filenamemsinfo32.exe
size303104 (0x4a000)
md55f2122888583347c9b81724cf169efc6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
149307293
1313072923
1473072931
10340
1323072929
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4ce78d0f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x22400
SizeOfInitializedData0x2c400
SizeOfUninitializedData0
AddressOfEntryPoint0x19da8
BaseOfCode0x1000
BaseOfData0x24000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion6.1
Reserved10
SizeOfImage0x52000
SizeOfHeaders0x400
CheckSum0x51277
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x223700x22400R-X CODE
.data0x240000x50d00x600RW- IDATA
.rsrc0x2a0000x24a780x24c00R-- IDATA
.reloc0x4f0000x244e0x2600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x21e3c0x140
RESOURCE0x2a0000x24a78
EXCEPTION00
SECURITY00
BASERELOC0x4f0000x1e2c
DEBUG0x16c00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x76200x40
Bound_IAT0x2700x138
IAT0x10000x558
Delay_IAT00
CLR_Header00
typenamesizecp
MUI#12320
BITMAP#1022320
ICON#116400
ICON#27440
ICON#34880
ICON#42960
ICON#537520
ICON#622160
ICON#717360
ICON#813840
ICON#9429690
ICON#1096400
ICON#1142640
ICON#1224400
ICON#1311280
ICON#1416400
ICON#157440
ICON#164880
ICON#172960
ICON#1837520
ICON#1922160
ICON#2017360
ICON#2113840
ICON#22429690
ICON#2396400
ICON#2442640
ICON#2524400
ICON#2611280
GROUP_ICON#3991880
GROUP_ICON#100021880
VERSION#19160
MANIFEST#112420
module_namehintordfunction_name
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll598RegGetValueW
ADVAPI32.dll560RegCloseKey
KERNEL32.dll547GetNativeSystemInfo
KERNEL32.dll567GetPhysicallyInstalledSystemMemory
KERNEL32.dll534GetModuleHandleW
KERNEL32.dll302FindClose
KERNEL32.dll325FindNextFileW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll1026RemoveDirectoryW
KERNEL32.dll214DeleteFileW
KERNEL32.dll1119SetFileAttributesW
KERNEL32.dll1124SetFilePointer
KERNEL32.dll143CreateFileW
KERNEL32.dll959ReadFile
KERNEL32.dll512GetLastError
KERNEL32.dll126CreateDirectoryExW
KERNEL32.dll637GetSystemWow64DirectoryW
KERNEL32.dll1100SetCurrentDirectoryW
KERNEL32.dll399GetComputerNameW
KERNEL32.dll354FreeLibrary
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll831LoadLibraryW
KERNEL32.dll494GetFileSize
KERNEL32.dll133CreateEventW
KERNEL32.dll709GlobalUnlock
KERNEL32.dll702GlobalLock
KERNEL32.dll691GlobalAlloc
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll391GetCommandLineW
KERNEL32.dll1007RegisterApplicationRestart
KERNEL32.dll723HeapSetInformation
KERNEL32.dll870MultiByteToWideChar
KERNEL32.dll456GetDateFormatW
KERNEL32.dll662GetTimeFormatW
KERNEL32.dll516GetLocaleInfoW
KERNEL32.dll561GetNumberFormatW
KERNEL32.dll181CreateThread
KERNEL32.dll1038ResetEvent
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll1112SetEvent
KERNEL32.dll1217TerminateThread
KERNEL32.dll82CloseHandle
KERNEL32.dll644GetTempPathW
KERNEL32.dll658GetTickCount
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll632GetSystemTimeAsFileTime
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll934QueryPerformanceCounter
KERNEL32.dll531GetModuleHandleA
KERNEL32.dll1188SetUnhandledExceptionFilter
KERNEL32.dll610GetStartupInfoW
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll1202Sleep
KERNEL32.dll748InterlockedExchange
KERNEL32.dll836LocalAlloc
KERNEL32.dll739InitializeCriticalSection
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll675GetVersionExW
KERNEL32.dll227DnsHostnameToComputerNameW
KERNEL32.dll840LocalFree
KERNEL32.dll1358lstrlenW
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll350FormatMessageW
KERNEL32.dll1235UnhandledExceptionFilter
GDI32.dll84CreateSolidBrush
GDI32.dll509GetObjectW
GDI32.dll64CreateFontIndirectW
GDI32.dll697TextOutW
GDI32.dll242EndPage
GDI32.dll239EndDoc
GDI32.dll690StartPage
GDI32.dll688StartDocW
GDI32.dll542GetTextExtentPoint32W
GDI32.dll459GetDeviceCaps
GDI32.dll65CreateFontW
GDI32.dll678SetTextColor
USER32.dll644SetClassLongW
USER32.dll686SetRect
USER32.dll14BeginPaint
USER32.dll379GetSysColor
USER32.dll246FillRect
USER32.dll220EndPaint
USER32.dll658SetFocus
USER32.dll550OpenClipboard
USER32.dll213EmptyClipboard
USER32.dll646SetClipboardData
USER32.dll73CloseClipboard
USER32.dll378GetSubMenu
USER32.dll674SetMenuItemInfoW
USER32.dll300GetFocus
USER32.dll785UpdateWindow
USER32.dll621ScreenToClient
USER32.dll85CopyRect
USER32.dll290GetDCEx
USER32.dll196DrawFocusRect
USER32.dll613ReleaseDC
USER32.dll576PtInRect
USER32.dll648SetCursor
USER32.dll612ReleaseCapture
USER32.dll493LoadIconW
USER32.dll640SetCapture
USER32.dll276GetClientRect
USER32.dll476IsWindowEnabled
USER32.dll586RedrawWindow
USER32.dll699SetTimer
USER32.dll218EndDialog
USER32.dll419GetWindowTextW
USER32.dll295GetDlgItem
USER32.dll636SendMessageW
USER32.dll216EnableWindow
USER32.dll715SetWindowTextW
USER32.dll65CheckRadioButton
USER32.dll656SetDlgItemTextW
USER32.dll462IsDlgButtonChecked
USER32.dll506LoadStringW
USER32.dll483KillTimer
USER32.dll172DialogBoxParamW
USER32.dll566PostMessageW
USER32.dll533MessageBoxW
USER32.dll709SetWindowPlacement
USER32.dll748SystemParametersInfoW
USER32.dll62CheckDlgButton
USER32.dll437InflateRect
USER32.dll549OffsetRect
USER32.dll539MoveWindow
USER32.dll485LoadAcceleratorsW
USER32.dll668SetMenu
USER32.dll278GetClipboardData
USER32.dll503LoadMenuW
USER32.dll480IsWindowVisible
USER32.dll458IsClipboardFormatAvailable
USER32.dll567PostQuitMessage
USER32.dll160DestroyAcceleratorTable
USER32.dll175DispatchMessageW
USER32.dll764TranslateMessage
USER32.dll461IsDialogMessageW
USER32.dll762TranslateAcceleratorW
USER32.dll349GetMessageW
USER32.dll99CreateDialogParamW
USER32.dll491LoadCursorW
USER32.dll735ShowWindow
USER32.dll412GetWindowRect
USER32.dll446InvalidateRect
MFC42u.dll6565
MFC42u.dll826
MFC42u.dll269
MFC42u.dll1173
MFC42u.dll1240
MFC42u.dll1571
MFC42u.dll600
MFC42u.dll6867
MFC42u.dll2559
MFC42u.dll5790
MFC42u.dll6168
MFC42u.dll5871
MFC42u.dll5785
MFC42u.dll640
MFC42u.dll6921
MFC42u.dll6919
MFC42u.dll5781
MFC42u.dll2755
MFC42u.dll5597
MFC42u.dll6563
MFC42u.dll2757
MFC42u.dll5618
MFC42u.dll802
MFC42u.dll542
MFC42u.dll394
MFC42u.dll698
MFC42u.dll4182
MFC42u.dll5588
MFC42u.dll911
MFC42u.dll396
MFC42u.dll860
MFC42u.dll323
MFC42u.dll1633
MFC42u.dll6466
MFC42u.dll2442
MFC42u.dll825
MFC42u.dll861
MFC42u.dll858
MFC42u.dll5568
MFC42u.dll2910
MFC42u.dll800
MFC42u.dll540
MFC42u.dll2606
MFC42u.dll538
MFC42u.dll4124
MFC42u.dll913
MFC42u.dll1165
MFC42u.dll535
MFC42u.dll4155
MFC42u.dll823
MFC42u.dll922
MFC42u.dll5706
MFC42u.dll2756
MFC42u.dll1594
MFC42u.dll2810
MFC42u.dll940
MFC42u.dll4184
MFC42u.dll6278
MFC42u.dll941
MFC42u.dll398
MFC42u.dll700
MFC42u.dll2809
MFC42u.dll501
MFC42u.dll909
MFC42u.dll773
MFC42u.dll696
MFC42u.dll5586
MFC42u.dll3430
MFC42u.dll5596
MFC42u.dll1083
MFC42u.dll4180
MFC42u.dll5617
MFC42u.dll998
MFC42u.dll2819
MFC42u.dll6928
MFC42u.dll1184
MFC42u.dll834
MFC42u.dll6218
MFC42u.dll6279
MFC42u.dll2768
MFC42u.dll5852
MFC42u.dll4197
MFC42u.dll925
MFC42u.dll927
MFC42u.dll2805
MFC42u.dll4199
MFC42u.dll3432
MFC42u.dll3658
MFC42u.dll349
MFC42u.dll3608
MFC42u.dll3121
MFC42u.dll5647
MFC42u.dll2385
MFC42u.dll1560
MFC42u.dll537
MFC42u.dll1172
MFC42u.dll3621
MFC42u.dll2406
MFC42u.dll268
MFC42u.dll3614
MFC42u.dll1634
MFC42u.dll352
MFC42u.dll942
MFC42u.dll2813
MFC42u.dll3806
MFC42u.dll2776
msvcrt.dll934_unlock
msvcrt.dll141__dllonexit
msvcrt.dll578_lock
msvcrt.dll747_onexit
msvcrt.dll345_except_handler4_common
msvcrt.dll295_controlfp
msvcrt.dll17public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll974_vsnwprintf
msvcrt.dll115__CxxFrameHandler3
msvcrt.dll210__set_app_type
msvcrt.dll190__p__fmode
msvcrt.dll185__p__commode
msvcrt.dll212__setusermatherr
msvcrt.dll257_amsg_exit
msvcrt.dll469_initterm
msvcrt.dll999_wcmdln
msvcrt.dll1167exit
msvcrt.dll106_XcptFilter
msvcrt.dll354_exit
msvcrt.dll276_cexit
msvcrt.dll225__wgetmainargs
msvcrt.dll1009_wcsicoll
msvcrt.dll1129_wtoi
msvcrt.dll1007_wcsicmp
msvcrt.dll1258memcpy
msvcrt.dll764_purecall
msvcrt.dll1246malloc
msvcrt.dll1326swprintf_s
msvcrt.dll1384wcstol
msvcrt.dll274_callnewh
msvcrt.dll11public: __thiscall exception::exception(class exception const &)

??0exception@@QAE@ABV0@@Z

msvcrt.dll16public: virtual __thiscall exception::~exception(void)

??1exception@@UAE@XZ

msvcrt.dll57public: virtual char const * __thiscall exception::what(void)const

?what@exception@@UBEPBDXZ

msvcrt.dll12public: __thiscall exception::exception(void)

??0exception@@QAE@XZ

msvcrt.dll1373wcsncpy_s
msvcrt.dll1133_wtol
msvcrt.dll405_ftol2_sse
msvcrt.dll1381wcstod
msvcrt.dll1034_wcsupr
msvcrt.dll1190free
msvcrt.dll99_CxxThrowException
msvcrt.dll404_ftol2
msvcrt.dll1387wcstoul
msvcrt.dll1225iswalpha
msvcrt.dll1262memset
ATL.DLL30
ntdll.dll1372WinSqmAddToStream
OLEAUT32.dll6
OLEAUT32.dll2
OLEAUT32.dll9
OLEAUT32.dll12
OLEAUT32.dll8
OLEAUT32.dll7
OLEAUT32.dll25
OLEAUT32.dll19
OLEAUT32.dll20
OLEAUT32.dll17
OLEAUT32.dll4
ole32.dll15CoCreateGuid
ole32.dll376StringFromCLSID
ole32.dll104CoTaskMemFree
ole32.dll16CoCreateInstance
ole32.dll108CoUninitialize
ole32.dll64CoInitializeSecurity
ole32.dll62CoInitialize
SHLWAPI.dll298StrFormatByteSizeEx
SETUPAPI.dll514SetupIterateCabinetW
COMDLG32.dll12GetOpenFileNameW
COMDLG32.dll20PrintDlgExW
COMDLG32.dll14GetSaveFileNameW
SHELL32.dll6CommandLineToArgvW
COMCTL32.dll123InitCommonControlsEx

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionSystem Information
FileVersion6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalNamemsinfo.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamemsinfo.dll
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion6.1.7601.17514
ProductVersion6.1.7601.17514
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
0303104EXE11/20/2010 08:55:43#
15c115HTM#
26df042969PNG(256 x 256)#
38ab042969PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x270