filename | rescuecd_stickifier.exe | |
---|---|---|
size | 19977216 (0x130d400) | |
md5 | 83226d527848261ef7d6593670ece77a | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x108 |
Rich Header
lib id | version | times used |
---|---|---|
199 | 41118 | 2 |
223 | 20806 | 60 |
225 | 20806 | 86 |
224 | 20806 | 202 |
206 | 65501 | 7 |
208 | 65501 | 1 |
203 | 65501 | 23 |
1 | 0 | 393 |
224 | 21005 | 128 |
225 | 21005 | 635 |
220 | 21005 | 1 |
219 | 21005 | 1 |
222 | 21005 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x8776a0 | z_adler32 | |
2 | 0x877c40 | z_adler32_combine | |
3 | 0x877c60 | z_adler32_combine64 | |
4 | 0x7cbbe0 | z_compress | |
5 | 0x7cbc00 | z_compress2 | |
6 | 0x7cbcd0 | z_compressBound | |
7 | 0x7befb0 | z_crc32 | |
8 | 0x7bf200 | z_crc32_combine | |
9 | 0x7bf230 | z_crc32_combine64 | |
10 | 0x7b8510 | z_deflate | |
11 | 0x7b9c70 | z_deflateBound | |
12 | 0x7b9770 | z_deflateCopy | |
13 | 0x7b9450 | z_deflateEnd | |
14 | 0x7b9ec0 | z_deflateInit2_ | |
15 | 0x7b9e90 | z_deflateInit_ | |
16 | 0x7b9ae0 | z_deflateParams | |
17 | 0x7b9e00 | z_deflatePrime | |
18 | 0x7b99d0 | z_deflateReset | |
19 | 0x7b95a0 | z_deflateSetDictionary | |
20 | 0x7b9e50 | z_deflateSetHeader | |
21 | 0x7b9c10 | z_deflateTune | |
22 | 0x7bf220 | z_get_crc_table | |
23 | 0x7bc1e0 | z_inflate | |
24 | 0x7be650 | z_inflateCopy | |
25 | 0x7be310 | z_inflateEnd | |
26 | 0x7beb10 | z_inflateGetHeader | |
27 | 0x7beb80 | z_inflateInit2_ | |
28 | 0x7beb60 | z_inflateInit_ | |
29 | 0x7bea90 | z_inflateMark | |
30 | 0x7be9f0 | z_inflatePrime | |
31 | 0x7be810 | z_inflateReset | |
32 | 0x7be920 | z_inflateReset2 | |
33 | 0x7be390 | z_inflateSetDictionary | |
34 | 0x7be4c0 | z_inflateSync | |
35 | 0x7bec90 | z_inflateSyncPoint | |
36 | 0x7bece0 | z_inflateUndermine | |
37 | 0x7cbcf0 | z_uncompress | |
38 | 0x877e80 | z_zError | |
39 | 0x877d70 | z_zlibCompileFlags | |
40 | 0x877d60 | z_zlibVersion |
offset | size | type | comment | |
---|---|---|---|---|
15c1 | 15 | HTM | # | |
d4d0bc | 1504 | PNG | (32 x 29) | # |
d4d6a0 | 16418 | PNG | (128 x 128) | # |
d516c6 | 2245 | PNG | (32 x 32) | # |
d51f8f | 1820 | PNG | (32 x 32) | # |
d526af | 2066 | PNG | (32 x 32) | # |
d52ec5 | 6520 | PNG | (128 x 117) | # |
d54841 | 413 | PNG | (32 x 32) | # |
d549e2 | 384 | PNG | (16 x 16) | # |
d54b66 | 4069 | PNG | (128 x 128) | # |
d55b4f | 9363 | PNG | (128 x 128) | # |
d57fe6 | 722 | PNG | (16 x 16) | # |
d582bc | 406 | PNG | (16 x 16) | # |
d58456 | 811 | PNG | (16 x 16) | # |
d58785 | 1712 | PNG | (32 x 32) | # |
d58e39 | 2205 | PNG | (32 x 32) | # |
d596da | 1006 | PNG | (32 x 32) | # |
d59acc | 1154 | PNG | (32 x 32) | # |
d59f52 | 456 | PNG | (16 x 16) | # |
d5a11e | 584 | PNG | (16 x 16) | # |
d5a36a | 633 | PNG | (32 x 32) | # |
d5a5e7 | 773 | PNG | (16 x 16) | # |
d5a8f0 | 9432 | PNG | (128 x 128) | # |
d5cdcc | 295 | PNG | (15 x 9) | # |
d5cef7 | 416 | PNG | (16 x 16) | # |
d5d09b | 5415 | PNG | (128 x 128) | # |
d5e5c6 | 668 | PNG | (16 x 14) | # |
d5e866 | 3296 | PNG | (128 x 128) | # |
d5f54a | 566 | PNG | (16 x 16) | # |
d5f784 | 481 | PNG | (16 x 16) | # |
d5f969 | 5074 | PNG | (128 x 128) | # |
d60d3f | 485 | PNG | (98 x 38) | # |
d60f28 | 548 | PNG | (32 x 32) | # |
d61150 | 870 | PNG | (16 x 16) | # |
d614ba | 499 | PNG | (16 x 16) | # |
d616b1 | 5155 | PNG | (128 x 128) | # |
d62ad8 | 1541 | PNG | (32 x 32) | # |
d630e1 | 1804 | PNG | (32 x 32) | # |
d637f1 | 366 | PNG | (16 x 16) | # |
d63963 | 1654 | PNG | (24 x 24) | # |
d63fdd | 5601 | PNG | (128 x 128) | # |
d655c2 | 866 | PNG | (32 x 32) | # |
d65928 | 826 | PNG | (16 x 16) | # |
d65c66 | 18075 | PNG | (128 x 128) | # |
d6a305 | 1246 | PNG | (32 x 32) | # |
d6a7e7 | 1103 | PNG | (35 x 34) | # |
d6ac3a | 4232 | PNG | (128 x 126) | # |
d6bcc6 | 14941 | PNG | (128 x 128) | # |
d6f727 | 1046 | PNG | (32 x 32) | # |
d6fb41 | 1192 | PNG | (32 x 32) | # |
d6ffed | 6554 | PNG | (128 x 116) | # |
d7198b | 1267 | PNG | (24 x 24) | # |
d71e82 | 602 | PNG | (16 x 16) | # |
d720e0 | 689 | PNG | (16 x 16) | # |
d72395 | 1590 | PNG | (32 x 32) | # |
d729cf | 1092 | PNG | (32 x 32) | # |
d72e17 | 780 | PNG | (32 x 32) | # |
d73127 | 701 | PNG | (16 x 15) | # |
d733e8 | 3997 | PNG | (128 x 128) | # |
d74389 | 370 | PNG | (16 x 16) | # |
d744ff | 5395 | PNG | (121 x 128) | # |
d75a16 | 1799 | PNG | (32 x 32) | # |
d76121 | 849 | PNG | (16 x 16) | # |
d76476 | 229 | PNG | (16 x 16) | # |
d7655f | 814 | PNG | (16 x 16) | # |
d76891 | 384 | PNG | (16 x 16) | # |
d76a15 | 799 | PNG | (16 x 14) | # |
d76d38 | 1019 | PNG | (32 x 32) | # |
d77137 | 1573 | PNG | (32 x 32) | # |
d77760 | 166 | PNG | (16 x 16) | # |
d7780a | 760 | PNG | (16 x 16) | # |
d77b06 | 4512 | PNG | (128 x 128) | # |
d78caa | 1445 | PNG | (32 x 29) | # |
d79253 | 419 | PNG | (16 x 16) | # |
d793fa | 231 | PNG | (16 x 16) | # |
d794e5 | 524 | PNG | (32 x 32) | # |
d796f5 | 2010 | PNG | (32 x 32) | # |
d79ed3 | 782 | PNG | (16 x 16) | # |
d7a1e5 | 396 | PNG | (16 x 16) | # |
d7a375 | 3094 | PNG | (128 x 128) | # |
d7af8f | 5414 | PNG | (128 x 128) | # |
d7c4b9 | 9550 | PNG | (128 x 128) | # |
d7ea0b | 185 | PNG | (32 x 32) | # |
d7eac8 | 802 | PNG | (16 x 16) | # |
d7edee | 1798 | PNG | (32 x 32) | # |
d7f4f8 | 7503 | PNG | (128 x 128) | # |
d8124b | 537 | PNG | (16 x 16) | # |
d81468 | 845 | PNG | (16 x 16) | # |
d817b9 | 549 | PNG | (32 x 32) | # |
d819e2 | 938 | PNG | (16 x 16) | # |
d81d90 | 9367 | PNG | (128 x 128) | # |
d8422b | 7039 | PNG | (128 x 128) | # |
d85dae | 176 | PNG | (32 x 32) | # |
d85e62 | 885 | PNG | (16 x 16) | # |
d861db | 611 | PNG | (15 x 16) | # |
d86442 | 883 | PNG | (32 x 32) | # |
d867b9 | 474 | PNG | (32 x 32) | # |
d86997 | 11250 | PNG | (128 x 128) | # |
d8958d | 583 | PNG | (16 x 16) | # |
d897d8 | 8109 | PNG | (128 x 128) | # |
d8b789 | 4398 | PNG | (128 x 128) | # |
d8c8bb | 570 | PNG | (16 x 16) | # |
d8caf9 | 1807 | PNG | (32 x 32) | # |
d8d20c | 570 | PNG | (32 x 32) | # |
d8d44a | 8093 | PNG | (128 x 128) | # |
d8f3eb | 423 | PNG | (16 x 16) | # |
d8f596 | 4743 | PNG | (128 x 128) | # |
d90821 | 1386 | PNG | (128 x 128) | # |
d90d8f | 1751 | PNG | (32 x 32) | # |
d9146a | 687 | PNG | (16 x 14) | # |
d9171d | 2016 | PNG | (32 x 32) | # |
d91f01 | 2431 | PNG | (32 x 32) | # |
d92884 | 1603 | PNG | (32 x 32) | # |
d92ecb | 442 | PNG | (16 x 16) | # |
d93089 | 817 | PNG | (16 x 16) | # |
d933be | 10765 | PNG | (128 x 128) | # |
d95dcf | 840 | PNG | (16 x 16) | # |
d9611b | 262 | PNG | (16 x 16) | # |
d96225 | 1279 | PNG | (30 x 32) | # |
d96728 | 12002 | PNG | (128 x 128) | # |
d9960e | 1092 | PNG | (32 x 32) | # |
d99a56 | 1878 | PNG | (32 x 32) | # |
d9a1b0 | 766 | PNG | (16 x 16) | # |
d9a4b2 | 713 | PNG | (32 x 32) | # |
d9a77f | 892 | PNG | (16 x 16) | # |
d9aaff | 490 | PNG | (16 x 16) | # |
d9aced | 629 | PNG | (16 x 16) | # |
d9af66 | 2075 | PNG | (128 x 128) | # |
d9b785 | 248 | PNG | (16 x 16) | # |
d9b881 | 516 | PNG | (14 x 10) | # |
d9ba89 | 578 | PNG | (16 x 16) | # |
d9bccf | 438 | PNG | (16 x 16) | # |
d9be89 | 406 | PNG | (16 x 16) | # |
d9c023 | 505 | PNG | (13 x 10) | # |
d9c220 | 516 | PNG | (16 x 16) | # |
d9e354 | 2991 | PNG | (64 x 64) | # |
e49957 | 479 | HTM | # | |
ead244 | 15793 | GIF | (0 x 18759) | # |
eb0ff5 | 4572171 | BIN | overlay data past EOF | # |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK