filename搶救金魚.exe
size720781 (0xaff8d)
md5fa1de9275a3223792ef6d056867f49e6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
10163
19803415
001
1081685
11816871
617201

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x37582406
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x33000
SizeOfInitializedData0x14000
SizeOfUninitializedData0
AddressOfEntryPoint0x81b0
BaseOfCode0x1000
BaseOfData0x34000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x48000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Macromedia Windows Flash Projector/Player v4.0

Sections

namevavsizeraw sizeflags
.text0x10000x32fdc0x33000R-X CODE
.rdata0x340000x76280x8000R-- IDATA
.data0x3c0000x28040x1000RW- IDATA
.data10x3f0000xb00x1000RW- IDATA
.rsrc0x400000x7bf00x8000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x3a8500xa0
RESOURCE0x400000x7bf0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x340000x2a0
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#133080
CURSOR#141800
CURSOR#153080
CURSOR#161800
ICON#17440
ICON#22960
ICON#31760
ICON#43040
ICON#513840
ICON#622160
ICON#77440
ICON#82960
ICON#91760
ICON#103040
ICON#1113840
ICON#1222160
MENU#1017680
MENU#1016400
MENU#1017120
MENU#1017280
MENU#1016080
MENU#1016840
MENU#1016800
MENU#1016840
MENU#1163880
MENU#1163180
MENU#1164020
MENU#1163960
MENU#1162360
MENU#1163680
MENU#1163820
MENU#1163700
MENU#1211800
MENU#1211340
MENU#1211540
MENU#1211000
MENU#1211500
MENU#1211560
MENU#1211580
DIALOG#1033780
DIALOG#1033780
DIALOG#1033780
DIALOG#1033780
DIALOG#1033700
DIALOG#1033860
DIALOG#1033780
DIALOG#1033780
DIALOG#1194880
DIALOG#1194580
DIALOG#1194400
DIALOG#1194080
DIALOG#1193460
DIALOG#1194440
DIALOG#1194580
DIALOG#1194780
STRING#12040
STRING#11980
STRING#12000
STRING#11940
ACCELERATORS#101800
GROUP_CURSOR#107340
GROUP_CURSOR#115340
GROUP_ICON#102900
GROUP_ICON#118900
VERSION#17960
idlangstring
21031Flash
31031Flash (*.swf,*.spl)|*.swf;*.spl|Alle Dateien (*.*)|*.*||
41031Projektor (*.exe)|*.exe||
21033Flash
31033Flash (*.swf,*.spl)|*.swf;*.spl|All Files (*.*)|*.*||
41033Projector (*.exe)|*.exe||
21036Flash
31036Flash (*.swf,*.spl)|*.swf;*.spl|All Files (*.*)|*.*||
41036Projection (*.exe)|*.exe||
21041Flash
31041Flash (*.swf,*.spl)|*.swf;*.spl|すべてのファイル (*.*)|*.*||
41041「プロジェクタ」 (*.exe)|*.exe||
module_namehintordfunction_name
KERNEL32.dll292GetModuleFileNameA
KERNEL32.dll612SetErrorMode
KERNEL32.dll450LoadLibraryA
KERNEL32.dll185GetACP
KERNEL32.dll441IsDBCSLeadByte
KERNEL32.dll191GetCPInfo
KERNEL32.dll662Sleep
KERNEL32.dll426InitializeCriticalSection
KERNEL32.dll102EnterCriticalSection
KERNEL32.dll449LeaveCriticalSection
KERNEL32.dll484MultiByteToWideChar
KERNEL32.dll68CreateProcessA
KERNEL32.dll716WaitForMultipleObjects
KERNEL32.dll74CreateThread
KERNEL32.dll282GetLastError
KERNEL32.dll126ExitThread
KERNEL32.dll723WinExec
KERNEL32.dll40CopyFileA
KERNEL32.dll735WriteFile
KERNEL32.dll609SetEndOfFile
KERNEL32.dll87DeleteFileA
KERNEL32.dll373GetVersionExA
KERNEL32.dll52CreateFileA
KERNEL32.dll274GetFileSize
KERNEL32.dll618SetFilePointer
KERNEL32.dll536ReadFile
KERNEL32.dll27CloseHandle
KERNEL32.dll336GetStartupInfoA
KERNEL32.dll202GetCommandLineA
KERNEL32.dll403GlobalUnlock
KERNEL32.dll396GlobalLock
KERNEL32.dll776lstrlenA
KERNEL32.dll294GetModuleHandleA
KERNEL32.dll125ExitProcess
KERNEL32.dll318GetProcAddress
KERNEL32.dll385GlobalAlloc
KERNEL32.dll518QueryPerformanceCounter
KERNEL32.dll392GlobalFree
USER32.dll58ClientToScreen
USER32.dll135DeleteMenu
USER32.dll422LoadMenuA
USER32.dll522ScreenToClient
USER32.dll636TrackPopupMenu
USER32.dll681WindowFromPoint
USER32.dll252GetCursorPos
USER32.dll212FillRect
USER32.dll594SetTimer
USER32.dll405KillTimer
USER32.dll541SetCapture
USER32.dll514ReleaseCapture
USER32.dll550SetCursor
USER32.dll187EndPaint
USER32.dll12BeginPaint
USER32.dll446MessageBoxA
USER32.dll478PostMessageA
USER32.dll258GetDlgItem
USER32.dll351GetWindowTextLengthA
USER32.dll260GetDlgItemTextA
USER32.dll183EnableWindow
USER32.dll342GetWindowLongA
USER32.dll240GetClientRect
USER32.dll52CheckMenuItem
USER32.dll141DestroyMenu
USER32.dll565SetMenu
USER32.dll378InvalidateRect
USER32.dll457MoveWindow
USER32.dll147DialogBoxParamA
USER32.dll185EndDialog
USER32.dll322GetSubMenu
USER32.dll181EnableMenuItem
USER32.dll132DefWindowProcA
USER32.dll142DestroyWindow
USER32.dll480PostQuitMessage
USER32.dll427LoadStringA
USER32.dll89CreateWindowExA
USER32.dll618ShowWindow
USER32.dll657UpdateWindow
USER32.dll414LoadIconA
USER32.dll410LoadCursorA
USER32.dll498RegisterClassA
USER32.dll406LoadAcceleratorsA
USER32.dll298GetMessageA
USER32.dll639TranslateAcceleratorA
USER32.dll642TranslateMessage
USER32.dll149DispatchMessageA
USER32.dll338GetWindow
USER32.dll348GetWindowRect
USER32.dll603SetWindowPos
USER32.dll274GetKeyState
USER32.dll242GetClipboardData
USER32.dll284GetMenu
USER32.dll600SetWindowLongA
USER32.dll255GetDesktopWindow
USER32.dll467OpenClipboard
USER32.dll547SetClipboardData
USER32.dll60CloseClipboard
USER32.dll253GetDC
USER32.dll515ReleaseDC
USER32.dll559SetFocus
USER32.dll556SetDlgItemTextA
USER32.dll228GetCapture
GDI32.dll66CreatePalette
GDI32.dll497SetTextAlign
GDI32.dll471SetDIBitsToDevice
GDI32.dll215GdiFlush
GDI32.dll513StretchDIBits
GDI32.dll83DeleteObject
GDI32.dll41CreateCompatibleBitmap
GDI32.dll80DeleteDC
GDI32.dll47CreateDIBSection
GDI32.dll293GetDeviceCaps
GDI32.dll42CreateCompatibleDC
GDI32.dll17BitBlt
GDI32.dll138EnumFontFamiliesA
GDI32.dll388LineTo
GDI32.dll392MoveToEx
GDI32.dll461SetBkColor
GDI32.dll263GetBkColor
GDI32.dll462SetBkMode
GDI32.dll264GetBkMode
GDI32.dll158ExtTextOutA
GDI32.dll366GetTextExtentPoint32A
GDI32.dll68CreatePen
GDI32.dll431Rectangle
GDI32.dll351GetStockObject
GDI32.dll77CreateSolidBrush
GDI32.dll499SetTextColor
GDI32.dll373GetTextMetricsA
GDI32.dll55CreateFontIndirectA
GDI32.dll428RealizePalette
GDI32.dll456SelectPalette
GDI32.dll282GetClipBox
GDI32.dll448SaveDC
GDI32.dll455SelectObject
GDI32.dll441RestoreDC
GDI32.dll355GetSystemPaletteEntries
GDI32.dll384IntersectClipRect
comdlg32.dll11GetSaveFileNameA
comdlg32.dll9GetOpenFileNameA
ADVAPI32.dll378RegQueryValueA
ADVAPI32.dll370RegOpenKeyExA
ADVAPI32.dll350RegCreateKeyA
ADVAPI32.dll390RegSetValueExA
ADVAPI32.dll389RegSetValueA
ADVAPI32.dll347RegCloseKey
ADVAPI32.dll379RegQueryValueExA
SHELL32.dll17DragAcceptFiles
SHELL32.dll20DragQueryFileA
WINMM.dll186waveOutPrepareHeader
WINMM.dll192waveOutUnprepareHeader
WINMM.dll153timeKillEvent
WINMM.dll149timeEndPeriod
WINMM.dll152timeGetTime
WINMM.dll148timeBeginPeriod
WINMM.dll150timeGetDevCaps
WINMM.dll193waveOutWrite
WINMM.dll187waveOutReset
WINMM.dll154timeSetEvent
WINMM.dll184waveOutOpen
WINMM.dll173waveOutGetDevCapsA
WINMM.dll172waveOutClose

StringTable 040904b0

CompanyNameMacromedia, Inc.
FileDescriptionFlash Player 4.0 r7
FileVersion4,0,7,0
InternalNameFlash
LegalCopyrightCopyright © 1996-99 Macromedia, Inc.
LegalTrademarksFlash
OriginalFilenameSwFlsh32.exe
ProductNameFlash 4.0
ProductVersion4,0,7,0

VS_FIXEDFILEINFO

FileVersion4.0.7.0
ProductVersion4.0.7.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0286720EXE06/04/1999 19:07:50#
15c115HTM#
46000434061BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 720781 bytes (704 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK