PIPE.EXE

info
MZ
NE
resources
imports
exports
hexdump
log
donate

filename	PIPE.EXE
size	86528 (0x15200)
md5	147e576027b1200d4014ea1cab841cc0

type	MS-DOS executable, NE for MS Windows 3.x
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x85
blocks_in_file	4
num_relocs	0
header_paragraphs	0x20
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	7
sp	0x100
checksum	0x4065
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	1
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x400

DOS stub

00000000: e8 53 00 54 68 69 73 20  70 72 6f 67 72 61 6d 20  |.S.This program |
00000010: 72 65 71 75 69 72 65 73  20 4d 69 63 72 6f 73 6f  |requires Microso|
00000020: 66 74 20 57 69 6e 64 6f  77 73 2e 0d 0a 24 20 20  |ft Windows...$  |
00000030: 20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
*
00000050: 20 20 20 20 20 20 5a 0e  1f b4 09 cd 21 b8 01 4c  |      Z.....!..L|
00000060: cd 21 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |.!..............|
00000070: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000200:

NE Header

ne_magic	NE
ne_ver	5
ne_rev	0xa
ne_enttab	0x2a8
ne_cbenttab	0x196
ne_crc	0xdc34490d
ne_flags	0x302
ne_autodata	2
ne_heap	0x400
ne_stack	0x2000
ne_csip	0x12891
ne_sssp	0x20000
ne_cseg	2
ne_cmod	3
ne_cbnrestab	0x7f
ne_segtab	0x40
ne_rsrctab	0x50
ne_restab	0x288
ne_modtab	0x291
ne_imptab	0x297
ne_nrestab	0x83e
ne_cmovent	0x43
ne_align	9
ne_cres	0
ne_exetyp	2
ne_flagsothers	8
ne_pretthunks	5
ne_psegrefbytes	0x34
ne_swaparea	0
ne_expver	0x300

Segments

#	offset	size	min alloc	flags
1	6	0x4673	0x4673	0d50:COMOPRRE
2	0x2c	0x17d6	0x17d6	0d51:DAMOPRRE

show previews

type	name	size
#15	#1	1024
GROUP_ICON	#1	512
BITMAP	#1	1024
BITMAP	#2	1024
BITMAP	#3	1024
BITMAP	#4	1024
BITMAP	#5	1024
BITMAP	#6	1024
BITMAP	#7	1024
BITMAP	#8	1024
BITMAP	#9	1024
BITMAP	#10	1024
BITMAP	#11	1024
BITMAP	#12	1024
BITMAP	#13	1024
BITMAP	#14	1024
BITMAP	#15	1024
BITMAP	#16	1024
BITMAP	#17	1024
BITMAP	#18	1024
BITMAP	#19	1024
BITMAP	#20	1024
BITMAP	#21	1024
BITMAP	#22	1024
BITMAP	#23	1024
BITMAP	#24	1024
BITMAP	#25	1024
BITMAP	#26	1024
BITMAP	#27	1024
BITMAP	#28	1024
BITMAP	#29	1024
BITMAP	#30	1024
BITMAP	#31	1024
BITMAP	#32	1024
BITMAP	#33	1024
BITMAP	#34	15872
BITMAP	#35	2048
MENU	#1	512
DIALOG	#1	512
DIALOG	#1	512
DIALOG	#3	512
DIALOG	#4	1024
ICON	#1	1024

module_name	hint	ord	function_name
USER		107
USER		108
USER		113
KERNEL		1
USER		114
KERNEL		5
KERNEL		6
KERNEL		7
KERNEL		137
USER		125
KERNEL		15
KERNEL		16
KERNEL		17
USER		5
USER		6
KERNEL		23
KERNEL		24
USER		10
GDI		19
GDI		20
KERNEL		30
GDI		27
GDI		34
GDI		35
USER		155
USER		157
USER		34
KERNEL		51
KERNEL		52
GDI		45
USER		39
USER		40
USER		41
USER		42
GDI		51
GDI		52
USER		173
USER		174
USER		175
USER		179
GDI		61
USER		56
USER		57
GDI		66
GDI		68
GDI		69
USER		66
USER		68
KERNEL		91
GDI		87
USER		85
USER		87
USER		88
USER		91
USER		92
USER		93
KERNEL		115

ord	segment	offset	function_name
1	1	0xac5	MAINWNDPROC
7	1	0x7d0	HIGHSCORES
6	1	0x9a8	STATS
2	1	0xeb0	ABOUT
5	1	0xe40	STACKWNDPROC
4	1	0xcf1	CANVASWNDPROC
3	1	0x1133	PIECETIMER

module_name	Input
module_description	Sample Microsoft Windows Application

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK