filenameTMSDU.exe
size1569280 (0x17f200)
md59f3f556a47d7933d7854a7140667b6cb
typePE32 executable (Windows CE) ARM Thumb, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
9540914
49961559
93401711
10310
49977546
8830771
5624091
8630771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x1c2
NumberOfSections5
TimeDateStamp0x48466edf
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.24
SizeOfCode0xc0800
SizeOfInitializedData0xc2200
SizeOfUninitializedData0
AddressOfEntryPoint0xb12d0
BaseOfCode0x1000
BaseOfData0xc2000
ImageBase0x10000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x186000
SizeOfHeaders0x400
CheckSum0
Subsystem9
DllCharacteristics0
SizeOfStackReserve0x10000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xc07fc0xc0800R-X CODE
.rdata0xc20000x3aaa0x3c00R-- IDATA
.data0xc60000x1ea510x1b000RW- IDATA
.pdata0xe50000x30680x3200R-- IDATA
.rsrc0xe90000x9c67c0x9c800R-- IDATA

Data Directory

typevasize
EXPORT0xc48e00x11ca
IMPORT0xc44840x50
RESOURCE0xe90000x9c67c
EXCEPTION0xe50000x3068
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xc60000x3a4
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#33080
CURSOR#41800
BITMAP#13226640
BITMAP#13326640
BITMAP#13421700
BITMAP#13526640
BITMAP#13639440
BITMAP#13739440
BITMAP#13839440
BITMAP#13939440
BITMAP#14023440
BITMAP#14123440
BITMAP#1488240
BITMAP#14942640
BITMAP#15028420
BITMAP#15137580
BITMAP#15256640
BITMAP#15315100
BITMAP#15442640
BITMAP#15528940
BITMAP#15638260
BITMAP#15756640
BITMAP#1588240
BITMAP#15942640
BITMAP#16038220
BITMAP#16147420
BITMAP#16256640
BITMAP#17339440
BITMAP#17739440
BITMAP#17839440
BITMAP#1804810640
BITMAP#18123440
BITMAP#18739440
BITMAP#19022880
BITMAP#19256640
BITMAP#19356640
BITMAP#19456640
BITMAP#19556640
BITMAP#19913040
BITMAP#20013040
BITMAP#20133640
BITMAP#20233640
BITMAP#20333640
BITMAP#20433640
BITMAP#20517020
ICON#17440
ICON#22960
DIALOGWCE_FINDDLG4640
DIALOGWCE_REPLACEDLG5400
DIALOG#102400
DIALOG#1421100
DIALOG#1651380
DIALOG#1661120
DIALOG#189400
DIALOG#1911140
DIALOG#307212040
STRING#38411300
STRING#3842420
STRING#38433300
STRING#385710180
STRING#38586740
STRING#38597320
STRING#38651720
STRING#386712200
STRING#38686120
GROUP_CURSOR#30977340
GROUP_ICON#128340
VERSION#114280
idlangstring
614401031Open
614411031Save As
614421031All Files (*.*)
614431031Untitled
614461031an unnamed file
614571031&Hide
614721031No error message is available.
614731031An unsupported operation was attempted.
614741031A required resource was unavailable.
614751031Out of memory.
614761031An unknown error has occurred.
616961031Invalid filename.
616971031Failed to open document.
616981031Failed to save document.
616991031Save changes to %1?
617001031Failed to create empty document.
617011031The file is too large to open.
617021031Could not start print job.
617031031Failed to launch help.
617041031Internal application error.
617051031Command failed.
617061031Insufficient memory to perform operation.
617071031System registry entries have been removed and the INI file (if any) was deleted.
617081031Not all of the system registry entries (or INI file) were removed.
617091031This program requires the file %s, which was not found on this system.
617121031Please enter an integer.
617131031Please enter a number.
617141031Please enter an integer between %1 and %2.
617151031Please enter a number between %1 and %2.
617161031Please enter no more than %1 characters.
617171031Please select a button.
617181031Please enter an integer between 0 and 255.
617191031Please enter a positive integer.
617201031Please enter a date and/or time.
617211031Please enter a currency.
617281031Unexpected file format.
617291031%1 Cannot find this file. Please verify that the correct path and file name are given.
617301031Destination disk drive is full.
617311031Unable to read from %1, it is opened by someone else.
617321031Unable to write to %1, it is read-only or opened by someone else.
617331031An unexpected error occurred while reading %1.
617341031An unexpected error occurred while writing %1.
618361031Unable to read write-only property.
618371031Unable to write read-only property.
618561031No error occurred.
618571031An unknown error occurred while accessing %1.
618581031%1 was not found.
618591031%1 contains an invalid path.
618601031%1 could not be opened because there are too many open files.
618611031Access to %1 was denied.
618621031An invalid file handle was associated with %1.
618631031%1 could not be removed because it is the current directory.
618641031%1 could not be created because the directory is full.
618651031Seek failed on %1
618661031A hardware I/O error was reported while accessing %1.
618671031A sharing violation occurred while accessing %1.
618681031A locking violation occurred while accessing %1.
618691031Disk full while accessing %1.
618701031An attempt was made to access %1 past its end.
618721031No error occurred.
618731031An unknown error occurred while accessing %1.
618741031An attempt was made to write to the reading %1.
618751031An attempt was made to access %1 past its end.
618761031An attempt was made to read from the writing %1.
618771031%1 has a bad format.
618781031%1 contained an unexpected object.
618791031%1 contains an incorrect schema.
module_namehintordfunction_name
WS2.dll64htons
WS2.dll71ntohl
WS2.dll63htonl
WS2.dll72ntohs
COREDLL.dll87
COREDLL.dll1645
COREDLL.dll104
COREDLL.dll1043
COREDLL.dll1047
COREDLL.dll2032
COREDLL.dll2021
COREDLL.dll2048
COREDLL.dll2033
COREDLL.dll2027
COREDLL.dll2053
COREDLL.dll2046
COREDLL.dll2005
COREDLL.dll2047
COREDLL.dll1044
COREDLL.dll103
COREDLL.dll902
COREDLL.dll910
COREDLL.dll903
COREDLL.dll896
COREDLL.dll921
COREDLL.dll1239
COREDLL.dll497
COREDLL.dll516
COREDLL.dll1238
COREDLL.dll545
COREDLL.dll525
COREDLL.dll560
COREDLL.dll524
COREDLL.dll60
COREDLL.dll102
COREDLL.dll1051
COREDLL.dll2043
COREDLL.dll78
COREDLL.dll96
COREDLL.dll988
COREDLL.dll931
COREDLL.dll918
COREDLL.dll2008
COREDLL.dll496
COREDLL.dll873
COREDLL.dll941
COREDLL.dll179
COREDLL.dll168
COREDLL.dll553
COREDLL.dll249
COREDLL.dll875
COREDLL.dll876
COREDLL.dll287
COREDLL.dll868
COREDLL.dll865
COREDLL.dll621
COREDLL.dll170
COREDLL.dll171
COREDLL.dll495
COREDLL.dll555
COREDLL.dll728
COREDLL.dll286
COREDLL.dll1118
COREDLL.dll491
COREDLL.dll518
COREDLL.dll263
COREDLL.dll1120
COREDLL.dll1145
COREDLL.dll1126
COREDLL.dll1125
COREDLL.dll461
COREDLL.dll455
COREDLL.dll463
COREDLL.dll493
COREDLL.dll682
COREDLL.dll1459
COREDLL.dll1460
COREDLL.dll1461
COREDLL.dll167
COREDLL.dll2052
COREDLL.dll2026
COREDLL.dll2020
COREDLL.dll1041
COREDLL.dll1018
COREDLL.dll10
COREDLL.dll11
COREDLL.dll1068
COREDLL.dll1046
COREDLL.dll63
COREDLL.dll59
COREDLL.dll68
COREDLL.dll196
COREDLL.dll73
COREDLL.dll69
COREDLL.dll1099
COREDLL.dll1097
COREDLL.dll193
COREDLL.dll65
COREDLL.dll36
COREDLL.dll911
COREDLL.dll908
COREDLL.dll907
COREDLL.dll919
COREDLL.dll922
COREDLL.dll923
COREDLL.dll924
COREDLL.dll971
COREDLL.dll940
COREDLL.dll255
COREDLL.dll2000
COREDLL.dll262
COREDLL.dll260
COREDLL.dll261
COREDLL.dll912
COREDLL.dll981
COREDLL.dll945
COREDLL.dll692
COREDLL.dll289
COREDLL.dll698
COREDLL.dll259
COREDLL.dll256
COREDLL.dll257
COREDLL.dll693
COREDLL.dll258
COREDLL.dll272
COREDLL.dll247
COREDLL.dll266
COREDLL.dll288
COREDLL.dll704
COREDLL.dll269
COREDLL.dll517
COREDLL.dll530
COREDLL.dll528
COREDLL.dll58
COREDLL.dll61
COREDLL.dll864
COREDLL.dll56
COREDLL.dll35
COREDLL.dll858
COREDLL.dll854
COREDLL.dll841
COREDLL.dll850
COREDLL.dll930
COREDLL.dll895
COREDLL.dll66
COREDLL.dll935
COREDLL.dll33
COREDLL.dll74
COREDLL.dll282
COREDLL.dll248
COREDLL.dll251
COREDLL.dll267
COREDLL.dll885
COREDLL.dll101
COREDLL.dll283
COREDLL.dll689
COREDLL.dll264
COREDLL.dll229
COREDLL.dll878
COREDLL.dll2054
COREDLL.dll533
COREDLL.dll532
COREDLL.dll916
COREDLL.dll265
COREDLL.dll688
COREDLL.dll271
COREDLL.dll703
COREDLL.dll706
COREDLL.dll691
COREDLL.dll696
COREDLL.dll891
COREDLL.dll862
COREDLL.dll246
COREDLL.dll285
COREDLL.dll95
COREDLL.dll707
COREDLL.dll277
COREDLL.dll280
COREDLL.dll281
COREDLL.dll279
COREDLL.dll97
COREDLL.dll887
COREDLL.dll860
COREDLL.dll889
COREDLL.dll284
COREDLL.dll529
COREDLL.dll1177
COREDLL.dll855
COREDLL.dll886
COREDLL.dll702
COREDLL.dll701
COREDLL.dll705
COREDLL.dll848
COREDLL.dll847
COREDLL.dll494
COREDLL.dll499
COREDLL.dll492
COREDLL.dll6
COREDLL.dll734
COREDLL.dll278
COREDLL.dll859
COREDLL.dll870
COREDLL.dll861
COREDLL.dll514
COREDLL.dll500
COREDLL.dll866
COREDLL.dll743
COREDLL.dll1036
COREDLL.dll874
COREDLL.dll25
COREDLL.dll2
COREDLL.dll3
COREDLL.dll520
COREDLL.dll5
COREDLL.dll4
COREDLL.dll16
COREDLL.dll34
COREDLL.dll15
COREDLL.dll228
COREDLL.dll227
COREDLL.dll844
COREDLL.dll937
COREDLL.dll683
COREDLL.dll537
COREDLL.dll884
COREDLL.dll94
COREDLL.dll838
COREDLL.dll730
COREDLL.dll275
commctrl.dll1
ordentry_vafunction_name
10xe28f4?afxChNil@@3GA
20xe49c0?afxData@@3UAUX_DATA@@A
30xc3cc8?classCArchiveException@CArchiveException@@2UCRuntimeClass@@B
40xc2ce4?classCBitmap@CBitmap@@2UCRuntimeClass@@B
50xc2d14?classCBrush@CBrush@@2UCRuntimeClass@@B
60xc2d8c?classCClientDC@CClientDC@@2UCRuntimeClass@@B
70xc3510?classCCmdTarget@CCmdTarget@@2UCRuntimeClass@@B
80xc3f50?classCColorDialog@CColorDialog@@2UCRuntimeClass@@B
90xc3b20?classCCommonDialog@CCommonDialog@@2UCRuntimeClass@@B
100xc3fa0?classCControlBar@CControlBar@@2UCRuntimeClass@@B
110xc3dc0?classCCtrlView@CCtrlView@@2UCRuntimeClass@@B
120xc2da4?classCDC@CDC@@2UCRuntimeClass@@B
130xc2f8c?classCDialog@CDialog@@2UCRuntimeClass@@B
140xc43ec?classCDocument@CDocument@@2UCRuntimeClass@@B
150xc3a38?classCException@CException@@2UCRuntimeClass@@B
160xc3cf4?classCFile@CFile@@2UCRuntimeClass@@B
170xc3f38?classCFileDialog@CFileDialog@@2UCRuntimeClass@@B
180xc3d1c?classCFileException@CFileException@@2UCRuntimeClass@@B
190xc2cfc?classCFont@CFont@@2UCRuntimeClass@@B
200xc3aa0?classCFormView@CFormView@@2UCRuntimeClass@@B
210xc3fd0?classCFrameWnd@CFrameWnd@@2UCRuntimeClass@@B
220xc2d44?classCGdiObject@CGdiObject@@2UCRuntimeClass@@B
230xc38bc?classCHeaderCtrl@CHeaderCtrl@@2UCRuntimeClass@@B
240xc382c?classCImageList@CImageList@@2UCRuntimeClass@@B
250xc3874?classCListCtrl@CListCtrl@@2UCRuntimeClass@@B
260xc3a7c?classCMapPtrToPtr@CMapPtrToPtr@@2UCRuntimeClass@@B
270xc3a20?classCMemoryException@CMemoryException@@2UCRuntimeClass@@B
280xc3c9c?classCMenu@CMenu@@2UCRuntimeClass@@B
290xc3a08?classCNotSupportedException@CNotSupportedException@@2UCRuntimeClass@@B
300xc2f64?classCObject@CObject@@2UCRuntimeClass@@B
310xc2d5c?classCPaintDC@CPaintDC@@2UCRuntimeClass@@B
320xc2ccc?classCPalette@CPalette@@2UCRuntimeClass@@B
330xc2d2c?classCPen@CPen@@2UCRuntimeClass@@B
340xc38d4?classCProgressCtrl@CProgressCtrl@@2UCRuntimeClass@@B
350xc3b88?classCPropertyPage@CPropertyPage@@2UCRuntimeClass@@B
360xc3b70?classCPropertySheet@CPropertySheet@@2UCRuntimeClass@@B
370xc2ef8?classCPtrArray@CPtrArray@@2UCRuntimeClass@@B
380xc368c?classCPtrList@CPtrList@@2UCRuntimeClass@@B
390xc2dd4?classCResourceException@CResourceException@@2UCRuntimeClass@@B
400xc2cb4?classCRgn@CRgn@@2UCRuntimeClass@@B
410xc3d34?classCScrollView@CScrollView@@2UCRuntimeClass@@B
420xc38ec?classCSliderCtrl@CSliderCtrl@@2UCRuntimeClass@@B
430xc3904?classCSpinButtonCtrl@CSpinButtonCtrl@@2UCRuntimeClass@@B
440xc3dd8?classCSplitterWnd@CSplitterWnd@@2UCRuntimeClass@@B
450xc3844?classCStatusBarCtrl@CStatusBarCtrl@@2UCRuntimeClass@@B
460xe0b80?classCStringArray@CStringArray@@2UCRuntimeClass@@A
470xc38a4?classCTabCtrl@CTabCtrl@@2UCRuntimeClass@@B
480xc385c?classCToolBarCtrl@CToolBarCtrl@@2UCRuntimeClass@@B
490xc388c?classCTreeCtrl@CTreeCtrl@@2UCRuntimeClass@@B
500xc2dbc?classCUserException@CUserException@@2UCRuntimeClass@@B
510xc3fb8?classCView@CView@@2UCRuntimeClass@@B
520xc36b0?classCWinApp@CWinApp@@2UCRuntimeClass@@B
530xc35fc?classCWinThread@CWinThread@@2UCRuntimeClass@@B
540xc2d74?classCWindowDC@CWindowDC@@2UCRuntimeClass@@B
550xc3138?classCWnd@CWnd@@2UCRuntimeClass@@B
560xc35dc?connectionMap@CCmdTarget@@1UAFX_CONNECTIONMAP@@B
570xc3568?dispatchMap@CCmdTarget@@1UAFX_DISPMAP@@B
580xc35a0?eventsinkMap@CCmdTarget@@1UAFX_EVENTSINKMAP@@B
590xe0df0?g_bUseDST@@3HA
600xc35cc?interfaceMap@CCmdTarget@@1UAFX_INTERFACEMAP@@B
610xc3540?messageMap@CCmdTarget@@1UAFX_MSGMAP@@B
620xc3f68?messageMap@CColorDialog@@1UAFX_MSGMAP@@B
630xc3b38?messageMap@CCommonDialog@@1UAFX_MSGMAP@@B
640xc3df0?messageMap@CCtrlView@@1UAFX_MSGMAP@@B
650xc2fa4?messageMap@CDialog@@1UAFX_MSGMAP@@B
660xc4404?messageMap@CDocument@@1UAFX_MSGMAP@@B
670xc3ab8?messageMap@CFormView@@1UAFX_MSGMAP@@B
680xc3fe8?messageMap@CFrameWnd@@1UAFX_MSGMAP@@B
690xc398c?messageMap@CListCtrl@@1UAFX_MSGMAP@@B
700xc3c60?messageMap@CPropertyPage@@1UAFX_MSGMAP@@B
710xc3bb0?messageMap@CPropertySheet@@1UAFX_MSGMAP@@B
720xc3d54?messageMap@CScrollView@@1UAFX_MSGMAP@@B
730xc391c?messageMap@CTabCtrl@@1UAFX_MSGMAP@@B
740xc39c4?messageMap@CToolBarCtrl@@1UAFX_MSGMAP@@B
750xc3954?messageMap@CTreeCtrl@@1UAFX_MSGMAP@@B
760xc3e28?messageMap@CView@@1UAFX_MSGMAP@@B
770xc36c8?messageMap@CWinApp@@1UAFX_MSGMAP@@B
780xc3150?messageMap@CWnd@@1UAFX_MSGMAP@@B
790xe4a34?rectDefault@CFrameWnd@@2VCRect@@B
800xc3d4c?sizeDefault@CScrollView@@2UtagSIZE@@B
810xe43c8?wndBottom@CWnd@@2V1@B
820xe4348?wndNoTopMost@CWnd@@2V1@B
830xe4410?wndTop@CWnd@@2V1@B
840xe4388?wndTopMost@CWnd@@2V1@B
module_nameTMSDU.exe
flags0
timestamp2008-06-04 10:30:55
version0.0
ordinal_base1
nFunctions84
nNames84
Names(84)0xc4a58
Functions(84)0xc4908
NameOrdinals(84)0xc4ba8

StringTable 040904b0

Comments
CompanyNameHunter Technology Co., ltd.
FileDescriptionIran TMSDU
FileVersion1, 4, 0, 0
InternalNameTMSDU
LegalCopyrightCopyright © 2007
LegalTrademarks
OriginalFilenameTMSDU.exe
PrivateBuild
ProductNameTMSDU
ProductVersion1, 1, 1, 1
SpecialBuild

StringTable 041204b0

Comments
CompanyNamesw2
FileDescriptionTMSDU
FileVersion1, 4, 0, 0
InternalNameTMSDU
LegalCopyrightCopyright ¨Ï 2008
LegalTrademarks
OriginalFilenameTMSDU.exe
PrivateBuild
ProductNamesw2 TMSDU
ProductVersion1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion1.4.0.0
ProductVersion1.1.1.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
01569280EXE06/04/2008 10:30:55#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK