filenameRRBABY.EXE
size597504 (0x91e00)
md50c4775f966ae318399a92bbb4f837df0
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xb0

Rich Header

lib idversiontimes used
00599
616681

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x37c5e2a3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.10
SizeOfCode0x82400
SizeOfInitializedData0x14a00
SizeOfUninitializedData0
AddressOfEntryPoint0x74f60
BaseOfCode0x1000
BaseOfData0x84000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x9a000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v5.0

Sections

namevavsizeraw sizeflags
.text0x10000x823b00x82400R-X CODE
.rdata0x840000x62640x6400R-- IDATA
.data0x8b0000xb6900x6200RW- IDATA
.rsrc0x970000x30000x3000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x88ac00xa0
RESOURCE0x970000x3000
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x840000x46c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#12960
ICON#27440
DIALOG#9355940
DIALOG#11017200
DIALOG#30025760
DIALOG#30034280
DIALOG#30152540
DIALOG#30204000
DIALOG#30408500
DIALOG#30507340
DIALOG#30804120
DIALOG#30996100
DIALOG#31056660
DIALOG#31065200
DIALOG#32003720
DIALOG#40025780
DIALOG#40118220
DIALOG#40124920
GROUP_ICONOM_APP_ICON340
VERSION#17200
module_namehintordfunction_name
KERNEL32.dll658lstrcatA
KERNEL32.dll274GetPrivateProfileStringA
KERNEL32.dll337GetWindowsDirectoryA
KERNEL32.dll673lstrlenA
KERNEL32.dll248GetLogicalDriveStringsA
KERNEL32.dll531SetErrorMode
KERNEL32.dll574SizeofResource
KERNEL32.dll419LockResource
KERNEL32.dll405LoadResource
KERNEL32.dll137FindResourceA
KERNEL32.dll154FreeResource
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll278GetProcAddress
KERNEL32.dll305GetSystemDirectoryA
KERNEL32.dll358GlobalUnlock
KERNEL32.dll352GlobalLock
KERNEL32.dll291GetProfileStringA
KERNEL32.dll244GetLastError
KERNEL32.dll46CreateEventA
KERNEL32.dll209GetCurrentDirectoryA
KERNEL32.dll78DeleteFileA
KERNEL32.dll618WaitForSingleObject
KERNEL32.dll360HeapAlloc
KERNEL32.dll366HeapFree
KERNEL32.dll369HeapReAlloc
KERNEL32.dll379InterlockedDecrement
KERNEL32.dll382InterlockedIncrement
KERNEL32.dll328GetTimeZoneInformation
KERNEL32.dll309GetSystemTime
KERNEL32.dll245GetLocalTime
KERNEL32.dll107ExitProcess
KERNEL32.dll582TerminateProcess
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll170GetCommandLineA
KERNEL32.dll332GetVersion
KERNEL32.dll482ResumeThread
KERNEL32.dll67CreateThread
KERNEL32.dll587TlsSetValue
KERNEL32.dll108ExitThread
KERNEL32.dll370HeapSize
KERNEL32.dll364HeapDestroy
KERNEL32.dll362HeapCreate
KERNEL32.dll606VirtualFree
KERNEL32.dll377InitializeCriticalSection
KERNEL32.dll76DeleteCriticalSection
KERNEL32.dll88EnterCriticalSection
KERNEL32.dll399LeaveCriticalSection
KERNEL32.dll603VirtualAlloc
KERNEL32.dll457RaiseException
KERNEL32.dll427MultiByteToWideChar
KERNEL32.dll622WideCharToMultiByte
KERNEL32.dll397LCMapStringA
KERNEL32.dll398LCMapStringW
KERNEL32.dll214GetCurrentThreadId
KERNEL32.dll584TlsAlloc
KERNEL32.dll542SetLastError
KERNEL32.dll586TlsGetValue
KERNEL32.dll635WriteFile
KERNEL32.dll470ReadFile
KERNEL32.dll537SetFilePointer
KERNEL32.dll539SetHandleCount
KERNEL32.dll298GetStdHandle
KERNEL32.dll239GetFileType
KERNEL32.dll592UnhandledExceptionFilter
KERNEL32.dll150FreeEnvironmentStringsA
KERNEL32.dll151FreeEnvironmentStringsW
KERNEL32.dll225GetEnvironmentStrings
KERNEL32.dll227GetEnvironmentStringsW
KERNEL32.dll163GetCPInfo
KERNEL32.dll157GetACP
KERNEL32.dll265GetOEMCP
KERNEL32.dll485RtlUnwind
KERNEL32.dll142FlushFileBuffers
KERNEL32.dll299GetStringTypeA
KERNEL32.dll302GetStringTypeW
KERNEL32.dll246GetLocaleInfoA
KERNEL32.dll553SetStdHandle
KERNEL32.dll49CreateFileA
KERNEL32.dll528SetEndOfFile
KERNEL32.dll400LoadLibraryA
KERNEL32.dll30CompareStringA
KERNEL32.dll31CompareStringW
KERNEL32.dll529SetEnvironmentVariableA
KERNEL32.dll135FindNextFileA
KERNEL32.dll524SetCurrentDirectoryA
KERNEL32.dll130FindFirstFileA
KERNEL32.dll126FindClose
KERNEL32.dll152FreeLibrary
KERNEL32.dll532SetEvent
KERNEL32.dll24CloseHandle
KERNEL32.dll247GetLocaleInfoW
KERNEL32.dll120FileTimeToSystemTime
KERNEL32.dll119FileTimeToLocalFileTime
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll42CreateDirectoryA
KERNEL32.dll240GetFullPathNameA
KERNEL32.dll236GetFileInformationByHandle
KERNEL32.dll446PeekNamedPipe
USER32.dll539SetWindowLongA
USER32.dll1AdjustWindowRect
USER32.dll446RegisterClassA
USER32.dll374LoadIconA
USER32.dll589UnregisterClassA
USER32.dll128DefWindowProcA
USER32.dll299GetSystemMenu
USER32.dll557ShowWindow
USER32.dll300GetSystemMetrics
USER32.dll400MapWindowPoints
USER32.dll311GetWindow
USER32.dll362IsWindowVisible
USER32.dll305GetTopWindow
USER32.dll413MoveWindow
USER32.dll363IsZoomed
USER32.dll460ReleaseCapture
USER32.dll483SetCapture
USER32.dll179EndDeferWindowPos
USER32.dll130DeferWindowPos
USER32.dll8BeginDeferWindowPos
USER32.dll433PostMessageA
USER32.dll164DrawIcon
USER32.dll182EndPaint
USER32.dll9BeginPaint
USER32.dll501SetFocus
USER32.dll405MessageBoxA
USER32.dll237GetCursorPos
USER32.dll257GetKeyState
USER32.dll131DeleteMenu
USER32.dll269GetMenuItemCount
USER32.dll447RegisterClassExA
USER32.dll376LoadImageA
USER32.dll136DestroyIcon
USER32.dll144DispatchMessageA
USER32.dll581TranslateMessage
USER32.dll578TranslateAcceleratorA
USER32.dll277GetMessageA
USER32.dll445RedrawWindow
USER32.dll507SetMenu
USER32.dll4AppendMenuA
USER32.dll502SetForegroundWindow
USER32.dll264GetLastActivePopup
USER32.dll205FindWindowA
USER32.dll213GetActiveWindow
USER32.dll83CreateMenu
USER32.dll166DrawMenuBar
USER32.dll176EnableMenuItem
USER32.dll48CheckMenuItem
USER32.dll411ModifyMenuA
USER32.dll492SetCursor
USER32.dll135DestroyCursor
USER32.dll370LoadCursorA
USER32.dll520SetRect
USER32.dll553ShowCursor
USER32.dll337IntersectRect
USER32.dll228GetClientRect
USER32.dll467ScreenToClient
USER32.dll332InsertMenuA
USER32.dll356IsIconic
USER32.dll338InvalidateRect
USER32.dll593UpdateWindow
USER32.dll10BringWindowToTop
USER32.dll431PeekMessageA
USER32.dll204FillRect
USER32.dll382LoadMenuA
USER32.dll296GetSubMenu
USER32.dll238GetDC
USER32.dll474SendMessageA
USER32.dll461ReleaseDC
USER32.dll585UnionRect
USER32.dll137DestroyMenu
USER32.dll443PtInRect
USER32.dll138DestroyWindow
USER32.dll240GetDesktopWindow
USER32.dll542SetWindowPos
USER32.dll180EndDialog
USER32.dll482SetActiveWindow
USER32.dll142DialogBoxParamA
USER32.dll54ClientToScreen
USER32.dll494SetCursorPos
USER32.dll215GetAsyncKeyState
USER32.dll462RemoveMenu
USER32.dll242GetDlgCtrlID
USER32.dll319GetWindowTextA
USER32.dll72CreateDialogIndirectParamA
USER32.dll225GetClassNameA
USER32.dll317GetWindowRect
USER32.dll314GetWindowLongA
USER32.dll85CreateWindowExA
USER32.dll184EnumChildWindows
USER32.dll275GetMenuStringA
USER32.dll274GetMenuState
USER32.dll421OffsetRect
GDI32.dll53CreatePalette
GDI32.dll383StretchDIBits
GDI32.dll387TextOutA
GDI32.dll370SetTextColor
GDI32.dll337SetBkMode
GDI32.dll105FrameRgn
GDI32.dll101FillRgn
GDI32.dll64CreateSolidBrush
GDI32.dll67DeleteDC
GDI32.dll31CreateCompatibleDC
GDI32.dll314Rectangle
GDI32.dll55CreatePen
GDI32.dll250GetStockObject
GDI32.dll280LineTo
GDI32.dll379StartDocA
GDI32.dll381StartPage
GDI32.dll77EndPage
GDI32.dll76EndDoc
GDI32.dll32CreateDCA
GDI32.dll37CreateDIBitmap
GDI32.dll43CreateFontA
GDI32.dll263GetTextExtentPointA
GDI32.dll177GetCharABCWidthsA
GDI32.dll80EnumFontFamiliesA
GDI32.dll315RemoveFontResourceA
GDI32.dll62CreateScalableFontResourceA
GDI32.dll2AddFontResourceA
GDI32.dll199GetDeviceCaps
GDI32.dll391UnrealizeObject
GDI32.dll311RealizePalette
GDI32.dll247GetRegionData
GDI32.dll143GdiFlush
GDI32.dll342SetDIBColorTable
GDI32.dll328SelectClipRgn
GDI32.dll283MoveToEx
GDI32.dll36CreateDIBSection
GDI32.dll331SelectPalette
GDI32.dll249GetRgnBox
GDI32.dll39CreateEllipticRgn
GDI32.dll364SetRectRgn
GDI32.dll309PtInRegion
GDI32.dll70DeleteObject
GDI32.dll286OffsetRgn
GDI32.dll267GetTextMetricsA
GDI32.dll330SelectObject
GDI32.dll336SetBkColor
GDI32.dll59CreateRectRgn
GDI32.dll19CombineRgn
GDI32.dll90EqualRgn
GDI32.dll312RectInRegion
GDI32.dll252GetSystemPaletteEntries
GDI32.dll10BitBlt
GDI32.dll359SetPixel
GDI32.dll241GetPixel
GDI32.dll358SetPaletteEntries
GDI32.dll239GetPaletteEntries
comdlg32.dll16PrintDlgA
comdlg32.dll9GetOpenFileNameA
comdlg32.dll11GetSaveFileNameA
smackw32.dll28_SmackClose@4
smackw32.dll38_SmackOpen@12
smackw32.dll51_SmackToBuffer@28
smackw32.dll56_SmackWait@4
smackw32.dll35_SmackGoto@8
smackw32.dll50_SmackSummary@8
smackw32.dll32_SmackDoFrame@4
smackw32.dll37_SmackNextFrame@4
smackw32.dll52_SmackToBufferRect@8
WINMM.dll46mciGetErrorStringA
WINMM.dll50mciSendCommandA
WINMM.dll187waveOutRestart
WINMM.dll184waveOutPause
WINMM.dll171waveOutClose
WINMM.dll191waveOutUnprepareHeader
WINMM.dll151timeGetTime
WINMM.dll144sndPlaySoundA
WINMM.dll185waveOutPrepareHeader
WINMM.dll192waveOutWrite
WINMM.dll186waveOutReset
WINMM.dll183waveOutOpen
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA

StringTable 040904E4

FileVersion1.0
FileDescription Lapin Malin Éveil
CompanyNameTLC-Edusoft
LegalCopyrightCopyright (c) The Learning Company 1999 - TLC-Edusoft
OriginalFilenameRRBABY.EXE
ProductName Lapin Malin Éveil
ProductVersion1.0

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0597504EXE08/27/1999 00:58:11#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK