MMPlayerApp.exe

info
MZ
PE
resources
strings
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	MMPlayerApp.exe
size	64512 (0xfc00)
md5	d9be670e7cbdff8b8bcfd99b46e0d66b

type	PE32 executable (Windows CE) ARM Thumb, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
109	50725	2
110	50725	1
109	60511	4
0	0	1
123	50727	11
1	0	76
110	60511	8
122	50727	1
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x1c2
NumberOfSections	5
TimeDateStamp	0x546178bd
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x7c00
SizeOfInitializedData	0x7e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x857c
BaseOfCode	0x1000
BaseOfData	0x9000
ImageBase	0x10000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x13000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x7a94	0x7c00	R-X CODE
.rdata	0x9000	0xf04	0x1000	R-- IDATA
.data	0xa000	0x228	0x200	RW- IDATA
.pdata	0xb000	0x650	0x800	R-- IDATA
.rsrc	0xc000	0x6100	0x6200	R-- IDATA

Data Directory

type	va	size
EXPORT	0x9e40	0xc4
IMPORT	0x9ac8	0x78
RESOURCE	0xc000	0x6100
EXCEPTION	0xb000	0x650
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x9030	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xa000	0x144
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	744
ICON	#2	296
ICON	#3	3752
ICON	#4	2216
ICON	#5	1384
ICON	#6	9640
ICON	#7	4264
ICON	#8	1128
MENU	#102	66
DIALOG	#103	250
STRING	#1	76
STRING	#7	42
ACCELERATORS	#2	16
GROUP_ICON	#101	118

id	lang	string
1	2052	MMPlayerApp
2	2052	MMPLAYERAPP
104	2052	Tools

module_name	hint	ord	function_name
NCL_BaseCom.dll	28		BCLogApi_PrintLog
NCL_BaseCom.dll	4		BCEventApi_Init
NCL_BaseCom.dll	8		BCEventApi_SetQTMsgQueue
NCL_BaseCom.dll	23		BCLogApi_LogInit
NCL_BaseCom.dll	20		BCLogApi_LogDirRegister
NCL_BaseCom.dll	26		BCLogApi_LogTypeRegister
NCL_BaseCom.dll	24		BCLogApi_LogModuleRegister
NCL_BaseCom.dll	5		BCEventApi_QTDeliverEvent
ProcInte.dll	3		void __cdecl PIApi_S_DestroyServe(class IPIServe *) ?PIApi_S_DestroyServe@@YAXPAVIPIServe@@@Z
ProcInte.dll	2		class IPIServe * __cdecl PIApi_S_CreateServe(void) ?PIApi_S_CreateServe@@YAPAVIPIServe@@XZ
NCL_MMPlayer.dll	4		MMPApi_CreatePlayer
NCL_MMPlayer.dll	5		MMPApi_DestroyPlayer
NCL_MMPlayer.dll	6		MMPApi_Init
NCL_MMPlayer.dll	7		MMPApi_SetEventUseID
COREDLL.dll		865
COREDLL.dll		544
COREDLL.dll		12
COREDLL.dll		5
COREDLL.dll		2
COREDLL.dll		1492
COREDLL.dll		3
COREDLL.dll		4
COREDLL.dll		1645
COREDLL.dll		87
COREDLL.dll		1049
COREDLL.dll		1054
COREDLL.dll		1041
COREDLL.dll		1018
COREDLL.dll		1876
COREDLL.dll		2696
COREDLL.dll		2653
COREDLL.dll		859
COREDLL.dll		870
COREDLL.dll		838
COREDLL.dll		861
COREDLL.dll		94
COREDLL.dll		95
COREDLL.dll		919
COREDLL.dll		728
COREDLL.dll		246
COREDLL.dll		874
COREDLL.dll		866
COREDLL.dll		261
COREDLL.dll		260
COREDLL.dll		264
COREDLL.dll		265
COREDLL.dll		690
COREDLL.dll		533
COREDLL.dll		532
COREDLL.dll		691
COREDLL.dll		247
COREDLL.dll		249
COREDLL.dll		269
COREDLL.dll		248
COREDLL.dll		543
COREDLL.dll		545
COREDLL.dll		1092
COREDLL.dll		2005
COREDLL.dll		2512
COREDLL.dll		1094
COREDLL.dll		1095
COREDLL.dll		1044
COREDLL.dll		1551
COREDLL.dll		1580
COREDLL.dll		1572
COREDLL.dll		1574
COREDLL.dll		1570
COREDLL.dll		1068
COREDLL.dll		2008
COREDLL.dll		1571
COREDLL.dll		1575
COREDLL.dll		2652
commctrl.dll		4
commctrl.dll		10
commctrl.dll		3
commctrl.dll		8

ord	entry_va	function_name
1	0x1034	??0IDataEvent@@QAA@ABV0@@Z
2	0x1000	??0IDataEvent@@QAA@XZ
3	0x6564	??4IDataEvent@@QAAAAV0@ABV0@@Z
4	0x90b0	??_7IDataEvent@@6B@

module_name	MMPlayerApp.exe
flags	0
timestamp	2014-11-11 02:47:25
version	0.0
ordinal_base	1
nFunctions	4
nNames	4
Names(4)	0x9e78
Functions(4)	0x9e68
NameOrdinals(4)	0x9e88

show previews

offset	size	type	comment
0	64512	EXE	11/11/2014 02:47:25	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK