filenamewbd3d.exe
size1428992 (0x15ce00)
md531b0b8e631ad5dd85b1487cc08b2a236
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x3b2a6cb8
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.0
SizeOfCode0xf9400
SizeOfInitializedData0x360800
SizeOfUninitializedData0
AddressOfEntryPoint0xe9980
BaseOfCode0x1000
BaseOfData0xfb000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x45e000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v5.0

Sections

namevavsizeraw sizeflags
.text0x10000xf92620xf9400R-X CODE
.rdata0xfb0000x54480x5600R-- IDATA
.data0x1010000x35702c0x5a000RW- IDATA
.idata0x4590000x1b6c0x1c00RW- IDATA
.rsrc0x45b0000x23300x2400R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x4590000x118
RESOURCE0x45b0000x2330
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x4595b00x484
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#13080
CURSOR#23080
ICON#37440
ICON#422160
ICON#537520
ICON#62960
GROUP_CURSOR#102200
GROUP_CURSOR#103200
GROUP_ICON#101620
VERSION#16560
module_namehintordfunction_name
WINMM.dll167waveInStart
WINMM.dll154waveInAddBuffer
WINMM.dll165waveInPrepareHeader
WINMM.dll164waveInOpen
WINMM.dll155waveInClose
WINMM.dll26joyGetDevCapsA
WINMM.dll168waveInStop
WINMM.dll166waveInReset
WINMM.dll169waveInUnprepareHeader
WINMM.dll151timeGetTime
DSOUND.dll1
KERNEL32.dll622WideCharToMultiByte
KERNEL32.dll130FindFirstFileA
KERNEL32.dll333GetVersionExA
KERNEL32.dll401LoadLibraryExA
KERNEL32.dll325GetTickCount
KERNEL32.dll135FindNextFileA
KERNEL32.dll126FindClose
KERNEL32.dll664lstrcmpiA
KERNEL32.dll635WriteFile
KERNEL32.dll470ReadFile
KERNEL32.dll266GetOverlappedResult
KERNEL32.dll532SetEvent
KERNEL32.dll49CreateFileA
KERNEL32.dll571SetupComm
KERNEL32.dll168GetCommState
KERNEL32.dll494SetCommState
KERNEL32.dll495SetCommTimeouts
KERNEL32.dll481ResetEvent
KERNEL32.dll67CreateThread
KERNEL32.dll212GetCurrentProcessId
KERNEL32.dll341GlobalAlloc
KERNEL32.dll352GlobalLock
KERNEL32.dll358GlobalUnlock
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll524SetCurrentDirectoryA
KERNEL32.dll24CloseHandle
KERNEL32.dll278GetProcAddress
KERNEL32.dll46CreateEventA
KERNEL32.dll154FreeResource
KERNEL32.dll152FreeLibrary
KERNEL32.dll419LockResource
KERNEL32.dll400LoadLibraryA
KERNEL32.dll230GetExitCodeProcess
KERNEL32.dll219GetDiskFreeSpaceA
KERNEL32.dll606VirtualFree
KERNEL32.dll137FindResourceA
KERNEL32.dll397LCMapStringA
KERNEL32.dll405LoadResource
KERNEL32.dll427MultiByteToWideChar
KERNEL32.dll302GetStringTypeW
KERNEL32.dll142FlushFileBuffers
KERNEL32.dll457RaiseException
KERNEL32.dll299GetStringTypeA
KERNEL32.dll542SetLastError
KERNEL32.dll586TlsGetValue
KERNEL32.dll587TlsSetValue
KERNEL32.dll214GetCurrentThreadId
KERNEL32.dll584TlsAlloc
KERNEL32.dll298GetStdHandle
KERNEL32.dll539SetHandleCount
KERNEL32.dll537SetFilePointer
KERNEL32.dll399LeaveCriticalSection
KERNEL32.dll88EnterCriticalSection
KERNEL32.dll377InitializeCriticalSection
KERNEL32.dll332GetVersion
KERNEL32.dll76DeleteCriticalSection
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll170GetCommandLineA
KERNEL32.dll360HeapAlloc
KERNEL32.dll42CreateDirectoryA
KERNEL32.dll485RtlUnwind
KERNEL32.dll366HeapFree
KERNEL32.dll382InterlockedIncrement
KERNEL32.dll239GetFileType
KERNEL32.dll245GetLocalTime
KERNEL32.dll309GetSystemTime
KERNEL32.dll379InterlockedDecrement
KERNEL32.dll78DeleteFileA
KERNEL32.dll422MoveFileA
KERNEL32.dll328GetTimeZoneInformation
KERNEL32.dll582TerminateProcess
KERNEL32.dll107ExitProcess
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll7Process32First
KERNEL32.dll5Module32First
KERNEL32.dllCreateToolhelp32Snapshot
KERNEL32.dll8Process32Next
KERNEL32.dll398LCMapStringW
KERNEL32.dll6Module32Next
KERNEL32.dll362HeapCreate
KERNEL32.dll364HeapDestroy
KERNEL32.dll553SetStdHandle
KERNEL32.dll232GetFileAttributesA
KERNEL32.dll528SetEndOfFile
KERNEL32.dll157GetACP
KERNEL32.dll265GetOEMCP
KERNEL32.dll163GetCPInfo
KERNEL32.dll240GetFullPathNameA
KERNEL32.dll442OutputDebugStringA
KERNEL32.dll370HeapSize
KERNEL32.dll592UnhandledExceptionFilter
KERNEL32.dll369HeapReAlloc
KERNEL32.dll151FreeEnvironmentStringsW
KERNEL32.dll225GetEnvironmentStrings
KERNEL32.dll150FreeEnvironmentStringsA
KERNEL32.dll227GetEnvironmentStringsW
KERNEL32.dll623WinExec
KERNEL32.dll618WaitForSingleObject
KERNEL32.dll566SetUnhandledExceptionFilter
KERNEL32.dll387IsBadReadPtr
KERNEL32.dll209GetCurrentDirectoryA
KERNEL32.dll384IsBadCodePtr
KERNEL32.dll390IsBadWritePtr
KERNEL32.dll247GetLocaleInfoW
KERNEL32.dll30CompareStringA
KERNEL32.dll246GetLocaleInfoA
KERNEL32.dll529SetEnvironmentVariableA
KERNEL32.dll120FileTimeToSystemTime
KERNEL32.dll31CompareStringW
KERNEL32.dll603VirtualAlloc
KERNEL32.dll667lstrcpyA
KERNEL32.dll575Sleep
KERNEL32.dll119FileTimeToLocalFileTime
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll244GetLastError
KERNEL32.dll61CreateProcessA
USER32.dll180EndDialog
USER32.dll498SetDlgItemTextA
USER32.dll557ShowWindow
USER32.dll584UnhookWindowsHookEx
USER32.dll300GetSystemMetrics
USER32.dll502SetForegroundWindow
USER32.dll542SetWindowPos
USER32.dll604WaitForInputIdle
USER32.dll317GetWindowRect
USER32.dll433PostMessageA
USER32.dll474SendMessageA
USER32.dll501SetFocus
USER32.dll534SetTimer
USER32.dll142DialogBoxParamA
USER32.dll243GetDlgItem
USER32.dll365KillTimer
USER32.dll285GetParent
USER32.dll370LoadCursorA
USER32.dll413MoveWindow
USER32.dll387LoadStringA
USER32.dll494SetCursorPos
USER32.dll405MessageBoxA
USER32.dll549SetWindowsHookExA
USER32.dll237GetCursorPos
USER32.dll376LoadImageA
USER32.dll17CallNextHookEx
USER32.dll225GetClassNameA
USER32.dll248GetFocus
USER32.dll338InvalidateRect
USER32.dll182EndPaint
USER32.dll9BeginPaint
USER32.dll184EnumChildWindows
USER32.dll539SetWindowLongA
USER32.dll327HideCaret
USER32.dll443PtInRect
USER32.dll18CallWindowProcA
USER32.dll552ShowCaret
USER32.dll134DestroyCaret
USER32.dll68CreateCaret
USER32.dll445RedrawWindow
USER32.dll606WinHelpA
USER32.dll359IsWindow
USER32.dll75CreateDialogParamA
USER32.dll241GetDialogBaseUnits
USER32.dll362IsWindowVisible
USER32.dll593UpdateWindow
USER32.dll352IsDialogMessageA
USER32.dll612wsprintfA
USER32.dll47CheckDlgButton
USER32.dll390LockWindowUpdate
USER32.dll50CheckRadioButton
USER32.dll354IsDlgButtonChecked
USER32.dll497SetDlgItemInt
USER32.dll242GetDlgCtrlID
USER32.dll545SetWindowTextA
USER32.dll244GetDlgItemInt
USER32.dll138DestroyWindow
USER32.dll238GetDC
USER32.dll178EnableWindow
USER32.dll472SendDlgItemMessageA
USER32.dll319GetWindowTextA
USER32.dll461ReleaseDC
USER32.dll467ScreenToClient
USER32.dll492SetCursor
USER32.dll368LoadBitmapA
USER32.dll54ClientToScreen
USER32.dll581TranslateMessage
USER32.dll431PeekMessageA
USER32.dll277GetMessageA
USER32.dll228GetClientRect
USER32.dll144DispatchMessageA
USER32.dll435PostQuitMessage
USER32.dll374LoadIconA
USER32.dll597ValidateRect
USER32.dll128DefWindowProcA
USER32.dll245GetDlgItemTextA
USER32.dll446RegisterClassA
USER32.dll85CreateWindowExA
USER32.dll314GetWindowLongA
GDI32.dll37CreateDIBitmap
GDI32.dll353SetMapMode
GDI32.dll70DeleteObject
GDI32.dll67DeleteDC
GDI32.dll10BitBlt
GDI32.dll330SelectObject
GDI32.dll31CreateCompatibleDC
GDI32.dll234GetObjectA
GDI32.dll198GetDIBits
GDI32.dll250GetStockObject
GDI32.dll30CreateCompatibleBitmap
GDI32.dll98ExtTextOutA
GDI32.dll336SetBkColor
GDI32.dll337SetBkMode
GDI32.dll370SetTextColor
GDI32.dll261GetTextExtentPoint32A
GDI32.dll314Rectangle
GDI32.dll387TextOutA
GDI32.dll368SetTextAlign
GDI32.dll267GetTextMetricsA
GDI32.dll65DPtoLP
GDI32.dll226GetMapMode
GDI32.dll311RealizePalette
GDI32.dll331SelectPalette
GDI32.dll25CreateBitmap
GDI32.dll197GetDIBColorTable
GDI32.dll64CreateSolidBrush
GDI32.dll55CreatePen
GDI32.dll44CreateFontIndirectA
GDI32.dll36CreateDIBSection
GDI32.dll280LineTo
GDI32.dll283MoveToEx
GDI32.dll183GetCharWidthA
ADVAPI32.dll302RegOpenKeyExA
ADVAPI32.dll310RegQueryValueExA
ADVAPI32.dll279RegCloseKey
ADVAPI32.dll321RegSetValueExA
ADVAPI32.dll283RegCreateKeyExA
ADVAPI32.dll294RegEnumValueA
ADVAPI32.dll291RegEnumKeyExA
SHELL32.dll99ShellExecuteExA
COMCTL32.dll59PropertySheetA
COMCTL32.dll17
DDRAW.dll9DirectDrawEnumerateA
DDRAW.dll7DirectDrawCreate
WSOCK32.dll115
WSOCK32.dll16
WSOCK32.dll19
WSOCK32.dll5
WSOCK32.dll21
WSOCK32.dll18
WSOCK32.dll151
WSOCK32.dll111
WSOCK32.dll4
WSOCK32.dll3
WSOCK32.dll23
WSOCK32.dll2
WSOCK32.dll14
WSOCK32.dll15
WSOCK32.dll8
WSOCK32.dll9
WSOCK32.dll1
WSOCK32.dll12
WSOCK32.dll10
WSOCK32.dll52
WSOCK32.dll6
WSOCK32.dll13
DPLAYX.dll2
DPLAYX.dll1
DINPUT.dllDirectInputCreateA
KERNEL32.dll622WideCharToMultiByte
KERNEL32.dll130FindFirstFileA
KERNEL32.dll333GetVersionExA
KERNEL32.dll401LoadLibraryExA
KERNEL32.dll325GetTickCount
KERNEL32.dll135FindNextFileA
KERNEL32.dll126FindClose
KERNEL32.dll664lstrcmpiA
KERNEL32.dll635WriteFile
KERNEL32.dll470ReadFile
KERNEL32.dll266GetOverlappedResult
KERNEL32.dll532SetEvent
KERNEL32.dll49CreateFileA
KERNEL32.dll571SetupComm
KERNEL32.dll168GetCommState
KERNEL32.dll494SetCommState
KERNEL32.dll495SetCommTimeouts
KERNEL32.dll481ResetEvent
KERNEL32.dll67CreateThread
KERNEL32.dll212GetCurrentProcessId
KERNEL32.dll341GlobalAlloc
KERNEL32.dll352GlobalLock
KERNEL32.dll358GlobalUnlock
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll524SetCurrentDirectoryA
KERNEL32.dll24CloseHandle
KERNEL32.dll278GetProcAddress
KERNEL32.dll46CreateEventA
KERNEL32.dll154FreeResource
KERNEL32.dll152FreeLibrary
KERNEL32.dll419LockResource
KERNEL32.dll400LoadLibraryA
KERNEL32.dll230GetExitCodeProcess
KERNEL32.dll219GetDiskFreeSpaceA
KERNEL32.dll606VirtualFree
KERNEL32.dll137FindResourceA
KERNEL32.dll397LCMapStringA
KERNEL32.dll405LoadResource
KERNEL32.dll427MultiByteToWideChar
KERNEL32.dll302GetStringTypeW
KERNEL32.dll142FlushFileBuffers
KERNEL32.dll457RaiseException
KERNEL32.dll299GetStringTypeA
KERNEL32.dll542SetLastError
KERNEL32.dll586TlsGetValue
KERNEL32.dll587TlsSetValue
KERNEL32.dll214GetCurrentThreadId
KERNEL32.dll584TlsAlloc
KERNEL32.dll298GetStdHandle
KERNEL32.dll539SetHandleCount
KERNEL32.dll537SetFilePointer
KERNEL32.dll399LeaveCriticalSection
KERNEL32.dll88EnterCriticalSection
KERNEL32.dll377InitializeCriticalSection
KERNEL32.dll332GetVersion
KERNEL32.dll76DeleteCriticalSection
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll170GetCommandLineA
KERNEL32.dll360HeapAlloc
KERNEL32.dll42CreateDirectoryA
KERNEL32.dll485RtlUnwind
KERNEL32.dll366HeapFree
KERNEL32.dll382InterlockedIncrement
KERNEL32.dll239GetFileType
KERNEL32.dll245GetLocalTime
KERNEL32.dll309GetSystemTime
KERNEL32.dll379InterlockedDecrement
KERNEL32.dll78DeleteFileA
KERNEL32.dll422MoveFileA
KERNEL32.dll328GetTimeZoneInformation
KERNEL32.dll582TerminateProcess
KERNEL32.dll107ExitProcess
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll7Process32First
KERNEL32.dll5Module32First
KERNEL32.dllCreateToolhelp32Snapshot
KERNEL32.dll8Process32Next
KERNEL32.dll398LCMapStringW
KERNEL32.dll6Module32Next
KERNEL32.dll362HeapCreate
KERNEL32.dll364HeapDestroy
KERNEL32.dll553SetStdHandle
KERNEL32.dll232GetFileAttributesA
KERNEL32.dll528SetEndOfFile
KERNEL32.dll157GetACP
KERNEL32.dll265GetOEMCP
KERNEL32.dll163GetCPInfo
KERNEL32.dll240GetFullPathNameA
KERNEL32.dll442OutputDebugStringA
KERNEL32.dll370HeapSize
KERNEL32.dll592UnhandledExceptionFilter
KERNEL32.dll369HeapReAlloc
KERNEL32.dll151FreeEnvironmentStringsW
KERNEL32.dll225GetEnvironmentStrings
KERNEL32.dll150FreeEnvironmentStringsA
KERNEL32.dll227GetEnvironmentStringsW
KERNEL32.dll623WinExec
KERNEL32.dll618WaitForSingleObject
KERNEL32.dll566SetUnhandledExceptionFilter
KERNEL32.dll387IsBadReadPtr
KERNEL32.dll209GetCurrentDirectoryA
KERNEL32.dll384IsBadCodePtr
KERNEL32.dll390IsBadWritePtr
KERNEL32.dll247GetLocaleInfoW
KERNEL32.dll30CompareStringA
KERNEL32.dll246GetLocaleInfoA
KERNEL32.dll529SetEnvironmentVariableA
KERNEL32.dll120FileTimeToSystemTime
KERNEL32.dll31CompareStringW
KERNEL32.dll603VirtualAlloc
KERNEL32.dll667lstrcpyA
KERNEL32.dll575Sleep
KERNEL32.dll119FileTimeToLocalFileTime
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll244GetLastError
KERNEL32.dll61CreateProcessA

StringTable 040904b0

CompanyNameiMagic
FileDescriptionwb2
FileVersion1, 0, 0, 1
InternalNamewb2
LegalCopyrightCopyright © 2000
OriginalFilenamewb2.exe
ProductNameiMagic wb2
ProductVersion1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
01428992EXE06/15/2001 20:14:48#
15c115HTM#
1177a05176BMP(64 x 64)#
118bd85176BMP(64 x 64)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK