sys.exe - test.EXE - Microsoft 基础类应用程序

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	sys.exe
size	208896 (0x33000)
md5	269619529ee93c4f18bc6a79323104b8

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
12	7291	1
93	2179	10
14	7299	2
11	8047	1
10	8047	11
4	8047	4
4	9782	3
1	0	230
11	9782	15
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x50f66df5
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xd000
SizeOfInitializedData	0x26000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xcad2
BaseOfCode	0x1000
BaseOfData	0xe000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x34000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xc2c5	0xd000	R-X CODE
.rdata	0xe000	0x1e3a	0x2000	R-- IDATA
.data	0x10000	0x21140	0x21000	RW- IDATA
.rsrc	0x32000	0x1748	0x2000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xf1b8	0xa0
RESOURCE	0x32000	0x1748
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xe000	0x380
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	4264
MENU	#129	120
DIALOG	#102	376
GROUP_ICON	#128	20
VERSION	#1	792

module_name	hint	ord	function_name
MFC42u.DLL		3733
MFC42u.DLL		561
MFC42u.DLL		815
MFC42u.DLL		3658
MFC42u.DLL		4215
MFC42u.DLL		2576
MFC42u.DLL		3649
MFC42u.DLL		641
MFC42u.DLL		810
MFC42u.DLL		693
MFC42u.DLL		2430
MFC42u.DLL		2506
MFC42u.DLL		2613
MFC42u.DLL		1131
MFC42u.DLL		5261
MFC42u.DLL		4992
MFC42u.DLL		6048
MFC42u.DLL		1767
MFC42u.DLL		5276
MFC42u.DLL		4419
MFC42u.DLL		3592
MFC42u.DLL		4401
MFC42u.DLL		3393
MFC42u.DLL		3728
MFC42u.DLL		2574
MFC42u.DLL		6051
MFC42u.DLL		4073
MFC42u.DLL		1768
MFC42u.DLL		4396
MFC42u.DLL		5237
MFC42u.DLL		2377
MFC42u.DLL		5157
MFC42u.DLL		6370
MFC42u.DLL		4347
MFC42u.DLL		5286
MFC42u.DLL		3793
MFC42u.DLL		4831
MFC42u.DLL		4435
MFC42u.DLL		2640
MFC42u.DLL		2047
MFC42u.DLL		4418
MFC42u.DLL		3744
MFC42u.DLL		5059
MFC42u.DLL		1720
MFC42u.DLL		5257
MFC42u.DLL		2438
MFC42u.DLL		2116
MFC42u.DLL		5273
MFC42u.DLL		3365
MFC42u.DLL		4621
MFC42u.DLL		3635
MFC42u.DLL		1143
MFC42u.DLL		1165
MFC42u.DLL		567
MFC42u.DLL		324
MFC42u.DLL		4229
MFC42u.DLL		535
MFC42u.DLL		800
MFC42u.DLL		538
MFC42u.DLL		540
MFC42u.DLL		1637
MFC42u.DLL		6195
MFC42u.DLL		4704
MFC42u.DLL		2371
MFC42u.DLL		755
MFC42u.DLL		470
MFC42u.DLL		4847
MFC42u.DLL		4370
MFC42u.DLL		6266
MFC42u.DLL		2858
MFC42u.DLL		858
MFC42u.DLL		3494
MFC42u.DLL		2507
MFC42u.DLL		355
MFC42u.DLL		665
MFC42u.DLL		6381
MFC42u.DLL		5180
MFC42u.DLL		354
MFC42u.DLL		352
MFC42u.DLL		4616
MFC42u.DLL		1569
MFC42u.DLL		4075
MFC42u.DLL		3074
MFC42u.DLL		3820
MFC42u.DLL		3826
MFC42u.DLL		3825
MFC42u.DLL		2971
MFC42u.DLL		3076
MFC42u.DLL		2980
MFC42u.DLL		3257
MFC42u.DLL		3131
MFC42u.DLL		4459
MFC42u.DLL		3254
MFC42u.DLL		3142
MFC42u.DLL		2977
MFC42u.DLL		5710
MFC42u.DLL		5285
MFC42u.DLL		5303
MFC42u.DLL		4692
MFC42u.DLL		4074
MFC42u.DLL		2717
MFC42u.DLL		5298
MFC42u.DLL		5296
MFC42u.DLL		3341
MFC42u.DLL		2388
MFC42u.DLL		5193
MFC42u.DLL		1089
MFC42u.DLL		3917
MFC42u.DLL		5727
MFC42u.DLL		2504
MFC42u.DLL		2546
MFC42u.DLL		4480
MFC42u.DLL		6371
MFC42u.DLL		4269
MFC42u.DLL		4667
MFC42u.DLL		823
MFC42u.DLL		6372
MFC42u.DLL		825
MSVCRT.dll	487		_wcmdln
MSVCRT.dll	585		exit
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	211		_exit
MSVCRT.dll	709		strstr
MSVCRT.dll	705		strncpy
MSVCRT.dll	753		wcstombs
MSVCRT.dll	599		fopen
MSVCRT.dll	707		strrchr
MSVCRT.dll	602		fputs
MSVCRT.dll	600		fprintf
MSVCRT.dll	65		_CxxThrowException
MSVCRT.dll	490		_wcsicmp
MSVCRT.dll	492		_wcslwr
MSVCRT.dll	749		wcsstr
MSVCRT.dll	139		__wgetmainargs
MSVCRT.dll	591		fflush
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	715		swprintf
MSVCRT.dll	690		sprintf
MSVCRT.dll	747		wcsrchr
MSVCRT.dll	612		ftell
MSVCRT.dll	605		fread
MSVCRT.dll	664		memmove
MSVCRT.dll	515		_wfopen
MSVCRT.dll	610		fseek
MSVCRT.dll	614		fwrite
MSVCRT.dll	588		fclose
MSVCRT.dll	739		wcscpy
MSVCRT.dll	735		wcscat
MSVCRT.dll	271		_initterm
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	106		__p__commode
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	183		_controlfp
MSVCRT.dll	14		public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
MSVCRT.dll	390		_onexit
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	659		mbstowcs
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	742		wcslen
KERNEL32.dll	46		CloseHandle
KERNEL32.dll	80		CreateFileW
KERNEL32.dll	179		ExpandEnvironmentStringsW
KERNEL32.dll	788		SetFileTime
KERNEL32.dll	349		GetFileTime
KERNEL32.dll	442		GetSystemDirectoryW
KERNEL32.dll	374		GetModuleFileNameW
KERNEL32.dll	361		GetLastError
KERNEL32.dll	615		MoveFileW
KERNEL32.dll	125		DeleteFileW
KERNEL32.dll	239		FreeLibrary
KERNEL32.dll	919		WriteFile
KERNEL32.dll	905		WideCharToMultiByte
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	587		LoadLibraryW
KERNEL32.dll	841		Sleep
KERNEL32.dll	458		GetTempFileNameW
KERNEL32.dll	460		GetTempPathW
KERNEL32.dll	432		GetStartupInfoW
KERNEL32.dll	480		GetVersionExW
KERNEL32.dll	636		OpenProcess
KERNEL32.dll	315		GetCurrentProcessId
KERNEL32.dll	378		GetModuleHandleW
KERNEL32.dll	635		OpenMutexW
KERNEL32.dll	594		LocalFree
KERNEL32.dll	265		GetCommandLineW
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	459		GetTempPathA
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	893		VirtualQuery
USER32.dll	345		GetSubMenu
USER32.dll	422		IsIconic
USER32.dll	349		GetSystemMetrics
USER32.dll	255		GetClientRect
USER32.dll	182		DrawIcon
USER32.dll	456		LoadMenuW
USER32.dll	316		GetMessagePos
USER32.dll	446		LoadIconW
USER32.dll	575		SendMessageW
USER32.dll	726		wsprintfW
USER32.dll	196		EnableWindow
SHELL32.dll	7		CommandLineToArgvW
MSVCP60.dll	267		public: __thiscall std::_Lockit::~_Lockit(void) ??1_Lockit@std@@QAE@XZ
MSVCP60.dll	1016		private: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Tidy(bool) ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
MSVCP60.dll	233		public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
MSVCP60.dll	813		char const `private: static char const * __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Nullstr(void)'::`2'::_C ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
MSVCP60.dll	842		private: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Eos(unsigned int) ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
MSVCP60.dll	914		private: bool __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Grow(unsigned int, bool) ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
MSVCP60.dll	1010		private: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Split(void) ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
MSVCP60.dll	1030		void __cdecl std::_Xran(void) ?_Xran@std@@YAXXZ
MSVCP60.dll	1633		public: static unsigned int const std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::npos ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
MSVCP60.dll	1321		public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::erase(unsigned int, unsigned int) ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
MSVCP60.dll	1052		public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::assign(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, unsigned int, unsigned int) ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
MSVCP60.dll	162		public: __thiscall std::_Lockit::_Lockit(void) ??0_Lockit@std@@QAE@XZ
PSAPI.DLL	15		GetModuleFileNameExW

StringTable 080404b0

Comments
CompanyName
FileDescription	Microsoft 基础类应用程序
FileVersion	1, 0, 0, 1
InternalName	test
LegalCopyright	版权所有 (C) 2012
LegalTrademarks
OriginalFilename	test.EXE
PrivateBuild
ProductName	test 应用程序
ProductVersion	1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	208896	EXE	01/16/2013 09:08:05	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

sys.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 080404b0

VS_FIXEDFILEINFO

sys.exe
-