filenamePhotoInstrument.exe
size11779584 (0xb3be00)
md54e878838b6be191ce24886210d35cb8c
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
199411183
2232100574
2252100586
22421005275
225208063
131307291
22431101137
2253110179
22940629147
1473072925
10328
225406292
219210051
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x5729b715
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion12.0
SizeOfCode0x2a1000
SizeOfInitializedData0x89ee00
SizeOfUninitializedData0
AddressOfEntryPoint0x22d729
BaseOfCode0x1000
BaseOfData0x2a2000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0xb43000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x2a0ff40x2a1000R-X CODE
.rdata0x2a20000x1785b00x178600R-- IDATA
.data0x41b0000x19be780x197c00RW- IDATA
_RDATA0x5b70000x200x200R-- IDATA
.rsrc0x5b80000x5707180x570800R-- IDATA
.reloc0xb290000x19d240x19e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x4189800x104
RESOURCE0x5b80000x570718
EXCEPTION00
SECURITY00
BASERELOC0xb290000x19d24
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3fcf400x40
Bound_IAT00
IAT0x2a20000x528
Delay_IAT00
CLR_Header00
typenamesizecp
PHIN#21623180
PHIN#21723180
PHIN#21830060
PHIN#21969580
PHIN#22023180
PHIN#22123180
PHIN#22477580
PHIN#22577580
PHIN#22677580
PHIN#22977580
PHIN#23077580
PHIN#23277580
PHIN#23477580
PHIN#23577580
PHIN#23677580
PHIN#23877580
PHIN#23970700
PHIN#24070700
PHIN#24170700
PHIN#24270700
PHIN#24370700
PHIN#24413740
PHIN#24577580
PHIN#24677580
PHIN#24777580
PHIN#24877580
PHIN#2509215980
PHIN#2529196940
PHIN#26072140
PHIN#26172140
PHIN#26377580
PHIN#26733580
PHIN#2689293100
PHIN#27377580
PHIN#27477580
PHIN#27677580
PHIN#2779464540
PHIN#2801670540
PHIN#2827513460
PHIN#28561740
PHIN#28646340
TXT#249803060
TXT#2512103640
TXT#2652925690
TXT#271250890
TXT#272335910
TXT#27887260
TXT#283512290
TXT#28475490
TXT#288448900
CURSOR#203080
CURSOR#213080
CURSOR#223080
CURSOR#233080
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#996400
ICON#1042640
ICON#1124400
ICON#1211280
ICON#1362000
ICON#1481360
ICON#1562000
ICON#1662000
ICON#1762000
ICON#1849680
ICON#1970800
DIALOG#1004400
DIALOG#1021600
DIALOG#1042260
DIALOG#1053000
DIALOG#1063020
DIALOG#129960
DIALOG#13010360
STRING#9620
STRING#3585420
STRING#36016620
STRING#36038080
STRING#36046360
STRING#36052620
STRING#36062180
STRING#38255040
STRING#38261740
STRING#3838680
ACCELERATORS#1281680
GROUP_CURSOR#203200
GROUP_CURSOR#204200
GROUP_CURSOR#258200
GROUP_CURSOR#259200
GROUP_ICON#1281740
GROUP_ICON#255200
GROUP_ICON#257200
GROUP_ICON#269200
GROUP_ICON#270200
GROUP_ICON#279200
GROUP_ICON#281200
GROUP_ICON#289200
VERSION#17920
MANIFEST#16040
idlangstring
1281033PhotoInstrument
573451033Ready
576001033Create a new document New
576011033Open an existing document Open
576021033Close the active document Close
576031033Save the active document Save
576041033Save the active document with a new name Save As
576051033Change the printing options Page Setup
576061033Change the printer and printing options Print Setup
576071033Print the active document Print
576091033Display full pages Print Preview
576321033Erase the selection Erase
576331033Erase everything Erase All
576341033Copy the selection and put it on the Clipboard Copy
576351033Cut the selection and put it on the Clipboard Cut
576361033Find the specified text Find
576371033Insert Clipboard contents Paste
576401033Repeat the last action Repeat
576411033Replace specific text with different text Replace
576421033Select the entire document Select All
576431033Undo the last action Undo
576441033Redo the previously undone action Redo
576481033Open another window for the active document New Window
576491033Arrange icons at the bottom of the window Arrange Icons
576501033Arrange windows so they overlap Cascade Windows
576511033Arrange windows as non-overlapping tiles Tile Windows
576521033Arrange windows as non-overlapping tiles Tile Windows
576531033Split the active window into panes Split
576641033Display program information, version number and copyright About
576651033Quit the application; prompts to save documents Exit
576801033Switch to the next window pane Next Pane
576811033Switch back to the previous window pane Previous Pane
611841033Change the window size
611851033Change the window position
611861033Reduce the window to an icon
611871033Enlarge the window to full size
611881033Switch to the next document window
611891033Switch to the previous document window
611901033Close the active window and prompts to save the documents
612021033Restore the window to normal size
612031033Activate Task List
612151033Activate this window
614021033Open this document
module_namehintordfunction_name
mscms.dll4CloseColorProfile
mscms.dll65IsColorProfileTagPresent
mscms.dll44GetColorProfileElement
mscms.dll24CreateMultiProfileTransform
mscms.dll68OpenColorProfileW
mscms.dll80TranslateBitmapBits
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll906OutputDebugStringW
KERNEL32.dll334FindResourceW
KERNEL32.dll258EnumResourceNamesW
KERNEL32.dll644GetTempPathA
KERNEL32.dll645GetTempPathW
KERNEL32.dll642GetTempFileNameA
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll143CreateFileW
KERNEL32.dll211DeleteFileA
KERNEL32.dll214DeleteFileW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll325FindNextFileW
KERNEL32.dll396GetComputerNameA
KERNEL32.dll676GetVersionExW
KERNEL32.dll360GetACP
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll100CompareStringW
KERNEL32.dll670GetUserDefaultUILanguage
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll828LoadLibraryA
KERNEL32.dll136CreateFileA
KERNEL32.dll497GetFileSizeEx
KERNEL32.dll855MapViewOfFile
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll137CreateFileMappingA
KERNEL32.dll281ExitProcess
KERNEL32.dll410GetConsoleCP
KERNEL32.dll612GetStdHandle
KERNEL32.dll567GetOEMCP
KERNEL32.dll778IsValidCodePage
KERNEL32.dll724HeapSize
KERNEL32.dll271EnumSystemLocalesW
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll780IsValidLocale
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll813LCMapStringW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll1222TlsFree
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll370GetCPInfo
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll308FindFirstFileExW
KERNEL32.dll535GetModuleHandleExW
KERNEL32.dll21AreFileApisANSI
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll1214SystemTimeToTzSpecificLocalTime
KERNEL32.dll391GetCommandLineW
KERNEL32.dll1048RtlUnwind
KERNEL32.dll722HeapReAlloc
KERNEL32.dll617GetStringTypeW
KERNEL32.dll234EncodePointer
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1260VirtualFree
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll753InterlockedPushEntrySList
KERNEL32.dll752InterlockedPopEntrySList
KERNEL32.dll743InitializeSListHead
KERNEL32.dll586GetProcessHeap
KERNEL32.dll719HeapFree
KERNEL32.dll715HeapAlloc
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll499GetFileType
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll831LoadLibraryW
KERNEL32.dll1358lstrlenW
KERNEL32.dll1357lstrlenA
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll350FormatMessageW
KERNEL32.dll659GetTickCount
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll864MoveFileExW
KERNEL32.dll958ReadConsoleW
KERNEL32.dll1127SetFilePointerEx
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll492GetFileInformationByHandle
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll627GetSystemInfo
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll870MulDiv
KERNEL32.dll82CloseHandle
KERNEL32.dll302FindClose
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll960ReadFile
KERNEL32.dll1317WriteFile
KERNEL32.dll496GetFileSize
KERNEL32.dll1201SizeofResource
KERNEL32.dll833LoadResource
KERNEL32.dll1202Sleep
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll199DebugBreak
KERNEL32.dll428GetConsoleMode
KERNEL32.dll1139SetLastError
KERNEL32.dll514GetLastError
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll181CreateThread
KERNEL32.dll945RaiseException
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll344FlushInstructionCache
KERNEL32.dll840LocalFree
KERNEL32.dll581GetProcAddress
KERNEL32.dll354FreeLibrary
KERNEL32.dll852LockResource
KERNEL32.dll749InterlockedExchangeAdd
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll202DecodePointer
KERNEL32.dll909PeekNamedPipe
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll1110SetEnvironmentVariableA
USER32.dll373GetScrollInfo
USER32.dll748SystemParametersInfoW
USER32.dll538MonitorFromWindow
USER32.dll351GetMonitorInfoW
USER32.dll274GetClassNameW
USER32.dll356GetParent
USER32.dll644SetClassLongW
USER32.dll272GetClassLongW
USER32.dll708SetWindowLongW
USER32.dll406GetWindowLongW
USER32.dll576PtInRect
USER32.dll243EqualRect
USER32.dll549OffsetRect
USER32.dll437InflateRect
USER32.dll85CopyRect
USER32.dll687SetRectEmpty
USER32.dll253FrameRect
USER32.dll246FillRect
USER32.dll196DrawFocusRect
USER32.dll380GetSysColorBrush
USER32.dll379GetSysColor
USER32.dll521MapWindowPoints
USER32.dll621ScreenToClient
USER32.dll71ClientToScreen
USER32.dll288GetCursorPos
USER32.dll688SetScrollInfo
USER32.dll730ShowCursor
USER32.dll412GetWindowRect
USER32.dll276GetClientRect
USER32.dll418GetWindowTextLengthW
USER32.dll419GetWindowTextW
USER32.dll715SetWindowTextW
USER32.dll215EnableScrollBar
USER32.dll375GetScrollRange
USER32.dll374GetScrollPos
USER32.dll689SetScrollPos
USER32.dll586RedrawWindow
USER32.dll446InvalidateRect
USER32.dll220EndPaint
USER32.dll14BeginPaint
USER32.dll613ReleaseDC
USER32.dll402GetWindowDC
USER32.dll289GetDC
USER32.dll785UpdateWindow
USER32.dll204DrawStateW
USER32.dll461IsDialogMessageW
USER32.dll506LoadStringW
USER32.dll103CreateIconIndirect
USER32.dll495LoadImageW
USER32.dll163DestroyIcon
USER32.dll493LoadIconW
USER32.dll162DestroyCursor
USER32.dll208DrawTextW
USER32.dll671SetMenuInfo
USER32.dll10AppendMenuW
USER32.dll164DestroyMenu
USER32.dll107CreatePopupMenu
USER32.dll106CreateMenu
USER32.dll201DrawMenuBar
USER32.dll491LoadCursorW
USER32.dll28CallNextHookEx
USER32.dll768UnhookWindowsHookEx
USER32.dll719SetWindowsHookExW
USER32.dll648SetCursor
USER32.dll398GetWindow
USER32.dll668SetMenu
USER32.dll331GetMenu
USER32.dll382GetSystemMetrics
USER32.dll762TranslateAcceleratorW
USER32.dll485LoadAcceleratorsW
USER32.dll476IsWindowEnabled
USER32.dll216EnableWindow
USER32.dll483KillTimer
USER32.dll699SetTimer
USER32.dll540MsgWaitForMultipleObjects
USER32.dll612ReleaseCapture
USER32.dll640SetCapture
USER32.dll264GetCapture
USER32.dll630SendInput
USER32.dll753ToAscii
USER32.dll322GetKeyboardState
USER32.dll317GetKeyState
USER32.dll300GetFocus
USER32.dll256GetActiveWindow
USER32.dll658SetFocus
USER32.dll49CharNextW
USER32.dll46CharLowerW
USER32.dll60CharUpperW
USER32.dll213EmptyClipboard
USER32.dll278GetClipboardData
USER32.dll646SetClipboardData
USER32.dll73CloseClipboard
USER32.dll550OpenClipboard
USER32.dll294GetDlgCtrlID
USER32.dll627SendDlgItemMessageW
USER32.dll295GetDlgItem
USER32.dll218EndDialog
USER32.dll172DialogBoxParamW
USER32.dll99CreateDialogParamW
USER32.dll709SetWindowPlacement
USER32.dll411GetWindowPlacement
USER32.dll710SetWindowPos
USER32.dll539MoveWindow
USER32.dll735ShowWindow
USER32.dll166DestroyWindow
USER32.dll475IsWindow
USER32.dll110CreateWindowExW
USER32.dll269GetClassInfoExW
USER32.dll589RegisterClassExW
USER32.dll774UnregisterClassW
USER32.dll30CallWindowProcW
USER32.dll567PostQuitMessage
USER32.dll156DefWindowProcW
USER32.dll566PostMessageW
USER32.dll636SendMessageW
USER32.dll563PeekMessageW
USER32.dll175DispatchMessageW
USER32.dll764TranslateMessage
USER32.dll349GetMessageW
USER32.dll195DrawEdge
USER32.dll757TrackMouseEvent
USER32.dll611RegisterWindowMessageW
USER32.dll533MessageBoxW
GDI32.dll53CreateDIBSection
GDI32.dll509GetObjectW
GDI32.dll678SetTextColor
GDI32.dll681SetViewportOrgEx
GDI32.dll489GetICMProfileW
GDI32.dll667SetPixel
GDI32.dll649SetDIBitsToDevice
GDI32.dll638SetBkColor
GDI32.dll639SetBkMode
GDI32.dll631SelectObject
GDI32.dll542GetTextExtentPoint32W
GDI32.dll525GetStockObject
GDI32.dll516GetPixel
GDI32.dll459GetDeviceCaps
GDI32.dll423GetBitmapBits
GDI32.dll293EnumFontFamiliesExW
GDI32.dll230DeleteObject
GDI32.dll227DeleteDC
GDI32.dll84CreateSolidBrush
GDI32.dll64CreateFontIndirectW
GDI32.dll54CreateDIBitmap
GDI32.dll48CreateCompatibleDC
GDI32.dll47CreateCompatibleBitmap
GDI32.dll697TextOutW
GDI32.dll19BitBlt
GDI32.dll43CreateBitmapIndirect
COMDLG32.dll14GetSaveFileNameW
COMDLG32.dll12GetOpenFileNameW
COMDLG32.dll1ChooseColorW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll609RegOpenKeyExW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll31DragQueryFileW
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll290ShellExecuteW
SHELL32.dll26DragAcceptFiles
SHELL32.dll27DragFinish
ole32.dll108CoUninitialize
ole32.dll103CoTaskMemAlloc
ole32.dll105CoTaskMemRealloc
ole32.dll104CoTaskMemFree
ole32.dll16CoCreateInstance
ole32.dll62CoInitialize
OLEAUT32.dll277
OLEAUT32.dll84
SHLWAPI.dll295StrDupW
COMCTL32.dll83ImageList_Create
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll111ImageList_ReplaceIcon
COMCTL32.dll123InitCommonControlsEx
COMCTL32.dll146_TrackMouseEvent
WS2_32.dll15
WS2_32.dll14
WS2_32.dll9
WS2_32.dll8

StringTable 040904b0

CommentsPhotoInstrument - raster graphics editor.
FileDescriptionPhotoInstrument
FileVersion7.4.0.848
InternalNamePhotoInstrument
LegalCopyrightCopyright 2007-2016
OriginalFilenamePhotoInstrument.exe
ProductNamePhotoInstrument
ProductVersion7.4.0.848

VS_FIXEDFILEINFO

FileVersion7.4.0.848
ProductVersion7.4.0.848
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
3e972024917GIF(0 x 29254)#
3ef8757652747BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK