窗口半透明的软件英文版.exe - bLend.EXE

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	窗口半透明的软件英文版.exe
size	93853 (0x16e9d)
md5	fe08676536e18a13a377b037c5a4093a

type	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
93	2179	10
4	9782	2
12	7291	3
14	7299	2
10	8047	11
4	8047	3
1	0	269
11	9782	14
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x440ebcac
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xb406
SizeOfInitializedData	0x33406
SizeOfUninitializedData	0
AddressOfEntryPoint	0x34046
BaseOfCode	0x1000
BaseOfData	0x8000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x35000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Petite v2.1 (1)

Sections

name	va	vsize	raw size	flags
	0x1000	0xb000	0x3e00	RWX CODE IDATA
.rsrc	0xc000	0x28000	0x1269d	RW- IDATA
.petite	0x34000	0x406	0x600	RWX CODE IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x34204	0x202
RESOURCE	0xc000	0x27796
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
CURSOR	#1	748
BITMAP	#1	71848
ICON	#1	9640
ICON	#2	4264
ICON	#3	2440
ICON	#4	1640
ICON	#5	1640
ICON	#6	1256
ICON	#7	1256
ICON	#8	1128
ICON	#9	744
ICON	#10	488
ICON	#11	296
ICON	#12	3752
ICON	#13	2216
ICON	#14	1736
ICON	#15	1384
ICON	#16	9640
ICON	#17	4264
ICON	#18	2440
ICON	#19	1128
ICON	#20	744
ICON	#21	488
ICON	#22	296
ICON	#23	3752
ICON	#24	2216
ICON	#25	1736
ICON	#26	1384
ICON	#27	9640
ICON	#28	4264
ICON	#29	2440
ICON	#30	1128
MENU	#131	156
DIALOG	#100	780
DIALOG	#102	1332
DIALOG	#129	888
DIALOG	#136	140
STRING	#7	1528
STRING	#8	480
ACCELERATORS	#132	8
GROUP_CURSOR	#1022	20
GROUP_ICON	#128	62
GROUP_ICON	#133	174
GROUP_ICON	#135	174
GROUP_ICON	#139	20
GROUP_ICON	#140	20
VERSION	#1	800
MANIFEST	#1	658

module_name	ord	function_name
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		GlobalAlloc
KERNEL32.DLL		GlobalFree
KERNEL32.DLL		GetModuleHandleA
ADVAPI32.dll		RegCloseKey
GDI32.dll		RoundRect
MFC42.DLL	3716
MSVCRT.dll		free
SHELL32.dll		ShellExecuteA
USER32.dll		MessageBoxA
USER32.dll		wsprintfA

StringTable 040904B0

Comments	Lord Devrexster
CompanyName	eXXtreme
FileDescription	bLend
FileVersion	0, 0, 0, 1
InternalName	bLend
LegalCopyright
LegalTrademarks
OriginalFilename	bLend.EXE
PrivateBuild
ProductName	bLend
ProductVersion	0, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	0.0.0.1
ProductVersion	0.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	2560	EXE	03/08/2006 11:14:52	#
15c1	15	HTM		#
15d0	88269	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x22fe0

[?] can't find file_offset of VA 0x23648

[?] can't find file_offset of VA 0x23cb0

[?] can't find file_offset of VA 0x24198

[?] can't find file_offset of VA 0x24680

[?] can't find file_offset of VA 0x24968

[?] can't find file_offset of VA 0x24b50

[?] can't find file_offset of VA 0x24c78

[?] can't find file_offset of VA 0x25b20

[?] can't find file_offset of VA 0x263c8

[?] can't find file_offset of VA 0x26a90

[?] can't find file_offset of VA 0x26ff8

[?] can't find file_offset of VA 0x295a0

[?] can't find file_offset of VA 0x2a648

[?] can't find file_offset of VA 0x2afd0

[?] can't find file_offset of VA 0x2b438

[?] can't find file_offset of VA 0x2b720

[?] can't find file_offset of VA 0x2b908

[?] can't find file_offset of VA 0x2ba30

[?] can't find file_offset of VA 0x2c8d8

[?] can't find file_offset of VA 0x2d180

[?] can't find file_offset of VA 0x2d848

[?] can't find file_offset of VA 0x2ddb0

[?] can't find file_offset of VA 0x30358

[?] can't find file_offset of VA 0x31400

[?] can't find file_offset of VA 0x31d88

[?] can't find file_offset of VA 0x321f0

[?] can't find file_offset of VA 0x3228c

[?] can't find file_offset of VA 0x32598

[?] can't find file_offset of VA 0x32acc

[?] can't find file_offset of VA 0x32e44

[?] can't find file_offset of VA 0x32ed0

[?] can't find file_offset of VA 0x334c8

[?] can't find file_offset of VA 0x336a8

[?] can't find file_offset of VA 0x336b0

[?] can't find file_offset of VA 0x336c4

[?] can't find file_offset of VA 0x33774

[?] can't find file_offset of VA 0x33824

[?] can't find file_offset of VA 0x33838

窗口半透明的软件英文版.exe-