filename | ENGCAI.EXE | |
---|---|---|
size | 273920 (0x42e00) | |
md5 | 24b92507b7c73384a8789f6f075d78dc | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | scan pending | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x50 |
blocks_in_file | 2 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0xf |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0x1a |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x200 |
DOS stub
00000000: ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 |........!..L.!..| 00000010: 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 |This program mus| 00000020: 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 |t be run under W| 00000030: 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 |in32..$7........| 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| * 000001c0:
PE Header
Packer / Compiler
This file is packed with ASPack. Analysis will be incomplete without unpacking. |
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0x4db000 | 0x4db0ac | 0x4d68ac | 0x4dc010 | 0 | 0 |
id | lang | string |
---|---|---|
61440 | 0 | 31 80 8c 04 73 32 4c e9 09 f6 13 72 01 54 4a f0 |1...s2L....r.TJ.| d4 bc 31 89 2c a7 9d 85 f7 71 e3 d1 25 cc 2f 29 |..1.,....q..%./)| ac 67 85 ca 2e ab f9 6a 21 df 23 ae 44 5f ca 26 |.g.....j!.#.D_.&| 0a e4 9e bf 02 4d bc 04 24 62 22 d6 c2 dd f8 14 |.....M..$b".....| 10 63 29 08 6b c7 14 de 4a f0 02 f3 20 55 78 14 |.c).k...J... Ux.| fe d1 2a 1e 60 20 11 12 43 5d 7b 30 6c bb f0 c8 |..*.` ..C]{0l...| 4b d2 68 6b 10 27 66 3d 87 29 68 d5 a3 75 09 17 |K.hk.'f=.)h..u..| a9 8b d1 13 d2 8f 51 5a 3f b5 fc 08 33 21 e9 25 |......QZ?...3!.%| 74 1f c6 56 fa 8e d8 de de ab 9a e9 76 e3 13 f3 |t..V........v...| 0d 65 45 5a f2 3f 29 d1 82 e7 25 3a 51 a0 02 e1 |.eEZ.?)...%:Q...| 6a 8d 8e 19 40 0e 20 02 51 e1 26 d0 08 6b 32 0b |j...@. .Q.&..k2.| 00 17 b4 85 8a b1 f6 d4 89 25 c5 10 6a e1 7f d1 |.........%..j...| c3 2b e6 be 82 22 6f bf 75 eb 09 fe 64 6c 82 54 |.+..."o.u...dl.T| f5 6c c4 dc cd 9b 81 7d 31 43 4f f8 e6 f2 6e 88 |.l.....}1CO...n.| 7f e4 08 ce dd 13 bf b4 74 98 76 c4 80 bf 65 56 |........t.v...eV| 79 ec 9e 46 5d 68 7c 5d 45 66 6e f4 a9 d9 9b 30 |y..F]h|]Efn....0| 09 91 e2 77 27 34 b5 36 dd c6 9e b0 1e af de 1f |...w'4.6........| 24 2c 50 9c 5d f7 83 d4 ad ed c2 ff 74 83 56 00 |$,P.].......t.V.| 16 c4 18 1f 99 37 b3 d9 0d d7 e0 3e 39 86 4c 40 |.....7.....>9.L@| 17 5f a1 80 8e 46 3a a2 a5 0c ab 00 7c 42 34 96 |._...F:.....|B4.| 00 12 81 d1 3e d3 a4 d7 40 59 7a 31 5b 6a 11 a3 |....>...@Yz1[j..| ad a7 38 43 36 ff de 2e 1d 83 38 91 d4 0a e1 57 |..8C6.....8....W| 49 b4 ac 04 2f 00 ee 53 26 38 c4 65 f5 3b 52 57 |I.../..S&8.e.;RW| 5f 45 d0 c3 9a 8e 18 ca fb 31 77 8d 66 94 aa cf |_E.......1w.f...| c2 49 b2 b2 f7 42 8d 2f a6 dd a0 a0 7b 9d ef 1f |.I...B./....{...| 2f a8 f9 e3 2f 3d f8 d0 0b 59 00 19 fb 24 7e 7a |/.../=...Y...$~z| af 9e af ea e9 67 42 f6 53 1f d0 c3 9d 9d f6 39 |.....gB.S......9| 22 c8 fc 6f 9e 1e 2a 92 e9 e8 61 8c e7 cc 35 73 |"..o..*...a...5s| a6 ba 21 e3 62 74 00 95 88 e4 91 55 df 1d a0 5f |..!.bt.....U..._| 57 c5 5f 5f d7 99 84 5c 3b 0b 03 f9 83 94 1f 31 |W.__...\;......1| a8 5d 65 31 ff a0 d5 19 b9 70 55 1f 2d 90 47 17 |.]e1.....pU.-.G.| c7 10 a7 18 5c 64 bb fe 4a 71 08 7b 9e 31 75 05 |....\d..Jq.{.1u.| 5b ea 2d fe a1 2a c3 a4 9b 57 55 08 70 a0 16 a9 |[.-..*...WU.p...| e8 d7 24 76 11 d3 f7 3a e0 0a 54 11 ef 3d 41 7f |..$v...:..T..=A.| 6f 14 62 71 05 7b f7 9e 65 aa e0 33 0b 53 7f 0e |o.bq.{..e..3.S..| a0 c5 f8 05 4c 1a 51 6a d5 94 8b 8f 8d b6 b7 eb |....L.Qj........| ac 8c 75 b8 fc 3d ef f4 37 b7 9b d7 17 a5 3e a7 |..u..=..7.....>.| ac 10 f1 f6 ee 36 e8 6e 0d ce dd 57 3e 60 fd 86 |.....6.n...W>`..| e5 e8 23 7d 54 ca c9 cc 98 d5 e2 b0 dc 45 e7 5b |..#}T........E.[| c9 e3 ac c1 b3 d8 a8 bc 74 04 0e 3b 50 ff 14 d4 |........t..;P...| 9d 39 4e 50 c2 36 61 16 aa 65 a5 da 9a 89 c5 ed |.9NP.6a..e......| 0a 81 e3 e1 ab 2b ef 86 9f c8 2c d6 8d bd 6e 2f |.....+....,...n/| ae 6b 0a 62 42 c6 33 f8 75 5f f2 7f 7a 2e b1 e6 |.k.bB.3.u_..z...| b3 c6 8b 5e 15 28 85 73 ef f0 81 84 6c 46 50 21 |...^.(.s....lFP!| e9 94 be 9e cc ba 41 9c b3 e9 1c 97 2a 5f 5c 82 |......A.....*_\.| 7b f1 1d bb ea f8 8b e1 fb 38 cc 8e 41 62 4c 85 |{........8..AbL.| 74 d3 fe 27 7f 83 77 19 0c c6 cf df 71 93 37 bd |t..'..w.....q.7.| 18 10 83 b0 f4 d5 f9 14 3e 53 f2 03 8a 32 1a 70 |........>S...2.p| 02 ad 8f 7d 89 5e 95 e5 d9 76 a1 de 29 0c 4b 88 |...}.^...v..).K.| 5b 6c 5c 5a 58 3d 40 0d 10 0f 0c 41 65 da 50 fd |[l\ZX=@....Ae.P.| 9d 64 ff 84 e6 9a ce 0b d8 4d d0 cc a1 5d e5 7b |.d.......M...].{| 37 7a 62 2c d8 f5 d0 40 09 22 75 81 b3 c0 7e ff |7zb,...@."u...~.| dc d1 bc 2e 73 c8 21 b4 dd f6 ef 23 43 e0 86 bf |....s.!....#C...| f8 60 24 6d 15 43 b1 e8 0f 69 3f 82 b7 17 ba 18 |.`$m.C...i?.....| 41 c3 fd 9b d0 9f 53 3e 9d ef 4c 8a 2c 8f bd 53 |A.....S>..L.,..S| 26 7a f6 8d 3e d5 b9 6f 8e 17 2e 0b 57 8a c5 a1 |&z..>..o....W...| ad 77 93 2e 15 5e 63 6e 5d 85 de f9 b1 d8 e4 c8 |.w...^cn].......| 00 a8 70 aa c9 7b 34 0b 2e 3b a6 40 1f c0 33 c0 |..p..{4..;.@..3.| 75 3c 08 47 09 29 8e 2f |u<.G.)./ | |
61456 | 0 | ec 30 f0 70 f1 c2 11 ea db 33 c1 02 43 a7 cb 91 |.0.p.....3..C...| 76 9e 07 19 d8 2c 0b 11 30 28 61 5a 27 f5 26 f5 |v....,..0(aZ'.&.| f6 11 6b da e0 75 1a 6b c3 07 c4 75 dc 9c 35 0d |..k..u.k...u..5.| 98 d6 15 ce ee 9c 54 b8 8a 23 f5 7d 7a 2b 0a e0 |......T..#.}z+..| 4b dc 15 dc 07 28 33 d5 82 fc ae cb 84 0f d9 d1 |K....(3.........| 5d 9a 30 f9 a2 05 fc 12 57 9a 4f f8 7d 5c 64 88 |].0.....W.O.}\d.| 6f 19 b1 0f 83 e5 3f 04 72 cc 59 55 86 27 f5 47 |o.....?.r.YU.'.G| 9e 35 21 02 a2 4f ab 3a 17 25 e8 ca 56 60 bf 2f |.5!..O.:.%..V`./| c6 bb 97 d5 61 2c 9d 8f 2a 87 57 8e 7f 1d 48 28 |....a,..*.W...H(| 13 25 71 f2 27 05 68 45 e6 64 f7 21 f2 98 30 8a |.%q.'.hE.d.!..0.| 7c 81 fe ce a1 13 ce 32 cb b8 b9 73 95 05 b5 d7 ||......2...s....| ae b3 66 a6 27 45 73 9b be e0 4f 19 31 3d c1 53 |..f.'Es...O.1=.S| ce 74 73 9d e5 b8 f6 8c 5a 8c da 3e 52 c6 e6 83 |.ts.....Z..>R...| 2e de e4 28 58 8d f5 76 7c b2 fc b1 61 55 79 7f |...(X..v|...aUy.| d9 ec d0 06 da 46 3c cb f5 e5 f0 f1 50 87 09 86 |.....F<.....P...| 11 69 92 6f c3 ea e0 15 a5 0d 08 9d e0 2d e2 32 |.i.o.........-.2| bd a4 4e f5 3e 70 68 d5 dd 37 63 38 19 af 76 39 |..N.>ph..7c8..v9| 0b b5 de 47 c3 5f 13 e7 15 eb 8f bb 7e 18 00 82 |...G._......~...