filenameCNMPV38.EXE
size54272 (0xd400)
md5e0c7a1b09a06eb3f235b1b543b0ab043
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
6492103
10201
25921017
6991111
28917832
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3c64378e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0xbe00
SizeOfInitializedData0x1200
SizeOfUninitializedData0
AddressOfEntryPoint0x8cc8
BaseOfCode0x1000
BaseOfData0xd000
ImageBase0x600000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0xf000
SizeOfHeaders0x400
CheckSum0x1031f
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000xbcb60xbe00R-X CODE
.data0xd0000x240x200RW- IDATA
.rsrc0xe0000xef80x1000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xbc2c0xb4
RESOURCE0xe0000xef8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x13500x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x338
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#145066180
BITMAP#145071200
BITMAP#145082160
ICON#17440
ICON#22960
DIALOG#146512280
STRING#916760
STRING#9171820
GROUP_ICON#14501340
MANIFEST#16540
idlangstring
146541033check job id...
146551033open...
146561033connect...
146571033check version...
146581033initialize...
146591033prepare preview...
146601033get total...
146611033error!
module_namehintordfunction_name
msvcrt.dll625_wtoi
msvcrt.dll352_itow
msvcrt.dll822wcstol
msvcrt.dll814wcsncmp
msvcrt.dll807wcscmp
msvcrt.dll819wcsstr
msvcrt.dll812wcslen
msvcrt.dll237_except_handler3
msvcrt.dll815wcsncpy
msvcrt.dll214_controlfp
msvcrt.dll152__set_app_type
msvcrt.dll133__p__fmode
msvcrt.dll128__p__commode
msvcrt.dll182_adjust_fdiv
msvcrt.dll154__setusermatherr
msvcrt.dll314_initterm
msvcrt.dll109__getmainargs
msvcrt.dll168_acmdln
msvcrt.dll655exit
msvcrt.dll200_cexit
msvcrt.dll78_XcptFilter
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll817wcsrchr
msvcrt.dll806wcschr
msvcrt.dll709iswctype
msvcrt.dll196_beginthreadex
msvcrt.dll809wcscpy
msvcrt.dll232_endthreadex
msvcrt.dll280_ftol
msvcrt.dll821wcstok
msvcrt.dll785swprintf
ADVAPI32.dll482RegOpenKeyExW
ADVAPI32.dll304InitializeSecurityDescriptor
ADVAPI32.dll558SetSecurityDescriptorDacl
ADVAPI32.dll290GetUserNameW
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll461RegCreateKeyExW
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll456RegCloseKey
ADVAPI32.dll458RegConnectRegistryW
KERNEL32.dll593MultiByteToWideChar
KERNEL32.dll77CreateFileW
KERNEL32.dll921lstrcpyW
KERNEL32.dll827TransactNamedPipe
KERNEL32.dll37CancelIo
KERNEL32.dll381GetOverlappedResult
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll681ResetEvent
KERNEL32.dll774SetNamedPipeHandleState
KERNEL32.dll346GetLastError
KERNEL32.dll71CreateEventW
KERNEL32.dll748SetEvent
KERNEL32.dll101CreateThread
KERNEL32.dll818TerminateThread
KERNEL32.dll924lstrcpynW
KERNEL32.dll426GetSystemTime
KERNEL32.dll608OpenMutexW
KERNEL32.dll88CreateMutexW
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll561LoadLibraryW
KERNEL32.dll393GetProcAddress
KERNEL32.dll927lstrlenW
KERNEL32.dll753SetFilePointer
KERNEL32.dll656ReadFile
KERNEL32.dll254GetCommandLineW
KERNEL32.dll229FreeLibrary
KERNEL32.dll44CloseHandle
KERNEL32.dll809Sleep
KERNEL32.dll478GlobalFree
KERNEL32.dll471GlobalAlloc
KERNEL32.dll69CreateDirectoryW
KERNEL32.dll912lstrcatW
KERNEL32.dll193FindClose
KERNEL32.dll207FindNextFileW
KERNEL32.dll200FindFirstFileW
KERNEL32.dll915lstrcmpW
KERNEL32.dll390GetPrivateProfileStringW
KERNEL32.dll892WritePrivateProfileStringW
KERNEL32.dll388GetPrivateProfileSectionW
KERNEL32.dll358GetModuleFileNameW
KERNEL32.dll532IsBadWritePtr
KERNEL32.dll61CopyFileW
KERNEL32.dll420GetSystemDefaultLangID
KERNEL32.dll672RemoveDirectoryW
KERNEL32.dll121DeleteFileW
KERNEL32.dll752SetFileAttributesW
KERNEL32.dll331GetFileAttributesW
KERNEL32.dll430GetSystemWindowsDirectoryW
GDI32.dll547SetICMMode
GDI32.dll566SetStretchBltMode
GDI32.dll577SetWindowOrgEx
GDI32.dll75CreateRectRgn
GDI32.dll522SelectClipRgn
GDI32.dll499RectVisible
GDI32.dll584StretchDIBits
GDI32.dll510RestoreDC
GDI32.dll497RealizePalette
GDI32.dll525SelectPalette
GDI32.dll363GetDeviceCaps
GDI32.dll517SaveDC
GDI32.dll437GetTextExtentPoint32W
GDI32.dll535SetBrushOrgEx
GDI32.dll407GetObjectW
GDI32.dll532SetBkMode
GDI32.dll421GetStockObject
GDI32.dll568SetTextAlign
GDI32.dll71CreatePen
GDI32.dll524SelectObject
GDI32.dll463MoveToEx
GDI32.dll459LineTo
GDI32.dll559SetPixel
GDI32.dll80CreateSolidBrush
GDI32.dll143DeleteObject
GDI32.dll70CreatePatternBrush
GDI32.dll63CreateHalftonePalette
USER32.dll641SetWindowLongW
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll605SetMenu
USER32.dll454LoadMenuW
USER32.dll621SetRectEmpty
USER32.dll438LoadBitmapW
USER32.dll512PostMessageW
USER32.dll367GetWindowLongW
USER32.dll403InvalidateRect
USER32.dll428IsWindowEnabled
USER32.dll58CheckMenuRadioItem
USER32.dll634SetTimer
USER32.dll576SendMessageW
USER32.dll555RemoveMenu
USER32.dll309GetMenuItemInfoW
USER32.dll394InflateRect
USER32.dll489MoveWindow
USER32.dll372GetWindowRect
USER32.dll513PostQuitMessage
USER32.dll151DestroyMenu
USER32.dll723WinHelpW
USER32.dll434KillTimer
USER32.dll371GetWindowPlacement
USER32.dll699UpdateWindow
USER32.dll196EnableWindow
USER32.dll232FlashWindowEx
USER32.dll279GetForegroundWindow
USER32.dll579SetActiveWindow
USER32.dll658ShowWindow
USER32.dll153DestroyWindow
USER32.dll483MessageBoxW
USER32.dll457LoadStringW
USER32.dll533RedrawWindow
USER32.dll195EnableScrollBar
USER32.dll255GetClientRect
USER32.dll598SetFocus
USER32.dll143DefWindowProcW
USER32.dll159DialogBoxParamW
USER32.dll536RegisterClassExW
USER32.dll442LoadCursorW
USER32.dll444LoadIconW
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll318GetMessageW
USER32.dll97CreateWindowExW
USER32.dll666SystemParametersInfoW
USER32.dll643SetWindowPos
USER32.dll471MapWindowPoints
USER32.dll273GetDlgItem
USER32.dll198EndDialog
USER32.dll200EndPaint
USER32.dll341GetScrollInfo
USER32.dll13BeginPaint
USER32.dll622SetScrollInfo
USER32.dll565ScrollWindowEx
USER32.dll498OffsetRect
USER32.dll74CopyRect
USER32.dll349GetSystemMetrics
USER32.dll226FillRect
USER32.dll191DrawTextW
USER32.dll620SetRect
USER32.dll729wsprintfW
USER32.dll594SetDlgItemInt
USER32.dll274GetDlgItemInt
USER32.dll194EnableMenuItem
WINSPOOL.DRV109GetJobW
WINSPOOL.DRV146SetJobW
WINSPOOL.DRV79EnumJobsW
WINSPOOL.DRV121GetPrinterW
WINSPOOL.DRV120GetPrinterDriverW
WINSPOOL.DRV124OpenPrinterW
WINSPOOL.DRV153SetPrinterDataW
WINSPOOL.DRV116GetPrinterDataW
WINSPOOL.DRV27ClosePrinter
COMCTL32.dll6CreateStatusWindowW
COMCTL32.dll8CreateToolbarEx
COMCTL32.dll17
VERSION.dll3GetFileVersionInfoW
VERSION.dll2GetFileVersionInfoSizeW
VERSION.dll13VerQueryValueW
offsetsizetypecomment
054272EXE02/08/2002 20:39:42#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK