tcc.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	tcc.exe
size	17408 (0x4400)
md5	585d7c9056dbc2b191b9855e88e56a9e

type	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x511e4c39
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22f
Magic	0x20b
LinkerVersion	2.20
SizeOfCode	0x2000
SizeOfInitializedData	0x2000
SizeOfUninitializedData	0xa00
AddressOfEntryPoint	0x15a0
BaseOfCode	0x1000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x9000
SizeOfHeaders	0x400
CheckSum	0xf335
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1e08	0x2000	R-X CODE
.data	0x3000	0x70	0x200	RW- IDATA
.rdata	0x4000	0xaa0	0xc00	R-- IDATA
.bss	0x5000	0x990	0	RW- UDATA
.idata	0x6000	0xc28	0xe00	RW- IDATA
.CRT	0x7000	0x68	0x200	RW- IDATA
.tls	0x8000	0x38	0x200	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x6000	0xc28
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x8000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x408031	0x408034	0x405060	0x407040	0	0

module_name	hint	function_name
KERNEL32.dll	134	DeleteCriticalSection
KERNEL32.dll	157	EnterCriticalSection
KERNEL32.dll	253	FreeLibrary
KERNEL32.dll	327	GetCurrentProcess
KERNEL32.dll	328	GetCurrentProcessId
KERNEL32.dll	331	GetCurrentThreadId
KERNEL32.dll	373	GetLastError
KERNEL32.dll	387	GetModuleHandleA
KERNEL32.dll	420	GetProcAddress
KERNEL32.dll	443	GetStartupInfoA
KERNEL32.dll	462	GetSystemTimeAsFileTime
KERNEL32.dll	483	GetTickCount
KERNEL32.dll	551	InitializeCriticalSection
KERNEL32.dll	591	LeaveCriticalSection
KERNEL32.dll	592	LoadLibraryA
KERNEL32.dll	673	QueryPerformanceCounter
KERNEL32.dll	721	RtlAddFunctionTable
KERNEL32.dll	722	RtlCaptureContext
KERNEL32.dll	729	RtlLookupFunctionEntry
KERNEL32.dll	736	RtlVirtualUnwind
KERNEL32.dll	850	SetUnhandledExceptionFilter
KERNEL32.dll	862	Sleep
KERNEL32.dll	870	TerminateProcess
KERNEL32.dll	877	TlsGetValue
KERNEL32.dll	886	UnhandledExceptionFilter
KERNEL32.dll	910	VirtualProtect
KERNEL32.dll	912	VirtualQuery
msvcrt.dll	7	_cwait
msvcrt.dll	73	_spawnvp
msvcrt.dll	78	__dllonexit
msvcrt.dll	81	__getmainargs
msvcrt.dll	82	__initenv
msvcrt.dll	83	__iob_func
msvcrt.dll	90	__lconv_init
msvcrt.dll	96	__set_app_type
msvcrt.dll	98	__setusermatherr
msvcrt.dll	112	_acmdln
msvcrt.dll	119	_amsg_exit
msvcrt.dll	130	_cexit
msvcrt.dll	198	_fmode
msvcrt.dll	208	_ftime
msvcrt.dll	245	_initterm
msvcrt.dll	290	_lock
msvcrt.dll	367	_onexit
msvcrt.dll	464	_unlock
msvcrt.dll	562	abort
msvcrt.dll	571	atoi
msvcrt.dll	574	calloc
msvcrt.dll	583	exit
msvcrt.dll	585	fclose
msvcrt.dll	588	fflush
msvcrt.dll	596	fopen
msvcrt.dll	597	fprintf
msvcrt.dll	598	fputc
msvcrt.dll	599	fputs
msvcrt.dll	603	free
msvcrt.dll	654	malloc
msvcrt.dll	666	printf
msvcrt.dll	669	puts
msvcrt.dll	684	signal
msvcrt.dll	691	strcat
msvcrt.dll	693	strcmp
msvcrt.dll	695	strcpy
msvcrt.dll	701	strncmp
msvcrt.dll	726	vfprintf
libtcc.dll	1	pstrcpy
libtcc.dll	3	tcc_add_file
libtcc.dll	5	tcc_add_library
libtcc.dll	9	tcc_basename
libtcc.dll	12	tcc_delete
libtcc.dll	13	tcc_error
libtcc.dll	14	tcc_error_noabort
libtcc.dll	15	tcc_fileextension
libtcc.dll	20	tcc_memstats
libtcc.dll	21	tcc_new
libtcc.dll	22	tcc_output_file
libtcc.dll	23	tcc_parse_args
libtcc.dll	24	tcc_print_stats
libtcc.dll	27	tcc_run
libtcc.dll	31	tcc_set_output_type
libtcc.dll	32	tcc_strdup
libtcc.dll	34	tcc_warning

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	11824	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x5060