | InternetCloseHandle |
offset | size | type | comment | |
---|---|---|---|---|
15c1 | 15 | HTM | # | |
487a0c | 306 | GIF | (16 x 16) | # |
487b44 | 84 | GIF | (16 x 16) | # |
487b9c | 73 | GIF | (16 x 16) | # |
487bec | 82 | GIF | (16 x 16) | # |
487c44 | 104 | GIF | (16 x 16) | # |
487cb4 | 94 | GIF | (16 x 16) | # |
487d1c | 129 | GIF | (16 x 16) | # |
487da4 | 102 | GIF | (16 x 16) | # |
487e14 | 141 | GIF | (32 x 32) | # |
487eac | 167 | GIF | (32 x 32) | # |
487f5c | 167 | GIF | (32 x 32) | # |
48800c | 169 | GIF | (32 x 32) | # |
4880bc | 134 | GIF | (32 x 32) | # |
48814c | 169 | GIF | (32 x 32) | # |
4881fc | 126 | BMP | (16 x 16) | # |
488284 | 126 | BMP | (16 x 16) | # |
48830c | 126 | BMP | (16 x 16) | # |
488394 | 126 | BMP | (16 x 16) | # |
48841c | 126 | BMP | (16 x 16) | # |
4884a4 | 126 | BMP | (16 x 16) | # |
6a33c4 | 714 | BMP | (14 x 15) | # |
6a3694 | 670 | BMP | (14 x 14) | # |
6a393c | 714 | BMP | (14 x 15) | # |
6a3c0c | 670 | BMP | (14 x 14) | # |
6df424 | 714 | BMP | (14 x 15) | # |
6df6f4 | 670 | BMP | (14 x 14) | # |
6df99c | 714 | BMP | (14 x 15) | # |
6dfc6c | 670 | BMP | (14 x 14) | # |
6dff14 | 306 | BMP | (3 x 21) | # |
6e004c | 1314 | BMP | (20 x 21) | # |
6e0574 | 642 | BMP | (9 x 21) | # |
6e081c | 2134 | BMP | (26 x 26) | # |
6e107c | 2134 | BMP | (26 x 26) | # |
6e18fc | 450 | BMP | (11 x 11) | # |
6e1ac4 | 2134 | BMP | (26 x 26) | # |
6e2324 | 2134 | BMP | (26 x 26) | # |
6e2b84 | 2134 | BMP | (26 x 26) | # |
6e33e4 | 2134 | BMP | (26 x 26) | # |
6e3d4c | 306 | BMP | (3 x 21) | # |
6e3e84 | 1314 | BMP | (20 x 21) | # |
6e43ac | 642 | BMP | (9 x 21) | # |
6e46b4 | 822 | BMP | (16 x 16) | # |
6e49f4 | 822 | BMP | (16 x 16) | # |
6e4d34 | 822 | BMP | (16 x 16) | # |
6e5074 | 306 | GIF | (16 x 16) | # |
6e51ac | 822 | BMP | (16 x 16) | # |
6e54ec | 822 | BMP | (16 x 16) | # |
6e582c | 822 | BMP | (16 x 16) | # |
6e5b6c | 822 | BMP | (16 x 16) | # |
6e5eac | 822 | BMP | (16 x 16) | # |
6e61ec | 822 | BMP | (16 x 16) | # |
6e652c | 1334 | BMP | (16 x 16) | # |
6e6a6c | 822 | BMP | (16 x 16) | # |
6e6dac | 822 | BMP | (16 x 16) | # |
6fa69c | 822 | BMP | (16 x 16) | # |
6fa9dc | 822 | BMP | (16 x 16) | # |
6fad1c | 101 | GIF | (42 x 13) | # |
6fad8c | 120 | GIF | (42 x 13) | # |
6fae0c | 900 | GIF | (42 x 13) | # |
6fb194 | 890 | GIF | (42 x 13) | # |
6fb514 | 909 | GIF | (42 x 13) | # |
6fb8ac | 866 | GIF | (26 x 13) | # |
6fbc14 | 865 | GIF | (26 x 13) | # |
6fc11c | 64 | GIF | (11 x 11) | # |
6fc164 | 65 | GIF | (11 x 11) | # |
6fc1ac | 64 | GIF | (11 x 11) | # |
6fc1f4 | 65 | GIF | (11 x 11) | # |
6fc304 | 774 | BMP | (15 x 15) | # |
6fc614 | 774 | BMP | (15 x 15) | # |
6fc924 | 774 | BMP | (15 x 15) | # |
6fcc34 | 774 | BMP | (15 x 15) | # |
6fcf44 | 774 | BMP | (15 x 15) | # |
6fd254 | 1494 | BMP | (15 x 30) | # |
6fd834 | 774 | BMP | (15 x 15) | # |
6fdb44 | 774 | BMP | (15 x 15) | # |
6fdeac | 1134 | BMP | (20 x 18) | # |
6fe324 | 1134 | BMP | (20 x 18) | # |
6fe79c | 822 | BMP | (16 x 16) | # |
6feadc | 822 | BMP | (16 x 16) | # |
6fee1c | 114 | BMP | (20 x 1) | # |
6fee94 | 114 | BMP | (20 x 1) | # |
6fef0c | 1254 | BMP | (20 x 20) | # |
6ff3fc | 174 | BMP | (20 x 2) | # |
6ff4b4 | 174 | BMP | (6 x 6) | # |
6ff56c | 822 | BMP | (16 x 16) | # |
6ff8ac | 822 | BMP | (16 x 16) | # |
6ffbec | 822 | BMP | (16 x 16) | # |
6fff2c | 822 | BMP | (16 x 16) | # |
70026c | 822 | BMP | (16 x 16) | # |
7005ac | 822 | BMP | (16 x 16) | # |
7008ec | 126 | BMP | (16 x 16) | # |
700974 | 126 | BMP | (16 x 16) | # |
7009fc | 126 | BMP | (16 x 16) | # |
700a84 | 126 | BMP | (16 x 16) | # |
700b0c | 126 | BMP | (16 x 16) | # |
700b94 | 126 | BMP | (16 x 16) | # |
700c1c | 306 | BMP | (3 x 21) | # |
700d54 | 1194 | BMP | (20 x 19) | # |
701204 | 558 | BMP | (7 x 21) | # |
70153c | 1006 | BMP | (22 x 14) | # |
701934 | 1006 | BMP | (22 x 14) | # |
701d2c | 822 | BMP | (16 x 16) | # |
70206c | 822 | BMP | (16 x 16) | # |
768134 | 390 | BMP | (27 x 17) | # |
7682c4 | 390 | BMP | (27 x 17) | # |
768454 | 822 | BMP | (16 x 16) | # |
768794 | 822 | BMP | (16 x 16) | # |
768aca | 398646 | BIN | overlay data past EOF | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK