| filename | nesmapperprogram.exe | |
|---|---|---|
| size | 92672 (0x16a00) | |
| md5 | 032c526a4c8bc5b77e34ff1b1cca6eac | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | scan pending | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x80 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
UPX v3.0 (EXE_LZMA) (Markus Oberhumer & Laszlo Molnar & John Reiser) This file is packed with UPX. Analysis will be incomplete without unpacking. |
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x23000 | 0 | RWX UDATA | |
| .data | 0x24000 | 0x15000 | 0x14c00 | RWX IDATA | |
| .rsrc | 0x39000 | 0x2000 | 0x1c00 | RW- IDATA |
Data Directory
| type | va | size | |
|---|---|---|---|
| EXPORT | 0 | 0 | |
| IMPORT | 0x3a9e4 | 0x158 | |
| RESOURCE | 0x39000 | 0x19e4 | |
| EXCEPTION | 0 | 0 | |
| SECURITY | 0 | 0 | |
| BASERELOC | 0x3ab3c | 0x18 | |
| DEBUG | 0 | 0 | |
| ARCHITECTURE | 0 | 0 | |
| GLOBALPTR | 0 | 0 | |
| TLS | 0 | 0 | |
| LOAD_CONFIG | 0x389cc | 0x48 | |
| Bound_IAT | 0 | 0 | |
| IAT | 0 | 0 | |
| Delay_IAT | 0 | 0 | |
| CLR_Header | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.DLL | LoadLibraryA | ||
| KERNEL32.DLL | ExitProcess | ||
| KERNEL32.DLL | GetProcAddress | ||
| KERNEL32.DLL | VirtualProtect | ||
| mscoree.dll | CLRCreateInstance | ||
| ole32.dll | CoUninitialize | ||
| OLEAUT32.dll | 6 | ||
| USER32.dll | MessageBoxW |
StringTable 000004b0
| Comments | This program analyzes NES ROMs using the iNES and NES 2.0 header formats and outputs information based on those results. It is also used to prep roms for eprom burning for use in dev carts and Vs. Systems. It can also be used for cleaning rom headers. |
| CompanyName | Shawn M. Crawford |
| FileDescription | NES Mapper Reader / ROM Fixer / ROM Splitter 2.0 |
| FileVersion | 2.0.0.0 |
| InternalName | nesmapperprogram.exe |
| LegalCopyright | Copyright © 2008-2017+ Shawn M. Crawford |
| OriginalFilename | nesmapperprogram.exe |
| ProductName | NES Mapper Reader / ROM Fixer / ROM Splitter 2.0 |
| ProductVersion | 2.0.0.0 |
| Assembly Version | 2.0.0.26078 |
VS_FIXEDFILEINFO
| FileVersion | 2.0.0.0 |
| ProductVersion | 2.0.0.0 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
everything is OK