nistime-32bit.exe - TCP/Daytime Client Program

info
MZ
PE
resources
strings
imports
exports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	nistime-32bit.exe
size	267597 (0x4154d)
md5	e9a28d4f57f417b170ca28bc133e6d2a

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x453d3734
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0xb600
SizeOfInitializedData	0x3594d
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0xd000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	1.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x46000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0xf4240
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0xf4240
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Borland C++

Sections

name	va	vsize	raw size	flags
CODE	0x1000	0xc000	0xb600	R-X CODE
DATA	0xd000	0x9000	0x7200	RW- IDATA
.idata	0x16000	0x1000	0xc00	RW- IDATA
.edata	0x17000	0x1000	0x200	R-- IDATA
.reloc	0x18000	0x1000	0xe00	R-- IDATA SHARED
.rsrc	0x19000	0x4000	0x3c00	R-- IDATA SHARED
.debug	0x1d000	0x29000	0x28f4d	R-- IDATA SHARED

Data Directory

type	va	size
EXPORT	0x17000	0x12c
IMPORT	0x16000	0xa90
RESOURCE	0x19000	0x3c00
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x18000	0xd64
DEBUG	0x1d000	1
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	296
ICON	#2	1384
ICON	#3	744
ICON	#4	2216
MENU	#120	956
DIALOG	FILDIALOG	500
DIALOG	QRYDIALOG	256
DIALOG	SRVDIALOG	1074
DIALOG	SVDIALOG	382
DIALOG	TZDIALOG	210
DIALOG	#4307	960
STRING	#626	270
STRING	#627	146
STRING	#628	1160
STRING	#629	1310
STRING	#630	542
STRING	#631	348
STRING	#688	430
GROUP_ICON	#120	62
VERSION	#1	700

id	lang	string
10000	0	[0] No Error
10004	0	WSAEINTR: Interrupted system call
10009	0	WSAEBADF: Bad file number
10013	0	WSACCESS: Permission denied
10014	0	WSAEFAULT: Bad address
10022	0	WSAEINVAL: Invalid argument
10024	0	WSAEMFILE: Too many open files
10035	0	WSAEWOULDBLOCK: Operation would block
10036	0	WSAEINPROGRESS: Operation now in progress
10037	0	WSAEALREADY: Operation already in progress
10038	0	WSAENOTSOCK: Socket operation on non-socket
10039	0	WSAEDESTADDRREQ: Destination address required
10040	0	WSAEMSGSIZE: Message too long
10041	0	WSAEPROTOTYPE: Protocol wrong type for socket
10042	0	WSAENOPROTOOPT: Bad protocol option
10043	0	WSAEPROTONOSUPPORT: Protocol not supported
10044	0	WSAESOCKTNOSUPPORT: Socket type not supported
10045	0	WSAEOPNOTSUPP: Operation not supported on socket
10046	0	WSAEPFNNOSUPPORT: Protocol family not supported
10047	0	WSAEAFNNOSUPPORT: Address family not supported by protocol family
10048	0	WSAEADDRINUSE: Address already in use
10049	0	WSAEADDRNOTAVAIL: Can't assign requested address
10050	0	WSAENETDOWN: Network is down
10051	0	WSAENETUNREACH: Network is unreachable
10052	0	WSAENETRESET: Net dropped connection or reset
10053	0	WSAECONNABORTED: Software caused connection abort
10054	0	WSAECONNRESET: Connection reset by peer
10055	0	WSAENOBUFS: No buffer space available
10056	0	WSAEISCONN: Socket is already connected
10057	0	WSAENOTCONN: Socket is not connected
10058	0	WSAESHUTDOWN: Can't send after socket shutdown
10059	0	WSAETOOMANYREFS: Too many references, can't splice
10060	0	WSAETIMEDOUT: Connection timed out
10061	0	WSAECONNREFUSED: Connection refused
10062	0	WSAELOOP: Too many levels of symbolic links
10063	0	WSAENAMETOOLONG: File name too long
10064	0	WSAEHOSTDOWN: Host is down
10065	0	WSAEHOSTUNREACH: No Route to Host
10066	0	WSAENOTEMPTY: Directory not empty
10067	0	WSAEPROCLIM: Too many processes
10068	0	WSAEUSERS: Too many users
10069	0	WSAEDQUOT: Disc Quota Exceeded
10070	0	WSAESTALE: Stale NFS file handle
10071	0	WSAEREMOTE: Too many levels of remote in path
10091	0	WSASYSNOTREADY: Network SubSystem is unavailable
10092	0	WSAVERNOTSUPPORTED: WINSOCK DLL Version out of range
10093	0	WSANOTINITIALISED: Successful WSASTARTUP not yet performed
11001	0	WSAHOST_NOT_FOUND: Host not found
11002	0	WSATRY_AGAIN: Non-Authoritative Host not found
11003	0	WSANO_RECOVERY: Non-Recoverable errors: FORMERR, REFUSED, NOTIMP
11004	0	WSANO_DATA: Valid name, no data record of requested type

module_name	hint	ord	function_name
KERNEL32.dll			GetTimeZoneInformation
KERNEL32.dll			WriteFile
KERNEL32.dll			GetCurrentThreadId
KERNEL32.dll			SetConsoleCtrlHandler
KERNEL32.dll			RtlUnwind
KERNEL32.dll			GetCommandLineA
KERNEL32.dll			GetVersion
KERNEL32.dll			VirtualAlloc
KERNEL32.dll			GetModuleFileNameA
KERNEL32.dll			GetSystemTime
KERNEL32.dll			LeaveCriticalSection
KERNEL32.dll			_lwrite
KERNEL32.dll			GetLocalTime
KERNEL32.dll			SetLocalTime
KERNEL32.dll			InitializeCriticalSection
KERNEL32.dll			GlobalMemoryStatus
KERNEL32.dll			_lclose
KERNEL32.dll			GetProcAddress
KERNEL32.dll			GetModuleHandleA
KERNEL32.dll			SetSystemTimeAdjustment
KERNEL32.dll			GetStdHandle
KERNEL32.dll			SetFilePointer
KERNEL32.dll			CloseHandle
KERNEL32.dll			GetFileType
KERNEL32.dll			GetWindowsDirectoryA
KERNEL32.dll			RaiseException
KERNEL32.dll			GetEnvironmentStrings
KERNEL32.dll			OpenFile
KERNEL32.dll			GetSystemTimeAdjustment
KERNEL32.dll			SetHandleCount
KERNEL32.dll			CreateFileA
KERNEL32.dll			GetLastError
KERNEL32.dll			GetCurrentProcess
KERNEL32.dll			GetFileAttributesA
KERNEL32.dll			EnterCriticalSection
KERNEL32.dll			_lread
KERNEL32.dll			GetStartupInfoA
KERNEL32.dll			VirtualFree
KERNEL32.dll			ExitProcess
KERNEL32.dll			UnhandledExceptionFilter
KERNEL32.dll			Sleep
WSOCK32.dll			WSAStartup
WSOCK32.dll			socket
WSOCK32.dll			recv
WSOCK32.dll			ntohl
WSOCK32.dll			inet_addr
WSOCK32.dll			htonl
WSOCK32.dll			connect
WSOCK32.dll			closesocket
WSOCK32.dll			WSAAsyncSelect
WSOCK32.dll			WSACleanup
WSOCK32.dll			WSAGetLastError
WSOCK32.dll			send
WSOCK32.dll			htons
ADVAPI32.dll			OpenProcessToken
ADVAPI32.dll			RegOpenKeyExA
ADVAPI32.dll			RegCloseKey
ADVAPI32.dll			LookupPrivilegeValueA
ADVAPI32.dll			AdjustTokenPrivileges
ADVAPI32.dll			RegEnumValueA
USER32.dll			wsprintfA
USER32.dll			UpdateWindow
USER32.dll			UnregisterClassA
USER32.dll			TranslateMessage
USER32.dll			ShowWindow
USER32.dll			SetTimer
USER32.dll			SetFocus
USER32.dll			SendMessageA
USER32.dll			RegisterClassA
USER32.dll			PostQuitMessage
USER32.dll			MoveWindow
USER32.dll			MessageBoxA
USER32.dll			LoadStringA
USER32.dll			LoadCursorA
USER32.dll			KillTimer
USER32.dll			IsDlgButtonChecked
USER32.dll			GetWindowRect
USER32.dll			GetWindowLongA
USER32.dll			GetSysColor
USER32.dll			GetMessageA
USER32.dll			GetDlgItemTextA
USER32.dll			GetDlgItemInt
USER32.dll			GetDlgItem
USER32.dll			GetDesktopWindow
USER32.dll			GetDC
USER32.dll			LoadIconA
USER32.dll			GetActiveWindow
USER32.dll			EnumThreadWindows
USER32.dll			EndDialog
USER32.dll			PostMessageA
USER32.dll			EnableWindow
USER32.dll			DispatchMessageA
USER32.dll			DialogBoxParamA
USER32.dll			SetDlgItemTextA
USER32.dll			DestroyWindow
USER32.dll			DefWindowProcA
USER32.dll			CreateWindowExA
USER32.dll			CheckDlgButton
GDI32.dll			SetTextColor
GDI32.dll			SetBkMode
GDI32.dll			SetBkColor
GDI32.dll			TextOutA

ord	entry_va	function_name
1	0x1074	__GetExceptDLLinfo
2	0x2957	WndProc
3	0x436e	TZDlgProc
4	0x4401	SRVDlgProc
5	0x47ce	QRYDlgProc
6	0x4caa	SVDlgProc
7	0x4283	FILDlgProc
8	0x12d94	__DebuggerHookData
9	0x74cc	@__lockDebuggerData$qv
10	0x74f4	@__unlockDebuggerData$qv

module_name	nistimew.exe
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	10
nNames	10
Names(10)	0x17050
Functions(10)	0x17028
NameOrdinals(10)	0x17078

StringTable 040904E4

CompanyName	Natl. Inst.of Stand.and Tech.
FileDescription	TCP/Daytime Client Program
FileVersion	1.00
InternalName	NISTIME 32
LegalCopyright
ProductName	NISTIME 32 -- 32-bit Daytime Client
ProductVersion	3.31

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	3
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	267597	EXE	10/23/2006 21:42:12	#
15c1	15	HTM		#

Scanning the drive for archives:
1 file, 267597 bytes (262 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

nistime-32bit.exe-

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

nistime-32bit.exe
-