FixMNG.exe - FixMNG Application

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	FixMNG.exe
size	175104 (0x2ac00)
md5	670423e955f45aa0c6afe2df9aa17057

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
0	0	18
19	8034	15
1	0	411
11	8047	10
14	7299	27
10	8047	133
11	8569	57
48	9044	20
6	1735	1
49	9044	7

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x3d64d518
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x2f000
SizeOfInitializedData	0x29000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x59001
BaseOfCode	0x1000
BaseOfData	0x30000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x61000
SizeOfHeaders	0x600
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASPack v2.12

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2f000	0x16000	RW- IDATA
.rdata	0x30000	0x7000	0x2200	RW- IDATA
.data	0x37000	0xa000	0x1000	RW- IDATA
.rsrc	0x41000	0x18000	0xb000	RW- IDATA
.aspack	0x59000	0x7000	0x6400	RW- IDATA
.adata	0x60000	0x1000	0	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x59fac	0x1b0
RESOURCE	0x41000	0x17cd8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x59f54	8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

show previews

type	name	size
CURSOR	#8	308
CURSOR	#9	180
BITMAP	#129	61760
BITMAP	#26567	1508
BITMAP	#30994	184
BITMAP	#30995	364
BITMAP	#30996	324
ICON	#1	296
ICON	#2	1384
ICON	#3	744
ICON	#4	2216
ICON	#5	1640
ICON	#6	3752
ICON	#7	9640
DIALOG	#100	720
DIALOG	#102	868
DIALOG	#130	256
DIALOG	#30721	232
STRING	#7	616
STRING	#8	1994
STRING	#3841	130
STRING	#3842	42
STRING	#3843	330
STRING	#3857	1250
STRING	#3858	674
STRING	#3859	732
STRING	#3865	172
STRING	#3866	222
STRING	#3867	1220
STRING	#3868	612
STRING	#3869	44
GROUP_CURSOR	#30977	34
GROUP_ICON	#128	104
VERSION	#1	1012

module_name	ord	function_name
kernel32.dll		GetProcAddress
kernel32.dll		GetModuleHandleA
kernel32.dll		LoadLibraryA
user32.dll		IsDialogMessageA
gdi32.dll		CreateFontIndirectA
comdlg32.dll		GetOpenFileNameA
winspool.drv		OpenPrinterA
advapi32.dll		RegSetValueExA
shell32.dll		DragAcceptFiles
comctl32.dll	17

StringTable 080904b0

Comments	Process Animation Shop MNG files to comply with the official MNG spec
CompanyName	Digital Workshop
FileDescription	FixMNG Application
FileVersion	1, 0, 0, 1
InternalName	FixMNG
LegalCopyright	Copyright (C) 2002
LegalTrademarks
OriginalFilename	FixMNG.EXE
PrivateBuild
ProductName	FixMNG Application
ProductVersion	1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	175104	EXE	08/22/2002 12:12:08	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x560e0

[?] can't find file_offset of VA 0x56218

[?] can't find file_offset of VA 0x562f8

[?] can't find file_offset of VA 0x569c8

[?] can't find file_offset of VA 0x56a80

[?] can't find file_offset of VA 0x56bf0

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x568e0

[?] can't find file_offset of VA 0x56d38

[?] can't find file_offset of VA 0x56fa0

[?] can't find file_offset of VA 0x57770

[?] can't find file_offset of VA 0x577f8

[?] can't find file_offset of VA 0x57828

[?] can't find file_offset of VA 0x57978

[?] can't find file_offset of VA 0x581f0

[?] can't find file_offset of VA 0x57f10

[?] can't find file_offset of VA 0x57e60

[?] can't find file_offset of VA 0x58bc8

[?] can't find file_offset of VA 0x58498

[?] can't find file_offset of VA 0x58960

[?] can't find file_offset of VA 0x58ca8

[?] can't find file_offset of VA 0x562d0

[?] can't find file_offset of VA 0x0

FixMNG.exe-