tswin.exe - tswin Application

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	tswin.exe
size	305222 (0x4a846)
md5	af47c47b7b7b97ea53eeca1aa02c6324

type	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
12	7291	3
19	8034	17
1	0	463
14	7299	28
10	9782	151
0	0	9
11	9782	124
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x5669cecb
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xa548b
SizeOfInitializedData	0xb848b
SizeOfUninitializedData	0
AddressOfEntryPoint	0xb9046
BaseOfCode	0x1000
BaseOfData	0x81000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xba000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Petite v2.1 (1)

Sections

name	va	vsize	raw size	flags
	0x1000	0xa5000	0x43400	RWX CODE IDATA
.rsrc	0xa6000	0x13000	0x6a46	RW- IDATA
.petite	0xb9000	0x48b	0x600	RWX CODE IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xb9204	0x287
RESOURCE	0xa6000	0x12d60
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
CURSOR	#2	308
CURSOR	#3	180
CURSOR	#4	308
CURSOR	#5	180
BITMAP	#2	1784
BITMAP	#26567	1508
BITMAP	#30994	184
BITMAP	#30995	364
BITMAP	#30996	324
ICON	#1	744
MENU	#2	4770
DIALOG	#100	640
DIALOG	#102	860
DIALOG	#103	1134
DIALOG	#104	878
DIALOG	#105	750
DIALOG	#107	1020
DIALOG	#109	578
DIALOG	#110	532
DIALOG	#111	318
DIALOG	#112	434
DIALOG	#113	268
DIALOG	#114	610
DIALOG	#115	608
DIALOG	#117	914
DIALOG	#118	660
DIALOG	#119	1922
DIALOG	#120	174
DIALOG	#121	210
DIALOG	#122	258
DIALOG	#123	1210
DIALOG	#125	166
DIALOG	#126	636
DIALOG	#127	782
DIALOG	#128	398
DIALOG	#129	358
DIALOG	#130	564
DIALOG	#131	610
DIALOG	#132	502
DIALOG	#133	284
DIALOG	#134	354
DIALOG	#135	330
DIALOG	#136	254
DIALOG	#137	362
DIALOG	#138	542
DIALOG	#139	2476
DIALOG	#140	182
DIALOG	#142	358
DIALOG	#143	1354
DIALOG	#144	760
DIALOG	#145	728
DIALOG	#146	296
DIALOG	#147	934
DIALOG	#148	194
DIALOG	#185	840
DIALOG	#30721	232
DIALOG	#30722	286
DIALOG	#30723	346
STRING	#1	272
STRING	#63	362
STRING	#64	626
STRING	#65	1038
STRING	#66	520
STRING	#67	342
STRING	#68	584
STRING	#69	756
STRING	#70	342
STRING	#71	468
STRING	#72	528
STRING	#73	318
STRING	#74	476
STRING	#75	532
STRING	#76	132
STRING	#77	552
STRING	#78	1406
STRING	#79	356
STRING	#80	794
STRING	#81	796
STRING	#82	1012
STRING	#83	728
STRING	#84	696
STRING	#85	502
STRING	#86	814
STRING	#87	736
STRING	#88	574
STRING	#89	808
STRING	#2049	1322
STRING	#2050	750
STRING	#2051	292
STRING	#2052	404
STRING	#2053	828
STRING	#2054	382
STRING	#2055	336
STRING	#2056	120
STRING	#3585	196
STRING	#3601	294
STRING	#3605	628
STRING	#3606	170
STRING	#3697	126
STRING	#3713	36
STRING	#3825	360
STRING	#3826	134
STRING	#3841	130
STRING	#3842	42
STRING	#3843	330
STRING	#3845	292
STRING	#3857	1250
STRING	#3858	674
STRING	#3859	732
STRING	#3865	172
STRING	#3866	222
STRING	#3867	1220
STRING	#3868	612
STRING	#3869	44
ACCELERATORS	#2	112
ACCELERATORS	#30997	24
GROUP_CURSOR	#30977	34
GROUP_CURSOR	#30978	34
GROUP_ICON	#2	20
VERSION	#1	852
MANIFEST	#1	672

module_name	ord	function_name
KERNEL32.dll		ExitProcess
KERNEL32.dll		LoadLibraryA
KERNEL32.dll		GetProcAddress
KERNEL32.dll		VirtualProtect
KERNEL32.dll		GlobalAlloc
KERNEL32.dll		GlobalFree
KERNEL32.dll		GetModuleHandleA
USER32.dll		MessageBoxA
USER32.dll		wsprintfA
GDI32.dll		SaveDC
comdlg32.dll		PrintDlgA
WINSPOOL.DRV		OpenPrinterA
ADVAPI32.dll		RegOpenKeyA
SHELL32.dll		DragFinish
COMCTL32.dll	17
IMAGEHLP.dll		MakeSureDirectoryPathExists

StringTable 040904b0

Comments	8
CompanyName	John El Self
FileDescription	tswin Application
FileVersion	8, 0, 0, 1
InternalName	tswin
LegalCopyright	Copyright (C) 2015
LegalTrademarks
OriginalFilename	tswin.EXE
PrivateBuild
ProductName	tswin Application
ProductVersion	8, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	8.0.0.1
ProductVersion	8.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	2560	EXE	12/10/2015 19:13:15	#
15c1	15	HTM		#
15d0	299638	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0xb09c0

[?] can't find file_offset of VA 0xb0af8

[?] can't find file_offset of VA 0xb1618

[?] can't find file_offset of VA 0xb1750

[?] can't find file_offset of VA 0xb02c8

[?] can't find file_offset of VA 0xb0bd8

[?] can't find file_offset of VA 0xb12a8

[?] can't find file_offset of VA 0xb1360

[?] can't find file_offset of VA 0xb14d0

[?] can't find file_offset of VA 0xaf020

[?] can't find file_offset of VA 0xad7b8

[?] can't find file_offset of VA 0xade80

[?] can't find file_offset of VA 0xacf20

[?] can't find file_offset of VA 0xad320

[?] can't find file_offset of VA 0xacb38

[?] can't find file_offset of VA 0xad580

[?] can't find file_offset of VA 0xacdb8

[?] can't find file_offset of VA 0xada38

[?] can't find file_offset of VA 0xadba8

[?] can't find file_offset of VA 0xaddc8

[?] can't find file_offset of VA 0xae170

[?] can't find file_offset of VA 0xae468

[?] can't find file_offset of VA 0xae740

[?] can't find file_offset of VA 0xae868

[?] can't find file_offset of VA 0xaec10

[?] can't find file_offset of VA 0xaecd8

[?] can't find file_offset of VA 0xb11c0

[?] can't find file_offset of VA 0xb1830

[?] can't find file_offset of VA 0xb1950

[?] can't find file_offset of VA 0xb1ac8

[?] can't find file_offset of VA 0xb2388

[?] can't find file_offset of VA 0xb24f8

[?] can't find file_offset of VA 0xb2770

[?] can't find file_offset of VA 0xb2b80

[?] can't find file_offset of VA 0xb3ba8

[?] can't find file_offset of VA 0xb3d00

[?] can't find file_offset of VA 0xb3f48

[?] can't find file_offset of VA 0xb4240

[?] can't find file_offset of VA 0xb4398

[?] can't find file_offset of VA 0xb4570

[?] can't find file_offset of VA 0xb4780

[?] can't find file_offset of VA 0xb48c0

[?] can't find file_offset of VA 0xb4aa0

[?] can't find file_offset of VA 0xb4cb8

[?] can't find file_offset of VA 0xb4d40

[?] can't find file_offset of VA 0xb4f68

[?] can't find file_offset of VA 0xb54e8

[?] can't find file_offset of VA 0xb5650

[?] can't find file_offset of VA 0xb5970

[?] can't find file_offset of VA 0xb5c90

[?] can't find file_offset of VA 0xb6208

[?] can't find file_offset of VA 0xb64e0

[?] can't find file_offset of VA 0xb6798

[?] can't find file_offset of VA 0xb6990

[?] can't find file_offset of VA 0xb6cc0

[?] can't find file_offset of VA 0xb7168

[?] can't find file_offset of VA 0xb73a8

[?] can't find file_offset of VA 0xb2d88

[?] can't find file_offset of VA 0xb32b8

[?] can't find file_offset of VA 0xb35a8

[?] can't find file_offset of VA 0xb36d0

[?] can't find file_offset of VA 0xb3868

[?] can't find file_offset of VA 0xb6088

[?] can't find file_offset of VA 0xb6fa0

[?] can't find file_offset of VA 0xb70f0

[?] can't find file_offset of VA 0xb1bd8

[?] can't find file_offset of VA 0xb1d20

[?] can't find file_offset of VA 0xb1e48

[?] can't find file_offset of VA 0xb20c0

[?] can't find file_offset of VA 0xb1ca0

[?] can't find file_offset of VA 0xb2170

[?] can't find file_offset of VA 0xb2198

[?] can't find file_offset of VA 0xb2300

[?] can't find file_offset of VA 0xb76d0

[?] can't find file_offset of VA 0xb7758

[?] can't find file_offset of VA 0xb7788

[?] can't find file_offset of VA 0xb8c38

[?] can't find file_offset of VA 0xb78d8

[?] can't find file_offset of VA 0xb8150

[?] can't find file_offset of VA 0xb7e70

[?] can't find file_offset of VA 0xb7dc0

[?] can't find file_offset of VA 0xb8b28

[?] can't find file_offset of VA 0xb83f8

[?] can't find file_offset of VA 0xb88c0

[?] can't find file_offset of VA 0xb8c08

[?] can't find file_offset of VA 0xb1ab0

[?] can't find file_offset of VA 0xb0bb0

[?] can't find file_offset of VA 0xb1808

tswin.exe-