filenamesupport_ticket__PEFILE__OFFSET=0x504d.bin
size221696 (0x36200)
md5896908f5cb3c8e045eb45c367f7cfdd6
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
150204132
149307294
1313072922
147307294
1235072729
10198
132307295
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x56658356
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x377
Magic0x10b
LinkerVersion9.0
SizeOfCode0x6200
SizeOfInitializedData0x2fc00
SizeOfUninitializedData0
AddressOfEntryPoint0x6a36
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x39000
SizeOfHeaders0x400
CheckSum0x443ec
Subsystem2
DllCharacteristics0x4426
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x61c30x6200R-X CODE
.rdata0x80000x1752c0x17600R-- IDATA
.data0x200000x2dac0x2a00RW- IDATA
.rsrc0x230000x15ac80x15c00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1e1dc0x154
RESOURCE0x230000x15ac8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x83800x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1dd880x40
Bound_IAT00
IAT0x80000x354
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAPCLOSEDFOLDER2241252
BITMAPCURRENTFOLDER2241252
BITMAPDLL2321252
BITMAPEXECUTABLE2241252
BITMAPFLOPPY1921252
BITMAPHARD1921252
BITMAPIDB_PLAY13201252
BITMAPIDB_PREVIEW13201252
BITMAPIDB_STOP2321252
BITMAPKNOWNFILE2241252
BITMAPMENUBTN31601252
BITMAPMETRIC8081252
BITMAPMONITOR21301252
BITMAPNETWORK1921252
ICON#2275891252
ICON#3216401252
ICON#496401252
ICON#542641252
ICON#624401252
ICON#711281252
DIALOGIDD_IETEMPLATE1621252
DIALOGIDD_IETEMPLATE2801252
DIALOGREQUEST2841252
DIALOGSMTP2041252
STRING#405412921252
STRING#405513801252
STRING#405615001252
STRING#405713321252
STRING#405812961252
GROUP_ICON#169901252
VERSION#112121252
MANIFEST#15981252
idlangstring
648481003Retrieve images from a camera or scanner
648491003Rotate the image 180° clockwise
648501003Rotate the image 90° clockwise
648511003Rotate the image 90° counter-clockwise
648521003Rotate the selected image 180° clockwise
648531003Rotate the selected image 90° clockwise
648541003Rotate the selected image 90° counter-clockwise
648551003Rotate the selected object 180° clockwise
648561003Rotate the selected object 90° clockwise
648571003Rotate the selected object 90° counter-clockwise
648581003Save changes to this image to file
648591003Save this image to a new filename
648601003Select a circular area of your image
648611003Select a portion of your image of a similar color
648621003Select a rectangular area of your image
648631003Select all images in the grid
648641003Print the selected image to fit the page
648651003Print the selected images as a sheet of thumbnails
648661003Print this image at its original size
648671003Print this image to fit the page
648681003Prompt for an image file to load as a new layer
648691003Redo the last action that was undone
648701003Reduce the colors of the image to grayscale
648711003Remove all objects from the image
648721003Remove all parts of the image outside the current selection
648731003Remove the red-eye effect from the selection
648741003Remove the selected image
648751003Remove the selected layer from the image
648761003Remove the selected object from the image
648771003Remove the transparent borders from the selected layer
648781003Restart playback after it completes
648791003Retrieve an image from a camera or scanner
648801003Move the selected object forward
648811003Move the selected object to the clipboard
648821003Paste an image from the clipboard
648831003Paste object from the clipboard
648841003Paste the content of the clipboard as a new layer
648851003Perform color enhancement functions on the image
648861003Perform color enhancement functions on the selected image
648871003Perform an irregular selection of your image by clicking the mouse
648881003Perform an irregular selection of your image by dragging the mouse
648891003Perform effects on the image
648901003Perform effects on the selected image
648911003Playback these frames in sequence
648921003Position the selected layer behind all others
648931003Position the selected object behind all other objects
648941003Print all images of the grid as a sheet of thumbnails
648951003Print the selected image at its original size
648961003Flip the selected image from left to right
648971003Flip the selected image from top to bottom
648981003Free-hand paint an open polygon
648991003Invert the colors of the image
649001003Left-click the image to Zoom In. Right-click to Zoom Out
649011003Load an image from file
649021003Match the size of the background image to all of the objects it contains
649031003Measure a rectangular area
649041003Measure the distance between two points
649051003Merge all objects with the background layer
649061003Merge the selected object with the background layer
649071003Merges all layers of the image into a single one
649081003Move the mouse to scroll the image
649091003Move the selected layer backward
649101003Move the selected layer forward
649111003Move the selected object backward
649121003Display the animation of a GIF or AVI file
649131003Display the first frame of this image
649141003Display the image at full size (100% zoom)
649151003Display the image at the height of the window
649161003Display the image at the size of the window
649171003Display the image at the width of the window
649181003Display the image larger
649191003Display the image smaller
649201003Display the last frame of this image
649211003Display the next frame of this image
649221003Display the prior frame of this image
649231003Dynamically measure a distance
649241003Edit points of a polyline (hold Ctrl to remove a point)
649251003Equalizes the color histogram for the selected region
649261003Flip the image from left to right
649271003Flip the image from top to bottom
module_namehintordfunction_name
KERNEL32.dll1069TerminateProcess
KERNEL32.dll569GetStartupInfoA
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll701InterlockedExchange
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll332FreeLibrary
KERNEL32.dll453GetExitCodeProcess
KERNEL32.dll614GetTickCount
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll547GetProcessHeap
KERNEL32.dll669HeapAlloc
KERNEL32.dll486GetLastError
KERNEL32.dll961SetConsoleTitleA
KERNEL32.dll1205lstrlenA
KERNEL32.dll1199lstrcpyA
KERNEL32.dll1202lstrcpynA
KERNEL32.dll1206lstrlenW
KERNEL32.dll1200lstrcpyW
KERNEL32.dll753LoadLibraryA
KERNEL32.dll761LocalAlloc
KERNEL32.dll1170WritePrivateProfileStringA
KERNEL32.dll428GetCurrentThread
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll67CloseHandle
KERNEL32.dll671HeapCreate
KERNEL32.dll1190lstrcatA
KERNEL32.dll544GetProcAddress
KERNEL32.dll758LoadResource
KERNEL32.dll1056SizeofResource
KERNEL32.dll1057Sleep
KERNEL32.dll127CreateFileW
KERNEL32.dll464GetFileInformationByHandle
KERNEL32.dll271FileTimeToLocalFileTime
KERNEL32.dll272FileTimeToSystemTime
KERNEL32.dll531GetOEMCP
KERNEL32.dll338GetACP
KERNEL32.dll698InterlockedCompareExchange
USER32.dll209EnableWindow
USER32.dll601SendDlgItemMessageA
USER32.dll596ScreenToClient
USER32.dll69ClientToScreen
USER32.dll193DrawMenuBar
USER32.dll684SetWindowTextW
USER32.dll160DestroyWindow
USER32.dll657SetRect
USER32.dll9AppendMenuA
USER32.dll101CreatePopupMenu
USER32.dll490LookupIconIdFromDirectory
USER32.dll211EndDialog
USER32.dll775wsprintfA
USER32.dll239FillRect
USER32.dll292GetFocus
USER32.dll454IsWindowEnabled
USER32.dll383GetWindowDC
USER32.dll696ShowWindow
USER32.dll517MoveWindow
USER32.dll284GetDesktopWindow
USER32.dll191DrawIcon
USER32.dll296GetIconInfo
USER32.dll511MessageBoxW
USER32.dll464LoadBitmapA
USER32.dll588ReleaseDC
USER32.dll269GetClientRect
USER32.dll630SetDlgItemTextA
USER32.dll484LoadStringW
USER32.dll152DeleteMenu
USER32.dll366GetSystemMenu
USER32.dll241FindWindowExA
USER32.dll542PostMessageA
USER32.dll323GetMenuItemID
USER32.dll328GetMenuStringA
USER32.dll322GetMenuItemCount
USER32.dll396GetWindowTextA
USER32.dll420InsertMenuItemA
USER32.dll324GetMenuItemInfoA
USER32.dll146DefMDIChildProcA
USER32.dll426InvalidateRect
USER32.dll606SendMessageA
USER32.dll676SetWindowLongA
USER32.dll341GetParent
USER32.dll14BeginPaint
USER32.dll213EndPaint
USER32.dll316GetMenu
USER32.dll644SetMenuItemInfoA
USER32.dll158DestroyMenu
USER32.dll634SetForegroundWindow
USER32.dll281GetCursorPos
USER32.dll235EnumWindows
USER32.dll282GetDC
USER32.dll392GetWindowRect
USER32.dll385GetWindowLongA
USER32.dll287GetDlgItem
USER32.dll442IsDlgButtonChecked
GDI32.dll667StretchDIBits
GDI32.dll64CreateHalftonePalette
GDI32.dll487GetPaletteEntries
GDI32.dll45CreateCompatibleBitmap
GDI32.dll46CreateCompatibleDC
GDI32.dll82CreateSolidBrush
GDI32.dll437GetDeviceCaps
GDI32.dll482GetObjectA
GDI32.dll208DeleteObject
GDI32.dll607SelectPalette
GDI32.dll579RealizePalette
GDI32.dll51CreateDIBSection
GDI32.dll205DeleteDC
GDI32.dll77CreateRectRgn
GDI32.dll33CombineRgn
GDI32.dll284ExcludeClipRect
GDI32.dll604SelectClipRgn
GDI32.dll606SelectObject
COMDLG32.dll10GetFileTitleW
ADVAPI32.dll282FreeSid
ADVAPI32.dll258EqualSid
ADVAPI32.dll31AllocateAndInitializeSid
ADVAPI32.dll340GetTokenInformation
ADVAPI32.dll497OpenProcessToken
ADVAPI32.dll502OpenThreadToken
ADVAPI32.dll351GetUserNameW
SHELL32.dll30DragQueryFileA
SHELL32.dll28DragFinish
SHELL32.dll27DragAcceptFiles
SHELL32.dll186SHGetFileInfoW
SHELL32.dll290Shell_NotifyIconA
SHELL32.dll727
NETAPI32.dll111NetApiBufferFree
NETAPI32.dll256NetUserGetInfo
MSVCP90.dll607public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void)

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

MSVCP90.dll367public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &)

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

MSVCP90.dll374public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(char const *)

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

IPHLPAPI.DLL112GetTcpStatistics
SHLWAPI.dll284StrCmpNIA
COMCTL32.dll99ImageList_GetImageCount
COMCTL32.dll77ImageList_Add
COMCTL32.dll83ImageList_Create
COMCTL32.dll100ImageList_GetImageInfo
COMCTL32.dll89ImageList_Draw
ACTIVEDS.dll14
RPCRT4.dll503UuidFromStringA
OLEACC.dll4CreateStdAccessibleObject
UxTheme.dll65OpenThemeData
UxTheme.dll52GetThemeSysSize
UxTheme.dll9DrawThemeBackground
UxTheme.dll8CloseThemeData
MSVCR90.dll796_onexit
MSVCR90.dll630_lock
MSVCR90.dll150__dllonexit
MSVCR90.dll998_unlock
MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll54public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll224__set_app_type
MSVCR90.dll362_encode_pointer
MSVCR90.dll207__p__fmode
MSVCR90.dll203__p__commode
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll227__setusermatherr
MSVCR90.dll316_configthreadlocale
MSVCR90.dll517_initterm_e
MSVCR90.dll516_initterm
MSVCR90.dll253_acmdln
MSVCR90.dll1228exit
MSVCR90.dll549_ismbblead
MSVCR90.dll352_decode_pointer
MSVCR90.dll380_exit
MSVCR90.dll300_cexit
MSVCR90.dll159__getmainargs
MSVCR90.dll277_amsg_exit
MSVCR90.dll1307malloc
MSVCR90.dll1242fopen
MSVCR90.dll1263fwrite
MSVCR90.dll1231fclose
MSVCR90.dll1250fread
MSVCR90.dll1215atoi
MSVCR90.dll1321memmove_s
MSVCR90.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR90.dll522_invalid_parameter_noinfo
MSVCR90.dll8public: __thiscall std::exception::exception(class std::exception const &)

??0exception@std@@QAE@ABV01@@Z

MSVCR90.dll90_CxxThrowException
MSVCR90.dll1322memset
MSVCR90.dll916_strdate
MSVCR90.dll767_mbsstr
MSVCR90.dll115__CxxFrameHandler3
MSVCR90.dll9public: __thiscall std::exception::exception(void)

??0exception@std@@QAE@XZ

MSVCR90.dll371_except_handler4_common
MSVCR90.dll523_invoke_watson
MSVCR90.dll102_XcptFilter
MSVCR90.dll613_itoa
MSVCR90.dll17void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR90.dll13public: virtual __thiscall std::exception::~exception(void)

??1exception@std@@UAE@XZ

MSVCR90.dll70public: virtual char const * __thiscall std::exception::what(void)const

?what@exception@std@@UBEPBDXZ

MSVCR90.dll6public: __thiscall std::exception::exception(char const * const &)

??0exception@std@@QAE@ABQBD@Z

MSVCR90.dll319_controlfp_s

StringTable 03EB04b0

CompanyNameRay Hinchliffe
FileVersion8.4.2.1
Assembly Version8.4.2.1
FileDescriptionEset Edit Doing Inference Reservation
LanguagesEnglish
InternalNameKeroseneVme64
OriginalFilenameKeroseneVme64
LegalTrademarksCopyright ©. All rights reserved. Ray Hinchliffe
LegalCopyrightCopyright ©. All rights reserved. Ray Hinchliffe
CommentsEset Edit Doing Inference Reservation
PrivateBuild8.4.2.1
ProductNameKeroseneVme64
ProductVersion8.4.2.1

VS_FIXEDFILEINFO

FileVersion8.4.2.1
ProductVersion8.4.2.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0221696EXE12/07/2015 13:02:14#
15c115HTM#
237c027589PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER