AsmSfv.exe

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	AsmSfv.exe
size	17408 (0x4400)
md5	22e0dd511c76221beb363b751a4e7ae1

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xc8

Rich Header

lib id	version	times used
19	8078	71
158	30319	1
18	8444	7
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4f51614d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	5.12
SizeOfCode	0x1800
SizeOfInitializedData	0x2c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x3000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	4.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x7000
SizeOfHeaders	0x400
CheckSum	0xcfa6
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

TASM / MASM

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x16b8	0x1800	R-X CODE
.rdata	0x3000	0x668	0x800	R-- IDATA
.data	0x4000	0xea8	0xc00	RW- IDATA
.rsrc	0x5000	0x1330	0x1400	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x30fc	0xa0
RESOURCE	0x5000	0x1330
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x3000	0xfc
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	2216
DIALOG	#101	1076
DIALOG	#1022	78
GROUP_ICON	#2	20
VERSION	#1	480
MANIFEST	#1	599

module_name	hint	function_name
user32.dll	372	InvalidateRect
user32.dll	233	GetClientRect
user32.dll	182	EndPaint
user32.dll	170	DrawTextA
user32.dll	11	BeginPaint
user32.dll	568	SetWindowLongA
user32.dll	432	MessageBeep
user32.dll	509	SendMessageA
user32.dll	504	SendDlgItemMessageA
user32.dll	467	PostMessageA
user32.dll	433	MessageBoxA
user32.dll	408	LoadIconA
user32.dll	399	KillTimer
user32.dll	562	SetTimer
user32.dll	250	GetDlgItem
user32.dll	180	EndDialog
user32.dll	178	EnableWindow
user32.dll	144	DialogBoxParamA
user32.dll	21	CallWindowProcA
user32.dll	637	wsprintfA
kernel32.dll	445	HeapAlloc
kernel32.dll	397	GetTickCount
kernel32.dll	789	lstrcmpA
kernel32.dll	372	GetSystemInfo
kernel32.dll	797	lstrlenA
kernel32.dll	35	CloseHandle
kernel32.dll	61	CreateFileA
kernel32.dll	86	CreateThread
kernel32.dll	155	ExitProcess
kernel32.dll	173	FindClose
kernel32.dll	177	FindFirstFileA
kernel32.dll	284	GetFileSize
kernel32.dll	306	GetModuleFileNameA
kernel32.dll	308	GetModuleHandleA
kernel32.dll	342	GetProcessHeap
kernel32.dll	230	GetCommandLineA
kernel32.dll	449	HeapFree
kernel32.dll	562	QueryPerformanceCounter
kernel32.dll	563	QueryPerformanceFrequency
kernel32.dll	577	ReadFile
kernel32.dll	604	RtlZeroMemory
kernel32.dll	787	lstrcatA
kernel32.dll	791	lstrcmpiA
kernel32.dll	795	lstrcpynA
comctl32.dll	84	InitCommonControls
comdlg32.dll	10	GetOpenFileNameA
advapi32.dll	473	RegQueryValueA
advapi32.dll	439	RegCloseKey
advapi32.dll	443	RegCreateKeyExA
advapi32.dll	474	RegQueryValueExA
advapi32.dll	487	RegSetValueExA
shell32.dll	17	DragQueryFileA
gdi32.dll	345	SetTextColor
gdi32.dll	309	SetBkMode
gdi32.dll	221	GetStockObject
gdi32.dll	75	DeleteObject

StringTable 040904E4

CompanyName	Stefan Linke
FileVersion	1.0.0.253
LegalCopyright	(c) 2012 Stefan Linke
ProductName	Real Small Tools

VS_FIXEDFILEINFO

FileVersion	1.0.0.253
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	17408	EXE	03/03/2012 00:09:49	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK