USB.exe - WCE MFC-Anwendung USB

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	USB.exe
size	35840 (0x8c00)
md5	e2085cc128efce61b495d472e1391714

type	PE32 executable (Windows CE) ARM Thumb, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
109	50725	3
0	0	1
110	50725	3
123	50701	2
109	60511	5
123	50727	15
1	0	229
110	60511	10
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x1c2
NumberOfSections	5
TimeDateStamp	0x5392dbd9
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x5800
SizeOfInitializedData	0x3200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x5f34
BaseOfCode	0x1000
BaseOfData	0x7000
ImageBase	0x10000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0xc000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x5754	0x5800	R-X CODE
.rdata	0x7000	0x187a	0x1a00	R-- IDATA
.data	0x9000	0x468	0x400	RW- IDATA
.pdata	0xa000	0x4f8	0x600	R-- IDATA
.rsrc	0xb000	0xa78	0xc00	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x80a8	0xa0
RESOURCE	0xb000	0xa78
EXCEPTION	0xa000	0x4f8
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x7030	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x9000	0x368
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	744
ICON	#2	296
DIALOG	#102	326
DIALOG	#136	142
GROUP_ICON	#128	34
VERSION	#1	732

module_name	hint	ord	function_name
AppLoginDll.dll			int __cdecl AppLogin(void) ?AppLogin@@YAHXZ
AnimateMove.dll	1		void __cdecl CloseDoor(class CDC *, class CDC &, int, int, int) ?CloseDoor@@YAXPAVCDC@@AAV1@HHH@Z
AnimateMove.dll	4		void __cdecl OpenDoor(class CDC *, class CDC &, class CDC &, int, int, int) ?OpenDoor@@YAXPAVCDC@@AAV1@1HHH@Z
AnimateMove.dll	10		void __cdecl WheelRoll(class CDC *, class CDC &, class CDC &, int, int, int) ?WheelRoll@@YAXPAVCDC@@AAV1@1HHH@Z
AnimateMove.dll			void __cdecl ClockWiseRoll(class CDC *, class CDC &, class CDC &, int, int, int) ?ClockWiseRoll@@YAXPAVCDC@@AAV1@1HHH@Z
AnimateMove.dll	2		void __cdecl CrossRoll(class CDC *, class CDC &, class CDC &, int, int) ?CrossRoll@@YAXPAVCDC@@AAV1@1HH@Z
AnimateMove.dll	9		void __cdecl VerticalRoll(class CDC *, class CDC &, class CDC &, int, int) ?VerticalRoll@@YAXPAVCDC@@AAV1@1HH@Z
AnimateMove.dll	3		void __cdecl HorizonRoll(class CDC *, class CDC &, class CDC &, int, int) ?HorizonRoll@@YAXPAVCDC@@AAV1@1HH@Z
AnimateMove.dll	5		void __cdecl SlideDown(class CDC *, class CDC &, class CDC &, int, int, int, int) ?SlideDown@@YAXPAVCDC@@AAV1@1HHHH@Z
AnimateMove.dll	8		void __cdecl SlideUp(class CDC *, class CDC &, class CDC &, int, int, int, int) ?SlideUp@@YAXPAVCDC@@AAV1@1HHHH@Z
AnimateMove.dll	6		void __cdecl SlideLeft(class CDC *, class CDC &, class CDC &, int, int, int, int) ?SlideLeft@@YAXPAVCDC@@AAV1@1HHHH@Z
AnimateMove.dll	7		void __cdecl SlideRight(class CDC *, class CDC &, class CDC &, int, int, int, int) ?SlideRight@@YAXPAVCDC@@AAV1@1HHHH@Z
Arab.dll	1		class ATL::CStringT<wchar_t, class StrTraitMFC_DLL<wchar_t, class ATL::ChTraitsOS<wchar_t> > > __cdecl DispRightToLeft(wchar_t const *) ?DispRightToLeft@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsOS@_W@ATL@@@@@ATL@@PB_W@Z
MultiLanDll.dll	3		void __cdecl EndLoadString(void) ?EndLoadString@@YAXXZ
MultiLanDll.dll	8		class ATL::CStringT<wchar_t, class StrTraitMFC_DLL<wchar_t, class ATL::ChTraitsOS<wchar_t> > > __cdecl LoadStringW(class ATL::CStringT<wchar_t, class StrTraitMFC_DLL<wchar_t, class ATL::ChTraitsOS<wchar_t> > >) ?LoadStringW@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsOS@_W@ATL@@@@@ATL@@V12@@Z
MultiLanDll.dll			int __cdecl BeginLoadString(class ATL::CStringT<wchar_t, class StrTraitMFC_DLL<wchar_t, class ATL::ChTraitsOS<wchar_t> > >) ?BeginLoadString@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsOS@_W@ATL@@@@@ATL@@@Z
MultiLanDll.dll	6		class ATL::CStringT<wchar_t, class StrTraitMFC_DLL<wchar_t, class ATL::ChTraitsOS<wchar_t> > > __cdecl GetLanguage(void) ?GetLanguage@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsOS@_W@ATL@@@@@ATL@@XZ
ApicalDrvApi.dll	64		SetDefaultClient
ApicalDrvApi.dll	15		GetDefaultClient
MFC80U.DLL		2596
MFC80U.DLL		2252
MFC80U.DLL		859
MFC80U.DLL		2938
MFC80U.DLL		1640
MFC80U.DLL		936
MFC80U.DLL		1010
MFC80U.DLL		1011
MFC80U.DLL		1193
MFC80U.DLL		2493
MFC80U.DLL		2435
MFC80U.DLL		2232
MFC80U.DLL		2585
MFC80U.DLL		1465
MFC80U.DLL		3112
MFC80U.DLL		277
MFC80U.DLL		563
MFC80U.DLL		2199
MFC80U.DLL		2377
MFC80U.DLL		428
MFC80U.DLL		438
MFC80U.DLL		2264
MFC80U.DLL		1307
MFC80U.DLL		315
MFC80U.DLL		303
MFC80U.DLL		477
MFC80U.DLL		374
MFC80U.DLL		2842
MFC80U.DLL		2295
MFC80U.DLL		1956
MFC80U.DLL		1977
MFC80U.DLL		411
MFC80U.DLL		1792
MFC80U.DLL		2335
MFC80U.DLL		2755
MFC80U.DLL		2602
MFC80U.DLL		2610
MFC80U.DLL		2369
MFC80U.DLL		2108
MFC80U.DLL		1297
MFC80U.DLL		2608
MFC80U.DLL		1578
MFC80U.DLL		1142
MFC80U.DLL		2051
MFC80U.DLL		2688
MFC80U.DLL		3102
MFC80U.DLL		2550
MFC80U.DLL		2040
MFC80U.DLL		2768
MFC80U.DLL		1192
MFC80U.DLL		1206
MFC80U.DLL		2149
MFC80U.DLL		2153
MFC80U.DLL		507
MFC80U.DLL		655
MFC80U.DLL		1740
MFC80U.DLL		635
MFC80U.DLL		3011
MFC80U.DLL		2797
MFC80U.DLL		3037
MFC80U.DLL		2891
MFC80U.DLL		3024
MFC80U.DLL		856
MFC80U.DLL		1462
MFC80U.DLL		1726
MFC80U.DLL		317
MFC80U.DLL		287
MFC80U.DLL		520
MFC80U.DLL		518
MFC80U.DLL		439
MFC80U.DLL		419
MFC80U.DLL		2792
MFC80U.DLL		808
MFC80U.DLL		809
MFC80U.DLL		1713
MFC80U.DLL		1148
MFC80U.DLL		1743
MFC80U.DLL		2401
MFC80U.DLL		1345
MFC80U.DLL		1350
MFC80U.DLL		3052
MFC80U.DLL		1978
MFC80U.DLL		427
MFC80U.DLL		931
MFC80U.DLL		1641
MFC80U.DLL		2940
MFC80U.DLL		981
MFC80U.DLL		980
MFC80U.DLL		2106
MFC80U.DLL		860
MFC80U.DLL		2242
MFC80U.DLL		2571
MFC80U.DLL		1137
MFC80U.DLL		2544
MFC80U.DLL		3129
MFC80U.DLL		2216
MFC80U.DLL		2603
MFC80U.DLL		1839
MFC80U.DLL		2424
MFC80U.DLL		2274
MFC80U.DLL		1256
MFC80U.DLL		923
MFC80U.DLL		1800
MFC80U.DLL		849
MFC80U.DLL		2583
MFC80U.DLL		1165
MFC80U.DLL		1006
MFC80U.DLL		1005
MFC80U.DLL		965
MFC80U.DLL		2594
MFC80U.DLL		1416
MFC80U.DLL		1496
MFC80U.DLL		1540
MFC80U.DLL		2285
MFC80U.DLL		1489
MFC80U.DLL		1542
MFC80U.DLL		1419
MFC80U.DLL		1456
MFC80U.DLL		1997
MFC80U.DLL		1998
MFC80U.DLL		1992
MFC80U.DLL		1454
MFC80U.DLL		2109
MFC80U.DLL		2339
MFC80U.DLL		2263
MFC80U.DLL		1715
MFC80U.DLL		417
MFC80U.DLL		1134
MFC80U.DLL		1144
MFC80U.DLL		769
COREDLL.dll		1177
COREDLL.dll		1049
COREDLL.dll		1041
COREDLL.dll		1054
COREDLL.dll		1876
COREDLL.dll		2696
COREDLL.dll		1645
COREDLL.dll		1018
COREDLL.dll		87
COREDLL.dll		1047
COREDLL.dll		2632
COREDLL.dll		2512
COREDLL.dll		1095
COREDLL.dll		1094
COREDLL.dll		3
COREDLL.dll		2
COREDLL.dll		1152
COREDLL.dll		916
COREDLL.dll		692
COREDLL.dll		255
COREDLL.dll		262
COREDLL.dll		925
COREDLL.dll		911
COREDLL.dll		461
COREDLL.dll		456
COREDLL.dll		463
COREDLL.dll		455
COREDLL.dll		728
COREDLL.dll		1397
COREDLL.dll		705
COREDLL.dll		267
COREDLL.dll		895
COREDLL.dll		248
COREDLL.dll		868
COREDLL.dll		903
COREDLL.dll		902
COREDLL.dll		905
COREDLL.dll		941
COREDLL.dll		875
COREDLL.dll		876
COREDLL.dll		276
COREDLL.dll		889
COREDLL.dll		926
COREDLL.dll		919
COREDLL.dll		921
COREDLL.dll		918
COREDLL.dll		910
COREDLL.dll		906
COREDLL.dll		263
COREDLL.dll		257
COREDLL.dll		923
COREDLL.dll		924
COREDLL.dll		945
COREDLL.dll		487
COREDLL.dll		259
COREDLL.dll		258
COREDLL.dll		912
COREDLL.dll		287
COREDLL.dll		250
COREDLL.dll		249
COREDLL.dll		936
COREDLL.dll		544

StringTable 040704B0

CompanyName	Lenovo (Beijing) Limited
FileDescription	WCE MFC-Anwendung USB
FileVersion	1, 0, 0, 1
InternalName	USB
LegalCopyright	Copyright ? 2008
OriginalFilename	USB.exe
ProductName	Anwendung USB
ProductVersion	1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	35840	EXE	06/07/2014 09:31:05	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

USB.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040704B0

VS_FIXEDFILEINFO

USB.exe
-