filenamenp2sig3w.exe
size438272 (0x6b000)
md51e08fb2547d3ed966669c126d338332d
typePE32 executable (Windows CE) ARM Thumb, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
3787002
4895523
8920643
10109
49940916
489409151
0016
5624091
8630771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x1c2
NumberOfSections5
TimeDateStamp0x428e46e9
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.24
SizeOfCode0x59000
SizeOfInitializedData0x369000
SizeOfUninitializedData0
AddressOfEntryPoint0x59b94
BaseOfCode0x1000
BaseOfData0x5a000
ImageBase0x10000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.10
Reserved10
SizeOfImage0x3c6000
SizeOfHeaders0x400
CheckSum0
Subsystem9
DllCharacteristics0
SizeOfStackReserve0x10000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS WAV Audio file

Sections

namevavsizeraw sizeflags
.text0x10000x58e080x59000R-X CODE
.rdata0x5a0000xd4660xd600R-- IDATA
.data0x680000x3581b40xe00RW- IDATA
.pdata0x3c10000x33c00x3400R-- IDATA
.rsrc0x3c50000x39c0x400R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x671380x3c
RESOURCE0x3c50000x39c
EXCEPTION0x3c10000x33c0
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x680000x1bc
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
GROUP_ICON#101200
module_namehintordfunction_name
COREDLL.dll262
COREDLL.dll1018
COREDLL.dll719
COREDLL.dll1044
COREDLL.dll2008
COREDLL.dll2005
COREDLL.dll2033
COREDLL.dll1051
COREDLL.dll1060
COREDLL.dll2016
COREDLL.dll2027
COREDLL.dll2043
COREDLL.dll2048
COREDLL.dll2029
COREDLL.dll2012
COREDLL.dll1058
COREDLL.dll2046
COREDLL.dll2053
COREDLL.dll2052
COREDLL.dll2026
COREDLL.dll2032
COREDLL.dll2047
COREDLL.dll2020
COREDLL.dll2021
COREDLL.dll2044
COREDLL.dll2024
COREDLL.dll2
COREDLL.dll5
COREDLL.dll4
COREDLL.dll3
COREDLL.dll535
COREDLL.dll168
COREDLL.dll173
COREDLL.dll170
COREDLL.dll178
COREDLL.dll171
COREDLL.dll553
COREDLL.dll172
COREDLL.dll176
COREDLL.dll20
COREDLL.dll21
COREDLL.dll165
COREDLL.dll166
COREDLL.dll160
COREDLL.dll180
COREDLL.dll181
COREDLL.dll167
COREDLL.dll103
COREDLL.dll922
COREDLL.dll924
COREDLL.dll895
COREDLL.dll921
COREDLL.dll263
COREDLL.dll910
COREDLL.dll90
COREDLL.dll1041
COREDLL.dll911
COREDLL.dll912
COREDLL.dll897
COREDLL.dll896
COREDLL.dll264
COREDLL.dll261
COREDLL.dll260
COREDLL.dll770
COREDLL.dll496
COREDLL.dll859
COREDLL.dll870
COREDLL.dll861
COREDLL.dll864
COREDLL.dll858
COREDLL.dll265
COREDLL.dll267
COREDLL.dll246
COREDLL.dll885
COREDLL.dll95
COREDLL.dll919
COREDLL.dll683
COREDLL.dll728
COREDLL.dll537
COREDLL.dll702
COREDLL.dll266
COREDLL.dll286
COREDLL.dll196
COREDLL.dll197
COREDLL.dll56
COREDLL.dll387
COREDLL.dll385
COREDLL.dll399
COREDLL.dll380
COREDLL.dll379
COREDLL.dll386
COREDLL.dll384
COREDLL.dll390
COREDLL.dll388
COREDLL.dll717
COREDLL.dll23
COREDLL.dll36
COREDLL.dll87
COREDLL.dll1645
gx.dll7int __cdecl GXOpenInput(void)

?GXOpenInput@@YAHXZ

gx.dll5struct GXDisplayProperties __cdecl GXGetDisplayProperties(void)

?GXGetDisplayProperties@@YA?AUGXDisplayProperties@@XZ

gx.dll4struct GXKeyList __cdecl GXGetDefaultKeys(int)

?GXGetDefaultKeys@@YA?AUGXKeyList@@H@Z

gx.dll8int __cdecl GXResume(void)

?GXResume@@YAHXZ

gx.dll2int __cdecl GXCloseInput(void)

?GXCloseInput@@YAHXZ

gx.dllvoid * __cdecl GXBeginDraw(void)

?GXBeginDraw@@YAPAXXZ

gx.dll3int __cdecl GXEndDraw(void)

?GXEndDraw@@YAHXZ

gx.dll9int __cdecl GXSuspend(void)

?GXSuspend@@YAHXZ

gx.dll6int __cdecl GXOpenDisplay(struct HWND__ *, unsigned long)

?GXOpenDisplay@@YAHPAUHWND__@@K@Z

gx.dll1int __cdecl GXCloseDisplay(void)

?GXCloseDisplay@@YAHXZ

offsetsizetypecomment
0438272EXE05/20/2005 20:22:01#
15c115HTM#
5ed981582WAV#
5f3d01844WAV#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK