filenameffmpeg-old.exe
size8503808 (0x81c200)
md567c86c7fddd4628ba23988a2ba46e619
typePE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x49eda3a1
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion2.56
SizeOfCode0x600600
SizeOfInitializedData0x21b800
SizeOfUninitializedData0x4ea200
AddressOfEntryPoint0x1280
BaseOfCode0x1000
BaseOfData0x602000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xd0b000
SizeOfHeaders0x400
CheckSum0x821a3c
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MingWin32 - Dev C++ v4.x

Sections

namevavsizeraw sizeflags
.text0x10000x5e5d5c0x5e5e00R-X CODE
.rotext0x5e70000x1a7d30x1a800R-X CODE
.data0x6020000x1181240x118200RW- IDATA
.rdata0x71b0000xfebdc0xfec00R-- IDATA
.rodata0x81a0000x32700x3400R-- IDATA
.bss0x81e0000x4ea1880RW- UDATA
.idata0xd090000x157c0x1600RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xd090000x157c
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
KERNEL32.dll38CloseHandle
KERNEL32.dll64CreateEventA
KERNEL32.dll80CreateMutexA
KERNEL32.dll88CreateSemaphoreA
KERNEL32.dll91CreateThread
KERNEL32.dll107DeleteCriticalSection
KERNEL32.dll123DuplicateHandle
KERNEL32.dll126EnterCriticalSection
KERNEL32.dll156ExitProcess
KERNEL32.dll214FreeLibrary
KERNEL32.dll283GetCurrentProcess
KERNEL32.dll284GetCurrentProcessId
KERNEL32.dll285GetCurrentThread
KERNEL32.dll286GetCurrentThreadId
KERNEL32.dll325GetLastError
KERNEL32.dll364GetProcAddress
KERNEL32.dll365GetProcessAffinityMask
KERNEL32.dll373GetProcessTimes
KERNEL32.dll398GetSystemInfo
KERNEL32.dll403GetSystemTimeAsFileTime
KERNEL32.dll416GetThreadContext
KERNEL32.dll419GetThreadPriority
KERNEL32.dll492InitializeCriticalSection
KERNEL32.dll496InterlockedDecrement
KERNEL32.dll497InterlockedExchange
KERNEL32.dll498InterlockedExchangeAdd
KERNEL32.dll512IsDBCSLeadByteEx
KERNEL32.dll523LeaveCriticalSection
KERNEL32.dll524LoadLibraryA
KERNEL32.dll560MultiByteToWideChar
KERNEL32.dll571OpenProcess
KERNEL32.dll629ReleaseMutex
KERNEL32.dll630ReleaseSemaphore
KERNEL32.dll638ResetEvent
KERNEL32.dll641ResumeThread
KERNEL32.dll698SetEvent
KERNEL32.dll713SetLastError
KERNEL32.dll731SetThreadContext
KERNEL32.dll735SetThreadPriority
KERNEL32.dll739SetUnhandledExceptionFilter
KERNEL32.dll751Sleep
KERNEL32.dll753SuspendThread
KERNEL32.dll763TlsAlloc
KERNEL32.dll764TlsFree
KERNEL32.dll765TlsGetValue
KERNEL32.dll766TlsSetValue
KERNEL32.dll790VirtualAlloc
KERNEL32.dll794VirtualFree
KERNEL32.dll808WaitForMultipleObjects
KERNEL32.dll810WaitForSingleObject
KERNEL32.dll814WideCharToMultiByte
msvcrt.dll6_close
msvcrt.dll35_getch
msvcrt.dll42_isatty
msvcrt.dll47_kbhit
msvcrt.dll58_open
msvcrt.dll64_read
msvcrt.dll68_setmode
msvcrt.dll80_strdup
msvcrt.dll91_tempnam
msvcrt.dll97_unlink
msvcrt.dll109_write
msvcrt.dll55__getmainargs
msvcrt.dll61__lc_codepage
msvcrt.dll65__mb_cur_max
msvcrt.dll77__p__environ
msvcrt.dll79__p__fmode
msvcrt.dll99__set_app_type
msvcrt.dll137_assert
msvcrt.dll139_atoi64
msvcrt.dll143_beginthreadex
msvcrt.dll147_cexit
msvcrt.dll179_endthreadex
msvcrt.dll182_errno
msvcrt.dll200_filbuf
msvcrt.dll225_ftime
msvcrt.dll266_iob
msvcrt.dll317_lseeki64
msvcrt.dll383_onexit
msvcrt.dll422_setjmp
msvcrt.dll426_setmode
msvcrt.dll451_stricmp
msvcrt.dll455_strnicmp
msvcrt.dll583abort
msvcrt.dll585acos
msvcrt.dll587asin
msvcrt.dll588atan
msvcrt.dll590atexit
msvcrt.dll591atof
msvcrt.dll592atoi
msvcrt.dll595calloc
msvcrt.dll596ceil
msvcrt.dll599cos
msvcrt.dll600cosh
msvcrt.dll604exit
msvcrt.dll605exp
msvcrt.dll607fclose
msvcrt.dll610fflush
msvcrt.dll611fgetc
msvcrt.dll616floor
msvcrt.dll618fopen
msvcrt.dll619fprintf
msvcrt.dll620fputc
msvcrt.dll621fputs
msvcrt.dll624fread
msvcrt.dll625free
msvcrt.dll627frexp
msvcrt.dll628fscanf
msvcrt.dll629fseek
msvcrt.dll631ftell
msvcrt.dll633fwrite
msvcrt.dll637getenv
msvcrt.dll641gmtime
msvcrt.dll644isalpha
msvcrt.dll650isprint
msvcrt.dll652isspace
msvcrt.dll669ldexp
msvcrt.dll671localeconv
msvcrt.dll672localtime
msvcrt.dll673log
msvcrt.dll674log10
msvcrt.dll675longjmp
msvcrt.dll676malloc
msvcrt.dll680memchr
msvcrt.dll682memcpy
msvcrt.dll683memmove
msvcrt.dll684memset
msvcrt.dll685mktime
msvcrt.dll687perror
msvcrt.dll688pow
msvcrt.dll689printf
msvcrt.dll691putchar
msvcrt.dll695qsort
msvcrt.dll697rand
msvcrt.dll698realloc
msvcrt.dll700rename
msvcrt.dll706signal
msvcrt.dll707sin
msvcrt.dll708sinh
msvcrt.dll709sprintf
msvcrt.dll710sqrt
msvcrt.dll711srand
msvcrt.dll712sscanf
msvcrt.dll713strcat
msvcrt.dll714strchr
msvcrt.dll715strcmp
msvcrt.dll717strcpy
msvcrt.dll718strcspn
msvcrt.dll719strerror
msvcrt.dll721strlen
msvcrt.dll723strncmp
msvcrt.dll724strncpy
msvcrt.dll725strpbrk
msvcrt.dll726strrchr
msvcrt.dll727strspn
msvcrt.dll728strstr
msvcrt.dll730strtok
msvcrt.dll731strtol
msvcrt.dll737tan
msvcrt.dll738tanh
msvcrt.dll739time
msvcrt.dll742tolower
msvcrt.dll743toupper
msvcrt.dll748vfprintf
msvcrt.dll751vsprintf
msvcrt.dll761wcslen
USER32.dll143DestroyWindow
USER32.dll340GetWindowLongA
USER32.dll504SendMessageA
USER32.dll565SetWindowLongA
AVICAP32.DLL1capCreateCaptureWindowA
AVIFIL32.DLL9AVIFileExit
AVIFIL32.DLL10AVIFileGetStream
AVIFIL32.DLL12AVIFileInfoA
AVIFIL32.DLL14AVIFileInit
AVIFIL32.DLL16AVIFileOpenA
AVIFIL32.DLL19AVIFileRelease
AVIFIL32.DLL43AVIStreamInfoA
AVIFIL32.DLL49AVIStreamRead
AVIFIL32.DLL51AVIStreamReadFormat
AVIFIL32.DLL52AVIStreamRelease
WS2_32.DLL14WSACleanup
WS2_32.DLL26WSAGetLastError
WS2_32.DLL59WSASetLastError
WS2_32.DLL64WSAStartup
WS2_32.DLL76__WSAFDIsSet
WS2_32.DLL78bind
WS2_32.DLL79closesocket
WS2_32.DLL80connect
WS2_32.DLL84gethostbyname
WS2_32.DLL85gethostname
WS2_32.DLL92getsockname
WS2_32.DLL93getsockopt
WS2_32.DLL94htonl
WS2_32.DLL95htons
WS2_32.DLL97inet_ntoa
WS2_32.DLL98ioctlsocket
WS2_32.DLL100ntohl
WS2_32.DLL101ntohs
WS2_32.DLL102recv
WS2_32.DLL103recvfrom
WS2_32.DLL104select
WS2_32.DLL105send
WS2_32.DLL106sendto
WS2_32.DLL107setsockopt
WS2_32.DLL109socket
offsetsizetypecomment
15c115HTM#
73d23e9666GIF(18759 x 14406)#
73f800903680BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK