dw.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	dw.exe
size	302592 (0x49e00)
md5	148248cd5ff193c652d079f3a170a3b4

type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x54eb1e33
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30f
Magic	0x10b
LinkerVersion	2.22
SizeOfCode	0x13800
SizeOfInitializedData	0x49a00
SizeOfUninitializedData	0x35600
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x15000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x83000
SizeOfHeaders	0x400
CheckSum	0x4b24b
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x13728	0x13800	R-X CODE IDATA
.data	0x15000	0x290	0x400	RW- IDATA
.rdata	0x16000	0x5b10	0x5c00	R-- IDATA
.bss	0x1c000	0x354a4	0	RW- UDATA
.idata	0x52000	0xadc	0xc00	RW- IDATA
.rsrc	0x53000	0x2f51c	0x2f600	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x52000	0xadc
RESOURCE	0x53000	0x2f51c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x521e0	0x17c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
BIN	FONT	28652
BIN	H1	58800
BIN	H2	43561
BIN	H3	41123
BIN	H4	21355

module_name	hint	function_name
COMDLG32.DLL	1	ChooseColorW
COMDLG32.DLL	10	GetOpenFileNameW
COMDLG32.DLL	12	GetSaveFileNameW
GDI32.dll	297	SetDIBitsToDevice
GDI32.dll	335	StretchDIBits
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	142	CreateFileW
KERNEL32.dll	212	DeleteFileW
KERNEL32.dll	300	FindClose
KERNEL32.dll	311	FindFirstFileW
KERNEL32.dll	323	FindNextFileW
KERNEL32.dll	332	FindResourceW
KERNEL32.dll	348	FormatMessageW
KERNEL32.dll	389	GetCommandLineW
KERNEL32.dll	445	GetCurrentDirectoryW
KERNEL32.dll	492	GetFileSize
KERNEL32.dll	510	GetLastError
KERNEL32.dll	511	GetLocalTime
KERNEL32.dll	532	GetModuleHandleW
KERNEL32.dll	582	GetProcessHeap
KERNEL32.dll	608	GetStdHandle
KERNEL32.dll	656	GetTickCount
KERNEL32.dll	687	GlobalAlloc
KERNEL32.dll	698	GlobalLock
KERNEL32.dll	702	GlobalSize
KERNEL32.dll	705	GlobalUnlock
KERNEL32.dll	711	HeapAlloc
KERNEL32.dll	715	HeapFree
KERNEL32.dll	718	HeapReAlloc
KERNEL32.dll	720	HeapSize
KERNEL32.dll	822	LoadResource
KERNEL32.dll	841	LockResource
KERNEL32.dll	860	MultiByteToWideChar
KERNEL32.dll	893	OutputDebugStringW
KERNEL32.dll	945	ReadConsoleW
KERNEL32.dll	947	ReadFile
KERNEL32.dll	1078	SetFilePointer
KERNEL32.dll	1151	SizeofResource
KERNEL32.dll	1152	Sleep
KERNEL32.dll	1247	WideCharToMultiByte
KERNEL32.dll	1266	WriteConsoleW
KERNEL32.dll	1267	WriteFile
USER32.dll	2	AdjustWindowRectEx
USER32.dll	13	BringWindowToTop
USER32.dll	38	CharLowerW
USER32.dll	61	CloseClipboard
USER32.dll	91	CreateWindowExW
USER32.dll	135	DefWindowProcW
USER32.dll	144	DestroyWindow
USER32.dll	150	DispatchMessageW
USER32.dll	177	EmptyClipboard
USER32.dll	180	EnableWindow
USER32.dll	218	GetActiveWindow
USER32.dll	224	GetCapture
USER32.dll	230	GetClassInfoW
USER32.dll	236	GetClientRect
USER32.dll	238	GetClipboardData
USER32.dll	250	GetDesktopWindow
USER32.dll	258	GetFocus
USER32.dll	267	GetKeyNameTextW
USER32.dll	268	GetKeyState
USER32.dll	297	GetMessageW
USER32.dll	304	GetParent
USER32.dll	326	GetSystemMetrics
USER32.dll	343	GetWindowLongW
USER32.dll	353	GetWindowTextW
USER32.dll	370	InvalidateRect
USER32.dll	382	IsClipboardFormatAvailable
USER32.dll	397	IsWindowVisible
USER32.dll	400	KillTimer
USER32.dll	408	LoadCursorW
USER32.dll	410	LoadIconW
USER32.dll	430	MapVirtualKeyW
USER32.dll	431	MapWindowPoints
USER32.dll	439	MessageBoxW
USER32.dll	455	OpenClipboard
USER32.dll	465	PeekMessageW
USER32.dll	467	PostMessageW
USER32.dll	468	PostQuitMessage
USER32.dll	482	RegisterClassW
USER32.dll	493	ReleaseCapture
USER32.dll	517	SetCapture
USER32.dll	523	SetClipboardData
USER32.dll	525	SetCursor
USER32.dll	533	SetFocus
USER32.dll	563	SetTimer
USER32.dll	570	SetWindowLongW
USER32.dll	575	SetWindowTextW
USER32.dll	585	ShowWindow
USER32.dll	608	TranslateMessage
USER32.dll	622	UpdateWindow

show previews

offset	size	type	comment
0	302592	EXE	02/23/2015 12:33:55	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK