KSBKEWrapperMP.exe

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	KSBKEWrapperMP.exe
size	103936 (0x19600)
md5	0a52634935add6ba65e5e07ad2fc08d6

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
261	29118	30
260	29118	13
257	29118	4
257	26715	5
1	0	125
261	29337	1
256	29337	1
255	29337	1
258	29337	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	9
TimeDateStamp	0x603646d0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.28
SizeOfCode	0x11a00
SizeOfInitializedData	0x7e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x11037
BaseOfCode	0x1000
BaseOfData	0x1000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x2e000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.textbss	0x1000	0x10000	0	RWX CODE UDATA
.text	0x11000	0x1183f	0x11a00	R-X CODE
.rdata	0x23000	0x3a06	0x3c00	R-- IDATA
.data	0x27000	0xa24	0x600	RW- IDATA
.idata	0x28000	0x1a5f	0x1c00	R-- IDATA
.msvcjmc	0x2a000	0x14f	0x200	RW- IDATA
.00cfg	0x2b000	0x109	0x200	R-- IDATA
.rsrc	0x2c000	0x43c	0x600	R-- IDATA
.reloc	0x2d000	0xfa0	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x26890	0x176
IMPORT	0x28300	0x64
RESOURCE	0x2c000	0x43c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x2d000	0xcb8
DEBUG	0x24c9c	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x24cd8	0x40
Bound_IAT	0	0
IAT	0x28000	0x300
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	381	0

module_name	hint	function_name
KERNEL32.dll	427	FreeLibrary
KERNEL32.dll	686	GetProcAddress
KERNEL32.dll	964	LoadLibraryW
KERNEL32.dll	692	GetProcessHeap
KERNEL32.dll	841	HeapFree
KERNEL32.dll	837	HeapAlloc
KERNEL32.dll	609	GetLastError
KERNEL32.dll	632	GetModuleHandleW
KERNEL32.dll	720	GetStartupInfoW
KERNEL32.dll	867	InitializeSListHead
KERNEL32.dll	745	GetSystemTimeAsFileTime
KERNEL32.dll	536	GetCurrentProcessId
KERNEL32.dll	1101	QueryPerformanceCounter
KERNEL32.dll	902	IsProcessorFeaturePresent
KERNEL32.dll	1420	TerminateProcess
KERNEL32.dll	535	GetCurrentProcess
KERNEL32.dll	1389	SetUnhandledExceptionFilter
KERNEL32.dll	1453	UnhandledExceptionFilter
KERNEL32.dll	1534	WideCharToMultiByte
KERNEL32.dll	1007	MultiByteToWideChar
KERNEL32.dll	1122	RaiseException
KERNEL32.dll	895	IsDebuggerPresent
KERNEL32.dll	540	GetCurrentThreadId
KERNEL32.dll	1486	VirtualQuery
MSVCP140D.dll	1223	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setp(char , char ) ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
MSVCP140D.dll	1222	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setp(char , char , char *) ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
MSVCP140D.dll	594	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Pninc(void) ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
MSVCP140D.dll	125	public: virtual __thiscall std::basic_ios<char, struct std::char_traits<char> >::~basic_ios<char, struct std::char_traits<char> >(void) ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140D.dll	1229	public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP140D.dll	1298	public: class std::basic_ostream<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::tie(void)const ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
MSVCP140D.dll	1167	public: class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::rdbuf(void)const ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
MSVCP140D.dll	873	public: char __thiscall std::basic_ios<char, struct std::char_traits<char> >::fill(void)const ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
MSVCP140D.dll	1340	public: char __thiscall std::basic_ios<char, struct std::char_traits<char> >::widen(char)const ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
MSVCP140D.dll	12	protected: __thiscall std::basic_ios<char, struct std::char_traits<char> >::basic_ios<char, struct std::char_traits<char> >(void) ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP140D.dll	37	public: __thiscall std::basic_ostream<char, struct std::char_traits<char> >::basic_ostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > *, bool) ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP140D.dll	134	public: virtual __thiscall std::basic_ostream<char, struct std::char_traits<char> >::~basic_ostream<char, struct std::char_traits<char> >(void) ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140D.dll	588	public: void __thiscall std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
MSVCP140D.dll	268	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > &)) ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
MSVCP140D.dll	1129	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::put(char) ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
MSVCP140D.dll	880	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::flush(void) ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
MSVCP140D.dll	560	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP140D.dll	647	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP140D.dll	1022	protected: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const &) ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
MSVCP140D.dll	1213	protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char *, __int64) ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
MSVCP140D.dll	1245	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
MSVCP140D.dll	1285	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCP140D.dll	1315	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCP140D.dll	1355	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char *, __int64) ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
MSVCP140D.dll	1358	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const *, __int64) ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
MSVCP140D.dll	700	class std::basic_ostream<char, struct std::char_traits<char> > std::cout ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
MSVCP140D.dll	856	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::egptr(void)const ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP140D.dll	1103	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::pptr(void)const ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP140D.dll	1094	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::pbase(void)const ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP140D.dll	974	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::gptr(void)const ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP140D.dll	883	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::gbump(int) ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
MSVCP140D.dll	853	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::eback(void)const ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP140D.dll	1257	public: __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const *, __int64) ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
MSVCP140D.dll	1254	public: int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
MSVCP140D.dll	137	public: virtual __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140D.dll	47	protected: __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP140D.dll	1349	public: __int64 __thiscall std::ios_base::width(__int64) ?width@ios_base@std@@QAE_J_J@Z
MSVCP140D.dll	1350	public: __int64 __thiscall std::ios_base::width(void)const ?width@ios_base@std@@QBE_JXZ
MSVCP140D.dll	879	public: int __thiscall std::ios_base::flags(void)const ?flags@ios_base@std@@QBEHXZ
MSVCP140D.dll	1218	protected: void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setg(char , char , char *) ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
MSVCP140D.dll	973	public: bool __thiscall std::ios_base::good(void)const ?good@ios_base@std@@QBE_NXZ
MSVCP140D.dll	865	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::epptr(void)const ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
MSVCP140D.dll	109	public: __thiscall std::_Lockit::_Lockit(int) ??0_Lockit@std@@QAE@H@Z
MSVCP140D.dll	165	public: __thiscall std::_Lockit::~_Lockit(void) ??1_Lockit@std@@QAE@XZ
MSVCP140D.dll	659	void __cdecl std::_Xbad_alloc(void) ?_Xbad_alloc@std@@YAXXZ
MSVCP140D.dll	662	void __cdecl std::_Xlength_error(char const *) ?_Xlength_error@std@@YAXPBD@Z
MSVCP140D.dll	1318	bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
VCRUNTIME140D.dll	46	__vcrt_GetModuleFileNameW
VCRUNTIME140D.dll	53	_except_handler4_common
VCRUNTIME140D.dll	29	__current_exception_context
VCRUNTIME140D.dll	47	__vcrt_GetModuleHandleW
VCRUNTIME140D.dll	28	__current_exception
VCRUNTIME140D.dll	37	__std_type_info_destroy_list
VCRUNTIME140D.dll	72	memset
VCRUNTIME140D.dll	16	__CxxFrameHandler3
VCRUNTIME140D.dll	1	_CxxThrowException
VCRUNTIME140D.dll	33	__std_exception_copy
VCRUNTIME140D.dll	71	memmove
VCRUNTIME140D.dll	70	memcpy
VCRUNTIME140D.dll	49	__vcrt_LoadLibraryExW
VCRUNTIME140D.dll	34	__std_exception_destroy
ucrtbased.dll	739	_register_thread_local_exe_atexit_callback
ucrtbased.dll	219	_configthreadlocale
ucrtbased.dll	762	_set_new_mode
ucrtbased.dll	115	__p__commode
ucrtbased.dll	322	_free_dbg
ucrtbased.dll	1353	strcpy_s
ucrtbased.dll	1349	strcat_s
ucrtbased.dll	142	__stdio_common_vsprintf_s
ucrtbased.dll	750	_seh_filter_dll
ucrtbased.dll	407	_initialize_onexit_table
ucrtbased.dll	738	_register_onexit_function
ucrtbased.dll	268	_execute_onexit_table
ucrtbased.dll	232	_crt_atexit
ucrtbased.dll	231	_crt_at_quick_exit
ucrtbased.dll	224	_controlfp_s
ucrtbased.dll	1382	terminate
ucrtbased.dll	969	_wmakepath_s
ucrtbased.dll	997	_wsplitpath_s
ucrtbased.dll	1407	wcscpy_s
ucrtbased.dll	197	_c_exit
ucrtbased.dll	202	_cexit
ucrtbased.dll	112	__p___argv
ucrtbased.dll	111	__p___argc
ucrtbased.dll	759	_set_fmode
ucrtbased.dll	273	_exit
ucrtbased.dll	1142	exit
ucrtbased.dll	410	_initterm_e
ucrtbased.dll	409	_initterm
ucrtbased.dll	354	_get_initial_narrow_environment
ucrtbased.dll	406	_initialize_narrow_environment
ucrtbased.dll	129	__setusermatherr
ucrtbased.dll	754	_set_app_type
ucrtbased.dll	751	_seh_filter_exe
ucrtbased.dll	21	_CrtDbgReportW
ucrtbased.dll	1273	malloc
ucrtbased.dll	199	_callnewh
ucrtbased.dll	1358	strlen
ucrtbased.dll	20	_CrtDbgReport
ucrtbased.dll	411	_invalid_parameter
ucrtbased.dll	220	_configure_narrow_argv

ord	entry_va	function_name
1	0x113ac	_KSEWD_OdpowiedzStanTowaru@16

module_name	KSBKEWrapperMP.exe
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x268bc
Functions(1)	0x268b8
NameOrdinals(1)	0x268c0

show previews

offset	size	type	comment
0	103936	EXE	02/24/2021 12:30:08	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK