Tax Loader - 副本.exe - 内蒙古国税网上申报助手

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	Tax Loader - 副本.exe
size	438784 (0x6b200)
md5	0cf5c44d7367e37d82418da54d58b3b0

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x138

Rich Header

lib id	version	times used
4	8047	2
11	8047	3
14	7299	7
10	8047	11
11	9782	4
4	9782	2
12	7291	3
19	8022	24
28	9178	1
95	2067	9
18	8444	6
29	9178	117
19	8034	20
1	0	950
10	8168	2
11	8168	89
0	0	33
94	3052	1
90	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x52e73875
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0
SizeOfInitializedData	0x131c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x15d001
BaseOfCode	0x1000
BaseOfData	0x1000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x163000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.rdata	0x1000	0x2f000	0x12e00	RW- IDATA
.data	0x30000	0x125000	0x52000	RW- IDATA
.rsrc	0x155000	0x8000	0x1e00	RW- IDATA
.ASP	0x15d000	0x5000	0x4200	RWX CODE IDATA
.adata	0x162000	0x1000	0	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x15e008	0x2f0
RESOURCE	0x155000	0x7450
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x15dfb0	8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

show previews

type	name	size	cp
TEXTINCLUDE	#1	11	1252
TEXTINCLUDE	#2	22	1252
TEXTINCLUDE	#3	337	1252
CURSOR	#1	308	1252
CURSOR	#2	308	1252
CURSOR	#3	308	1252
CURSOR	#4	180	1252
BITMAP	#1031	584	1252
BITMAP	#1038	324	1252
BITMAP	#1138	344	1252
BITMAP	#1139	344	1252
BITMAP	#1140	344	1252
BITMAP	#1141	344	1252
BITMAP	#1142	344	1252
BITMAP	#1143	344	1252
BITMAP	#1144	344	1252
BITMAP	#1145	344	1252
BITMAP	#26567	1508	1252
BITMAP	#30994	184	1252
BITMAP	#30995	364	1252
BITMAP	#30996	324	1252
ICON	#1	744	1252
ICON	#2	296	1252
ICON	#3	9640	1252
MENU	#127	12	1252
MENU	#1039	644	1252
DIALOG	#150	152	1252
DIALOG	#286	378	1252
DIALOG	#554	250	1252
DIALOG	#1037	234	1252
DIALOG	#1084	2222	1252
DIALOG	#1124	178	1252
DIALOG	#1134	204	1252
DIALOG	#1150	178	1252
DIALOG	#30721	226	1252
DIALOG	#30722	396	1252
STRING	#3841	80	1252
STRING	#3842	44	1252
STRING	#3843	120	1252
STRING	#3857	452	1252
STRING	#3858	298	1252
STRING	#3859	326	1252
STRING	#3865	64	1252
STRING	#3866	100	1252
STRING	#3867	472	1252
STRING	#3868	276	1252
STRING	#3869	36	1252
GROUP_CURSOR	#1032	20	1252
GROUP_CURSOR	#1033	20	1252
GROUP_CURSOR	#30977	34	1252
GROUP_ICON	DEFAULT_ICON	20	1252
GROUP_ICON	#1151	20	1252
GROUP_ICON	#1152	20	1252
VERSION	#1	644	1252
MANIFEST	#1	461	1252

module_name	ord	function_name
kernel32.dll		GetProcAddress
kernel32.dll		GetModuleHandleA
kernel32.dll		LoadLibraryA
wininet.dll		HttpOpenRequestA
rasapi32.dll		RasGetConnectStatusA
user32.dll		IsWindowVisible
gdi32.dll		CreateRectRgnIndirect
winmm.dll		waveOutPrepareHeader
winspool.drv		ClosePrinter
advapi32.dll		RegQueryValueA
shell32.dll		SHBrowseForFolderA
ole32.dll		CLSIDFromString
oleaut32.dll	9
mfc42.dll	4998
msvcrt.dll		_except_handler3
ws2_32.dll	17

StringTable 080404B0

FileVersion	2.0.0.0
FileDescription	内蒙古国税网上申报助手
ProductName	Tax Loader
ProductVersion	2.0.0.0
CompanyName	http://www.ittoi.com
LegalCopyright	http://www.ittoi.com
Comments	Tax Loader

VS_FIXEDFILEINFO

FileVersion	2.0.0.0
ProductVersion	2.0.0.0
StrucVersion	0
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	438784	EXE	01/28/2014 04:56:21	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x156e58

[?] can't find file_offset of VA 0x156fb0

[?] can't find file_offset of VA 0x157594

[?] can't find file_offset of VA 0x15764c

[?] can't find file_offset of VA 0x1577b8

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x15a2b4

[?] can't find file_offset of VA 0x15a2c0

[?] can't find file_offset of VA 0x15a544

[?] can't find file_offset of VA 0x15a5dc

[?] can't find file_offset of VA 0x15a758

[?] can't find file_offset of VA 0x15a854

[?] can't find file_offset of VA 0x15a940

[?] can't find file_offset of VA 0x15b1f0

[?] can't find file_offset of VA 0x15b2a4

[?] can't find file_offset of VA 0x15b370

[?] can't find file_offset of VA 0x15b424

[?] can't find file_offset of VA 0x15b508

[?] can't find file_offset of VA 0x15b694

[?] can't find file_offset of VA 0x15b6e4

[?] can't find file_offset of VA 0x15b710

[?] can't find file_offset of VA 0x15b788

[?] can't find file_offset of VA 0x15b94c

[?] can't find file_offset of VA 0x15ba78

[?] can't find file_offset of VA 0x15bbc0

[?] can't find file_offset of VA 0x15bc00

[?] can't find file_offset of VA 0x15bc64

[?] can't find file_offset of VA 0x15be3c

[?] can't find file_offset of VA 0x15bf50

[?] can't find file_offset of VA 0x15bf74

[?] can't find file_offset of VA 0x15bf88

[?] can't find file_offset of VA 0x15bf9c

[?] can't find file_offset of VA 0x0

Tax Loader - 副本.exe-