sox.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	sox.exe
size	692224 (0xa9000)
md5	dcd0c8c1bd9d3ac8d80c88c4d45b0477

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
105	2067	3
93	3077	3
96	3077	1
15	3077	7
95	6030	35
93	2179	2
1	0	103
95	3077	174
90	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x49a5de77
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x73000
SizeOfInitializedData	0x66000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x72fa0
BaseOfCode	0x1000
BaseOfData	0x74000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xda000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x989680
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.1 EXE / v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x72382	0x73000	R-X CODE
.rdata	0x74000	0x2a036	0x2b000	R-- IDATA
.data	0x9f000	0x3accc	0xa000	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x9da04	0x3c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x9d9a8	0x48
Bound_IAT	0	0
IAT	0x74000	0x19c
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
MSVCR71.dll	768	sprintf
MSVCR71.dll	73	_HUGE
MSVCR71.dll	678	fprintf
MSVCR71.dll	323	_iob
MSVCR71.dll	778	strerror
MSVCR71.dll	239	_errno
MSVCR71.dll	61	_CIpow
MSVCR71.dll	663	exit
MSVCR71.dll	508	_strdup
MSVCR71.dll	748	printf
MSVCR71.dll	666	fclose
MSVCR71.dll	672	fgets
MSVCR71.dll	677	fopen
MSVCR71.dll	696	getenv
MSVCR71.dll	655	ceil
MSVCR71.dll	282	_ftime
MSVCR71.dll	675	floor
MSVCR71.dll	679	fputc
MSVCR71.dll	761	scanf
MSVCR71.dll	773	strchr
MSVCR71.dll	324	_isatty
MSVCR71.dll	765	signal
MSVCR71.dll	751	puts
MSVCR71.dll	750	putchar
MSVCR71.dll	754	qsort
MSVCR71.dll	694	getc
MSVCR71.dll	771	sscanf
MSVCR71.dll	650	atof
MSVCR71.dll	770	srand
MSVCR71.dll	798	time
MSVCR71.dll	783	strncpy
MSVCR71.dll	711	isspace
MSVCR71.dll	785	strrchr
MSVCR71.dll	764	setvbuf
MSVCR71.dll	502	_stat
MSVCR71.dll	802	toupper
MSVCR71.dll	807	vfprintf
MSVCR71.dll	757	realloc
MSVCR71.dll	742	memmove
MSVCR71.dll	782	strncmp
MSVCR71.dll	760	rewind
MSVCR71.dll	688	fseek
MSVCR71.dll	683	fread
MSVCR71.dll	749	putc
MSVCR71.dll	799	tmpfile
MSVCR71.dll	692	fwrite
MSVCR71.dll	810	vsprintf
MSVCR71.dll	656	clearerr
MSVCR71.dll	684	free
MSVCR71.dll	690	ftell
MSVCR71.dll	63	_CIsinh
MSVCR71.dll	788	strtod
MSVCR71.dll	735	malloc
MSVCR71.dll	705	isdigit
MSVCR71.dll	756	rand
MSVCR71.dll	58	_CIfmod
MSVCR71.dll	746	perror
MSVCR71.dll	784	strpbrk
MSVCR71.dll	195	_assert
MSVCR71.dll	662	div
MSVCR71.dll	651	atoi
MSVCR71.dll	687	fscanf
MSVCR71.dll	789	strtok
MSVCR71.dll	745	modf
MSVCR71.dll	790	strtol
MSVCR71.dll	660	ctime
MSVCR71.dll	728	ldexp
MSVCR71.dll	686	frexp
MSVCR71.dll	654	calloc
MSVCR71.dll	178	_adj_fdiv_r
MSVCR71.dll	180	_adj_fdivr_m32
MSVCR71.dll	176	_adj_fdiv_m32i
MSVCR71.dll	183	_adj_fpatan
MSVCR71.dll	175	_adj_fdiv_m32
MSVCR71.dll	177	_adj_fdiv_m64
MSVCR71.dll	182	_adj_fdivr_m64
MSVCR71.dll	488	_snprintf
MSVCR71.dll	642	abort
MSVCR71.dll	107	__dllonexit
MSVCR71.dll	440	_onexit
MSVCR71.dll	202	_c_exit
MSVCR71.dll	250	_exit
MSVCR71.dll	75	_XcptFilter
MSVCR71.dll	205	_cexit
MSVCR71.dll	124	__p___initenv
MSVCR71.dll	194	_amsg_exit
MSVCR71.dll	110	__getmainargs
MSVCR71.dll	319	_initterm
MSVCR71.dll	159	__setusermatherr
MSVCR71.dll	187	_adjust_fdiv
MSVCR71.dll	130	__p__commode
MSVCR71.dll	135	__p__fmode
MSVCR71.dll	156	__set_app_type
MSVCR71.dll	241	_except_handler3
MSVCR71.dll	219	_controlfp
MSVCR71.dll	669	fflush
MSVCR71.dll	279	_fstat
MSVCR71.dll	542	_unlink
MSVCR71.dll	261	_fileno
MSVCR71.dll	485	_setmode
KERNEL32.dll	375	GetModuleHandleA

show previews

offset	size	type	comment
0	692224	EXE	02/26/2009 00:12:39	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK