3f4733e528435d53ff454b966428e38fed702fc2.bin - sqliosim.exe

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	3f4733e528435d53ff454b966428e38fed702fc2.bin
size	480256 (0x75400)
md5	5c7d442f46ddc1b490477d635c5bdce7

type	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x40
blocks_in_file	1
num_relocs	0
header_paragraphs	2
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0xa
overlay_number	0
reserved0	0xeba1f0e00000000
oem_id	0xb400
oem_info	0xcd09
reserved2	0x4c01b821
reserved3	0x695721cd
reserved4	0x2032336e
reserved5	0x4558452e
reserved6	0x240a0d2e
lfanew	0x40

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 57 69  |........!..L.!Wi|
00000010: 6e 33 32 20 2e 45 58 45  2e 0d 0a 24 40 00 00 00  |n32 .EXE...$@...|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x5c1e86fa
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x30f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xd0000
SizeOfInitializedData	0x5a000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x15f2fe
BaseOfCode	0x1000
BaseOfData	0xd1000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x17d000
SizeOfHeaders	0x200
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0xd000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MPRESS v2.12 (MATCODE Software)

Sections

name	va	vsize	raw size	flags
.MPRESS1	0x1000	0x15e000	0x57c00	RWX CODE IDATA UDATA
.MPRESS2	0x15f000	0xe68	0x1000	RWX CODE IDATA UDATA
.rsrc	0x160000	0x1c580	0x1c600	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x15f000	0x300
RESOURCE	0x160000	0x1c580
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x15f12c	0x70
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
TEXTINCLUDE	#1	11	1252
TEXTINCLUDE	#2	22	1252
TEXTINCLUDE	#3	337	1252
CURSOR	#1	308	1252
CURSOR	#2	308	1252
CURSOR	#3	308	1252
CURSOR	#4	180	1252
BITMAP	IEXT_IDB_STATEIMAGES	364	1252
BITMAP	#1031	584	1252
BITMAP	#1038	324	1252
BITMAP	#1138	344	1252
BITMAP	#1139	344	1252
BITMAP	#1140	344	1252
BITMAP	#1141	344	1252
BITMAP	#1142	344	1252
BITMAP	#1143	344	1252
BITMAP	#1144	344	1252
BITMAP	#1145	344	1252
BITMAP	#26567	1508	1252
BITMAP	#30994	184	1252
BITMAP	#30995	364	1252
BITMAP	#30996	324	1252
ICON	#1	744	1252
ICON	#2	296	1252
ICON	#3	1640	1252
ICON	#4	744	1252
ICON	#5	488	0
ICON	#6	296	0
ICON	#7	3752	0
ICON	#8	2216	0
ICON	#9	1736	0
ICON	#10	1384	0
ICON	#11	80782	0
ICON	#12	9640	0
ICON	#13	4264	0
ICON	#14	2440	0
ICON	#15	1128	0
MENU	#127	12	1252
MENU	#1039	644	1252
DIALOG	#150	152	1252
DIALOG	#286	378	1252
DIALOG	#554	250	1252
DIALOG	#1037	234	1252
DIALOG	#1084	2222	1252
DIALOG	#1124	178	1252
DIALOG	#1134	204	1252
DIALOG	#1150	178	1252
DIALOG	#30721	226	1252
DIALOG	#30722	396	1252
STRING	#3841	80	1252
STRING	#3842	44	1252
STRING	#3843	120	1252
STRING	#3857	452	1252
STRING	#3858	298	1252
STRING	#3859	326	1252
STRING	#3865	64	1252
STRING	#3866	100	1252
STRING	#3867	472	1252
STRING	#3868	276	1252
STRING	#3869	36	1252
GROUP_CURSOR	#1032	20	1252
GROUP_CURSOR	#1033	20	1252
GROUP_CURSOR	#30977	34	1252
GROUP_ICON	DEFAULT_ICON	188	1252
GROUP_ICON	#1151	20	1252
GROUP_ICON	#1152	20	1252
VERSION	#1	1172	1252
MANIFEST	#1	583	1252

module_name	ord	function_name
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetProcAddress
WINMM.dll		waveOutOpen
WS2_32.dll	23
RASAPI32.dll		RasHangUpA
USER32.dll		GetDC
GDI32.dll		Escape
WINSPOOL.DRV		OpenPrinterA
ADVAPI32.dll		RegCloseKey
SHELL32.dll		ShellExecuteA
ole32.dll		OleRun
OLEAUT32.dll	12
COMCTL32.dll	17
WININET.dll		InternetCloseHandle
comdlg32.dll		ChooseColorA

StringTable 040904B0

Platform	NT x64
LegalTrademarks	Microsoft SQL Server is a registered trademark of Microsoft Corporation.
Comments	SQL
GoldenBits	True
CompanyName	Microsoft Corporation
FileDescription	SQL Server IO Simulator
FileVersion	2009.0100.1600.01 ((KJ_RTM).100402-1539 )
InternalName	sqliosim
LegalCopyright	Microsoft Corp. All rights reserved.
OriginalFilename	sqliosim.exe
ProductName	Microsoft SQL Server
ProductVersion	10.50.1600.1

VS_FIXEDFILEINFO

FileVersion	2009.100.1600.1
ProductVersion	10.50.1600.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	8
FileOS	0x40000
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	480256	EXE	12/22/2018 18:48:26	#
15c1	15	HTM		#
5c51c	80782	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x13ee34

[?] can't find file_offset of VA 0x13ee40

[?] can't find file_offset of VA 0x13ee58

[?] can't find file_offset of VA 0x13efac

[?] can't find file_offset of VA 0x13f0e0

[?] can't find file_offset of VA 0x13f214

[?] can't find file_offset of VA 0x13f348

[?] can't find file_offset of VA 0x13f3fc

[?] can't find file_offset of VA 0x13f568

[?] can't find file_offset of VA 0x13f7b0

[?] can't find file_offset of VA 0x13f8f4

[?] can't find file_offset of VA 0x13fa4c

[?] can't find file_offset of VA 0x13fba4

[?] can't find file_offset of VA 0x13fcfc

[?] can't find file_offset of VA 0x13fe54

[?] can't find file_offset of VA 0x13ffac

[?] can't find file_offset of VA 0x140104

[?] can't find file_offset of VA 0x14025c

[?] can't find file_offset of VA 0x1403b4

[?] can't find file_offset of VA 0x140998

[?] can't find file_offset of VA 0x140a50

[?] can't find file_offset of VA 0x140bbc

[?] can't find file_offset of VA 0x140d00

[?] can't find file_offset of VA 0x140fe8

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x15c0c0

[?] can't find file_offset of VA 0x15c0cc

[?] can't find file_offset of VA 0x15c350

[?] can't find file_offset of VA 0x15c3e8

[?] can't find file_offset of VA 0x15c564

[?] can't find file_offset of VA 0x15c660

[?] can't find file_offset of VA 0x15c74c

[?] can't find file_offset of VA 0x15cffc

[?] can't find file_offset of VA 0x15d0b0

[?] can't find file_offset of VA 0x15d17c

[?] can't find file_offset of VA 0x15d230

[?] can't find file_offset of VA 0x15d314

[?] can't find file_offset of VA 0x15d4a0

[?] can't find file_offset of VA 0x15d4f0

[?] can't find file_offset of VA 0x15d51c

[?] can't find file_offset of VA 0x15d594

[?] can't find file_offset of VA 0x15d758

[?] can't find file_offset of VA 0x15d884

[?] can't find file_offset of VA 0x15d9cc

[?] can't find file_offset of VA 0x15da0c

[?] can't find file_offset of VA 0x15da70

[?] can't find file_offset of VA 0x15dc48

[?] can't find file_offset of VA 0x15dd5c

[?] can't find file_offset of VA 0x15dd80

[?] can't find file_offset of VA 0x15dd94

[?] can't find file_offset of VA 0x15dda8

[?] can't find file_offset of VA 0x15de88

[?] can't find file_offset of VA 0x15de9c

3f4733e528435d53ff454b966428e38fed702fc2.bin-