SpeedTouch.hex

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	SpeedTouch.hex
size	33330 (0x8232)
md5	ebf61d87cf6d5c4ddb9aa0d6dbe2a809

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x4808cfda
PointerToSymbolTable	0x5000
NumberOfSymbols	0x24f
SizeOfOptionalHeader	0xe0
Characteristics	0x107
Magic	0x10b
LinkerVersion	2.56
SizeOfCode	0x2600
SizeOfInitializedData	0x2c00
SizeOfUninitializedData	0x200
AddressOfEntryPoint	0x1240
BaseOfCode	0x1000
BaseOfData	0x4000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xa000
SizeOfHeaders	0x400
CheckSum	0x12d56
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

FreeBASIC 0.16b

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2524	0x2600	R-X CODE IDATA
.data	0x4000	0xa0	0x200	RW- IDATA
.bss	0x5000	0xa0	0	RW- UDATA
.idata	0x6000	0x398	0x400	RW- IDATA
.stab	0x7000	0x11dc	0x1200	R-- DISCARDABLE
.stabstr	0x9000	0xcd8	0xe00	R-- DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x6000	0x398
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
KERNEL32.dll		AddAtomA
KERNEL32.dll	131	ExitProcess
KERNEL32.dll	148	FindAtomA
KERNEL32.dll	193	GetAtomNameA
KERNEL32.dll	660	SetUnhandledExceptionFilter
msvcrt.dll	39	__getmainargs
msvcrt.dll	49	__p___argv
msvcrt.dll	59	__p__environ
msvcrt.dll	61	__p__fmode
msvcrt.dll	78	__set_app_type
msvcrt.dll	118	_cexit
msvcrt.dll	169	_fileno
msvcrt.dll	222	_iob
msvcrt.dll	336	_onexit
msvcrt.dll	373	_setmode
msvcrt.dll	510	abort
msvcrt.dll	517	atexit
msvcrt.dll	534	fclose
msvcrt.dll	545	fopen
msvcrt.dll	546	fprintf
msvcrt.dll	547	fputc
msvcrt.dll	552	free
msvcrt.dll	564	getenv
msvcrt.dll	603	malloc
msvcrt.dll	608	memcmp
msvcrt.dll	609	memcpy
msvcrt.dll	633	signal
msvcrt.dll	641	strchr
msvcrt.dll	648	strlen
msvcrt.dll	650	strncmp
msvcrt.dll	670	toupper
msvcrt.dll	675	vfprintf

show previews

offset	size	type	comment
0	20480	EXE	04/18/2008 16:44:10	#
15c1	15	HTM		#
5000	12850	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK