dbgwin.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	dbgwin.exe
size	13312 (0x3400)
md5	0012e1b3982b78ff27ae1cb95ede7845

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xb8

Rich Header

lib id	version	times used
0	0	58
18	8444	5
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x3d8564f0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	5.12
SizeOfCode	0x1000
SizeOfInitializedData	0x2200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x6000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

TASM / MASM

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xefa	0x1000	R-X CODE
.rdata	0x2000	0x542	0x600	R-- IDATA
.data	0x3000	0x4cc	0x400	RW- IDATA
.rsrc	0x4000	0x14e8	0x1600	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x20d0	0x78
RESOURCE	0x4000	0x14e8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	0xd0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
BITMAP	#129	356
BITMAP	#130	232
BITMAP	#131	232
BITMAP	#132	1304
BITMAP	#133	1304
ICON	#1	744
ICON	#2	296
DIALOG	DBGWINNAME	164
ACCELERATORS	HOTKEYS	16
GROUP_ICON	#1	34

module_name	hint	ord	function_name
KERNEL32.dll	50		CreateFileA
KERNEL32.dll	25		CloseHandle
KERNEL32.dll	697		WriteFile
KERNEL32.dll	738		lstrlenA
KERNEL32.dll	732		lstrcpyA
KERNEL32.dll	723		lstrcatA
KERNEL32.dll	367		GlobalFree
KERNEL32.dll	254		GetFileSize
KERNEL32.dll	509		ReadFile
KERNEL32.dll	273		GetModuleHandleA
KERNEL32.dll	360		GlobalAlloc
KERNEL32.dll	182		GetCommandLineA
KERNEL32.dll	117		ExitProcess
USER32.dll	389		IsDialogMessageA
USER32.dll	411		LoadIconA
USER32.dll	345		GetWindowRect
USER32.dll	613		ShowWindow
USER32.dll	475		PostMessageA
USER32.dll	477		PostQuitMessage
USER32.dll	487		PtInRect
USER32.dll	495		RegisterClassExA
USER32.dll	528		SendMessageA
USER32.dll	598		SetWindowPos
USER32.dll	296		GetMessageA
USER32.dll	634		TranslateAcceleratorA
USER32.dll	637		TranslateMessage
USER32.dll	651		UpdateWindow
USER32.dll	671		WinHelpA
USER32.dll	443		MessageBoxA
USER32.dll	256		GetDlgItem
USER32.dll	253		GetDesktopWindow
USER32.dll	238		GetClientRect
USER32.dll	148		DispatchMessageA
USER32.dll	131		DefWindowProcA
USER32.dll	78		CreateDialogParamA
USER32.dll	403		LoadAcceleratorsA
USER32.dll	407		LoadCursorA
USER32.dll	454		MoveWindow
COMCTL32.dll		17
COMCTL32.dll	8		CreateToolbarEx
comdlg32.dll	11		GetSaveFileNameA
comdlg32.dll	9		GetOpenFileNameA
ADVAPI32.dll	329		RegCreateKeyExA
ADVAPI32.dll	325		RegCloseKey
ADVAPI32.dll	347		RegOpenKeyA
ADVAPI32.dll	368		RegSetValueExA
ADVAPI32.dll	357		RegQueryValueExA

show previews

offset	size	type	comment
0	13312	EXE	09/16/2002 04:58:24	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK