aaplay32.exe

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	aaplay32.exe
size	306749 (0x4ae3d)
md5	48b212fbd5039d3d0f0c3adb4164c38e

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
12	7291	2
0	0	18
11	8168	16
14	7299	34
10	8168	162
1	0	496
19	8034	19
10	8447	12
11	8447	178
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x39659ec4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x3200
SizeOfInitializedData	0x5000
SizeOfUninitializedData	0x93000
AddressOfEntryPoint	0x9a54f
BaseOfCode	0x1000
BaseOfData	0x63000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xa0000
SizeOfHeaders	0x400
CheckSum	0x50a45
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Shrinker v3.4

Sections

name	va	vsize	raw size	flags
.shrink0	0x1000	0x92000	0	RW- UDATA
.shrink1	0x93000	0x1000	0x200	R-- IDATA
.rdata	0x94000	0x2d	0x200	R-- IDATA
.data	0x95000	0x273c	0x1600	RW- IDATA
.idata	0x98000	0x8ca	0xa00	RW- IDATA
.load	0x99000	0x307c	0x3200	R-X CODE
.reloc	0x9d000	0x614	0x800	R-- IDATA DISCARDABLE
.rsrc	0x9e000	0x1600	0x1600	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x98000	0xdc
RESOURCE	0x9e000	0x1600
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x9d000	0x614
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x981e0	0x1b8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	180
BITMAP	#130	21394
BITMAP	#138	390
BITMAP	#139	392
BITMAP	#140	392
BITMAP	#141	390
BITMAP	#142	392
BITMAP	#143	392
BITMAP	#144	392
BITMAP	#145	392
BITMAP	#147	392
BITMAP	#148	392
BITMAP	#149	392
BITMAP	#150	392
BITMAP	#151	392
BITMAP	#152	392
BITMAP	#153	1310
BITMAP	#154	382
BITMAP	#155	224
BITMAP	#156	224
BITMAP	#163	182
BITMAP	#164	5480
BITMAP	#26567	1508
BITMAP	#30994	184
BITMAP	#30995	364
BITMAP	#30996	324
ICON	#1	744
ICON	#2	296
MENU	#160	372
DIALOG	#102	1034
DIALOG	#161	822
DIALOG	#162	258
DIALOG	#165	1036
DIALOG	#166	550
DIALOG	#173	460
DIALOG	#175	670
DIALOG	#176	152
DIALOG	#30721	232
STRING	#63	146
STRING	#64	150
STRING	#65	86
STRING	#66	136
STRING	#626	270
STRING	#627	146
STRING	#628	1160
STRING	#629	1310
STRING	#630	542
STRING	#631	348
STRING	#688	456
STRING	#3841	130
STRING	#3842	42
STRING	#3843	330
STRING	#3857	1250
STRING	#3858	674
STRING	#3859	732
STRING	#3865	172
STRING	#3866	222
STRING	#3867	1220
STRING	#3868	612
STRING	#3869	44
ACCELERATORS	#169	96
GROUP_CURSOR	#168	20
GROUP_CURSOR	#30977	34
GROUP_ICON	#128	34
VERSION	#1	1028

module_name	hint	ord	function_name
KERNEL32.DLL	79		DeviceIoControl
KERNEL32.DLL	106		ExitProcess
KERNEL32.DLL	243		GetLastError
KERNEL32.DLL	561		SetUnhandledExceptionFilter
KERNEL32.DLL	210		GetCurrentProcess
KERNEL32.DLL	251		GetModuleFileNameA
KERNEL32.DLL	598		VirtualAlloc
KERNEL32.DLL	604		VirtualProtect
KERNEL32.DLL	468		ReadProcessMemory
KERNEL32.DLL	606		VirtualQuery
KERNEL32.DLL	277		GetProcAddress
KERNEL32.DLL	398		LoadLibraryA
KERNEL32.DLL	253		GetModuleHandleA
KERNEL32.DLL	610		WaitForDebugEvent
KERNEL32.DLL	608		VirtualUnlock
KERNEL32.DLL	603		VirtualLock
KERNEL32.DLL	601		VirtualFree
KERNEL32.DLL	474		ReleaseSemaphore
KERNEL32.DLL	473		ReleaseMutex
KERNEL32.DLL	455		RaiseException
KERNEL32.DLL	436		OpenSemaphoreA
KERNEL32.DLL	430		OpenFileMappingA
KERNEL32.DLL	418		MapViewOfFile
KERNEL32.DLL	397		LeaveCriticalSection
KERNEL32.DLL	376		InitializeCriticalSection
KERNEL32.DLL	355		GlobalUnWire
KERNEL32.DLL	358		GlobalWire
KERNEL32.DLL	353		GlobalReAlloc
KERNEL32.DLL	351		GlobalLock
KERNEL32.DLL	347		GlobalFree
KERNEL32.DLL	345		GlobalFix
KERNEL32.DLL	340		GlobalAlloc
KERNEL32.DLL	136		FindResourceA
KERNEL32.DLL	87		EnterCriticalSection
KERNEL32.DLL	85		EndUpdateResourceA
KERNEL32.DLL	75		DeleteCriticalSection
KERNEL32.DLL	70		DebugActiveProcess
KERNEL32.DLL	63		CreateSemaphoreA
KERNEL32.DLL	55		CreateMutexA
KERNEL32.DLL	49		CreateFileMappingA
KERNEL32.DLL	33		ContinueDebugEvent
KERNEL32.DLL	31		ConnectNamedPipe
KERNEL32.DLL	11		BeginUpdateResourceA
KERNEL32.DLL	146		FormatMessageA
KERNEL32.DLL	537		SetLastError
KERNEL32.DLL	23		CloseHandle
KERNEL32.DLL	466		ReadFile
KERNEL32.DLL	532		SetFilePointer
KERNEL32.DLL	48		CreateFileA
KERNEL32.DLL	630		WriteFile
KERNEL32.DLL	408		LocalFree
KERNEL32.DLL	404		LocalAlloc
KERNEL32.DLL	139		FindResourceW
KERNEL32.DLL	638		WriteProcessMemory
KERNEL32.DLL	314		GetTempFileNameA
KERNEL32.DLL	331		GetVersion
KERNEL32.DLL	77		DeleteFileA
KERNEL32.DLL	227		GetEnvironmentVariableA
KERNEL32.DLL	336		GetWindowsDirectoryA
KERNEL32.DLL	481		RtlUnwind
KERNEL32.DLL	244		GetLocalTime
KERNEL32.DLL		8
KERNEL32.DLL		7
KERNEL32.DLL		6
KERNEL32.DLL		5
KERNEL32.DLL		4
KERNEL32.DLL		3
KERNEL32.DLL		2
KERNEL32.DLL		1
KERNEL32.DLL		46
KERNEL32.DLL		41
KERNEL32.DLL		40
KERNEL32.DLL		55
KERNEL32.DLL		54
KERNEL32.DLL		53
KERNEL32.DLL		37
KERNEL32.DLL		39
KERNEL32.DLL		45
KERNEL32.DLL		38
WINMM.DLL	114		mixerSetControlDetails
WSOCK32.DLL		14
USER32.DLL	286		GetMenuCheckMarkDimensions
GDI32.DLL	72		CreateRectRgn
COMDLG32.DLL	7		GetFileTitleA
WINSPOOL.DRV	124		OpenPrinterA
ADVAPI32.DLL	389		RegSetValueA
SHELL32.DLL	72		SHGetFileInfoA
COMCTL32.DLL	34		ImageList_Destroy

VS_FIXEDFILEINFO

dwSignature	0xfeef
FileVersion	1.2.0.6
ProductVersion	1.2.63.6
StrucVersion	1
FileFlagsMask	0x280000
FileFlags	0x40000
FileOS	0x10000
FileType	0
FileSubtype	0

show previews

offset	size	type	comment
0	30208	EXE	07/07/2000 09:11:32	#
15c1	15	HTM		#
7600	276541	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 306749 bytes (300 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x8f260

[?] can't find file_offset of VA 0x8f410

[?] can't find file_offset of VA 0x8f548

[?] can't find file_offset of VA 0x86528

[?] can't find file_offset of VA 0x8b8c0

[?] can't find file_offset of VA 0x8ba48

[?] can't find file_offset of VA 0x8bbd0

[?] can't find file_offset of VA 0x8bd58

[?] can't find file_offset of VA 0x8bee0

[?] can't find file_offset of VA 0x8c068

[?] can't find file_offset of VA 0x8c1f0

[?] can't find file_offset of VA 0x8c378

[?] can't find file_offset of VA 0x8c500

[?] can't find file_offset of VA 0x8c688

[?] can't find file_offset of VA 0x8c810

[?] can't find file_offset of VA 0x8c998

[?] can't find file_offset of VA 0x8cb20

[?] can't find file_offset of VA 0x8cca8

[?] can't find file_offset of VA 0x8ce30

[?] can't find file_offset of VA 0x8d350

[?] can't find file_offset of VA 0x8d4d0

[?] can't find file_offset of VA 0x8d5b0

[?] can't find file_offset of VA 0x8d690

[?] can't find file_offset of VA 0x8d748

[?] can't find file_offset of VA 0x8f628

[?] can't find file_offset of VA 0x8fcf8

[?] can't find file_offset of VA 0x8fdb0

[?] can't find file_offset of VA 0x8ff20

[?] can't find file_offset of VA 0x8f0e8

[?] can't find file_offset of VA 0x84d90

[?] can't find file_offset of VA 0x851a0

[?] can't find file_offset of VA 0x854d8

[?] can't find file_offset of VA 0x855e0

[?] can't find file_offset of VA 0x859f0

[?] can't find file_offset of VA 0x85c18

[?] can't find file_offset of VA 0x85de8

[?] can't find file_offset of VA 0x86088

[?] can't find file_offset of VA 0x8fc10

[?] can't find file_offset of VA 0x91100

[?] can't find file_offset of VA 0x91198

[?] can't find file_offset of VA 0x91230

[?] can't find file_offset of VA 0x91288

[?] can't find file_offset of VA 0x90068

[?] can't find file_offset of VA 0x90178

[?] can't find file_offset of VA 0x90210

[?] can't find file_offset of VA 0x90698

[?] can't find file_offset of VA 0x90bb8

[?] can't find file_offset of VA 0x90dd8

[?] can't find file_offset of VA 0x90f38

[?] can't find file_offset of VA 0x91310

[?] can't find file_offset of VA 0x91398

[?] can't find file_offset of VA 0x913c8

[?] can't find file_offset of VA 0x91518

[?] can't find file_offset of VA 0x91d90

[?] can't find file_offset of VA 0x91ab0

[?] can't find file_offset of VA 0x91a00

[?] can't find file_offset of VA 0x92768

[?] can't find file_offset of VA 0x92038

[?] can't find file_offset of VA 0x92500

[?] can't find file_offset of VA 0x92848

[?] can't find file_offset of VA 0x8f3b0

[?] can't find file_offset of VA 0x8f398

[?] can't find file_offset of VA 0x8f600

[?] invalid VS_VERSIONINFO child type "t\x00r\x00i\x00"