ffmpeg.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	ffmpeg.exe
size	17610240 (0x10cb600)
md5	4dbc7420b5cabc70bbdcfe1cfa55f25d

type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x4f054a26
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30f
Magic	0x10b
LinkerVersion	2.21
SizeOfCode	0xcc9400
SizeOfInitializedData	0x10cb200
SizeOfUninitializedData	0x66ce00
AddressOfEntryPoint	0x14d0
BaseOfCode	0x1000
BaseOfData	0xccb000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x173d000
SizeOfHeaders	0x400
CheckSum	0x10cd67c
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xcc92bc	0xcc9400	R-X CODE IDATA
.data	0xccb000	0x2d8c0	0x2da00	RW- IDATA
.rdata	0xcf9000	0x3ce764	0x3ce800	R-- IDATA
.rodata	0x10c8000	0x2860	0x2a00	R-- IDATA
.bss	0x10cb000	0x66cd80	0	RW- UDATA
.idata	0x1738000	0x2dbc	0x2e00	RW- IDATA
.CRT	0x173b000	0x38	0x200	RW- IDATA
.tls	0x173c000	0x20	0x200	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1738000	0x2dbc
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x173c000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x17387d0	0x6b8
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x1b3c019	0x1b3c01c	0x1a42614	0x1b3b020	0	0

module_name	hint	function_name
ADVAPI32.dll	219	DeregisterEventSource
ADVAPI32.dll	568	RegCloseKey
ADVAPI32.dll	616	RegOpenKeyExA
ADVAPI32.dll	629	RegQueryValueExA
ADVAPI32.dll	650	RegisterEventSourceA
ADVAPI32.dll	662	ReportEventA
AVICAP32.DLL	1	capCreateCaptureWindowA
AVICAP32.DLL	3	capGetDriverDescriptionA
AVIFIL32.DLL	9	AVIFileExit
AVIFIL32.DLL	10	AVIFileGetStream
AVIFIL32.DLL	12	AVIFileInfoA
AVIFIL32.DLL	14	AVIFileInit
AVIFIL32.DLL	16	AVIFileOpenA
AVIFIL32.DLL	19	AVIFileRelease
AVIFIL32.DLL	43	AVIStreamInfoA
AVIFIL32.DLL	49	AVIStreamRead
AVIFIL32.DLL	51	AVIStreamReadFormat
AVIFIL32.DLL	52	AVIStreamRelease
GDI32.dll	12	BitBlt
GDI32.dll	15	ChoosePixelFormat
GDI32.dll	33	CreateCompatibleBitmap
GDI32.dll	34	CreateCompatibleDC
GDI32.dll	35	CreateDCA
GDI32.dll	39	CreateDIBSection
GDI32.dll	58	CreatePalette
GDI32.dll	72	DeleteDC
GDI32.dll	75	DeleteObject
GDI32.dll	76	DescribePixelFormat
GDI32.dll	137	GetBitmapBits
GDI32.dll	167	GetDIBits
GDI32.dll	168	GetDeviceCaps
GDI32.dll	169	GetDeviceGammaRamp
GDI32.dll	206	GetObjectA
GDI32.dll	224	GetSystemPaletteEntries
GDI32.dll	225	GetSystemPaletteUse
GDI32.dll	284	RealizePalette
GDI32.dll	305	SelectObject
GDI32.dll	306	SelectPalette
GDI32.dll	319	SetDIBColorTable
GDI32.dll	322	SetDeviceGammaRamp
GDI32.dll	336	SetPaletteEntries
GDI32.dll	338	SetPixelFormat
GDI32.dll	345	SetSystemPaletteUse
GDI32.dll	364	SwapBuffers
GDI32.dll	368	UnrealizeObject
KERNEL32.dll	69	CloseHandle
KERNEL32.dll	118	CreateEventA
KERNEL32.dll	124	CreateFileA
KERNEL32.dll	125	CreateFileMappingA
KERNEL32.dll	131	CreateFileW
KERNEL32.dll	143	CreateMutexA
KERNEL32.dll	157	CreateSemaphoreA
KERNEL32.dll	167	CreateThread
KERNEL32.dll	196	DeleteCriticalSection
KERNEL32.dll	218	DuplicateHandle
KERNEL32.dll	223	EnterCriticalSection
KERNEL32.dll	288	FindClose
KERNEL32.dll	292	FindFirstFileA
KERNEL32.dll	309	FindNextFileA
KERNEL32.dll	339	FreeLibrary
KERNEL32.dll	346	GetACP
KERNEL32.dll	376	GetCommandLineW
KERNEL32.dll	413	GetConsoleMode
KERNEL32.dll	419	GetConsoleScreenBufferInfo
KERNEL32.dll	433	GetCurrentProcess
KERNEL32.dll	434	GetCurrentProcessId
KERNEL32.dll	436	GetCurrentThread
KERNEL32.dll	437	GetCurrentThreadId
KERNEL32.dll	450	GetDriveTypeA
KERNEL32.dll	458	GetEnvironmentVariableA
KERNEL32.dll	479	GetFileType
KERNEL32.dll	491	GetHandleInformation
KERNEL32.dll	494	GetLastError
KERNEL32.dll	496	GetLocaleInfoA
KERNEL32.dll	508	GetModuleFileNameA
KERNEL32.dll	510	GetModuleHandleA
KERNEL32.dll	553	GetProcAddress
KERNEL32.dll	554	GetProcessAffinityMask
KERNEL32.dll	564	GetProcessTimes
KERNEL32.dll	580	GetStartupInfoA
KERNEL32.dll	582	GetStdHandle
KERNEL32.dll	597	GetSystemInfo
KERNEL32.dll	603	GetSystemTimeAsFileTime
KERNEL32.dll	616	GetThreadContext
KERNEL32.dll	621	GetThreadPriority
KERNEL32.dll	627	GetTickCount
KERNEL32.dll	631	GetTimeZoneInformation
KERNEL32.dll	641	GetVersion
KERNEL32.dll	642	GetVersionExA
KERNEL32.dll	670	GlobalMemoryStatus
KERNEL32.dll	710	InitializeCriticalSection
KERNEL32.dll	769	LeaveCriticalSection
KERNEL32.dll	771	LoadLibraryA
KERNEL32.dll	774	LoadLibraryW
KERNEL32.dll	783	LocalFree
KERNEL32.dll	796	MapViewOfFile
KERNEL32.dll	813	MultiByteToWideChar
KERNEL32.dll	838	OpenProcess
KERNEL32.dll	849	PeekNamedPipe
KERNEL32.dll	871	QueryPerformanceCounter
KERNEL32.dll	872	QueryPerformanceFrequency
KERNEL32.dll	893	ReadFile
KERNEL32.dll	909	ReleaseMutex
KERNEL32.dll	913	ReleaseSemaphore
KERNEL32.dll	930	ResetEvent
KERNEL32.dll	933	ResumeThread
KERNEL32.dll	985	SetConsoleTextAttribute
KERNEL32.dll	1001	SetEnvironmentVariableA
KERNEL32.dll	1003	SetErrorMode
KERNEL32.dll	1004	SetEvent
KERNEL32.dll	1016	SetFilePointer
KERNEL32.dll	1029	SetLastError
KERNEL32.dll	1040	SetProcessAffinityMask
KERNEL32.dll	1058	SetThreadContext
KERNEL32.dll	1063	SetThreadPriority
KERNEL32.dll	1073	SetUnhandledExceptionFilter
KERNEL32.dll	1085	Sleep
KERNEL32.dll	1091	SuspendThread
KERNEL32.dll	1097	TerminateProcess
KERNEL32.dll	1098	TerminateThread
KERNEL32.dll	1102	TlsAlloc
KERNEL32.dll	1104	TlsGetValue
KERNEL32.dll	1105	TlsSetValue
KERNEL32.dll	1112	TryEnterCriticalSection
KERNEL32.dll	1117	UnhandledExceptionFilter
KERNEL32.dll	1120	UnmapViewOfFile
KERNEL32.dll	1140	VirtualAlloc
KERNEL32.dll	1145	VirtualFree
KERNEL32.dll	1149	VirtualProtect
KERNEL32.dll	1152	VirtualQuery
KERNEL32.dll	1159	WaitForMultipleObjects
KERNEL32.dll	1161	WaitForSingleObject
KERNEL32.dll	1183	WideCharToMultiByte
KERNEL32.dll	1202	WriteFile
msvcrt.dll	5	_close
msvcrt.dll	26	_fileno
msvcrt.dll	32	_getch
msvcrt.dll	39	_isatty
msvcrt.dll	44	_kbhit
msvcrt.dll	54	_open
msvcrt.dll	60	_read
msvcrt.dll	64	_setmode
msvcrt.dll	75	_strdup
msvcrt.dll	86	_tempnam
msvcrt.dll	92	_unlink
msvcrt.dll	94	_wcsdup
msvcrt.dll	104	_write
msvcrt.dll	56	__dllonexit
msvcrt.dll	57	__doserrno
msvcrt.dll	59	__getmainargs
msvcrt.dll	60	__initenv
msvcrt.dll	69	__lconv_init
msvcrt.dll	101	__pioinfo
msvcrt.dll	105	__set_app_type
msvcrt.dll	108	__setusermatherr
msvcrt.dll	122	_acmdln
msvcrt.dll	138	_aligned_free
msvcrt.dll	139	_aligned_malloc
msvcrt.dll	143	_amsg_exit
msvcrt.dll	149	_atoi64
msvcrt.dll	156	_beginthreadex
msvcrt.dll	160	_cexit
msvcrt.dll	215	_endthreadex
msvcrt.dll	218	_errno
msvcrt.dll	229	_exit
msvcrt.dll	240	_filelengthi64
msvcrt.dll	241	_fileno
msvcrt.dll	252	_fmode
msvcrt.dll	264	_fstat64
msvcrt.dll	266	_ftime
msvcrt.dll	283	_get_osfhandle
msvcrt.dll	286	_getch
msvcrt.dll	304	_gmtime64
msvcrt.dll	317	_initterm
msvcrt.dll	321	_iob
msvcrt.dll	419	_localtime64
msvcrt.dll	421	_lock
msvcrt.dll	429	_lseeki64
msvcrt.dll	580	_mktime64
msvcrt.dll	583	_onexit
msvcrt.dll	637	_setjmp3
msvcrt.dll	640	_setmode
msvcrt.dll	678	_stat
msvcrt.dll	679	_stat64
msvcrt.dll	689	_stricmp
msvcrt.dll	699	_strnicmp
msvcrt.dll	733	_time64
msvcrt.dll	757	_unlock
msvcrt.dll	790	_vsnprintf
msvcrt.dll	881	_wfopen
msvcrt.dll	891	_winmajor
msvcrt.dll	900	_wopen
msvcrt.dll	913	_write
msvcrt.dll	957	abort
msvcrt.dll	959	acos
msvcrt.dll	962	asin
msvcrt.dll	963	atan
msvcrt.dll	964	atan2
msvcrt.dll	966	atof
msvcrt.dll	967	atoi
msvcrt.dll	968	atol
msvcrt.dll	969	bsearch
msvcrt.dll	971	calloc
msvcrt.dll	972	ceil
msvcrt.dll	975	clock
msvcrt.dll	977	cosh
msvcrt.dll	981	exit
msvcrt.dll	984	fclose
msvcrt.dll	985	feof
msvcrt.dll	986	ferror
msvcrt.dll	987	fflush
msvcrt.dll	988	fgetc
msvcrt.dll	989	fgetpos
msvcrt.dll	990	fgets
msvcrt.dll	993	floor
msvcrt.dll	995	fopen
msvcrt.dll	997	fprintf
msvcrt.dll	999	fputc
msvcrt.dll	1000	fputs
msvcrt.dll	1003	fread
msvcrt.dll	1004	free
msvcrt.dll	1007	frexp
msvcrt.dll	1008	fscanf
msvcrt.dll	1010	fseek
msvcrt.dll	1011	fsetpos
msvcrt.dll	1012	ftell
msvcrt.dll	1015	fwrite
msvcrt.dll	1019	getchar
msvcrt.dll	1020	getenv
msvcrt.dll	1025	gmtime
msvcrt.dll	1027	isalnum
msvcrt.dll	1031	isgraph
msvcrt.dll	1033	islower
msvcrt.dll	1034	isprint
msvcrt.dll	1036	isspace
msvcrt.dll	1037	isupper
msvcrt.dll	1051	isxdigit
msvcrt.dll	1055	localeconv
msvcrt.dll	1056	localtime
msvcrt.dll	1058	log10
msvcrt.dll	1059	longjmp
msvcrt.dll	1060	malloc
msvcrt.dll	1066	memchr
msvcrt.dll	1067	memcmp
msvcrt.dll	1068	memcpy
msvcrt.dll	1070	memmove
msvcrt.dll	1072	memset
msvcrt.dll	1073	mktime
msvcrt.dll	1075	perror
msvcrt.dll	1076	printf
msvcrt.dll	1078	putc
msvcrt.dll	1079	putchar
msvcrt.dll	1080	puts
msvcrt.dll	1083	qsort
msvcrt.dll	1085	raise
msvcrt.dll	1086	rand
msvcrt.dll	1088	realloc
msvcrt.dll	1090	rename
msvcrt.dll	1092	scanf
msvcrt.dll	1097	signal
msvcrt.dll	1099	sinh
msvcrt.dll	1100	sprintf
msvcrt.dll	1103	srand
msvcrt.dll	1104	sscanf
msvcrt.dll	1106	strcat
msvcrt.dll	1108	strchr
msvcrt.dll	1109	strcmp
msvcrt.dll	1111	strcpy
msvcrt.dll	1113	strcspn
msvcrt.dll	1114	strerror
msvcrt.dll	1116	strftime
msvcrt.dll	1117	strlen
msvcrt.dll	1118	strncat
msvcrt.dll	1120	strncmp
msvcrt.dll	1121	strncpy
msvcrt.dll	1124	strpbrk
msvcrt.dll	1125	strrchr
msvcrt.dll	1126	strspn
msvcrt.dll	1127	strstr
msvcrt.dll	1129	strtok
msvcrt.dll	1131	strtol
msvcrt.dll	1132	strtoul
msvcrt.dll	1139	tan
msvcrt.dll	1140	tanh
msvcrt.dll	1141	time
msvcrt.dll	1146	tolower
msvcrt.dll	1147	toupper
msvcrt.dll	1150	ungetc
msvcrt.dll	1152	vfprintf
msvcrt.dll	1158	vsprintf
msvcrt.dll	1168	wcscmp
msvcrt.dll	1170	wcscpy
msvcrt.dll	1185	wcsstr
ole32.dll	16	CoCreateInstance
ole32.dll	63	CoInitialize
ole32.dll	104	CoTaskMemAlloc
ole32.dll	105	CoTaskMemFree
PSAPI.DLL	21	GetProcessMemoryInfo
SHELL32.DLL	2	CommandLineToArgvW
USER32.dll	1	AdjustWindowRect
USER32.dll	2	AdjustWindowRectEx
USER32.dll	11	BeginPaint
USER32.dll	24	CallWindowProcA
USER32.dll	29	ChangeDisplaySettingsA
USER32.dll	59	ClientToScreen
USER32.dll	60	ClipCursor
USER32.dll	75	CreateCursor
USER32.dll	84	CreateIconFromResourceEx
USER32.dll	90	CreateWindowExA
USER32.dll	134	DefWindowProcA
USER32.dll	141	DestroyCursor
USER32.dll	142	DestroyIcon
USER32.dll	144	DestroyWindow
USER32.dll	149	DispatchMessageA
USER32.dll	184	EndPaint
USER32.dll	194	EnumDisplaySettingsA
USER32.dll	227	GetClassInfoA
USER32.dll	236	GetClientRect
USER32.dll	245	GetCursor
USER32.dll	247	GetCursorPos
USER32.dll	248	GetDC
USER32.dll	250	GetDesktopWindow
USER32.dll	259	GetForegroundWindow
USER32.dll	268	GetKeyState
USER32.dll	269	GetKeyboardLayout
USER32.dll	271	GetKeyboardLayoutNameA
USER32.dll	273	GetKeyboardState
USER32.dll	279	GetMenu
USER32.dll	293	GetMessageA
USER32.dll	304	GetParent
USER32.dll	307	GetProcessWindowStation
USER32.dll	326	GetSystemMetrics
USER32.dll	336	GetUserObjectInformationW
USER32.dll	342	GetWindowLongA
USER32.dll	348	GetWindowRect
USER32.dll	370	InvalidateRect
USER32.dll	398	IsZoomed
USER32.dll	400	KillTimer
USER32.dll	411	LoadImageA
USER32.dll	413	LoadKeyboardLayoutA
USER32.dll	427	MapVirtualKeyA
USER32.dll	428	MapVirtualKeyExA
USER32.dll	431	MapWindowPoints
USER32.dll	434	MessageBoxA
USER32.dll	446	MsgWaitForMultipleObjects
USER32.dll	464	PeekMessageA
USER32.dll	466	PostMessageA
USER32.dll	468	PostQuitMessage
USER32.dll	474	PtInRect
USER32.dll	479	RegisterClassA
USER32.dll	493	ReleaseCapture
USER32.dll	494	ReleaseDC
USER32.dll	500	ScreenToClient
USER32.dll	508	SendMessageA
USER32.dll	517	SetCapture
USER32.dll	520	SetClassLongA
USER32.dll	525	SetCursor
USER32.dll	526	SetCursorPos
USER32.dll	533	SetFocus
USER32.dll	534	SetForegroundWindow
USER32.dll	563	SetTimer
USER32.dll	569	SetWindowLongA
USER32.dll	572	SetWindowPos
USER32.dll	574	SetWindowTextA
USER32.dll	585	ShowWindow
USER32.dll	598	ToAsciiEx
USER32.dll	599	ToUnicode
USER32.dll	608	TranslateMessage
USER32.dll	615	UnregisterClassA
USER32.dll	635	WindowFromPoint
WINMM.DLL	23	joyGetDevCapsA
WINMM.DLL	25	joyGetNumDevs
WINMM.DLL	27	joyGetPosEx
WINMM.DLL	43	mciGetErrorStringA
WINMM.DLL	47	mciSendCommandA
WINMM.DLL	144	timeBeginPeriod
WINMM.DLL	145	timeEndPeriod
WINMM.DLL	148	timeGetTime
WINMM.DLL	149	timeKillEvent
WINMM.DLL	150	timeSetEvent
WINMM.DLL	168	waveOutClose
WINMM.DLL	171	waveOutGetErrorTextA
WINMM.DLL	180	waveOutOpen
WINMM.DLL	182	waveOutPrepareHeader
WINMM.DLL	188	waveOutUnprepareHeader
WINMM.DLL	189	waveOutWrite
WS2_32.dll	26	WSACleanup
WS2_32.dll	43	WSAGetLastError
WS2_32.dll	79	WSASetLastError
WS2_32.dll	84	WSAStartup
WS2_32.dll	131	__WSAFDIsSet
WS2_32.dll	132	accept
WS2_32.dll	133	bind
WS2_32.dll	134	closesocket
WS2_32.dll	135	connect
WS2_32.dll	138	gethostbyaddr
WS2_32.dll	139	gethostbyname
WS2_32.dll	140	gethostname
WS2_32.dll	142	getpeername
WS2_32.dll	146	getservbyport
WS2_32.dll	147	getsockname
WS2_32.dll	148	getsockopt
WS2_32.dll	149	htonl
WS2_32.dll	150	htons
WS2_32.dll	151	inet_addr
WS2_32.dll	155	ioctlsocket
WS2_32.dll	156	listen
WS2_32.dll	157	ntohl
WS2_32.dll	158	ntohs
WS2_32.dll	159	recv
WS2_32.dll	160	recvfrom
WS2_32.dll	161	select
WS2_32.dll	162	send
WS2_32.dll	163	sendto
WS2_32.dll	164	setsockopt
WS2_32.dll	165	shutdown
WS2_32.dll	166	socket

show previews

offset	size	type	comment
15c1	15	HTM		#
d6fdd2	5911	GIF	(18759 x 14406)	#
d714e9	3514647	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x1642614