tscard.exe - tscard MFC Application

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	tscard.exe
size	101126 (0x18b06)
md5	cfd38684126fd1083e5286f2e97248c4

type	PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
0	0	18
19	8034	15
1	0	414
14	7299	26
10	9782	140
11	9782	72
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x55fa0518
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x3440e
SizeOfInitializedData	0x3b40e
SizeOfUninitializedData	0
AddressOfEntryPoint	0x3c046
BaseOfCode	0x1000
BaseOfData	0x24000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x3d000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Petite v2.1 (1)

Sections

name	va	vsize	raw size	flags
	0x1000	0x34000	0x15600	RWX CODE IDATA
.rsrc	0x35000	0x7000	0x2b06	RW- IDATA
.petite	0x3c000	0x40e	0x600	RWX CODE IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3c204	0x20a
RESOURCE	0x35000	0x6148
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
CURSOR	#3	308
CURSOR	#4	180
BITMAP	#26567	1508
BITMAP	#30994	184
BITMAP	#30995	364
BITMAP	#30996	324
ICON	#1	744
ICON	#2	296
DIALOG	#100	396
DIALOG	#102	1058
DIALOG	#118	552
DIALOG	#120	174
DIALOG	#130	1362
DIALOG	#131	3082
DIALOG	#30721	232
STRING	#7	310
STRING	#8	364
STRING	#9	532
STRING	#10	152
STRING	#26	328
STRING	#32	128
STRING	#33	96
STRING	#34	96
STRING	#35	96
STRING	#36	128
STRING	#37	128
STRING	#38	96
STRING	#39	96
STRING	#40	96
STRING	#41	128
STRING	#42	128
STRING	#43	96
STRING	#44	96
STRING	#45	72
STRING	#46	104
STRING	#47	104
STRING	#48	96
STRING	#49	72
STRING	#50	72
STRING	#64	120
STRING	#65	44
STRING	#67	50
STRING	#76	104
STRING	#3841	130
STRING	#3842	42
STRING	#3843	330
STRING	#3857	1250
STRING	#3858	674
STRING	#3859	732
STRING	#3865	172
STRING	#3866	222
STRING	#3867	1220
STRING	#3868	612
STRING	#3869	44
GROUP_CURSOR	#30977	34
GROUP_ICON	#128	34
VERSION	#1	880
MANIFEST	#1	674

module_name	ord	function_name
KERNEL32.dll		ExitProcess
KERNEL32.dll		LoadLibraryA
KERNEL32.dll		GetProcAddress
KERNEL32.dll		VirtualProtect
KERNEL32.dll		GlobalAlloc
KERNEL32.dll		GlobalFree
KERNEL32.dll		GetModuleHandleA
USER32.dll		MessageBoxA
USER32.dll		wsprintfA
GDI32.dll		LineTo
comdlg32.dll		PrintDlgA
WINSPOOL.DRV		OpenPrinterA
ADVAPI32.dll		RegCloseKey
COMCTL32.dll	17

StringTable 040904b0

Comments	3a
CompanyName	John El Self
FileDescription	tscard MFC Application
FileVersion	3, 0, 1, 0
InternalName	tscard
LegalCopyright	Copyright (C) 2015
LegalTrademarks
OriginalFilename	tscard.EXE
PrivateBuild
ProductName	tscard Application
ProductVersion	3, 0, 1, 0
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	3.0.1.0
ProductVersion	3.0.1.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	2560	EXE	09/17/2015 00:11:04	#
15c1	15	HTM		#
15d0	95542	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x38018

[?] can't find file_offset of VA 0x38150

[?] can't find file_offset of VA 0x38230

[?] can't find file_offset of VA 0x38900

[?] can't find file_offset of VA 0x389b8

[?] can't find file_offset of VA 0x38b28

[?] can't find file_offset of VA 0x38818

[?] can't find file_offset of VA 0x38c70

[?] can't find file_offset of VA 0x38da8

[?] can't find file_offset of VA 0x38f18

[?] can't find file_offset of VA 0x39130

[?] can't find file_offset of VA 0x391c8

[?] can't find file_offset of VA 0x393f0

[?] can't find file_offset of VA 0x39470

[?] can't find file_offset of VA 0x394d0

[?] can't find file_offset of VA 0x39530

[?] can't find file_offset of VA 0x39590

[?] can't find file_offset of VA 0x39ab8

[?] can't find file_offset of VA 0x39678

[?] can't find file_offset of VA 0x396d8

[?] can't find file_offset of VA 0x39738

[?] can't find file_offset of VA 0x39798

[?] can't find file_offset of VA 0x39818

[?] can't find file_offset of VA 0x39b38

[?] can't find file_offset of VA 0x39898

[?] can't find file_offset of VA 0x398f8

[?] can't find file_offset of VA 0x39940

[?] can't find file_offset of VA 0x399a8

[?] can't find file_offset of VA 0x39a10

[?] can't find file_offset of VA 0x39a70

[?] can't find file_offset of VA 0x39b98

[?] can't find file_offset of VA 0x39310

[?] can't find file_offset of VA 0x39610

[?] can't find file_offset of VA 0x39640

[?] can't find file_offset of VA 0x39388

[?] can't find file_offset of VA 0x39be0

[?] can't find file_offset of VA 0x39c68

[?] can't find file_offset of VA 0x39c98

[?] can't find file_offset of VA 0x39de8

[?] can't find file_offset of VA 0x3a660

[?] can't find file_offset of VA 0x3a380

[?] can't find file_offset of VA 0x3a2d0

[?] can't find file_offset of VA 0x3b038

[?] can't find file_offset of VA 0x3a908

[?] can't find file_offset of VA 0x3add0

[?] can't find file_offset of VA 0x3b118

[?] can't find file_offset of VA 0x38208

tscard.exe-