ssoi.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	ssoi.exe
size	192512 (0x2f000)
md5	b164b6db6245a26ff81b59f90364b111

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x9090
blocks_in_file	0x9090
num_relocs	0x9090
header_paragraphs	0x9090
min_extra_paragraphs	0x9090
max_extra_paragraphs	0x9090
ss	0x9090
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x5152ee33
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x21000
SizeOfInitializedData	0x13000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x20681
BaseOfCode	0x1000
BaseOfData	0x22000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x35000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x20672	0x21000	R-X CODE
.rdata	0x22000	0x30d8	0x4000	R-- IDATA
.data	0x26000	0xdcbc	0x8000	RW- IDATA
.rsrc	0x34000	0x1000	0x1000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x246b8	0xb4
RESOURCE	0x34000	0x504
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x22000	0x1ac
Delay_IAT	0x24600	0x40
CLR_Header	0	0

show previews

type	name	size
ICON	#1	744
ICON	#2	296
GROUP_ICON	#106	34

module_name	hint	ord	function_name
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	106		__p__commode
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	183		_controlfp
MSVCRT.dll	576		calloc
MSVCRT.dll	662		memcmp
MSVCRT.dll	663		memcpy
MSVCRT.dll	166		_beginthreadex
MSVCRT.dll	459		_strupr
MSVCRT.dll	739		wcscpy
MSVCRT.dll	573		atoi
MSVCRT.dll	753		wcstombs
MSVCRT.dll	742		wcslen
MSVCRT.dll	659		mbstowcs
MSVCRT.dll	703		strncat
MSVCRT.dll	732		vsprintf
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	599		fopen
MSVCRT.dll	614		fwrite
MSVCRT.dll	588		fclose
MSVCRT.dll	707		strrchr
MSVCRT.dll	657		malloc
MSVCRT.dll	241		_ftol
MSVCRT.dll	664		memmove
MSVCRT.dll	696		strcmp
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	65		_CxxThrowException
MSVCRT.dll	698		strcpy
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	678		rand
MSVCRT.dll	142		_access
MSVCRT.dll	15		void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
MSVCRT.dll	16		void __cdecl operator delete(void *) ??3@YAXPAX@Z
MSVCRT.dll	694		strcat
MSVCRT.dll	606		free
MSVCRT.dll	702		strlen
MSVCRT.dll	271		_initterm
MSVCRT.dll	88		__getmainargs
MSVCRT.dll	143		_acmdln
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	211		_exit
MSVCRT.dll	14		public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
MSVCRT.dll	390		_onexit
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	585		exit
MSVCRT.dll	665		memset
KERNEL32.dll	248		FreeLibrary
KERNEL32.dll	600		LocalAlloc
KERNEL32.dll	553		InterlockedExchange
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	604		LocalFree
KERNEL32.dll	369		GetLastError
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	972		lstrlenA
KERNEL32.dll	629		MultiByteToWideChar
KERNEL32.dll	679		RaiseException
KERNEL32.dll	552		InterlockedDecrement
KERNEL32.dll	622		MoveFileA
KERNEL32.dll	355		GetFileSize
KERNEL32.dll	897		VirtualAlloc
KERNEL32.dll	693		ReadFile
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	210		FindFirstFileA
KERNEL32.dll	932		WriteFile
KERNEL32.dll	206		FindClose
KERNEL32.dll	854		Sleep
KERNEL32.dll	594		LoadLibraryA
KERNEL32.dll	416		GetProcAddress
USER32.dll	429		IsWindow
USER32.dll	571		SendMessageA
USER32.dll	96		CreateWindowExA
ADVAPI32.dll	459		RegCloseKey
ADVAPI32.dll	497		RegQueryInfoKeyA
ADVAPI32.dll	492		RegOpenKeyExA
ADVAPI32.dll	481		RegEnumValueA
MSVCP60.dll	1056		public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::assign(char const *, unsigned int) ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
MSVCP60.dll	1633		public: static unsigned int const std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::npos ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
MSVCP60.dll	1052		public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::assign(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, unsigned int, unsigned int) ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
MSVCP60.dll	535		class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > __cdecl std::operator+(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, char const *) ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
MSVCP60.dll	813		char const `private: static char const * __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Nullstr(void)'::`2'::_C ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
MSVCP60.dll	233		public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
MSVCP60.dll	269		public: __thiscall std::_Winit::~_Winit(void) ??1_Winit@std@@QAE@XZ
MSVCP60.dll	165		public: __thiscall std::_Winit::_Winit(void) ??0_Winit@std@@QAE@XZ
MSVCP60.dll	265		public: __thiscall std::ios_base::Init::~Init(void) ??1Init@ios_base@std@@QAE@XZ
MSVCP60.dll	158		public: __thiscall std::ios_base::Init::Init(void) ??0Init@ios_base@std@@QAE@XZ
MSVCP60.dll	1016		private: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Tidy(bool) ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
ole32.dll	6		CLSIDFromProgID
ole32.dll	8		CLSIDFromString
ole32.dll	253		OleRun
ole32.dll	16		CoCreateInstance
ole32.dll	59		CoInitialize
ole32.dll	105		CoUninitialize
OLEAUT32.dll		9
OLEAUT32.dll		2
OLEAUT32.dll		6
OLEAUT32.dll		200
MSVFW32.dll	37		ICSendMessage

show previews

offset	size	type	comment
0	192512	EXE	03/27/2013 13:03:47	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] DOS stub offset beyond EOF: 592128