| 07 1e fd 3f ef 1e fd 2c 92 3b 85 ff 6c 3d 20 03 |...?...,.;..l= .| 25 79 c2 5e 63 b5 2b 26 a0 7c 28 3c 26 df 6f 73 |%y.^c.+&.|(<&.os| c2 f2 8b ef e8 a1 ba 46 21 3f 82 fe 31 7e c8 2c |.......F!?..1~.,| 5d 01 70 92 ff e2 56 ff 42 b3 4e 55 49 5d 11 45 |].p...V.B.NUI].E| 66 7a 4f 3b cf e9 26 d6 83 73 aa 35 35 47 36 28 |fzO;..&..s.55G6(| 75 6e b2 01 69 50 d4 9b 6a d2 96 0e d8 b1 d3 82 |un..iP..j.......| c6 a0 42 57 18 67 10 03 fc 8d c7 72 d4 be 2a 53 |..BW.g.....r..*S| 2a 87 ca 11 1a be ee 0c 20 81 24 20 6c 27 d0 09 |*....... .$ l'..| 64 b3 31 49 f8 c5 89 48 96 bf bc d5 ba 2d 22 bc |d.1I...H.....-".| 52 6f c0 3d 96 4f b9 94 ee 65 55 89 61 e9 55 a1 |Ro.=.O...eU.a.U.| 0f 6a 47 f9 6f 7b 3a a4 b7 d1 1b 57 d6 bc 5c 0a |.jG.o{:....W..\.| d6 99 2f 12 db ba 59 ec 96 4f a3 cf 15 9b 6b f5 |../...Y..O....k.| 44 34 76 36 1a 5c 34 6b 14 4e 6f be 2c d0 85 e6 |D4v6.\4k.No.,...| f2 8a 9a 9b 08 9d 70 cb dc c8 d0 7f 84 4a a4 33 |......p......J.3| e6 59 41 70 53 90 12 e1 c1 02 8d 08 7f 9e 3c 96 |.YApS.........<.| 77 98 c5 7a 13 68 3f fe 16 0f 54 ae 2d b5 01 99 |w..z.h?...T.-...| 0c d7 bb 1c 7f e6 a5 32 88 5c cc ab ec 5a bb 80 |.......2.\...Z..| c0 95 c9 62 0f 38 30 cd d8 e8 7a ad 39 30 1d c1 |...b.80...z.90..| 31 e8 12 cf da c1 2c f4 40 26 5d 81 31 d4 13 2a |1.....,.@&].1..*| e0 99 b6 82 66 e1 28 af e9 7c 89 47 b8 ae b9 9e |....f.(..|.G....| 06 dc be 39 4e 97 07 d1 6d 18 7f 90 5d 7b ae 3a |...9N...m...]{.:| f4 c2 e4 04 ac e3 a7 69 e1 55 37 34 4a 1f 8a b7 |.......i.U74J...| 71 be 52 f3 a1 e1 1d 62 a4 61 2f cc 17 d3 19 3e |q.R....b.a/....>| 5a 24 c5 2e aa 62 8b 64 dd 51 59 24 ac 80 a5 37 |Z$...b.d.QY$...7| f6 49 30 6c 3b ad 22 3b ee c8 2e 6a 93 b3 be 38 |.I0l;.";...j...8| 76 d5 2f e9 0e 9c dd 8e ee fb b4 91 c7 67 6e 53 |v./..........gnS| 6d f5 18 9b 4b bb c7 28 b6 ef 1d 47 4d 8d b6 db |m...K..(...GM...| 2d 95 3c 5a 4c 59 dc 7d c9 a4 6c 95 4a 0e f9 e9 |-. |
61472 | 0 | e1 24 af 6e d9 ed 71 07 31 69 26 c5 25 a6 55 26 |.$.n..q.1i&.%.U&| 37 17 88 57 ce 18 6b f9 fd 95 c4 5b 44 38 d0 42 |7..W..k....[D8.B| 56 9d 55 cb 19 90 ae a6 26 6f b0 f0 b8 59 65 7f |V.U.....&o...Ye.| b4 0f 36 18 df 6b f8 db 07 64 b9 a7 4e de df a2 |..6..k...d..N...| b9 56 e7 25 97 4e ad 5b c6 3a d5 cd 52 b6 72 72 |.V.%.N.[.:..R.rr| d9 01 99 db d4 5a bd 47 b6 d0 27 12 62 3a 05 ed |.....Z.G..'.b:..| 95 cb 07 a6 2a 5c eb 30 07 6a e6 0c 99 ca 29 79 |....*\.0.j....)y| 7a b8 32 34 eb 15 f1 6f b1 1e ab 5d 23 15 e0 09 |z.24...o...]#...| fb e4 5b 34 96 cc 0a 35 82 9b c8 3b ae 4b dc e0 |..[4...5...;.K..| ff dd 6e ed 48 ed be 9f 9d 5b c6 45 f1 dc 75 b7 |..n.H....[.E..u.| da 7e 56 2f a0 7c 7b 54 cc fd ab 95 4d a6 bb 95 |.~V/.|{T....M...| d9 07 91 38 82 7d 61 b1 19 23 5d 31 71 d3 64 d5 |...8.}a..#]1q.d.| cb 3d 58 b2 7f ab d4 cb f8 d2 de 2d 99 cf 5e ed |.=X........-..^.| 15 61 72 1a 8c f4 d5 46 6f a2 20 aa f7 ec 0a 11 |.ar....Fo. .....| 1f 52 e4 2b 87 d5 eb fa af ce 7b a2 a8 77 97 9f |.R.+......{..w..| 39 e7 1f c9 60 ff 1a db da ab e5 af c8 76 79 c7 |9...`........vy.| 65 78 f9 97 90 b8 b7 6b 6e 42 56 e5 79 2f 67 92 |ex.....knBV.y/g.| 25 f0 8b f2 91 6e ff 10 a5 6d bd 20 72 89 8b 3f |%....n...m. r..?| 81 32 f2 a5 c9 fe d8 a7 4d cf 2c 62 db 3d ce 88 |.2......M.,b.