filename2
size354816 (0x56a00)
md5702f9d173674ff77bc5a40788b151eee
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1714021942
1584021916
1704021998
1473072919
10137
175402191
155402191
154402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x5578639c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x903
Magic0x10b
LinkerVersion10.0
SizeOfCode0x18a00
SizeOfInitializedData0x3dc00
SizeOfUninitializedData0
AddressOfEntryPoint0x1dd0
BaseOfCode0x1000
BaseOfData0x1a000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x5b000
SizeOfHeaders0x400
CheckSum0x5b6c0
Subsystem2
DllCharacteristics0x8002
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x189db0x18a00R-X CODE
.rdata0x1a0000xc7b10xc800R-- IDATA
.data0x270000x32200x1400RW- IDATA
.ndata0x2b0000x27e350x28000RW- IDATA
.rsrc0x530000x4fe80x5000R-- IDATA
.reloc0x580000x2f0e0x3000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x267700x41
IMPORT0x25c1c0xb4
RESOURCE0x530000x4fe8
EXCEPTION00
SECURITY00
BASERELOC0x580000x1658
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x254b80x40
Bound_IAT00
IAT0x1a0000x1f0
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAPTADVINPUTTASKDIALOG16401252
BITMAPTADVTASKDIALOG16401252
BITMAPTD_ARW13201252
BITMAPTD_ARWDIS13201252
BITMAPTD_ARWDOWN13201252
BITMAPTD_ARWHOT13201252
BITMAPTD_COLP14441252
BITMAPTD_COLPDOWN14441252
STRING#38485141252
STRING#38492001252
STRING#38504921252
STRING#38516341252
STRING#38529381252
STRING#38531261252
STRING#38738761252
STRING#40897541252
STRING#40907801252
STRING#40917181252
STRING#40931041252
STRING#40941801252
STRING#40951741252
VERSION#17521252
MANIFEST#13461252
idlangstring
615521033Invalid input value
615531033Invalid input value. Use escape key to abandon changes
615541033Invalid outline index
615551033Incorrect level assignment
615561033Invalid selection
615571033File load error
615581033Line too long
615591033Maximum outline depth exceeded
615601033Warning
615611033Error
615621033Information
615631033Confirm
615641033&Yes
615651033&No
615661033OK
615671033Cancel
615681033&Help
615691033No help available
615701033Help
615711033&Abort
615721033&Retry
615731033&Ignore
615741033&All
615751033BkSp
615761033Tab
615771033Esc
615781033Enter
615791033Space
615801033PgUp
615811033PgDn
615821033End
615831033Home
615841033Left
615851033Up
615861033Right
615871033Down
615881033Ins
615891033Del
615901033Shift+
615911033Ctrl+
615921033Alt+
615931033(Unknown)
615941033(None)
615951033Value must be between %d and %d
615961033Cannot create a default method name for an unnamed component
615971033Invalid argument to date encode
615981033Invalid argument to time encode
615991033''%s'' is not a valid date
616001033''%s'' is not a valid time
616011033''%s'' is not a valid date and time
616021033Invalid file name - %s
616031033All files (*.*)|*.*
616041033All
616051033: [ - no volume label - ]
616061033Unable to insert a line
616071033The specified directory does not exist. Create it?
616081033Select Directory
616091033Directory &Name:
616101033D&rives:
616111033&Directories:
616121033&Files: (*.*)
616131033Ne&twork...
616141033Color
616151033ABCDEFGHIJKLMNOP
616161033Invalid clipboard format
616171033Clipboard does not support Icons
616181033Default
616191033Text exceeds memo capacity
616201033Custom Colors
616211033Operation not supported on selected printer
616221033There is no default printer currently selected
616231033Unable to write to %s
616241033Bits index out of range
616251033(Untitled)
616261033Invalid data type for '%s'
616271033Failed to create key %s
616281033Failed to set data for '%s'
616291033Failed to get data for '%s'
616301033Synchronize called when main VCL thread in a WaitFor call
616311033Unknown RichEdit conversion file extension (.%s)
616321033Menu '%s' is already being used by another form
619521033Tab control access error
619531033Invalid item level assignment
619541033Invalid index
619551033Unable to insert an item
619561033Invalid owner
619571033Unable to create new column
619581033Unable to create new item
619591033RichEdit line insertion error
619601033Failed to Load Stream
619611033Failed to Save Stream
619621033StatusBar cannot have more than 64 panels
619631033Error assigning Hot-Key to %s. %s
619641033Hot-Key is invalid
619651033Window is invalid or a child window
619661033Hot-Key is assigned to another window
619671033%s is already associated with %s
654081033'%s' is not a valid integer value
654091033'%s' is not a valid floating point value
654101033'%s' is not a valid date
654111033'%s' is not a valid time
654121033'%s' is not a valid date and time
654131033Invalid argument to time encode
654141033Invalid argument to date encode
654151033Out of memory
654161033I/O error %d
654171033File not found
654181033Invalid filename
654191033Too many open files
654201033File access denied
654211033Read beyond end of file
654221033Disk full
654231033Invalid numeric input
654241033Division by zero
654251033Range check error
654261033Integer overflow
654271033Invalid floating point operation
654281033Floating point division by zero
654291033Floating point overflow
654301033Floating point underflow
654311033Invalid pointer operation
654321033Invalid class typecast
654331033Access violation at address %p. %s of address %p
654341033Stack overflow
654351033Control-C hit
654361033Privileged instruction
654371033Operation aborted
654381033Exception %s in module %s at %p. %s%s
654391033Application Error
654401033Format '%s' invalid or incompatible with argument
654411033No argument for format '%s'
654421033Invalid variant type conversion
654431033Invalid variant operation
654441033Variant method calls not supported
654451033Read
654461033Write
654471033Format result longer than 4096 characters
654481033Format string too long
654491033Error creating variant array
654501033Variant is not an array
654511033Variant array index out of bounds
654521033External exception %x
654721033Jan
654731033Feb
654741033Mar
654751033Apr
654761033May
654771033Jun
654781033Jul
654791033Aug
654801033Sep
654811033Oct
654821033Nov
654831033Dec
654881033January
654891033February
654901033March
654911033April
654921033May
654931033June
654941033July
654951033August
654961033September
654971033October
654981033November
654991033December
655041033Sun
655051033Mon
655061033Tue
655071033Wed
655081033Thu
655091033Fri
655101033Sat
655111033Sunday
655121033Monday
655131033Tuesday
655141033Wednesday
655151033Thursday
655161033Friday
655171033Saturday
module_namehintordfunction_name
KERNEL32.dll813LCMapStringW
KERNEL32.dll617GetStringTypeW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1048RtlUnwind
KERNEL32.dll719HeapFree
KERNEL32.dll721HeapQueryInformation
KERNEL32.dll724HeapSize
KERNEL32.dll722HeapReAlloc
KERNEL32.dll831LoadLibraryW
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll906OutputDebugStringW
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll905OutputDebugStringA
KERNEL32.dll778IsValidCodePage
KERNEL32.dll370GetCPInfo
KERNEL32.dll143CreateFileW
KERNEL32.dll82CloseHandle
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll840LocalFree
KERNEL32.dll294FillConsoleOutputAttribute
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll836LocalAlloc
KERNEL32.dll434GetConsoleScreenBufferInfo
KERNEL32.dll514GetLastError
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll612GetStdHandle
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll1073SetConsoleCursorPosition
KERNEL32.dll428GetConsoleMode
KERNEL32.dll410GetConsoleCP
KERNEL32.dll1126SetFilePointer
KERNEL32.dll717HeapCreate
KERNEL32.dll130CreateEventA
KERNEL32.dll715HeapAlloc
KERNEL32.dll295FillConsoleOutputCharacterA
KERNEL32.dll390GetCommandLineA
KERNEL32.dll723HeapSetInformation
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll1216TerminateProcess
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll202DecodePointer
KERNEL32.dll234EncodePointer
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll727HeapValidate
KERNEL32.dll759IsBadReadPtr
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll659GetTickCount
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll581GetProcAddress
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll281ExitProcess
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll1135SetHandleCount
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll499GetFileType
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1222TlsFree
KERNEL32.dll1139SetLastError
KERNEL32.dll1317WriteFile
KERNEL32.dll945RaiseException
USER32.dll247FindWindowA
USER32.dll220EndPaint
USER32.dll73CloseClipboard
USER32.dll84CopyImage
USER32.dll488LoadCursorA
USER32.dll818wsprintfA
USER32.dll276GetClientRect
USER32.dll631SendMessageA
USER32.dll14BeginPaint
USER32.dll289GetDC
USER32.dll492LoadIconA
USER32.dll446InvalidateRect
USER32.dll109CreateWindowExA
USER32.dll613ReleaseDC
USER32.dll213EmptyClipboard
USER32.dll643SetClassLongA
USER32.dll223EnumChildWindows
USER32.dll110CreateWindowExW
USER32.dll550OpenClipboard
USER32.dll480IsWindowVisible
USER32.dll714SetWindowTextA
USER32.dll646SetClipboardData
GDI32.dll75CreatePen
GDI32.dll525GetStockObject
GDI32.dll607Rectangle
GDI32.dll84CreateSolidBrush
GDI32.dll227DeleteDC
GDI32.dll61CreateFontIndirectA
GDI32.dll230DeleteObject
GDI32.dll631SelectObject
GDI32.dll48CreateCompatibleDC
GDI32.dll47CreateCompatibleBitmap
ole32.dll50CoGetMalloc
CRYPT32.dll116CertVerifyCertificateChainPolicy
CRYPT32.dll69CertGetCertificateChain
CRYPT32.dll61CertFreeCertificateChain
SHLWAPI.dll169SHCreateStreamOnFileA
COMCTL32.dll16
COMCTL32.dll8
RPCRT4.dll342RpcAsyncGetCallStatus
RPCRT4.dll343RpcAsyncInitializeHandle
ordentry_vafunction_name
10x1000Type
module_namethird.exe
flags0
timestamp2015-06-10 16:19:38
version0.0
ordinal_base1
nFunctions1
nNames1
Names(1)0x2679c
Functions(1)0x26798
NameOrdinals(1)0x267a0

StringTable 040904b0

FileDescriptionWish Application
OriginalFilenamewish85.exe
CompanyNameActiveState Corporation
FileVersion8.6.13
LegalCopyrightCopyright © 2000 by ActiveState Corporation, et al
ProductNameTk 8.6 for Windows
ProductVersion8.6.13

VS_FIXEDFILEINFO

FileVersion8.6.13.0
ProductVersion8.6.13.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0354816EXE06/10/2015 16:19:40#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK