
=== MZ Header ===

                     signature:                     "MZ"
           bytes_in_last_block:        144          0x90
                blocks_in_file:          3             3
                    num_relocs:          0             0
             header_paragraphs:          4             4
          min_extra_paragraphs:          0             0
          max_extra_paragraphs:      65535        0xffff
                            ss:          0             0
                            sp:        184          0xb8
                      checksum:          0             0
                            ip:          0             0
                            cs:          0             0
            reloc_table_offset:         64          0x40
                overlay_number:          0             0
                     reserved0:          0             0
                        oem_id:          0             0
                      oem_info:          0             0
                     reserved2:          0             0
                     reserved3:          0             0
                     reserved4:          0             0
                     reserved5:          0             0
                     reserved6:          0             0
                        lfanew:        184          0xb8

=== DOS STUB ===

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

=== RICH Header ===

   ID   VER         COUNT  DESCRIPTION
   13  1f8e           126  
   12  20fc             1  

=== PE Header ===

                     signature:             "PE\x00\x00"

# IMAGE_FILE_HEADER:
                       Machine:        332         0x14c  x86
              NumberOfSections:          4             4
                 TimeDateStamp:    "2021-03-18 07:16:23"
          PointerToSymbolTable:          0             0
               NumberOfSymbols:          0             0
          SizeOfOptionalHeader:        224          0xe0
               Characteristics:        270         0x10e  EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED
                                                          LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

# IMAGE_OPTIONAL_HEADER32:
                         Magic:        267         0x10b  32-bit executable
                 LinkerVersion:                     5.12
                    SizeOfCode:       8704        0x2200
         SizeOfInitializedData:       4096        0x1000
       SizeOfUninitializedData:          0             0
           AddressOfEntryPoint:       4096        0x1000
                    BaseOfCode:       4096        0x1000
                    BaseOfData:      16384        0x4000
                     ImageBase:    4194304      0x400000
              SectionAlignment:       4096        0x1000
                 FileAlignment:        512         0x200
        OperatingSystemVersion:                      4.0
                  ImageVersion:                      0.0
              SubsystemVersion:                      4.0
                     Reserved1:          0             0
                   SizeOfImage:      28672        0x7000
                 SizeOfHeaders:       1024         0x400
                      CheckSum:          0             0
                     Subsystem:          2             2  WINDOWS_GUI
            DllCharacteristics:          0             0
            SizeOfStackReserve:    1048576      0x100000
             SizeOfStackCommit:       4096        0x1000
             SizeOfHeapReserve:    1048576      0x100000
              SizeOfHeapCommit:       4096        0x1000
                   LoaderFlags:          0             0
           NumberOfRvaAndSizes:         16          0x10

=== DATA DIRECTORY ===

  EXPORT        rva:0x       0   size:0x        0
  IMPORT        rva:0x    4140   size:0x       c8
  RESOURCE      rva:0x       0   size:0x        0
  EXCEPTION     rva:0x       0   size:0x        0
  SECURITY      rva:0x       0   size:0x        0
  BASERELOC     rva:0x    6000   size:0x      124
  DEBUG         rva:0x       0   size:0x        0
  ARCHITECTURE  rva:0x       0   size:0x        0
  GLOBALPTR     rva:0x       0   size:0x        0
  TLS           rva:0x       0   size:0x        0
  LOAD_CONFIG   rva:0x       0   size:0x        0
  Bound_IAT     rva:0x       0   size:0x        0
  IAT           rva:0x    4000   size:0x      140
  Delay_IAT     rva:0x       0   size:0x        0
  CLR_Header    rva:0x       0   size:0x        0
                rva:0x       0   size:0x        0

=== SECTIONS ===

  NAME          RVA      VSZ   RAW_SZ  RAW_PTR  nREL  REL_PTR nLINE LINE_PTR     FLAGS
  .text        1000     20f6     2200      400     0        0     0        0  60000020  R-X CODE
  .rdata       4000      830      a00     2600     0        0     0        0  40000040  R-- IDATA
  .data        5000      240      400     3000     0        0     0        0  c0000040  RW- IDATA
  .reloc       6000      182      200     3400     0        0     0        0  42000040  R-- IDATA DISCARDABLE

=== IMPORTS ===

MODULE_NAME      HINT   ORD  FUNCTION_NAME
user32.dll        1fd        SendMessageA
user32.dll        1e0        RegisterClassA
user32.dll        198        LoadIconA
user32.dll        194        LoadCursorA
user32.dll        15e        GetWindowThreadProcessId
user32.dll        248        ShowWindow
user32.dll        122        GetMessageA
user32.dll        25e        TranslateMessage
user32.dll        26a        UpdateWindow
user32.dll        27d        wsprintfA
user32.dll         e6        GetClassNameA
user32.dll         cb        EnumWindows
user32.dll         56        CreateWindowExA
user32.dll         93        DispatchMessageA
user32.dll         83        DefWindowProcA
user32.dll        15a        GetWindowTextA
kernel32.dll      1f0        LocalAlloc
kernel32.dll      216        OpenProcess
kernel32.dll      280        SetEvent
kernel32.dll      1f4        LocalFree
kernel32.dll      214        OpenMutexA
kernel32.dll      134        GetModuleHandleA
kernel32.dll      2f7        WriteFile
kernel32.dll      2e8        WaitForSingleObject
kernel32.dll      2db        VirtualFree
kernel32.dll      2d9        VirtualAlloc
kernel32.dll      2bc        SystemTimeToFileTime
kernel32.dll      2b7        Sleep
kernel32.dll       23        CloseHandle
kernel32.dll       39        CreateEventA
kernel32.dll       3d        CreateFileA
kernel32.dll       4a        CreateMutexA
kernel32.dll       56        CreateThread
kernel32.dll       69        DeleteFileA
kernel32.dll       9b        ExitProcess
kernel32.dll       a4        FileTimeToSystemTime
kernel32.dll       e6        GetCommandLineA
kernel32.dll       e7        GetCommandLineW
kernel32.dll      100        GetCurrentProcess
kernel32.dll      101        GetCurrentProcessId
kernel32.dll      129        GetLocalTime
kernel32.dll      132        GetModuleFileNameA
kernel32.dll      198        GetVolumeInformationA
kernel32.dll      153        GetProcAddress
kernel32.dll      184        GetTempPathA
kernel32.dll      285        SetFilePointer
advapi32.dll      10f        GetSidSubAuthority
advapi32.dll      198        OpenProcessToken
advapi32.dll      111        GetTokenInformation
wsock32.dll        21        WSAStartup
wsock32.dll        26        closesocket
wsock32.dll        27        connect
wsock32.dll        35        htons
wsock32.dll        39        ioctlsocket
wsock32.dll        3e        recv
wsock32.dll        43        select
wsock32.dll        44        send
wsock32.dll        47        setsockopt
wsock32.dll        48        shutdown
wsock32.dll        49        socket
wsock32.dll        1b        WSACleanup
shell32.dll         5        CommandLineToArgvW
ws2_32.dll         57        freeaddrinfo
ws2_32.dll         28        WSAIoctl
ws2_32.dll         58        getaddrinfo
ole32.dll          64        CoUninitialize
ole32.dll          38        CoInitialize
ole32.dll           f        CoCreateInstance
secur32.dll        15        GetUserNameExA
secur32.dll        16        GetUserNameExW
psapi.dll           e        GetModuleFileNameExA

=== Packer / Compiler ===

  TASM / MASM
