gta_sa.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	gta_sa.exe
size	14386176 (0xdb8400)
md5	b07d5e4db1aeea010ceadf53e9a52387

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xb
TimeDateStamp	0x4370f18a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x12f
Magic	0x10b
LinkerVersion	7.0
SizeOfCode	0xac8000
SizeOfInitializedData	0x6ae000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x4245b0
BaseOfCode	0x1000
BaseOfData	0x458000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x400
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1177000
SizeOfHeaders	0x400
CheckSum	0xdba372
Subsystem	2
DllCharacteristics	0x100
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x200000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x456000	0x456000	R-X CODE
_rwcseg	0x457000	0x1000	0x800	R-X CODE
.rdata	0x458000	0x4c000	0x4b400	R-- IDATA
.data	0x4a4000	0x3fa000	0x40000	RW- IDATA
_TEXT_HA	0x89e000	0x11000	0x10c00	RW- IDATA
_rwdseg	0x8af000	0x1000	0x400	RW- IDATA
.rsrc	0x8b0000	0x1000	0x800	R-- IDATA
.text	0x8b1000	0x64a000	0x649c00	RWX CODE
.init	0xefb000	0x6000	0x5c00	RWX CODE
.data	0xf01000	0x255000	0x254400	RWX IDATA
.securom	0x1156000	0x21000	0x21000	RWX CODE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x4a2000	0xc8
RESOURCE	0x8b0000	0x520
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x1156368	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x458000	0x378
Delay_IAT	0x4a1ee0	0xa0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	744
DIALOG	#104	302
GROUP_ICON	#100	20

module_name	hint	ord	function_name
WINMM.dll	160		timeEndPeriod
WINMM.dll	163		timeGetTime
WINMM.dll	159		timeBeginPeriod
WINMM.dll	161		timeGetDevCaps
vorbisfile.dll	9		ov_open_callbacks
vorbisfile.dll	2		ov_clear
vorbisfile.dll	33		ov_time_total
vorbisfile.dll	32		ov_time_tell
vorbisfile.dll	20		ov_read
vorbisfile.dll	7		ov_info
vorbisfile.dll	28		ov_time_seek
WS2_32.dll		16
WS2_32.dll		19
WS2_32.dll		3
WS2_32.dll		9
WS2_32.dll		11
WS2_32.dll		4
WS2_32.dll		111
WS2_32.dll		115
WS2_32.dll		116
WS2_32.dll		23
EAX.DLL		6
EAX.DLL	49203		5f 83 c4 0c c3 90 90 90 90 90 90 90 90 90 a1 e8 \|_...............\| 7f c8 \|.. \|
KERNEL32.dll	859		VirtualProtect
KERNEL32.dll	380		GetOEMCP
KERNEL32.dll	235		GetACP
KERNEL32.dll	526		IsBadCodePtr
KERNEL32.dll	529		IsBadReadPtr
KERNEL32.dll	418		GetStringTypeW
KERNEL32.dll	415		GetStringTypeA
KERNEL32.dll	539		IsValidCodePage
KERNEL32.dll	541		IsValidLocale
KERNEL32.dll	161		EnumSystemLocalesA
KERNEL32.dll	349		GetLocaleInfoA
KERNEL32.dll	241		GetCPInfo
KERNEL32.dll	307		GetDateFormatA
KERNEL32.dll	861		VirtualQuery
KERNEL32.dll	446		GetTickCount
KERNEL32.dll	359		GetModuleHandleA
KERNEL32.dll	393		GetProcAddress
KERNEL32.dll	558		LoadLibraryA
KERNEL32.dll	333		GetFileSize
KERNEL32.dll	44		CloseHandle
KERNEL32.dll	568		LocalFree
KERNEL32.dll	870		WaitForSingleObjectEx
KERNEL32.dll	381		GetOverlappedResult
KERNEL32.dll	869		WaitForSingleObject
KERNEL32.dll	670		ReleaseSemaphore
KERNEL32.dll	753		SetFilePointer
KERNEL32.dll	346		GetLastError
KERNEL32.dll	656		ReadFile
KERNEL32.dll	766		SetLastError
KERNEL32.dll	74		CreateFileA
KERNEL32.dll	684		ResumeThread
KERNEL32.dll	792		SetThreadPriority
KERNEL32.dll	442		GetThreadPriority
KERNEL32.dll	305		GetCurrentThread
KERNEL32.dll	101		CreateThread
KERNEL32.dll	564		LocalAlloc
KERNEL32.dll	97		CreateSemaphoreA
KERNEL32.dll	313		GetDiskFreeSpaceA
KERNEL32.dll	809		Sleep
KERNEL32.dll	638		QueryPerformanceCounter
KERNEL32.dll	522		InterlockedIncrement
KERNEL32.dll	518		InterlockedDecrement
KERNEL32.dll	920		lstrcpyA
KERNEL32.dll	911		lstrcatA
KERNEL32.dll	926		lstrlenA
KERNEL32.dll	118		DeleteCriticalSection
KERNEL32.dll	811		SuspendThread
KERNEL32.dll	557		LeaveCriticalSection
KERNEL32.dll	139		EnterCriticalSection
KERNEL32.dll	514		InitializeCriticalSection
KERNEL32.dll	593		MultiByteToWideChar
KERNEL32.dll	120		DeleteFileA
KERNEL32.dll	818		TerminateThread
KERNEL32.dll	193		FindClose
KERNEL32.dll	206		FindNextFileA
KERNEL32.dll	328		GetFileAttributesA
KERNEL32.dll	197		FindFirstFileA
KERNEL32.dll	229		FreeLibrary
KERNEL32.dll	639		QueryPerformanceFrequency
KERNEL32.dll	616		OutputDebugStringA
KERNEL32.dll	348		GetLocalTime
KERNEL32.dll	66		CreateDirectoryA
KERNEL32.dll	450		GetUserDefaultLCID
KERNEL32.dll	780		SetStdHandle
KERNEL32.dll	70		CreateEventA
KERNEL32.dll	458		GetVolumeInformationA
KERNEL32.dll	317		GetDriveTypeA
KERNEL32.dll	351		GetLogicalDriveStringsA
KERNEL32.dll	747		SetErrorMode
KERNEL32.dll	483		GlobalMemoryStatus
KERNEL32.dll	456		GetVersionExA
KERNEL32.dll	253		GetCommandLineA
KERNEL32.dll	339		GetFullPathNameA
KERNEL32.dll	873		WideCharToMultiByte
KERNEL32.dll	917		lstrcmpiA
KERNEL32.dll	424		GetSystemInfo
KERNEL32.dll	537		IsProcessorFeaturePresent
KERNEL32.dll	577		LockResource
KERNEL32.dll	563		LoadResource
KERNEL32.dll	808		SizeofResource
KERNEL32.dll	212		FindResourceA
KERNEL32.dll	215		FindResourceW
KERNEL32.dll	580		MapViewOfFile
KERNEL32.dll	75		CreateFileMappingA
KERNEL32.dll	77		CreateFileW
KERNEL32.dll	837		UnmapViewOfFile
KERNEL32.dll	669		ReleaseMutex
KERNEL32.dll	87		CreateMutexA
KERNEL32.dll	304		GetCurrentProcessId
KERNEL32.dll	422		GetSystemDirectoryA
KERNEL32.dll	357		GetModuleFileNameA
KERNEL32.dll	227		FreeEnvironmentStringsA
KERNEL32.dll	834		UnhandledExceptionFilter
KERNEL32.dll	532		IsBadWritePtr
KERNEL32.dll	853		VirtualAlloc
KERNEL32.dll	856		VirtualFree
KERNEL32.dll	497		HeapCreate
KERNEL32.dll	499		HeapDestroy
KERNEL32.dll	336		GetFileType
KERNEL32.dll	414		GetStdHandle
KERNEL32.dll	762		SetHandleCount
KERNEL32.dll	219		FlushFileBuffers
KERNEL32.dll	545		LCMapStringW
KERNEL32.dll	544		LCMapStringA
KERNEL32.dll	886		WriteFile
KERNEL32.dll	179		FatalAppExitA
KERNEL32.dll	797		SetUnhandledExceptionFilter
KERNEL32.dll	507		HeapSize
KERNEL32.dll	822		TlsAlloc
KERNEL32.dll	824		TlsGetValue
KERNEL32.dll	825		TlsSetValue
KERNEL32.dll	306		GetCurrentThreadId
KERNEL32.dll	823		TlsFree
KERNEL32.dll	412		GetStartupInfoA
KERNEL32.dll	505		HeapReAlloc
KERNEL32.dll	495		HeapAlloc
KERNEL32.dll	501		HeapFree
KERNEL32.dll	428		GetSystemTimeAsFileTime
KERNEL32.dll	303		GetCurrentProcess
KERNEL32.dll	817		TerminateProcess
KERNEL32.dll	171		ExitProcess
KERNEL32.dll	689		RtlUnwind
KERNEL32.dll	643		RaiseException
KERNEL32.dll	519		InterlockedExchange
KERNEL32.dll	228		FreeEnvironmentStringsW
KERNEL32.dll	321		GetEnvironmentStringsW
KERNEL32.dll	712		SetConsoleCtrlHandler
KERNEL32.dll	447		GetTimeFormatA
KERNEL32.dll	50		CompareStringA
KERNEL32.dll	51		CompareStringW
KERNEL32.dll	745		SetEnvironmentVariableA
KERNEL32.dll	449		GetTimeZoneInformation
KERNEL32.dll	744		SetEndOfFile
KERNEL32.dll	350		GetLocaleInfoW
KERNEL32.dll	301		GetCurrentDirectoryA
KERNEL32.dll	419		GetSystemDefaultLCID
KERNEL32.dll	740		SetCurrentDirectoryA
KERNEL32.dll	319		GetEnvironmentStrings
USER32.dll	728		wsprintfA
USER32.dll	422		IsIconic
USER32.dll	366		GetWindowLongA
USER32.dll	300		GetMenu
USER32.dll	2		AdjustWindowRectEx
USER32.dll	665		SystemParametersInfoA
USER32.dll	153		DestroyWindow
USER32.dll	640		SetWindowLongA
USER32.dll	658		ShowWindow
USER32.dll	443		LoadIconA
USER32.dll	439		LoadCursorA
USER32.dll	534		RegisterClassA
USER32.dll	553		ReleaseCapture
USER32.dll	371		GetWindowPlacement
USER32.dll	634		SetTimer
USER32.dll	65		ClipCursor
USER32.dll	513		PostQuitMessage
USER32.dll	589		SetCursor
USER32.dll	580		SetCapture
USER32.dll	142		DefWindowProcA
USER32.dll	467		MapVirtualKeyA
USER32.dll	699		UpdateWindow
USER32.dll	289		GetKeyState
USER32.dll	227		FindWindowA
USER32.dll	599		SetForegroundWindow
USER32.dll	509		PeekMessageA
USER32.dll	161		DispatchMessageA
USER32.dll	682		TranslateMessage
USER32.dll	290		GetKeyboardLayout
USER32.dll	158		DialogBoxParamA
USER32.dll	198		EndDialog
USER32.dll	273		GetDlgItem
USER32.dll	598		SetFocus
USER32.dll	571		SendMessageA
USER32.dll	643		SetWindowPos
USER32.dll	1		AdjustWindowRect
USER32.dll	96		CreateWindowExA
USER32.dll	654		ShowCursor
USER32.dll	372		GetWindowRect
USER32.dll	476		MessageBoxA
USER32.dll	646		SetWindowTextA
USER32.dll	64		ClientToScreen
USER32.dll	591		SetCursorPos
USER32.dll	255		GetClientRect
GDI32.dll	143		DeleteObject
ADVAPI32.dll	456		RegCloseKey
ADVAPI32.dll	460		RegCreateKeyExA
ADVAPI32.dll	481		RegOpenKeyExA
ADVAPI32.dll	491		RegQueryValueExA
ADVAPI32.dll	480		RegOpenKeyA
ADVAPI32.dll	504		RegSetValueExA
ole32.dll	16		CoCreateInstance
ole32.dll	57		CoInitialize
ole32.dll	101		CoUninitialize

show previews

offset	size	type	comment
15c1	15	HTM		#
c988fc	172032	EXE	04/15/2005 10:59:42	#
cc2934	6432	EXE	04/15/2005 10:56:36	#
cc592c	98304	DLL	04/15/2005 11:02:53	#
ce283c	122880	EXE	04/15/2005 11:03:00	#
d01bdc	45056	DLL	09/05/2002 06:32:00	#
d0cbdc	702500	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK