adobe_flash.exe - thdtre.exe

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	adobe_flash.exe
size	136552 (0x21568)
md5	80b356b9203d7e494ccc795d15999133

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
12	7291	1
93	4035	6
14	7299	1
10	8047	11
4	8047	2
11	9782	3
4	9782	3
1	0	171
11	8168	4
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x534830fb
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x6000
SizeOfInitializedData	0x6000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x5c38
BaseOfCode	0x1000
BaseOfData	0x7000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xd000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0xb600
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x50a4	0x6000	R-X CODE
.rdata	0x7000	0x135d	0x2000	R-- IDATA
.data	0x9000	0x7a8	0x1000	RW- IDATA
.rsrc	0xa000	0x2ea1	0x3000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x7ce8	0x78
RESOURCE	0xa000	0x2ea0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x7000	0x2c0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	9640	1252
DIALOG	#102	532	1252
DIALOG	#129	178	1252
STRING	#7	60	1252
GROUP_ICON	#1	20	1252
VERSION	#1	36876	1252

id	lang	string
101	2052	关于 game(&A)...

module_name	hint	ord	function_name
MFC42u.DLL		4692
MFC42u.DLL		5303
MFC42u.DLL		5285
MFC42u.DLL		5710
MFC42u.DLL		2977
MFC42u.DLL		3142
MFC42u.DLL		3254
MFC42u.DLL		4459
MFC42u.DLL		3131
MFC42u.DLL		3257
MFC42u.DLL		2980
MFC42u.DLL		3076
MFC42u.DLL		2971
MFC42u.DLL		3825
MFC42u.DLL		3826
MFC42u.DLL		3820
MFC42u.DLL		3074
MFC42u.DLL		4075
MFC42u.DLL		4616
MFC42u.DLL		4418
MFC42u.DLL		3733
MFC42u.DLL		561
MFC42u.DLL		815
MFC42u.DLL		2506
MFC42u.DLL		2613
MFC42u.DLL		1131
MFC42u.DLL		641
MFC42u.DLL		616
MFC42u.DLL		795
MFC42u.DLL		825
MFC42u.DLL		5261
MFC42u.DLL		4370
MFC42u.DLL		4847
MFC42u.DLL		4992
MFC42u.DLL		4704
MFC42u.DLL		6048
MFC42u.DLL		4073
MFC42u.DLL		1767
MFC42u.DLL		4401
MFC42u.DLL		5237
MFC42u.DLL		2377
MFC42u.DLL		5157
MFC42u.DLL		6370
MFC42u.DLL		4347
MFC42u.DLL		5276
MFC42u.DLL		3793
MFC42u.DLL		4831
MFC42u.DLL		4435
MFC42u.DLL		2640
MFC42u.DLL		2047
MFC42u.DLL		4074
MFC42u.DLL		3744
MFC42u.DLL		5059
MFC42u.DLL		1720
MFC42u.DLL		5257
MFC42u.DLL		2438
MFC42u.DLL		2116
MFC42u.DLL		5273
MFC42u.DLL		4621
MFC42u.DLL		4419
MFC42u.DLL		3592
MFC42u.DLL		324
MFC42u.DLL		4229
MFC42u.DLL		2294
MFC42u.DLL		800
MFC42u.DLL		4155
MFC42u.DLL		540
MFC42u.DLL		755
MFC42u.DLL		470
MFC42u.DLL		537
MFC42u.DLL		4294
MFC42u.DLL		3806
MFC42u.DLL		3332
MFC42u.DLL		2505
MFC42u.DLL		293
MFC42u.DLL		6330
MFC42u.DLL		1165
MFC42u.DLL		3688
MFC42u.DLL		3621
MFC42u.DLL		3658
MFC42u.DLL		2406
MFC42u.DLL		1634
MFC42u.DLL		3568
MFC42u.DLL		2858
MFC42u.DLL		2854
MFC42u.DLL		2859
MFC42u.DLL		2371
MFC42u.DLL		6051
MFC42u.DLL		1768
MFC42u.DLL		5286
MFC42u.DLL		3397
MFC42u.DLL		3716
MFC42u.DLL		567
MFC42u.DLL		2403
MFC42u.DLL		2015
MFC42u.DLL		4213
MFC42u.DLL		2570
MFC42u.DLL		4392
MFC42u.DLL		3577
MFC42u.DLL		1143
MFC42u.DLL		2717
MFC42u.DLL		5298
MFC42u.DLL		5296
MFC42u.DLL		3341
MFC42u.DLL		2388
MFC42u.DLL		5193
MFC42u.DLL		1089
MFC42u.DLL		3917
MFC42u.DLL		5727
MFC42u.DLL		2504
MFC42u.DLL		2546
MFC42u.DLL		4480
MFC42u.DLL		6371
MFC42u.DLL		4269
MFC42u.DLL		6372
MFC42u.DLL		4667
MFC42u.DLL		1569
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	390		_onexit
MSVCRT.dll	183		_controlfp
MSVCRT.dll	106		__p__commode
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	271		_initterm
MSVCRT.dll	139		__wgetmainargs
MSVCRT.dll	487		_wcmdln
MSVCRT.dll	585		exit
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	211		_exit
MSVCRT.dll	678		rand
MSVCRT.dll	244		_gcvt
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	657		malloc
MSVCRT.dll	599		fopen
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	515		_wfopen
MSVCRT.dll	694		strcat
MSVCRT.dll	241		_ftol
KERNEL32.dll	382		GetModuleFileNameW
KERNEL32.dll	86		CreateFileW
KERNEL32.dll	355		GetFileSize
KERNEL32.dll	693		ReadFile
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	440		GetStartupInfoW
KERNEL32.dll	386		GetModuleHandleW
KERNEL32.dll	83		CreateFileA
KERNEL32.dll	381		GetModuleFileNameA
USER32.dll	255		GetClientRect
USER32.dll	64		ClientToScreen
USER32.dll	268		GetDC
USER32.dll	554		ReleaseDC
USER32.dll	634		SetTimer
USER32.dll	437		KillTimer
USER32.dll	270		GetDesktopWindow
USER32.dll	196		EnableWindow
USER32.dll	447		LoadIconW
USER32.dll	372		GetWindowRect
USER32.dll	422		IsIconic
USER32.dll	348		GetSystemMenu
USER32.dll	9		AppendMenuW
USER32.dll	182		DrawIcon
USER32.dll	349		GetSystemMetrics
USER32.dll	267		GetCursorPos
USER32.dll	576		SendMessageW
GDI32.dll	526		SelectObject
GDI32.dll	80		CreateSolidBrush
GDI32.dll	71		CreatePen
GDI32.dll	143		DeleteObject
GDI32.dll	502		Rectangle

StringTable 100404b0

Comments
CompanyName
FileDescription	jytdd
FileVersion	1, 0, 0, 1
InternalName	tydh
LegalCopyright	Copyright ? 2014
LegalTrademarks
OriginalFilename	thdtre.exe
PrivateBuild
ProductName	rthdrt
ProductVersion	1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	53248	EXE	04/11/2014 18:14:19	#
15c1	15	HTM		#
d000	83304	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 136552 bytes (134 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

adobe_flash.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 100404b0

VS_FIXEDFILEINFO

adobe_flash.exe
-