filenameTHE7SINS_RETAIL.EXE
size6119424 (0x5d6000)
md521093d3882a311c92c45d42f01dc8785
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x140
blocks_in_file1
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x140

Rich Header

lib idversiontimes used
3787552
3984919
3991628
64946610
28946670
2594666
9640351
10574
25921025
4288033
1884446
9520679
299178109
2891787
489044246
299466383
6394661
6994661
6194661

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0
PointerToSymbolTable0x1ab841c5
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion75.24
SizeOfCode0x5d2000
SizeOfInitializedData0x5d2000
SizeOfUninitializedData0
AddressOfEntryPoint0x43960a
BaseOfCode0x1000
BaseOfData0x4f1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x5d6000
SizeOfHeaders0x400
CheckSum0x5dd9ab
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.sforce30x10000x3760000x376000RWX CODE IDATA
.brick0x3770000x1d40000x1d4000RWX CODE IDATA
.RDATA0x54b0000x10000x1000RWX CODE IDATA
.brick0x54c0000x520000x52000RWX CODE IDATA
.RSRC0x59e0000x283480x29000RWX CODE IDATA
.idata0x5c70000x10000x1000RWX CODE IDATA
.brick0x5c80000xb0000xb000RWX CODE IDATA
.start0x5d30000x30000x3000RWX CODE IDATA

Data Directory

typevasize
EXPORT0x54b1000x57e
IMPORT0x5d394c0x154
RESOURCE0x59e0000x28348
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#1108080
BITMAP#1118080
BITMAP#1148080
BITMAP#1158080
BITMAP#1161120
BITMAP#12011280
BITMAP#1268080
BITMAP#1288080
BITMAP#1298080
ICON#18720
ICON#218640
ICON#332400
ICON#473360
ICON#5512400
ICON#611280
ICON#724400
ICON#832400
ICON#996400
ICON#10676240
DIALOG#1081920
DIALOG#1091200
DIALOG#1103380
DIALOG#1172120
DIALOG#1181200
DIALOG#12214580
DIALOG#1231200
DIALOG#1241200
DIALOG#1313320
DIALOG#1321200
DIALOG#13310000
DIALOG#1355420
DIALOG#13616300
DIALOG#1378500
GROUP_ICON#1381460
#241#120240
module_namehintordfunction_name
advapi32.dll293GetUserNameA
advapi32.dll494RegQueryValueExA
advapi32.dll483RegOpenKeyA
advapi32.dll459RegCloseKey
comctl32.dll39ImageList_Add
comctl32.dll22CreateToolbarEx
comctl32.dll91_TrackMouseEvent
comctl32.dll45ImageList_Destroy
comctl32.dll44ImageList_Create
comctl32.dll83InitCommonControlsEx
dinput8.dll1DirectInput8Create
dsound.dll11DirectSoundCreate8
gdi32.dll462LineTo
gdi32.dll466MoveToEx
gdi32.dll503Rectangle
gdi32.dll72CreatePen
gdi32.dll437GetTextExtentPoint32A
gdi32.dll222ExtTextOutA
gdi32.dll81CreateSolidBrush
gdi32.dll525SelectClipRgn
gdi32.dll76CreateRectRgn
gdi32.dll19BitBlt
gdi32.dll71CreatePatternBrush
gdi32.dll45CreateCompatibleBitmap
gdi32.dll70CreatePalette
gdi32.dll364GetDeviceCaps
gdi32.dll500RealizePalette
gdi32.dll573SetTextColor
gdi32.dll595UnrealizeObject
gdi32.dll527SelectObject
gdi32.dll406GetObjectA
gdi32.dll538SetBrushOrgEx
gdi32.dll46CreateCompatibleDC
gdi32.dll431GetTextCharsetInfo
gdi32.dll202EnumFontFamiliesA
gdi32.dll59CreateFontIndirectA
gdi32.dll40CreateBitmap
gdi32.dll478PatBlt
gdi32.dll144DeleteObject
gdi32.dll534SetBkColor
gdi32.dll422GetStockObject
kernel32.dll319GetCurrentThreadId
kernel32.dll466GetTickCount
kernel32.dll429GetStartupInfoA
kernel32.dll183ExitProcess
kernel32.dll814SetThreadPriority
kernel32.dll105CreateSemaphoreA
kernel32.dll542InterlockedIncrement
kernel32.dll538InterlockedDecrement
kernel32.dll690ReleaseSemaphore
kernel32.dll891WaitForSingleObject
kernel32.dll363GetLocalTime
kernel32.dll549IsBadReadPtr
kernel32.dll209FindFirstFileA
kernel32.dll218FindNextFileA
kernel32.dll372GetModuleFileNameA
kernel32.dll819SetUnhandledExceptionFilter
kernel32.dll314GetCurrentDirectoryA
kernel32.dll332GetDriveTypeA
kernel32.dll503GlobalMemoryStatus
kernel32.dll659QueryPerformanceFrequency
kernel32.dll658QueryPerformanceCounter
kernel32.dll521HeapFree
kernel32.dll411GetProcessHeap
kernel32.dll515HeapAlloc
kernel32.dll317GetCurrentProcessId
kernel32.dll441GetSystemInfo
kernel32.dll354GetFullPathNameA
kernel32.dll227FindResourceW
kernel32.dll859UnmapViewOfFile
kernel32.dll83CreateFileW
kernel32.dll81CreateFileMappingA
kernel32.dll600MapViewOfFile
kernel32.dll374GetModuleHandleA
kernel32.dll408GetProcAddress
kernel32.dll578LoadLibraryA
kernel32.dll343GetFileAttributesA
kernel32.dll396GetOverlappedResult
kernel32.dll908WriteFile
kernel32.dll76CreateEventA
kernel32.dll348GetFileSize
kernel32.dll775SetFilePointer
kernel32.dll361GetLastError
kernel32.dll326GetDiskFreeSpaceA
kernel32.dll151EnterCriticalSection
kernel32.dll577LeaveCriticalSection
kernel32.dll128DeleteCriticalSection
kernel32.dll534InitializeCriticalSection
kernel32.dll205FindClose
kernel32.dll270GetComputerNameA
kernel32.dll676ReadFile
kernel32.dll72CreateDirectoryA
kernel32.dll80CreateFileA
kernel32.dll350GetFileTime
kernel32.dll195FileTimeToLocalFileTime
kernel32.dll196FileTimeToSystemTime
kernel32.dll50CloseHandle
kernel32.dll420GetProfileIntA
kernel32.dll920WriteProfileStringA
kernel32.dll99CreateProcessA
kernel32.dll583LoadResource
kernel32.dll597LockResource
kernel32.dll830SizeofResource
kernel32.dll224FindResourceA
kernel32.dll947lstrlen
kernel32.dll938lstrcmpi
kernel32.dll940lstrcmpiW
kernel32.dll433GetStringTypeExA
kernel32.dll434GetStringTypeExW
kernel32.dll895WideCharToMultiByte
kernel32.dll949lstrlenW
kernel32.dll56CompareStringA
kernel32.dll57CompareStringW
kernel32.dll337GetEnvironmentVariableA
kernel32.dll613MultiByteToWideChar
kernel32.dll475GetVersion
kernel32.dll338GetEnvironmentVariableW
kernel32.dll461GetThreadLocale
kernel32.dll364GetLocaleInfoA
kernel32.dll247GetACP
kernel32.dll539InterlockedExchange
kernel32.dll476GetVersionExA
kernel32.dll266GetCommandLineA
kernel32.dll831Sleep
kernel32.dll486GetWindowsDirectoryA
kernel32.dll241FreeLibrary
kernel32.dll941lstrcpy
kernel32.dll932lstrcat
kernel32.dll446GetSystemTimeAsFileTime
kernel32.dll557IsProcessorFeaturePresent
mfc70.dll2244
mfc70.dll2232
mfc70.dll2221
mfc70.dll2225
mfc70.dll2756
mfc70.dll4933
mfc70.dll3993
mfc70.dll4516
mfc70.dll1944
mfc70.dll1870
mfc70.dll1523
mfc70.dll1522
mfc70.dll1403
mfc70.dll5666
mfc70.dll1472
mfc70.dll1469
mfc70.dll3513
mfc70.dll1272
mfc70.dll4025
mfc70.dll1760
mfc70.dll4854
mfc70.dll5989
mfc70.dll3966
mfc70.dll4975
mfc70.dll3208
mfc70.dll4503
mfc70.dll4063
mfc70.dll1452
mfc70.dll5714
mfc70.dll812
mfc70.dll817
mfc70.dll821
mfc70.dll819
mfc70.dll823
mfc70.dll2239
mfc70.dll2223
mfc70.dll2242
mfc70.dll2237
mfc70.dll2214
mfc70.dll2216
mfc70.dll2234
mfc70.dll2026
mfc70.dll2020
mfc70.dll1377
mfc70.dll5993
mfc70.dll3610
mfc70.dll5991
mfc70.dll2356
mfc70.dll4748
mfc70.dll1234
mfc70.dll4954
mfc70.dll1814
mfc70.dll1508
mfc70.dll1507
mfc70.dll1451
mfc70.dll1273
mfc70.dll2529
mfc70.dll2675
mfc70.dll2359
mfc70.dll2463
mfc70.dll2352
mfc70.dll3522
mfc70.dll3751
mfc70.dll4267
mfc70.dll4043
mfc70.dll2990
mfc70.dll546
mfc70.dll300
mfc70.dll2474
mfc70.dll4361
mfc70.dll3907
mfc70.dll1755
mfc70.dll5838
mfc70.dll947
mfc70.dll1096
mfc70.dll5815
mfc70.dll3565
mfc70.dll1081
mfc70.dll1077
mfc70.dll957
mfc70.dll982
mfc70.dll3711
mfc70.dll408
mfc70.dll5176
mfc70.dll1017
mfc70.dll1014
mfc70.dll1477
mfc70.dll442
mfc70.dll441
mfc70.dll407
mfc70.dll710
mfc70.dll260
mfc70.dll1088
mfc70.dll728
mfc70.dll711
mfc70.dll1093
mfc70.dll2799
mfc70.dll1052
mfc70.dll3018
mfc70.dll1784
mfc70.dll3012
mfc70.dll1152
mfc70.dll2196
mfc70.dll2201
mfc70.dll2012
mfc70.dll4669
mfc70.dll4986
mfc70.dll4042
mfc70.dll3144
mfc70.dll701
mfc70.dll699
mfc70.dll513
mfc70.dll4732
mfc70.dll518
mfc70.dll5760
mfc70.dll5474
mfc70.dll686
mfc70.dll503
mfc70.dll5489
mfc70.dll3791
mfc70.dll572
mfc70.dll332
mfc70.dll5591
mfc70.dll5326
mfc70.dll650
mfc70.dll447
mfc70.dll5473
mfc70.dll2568
mfc70.dll2561
mfc70.dll2132
mfc70.dll2124
mfc70.dll1781
mfc70.dll1344
mfc70.dll1399
mfc70.dll4015
mfc70.dll2979
mfc70.dll532
mfc70.dll2971
mfc70.dll2969
mfc70.dll1151
mfc70.dll5393
mfc70.dll1779
mfc70.dll293
mfc70.dll1406
mfc70.dll3003
mfc70.dll2227
mfc70.dll3206
mfc70.dll3900
mfc70.dll3897
mfc70.dll5396
mfc70.dll977
mfc70.dll5739
mfc70.dll3155
mfc70.dll1443
mfc70.dll4013
mfc70.dll3124
mfc70.dll682
mfc70.dll4473
mfc70.dll530
mfc70.dll5813
mfc70.dll276
mfc70.dll2112
mfc70.dll3094
mfc70.dll3093
mfc70.dll2603
mfc70.dll898
mfc70.dll1869
mfc70.dll279
mfc70.dll694
mfc70.dll509
mfc70.dll272
mfc70.dll5400
mfc70.dll448
mfc70.dll2111
mfc70.dll5005
mfc70.dll2219
mfc70.dll2229
mfc70.dll561
msvcp70.dll1161void __cdecl std::_Nomemory(void)

?_Nomemory@std@@YAXXZ

msvcp70.dll2580void (__cdecl*__cdecl std::set_new_handler(void (__cdecl*)(void)))(void)

?set_new_handler@std@@YAP6AXXZP6AXXZ@Z

msvcr70.dll135__p__commode
msvcr70.dll191_adjust_fdiv
msvcr70.dll164__setusermatherr
msvcr70.dll323_initterm
msvcr70.dll115__getmainargs
msvcr70.dll198_amsg_exit
msvcr70.dll177_acmdln
msvcr70.dll209_cexit
msvcr70.dll81_XcptFilter
msvcr70.dll255_exit
msvcr70.dll206_c_exit
msvcr70.dll444_onexit
msvcr70.dll112__dllonexit
msvcr70.dll53void __cdecl terminate(void)

?terminate@@YAXXZ

msvcr70.dll16public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcr70.dll160__security_error_handler
msvcr70.dll818wcscmp
msvcr70.dll204_beginthread
msvcr70.dll208_callnewh
msvcr70.dll199_assert
msvcr70.dll504_splitpath
msvcr70.dll743memcmp
msvcr70.dll826wcsncpy
msvcr70.dll302_getdrive
msvcr70.dll298_getcwd
msvcr70.dll212_chdir
msvcr70.dll813vsprintf
msvcr70.dll784strncat
msvcr70.dll792strtok
msvcr70.dll801time
msvcr70.dll663ctime
msvcr70.dll760realloc
msvcr70.dll802tmpfile
msvcr70.dll695fwrite
msvcr70.dll691fseek
msvcr70.dll686fread
msvcr70.dll246_except_handler3
msvcr70.dll509_strcmpi
msvcr70.dll62_CIcosh
msvcr70.dll63_CIexp
msvcr70.dll64_CIfmod
msvcr70.dll69_CIsinh
msvcr70.dll72_CItanh
msvcr70.dll359_isnan
msvcr70.dll278_fpclass
msvcr70.dll666exit
msvcr70.dll805toupper
msvcr70.dll729isxdigit
msvcr70.dll706isalpha
msvcr70.dll705isalnum
msvcr70.dll804tolower
msvcr70.dll766setlocale
msvcr70.dll403_mbsdup
msvcr70.dll58_CIasin
msvcr70.dll67_CIpow
msvcr70.dll714isspace
msvcr70.dll708isdigit
msvcr70.dll289_ftol
msvcr70.dll274_finite
msvcr70.dll57_CIacos
msvcr70.dll757qsort
msvcr70.dll223_controlfp
msvcr70.dll657calloc
msvcr70.dll140__p__fmode
msvcr70.dll737longjmp
msvcr70.dll485_setjmp3
msvcr70.dll787strpbrk
msvcr70.dll655atol
msvcr70.dll677fgetws
msvcr70.dll823wcslen
msvcr70.dll834wcstombs
msvcr70.dll798system
msvcr70.dll649asin
msvcr70.dll772sqrt
msvcr70.dll651atan2
msvcr70.dll647acos
msvcr70.dll799tan
msvcr70.dll678floor
msvcr70.dll658ceil
msvcr70.dll667exp
msvcr70.dll759rand
msvcr70.dll750pow
msvcr70.dll679fmod
msvcr70.dll457_purecall
msvcr70.dll40void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

msvcr70.dll785strncmp
msvcr70.dll777strcmp
msvcr70.dll788strrchr
msvcr70.dll668fabs
msvcr70.dll646abs
msvcr70.dll769sin
msvcr70.dll661cos
msvcr70.dll550_vscprintf
msvcr70.dll433_mbsstr
msvcr70.dll405_mbsicoll
msvcr70.dll525_strupr
msvcr70.dll360_itoa
msvcr70.dll517_strnicmp
msvcr70.dll650atan
msvcr70.dll491_snprintf
msvcr70.dll776strchr
msvcr70.dll680fopen
msvcr70.dll675fgets
msvcr70.dll669fclose
msvcr70.dll681fprintf
msvcr70.dll515_strlwr
msvcr70.dll653atof
msvcr70.dll786strncpy
msvcr70.dll552_vsnprintf
msvcr70.dll783strlen
msvcr70.dll398_mbscmp
msvcr70.dll654atoi
msvcr70.dll820wcscpy
msvcr70.dll74_CxxThrowException
msvcr70.dll738malloc
msvcr70.dll744memcpy
msvcr70.dll745memmove
msvcr70.dll396_mbscat
msvcr70.dll400_mbscpy
msvcr70.dll790strstr
msvcr70.dll774sscanf
msvcr70.dll771sprintf
msvcr70.dll746memset
msvcr70.dll687free
msvcr70.dll86__CxxFrameHandler
msvcr70.dll18void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcr70.dll397_mbschr
msvcr70.dll427_mbspbrk
msvcr70.dll161__set_app_type
msvcr70.dll791strtod
msvcr70.dll428_mbsrchr
msvcr70.dll406_mbsinc
oleaut32.dll9VariantClear
oleaut32.dll8VariantInit
oleaut32.dll6SysFreeString
oleaut32.dll12VariantChangeType
shell32.dll272SHBrowseForFolder
shell32.dll312SHGetPathFromIDList
shell32.dll299SHGetFileInfo
shell32.dll288SHFileOperation
shell32.dll310SHGetMalloc
user32.dll635SetTimer
user32.dll313GetMenuStringA
user32.dll307GetMenuItemCount
user32.dll199EndDialog
user32.dll276GetDlgItemTextA
user32.dll490MoveWindow
user32.dll596SetDlgItemTextA
user32.dll159DialogBoxParamA
user32.dll440LoadCursorA
user32.dll534RedrawWindow
user32.dll599SetFocus
user32.dll557RemovePropA
user32.dll331GetPropA
user32.dll619SetPropA
user32.dll28CallWindowProcA
user32.dll227FillRect
user32.dll512PostMessageA
user32.dll14BeginPaint
user32.dll590SetCursor
user32.dll236GetActiveWindow
user32.dll3AdjustWindowRectEx
user32.dll301GetMenu
user32.dll423IsIconic
user32.dll672ToAscii
user32.dll295GetKeyboardState
user32.dll280GetForegroundWindow
user32.dll425IsRectEmpty
user32.dll524PtInRect
user32.dll499OffsetRect
user32.dll201EndPaint
user32.dll666SystemParametersInfoA
user32.dll75CopyRect
user32.dll228FindWindowA
user32.dll347GetSysColor
user32.dll415IsChild
user32.dll182DrawFrameControl
user32.dll621SetRect
user32.dll622SetRectEmpty
user32.dll150DestroyCursor
user32.dll395InflateRect
user32.dll179DrawEdge
user32.dll435KillTimer
user32.dll152DestroyMenu
user32.dll317GetMessagePos
user32.dll16BringWindowToTop
user32.dll477MessageBoxA
user32.dll367GetWindowLongA
user32.dll274GetDlgItem
user32.dll154DestroyWindow
user32.dll86CreateDialogParamA
user32.dll641SetWindowLongA
user32.dll572SendMessageA
user32.dll404InvalidateRect
user32.dll428IsWindow
user32.dll350GetSystemMetrics
user32.dll197EnableWindow
user32.dll53CharUpperA
user32.dll56CharUpperW
user32.dll39CharLowerA
user32.dll42CharLowerW
user32.dll655ShowCursor
user32.dll554ReleaseCapture
user32.dll581SetCapture
user32.dll268GetCursorPos
user32.dll562ScreenToClient
user32.dll65ClientToScreen
user32.dll376GetWindowTextA
user32.dll647SetWindowTextA
user32.dll247GetClassInfoA
user32.dll348GetSysColorBrush
user32.dll535RegisterClassA
user32.dll2AdjustWindowRect
user32.dll97CreateWindowExA
user32.dll510PeekMessageA
user32.dll143DefWindowProcA
user32.dll592SetCursorPos
user32.dll373GetWindowRect
user32.dll683TranslateMessage
user32.dll162DispatchMessageA
user32.dll256GetClientRect
user32.dll700UpdateWindow
user32.dll489MonitorFromWindow
user32.dll264GetComboBoxInfo
user32.dll567SendDlgItemMessageA
user32.dll95CreatePopupMenu
user32.dll398InsertMenuA
user32.dll290GetKeyState
user32.dll677TrackPopupMenu
user32.dll659ShowWindow
user32.dll644SetWindowPos
user32.dll320GetMonitorInfoA
user32.dll438LoadBitmapA
user32.dll326GetParent
user32.dll243GetAsyncKeyState
user32.dll244GetCapture
user32.dll432IsWindowVisible
protect.dll1SF01
protect.dll2SF02
protect.dll3SF03
protect.dll4SF04
winmm.dll166timeGetTime
comdlg32.dll112GetSaveFileNameA
comdlg32.dll110GetOpenFileNameA
d3d9.dll14Direct3DCreate9
ole32.dll17CoCreateGuid
ole32.dll106CoUninitialize
ole32.dll18CoCreateInstance
ole32.dll102CoTaskMemFree
ole32.dll101CoTaskMemAlloc
ole32.dll60CoInitialize
offsetsizetypecomment
15c115HTM#
15d06113840BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK