TXPlatform.exe

info
MZ
PE
resources
strings
imports
foremost
hexdump
disasm
log
discuss
donate

filename	TXPlatform.exe
size	77824 (0x13000)
md5	c73c1a41e75ba22e77092b4923d64986

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
93	4035	2
95	4035	1
12	7291	5
14	7299	3
4	8168	4
10	8168	23
19	8022	11
19	8034	10
123	50727	3
1	0	169
11	8168	15

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4e661f54
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10e
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xd000
SizeOfInitializedData	0x5c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0xd5d2
BaseOfCode	0x1000
BaseOfData	0xe000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x400
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x16000
SizeOfHeaders	0x400
CheckSum	0x21d64
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xccda	0xd000	R-X CODE
.rdata	0xe000	0x26c4	0x2800	R-- IDATA
.data	0x11000	0x21bc	0x2000	RW- IDATA
.rsrc	0x14000	0x78	0x400	R-- IDATA
.reloc	0x15000	0xe0a	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xf740	0xb4
RESOURCE	0x14000	0x78
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x15000	0x9b0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xe000	0x288
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
STRING	#11	32	1252

id	lang	string
161	2052	WoCflygiAjAyxR

module_name	hint	ord	function_name
KERNEL32.dll	500		GetModuleFileNameA
KERNEL32.dll	887		ReleaseMutex
KERNEL32.dll	1124		WaitForSingleObject
KERNEL32.dll	614		GetTickCount
KERNEL32.dll	1057		Sleep
KERNEL32.dll	807		OpenEventA
KERNEL32.dll	978		SetErrorMode
KERNEL32.dll	486		GetLastError
KERNEL32.dll	139		CreateMutexA
KERNEL32.dll	332		FreeLibrary
KERNEL32.dll	192		DeleteFileA
KERNEL32.dll	108		CreateDirectoryA
KERNEL32.dll	1199		lstrcpyA
KERNEL32.dll	442		GetDriveTypeA
KERNEL32.dll	281		FindClose
KERNEL32.dll	765		LocalFree
KERNEL32.dll	302		FindNextFileA
KERNEL32.dll	768		LocalReAlloc
KERNEL32.dll	285		FindFirstFileA
KERNEL32.dll	761		LocalAlloc
KERNEL32.dll	893		RemoveDirectoryA
KERNEL32.dll	1165		WriteFile
KERNEL32.dll	1190		lstrcatA
KERNEL32.dll	148		CreateProcessA
KERNEL32.dll	1070		TerminateThread
KERNEL32.dll	701		InterlockedExchange
KERNEL32.dll	120		CreateFileA
KERNEL32.dll	700		InterlockedDecrement
KERNEL32.dll	1196		lstrcmpiA
KERNEL32.dll	260		ExitProcess
KERNEL32.dll	114		CreateEventA
KERNEL32.dll	786		MoveFileExA
KERNEL32.dll	785		MoveFileA
KERNEL32.dll	581		GetSystemDirectoryA
KERNEL32.dll	1089		UnmapViewOfFile
KERNEL32.dll	778		MapViewOfFile
KERNEL32.dll	811		OpenFileMappingA
KERNEL32.dll	979		SetEvent
KERNEL32.dll	51		CancelIo
KERNEL32.dll	770		LocalSize
KERNEL32.dll	1069		TerminateProcess
KERNEL32.dll	819		OpenProcess
KERNEL32.dll	837		Process32Next
KERNEL32.dll	835		Process32First
KERNEL32.dll	172		CreateToolhelp32Snapshot
KERNEL32.dll	425		GetCurrentProcess
KERNEL32.dll	429		GetCurrentThreadId
KERNEL32.dll	1146		WideCharToMultiByte
KERNEL32.dll	569		GetStartupInfoA
KERNEL32.dll	502		GetModuleHandleA
KERNEL32.dll	468		GetFileSize
KERNEL32.dll	991		SetFilePointer
KERNEL32.dll	872		ReadFile
KERNEL32.dll	67		CloseHandle
KERNEL32.dll	629		GetVersionExA
KERNEL32.dll	826		OutputDebugStringA
KERNEL32.dll	1205		lstrlenA
KERNEL32.dll	753		LoadLibraryA
KERNEL32.dll	544		GetProcAddress
KERNEL32.dll	1108		VirtualAlloc
KERNEL32.dll	217		EnterCriticalSection
KERNEL32.dll	751		LeaveCriticalSection
KERNEL32.dll	1111		VirtualFree
KERNEL32.dll	190		DeleteCriticalSection
KERNEL32.dll	794		MultiByteToWideChar
KERNEL32.dll	692		InitializeCriticalSection
USER32.dll	312		GetProcessWindowStation
USER32.dll	480		PostQuitMessage
USER32.dll	132		DefWindowProcA
USER32.dll	468		OpenDesktopA
USER32.dll	642		TranslateMessage
USER32.dll	298		GetMessageA
USER32.dll	89		CreateWindowExA
USER32.dll	499		RegisterClassExA
USER32.dll	416		LoadImageA
USER32.dll	211		ExitWindowsEx
USER32.dll	354		GetWindowThreadProcessId
USER32.dll	402		IsWindowVisible
USER32.dll	350		GetWindowTextA
USER32.dll	208		EnumWindows
USER32.dll	61		CloseDesktop
USER32.dll	593		SetThreadDesktop
USER32.dll	330		GetThreadDesktop
USER32.dll	335		GetUserObjectInformationA
USER32.dll	149		DispatchMessageA
USER32.dll	446		MessageBoxA
USER32.dll	684		wsprintfA
USER32.dll	576		SetProcessWindowStation
USER32.dll	472		OpenWindowStationA
USER32.dll	471		OpenInputDesktop
GDI32.dll	351		GetStockObject
ADVAPI32.dll	320		OpenEventLogA
ADVAPI32.dll	50		CloseEventLog
ADVAPI32.dll	48		ClearEventLogA
ADVAPI32.dll	23		AdjustTokenPrivileges
ADVAPI32.dll	245		LookupPrivilegeValueA
ADVAPI32.dll	322		OpenProcessToken
ole32.dll	13		CoCreateInstance
ole32.dll	46		CoInitializeEx
ole32.dll	74		CoSetProxyBlanket
ole32.dll	83		CoUninitialize
OLEAUT32.dll		2
OLEAUT32.dll		8
OLEAUT32.dll		10
OLEAUT32.dll		9
OLEAUT32.dll		12
OLEAUT32.dll		6
MSVCRT.dll	308		_itoa
MSVCRT.dll	453		_strnicmp
MSVCRT.dll	690		sprintf
MSVCRT.dll	455		_strnset
MSVCRT.dll	390		_onexit
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	183		_controlfp
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	106		__p__commode
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	271		_initterm
MSVCRT.dll	88		__getmainargs
MSVCRT.dll	143		_acmdln
MSVCRT.dll	585		exit
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	211		_exit
MSVCRT.dll	14		public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
MSVCRT.dll	576		calloc
MSVCRT.dll	16		void __cdecl operator delete(void *) ??3@YAXPAX@Z
MSVCRT.dll	664		memmove
MSVCRT.dll	577		ceil
MSVCRT.dll	241		_ftol
MSVCRT.dll	709		strstr
MSVCRT.dll	657		malloc
MSVCRT.dll	573		atoi
MSVCRT.dll	695		strchr
MSVCRT.dll	15		void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	606		free
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	707		strrchr
MSVCRT.dll	65		_CxxThrowException
MSVCRT.dll	742		wcslen
MSVCRT.dll	703		strncat
MSVCRT.dll	166		_beginthreadex
MSVCP60.dll	1030		void __cdecl std::_Xran(void) ?_Xran@std@@YAXXZ
MSVCP60.dll	813		char const `private: static char const * __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Nullstr(void)'::`2'::_C ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
MSVCP60.dll	233		public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
MSVCP60.dll	1056		public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::assign(char const *, unsigned int) ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
MSVCP60.dll	914		private: bool __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Grow(unsigned int, bool) ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
MSVCP60.dll	1001		private: unsigned char & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Refcnt(char const *) ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
MSVCP60.dll	1633		public: static unsigned int const std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::npos ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
MSVCP60.dll	1016		private: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Tidy(bool) ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
MSVCP60.dll	1010		private: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Split(void) ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
MSVCP60.dll	842		private: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::_Eos(unsigned int) ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

show previews

offset	size	type	comment
0	77824	EXE	09/06/2011 13:25:40	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK