filenameff7.exe
size5882880 (0x59c400)
md5d494de82d4ef9f1d42f6924291f6cea6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xb0

Rich Header

lib idversiontimes used
001165
616681

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x35feae6f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.10
SizeOfCode0x3b4800
SizeOfInitializedData0x79b600
SizeOfUninitializedData0
AddressOfEntryPoint0xb6e0
BaseOfCode0x1000
BaseOfData0x3b6000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xb52000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v5.0

Sections

namevavsizeraw sizeflags
.text0x10000x3b46cb0x3b4800R-X CODE
.rdata0x3b60000x3cbe0x3e00R-- IDATA
.data0x3ba0000x796c5c0x1e3000RW- IDATA
.rsrc0xb510000x9600xa00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x3b87a00xf0
RESOURCE0xb510000x960
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x3b60000x3dc
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#122160
GROUP_ICON#101200
module_namehintordfunction_name
WINMM.dll89midiOutSetVolume
WINMM.dll26joyGetDevCapsA
WINMM.dll151timeGetTime
WINMM.dll83midiOutGetVolume
WINMM.dll77midiOutGetDevCapsA
WINMM.dll98midiStreamRestart
WINMM.dll97midiStreamProperty
WINMM.dll148timeEndPeriod
WINMM.dll30joyGetPosEx
WINMM.dll87midiOutPrepareHeader
WINMM.dll95midiStreamPause
WINMM.dll93midiStreamOpen
WINMM.dll99midiStreamStop
WINMM.dll92midiStreamClose
WINMM.dll76midiOutClose
WINMM.dll84midiOutLongMsg
WINMM.dll86midiOutOpen
WINMM.dll147timeBeginPeriod
WINMM.dll91midiOutUnprepareHeader
WINMM.dll82midiOutGetNumDevs
WINMM.dll94midiStreamOut
WINMM.dll153timeSetEvent
WINMM.dll152timeKillEvent
KERNEL32.dll370HeapSize
KERNEL32.dll528SetEndOfFile
KERNEL32.dll61CreateProcessA
KERNEL32.dll618WaitForSingleObject
KERNEL32.dll531SetErrorMode
KERNEL32.dll335GetVolumeInformationA
KERNEL32.dll384IsBadCodePtr
KERNEL32.dll457RaiseException
KERNEL32.dll42CreateDirectoryA
KERNEL32.dll524SetCurrentDirectoryA
KERNEL32.dll387IsBadReadPtr
KERNEL32.dll566SetUnhandledExceptionFilter
KERNEL32.dll126FindClose
KERNEL32.dll135FindNextFileA
KERNEL32.dll130FindFirstFileA
KERNEL32.dll108ExitThread
KERNEL32.dll67CreateThread
KERNEL32.dll482ResumeThread
KERNEL32.dll78DeleteFileA
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll240GetFullPathNameA
KERNEL32.dll470ReadFile
KERNEL32.dll49CreateFileA
KERNEL32.dll245GetLocalTime
KERNEL32.dll309GetSystemTime
KERNEL32.dll422MoveFileA
KERNEL32.dll390IsBadWritePtr
KERNEL32.dll88EnterCriticalSection
KERNEL32.dll76DeleteCriticalSection
KERNEL32.dll119FileTimeToLocalFileTime
KERNEL32.dll120FileTimeToSystemTime
KERNEL32.dll380InterlockedExchange
KERNEL32.dll399LeaveCriticalSection
KERNEL32.dll325GetTickCount
KERNEL32.dll410LocalFree
KERNEL32.dll152FreeLibrary
KERNEL32.dll377InitializeCriticalSection
KERNEL32.dll353GlobalMemoryStatus
KERNEL32.dll529SetEnvironmentVariableA
KERNEL32.dll147FormatMessageA
KERNEL32.dll30CompareStringA
KERNEL32.dll24CloseHandle
KERNEL32.dll247GetLocaleInfoW
KERNEL32.dll278GetProcAddress
KERNEL32.dll142FlushFileBuffers
KERNEL32.dll553SetStdHandle
KERNEL32.dll400LoadLibraryA
KERNEL32.dll603VirtualAlloc
KERNEL32.dll302GetStringTypeW
KERNEL32.dll299GetStringTypeA
KERNEL32.dll398LCMapStringW
KERNEL32.dll397LCMapStringA
KERNEL32.dll246GetLocaleInfoA
KERNEL32.dll360HeapAlloc
KERNEL32.dll366HeapFree
KERNEL32.dll537SetFilePointer
KERNEL32.dll635WriteFile
KERNEL32.dll485RtlUnwind
KERNEL32.dll606VirtualFree
KERNEL32.dll362HeapCreate
KERNEL32.dll364HeapDestroy
KERNEL32.dll586TlsGetValue
KERNEL32.dll542SetLastError
KERNEL32.dll584TlsAlloc
KERNEL32.dll230GetExitCodeProcess
KERNEL32.dll442OutputDebugStringA
KERNEL32.dll673lstrlenA
KERNEL32.dll244GetLastError
KERNEL32.dll31CompareStringW
KERNEL32.dll587TlsSetValue
KERNEL32.dll214GetCurrentThreadId
KERNEL32.dll239GetFileType
KERNEL32.dll298GetStdHandle
KERNEL32.dll539SetHandleCount
KERNEL32.dll265GetOEMCP
KERNEL32.dll157GetACP
KERNEL32.dll163GetCPInfo
KERNEL32.dll622WideCharToMultiByte
KERNEL32.dll227GetEnvironmentStringsW
KERNEL32.dll225GetEnvironmentStrings
KERNEL32.dll151FreeEnvironmentStringsW
KERNEL32.dll427MultiByteToWideChar
KERNEL32.dll150FreeEnvironmentStringsA
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll592UnhandledExceptionFilter
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll582TerminateProcess
KERNEL32.dll382InterlockedIncrement
KERNEL32.dll379InterlockedDecrement
KERNEL32.dll575Sleep
KERNEL32.dll209GetCurrentDirectoryA
KERNEL32.dll369HeapReAlloc
KERNEL32.dll328GetTimeZoneInformation
KERNEL32.dll107ExitProcess
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll332GetVersion
KERNEL32.dll170GetCommandLineA
USER32.dll593UpdateWindow
USER32.dll213GetActiveWindow
USER32.dll128DefWindowProcA
USER32.dll257GetKeyState
USER32.dll215GetAsyncKeyState
USER32.dll435PostQuitMessage
USER32.dll182EndPaint
USER32.dll9BeginPaint
USER32.dll461ReleaseDC
USER32.dll238GetDC
USER32.dll520SetRect
USER32.dll557ShowWindow
USER32.dll85CreateWindowExA
USER32.dll1AdjustWindowRect
USER32.dll446RegisterClassA
USER32.dll370LoadCursorA
USER32.dll138DestroyWindow
USER32.dll605WaitMessage
USER32.dll144DispatchMessageA
USER32.dll581TranslateMessage
USER32.dll431PeekMessageA
USER32.dll474SendMessageA
USER32.dll564SystemParametersInfoA
USER32.dll405MessageBoxA
USER32.dll553ShowCursor
GDI32.dll242GetPixelFormat
GDI32.dll250GetStockObject
GDI32.dll71DescribePixelFormat
GDI32.dll199GetDeviceCaps
GDI32.dll360SetPixelFormat
GDI32.dll13ChoosePixelFormat
GDI32.dll336SetBkColor
GDI32.dll387TextOutA
GDI32.dll370SetTextColor
GDI32.dll386SwapBuffers
ADVAPI32.dll288RegDeleteValueA
ADVAPI32.dll310RegQueryValueExA
ADVAPI32.dll302RegOpenKeyExA
ADVAPI32.dll321RegSetValueExA
ADVAPI32.dll279RegCloseKey
ole32.dll12CoCreateInstance
ole32.dll72CoUninitialize
ole32.dll38CoInitialize
OPENGL32.dll207glPointSize
OPENGL32.dll356wglGetProcAddress
OPENGL32.dll12glBindTexture
OPENGL32.dll110glGetError
OPENGL32.dll125glGetString
OPENGL32.dll66glDeleteLists
OPENGL32.dll185glNewList
OPENGL32.dll105glGenLists
OPENGL32.dll83glEndList
OPENGL32.dll15glCallList
OPENGL32.dll107glGetBooleanv
OPENGL32.dll64glCullFace
OPENGL32.dll80glEnable
OPENGL32.dll71glDisable
OPENGL32.dll300glTexEnvi
OPENGL32.dll348wglDeleteContext
OPENGL32.dll357wglMakeCurrent
OPENGL32.dll165glLoadIdentity
OPENGL32.dll182glMatrixMode
OPENGL32.dll72glDisableClientState
OPENGL32.dll112glGetIntegerv
OPENGL32.dll74glDrawBuffer
OPENGL32.dll343glViewport
OPENGL32.dll197glOrtho
OPENGL32.dll167glLoadMatrixf
OPENGL32.dll297glTexCoordPointer
OPENGL32.dll275glTexCoord2f
OPENGL32.dll81glEnableClientState
OPENGL32.dll342glVertexPointer
OPENGL32.dll58glColorPointer
OPENGL32.dll75glDrawElements
OPENGL32.dll11glBegin
OPENGL32.dll50glColor4ub
OPENGL32.dll328glVertex3f
OPENGL32.dll82glEnd
OPENGL32.dll203glPixelStorei
OPENGL32.dll97glFinish
OPENGL32.dll244glReadBuffer
OPENGL32.dll245glReadPixels
OPENGL32.dll106glGenTextures
OPENGL32.dll309glTexImage2D
OPENGL32.dll69glDepthMask
OPENGL32.dll67glDeleteTextures
OPENGL32.dll136glHint
OPENGL32.dll312glTexParameteri
OPENGL32.dll8glAlphaFunc
OPENGL32.dll14glBlendFunc
OPENGL32.dll20glClearDepth
OPENGL32.dll19glClearColor
OPENGL32.dll17glClear
OPENGL32.dll261glShadeModel
OPENGL32.dll208glPolygonMode
OPENGL32.dll98glFlush
OPENGL32.dll346wglCreateContext
OPENGL32.dll137glIndexMask
OPENGL32.dll254glRenderMode
OPENGL32.dll103glFrontFace
OPENGL32.dll56glColorMask
OPENGL32.dll163glLineWidth
OPENGL32.dll68glDepthFunc
OPENGL32.dll70glDepthRange
DSOUND.dll4DirectSoundEnumerateA
DSOUND.dll3DirectSoundCreate
DINPUT.dllDirectInputCreateA
DDRAW.dll7DirectDrawEnumerateA
DDRAW.dll5DirectDrawCreate
MSACM32.dll42acmStreamSize
MSACM32.dll43acmStreamUnprepareHeader
MSACM32.dll40acmStreamPrepareHeader
MSACM32.dll37acmStreamConvert
MSACM32.dll36acmStreamClose
MSACM32.dll39acmStreamOpen
offsetsizetypecomment
15c115HTM#
15d05877296BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK