filenamecttune.exe
size314368 (0x4cc00)
md545753895aae368b288c39f8cf8f435e6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072916
259239174
2602391720
261239174
2572391725
10196
2652391731
255239171
258239171

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x57899120
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion14.0
SizeOfCode0xee00
SizeOfInitializedData0x3de00
SizeOfUninitializedData0
AddressOfEntryPoint0xf220
BaseOfCode0x1000
BaseOfData0x10000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0x50000
SizeOfHeaders0x400
CheckSum0x4f0de
Subsystem2
DllCharacteristics0xc140
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 2005

Sections

namevavsizeraw sizeflags
.text0x10000xed980xee00R-X CODE
.data0x100000x4680x200RW- IDATA
.idata0x110000x16400x1800R-- IDATA
.rsrc0x130000x3b1100x3b200R-- IDATA
.reloc0x4f0000xd300xe00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x113500x1a4
RESOURCE0x130000x3b110
EXCEPTION00
SECURITY00
BASERELOC0x4f0000xd30
DEBUG0x1d400x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x11880x80
Bound_IAT00
IAT0x110000x34c
Delay_IAT00
CLR_Header00
typenamesizecp
MUI#12560
WEVT_TEMPLATE#19700
BITMAP#1731364900
BITMAP#175100420
BITMAP#176384540
ICON#12960
ICON#213840
ICON#37440
ICON#422160
ICON#516400
ICON#637520
ICON#711280
ICON#842640
ICON#996400
ICON#10273110
GROUP_ICON#1591460
VERSION#19080
MANIFEST#111690
module_namehintordfunction_name
ADVAPI32.dll649RegOpenKeyExW
ADVAPI32.dll662RegQueryValueExW
ADVAPI32.dll600RegCloseKey
ADVAPI32.dll291EventWrite
ADVAPI32.dll288EventRegister
ADVAPI32.dll290EventUnregister
ADVAPI32.dll609RegCreateKeyExW
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll330GetLengthSid
ADVAPI32.dll397InitializeAcl
ADVAPI32.dll17AddAccessAllowedAceEx
ADVAPI32.dll744SetSecurityInfo
ADVAPI32.dll678RegSetValueExW
KERNEL32.dll961LocalFree
KERNEL32.dll957LocalAlloc
KERNEL32.dll530GetCurrentProcess
KERNEL32.dll901IsWow64Process
KERNEL32.dll831HeapFree
KERNEL32.dll684GetProcessHeap
KERNEL32.dll827HeapAlloc
KERNEL32.dll132CloseHandle
KERNEL32.dll215CreateMutexW
KERNEL32.dll601GetLastError
KERNEL32.dll709GetStartupInfoA
KERNEL32.dll991MulDiv
KERNEL32.dll1454VerSetConditionMask
KERNEL32.dll1458VerifyVersionInfoW
KERNEL32.dll767GetTickCount64
GDI32.dll1444SetBkColor
GDI32.dll1352Polyline
GDI32.dll90CreatePen
GDI32.dll708GetTextMetricsW
GDI32.dll1445SetBkMode
GDI32.dll1509StretchBlt
GDI32.dll1486SetStretchBltMode
GDI32.dll56CreateCompatibleBitmap
GDI32.dll346DeleteObject
GDI32.dll605GetDeviceCaps
GDI32.dll77CreateFontIndirectW
GDI32.dll659GetObjectW
GDI32.dll57CreateCompatibleDC
GDI32.dll1435SelectObject
GDI32.dll465GdiAlphaBlend
GDI32.dll25BitBlt
GDI32.dll342DeleteDC
GDI32.dll678GetStockObject
GDI32.dll550GdiSetBatchLimit
GDI32.dll1492SetTextColor
GDI32.dll104CreateSolidBrush
GDI32.dll1329PatBlt
USER32.dll872TrackMouseEvent
USER32.dll164DefWindowProcW
USER32.dll566LoadCursorW
USER32.dll688RegisterClassExW
USER32.dll269FindWindowW
USER32.dll770SetForegroundWindow
USER32.dll235EndDialog
USER32.dll816SetTimer
USER32.dll558KillTimer
USER32.dll181DialogBoxParamW
USER32.dll847ShowWindow
USER32.dll232EnableWindow
USER32.dll64CheckDlgButton
USER32.dll530IsDlgButtonChecked
USER32.dll69CheckRadioButton
USER32.dll744SendMessageW
USER32.dll246EnumDisplayDevicesW
USER32.dll39ChangeDisplaySettingsExW
USER32.dll431GetSysColor
USER32.dll88CopyImage
USER32.dll570LoadImageW
USER32.dll176DestroyWindow
USER32.dll115CreateWindowExW
USER32.dll562LoadBitmapW
USER32.dll217DrawTextW
USER32.dll329GetFocus
USER32.dll598MapWindowPoints
USER32.dll265FillRect
USER32.dll684RedrawWindow
USER32.dll519IsCharAlphaNumericW
USER32.dll237EndPaint
USER32.dll432GetSysColorBrush
USER32.dll272FrameRect
USER32.dll16BeginPaint
USER32.dll251EnumDisplaySettingsW
USER32.dll205DrawFocusRect
USER32.dll514InvalidateRect
USER32.dll835SetWindowTextW
USER32.dll610MessageBoxW
USER32.dll863SystemParametersInfoW
USER32.dll385GetParent
USER32.dll645PostMessageW
USER32.dll828SetWindowLongW
USER32.dll766SetDlgItemTextW
USER32.dll321GetDlgItem
USER32.dll298GetClientRect
USER32.dll593MapDialogRect
USER32.dll735SendDlgItemMessageW
USER32.dll743SendMessageTimeoutW
USER32.dll830SetWindowPos
USER32.dll655PtInRect
USER32.dll470GetWindowRect
USER32.dll434GetSystemMetrics
USER32.dll409GetProcessDefaultLayout
USER32.dll719ReleaseDC
USER32.dll581LoadStringW
USER32.dll313GetDC
USER32.dll464GetWindowLongW
USER32.dll769SetFocus
msvcrt.dll292_cexit
msvcrt.dll226__set_app_type
msvcrt.dll371_exit
msvcrt.dll1198exit
msvcrt.dll206__p__fmode
msvcrt.dll777_onexit
msvcrt.dll488_initterm
msvcrt.dll228__setusermatherr
msvcrt.dll247_acmdln
msvcrt.dll161__getmainargs
msvcrt.dll273_amsg_exit
msvcrt.dll201__p__commode
msvcrt.dll111_XcptFilter
msvcrt.dll100_CxxThrowException
msvcrt.dll290_callnewh
msvcrt.dll55public: virtual char const * __thiscall exception::what(void)const

?what@exception@@UBEPBDXZ

msvcrt.dll16public: virtual __thiscall exception::~exception(void)

??1exception@@UAE@XZ

msvcrt.dll423_ftol2_sse
msvcrt.dll422_ftol2
msvcrt.dll608_lock
msvcrt.dll964_unlock
msvcrt.dll157__dllonexit
msvcrt.dll11public: __thiscall exception::exception(class exception const &)

??0exception@@QAE@ABV0@@Z

msvcrt.dll12public: __thiscall exception::exception(void)

??0exception@@QAE@XZ

msvcrt.dll1277malloc
msvcrt.dll1392wcschr
msvcrt.dll1310realloc
msvcrt.dll1221free
msvcrt.dll794_purecall
msvcrt.dll1004_vsnwprintf
msvcrt.dll1160_wtoi
msvcrt.dll362_except_handler4_common
msvcrt.dll311_controlfp
msvcrt.dll53void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll17public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll519_ismbblead
msvcrt.dll1293memset
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll25
OLEAUT32.dll2
OLEAUT32.dll19
OLEAUT32.dll20
OLEAUT32.dll6
api-ms-win-core-com-l1-1-1.dll66CoUninitialize
api-ms-win-core-com-l1-1-1.dll80StringFromGUID2
api-ms-win-core-com-l1-1-1.dll38CoInitializeEx
api-ms-win-core-com-l1-1-1.dll8CoCreateInstance
api-ms-win-core-com-l1-1-1.dll59CoSetProxyBlanket
api-ms-win-core-com-l1-1-1.dll39CoInitializeSecurity
api-ms-win-core-synch-l1-2-0.dll45Sleep
api-ms-win-core-errorhandling-l1-1-1.dll15SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll17UnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-2.dll13GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-2.dll17GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll77TerminateProcess
api-ms-win-core-libraryloader-l1-2-0.dll17GetModuleHandleA
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
api-ms-win-core-sysinfo-l1-2-1.dll24GetTickCount
api-ms-win-core-sysinfo-l1-2-1.dll20GetSystemTimeAsFileTime
COMCTL32.dll381
COMCTL32.dll133PropertySheetW
COMCTL32.dll123InitCommonControlsEx
DWrite.dllDWriteCreateFactory
ntdll.dll1612WinSqmIncrementDWORD
ntdll.dll1596WinSqmAddToStream
ole32.dll81CoGetObject
OLEACC.dll8CreateStdAccessibleObject
OLEACC.dll24LresultFromObject
SETUPAPI.dll340SetupDiGetClassDevsW
SETUPAPI.dll364SetupDiGetDeviceInterfaceDetailW
SETUPAPI.dll361SetupDiGetDeviceInstanceIdW
SETUPAPI.dll317SetupDiDestroyDeviceInfoList
SETUPAPI.dll406SetupDiOpenDeviceInterfaceW
UxTheme.dll60GetThemeSysFont
UxTheme.dll58GetThemeSysColor
UxTheme.dll42GetThemeColor
UxTheme.dll46GetThemeFont
UxTheme.dll77OpenThemeData
UxTheme.dll73IsThemeActive
UxTheme.dll9CloseThemeData
UxTheme.dll17DrawThemeParentBackground

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionClearType Tuner
FileVersion10.0.14393.0 (rs1_release.160715-1616)
InternalNameCtTune
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameCTTUNE.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.14393.0

VS_FIXEDFILEINFO

FileVersion10.0.14393.0
ProductVersion10.0.14393.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0314368EXE07/16/2016 01:42:56#
15c115HTM#
17a9027311PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER