filename126
size767488 (0xbb600)
md5de3392a483a7c0799f7dd12ab1896b92
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3ad70000
PointerToSymbolTable0x90909090
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion4.20
SizeOfCode0x12c00
SizeOfInitializedData0xa1800
SizeOfUninitializedData0
AddressOfEntryPoint0x1204
BaseOfCode0x1000
BaseOfData0x14000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xbc000
SizeOfHeaders0x200
CheckSum0xb9699
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual Basic v5.0

Sections

namevavsizeraw sizeflags
smy10x10000x150000x15000RWX CODE
smy20x160000xa50000xa5000RWX CODE
.pb0xbb0000x10000x600RWX CODE

Data Directory

typevasize
EXPORT00
IMPORT0xbb0000x28
RESOURCE0x160000x9faa8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
SMY#1014152321200
SMY#10288721200
SMY#10375961200
SMY#10422521200
SMY#105153441200
SMY#10668721200
SMY#10740121200
SMY#10835841200
SMY#10944881200
SMY#11063441200
SMY#11123681200
SMY#1121121200
SMY#113841200
SMY#1141594601200
SMY#11579361200
ICON#3000113841200
ICON#300028721200
ICON#3000322161200
ICON#3000432401200
GROUP_ICON#1641200
VERSION#15241200
module_namehintordfunction_name
MSVBVM50.DLL_CIcos
MSVBVM50.DLL_adj_fptan
MSVBVM50.DLL__vbaVarMove
MSVBVM50.DLL__vbaVarVargNofree
MSVBVM50.DLL__vbaAryMove
MSVBVM50.DLL__vbaFreeVar
MSVBVM50.DLL__vbaEnd
MSVBVM50.DLL_adj_fdiv_m64
MSVBVM50.DLL_adj_fprem1
MSVBVM50.DLL__vbaSetSystemError
MSVBVM50.DLL__vbaHresultCheckObj
MSVBVM50.DLL_adj_fdiv_m32
MSVBVM50.DLL__vbaAryDestruct
MSVBVM50.DLL__vbaExitProc
MSVBVM50.DLL__vbaOnError
MSVBVM50.DLL_adj_fdiv_m16i
MSVBVM50.DLL_adj_fdivr_m16i
MSVBVM50.DLL_CIsin
MSVBVM50.DLL__vbaChkstk
MSVBVM50.DLL__vbaFileClose
MSVBVM50.DLLEVENT_SINK_AddRef
MSVBVM50.DLL529
MSVBVM50.DLL__vbaPutOwner3
MSVBVM50.DLLDllFunctionCall
MSVBVM50.DLL_adj_fpatan
MSVBVM50.DLLEVENT_SINK_Release
MSVBVM50.DLL_CIsqrt
MSVBVM50.DLLEVENT_SINK_QueryInterface
MSVBVM50.DLL__vbaExceptHandler
MSVBVM50.DLL__vbaStrToUnicode
MSVBVM50.DLL_adj_fprem
MSVBVM50.DLL_adj_fdivr_m64
MSVBVM50.DLL531
MSVBVM50.DLL__vbaFPException
MSVBVM50.DLL_CIlog
MSVBVM50.DLL__vbaFileOpen
MSVBVM50.DLL__vbaVar2Vec
MSVBVM50.DLL__vbaNew2
MSVBVM50.DLL648
MSVBVM50.DLL_adj_fdiv_m32i
MSVBVM50.DLL_adj_fdivr_m32i
MSVBVM50.DLL__vbaStrCopy
MSVBVM50.DLL__vbaFreeStrList
MSVBVM50.DLL_adj_fdivr_m32
MSVBVM50.DLL_adj_fdiv_r
MSVBVM50.DLL100
MSVBVM50.DLL__vbaI4Var
MSVBVM50.DLL__vbaStrToAnsi
MSVBVM50.DLL__vbaVarDup
MSVBVM50.DLL_CIatan
MSVBVM50.DLL_allmul
MSVBVM50.DLL_CItan
MSVBVM50.DLL_CIexp
MSVBVM50.DLL__vbaFreeStr

StringTable 040404B0

CompanyNameWWW
ProductNamePROJECT1
FileVersion1.00
Ā咭䀺＀債䀺樀｀袕䀺倀ⵐ㥽@薉㥾@赟綵䀹뤀üꗳ｟뷧욃욁Š잁Ϭ噗啗噗໨茀ࣄ酝彞ꓳ㓩唀啠疋謈౽닼ꒀ淨猀㏸dᥳ쀳寨猀뀡R쀒䅵P謕D⻫톬瓨荏ˑ⋫䢑갈⧨㴀紀౳=猀茆翸ɷ䅁譖⯷庤軫툂յᚊቆ쏒줳￮￿줓￿狿쏲⭝౽綉懼썝㑥帥K嬼 子 嬼 ᑠ眂ఀ眂ႀ眂Հ眂䕋乒䱅㈳䐮䱌䰀慯䱤扩慲祲A敇側潲䅣摤敲獳䜀潬慢䅬汬捯䔀楸側潲散獳开贇熵䀼唀噗ޭ쀋㭴枒ꂑ譑ꐟ彙锌㍭繵㌖榅怑頋죛㈎͡䟸⯐劐㢍￾莁ࣄ彞��뷫ᛌ頌諉䦃錩ε噋�鹦庛�焌㌢仼켫̌虁؂㙳鶍睆匆闿㪀찎ᶃ儢撄⑐妄〜樓⶯谤＆৐悕⾌鵡Һቯꌎ询�ཁᩴ镆ᕥ̃勲ᐏ犵鴋ᐹ纔줌쏸⃹幘做謨茎ဇ줋ɵ쾑쨃菊䛕렌凂剒筐娘ﭙ褻蔢㹝ᦋ�ⴌ쏷肏甇̄䏚脒軣䷳婿ꡂ誵鰡㎫ࠀ莫Ӂ僫操ݒ煥極偲⁤䱄퇣읳滨Ⅷ抐匃剅㈳瀮
敍愺詧潂ﱸĪ倶ଁᦒ直ฉ遠မ会⠎Ɨ⛰찻僡ᨈբ養䀐ঙ㬂嬎ꕔ꘧ొ硘⫡蔨浬ᰫ䣐Ⱈ힨捰猫㔰ᎂ痢뇿搌꘤喘㴎€뀨 億卍䉖䵖〵䐮䱌开䥃潣s慟橤晟瑰湡开癟慢慖䵲癯e彟扶噡牡慖杲潎牦敥开癟慢牁䵹癯e彟扶䙡敲噥牡开癟慢湅d慟橤晟楤彶㙭4慟橤晟牰浥1彟扶卡瑥祓瑳浥牅潲r彟扶䡡敲畳瑬桃捥佫橢开摡彪摦癩浟㈳开癟慢牁䑹獥牴捵t彟扶䕡楸側潲c彟扶佡䕮牲牯开摡彪摦癩浟㘱i慟橤晟楤牶浟㘱i䍟獉湩开癟慢桃獫歴开癟慢楆敬汃獯e噅久彔䥓䭎䅟摤敒f彟扶偡瑵睏敮㍲䐀汬畆据楴湯慃汬开摡彪灦瑡湡䔀䕖呎卟义彋敒敬獡e䍟獉牱t噅久彔䥓䭎兟敵祲湉整晲捡e彟扶䕡捸灥䡴湡汤牥开癟慢瑓呲啯楮潣敤开摡彪灦敲m慟橤晟楤牶浟㐶开癟慢偆硅散瑰潩n䍟汉杯开癟慢楆敬灏湥开癟慢慖㉲敖c彟扶乡睥2慟橤晟楤彶㍭椲开摡彪摦癩彲㍭椲开癟慢瑓䍲灯y彟扶䙡敲卥牴楌瑳开摡彪摦癩彲㍭2慟橤晟楤彶r彟扶䥡嘴牡开癟慢瑓呲䅯獮i彟扶噡牡畄p䍟慉慴n慟汬畭l䍟瑉湡开䥃硥p彟扶䙡敲卥牴

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0767488EXE04/13/2001 13:32:48#
12dd4336GIF(600 x 440)#
15c115HTM#
7dd187584WAV#
7fac42244WAV#
8039015334WAV#
83f806864WAV#
85a584004WAV#
86a043576WAV#
878044478WAV#
8898c6336WAV#
8a2542358WAV#
8af062114BMP(32 x 32)#
8b7d32114BMP(32 x 32)#
8c09e2114BMP(32 x 32)#
8c9612114BMP(32 x 32)#
8d2242114BMP(32 x 32)#
8dae72114BMP(32 x 32)#
8e4f42102BMP(32 x 32)#
8f4ce2114BMP(32 x 32)#
8fd102114BMP(32 x 32)#
905522114BMP(32 x 32)#
90d942114BMP(32 x 32)#
916ee2102BMP(32 x 32)#
920392102BMP(32 x 32)#
92ca12102BMP(32 x 32)#
9390c2102BMP(32 x 32)#
947b92102BMP(32 x 32)#
9516f2114BMP(32 x 32)#
95abd2114BMP(32 x 32)#
964ee2114BMP(32 x 32)#
96e392114BMP(32 x 32)#
977872114BMP(32 x 32)#
97fc92114BMP(32 x 32)#
9880b2114BMP(32 x 32)#
9904d2114BMP(32 x 32)#
9988f2114BMP(32 x 32)#
9a0d12114BMP(32 x 32)#
9a9132114BMP(32 x 32)#
9b1552114BMP(32 x 32)#
9b9972114BMP(32 x 32)#
9c1d92114BMP(32 x 32)#
9ca1b2114BMP(32 x 32)#
9d25d2114BMP(32 x 32)#
9da9f2114BMP(32 x 32)#
9e2e12114BMP(32 x 32)#
9eb232114BMP(32 x 32)#
9f3652114BMP(32 x 32)#
9fba72114BMP(32 x 32)#
a05092102BMP(32 x 32)#
a0e272114BMP(32 x 32)#
a17532114BMP(32 x 32)#
a207f2114BMP(32 x 32)#
a29ac2114BMP(32 x 32)#
a36432114BMP(32 x 32)#
a402c2114BMP(32 x 32)#
a4b502114BMP(32 x 32)#
a5598578BMP(16 x 16)#
a59492102BMP(32 x 32)#
b1b3c7926WAV#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK