bin.ex

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	bin.ex_
size	188416 (0x2e000)
md5	c8f1566d867c6df8d9ae4b12b56f5bb5

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
10	8168	11
14	7299	1
4	8168	2
1	0	230
19	8034	17
0	0	10
6	1720	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x54478344
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x29000
SizeOfInitializedData	0x4000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x29c86
BaseOfCode	0x1000
BaseOfData	0x2a000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2e000
SizeOfHeaders	0x1000
CheckSum	0x312df
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x28e70	0x29000	R-X CODE
.rdata	0x2a000	0x19a0	0x2000	R-- IDATA
.data	0x2c000	0x21c	0x1000	RW- IDATA
.rsrc	0x2d000	0x1c0	0x1000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x2a4dc	0xdc
RESOURCE	0x2d000	0x1c0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2a000	0x3dc
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	346	0

module_name	hint	function_name
WINMM.dll	149	timeEndPeriod
WINMM.dll	13	PlaySoundW
GDI32.dll	42	CreateCompatibleDC
GDI32.dll	505	SetWindowExtEx
GDI32.dll	468	SetDCPenColor
GDI32.dll	292	GetDIBits
GDI32.dll	66	CreatePalette
GDI32.dll	461	SetBkColor
GDI32.dll	293	GetDeviceCaps
GDI32.dll	337	GetObjectW
GDI32.dll	426	PtVisible
GDI32.dll	499	SetTextColor
GDI32.dll	342	GetPixel
GDI32.dll	518	TextOutW
GDI32.dll	495	SetStretchBltMode
GDI32.dll	388	LineTo
GDI32.dll	374	GetTextMetricsW
GDI32.dll	80	DeleteDC
GDI32.dll	521	UnrealizeObject
GDI32.dll	361	GetTextColor
GDI32.dll	83	DeleteObject
GDI32.dll	69	CreatePenIndirect
GDI32.dll	392	MoveToEx
KERNEL32.dll	636	SetStdHandle
KERNEL32.dll	523	RaiseException
KERNEL32.dll	428	InterlockedCompareExchange
KERNEL32.dll	716	WaitForMultipleObjects
KERNEL32.dll	175	FormatMessageA
KERNEL32.dll	409	HeapAlloc
KERNEL32.dll	247	GetCurrentProcess
KERNEL32.dll	278	GetFullPathNameA
KERNEL32.dll	651	SetUnhandledExceptionFilter
KERNEL32.dll	218	GetConsoleCP
KERNEL32.dll	625	SetLastError
KERNEL32.dll	452	LoadLibraryExW
KERNEL32.dll	263	GetEnvironmentStringsA
KERNEL32.dll	429	InterlockedDecrement
KERNEL32.dll	703	VirtualFree
KERNEL32.dll	185	GetACP
KERNEL32.dll	305	GetOEMCP
KERNEL32.dll	450	LoadLibraryA
KERNEL32.dll	250	GetCurrentThreadId
KERNEL32.dll	125	ExitProcess
KERNEL32.dll	347	GetSystemInfo
KERNEL32.dll	136	FileTimeToDosDateTime
KERNEL32.dll	661	SizeofResource
KERNEL32.dll	385	GlobalAlloc
KERNEL32.dll	52	CreateFileA
KERNEL32.dll	282	GetLastError
KERNEL32.dll	426	InitializeCriticalSection
KERNEL32.dll	768	lstrcmpiW
KERNEL32.dll	349	GetSystemTime
KERNEL32.dll	318	GetProcAddress
KERNEL32.dll	676	TlsGetValue
KERNEL32.dll	443	IsDebuggerPresent
KERNEL32.dll	372	GetVersion
KERNEL32.dll	375	GetVolumeInformationA
KERNEL32.dll	27	CloseHandle
KERNEL32.dll	688	UnmapViewOfFile
KERNEL32.dll	292	GetModuleFileNameA
KERNEL32.dll	180	FreeLibrary
KERNEL32.dll	283	GetLocalTime
KERNEL32.dll	351	GetSystemTimeAsFileTime
KERNEL32.dll	249	GetCurrentThread
KERNEL32.dll	403	GlobalUnlock
KERNEL32.dll	248	GetCurrentProcessId
KERNEL32.dll	202	GetCommandLineA
KERNEL32.dll	484	MultiByteToWideChar
KERNEL32.dll	685	UnhandledExceptionFilter
KERNEL32.dll	427	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	742	WritePrivateProfileStringW
KERNEL32.dll	699	VirtualAlloc
KERNEL32.dll	430	InterlockedExchange
KERNEL32.dll	374	GetVersionExW
KERNEL32.dll	336	GetStartupInfoA
KERNEL32.dll	662	Sleep
KERNEL32.dll	734	WriteConsoleW
KERNEL32.dll	518	QueryPerformanceCounter
KERNEL32.dll	294	GetModuleHandleA
KERNEL32.dll	559	RtlUnwind
KERNEL32.dll	418	HeapReAlloc
KERNEL32.dll	670	TerminateProcess
KERNEL32.dll	487	OpenEventW
KERNEL32.dll	411	HeapCreate
KERNEL32.dll	616	SetFileAttributesA
KERNEL32.dll	365	GetTickCount
comdlg32.dll	12	GetSaveFileNameW
comdlg32.dll	10	GetOpenFileNameW
USER32.dll	180	EmptyClipboard
USER32.dll	657	UpdateWindow
USER32.dll	342	GetWindowLongA
USER32.dll	142	DestroyWindow
USER32.dll	478	PostMessageA
USER32.dll	135	DeleteMenu
USER32.dll	373	InsertMenuItemA
USER32.dll	685	wsprintfW
USER32.dll	255	GetDesktopWindow
USER32.dll	213	FindWindowA
USER32.dll	400	IsWindowEnabled
USER32.dll	463	OemToCharBuffA
USER32.dll	307	GetNextDlgTabItem
USER32.dll	132	DefWindowProcA
USER32.dll	240	GetClientRect
USER32.dll	35	CharLowerBuffW
USER32.dll	522	ScreenToClient
USER32.dll	90	CreateWindowExW
USER32.dll	378	InvalidateRect
USER32.dll	559	SetFocus
USER32.dll	52	CheckMenuItem
USER32.dll	686	wvsprintfA
USER32.dll	309	GetParent
USER32.dll	532	SendMessageA
USER32.dll	441	MapWindowPoints
USER32.dll	480	PostQuitMessage
USER32.dll	403	IsZoomed
USER32.dll	353	GetWindowTextW
USER32.dll	405	KillTimer
USER32.dll	636	TrackPopupMenu
USER32.dll	581	SetRectEmpty
USER32.dll	396	IsIconic
USER32.dll	593	SetThreadDesktop
USER32.dll	50	CharUpperW
USER32.dll	230	GetCaretPos
USER32.dll	470	OpenIcon
USER32.dll	354	GetWindowThreadProcessId
USER32.dll	427	LoadStringA
USER32.dll	490	PtInRect
USER32.dll	47	CharUpperA
USER32.dll	514	ReleaseCapture
USER32.dll	256	GetDialogBaseUnits
USER32.dll	466	OffsetRect
USER32.dll	338	GetWindow
USER32.dll	150	DispatchMessageW
USER32.dll	58	ClientToScreen
USER32.dll	601	SetWindowLongW
USER32.dll	78	CreateDialogIndirectParamW
USER32.dll	451	MessageBoxW
USER32.dll	614	ShowCursor
USER32.dll	324	GetSysColorBrush
USER32.dll	537	SendMessageW
USER32.dll	550	SetCursor
USER32.dll	302	GetMessageW
USER32.dll	258	GetDlgItem
USER32.dll	212	FillRect
USER32.dll	12	BeginPaint
USER32.dll	141	DestroyMenu
USER32.dll	594	SetTimer
USER32.dll	650	UnpackDDElParam
USER32.dll	515	ReleaseDC
USER32.dll	399	IsWindow
USER32.dll	570	SetMenuItemInfoA
USER32.dll	253	GetDC
USER32.dll	642	TranslateMessage
USER32.dll	402	IsWindowVisible
USER32.dll	149	DispatchMessageA
USER32.dll	228	GetCapture
USER32.dll	21	CallNextHookEx
USER32.dll	326	GetSystemMetrics
USER32.dll	290	GetMenuItemCount
USER32.dll	343	GetWindowLongW
USER32.dll	348	GetWindowRect
USER32.dll	216	FindWindowW
USER32.dll	428	LoadStringW
USER32.dll	252	GetCursorPos
USER32.dll	445	MessageBeep
USER32.dll	8	AppendMenuW
USER32.dll	88	CreatePopupMenu
USER32.dll	43	CharToOemA
USER32.dll	467	OpenClipboard
USER32.dll	183	EnableWindow
USER32.dll	560	SetForegroundWindow
USER32.dll	502	RegisterClipboardFormatA
USER32.dll	410	LoadCursorA
USER32.dll	148	DialogBoxParamW
USER32.dll	606	SetWindowTextA
ole32.dll	34	CoGetMalloc
ole32.dll	269	StringFromGUID2
ole32.dll	83	CoUninitialize
ole32.dll	102	CreateStreamOnHGlobal
ole32.dll	158	HWND_UserSize
ole32.dll	67	CoReleaseMarshalData
ole32.dll	45	CoInitialize
ole32.dll	79	CoTaskMemFree
ole32.dll	13	CoCreateInstance
ole32.dll	216	OleRun
SHELL32.dll	117	ShellExecuteExW
SHELL32.dll	75	SHGetMalloc
SHELL32.dll	118	ShellExecuteW
SHELL32.dll	69	SHGetDesktopFolder
SHELL32.dll	72	SHGetFileInfoA
SHELL32.dll	114	ShellExecuteA
SHELL32.dll	81	SHGetPathFromIDListW
SHELL32.dll	121	Shell_NotifyIconA
SHELL32.dll	63	SHFileOperationA
SHELL32.dll	83	SHGetSpecialFolderLocation
SHELL32.dll	73	SHGetFileInfoW
SHELL32.dll	22	DragQueryFileW
ADVAPI32.dll	322	OpenProcessToken
ADVAPI32.dll	379	RegQueryValueExA
ADVAPI32.dll	347	RegCloseKey
ADVAPI32.dll	371	RegOpenKeyExW
MSVCRT.dll	715	swprintf
MSVCRT.dll	707	strrchr
MSVCRT.dll	143	_acmdln
MSVCRT.dll	106	__p__commode
MSVCRT.dll	490	_wcsicmp
MSVCRT.dll	676	qsort
MSVCRT.dll	690	sprintf
MSVCRT.dll	606	free
MSVCRT.dll	111	__p__fmode
MSVCRT.dll	271	_initterm
MSVCRT.dll	72	_XcptFilter
MSVCRT.dll	129	__set_app_type
MSVCRT.dll	211	_exit
MSVCRT.dll	88	__getmainargs
MSVCRT.dll	85	__dllonexit
MSVCRT.dll	183	_controlfp
MSVCRT.dll	614	fwrite
MSVCRT.dll	664	memmove
MSVCRT.dll	694	strcat
MSVCRT.dll	612	ftell
MSVCRT.dll	445	_strcmpi
MSVCRT.dll	157	_adjust_fdiv
MSVCRT.dll	657	malloc
MSVCRT.dll	705	strncpy
MSVCRT.dll	585	exit
MSVCRT.dll	202	_except_handler3
MSVCRT.dll	390	_onexit
MSVCRT.dll	592	fgetc
MSVCRT.dll	131	__setusermatherr
COMCTL32.dll	35	ImageList_DragEnter
COMCTL32.dll	3	CreatePropertySheetPageW
COMCTL32.dll	34	ImageList_Destroy
COMCTL32.dll	49	ImageList_GetImageInfo
COMCTL32.dll	33	ImageList_Create
COMCTL32.dll	28	ImageList_Add
COMCTL32.dll	67	InitCommonControlsEx

show previews

offset	size	type	comment
0	188416	EXE	10/22/2014 10:13:24	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

bin.ex_

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory