filenameG2.EXE
size20285952 (0x1358a00)
md51ff89ced37886c3b53476859864ffa2a
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
9621901
12729114
1197823
14729928
109782209
4288032
93217923
10486
10896635
00880
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x49a839d2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0xfa1200
SizeOfInitializedData0x416c00
SizeOfUninitializedData0
AddressOfEntryPoint0xf91c78
BaseOfCode0x1000
BaseOfData0xfa3000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x13bc000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x7a1200
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000xfa10ed0xfa1200R-X CODE
.rdata0xfa30000x28c500x28e00R-- IDATA
.data0xfcc0000xe66880x87000RW- IDATA
.data10x10b30000x2f90e80x2f9200RW- IDATA
_RDATA0x13ad0000xc1c0xe00R-- IDATA
.rsrc0x13ae0000xd5e80xd600R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xfc95f80xf0
RESOURCE0x13ae0000xd5e8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xfa30000x76c
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#113840
ICON#222160
ICON#337520
ICON#411280
ICON#542640
ICON#696400
ICON#713840
ICON#822160
ICON#937520
ICON#1011280
ICON#1142640
ICON#1296400
ICON#1313840
ICON#1411280
ICON#1513840
ICON#1611280
ICON#1713840
ICON#1811280
GROUP_ICONAPP900
GROUP_ICONG2900
GROUP_ICONPAUSED340
GROUP_ICONRESET340
GROUP_ICONRUNNING340
VERSION#18480
module_namehintordfunction_name
KERNEL32.dll333GetEnvironmentStrings
KERNEL32.dll238FreeEnvironmentStringsW
KERNEL32.dll237FreeEnvironmentStringsA
KERNEL32.dll866UnhandledExceptionFilter
KERNEL32.dll571LCMapStringW
KERNEL32.dll570LCMapStringA
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll331GetDriveTypeA
KERNEL32.dll335GetEnvironmentStringsW
KERNEL32.dll793SetHandleCount
KERNEL32.dll857TlsSetValue
KERNEL32.dll854TlsAlloc
KERNEL32.dll856TlsGetValue
KERNEL32.dll522HeapDestroy
KERNEL32.dll520HeapCreate
KERNEL32.dll888VirtualFree
KERNEL32.dll919WriteFile
KERNEL32.dll784SetFilePointer
KERNEL32.dll353GetFullPathNameA
KERNEL32.dll312GetCurrentDirectoryA
KERNEL32.dll716RtlUnwind
KERNEL32.dll315GetCurrentProcessId
KERNEL32.dll472GetTimeZoneInformation
KERNEL32.dll528HeapReAlloc
KERNEL32.dll350GetFileType
KERNEL32.dll537InitializeCriticalSection
KERNEL32.dll524HeapFree
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll518HeapAlloc
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll175ExitProcess
KERNEL32.dll264GetCommandLineA
KERNEL32.dll431GetStartupInfoA
KERNEL32.dll546InterlockedIncrement
KERNEL32.dll542InterlockedDecrement
KERNEL32.dll885VirtualAlloc
KERNEL32.dll252GetCPInfo
KERNEL32.dll245GetACP
KERNEL32.dll395GetOEMCP
KERNEL32.dll434GetStringTypeA
KERNEL32.dll437GetStringTypeW
KERNEL32.dll52CompareStringA
KERNEL32.dll53CompareStringW
KERNEL32.dll776SetEnvironmentVariableA
KERNEL32.dll773SetEndOfFile
KERNEL32.dll187FileTimeToLocalFileTime
KERNEL32.dll398GetPrivateProfileIntA
KERNEL32.dll404GetPrivateProfileStringA
KERNEL32.dll754SetConsoleMode
KERNEL32.dll364GetLocaleInfoA
KERNEL32.dll489GetWindowsDirectoryA
KERNEL32.dll179ExpandEnvironmentStringsW
KERNEL32.dll950lstrcmpiA
KERNEL32.dll319GetDateFormatA
KERNEL32.dll470GetTimeFormatA
KERNEL32.dll188FileTimeToSystemTime
KERNEL32.dll847SystemTimeToTzSpecificLocalTime
KERNEL32.dll944lstrcatA
KERNEL32.dll390GetNumberFormatA
KERNEL32.dll953lstrcpyA
KERNEL32.dll480GetVersionExW
KERNEL32.dll945lstrcatW
KERNEL32.dll446GetSystemTime
KERNEL32.dll234FormatMessageA
KERNEL32.dll594LocalFree
KERNEL32.dll720SearchPathA
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll618MulDiv
KERNEL32.dll501GlobalFree
KERNEL32.dll80CreateFileW
KERNEL32.dll778SetErrorMode
KERNEL32.dll494GlobalAlloc
KERNEL32.dll512GlobalUnlock
KERNEL32.dll505GlobalLock
KERNEL32.dll78CreateFileMappingA
KERNEL32.dll90CreateMutexA
KERNEL32.dll696ReleaseMutex
KERNEL32.dll665QueryPerformanceCounter
KERNEL32.dll666QueryPerformanceFrequency
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll457GetTempFileNameA
KERNEL32.dll325GetDiskFreeSpaceA
KERNEL32.dll613MoveFileExA
KERNEL32.dll61CopyFileA
KERNEL32.dll124DeleteFileA
KERNEL32.dll841Sleep
KERNEL32.dll368GetLogicalDrives
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll197FindClose
KERNEL32.dll797SetLastError
KERNEL32.dll92CreateNamedPipeA
KERNEL32.dll73CreateEventA
KERNEL32.dll683ReadFile
KERNEL32.dll901WaitForSingleObject
KERNEL32.dll708ResetEvent
KERNEL32.dll396GetOverlappedResult
KERNEL32.dll239FreeLibrary
KERNEL32.dll584LoadLibraryA
KERNEL32.dll338GetExitCodeProcess
KERNEL32.dll244GenerateConsoleCtrlEvent
KERNEL32.dll849TerminateProcess
KERNEL32.dll636OpenProcess
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll268GetComputerNameA
KERNEL32.dll336GetEnvironmentVariableA
KERNEL32.dll643OutputDebugStringA
KERNEL32.dll469GetTickCount
KERNEL32.dll459GetTempPathA
KERNEL32.dll77CreateFileA
KERNEL32.dll812SetStdHandle
KERNEL32.dll478GetVersion
KERNEL32.dll9AllocConsole
KERNEL32.dll739SetConsoleCtrlHandler
KERNEL32.dll433GetStdHandle
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll211FindNextFileA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll363GetLocalTime
KERNEL32.dll479GetVersionExA
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll408GetProcAddress
KERNEL32.dll905WideCharToMultiByte
KERNEL32.dll229FlushFileBuffers
KERNEL32.dll767SetCurrentDirectoryA
KERNEL32.dll96CreateProcessA
KERNEL32.dll46CloseHandle
KERNEL32.dll361GetLastError
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll105CreateThread
WS2_32.dll2
WS2_32.dll116
WS2_32.dll151
WS2_32.dll18
WS2_32.dll6
WS2_32.dll17
WS2_32.dll20
WS2_32.dll65WSASocketA
WS2_32.dll53
WS2_32.dll51
WS2_32.dll12
WS2_32.dll5
WS2_32.dll57
WS2_32.dll19
WS2_32.dll71WSAWaitForMultipleEvents
WS2_32.dll30WSAGetOverlappedResult
WS2_32.dll112
WS2_32.dll111
WS2_32.dll13
WS2_32.dll8
WS2_32.dll16
WS2_32.dll101
WS2_32.dll52
WS2_32.dll23
WS2_32.dll11
WS2_32.dll9
WS2_32.dll4
WS2_32.dll56WSAResetEvent
WS2_32.dll20WSACreateEvent
WS2_32.dll22
WS2_32.dll21
WS2_32.dll10
WS2_32.dll3
WS2_32.dll1
WS2_32.dll18WSACloseEvent
WS2_32.dll115
WS2_32.dll7
ADVAPI32.dll464RegDeleteKeyA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll492RegQueryValueExA
ADVAPI32.dll461RegCreateKeyExA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll466RegDeleteValueA
ADVAPI32.dll487RegQueryInfoKeyA
ADVAPI32.dll291GetUserNameA
ADVAPI32.dll483RegOpenKeyExW
ADVAPI32.dll493RegQueryValueExW
ADVAPI32.dll457RegCloseKey
USER32.dll308GetMenuItemInfoA
USER32.dll346GetSysColor
USER32.dll347GetSysColorBrush
USER32.dll181DrawFrameControl
USER32.dll575SendMessageW
USER32.dll198EndDialog
USER32.dll252GetClassNameA
USER32.dll157DialogBoxIndirectParamW
USER32.dll276GetDlgItemTextW
USER32.dll419IsDlgButtonChecked
USER32.dll159DialogBoxParamW
USER32.dll273GetDlgItem
USER32.dll595SetDlgItemTextW
USER32.dll565SendDlgItemMessageA
USER32.dll536RegisterClassW
USER32.dll56CheckDlgButton
USER32.dll158DialogBoxParamA
USER32.dll364GetWindowDC
USER32.dll233FrameRect
USER32.dll512PeekMessageW
USER32.dll93CreateMenu
USER32.dll8AppendMenuA
USER32.dll685UnhookWindowsHookEx
USER32.dll26CallNextHookEx
USER32.dll485MessageBoxW
USER32.dll650SetWindowsHookExW
USER32.dll271GetDialogBaseUnits
USER32.dll418IsDialogMessageW
USER32.dll430IsWindowEnabled
USER32.dll726wsprintfW
USER32.dll9AppendMenuW
USER32.dll554RemoveMenu
USER32.dll604SetMenu
USER32.dll58CheckMenuRadioItem
USER32.dll487ModifyMenuW
USER32.dll462LockWindowUpdate
USER32.dll594SetDlgItemTextA
USER32.dll676TrackPopupMenuEx
USER32.dll27CallWindowProcA
USER32.dll142DefWindowProcA
USER32.dll523PtInRect
USER32.dll188DrawTextA
USER32.dll183DrawIconEx
USER32.dll534RegisterClassExA
USER32.dll82CreateDialogIndirectParamA
USER32.dll680TranslateMDISysAccel
USER32.dll717WaitMessage
USER32.dll378GetWindowTextW
USER32.dll140DefMDIChildProcW
USER32.dll197EndDeferWindowPos
USER32.dll12BeginDeferWindowPos
USER32.dll325GetParent
USER32.dll641SetWindowPlacement
USER32.dll2AdjustWindowRectEx
USER32.dll184DrawMenuBar
USER32.dll341GetScrollInfo
USER32.dll272GetDlgCtrlID
USER32.dll434IsZoomed
USER32.dll621SetScrollInfo
USER32.dll564ScrollWindowEx
USER32.dll698UpdateWindow
USER32.dll357GetUpdateRgn
USER32.dll356GetUpdateRect
USER32.dll28CallWindowProcW
USER32.dll345GetSubMenu
USER32.dll178DrawEdge
USER32.dll57CheckMenuItem
USER32.dll203EnumChildWindows
USER32.dll640SetWindowLongW
USER32.dll367GetWindowLongW
USER32.dll441LoadCursorA
USER32.dll138DefFrameProcW
USER32.dll311GetMenuState
USER32.dll532RedrawWindow
USER32.dll555RemovePropA
USER32.dll617SetPropA
USER32.dll330GetPropA
USER32.dll477MessageBeep
USER32.dll15BringWindowToTop
USER32.dll231FlashWindow
USER32.dll590SetCursorPos
USER32.dll362GetWindow
USER32.dll500OffsetRect
USER32.dll686UnionRect
USER32.dll402IntersectRect
USER32.dll74CopyRect
USER32.dll562ScrollDC
USER32.dll433IsWindowVisible
USER32.dll721WindowFromDC
USER32.dll226FillRect
USER32.dll639SetWindowLongA
USER32.dll255GetClientRect
USER32.dll645SetWindowTextA
USER32.dll642SetWindowPos
USER32.dll97CreateWindowExW
USER32.dll372GetWindowRect
USER32.dll664SystemParametersInfoA
USER32.dll349GetSystemMetrics
USER32.dll550RegisterWindowMessageA
USER32.dll196EnableWindow
USER32.dll268GetDC
USER32.dll422IsIconic
USER32.dll657ShowWindow
USER32.dll646SetWindowTextW
USER32.dll193EmptyClipboard
USER32.dll537RegisterClipboardFormatA
USER32.dll585SetClipboardData
USER32.dll257GetClipboardData
USER32.dll66CloseClipboard
USER32.dll501OpenClipboard
USER32.dll415IsClipboardFormatAvailable
USER32.dll511PeekMessageA
USER32.dll161DispatchMessageA
USER32.dll317GetMessageTime
USER32.dll250GetClassLongA
USER32.dll366GetWindowLongA
USER32.dll194EnableMenuItem
USER32.dll290GetKeyboardLayout
USER32.dll162DispatchMessageW
USER32.dll429IsWindow
USER32.dll423IsMenu
USER32.dll153DestroyWindow
USER32.dll151DestroyMenu
USER32.dll553ReleaseDC
USER32.dll681TranslateMessage
USER32.dll318GetMessageW
USER32.dll588SetCursor
USER32.dll674TrackMouseEvent
USER32.dll560ScreenToClient
USER32.dll552ReleaseCapture
USER32.dll579SetCapture
USER32.dll243GetCapture
USER32.dll708VkKeyScanA
USER32.dll671ToAsciiEx
USER32.dll294GetKeyboardState
USER32.dll722WindowFromPoint
USER32.dll270GetDesktopWindow
USER32.dll473MapWindowPoints
USER32.dll289GetKeyState
USER32.dll515PostQuitMessage
USER32.dll267GetCursorPos
USER32.dll191DrawTextW
USER32.dll445LoadIconA
USER32.dll439LoadBitmapA
USER32.dll619SetRect
USER32.dll219EnumThreadWindows
USER32.dll306GetMenuItemCount
USER32.dll491MoveWindow
USER32.dll307GetMenuItemID
USER32.dll598SetForegroundWindow
USER32.dll397InsertMenuA
USER32.dll94CreatePopupMenu
USER32.dll348GetSystemMenu
USER32.dll64ClientToScreen
USER32.dll403InvalidateRect
USER32.dll200EndPaint
USER32.dll13BeginPaint
USER32.dll436KillTimer
USER32.dll300GetMenu
USER32.dll92CreateMDIWindowW
USER32.dll513PostMessageA
USER32.dll11AttachThreadInput
USER32.dll96CreateWindowExA
USER32.dll597SetFocus
USER32.dll633SetTimer
USER32.dll278GetFocus
USER32.dll371GetWindowPlacement
USER32.dll143DefWindowProcW
USER32.dll570SendMessageA
USER32.dll150DestroyIcon
USER32.dll447LoadImageA
USER32.dll478MessageBoxA
USER32.dll675TrackPopupMenu
USER32.dll144DeferWindowPos
GDI32.dll586StretchDIBits
GDI32.dll437GetTextExtentPoint32W
GDI32.dll534SetBkMode
GDI32.dll548SetGraphicsMode
GDI32.dll570SetTextAlign
GDI32.dll573SetTextJustification
GDI32.dll222ExtTextOutW
GDI32.dll81DPtoLP
GDI32.dll574SetViewportExtEx
GDI32.dll520ScaleViewportExtEx
GDI32.dll58CreateFontIndirectA
GDI32.dll201EnumFontFamiliesA
GDI32.dll283GdiFlush
GDI32.dll436GetTextExtentPoint32A
GDI32.dll444GetTextMetricsA
GDI32.dll75CreateRectRgn
GDI32.dll418GetRegionData
GDI32.dll543SetDIBits
GDI32.dll407GetObjectW
GDI32.dll50CreateDIBSection
GDI32.dll585StretchBlt
GDI32.dll582StartDocW
GDI32.dll150EndDoc
GDI32.dll584StartPage
GDI32.dll152EndPage
GDI32.dll528SetAbortProc
GDI32.dll555SetMapMode
GDI32.dll575SetViewportOrgEx
GDI32.dll578SetWindowExtEx
GDI32.dll591TextOutW
GDI32.dll590TextOutA
GDI32.dllAbortDoc
GDI32.dll221ExtTextOutA
GDI32.dll594UnrealizeObject
GDI32.dll527SelectPalette
GDI32.dll511ResizePalette
GDI32.dll499RealizePalette
GDI32.dll537SetBrushOrgEx
GDI32.dll405GetObjectA
GDI32.dll572SetTextColor
GDI32.dll533SetBkColor
GDI32.dll519SaveDC
GDI32.dll512RestoreDC
GDI32.dll493Polygon
GDI32.dll148Ellipse
GDI32.dll11Arc
GDI32.dll80CreateSolidBrush
GDI32.dll494Polyline
GDI32.dll565SetROP2
GDI32.dll216ExtCreatePen
GDI32.dll465MoveToEx
GDI32.dll461LineTo
GDI32.dll71CreatePen
GDI32.dll459LPtoDP
GDI32.dll76CreateRectRgnIndirect
GDI32.dll352GetClipBox
GDI32.dll579SetWindowOrgEx
GDI32.dll524SelectClipRgn
GDI32.dll455IntersectClipRect
GDI32.dll563SetPixelV
GDI32.dll477PatBlt
GDI32.dll526SelectObject
GDI32.dll18BitBlt
GDI32.dll44CreateCompatibleBitmap
GDI32.dll421GetStockObject
GDI32.dll70CreatePatternBrush
GDI32.dll140DeleteDC
GDI32.dll45CreateCompatibleDC
GDI32.dll39CreateBitmap
GDI32.dll363GetDeviceCaps
GDI32.dll143DeleteObject
GDI32.dll33CombineRgn
comdlg32.dll9GetOpenFileNameA
comdlg32.dll11GetSaveFileNameA
comdlg32.dll4CommDlgExtendedError
comdlg32.dll16PrintDlgA
COMCTL32.dll108_TrackMouseEvent
COMCTL32.dll71ImageList_GetImageCount
COMCTL32.dll52ImageList_AddMasked
COMCTL32.dll80ImageList_Remove
COMCTL32.dll88ImageList_SetImageCount
COMCTL32.dll50ImageList_Add
COMCTL32.dll81ImageList_Replace
COMCTL32.dll55ImageList_Create
COMCTL32.dll17
COMCTL32.dll93InitCommonControlsEx
COMCTL32.dll75ImageList_LoadImageA
COMCTL32.dll82ImageList_ReplaceIcon
COMCTL32.dll56ImageList_Destroy
COMCTL32.dll8CreateStatusWindowW
COMCTL32.dll70ImageList_GetIconSize
COMCTL32.dll61ImageList_Draw
COMCTL32.dll69ImageList_GetIcon
SHELL32.dll122SHBrowseForFolderW
SHELL32.dll189SHGetPathFromIDListW
SHELL32.dll183SHGetMalloc
SHELL32.dll172SHGetFileInfoA
SHELL32.dll276Shell_NotifyIconW
SHELL32.dll275Shell_NotifyIconA
SHELL32.dll167SHGetDesktopFolder
CRYPT32.dll60CertFreeCertificateContext
CRYPT32.dll64CertGetCertificateChain
CRYPT32.dll58CertFreeCertificateChain
CRYPT32.dll107CertVerifyCertificateChainPolicy
CRYPT32.dll69CertGetNameStringA
CRYPT32.dll80CertOpenStore
CRYPT32.dll15CertCloseStore
CRYPT32.dll50CertFindCertificateInStore
RPCRT4.dll481UuidCreate
VERSION.dllGetFileVersionInfoA
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dll10VerQueryValueA

StringTable 040904E4

Build IDLC02
Comments
CompanyNameGensym Corporation
FileDescriptionGensym G2
FileVersion8.3 Rev. 1 Patch LC02
InternalNameg2
LegalCopyrightCopyright © Gensym Corp. 1985 - 2009
OriginalFilenameg2.exe
ProductNameG2
ProductVersion8.3 Rev. 1 Patch LC02
SpecialBuild

VS_FIXEDFILEINFO

FileVersion8.3.128.123
ProductVersion8.3.128.123
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
13443c034517GIF(0 x 18759)#
134ca9549003BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK