aqua_energizer.exe - Player.exe

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	aqua_energizer.exe
size	764613 (0xbaac5)
md5	d5d9c84437d7a0f3bb6e99ef9b30b7ad

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xb0

Rich Header

lib id	version	times used
13	8964	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x3cbfba05
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x30000
SizeOfInitializedData	0x13000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x12c0
BaseOfCode	0x1000
BaseOfData	0x31000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x44000
SizeOfHeaders	0x1000
CheckSum	0x4ac05
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual Basic v5.0/v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2fea0	0x30000	R-X CODE
.data	0x31000	0x5a7c	0	RW- IDATA
.rsrc	0x37000	0xc25c	0xd000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x30c34	0x28
RESOURCE	0x37000	0xc25c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0x220	0x20
IAT	0x1000	0x118
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
CUSTOM	NCUNINST.EXE	45056	1200
ICON	#30001	2216	1200
GROUP_ICON	#1	20	1200
VERSION	#1	2112	1200

module_name	ord	function_name
MSVBVM60.DLL		EVENT_SINK_GetIDsOfNames
MSVBVM60.DLL	588
MSVBVM60.DLL		MethCallEngine
MSVBVM60.DLL		EVENT_SINK_Invoke
MSVBVM60.DLL	516
MSVBVM60.DLL	519
MSVBVM60.DLL	662
MSVBVM60.DLL	558
MSVBVM60.DLL	667
MSVBVM60.DLL		Zombie_GetTypeInfo
MSVBVM60.DLL	591
MSVBVM60.DLL	669
MSVBVM60.DLL		EVENT_SINK2_Release
MSVBVM60.DLL	593
MSVBVM60.DLL	594
MSVBVM60.DLL	595
MSVBVM60.DLL	598
MSVBVM60.DLL	520
MSVBVM60.DLL	523
MSVBVM60.DLL	709
MSVBVM60.DLL	631
MSVBVM60.DLL	632
MSVBVM60.DLL	525
MSVBVM60.DLL	526
MSVBVM60.DLL		EVENT_SINK_AddRef
MSVBVM60.DLL	527
MSVBVM60.DLL	528
MSVBVM60.DLL	529
MSVBVM60.DLL		DllFunctionCall
MSVBVM60.DLL	563
MSVBVM60.DLL	568
MSVBVM60.DLL		Zombie_GetTypeInfoCount
MSVBVM60.DLL		EVENT_SINK_Release
MSVBVM60.DLL	600
MSVBVM60.DLL		EVENT_SINK_QueryInterface
MSVBVM60.DLL		__vbaExceptHandler
MSVBVM60.DLL	711
MSVBVM60.DLL	712
MSVBVM60.DLL	713
MSVBVM60.DLL	606
MSVBVM60.DLL	608
MSVBVM60.DLL	530
MSVBVM60.DLL	609
MSVBVM60.DLL	716
MSVBVM60.DLL	531
MSVBVM60.DLL	533
MSVBVM60.DLL		ProcCallEngine
MSVBVM60.DLL	644
MSVBVM60.DLL	537
MSVBVM60.DLL	645
MSVBVM60.DLL	538
MSVBVM60.DLL	647
MSVBVM60.DLL	648
MSVBVM60.DLL	571
MSVBVM60.DLL	572
MSVBVM60.DLL		EVENT_SINK2_AddRef
MSVBVM60.DLL	578
MSVBVM60.DLL	685
MSVBVM60.DLL	100
MSVBVM60.DLL	610
MSVBVM60.DLL	616
MSVBVM60.DLL	617
MSVBVM60.DLL	618
MSVBVM60.DLL	650
MSVBVM60.DLL	543
MSVBVM60.DLL	544
MSVBVM60.DLL	546
MSVBVM60.DLL	547
MSVBVM60.DLL	581

StringTable 040904B0

Comments
CompanyName
FileDescription
LegalCopyright
LegalTrademarks
ProductName	Aqua Energizer
FileVersion	1.00.1591
ProductVersion	1.00.1591
InternalName	Player
OriginalFilename	Player.exe

VS_FIXEDFILEINFO

FileVersion	1.0.0.1591
ProductVersion	1.0.0.1591
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	253952	EXE	04/19/2002 06:32:37	#
15c1	15	HTM		#
10602	558	BMP	(9 x 18)	#
10886	822	BMP	(16 x 16)	#
10c07	822	BMP	(16 x 16)	#
10fb3	822	BMP	(16 x 16)	#
11336	822	BMP	(16 x 16)	#
116c1	822	BMP	(16 x 16)	#
3e6e8	49152	EXE	04/19/2002 06:32:33	#
4a6e8	459741	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 764613 bytes (747 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x220

aqua_energizer.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

aqua_energizer.exe
-