filenameGerador Radical-Okê.exe
size567296 (0x8a800)
md5eaf4e2c4ee3ca0f8184968ed232efcef
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5a8f015f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.0
SizeOfCode0x5e00
SizeOfInitializedData0x84600
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x8d000
SizeOfHeaders0x400
CheckSum0x97394
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

PureBasic 4.x (Neil Hodgson)

Sections

namevavsizeraw sizeflags
.code0x10000x1e300x2000R-X CODE
.text0x30000x3dec0x3e00R-X CODE
.rdata0x70000x2c480x2e00R-- IDATA
.data0xa0000x37c0x400RW- IDATA
.rsrc0xb0000x812d40x81400R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xa0940x3c
RESOURCE0xb0000x812d4
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xa1340x64
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#47685259841252
ICON#411281252
GROUP_ICON#99201252
VERSION#19801252
MANIFEST#16201252
module_namehintordfunction_name
MSVCRT.dll665memset
MSVCRT.dll663memcpy
MSVCRT.dll657malloc
MSVCRT.dll606free
MSVCRT.dll679realloc
MSVCRT.dll702strlen
KERNEL32.dllGetModuleHandleA
KERNEL32.dllHeapCreate
KERNEL32.dllHeapDestroy
KERNEL32.dllExitProcess
KERNEL32.dllWriteFile
KERNEL32.dllHeapFree
KERNEL32.dllCloseHandle
KERNEL32.dllFreeLibrary
KERNEL32.dllHeapReAlloc
KERNEL32.dllHeapAlloc
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualFree
KERNEL32.dllVirtualProtect
KERNEL32.dllLoadLibraryA
KERNEL32.dllGetProcAddress
KERNEL32.dllIsBadReadPtr
KERNEL32.dllGetProcessHeap

StringTable 041604b0

CommentsGerar licenças do programa Karaokê RPS
FileDescriptionGerar licenças do programa Karaokê RPS
FileVersion3.0.12.17
ProductVersion
FLegalCopyright�
de vídeo ©&AutorUnknown2CompanyName
nownRNome do produtoGerador Kara�
PSJNome internoGerador Karaok
PSjNome original do arquivoGe
or Karaokê RPS.exeDVarFileInfo$TranslationЖ

VS_FIXEDFILEINFO

FileVersion3.0.12.17
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType0
FileSubtype0
offsetsizetypecomment
0567296EXE02/22/2018 17:43:59#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] invalid VS_VERSIONINFO child type "bly xm"