BluetoothMacChanger.exe - Bluetooth MAC Address Changer main program executable

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	BluetoothMacChanger.exe
size	1916928 (0x1d4000)
md5	fee2d0b035637dd885c43ab255de32d3

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0x4e83
reserved6	0xffffb17c
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xe
TimeDateStamp	0x56719186
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	83.82
SizeOfCode	0x71000
SizeOfInitializedData	0x162000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x218b0b
BaseOfCode	0x1cb000
BaseOfData	0x1b7000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x3d9000
SizeOfHeaders	0x1000
CheckSum	0x1e3bc3
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Armadillo v6.0 (Silicon Realms Toolworks)

Sections

name	va	vsize	raw size	flags
.rdckwy	0x1000	0x1a6bf8	0	R-X CODE
.bsdpf	0x1a8000	0x194c	0	R-X CODE
.znhed	0x1aa000	0x2c9c	0	RW- IDATA
.bss	0x1ad000	0x534c	0	RW-
.lenaw	0x1b3000	0x2cb6	0	RW- IDATA
.tls	0x1b6000	0x3c	0	RW-
.kpqja	0x1b7000	0x18	0x1000	R-- IDATA
.otvi	0x1b8000	0x12374	0	R-- IDATA DISCARDABLE
.kbcly	0x1cb000	0x70000	0x64000	RWX CODE
.laxy	0x23b000	0x10000	0xd000	RWX CODE
.zcxjlf	0x24b000	0x20000	0x15000	RW- IDATA
.wjtzh	0x26b000	0x10000	0x9000	R-- IDATA DISCARDABLE
.clph	0x27b000	0x140000	0x13e000	RW- IDATA
.djnil	0x3bb000	0x1e000	0x5000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x25eae4	0x50
RESOURCE	0x3bb000	0x1d400
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x26b000	0x5b10
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x1b7000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x24b000	0x2e0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x5b6000	0x5b603c	0x5aa7bc	0x5b7010	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	PREVIEWGLYPH	232
ICON	#1	4264
ICON	#2	1128
ICON	#3	9640
DIALOG	DLGTEMPLATE	82
DIALOG	TEXTFILEDLG	82
STRING	#4081	340
STRING	#4082	816
STRING	#4083	216
STRING	#4084	208
STRING	#4085	272
STRING	#4086	1032
STRING	#4087	880
STRING	#4088	1020
STRING	#4089	860
STRING	#4090	1000
STRING	#4091	380
STRING	#4092	204
STRING	#4093	476
STRING	#4094	924
STRING	#4095	860
STRING	#4096	672
RCDATA	CHARTABLE	33512
RCDATA	DVCLAL	16
RCDATA	LICENSE_TXT	2402
RCDATA	PACKAGEINFO	968
RCDATA	TABOUTFORM	1237
RCDATA	TBTMACCHANGERFORM	41234
RCDATA	TLICENSEFORM	2358
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	48
VERSION	#1	880
MANIFEST	#1	795

module_name	hint	function_name
KERNEL32.dll	111	CreateThread
KERNEL32.dll	522	GlobalUnlock
KERNEL32.dll	515	GlobalLock
KERNEL32.dll	504	GlobalAlloc
KERNEL32.dll	479	GetTickCount
KERNEL32.dll	916	WideCharToMultiByte
KERNEL32.dll	563	IsBadReadPtr
KERNEL32.dll	502	GlobalAddAtomA
KERNEL32.dll	503	GlobalAddAtomW
KERNEL32.dll	383	GetModuleHandleA
KERNEL32.dll	511	GlobalFree
KERNEL32.dll	512	GlobalGetAtomNameA
KERNEL32.dll	506	GlobalDeleteAtom
KERNEL32.dll	513	GlobalGetAtomNameW
KERNEL32.dll	245	FreeConsole
KERNEL32.dll	344	GetEnvironmentVariableA
KERNEL32.dll	902	VirtualProtect
KERNEL32.dll	897	VirtualAlloc
KERNEL32.dll	416	GetProcAddress
KERNEL32.dll	369	GetLastError
KERNEL32.dll	594	LoadLibraryA
KERNEL32.dll	808	SetLastError
KERNEL32.dll	836	SetThreadPriority
KERNEL32.dll	325	GetCurrentThread
KERNEL32.dll	787	SetEnvironmentVariableA
KERNEL32.dll	706	ReleaseMutex
KERNEL32.dll	912	WaitForSingleObject
KERNEL32.dll	96	CreateMutexA
KERNEL32.dll	644	OpenMutexA
KERNEL32.dll	789	SetErrorMode
KERNEL32.dll	326	GetCurrentThreadId
KERNEL32.dll	206	FindClose
KERNEL32.dll	213	FindFirstFileW
KERNEL32.dll	905	VirtualQueryEx
KERNEL32.dll	346	GetExitCodeProcess
KERNEL32.dll	696	ReadProcessMemory
KERNEL32.dll	903	VirtualProtectEx
KERNEL32.dll	62	ContinueDebugEvent
KERNEL32.dll	722	ResumeThread
KERNEL32.dll	653	OutputDebugStringA
KERNEL32.dll	654	OutputDebugStringW
KERNEL32.dll	832	SetThreadContext
KERNEL32.dll	471	GetThreadContext
KERNEL32.dll	909	WaitForDebugEvent
KERNEL32.dll	941	WriteProcessMemory
KERNEL32.dll	881	UnmapViewOfFile
KERNEL32.dll	856	SuspendThread
KERNEL32.dll	118	DebugActiveProcess
KERNEL32.dll	616	MapViewOfFile
KERNEL32.dll	147	DuplicateHandle
KERNEL32.dll	322	GetCurrentProcess
KERNEL32.dll	84	CreateFileMappingA
KERNEL32.dll	790	SetEvent
KERNEL32.dll	79	CreateEventA
KERNEL32.dll	629	MultiByteToWideChar
KERNEL32.dll	52	CloseHandle
KERNEL32.dll	102	CreateProcessA
KERNEL32.dll	439	GetStartupInfoA
KERNEL32.dll	272	GetCommandLineA
KERNEL32.dll	458	GetSystemTimeAsFileTime
KERNEL32.dll	185	ExitProcess
KERNEL32.dll	604	LocalFree
KERNEL32.dll	238	FlushFileBuffers
KERNEL32.dll	931	WriteConsoleW
KERNEL32.dll	309	GetConsoleOutputCP
KERNEL32.dll	921	WriteConsoleA
KERNEL32.dll	823	SetStdHandle
KERNEL32.dll	243	FormatMessageA
KERNEL32.dll	307	GetConsoleMode
KERNEL32.dll	290	GetConsoleCP
KERNEL32.dll	795	SetFilePointer
KERNEL32.dll	373	GetLocaleInfoW
KERNEL32.dll	445	GetStringTypeW
KERNEL32.dll	442	GetStringTypeA
KERNEL32.dll	577	IsValidLocale
KERNEL32.dll	175	EnumSystemLocalesA
KERNEL32.dll	372	GetLocaleInfoA
KERNEL32.dll	483	GetUserDefaultLCID
KERNEL32.dll	675	QueryPerformanceCounter
KERNEL32.dll	358	GetFileType
KERNEL32.dll	804	SetHandleCount
KERNEL32.dll	343	GetEnvironmentStringsW
KERNEL32.dll	854	Sleep
KERNEL32.dll	152	EnterCriticalSection
KERNEL32.dll	593	LeaveCriticalSection
KERNEL32.dll	489	GetVersionExA
KERNEL32.dll	547	InitializeCriticalSection
KERNEL32.dll	323	GetCurrentProcessId
KERNEL32.dll	382	GetModuleFileNameW
KERNEL32.dll	438	GetShortPathNameW
KERNEL32.dll	381	GetModuleFileNameA
KERNEL32.dll	83	CreateFileA
KERNEL32.dll	437	GetShortPathNameA
KERNEL32.dll	247	FreeEnvironmentStringsW
KERNEL32.dll	341	GetEnvironmentStrings
KERNEL32.dll	246	FreeEnvironmentStringsA
KERNEL32.dll	556	InterlockedIncrement
KERNEL32.dll	552	InterlockedDecrement
KERNEL32.dll	553	InterlockedExchange
KERNEL32.dll	129	DeleteCriticalSection
KERNEL32.dll	727	RtlUnwind
KERNEL32.dll	679	RaiseException
KERNEL32.dll	862	TerminateProcess
KERNEL32.dll	878	UnhandledExceptionFilter
KERNEL32.dll	842	SetUnhandledExceptionFilter
KERNEL32.dll	569	IsDebuggerPresent
KERNEL32.dll	534	HeapFree
KERNEL32.dll	528	HeapAlloc
KERNEL32.dll	419	GetProcessHeap
KERNEL32.dll	260	GetCPInfo
KERNEL32.dll	580	LCMapStringA
KERNEL32.dll	581	LCMapStringW
KERNEL32.dll	869	TlsGetValue
KERNEL32.dll	867	TlsAlloc
KERNEL32.dll	870	TlsSetValue
KERNEL32.dll	868	TlsFree
KERNEL32.dll	932	WriteFile
KERNEL32.dll	441	GetStdHandle
KERNEL32.dll	540	HeapSize
KERNEL32.dll	253	GetACP
KERNEL32.dll	403	GetOEMCP
KERNEL32.dll	575	IsValidCodePage
KERNEL32.dll	532	HeapDestroy
KERNEL32.dll	530	HeapCreate
KERNEL32.dll	899	VirtualFree
KERNEL32.dll	538	HeapReAlloc
USER32.dll	460	LoadStringW
USER32.dll	429	IsWindow
USER32.dll	514	PostMessageA
USER32.dll	270	GetDesktopWindow
USER32.dll	492	MoveWindow
USER32.dll	618	SetPropA
USER32.dll	219	EnumThreadWindows
USER32.dll	330	GetPropA
USER32.dll	314	GetMessageA
USER32.dll	13	BeginPaint
USER32.dll	437	KillTimer
USER32.dll	242	GetAsyncKeyState
USER32.dll	349	GetSystemMetrics
USER32.dll	634	SetTimer
USER32.dll	646	SetWindowTextA
USER32.dll	273	GetDlgItem
USER32.dll	82	CreateDialogIndirectParamA
USER32.dll	658	ShowWindow
USER32.dll	700	UpdateWindow
USER32.dll	459	LoadStringA
USER32.dll	200	EndPaint
USER32.dll	227	FindWindowA
USER32.dll	718	WaitForInputIdle
USER32.dll	153	DestroyWindow
USER32.dll	479	MessageBoxA
USER32.dll	392	InSendMessage
USER32.dll	690	UnpackDDElParam
USER32.dll	234	FreeDDElParam
USER32.dll	143	DefWindowProcW
USER32.dll	142	DefWindowProcA
USER32.dll	442	LoadCursorA
USER32.dll	537	RegisterClassW
USER32.dll	97	CreateWindowExW
USER32.dll	534	RegisterClassA
USER32.dll	96	CreateWindowExA
USER32.dll	379	GetWindowThreadProcessId
USER32.dll	576	SendMessageW
USER32.dll	571	SendMessageA
USER32.dll	512	PeekMessageA
USER32.dll	682	TranslateMessage
USER32.dll	161	DispatchMessageA
USER32.dll	222	EnumWindows
USER32.dll	432	IsWindowUnicode
USER32.dll	509	PackDDElParam
USER32.dll	515	PostMessageW
GDI32.dll	526	SelectObject
GDI32.dll	18	BitBlt
GDI32.dll	143	DeleteObject
GDI32.dll	69	CreatePalette
GDI32.dll	46	CreateDCA
GDI32.dll	527	SelectPalette
GDI32.dll	499	RealizePalette
GDI32.dll	51	CreateDIBitmap
GDI32.dll	140	DeleteDC
GDI32.dll	45	CreateCompatibleDC

StringTable 040904E4

CompanyName	macaddresschanger.com
FileDescription	Bluetooth MAC Address Changer main program executable
FileVersion	1.2.0.36
InternalName
LegalCopyright	© 2015 macaddresschanger.com
LegalTrademarks
OriginalFilename
ProductName	Bluetooth MAC Address Changer
ProductVersion	1.0
Comments

VS_FIXEDFILEINFO

FileVersion	1.2.0.36
ProductVersion	1.2.0.36
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	1916928	EXE	12/16/2015 16:29:58	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x3c00ec

[?] can't find file_offset of VA 0x3c0220

[?] can't find file_offset of VA 0x3c0354

[?] can't find file_offset of VA 0x3c0488

[?] can't find file_offset of VA 0x3c05bc

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x3c06f0

[?] can't find file_offset of VA 0x3c08c0

[?] can't find file_offset of VA 0x3c0aa4

[?] can't find file_offset of VA 0x3c0c74

[?] can't find file_offset of VA 0x3c0e44

[?] can't find file_offset of VA 0x3c1014

[?] can't find file_offset of VA 0x3c11e4

[?] can't find file_offset of VA 0x3c13b4

[?] can't find file_offset of VA 0x3c1584

[?] can't find file_offset of VA 0x3c1754

[?] can't find file_offset of VA 0x3c1924

[?] can't find file_offset of VA 0x3c1a0c

[?] can't find file_offset of VA 0x3c1a60

[?] can't find file_offset of VA 0x3c1ab4

[?] can't find file_offset of VA 0x3c1c08

[?] can't find file_offset of VA 0x3c1f38

[?] can't find file_offset of VA 0x3c2010

[?] can't find file_offset of VA 0x3c20e0

[?] can't find file_offset of VA 0x3c21f0

[?] can't find file_offset of VA 0x3c25f8

[?] can't find file_offset of VA 0x3c2968

[?] can't find file_offset of VA 0x3c2d64

[?] can't find file_offset of VA 0x3c30c0

[?] can't find file_offset of VA 0x3c34a8

[?] can't find file_offset of VA 0x3c3624

[?] can't find file_offset of VA 0x3c36f0

[?] can't find file_offset of VA 0x3c38cc

[?] can't find file_offset of VA 0x3c3c68

[?] can't find file_offset of VA 0x3c3fc4

[?] can't find file_offset of VA 0x3c4264

[?] can't find file_offset of VA 0x3cc54c

[?] can't find file_offset of VA 0x3cc55c

[?] can't find file_offset of VA 0x3ccec0

[?] can't find file_offset of VA 0x3cd288

[?] can't find file_offset of VA 0x3cd760

[?] can't find file_offset of VA 0x3d7874

[?] can't find file_offset of VA 0x3d81ac

[?] can't find file_offset of VA 0x3d81c0

[?] can't find file_offset of VA 0x3d81d4

[?] can't find file_offset of VA 0x3d81e8

[?] can't find file_offset of VA 0x3d81fc

[?] can't find file_offset of VA 0x3d8210

[?] can't find file_offset of VA 0x3d8224

[?] can't find file_offset of VA 0x1aa7bc

BluetoothMacChanger.exe- Bluetooth MAC Address Changer main program executable