=..| b4 aa 7b dc e1 94 b7 93 c3 f8 3d 57 6c ef d0 03 |..{.......=Wl...| 2a 07 54 15 8d 2a 8a 96 54 8c b8 80 90 f0 e1 61 |*.T..*..T......a| f9 61 2b 9a 40 66 81 dd 43 f5 62 ff ec 30 3f ec |.a+.@f..C.b..0?.| 45 50 6a 1d 19 12 84 66 47 a0 bb 1d 0b f6 ab 4d |EPj....fG......M| b0 ec ca e8 51 a4 3d 2d 1a ee 4f 88 91 9d 17 f6 |....Q.=-..O.....| 2e b4 99 53 a3 c1 ca e0 f2 cb c4 72 53 0e 35 ab |...S.......rS.5.| 16 d5 cb 5f 08 f1 1f 11 21 d6 6a 7a 34 a9 2b 54 |..._....!.jz4.+T| b8 10 bc d6 47 5b 12 43 fc a1 29 5f 1b 30 28 4b |....G[.C..)_.0(K| 58 ce c5 3f 8b d3 cb 9a c9 e9 b7 9c 01 2c 06 10 |X..?.........,..| d6 00 a7 ed 88 8d b0 ec 95 8f 48 33 4b 72 72 b2 |..........H3Krr.| 33 62 66 56 43 35 70 aa 5c 21 61 c2 c9 12 cc 29 |3bfVC5p.\!a....)| 4e ae 8d 19 ba c1 e0 1a 2b d3 a4 4a 64 2f 81 2b |N.......+..Jd/.+| c9 dc d9 ab cd c8 fd fe 3f 02 e6 78 f7 da 11 1a |........?..x....| cf c7 51 fb b3 c0 5f b9 76 d7 65 38 c9 23 64 98 |..Q..._.v.e8.#d.| bf 14 e8 52 b8 0b 24 a9 ca c1 93 38 0c 05 97 d2 |...R..$....8....| bb 48 c8 9d 43 23 6c 7e b2 4d 5d af 11 80 33 65 |.H..C#l~.M]...3e| 9b 2d db d2 99 b2 7b 8b 4d a4 cc cf 80 fd 4e 1e |.-....{.M.....N.| d7 bb 4d 74 d1 4c 47 5e 2d 79 4f 91 fc 3e 62 df |..Mt.LG^-yO..>b.| 37 69 d4 e4 d6 43 3f da 2c 9c 3c d0 e5 12 64 cc |7i...C?.,.<...d.| ab 2c c5 cb 78 d3 b6 8f 8b 7c 9c 9a 2f 72 b3 4a |.,..x....|../r.J| 8d 8c 09 98 a9 0e aa b9 ff d6 29 c3 29 4e 1c 19 |..........).)N..| 76 ad 60 e0 75 7b 92 7b 75 d5 ee 5e 72 07 d3 e7 |v.`.u{.{u..^r...| ba e3 8a ea e9 60 3e 18 be 98 0f 0c 24 78 fb fd |.....`>.....$x..| a2 38 ab 4c 3d b2 d8 46 64 4b f7 ac d2 3b b1 a0 |.8.L=..FdK...;..| ba 56 d7 f1 f4 77 76 b4 e4 f7 be bf c7 fa 88 6d |.V...wv........m| 9c c6 94 b1 b2 fa 31 ca 4f d6 c6 47 95 75 c2 c5 |......1.O..G.u..| fc 67 75 c2 24 45 26 21 26 23 b1 19 27 34 d7 c6 |.gu.$E&!..'4..| 72 45 17 b4 af 60 73 b6 f4 90 54 a5 12 2f af 9f |rE...`s...T../..| 4c 93 77 42 7e ad 1e a3 e1 6f 40 1f 4a 33 b7 f1 |L.wB~....o@.J3..| 30 95 b2 d7 1d cb 94 f9 4a 71 17 9f 4d 42 f2 92 |0.......Jq..MB..| 6c 4c 3d 18 5c 15 04 a6 ae 18 1c 69 91 35 a7 d1 |lL=.\......i.5..| 2a 44 b1 6d c5 9f e2 5f 2e c0 2e 47 42 71 22 ad |*D.m..._...GBq".| 25 7c 52 6b 43 72 2b 42 b7 00 12 4f 30 20 a5 9d |%|RkCr+B...O0 ..| 4a 09 1f bc c2 99 e4 24 13 78 fb 13 07 da a9 2f |J......$.x...../| e9 30 6b d5 db d0 30 df cf 51 f6 1f 8a 5e 44 18 |.0k...0..Q...^D.| b5 79 e7 d7 a5 87 06 74 8c b9 49 cd f9 ca 8e 47 |.y.....t..I....G| 11 2b ce b5 26 ea 9b 24 42 da 32 df 0a 6a 75 b8 |.+..&..$B.2..ju.| 1a 50 b5 6b 04 f0 35 97 b9 ea 47 12 9a 8b d6 e0 |.P.k..5...G.....| 2d 29 4b 25 c1 d4 8c be a8 35 89 a2 fe a0 7b 12 |-)K%.....5....{.| f7 b8 a9 69 84 37 6d 34 10 73 16 f0 |...i.7m4.s.. | |
61488 | 0 | ce 0a 7c 05 f7 08 d0 2f 23 18 05 e8 06 83 0f 37 |..|..../#......7| 03 45 83 4a 8a 67 72 cf cd ff 7f 8b 38 47 f6 31 |.E.J.gr.....8G.1| c4 01 ae 4a ad 4a e8 66 1b 18 c2 55 ac 63 6f fa |...J.J.f...U.co.| 74 93 c2 6d 91 39 0a 8b c1 5c 4b b3 50 46 5a 4a |t..m.9...\K.PFZJ| c2 0d 9a 8a 36 f9 2b 18 36 6a 48 ea 92 4f e0 d9 |....6.+.6jH..O..| a9 a3 ab 49 1a 06 a6 51 4a 59 fe ca af 0a 8c f3 |...I...QJY......| de 9c 86 84 34 c7 93 5a 4b 76 1c 06 44 b0 2e 5a |....4..ZKv..D..Z| d1 6d bf 54 37 33 f6 00 e6 76 2b 0f 7f 7b ab 54 |.m.T73...v+..{.T| aa 74 99 80 16 d1 f6 c0 7a 49 87 36 6b e8 3a 19 |.t......zI.6k.:.| c2 e7 59 c2 2b c6 35 5c b7 c5 31 41 57 92 2d 9b |..Y.+.5\..1AW.-.| f8 ca a5 c0 9c 40 ea 70 3e fb 03 42 ca cb 0d 15 |.....@.p>..B....| 74 cf d9 39 ef fc f0 69 4c 8f e6 65 86 92 2b f0 |t..9...iL..e..+.| 03 08 56 63 47 c0 7c f1 61 08 79 5f 14 51 55 01 |..VcG.|.a.y_.QU.| 6d 40 b9 8b 6e 95 31 3d 20 c8 5b ef e9 45 f7 92 |m@..n.1= .[..E..| 84 83 e8 14 73 6e 48 d6 28 fa 55 b4 3e 1b 8d 8e |....snH.(.U.>...| 14 45 da 61 0c 4b 0b 9d d9 ad 1b 24 9b 6c a5 34 |.E.a.K.....$.l.4| 0c c3 88 35 b5 51 14 c3 68 35 d2 a8 64 9d 86 97 |...5.Q..h5..d...| 81 57 d9 8b b2 53 55 0e 54 97 47 8f 93 31 29 b2 |.W...SU.T.G..1).| ab 2c 40 ed b9 c3 59 a0 5b 5c 89 3a 3a 5c 66 02 |.,@...Y.[\.::\f.| 46 8e 84 c1 4b 64 7b 07 18 4e d0 c3 3f bc 0e 9f |F...Kd{..N..?...| 2a 43 14 87 5b dd 8b f8 5c 6b e8 66 48 a2 94 3a |*C..[...\k.fH..:| d1 33 4c d9 14 b1 e2 1c 72 a6 b8 fd 29 b2 a9 98 |.3L.....r...)...| 58 51 62 aa 41 fd 91 3a c3 9c ec 2d cb 42 1e 89 |XQb.A..:...-.B..| 73 12 ce 63 a5 36 91 b4 aa d9 62 aa 59 85 76 bd |s..c.6....b.Y.v.| b0 ee 6b 02 f2 0e 36 16 be 9c 00 19 5f 3e 3d 85 |..k...6....._>=.| b2 c7 c3 82 f4 e4 86 19 e5 b0 70 43 30 93 75 c6 |..........pC0.u.| f5 ef 89 5e 77 b0 15 73 3d a0 ae 87 1b 4a c6 36 |...^w..s=....J.6| a0 ac 43 f1 4b 64 83 05 ec 32 85 41 0e ca b9 f9 |..C.Kd...2.A....| 73 5a 80 72 ea a3 24 bc 1d 20 e3 eb fe c2 fc c5 |sZ.r..$.. ......| 8b 5a b1 50 3e c8 96 b8 4d f1 97 28 77 71 95 dd |.Z.P>...M..(wq..| 14 15 ae 68 9e c6 44 b0 b7 0a 6a 40 de 4e 50 61 |...h..D...j@.NPa| ed f0 c9 99 18 f7 06 f5 44 d1 86 2d c2 ac 03 a0 |........D..-....| 50 00 8a 72 a7 93 b9 61 c6 0f 71 0d 28 8b 0a 5f |P..r...a..q.(.._| 62 4c 12 d4 c0 53 90 c8 5d 8f 4e 12 9f 62 2c a0 |bL...S..].N..b,.| 39 d5 04 74 e9 29 00 7b 26 70 73 aa 20 4f 5e 0f |9..t.).{&ps. O^.| 64 54 1c ea 90 0c 7b 6e 33 d8 b4 02 5a e3 8c 84 |dT....{n3...Z...| 52 75 b6 25 f6 63 81 f1 54 9b 61 15 17 3a 25 f6 |Ru.%.c..T.a..:%.| 63 c1 e0 08 ac 8b 6f 4b ec c8 03 c0 11 60 b5 75 |c.....oK.....`.u| 2f b3 64 07 80 22 d0 ad c9 2f b3 65 07 c5 5b 08 |/.d..".../.e..[.| 75 4c 05 ab 9e a0 fd 90 2e d2 09 6a cc fc 45 e0 |uL.........j..E.| ef 89 7d 9b 30 3e 2b 13 08 cd 17 32 75 12 40 d7 |..}.0>+....2u.@.| 5c da 07 ca 6e 0b 8b 83 9c 47 53 25 b0 9d c8 69 |\...n....GS%...i| 6a 5e fb 88 4e 5a 90 a1 44 4f 12 55 41 2e 09 e9 |j^..NZ..DO.UA...| 18 da 2b 49 e6 62 68 11 c4 93 fa 95 68 bd b4 06 |..+I.bh.....h...| ce 3e 51 bc 45 ce 6d 2f 13 42 5e 8c 99 84 64 a9 |.>Q.E.m/.B^...d.| 72 13 48 3a 80 00 aa 2e 6d 19 8c 64 4d 02 8c 36 |r.H:....m..dM..6| 7e f5 c9 15 10 24 72 5a a5 ea 19 44 95 54 63 88 |~....$rZ...D.Tc.| 6b ba 54 80 c6 c4 73 cf 30 68 ed 65 92 09 f1 cf |k.T...s.0h.e....| 5a 63 8a 72 3c c1 4c 01 e4 a6 b5 b5 b6 e3 fe 78 |Zc.r<.L........x| a3 0c 60 0b 32 00 8a 7a b5 d2 4f d3 81 9e c1 07 |..`.2..z..O.....| 49 36 36 a3 b3 51 9a 8a 3d 1a d2 d3 43 85 d0 93 |I66..Q..=...C...| 35 8f 03 43 cc dc 9f 9c 5e 79 ab ef 5e 3d 97 70 |5..C....^y..^=.p| 5f 8f 41 c8 6f ac 65 9d e9 67 44 d6 be cc e8 bf |_.A.o.e..gD.....| e7 66 85 f3 b2 8a f7 48 1d 17 2e 29 2f 3c 86 b5 |.f.....H...)/<..| e3 4d ab f4 c8 9c ef be e4 11 7a 25 0c 0c 9f a4 |.M........z%....| 94 21 85 08 6f 26 7b 0b 2a 45 61 5a d5 9f 1f 2c |.!..o&{.*EaZ...,| 59 9b 04 ad ca 5b 0e 23 28 87 b8 cc 31 9c d8 b0 |Y....[.#(...1...| e1 8b 20 85 69 4e 43 52 e7 45 0e 5a b9 f2 a5 ce |.. .iNCR.E.Z....| ee 20 75 41 81 18 d3 19 40 dc 5b cb 1f 29 ab 8d |. uA....@.[..)..| 4a 70 d6 60 66 69 12 46 2c d5 e7 33 26 9f de d4 |Jp.`fi.F,..3&...| d6 53 cb 6f b8 73 9d 79 d2 ed a7 20 75 c6 7c 98 |.S.o.s.y... u.|.| 5f cb fe c2 c9 34 8f 66 5b 6d 45 fa a5 c0 d9 1e |_....4.f[mE.....| f2 14 |.. | |
61504 | 0 | 3e 97 80 98 ec f0 56 af c1 96 37 34 dd a7 c7 b3 |>.....V...74....| 7c b8 f6 aa e1 4a b4 80 1c 00 b4 fc 0d 8a 46 7e ||....J........F~| 7a fd b1 71 b5 74 4b 66 5a f8 52 15 56 9a 1b e0 |z..q.tKfZ.R.V...| d6 61 54 9c 23 73 62 2e ba dc 68 6e ee c1 6e 0d |.aT.#sb...hn..n.| e0 f2 d7 a6 a2 d9 14 1a 1c f7 5f 63 6d 71 07 02 |.........._cmq..| 64 eb 47 56 0e 78 af b9 c3 fe 38 38 d7 db b4 46 |d.GV.x....88...F| e8 59 16 b1 d6 91 2c e7 15 f6 08 56 44 b8 ea 5f |.Y....,....VD.._| 19 89 7f ce 3d 79 21 55 f6 ce 58 f0 33 b8 d2 2c |....=y!U..X.3..,| 8d ad b4 f1 2b a4 85 ce 3e 1b 0b 23 65 1a fb 2a |....+...>..#e..*| af 6e b5 d0 d4 a4 36 3a 65 10 2c 3c 6d 16 78 fb |.n....6:e., |
61520 | 0 | a9 7b c6 3a 50 aa c7 01 b2 69 71 d0 fd b4 28 74 |.{.:P....iq...(t| 44 d2 cf 70 02 79 a9 e9 25 dc 58 42 da a1 fb b4 |D..p.y..%.XB....| 29 c4 0e b4 68 ea c4 1a 41 17 06 ef ae 86 ac 1b |)...h...A.......| a4 47 07 79 2f 30 50 95 32 b1 95 8b c5 dd 06 02 |.G.y/0P.2.......| 62 d7 75 54 f4 8d 19 9a 3a e9 da 29 e2 e1 4b d9 |b.uT....:..)..K.| c7 b9 4b 92 98 ea 92 9e a9 2a 8d bf d4 c6 fa e8 |..K......*......| aa cd e2 cf 06 ee df 50 f3 7e 6e a2 e5 52 aa 55 |.......P.~n..R.U| 6a b5 36 dc 6e db e6 f5 71 33 b6 51 9c e2 fb 31 |j.6.n...q3.Q...1| d5 ac c6 dc 2a 54 f7 fc e2 93 94 fe 51 4b c7 73 |....*T......QK.s| dd 2f cf a7 37 6f 53 b4 39 2f bd 21 e6 16 3c 95 |./..7oS.9/.!..<.| fd da 5d 73 c9 2b 80 6e eb 46 05 64 1b bf 76 47 |..]s.+.n.F.d..vG| db f8 dc 78 58 9c 24 4d da e7 85 a3 30 52 df 13 |...xX.$M....0R..| 11 c4 c3 c3 67 cd 60 dc e8 d2 e1 b7 3b 43 f9 de |....g.`.....;C..| 6c 51 80 31 08 e7 0f 1f 9f 2b 9b 63 e6 32 91 79 |lQ.1.....+.c.2.y| 76 85 c3 75 84 3d 09 71 f4 37 c7 ba 3a 43 e2 0e |v..u.=.q.7..:C..| 5b 9e 6e 16 38 cf 5b 09 56 be da 32 61 03 b4 5b |[.n.8.[.V..2a..[| f2 9e 28 b4 bd f5 4a 54 b9 aa 34 dd 15 ed 28 25 |..(...JT..4...(%| fe 89 a0 70 0d 5f 3a 2d 9f 49 61 1b 56 19 9b 86 |...p._:-.Ia.V...| e2 b6 5c fe 94 1e a9 48 e3 26 94 d9 c4 fb 03 f7 |..\....H.&......| 6a 18 b1 95 6a 46 c4 94 d0 7c 89 f0 13 6d a1 6c |j...jF...|...m.l| 70 33 88 c6 30 d0 a4 1c 9a 4e 28 24 9b 40 99 ba |p3..0....N($.@..| b0 95 e8 23 0f ae b8 53 e3 78 2b e3 b7 fd 8d 24 |...#...S.x+....$| f9 ac 0f 8a 89 3a 87 d0 c0 05 cf fc 0c 6d 82 71 |.....:.......m.q| 26 0b 38 9e b1 4c e0 7b 1a 5c 2f 48 07 cc 5f b2 |&.8..L.{.\/H.._.| 41 1b a5 d6 85 8f da d0 71 3a e0 0d 52 fd 92 ac |A.......q:..R...| d9 94 d0 0d 44 08 69 5e f0 12 5a b4 a3 8d e0 a1 |....D.i^..Z.....| 70 9a b6 43 51 f6 37 22 0a 54 a4 f5 48 e8 a2 bc |p..CQ.7".T..H...| 79 90 70 2b 87 c3 5d 42 9f a6 ea a5 8f 48 6f 97 |y.p+..]B.....Ho.| b5 5f 67 91 25 77 fd 54 d4 a0 6c 1c a7 e2 0e 01 |._g.%w.T..l.....| 28 cd 6f 5a 85 1f 62 32 62 92 a6 e9 7b c4 0f 90 |(.oZ..b2b...{...| d5 6c 58 87 cf 2c 76 84 f3 3f df 62 3b ea 34 f6 |.lX..,v..?.b;.4.| f7 0c 71 82 65 f6 bc bf 3c cf aa ef 98 d9 44 da |..q.e...<.....D.| 8a 6a 3b e2 0a 23 20 e7 b6 6e 6c 19 45 69 2f b7 |.j;..# ..nl.Ei/.| d5 14 29 06 d1 c2 e1 3b 76 6f ea 2b ca 8f b0 83 |..)....;vo.+....| 3b 08 2c 5f cd 3b 14 a2 b3 38 ea 92 6d 47 14 ee |;.,_.;...8..mG..| ea bf 05 f1 54 ae 71 05 39 f5 ad 1d 3f 48 1a a5 |....T.q.9...?H..| 22 51 a2 c6 4d ef 09 74 f4 2a 3c 28 69 01 57 46 |"Q..M..t.*<(i.WF| a2 db da 15 15 d1 ab 7a 05 bd 40 2a da be fc ab |.......z..@*....| bf 51 b5 86 7f 05 7a e4 0b 7d d0 db 56 fd 90 33 |.Q....z..}..V..3| 4d 2a 10 79 48 0c 2e 23 02 8f ee 3e a5 b9 67 e5 |M*.yH..#...>..g.| 1a da 91 8e 75 61 c5 b8 3a 2f e1 a9 3b 12 fe c1 |....ua..:/..;...| 4d 28 e8 c6 bf 4a 84 1e a1 1f 22 8b 51 f7 3b 55 |M(...J....".Q.;U| dd d5 62 fe 28 10 a3 f1 5b 60 36 49 7a fa 2b 39 |..b.(...[`6Iz.+9| 93 28 de 07 49 55 a4 c7 4a 0e 17 80 24 58 d8 86 |.(..IU..J...$X..| 5e e8 ef 30 95 c2 32 69 45 b0 72 d8 d2 15 c9 1c |^..0..2iE.r.....| eb d2 e8 5d 58 e8 7b bd 01 6e |...]X.{..n | |
61536 | 0 | 98 47 b4 58 a3 10 76 e3 13 13 f0 a9 31 cd fa 86 |.G.X..v.....1...| f6 2d 09 0a 92 7f da 20 bb 60 6b 60 b4 31 9d 7b |.-..... .`k`.1.{| 37 e9 b4 12 37 82 9d 15 10 d9 8c 32 68 94 24 c5 |7...7......2h.$.| 97 29 c9 73 09 33 d1 b5 76 25 7a 98 9d 03 1a 75 |.).s.3..v%z....u| 50 ae b4 36 1d 4e a8 82 0a 0f 6e d7 03 42 e5 68 |P..6.N....n..B.h| 09 85 be 9c 2b 6b ef e1 08 06 28 99 18 31 6a 34 |....+k....(..1j4| f2 f2 e8 eb 38 e0 df ea 5e 0b 42 1c 6e 3e f1 ae |....8...^.B.n>..| 98 4f 95 ee 6b 3c 2f 01 13 c0 51 98 5e af a7 96 |.O..k..u..V...=.B..p| 91 35 ca 66 d5 09 f8 24 78 20 c2 0a 45 15 19 c0 |.5.f...$x ..E...| bb 05 5e 34 22 26 b0 fd 31 fe 39 8b 63 1f fa e6 |..^4"&..1.9.c...| 4f 58 8f 22 c0 7f 98 14 a4 b5 72 bf 0c 6b 2e 3a |OX."......r..k.:| f5 1c c2 a5 e9 73 0c 76 cc fa f9 ad ac 86 7c f0 |.....s.v......|.| 65 48 e5 88 05 e6 55 81 bd 02 03 b8 13 a4 8a 25 |eH....U........%| 52 9b 1a 2e f0 6f 92 b0 c9 98 a5 d0 5e f8 e0 6d |R....o......^..m| a7 78 9b a9 6f 4f 4c 78 30 7b a1 ff fe 79 22 15 |.x..oOLx0{...y".| 5a 60 fd 75 43 1d c5 e4 a1 99 81 02 20 80 f0 40 |Z`.uC....... ..@| 80 20 c8 08 32 85 ee ff fe 0f c3 00 00 00 00 00 |. ..2...........| 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| * 90 60 e8 72 05 00 00 eb 33 87 db 90 00 b0 4d 00 |.`.r....3.....M.| ac b0 4d 00 ac 68 4d 00 10 c0 4d 00 00 00 00 00 |..M..hM...M.....| 00 00 00 00 00 90 10 00 00 00 40 00 00 d0 0d 00 |..........@.....| 00 00 00 00 00 00 00 00 00 d0 0f 00 bb 30 39 44 |.............09D| 00 03 dd 2b 9d 54 39 44 00 83 bd 8c 47 44 00 00 |...+.T9D....GD..| 89 9d 8c 47 44 00 0f 85 81 04 00 00 8d 85 94 47 |...GD..........G| 44 00 50 ff 95 a0 48 44 00 89 85 90 47 44 00 8b |D.P...HD....GD..| f8 8d 9d a1 47 44 00 53 50 ff 95 9c 48 44 00 89 |....GD.SP...HD..| 85 e9 39 44 00 8d 9d ae 47 44 00 53 57 ff 95 9c |..9D....GD.SW...| 48 44 00 89 85 ed 39 44 00 8d 85 fe 3a 44 00 ff |HD....9D....:D..| e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 00 00 00 00 00 00 00 00 00 00 |.......... | |
module_name | hint | ord | function_name |
---|---|---|---|
kernel32.dll | GetProcAddress | ||
kernel32.dll | GetModuleHandleA | ||
kernel32.dll | LoadLibraryA | ||
advapi32.dll | RegCloseKey | ||
mpr.dll | WNetGetConnectionA | ||
winspool.drv | ClosePrinter | ||
comctl32.dll | ImageList_Add | ||
comdlg32.dll | GetOpenFileNameA | ||
gdi32.dll | BitBlt | ||
shell32.dll | SHFileOperationA | ||
user32.dll | ActivateKeyboardLayout | ||
ole32.dll | CoCreateInstance | ||
oleaut32.dll | SysAllocStringLen |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0xadc00 | _DebugHook | |
2 | 0xd64e0 | _ExceptionClass | |
3 | 0x1046 | __GetExceptDLLinfo | |
4 | 0x9424b | ___CPPdebugHook |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0xe6ccc
[?] can't find file_offset of VA 0xe6ed0
[?] can't find file_offset of VA 0xe6f98
[?] can't find file_offset of VA 0xe7184
[?] can't find file_offset of VA 0xe7400
[?] can't find file_offset of VA 0xe77ac
[?] can't find file_offset of VA 0xe782c
[?] can't find file_offset of VA 0xe7b98
[?] can't find file_offset of VA 0xe7f74
[?] can't find file_offset of VA 0xe8034
[?] can't find file_offset of VA 0xe8328
[?] can't find file_offset of VA 0xe8634
[?] can't find file_offset of VA 0xe8904
[?] can't find file_offset of VA 0xe896c
[?] can't find file_offset of VA 0xe8a20
[!] string size(65634) > stringtable size(936). truncated to 934
[!] cannot convert "\x8C\x04s2L\xE9\t\xF6\x13r\x01TJ\xF0\xD4\xBC"... to UTF-16
[!] string size(25048) > stringtable size(840). truncated to 838
[!] cannot convert "\xF0p\xF1\xC2\x11\xEA\xDB3\xC1\x02C\xA7\xCB\x91v\x9E"... to UTF-16
[!] string size(18882) > stringtable size(940). truncated to 938
[!] cannot convert "\xAFn\xD9\xEDq\a1i&\xC5%\xA6U&7\x17"... to UTF-16
[!] string size(5532) > stringtable size(994). truncated to 992
[!] cannot convert "|\x05\xF7\b\xD0/#\x18\x05\xE8\x06\x83\x0F7\x03E"... to UTF-16
[!] string size(77436) > stringtable size(564). truncated to 562
[!] cannot convert "\x80\x98\xEC\xF0V\xAF\xC1\x9674\xDD\xA7\xC7\xB3|\xB8"... to UTF-16
[!] string size(63314) > stringtable size(730). truncated to 728
[!] cannot convert "\xC6:P\xAA\xC7\x01\xB2iq\xD0\xFD\xB4(tD\xD2"... to UTF-16
[!] string size(36656) > stringtable size(762). truncated to 760
[!] cannot convert "\xB4X\xA3\x10v\xE3\x13\x13\xF0\xA91\xCD\xFA\x86\xF6-"... to UTF-16
[?] can't find file_offset of VA 0xe8ad0
[?] can't find file_offset of VA 0xf2a60
[?] can't find file_offset of VA 0xf3fb0
[?] can't find file_offset of VA 0xf557c
[?] can't find file_offset of VA 0xf5af0
[?] can't find file_offset of VA 0xf7bc4
[?] can't find file_offset of VA 0xf9a2c
[?] can't find file_offset of VA 0xfab64
[?] can't find file_offset of VA 0xfc9e0
[?] can't find file_offset of VA 0xfc9f4
[?] can't find file_offset of VA 0xfca08
[?] can't find file_offset of VA 0xfca1c
[?] can't find file_offset of VA 0xfca30
[?] can't find file_offset of VA 0xfca44
[?] can't find file_offset of VA 0xfca58
[?] can't find file_offset of VA 0xd68ac
[?] can't find file_offset of VA 0x0