433dade02cd1f41baaa5fff548c1ddce997735f90d8edeab7a7b03b028dc1836

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	433dade02cd1f41baaa5fff548c1ddce997735f90d8edeab7a7b03b028dc1836
size	196608 (0x30000)
md5	0cf70bccffd1d2b2c9d000de496d34a1

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
125	50727	16
109	50727	98
93	4035	5
1	0	150
110	50727	35
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x58e9c2b5
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0xd000
SizeOfInitializedData	0x32000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x478f
BaseOfCode	0x1000
BaseOfData	0xe000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x40000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xc5af	0xd000	R-X CODE
.rdata	0xe000	0x2600	0x3000	R-- IDATA
.data	0x11000	0x29168	0x1a000	RW- IDATA
.rsrc	0x3b000	0x4d88	0x5000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xfab4	0x3c
RESOURCE	0x3b000	0x4d88
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0xf678	0x40
Bound_IAT	0	0
IAT	0xe000	0x218
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	1128
DIALOG	#102	180
DIALOG	#103	288
DIALOG	#104	344
DIALOG	#105	512
DIALOG	#106	248
DIALOG	#107	160
DIALOG	#111	238
DIALOG	#202	164
DIALOG	#203	272
DIALOG	#204	328
DIALOG	#205	496
DIALOG	#206	232
DIALOG	#207	144
DIALOG	#211	222
DIALOG	#302	160
DIALOG	#303	268
DIALOG	#304	324
DIALOG	#305	492
DIALOG	#306	228
DIALOG	#307	140
DIALOG	#311	218
DIALOG	#402	180
DIALOG	#403	288
DIALOG	#404	344
DIALOG	#405	512
DIALOG	#406	248
DIALOG	#407	160
DIALOG	#411	238
DIALOG	#502	160
DIALOG	#503	268
DIALOG	#504	324
DIALOG	#505	492
DIALOG	#506	228
DIALOG	#507	140
DIALOG	#511	218
DIALOG	#602	180
DIALOG	#603	288
DIALOG	#604	344
DIALOG	#605	512
DIALOG	#606	248
DIALOG	#607	160
DIALOG	#611	238
DIALOG	#702	180
DIALOG	#703	288
DIALOG	#704	344
DIALOG	#705	512
DIALOG	#706	248
DIALOG	#707	160
DIALOG	#711	238
DIALOG	#802	172
DIALOG	#803	280
DIALOG	#804	336
DIALOG	#805	504
DIALOG	#806	240
DIALOG	#807	152
DIALOG	#811	230
GROUP_ICON	#156	20
MANIFEST	#1	346

module_name	hint	function_name
USER32.dll	561	ScreenToClient
USER32.dll	348	GetSystemMenu
USER32.dll	583	SetClassLongA
USER32.dll	430	IsWindowEnabled
USER32.dll	643	SetWindowPos
USER32.dll	346	GetSysColor
USER32.dll	366	GetWindowLongA
USER32.dll	589	SetCursor
USER32.dll	442	LoadCursorA
USER32.dll	56	CheckDlgButton
USER32.dll	316	GetMessagePos
USER32.dll	440	LoadBitmapA
USER32.dll	27	CallWindowProcA
USER32.dll	433	IsWindowVisible
USER32.dll	66	CloseClipboard
USER32.dll	586	SetClipboardData
USER32.dll	193	EmptyClipboard
USER32.dll	516	PostQuitMessage
USER32.dll	372	GetWindowRect
USER32.dll	194	EnableMenuItem
USER32.dll	94	CreatePopupMenu
USER32.dll	349	GetSystemMetrics
USER32.dll	595	SetDlgItemTextA
USER32.dll	275	GetDlgItemTextA
USER32.dll	482	MessageBoxIndirectA
USER32.dll	45	CharPrevA
USER32.dll	161	DispatchMessageA
USER32.dll	512	PeekMessageA
USER32.dll	554	ReleaseDC
USER32.dll	196	EnableWindow
USER32.dll	403	InvalidateRect
USER32.dll	571	SendMessageA
USER32.dll	142	DefWindowProcA
USER32.dll	13	BeginPaint
USER32.dll	255	GetClientRect
USER32.dll	226	FillRect
USER32.dll	188	DrawTextA
USER32.dll	198	EndDialog
USER32.dll	534	RegisterClassA
USER32.dll	665	SystemParametersInfoA
USER32.dll	96	CreateWindowExA
USER32.dll	246	GetClassInfoA
USER32.dll	158	DialogBoxParamA
USER32.dll	42	CharNextA
USER32.dll	225	ExitWindowsEx
USER32.dll	268	GetDC
USER32.dll	85	CreateDialogParamA
USER32.dll	634	SetTimer
USER32.dll	273	GetDlgItem
USER32.dll	640	SetWindowLongA
USER32.dll	599	SetForegroundWindow
USER32.dll	448	LoadImageA
USER32.dll	429	IsWindow
USER32.dll	574	SendMessageTimeoutA
USER32.dll	228	FindWindowExA
USER32.dll	502	OpenClipboard
USER32.dll	676	TrackPopupMenu
USER32.dll	8	AppendMenuA
USER32.dll	200	EndPaint
USER32.dll	153	DestroyWindow
USER32.dll	727	wsprintfA
USER32.dll	658	ShowWindow
USER32.dll	646	SetWindowTextA
KERNEL32.dll	419	GetProcessHeap
KERNEL32.dll	83	CreateFileA
KERNEL32.dll	823	SetStdHandle
KERNEL32.dll	931	WriteConsoleW
KERNEL32.dll	309	GetConsoleOutputCP
KERNEL32.dll	921	WriteConsoleA
KERNEL32.dll	52	CloseHandle
KERNEL32.dll	540	HeapSize
KERNEL32.dll	795	SetFilePointer
KERNEL32.dll	238	FlushFileBuffers
KERNEL32.dll	307	GetConsoleMode
KERNEL32.dll	290	GetConsoleCP
KERNEL32.dll	594	LoadLibraryA
KERNEL32.dll	372	GetLocaleInfoA
KERNEL32.dll	445	GetStringTypeW
KERNEL32.dll	442	GetStringTypeA
KERNEL32.dll	581	LCMapStringW
KERNEL32.dll	580	LCMapStringA
KERNEL32.dll	629	MultiByteToWideChar
KERNEL32.dll	727	RtlUnwind
KERNEL32.dll	854	Sleep
KERNEL32.dll	547	InitializeCriticalSection
KERNEL32.dll	458	GetSystemTimeAsFileTime
KERNEL32.dll	323	GetCurrentProcessId
KERNEL32.dll	479	GetTickCount
KERNEL32.dll	675	QueryPerformanceCounter
KERNEL32.dll	358	GetFileType
KERNEL32.dll	804	SetHandleCount
KERNEL32.dll	343	GetEnvironmentStringsW
KERNEL32.dll	916	WideCharToMultiByte
KERNEL32.dll	247	FreeEnvironmentStringsW
KERNEL32.dll	341	GetEnvironmentStrings
KERNEL32.dll	381	GetModuleFileNameA
KERNEL32.dll	441	GetStdHandle
KERNEL32.dll	932	WriteFile
KERNEL32.dll	185	ExitProcess
KERNEL32.dll	326	GetCurrentThreadId
KERNEL32.dll	808	SetLastError
KERNEL32.dll	870	TlsSetValue
KERNEL32.dll	867	TlsAlloc
KERNEL32.dll	869	TlsGetValue
KERNEL32.dll	416	GetProcAddress
KERNEL32.dll	403	GetOEMCP
KERNEL32.dll	253	GetACP
KERNEL32.dll	552	InterlockedDecrement
KERNEL32.dll	556	InterlockedIncrement
KERNEL32.dll	260	GetCPInfo
KERNEL32.dll	897	VirtualAlloc
KERNEL32.dll	899	VirtualFree
KERNEL32.dll	530	HeapCreate
KERNEL32.dll	868	TlsFree
KERNEL32.dll	246	FreeEnvironmentStringsA
KERNEL32.dll	383	GetModuleHandleA
KERNEL32.dll	369	GetLastError
KERNEL32.dll	538	HeapReAlloc
KERNEL32.dll	528	HeapAlloc
KERNEL32.dll	272	GetCommandLineA
KERNEL32.dll	534	HeapFree
KERNEL32.dll	489	GetVersionExA
KERNEL32.dll	439	GetStartupInfoA
KERNEL32.dll	862	TerminateProcess
KERNEL32.dll	322	GetCurrentProcess
KERNEL32.dll	878	UnhandledExceptionFilter
KERNEL32.dll	842	SetUnhandledExceptionFilter
KERNEL32.dll	569	IsDebuggerPresent
KERNEL32.dll	129	DeleteCriticalSection
KERNEL32.dll	593	LeaveCriticalSection
KERNEL32.dll	152	EnterCriticalSection
KERNEL32.dll	532	HeapDestroy

show previews

offset	size	type	comment
0	196608	EXE	04/09/2017 05:12:21	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK