resource.dat

info
MZ
PE
imports
exports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	resource.dat
size	3170551 (0x3060f7)
md5	534f42dfd3aa8fa9a355fef87593a6f7

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
150	20413	1
149	30729	22
131	30729	125
132	30729	43
95	4035	4
93	4035	15
1	0	203
138	30729	15
146	30729	1
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x558b2a94
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2122
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0xea00
SizeOfInitializedData	0x8200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x3501
BaseOfCode	0x1000
BaseOfData	0x10000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x1a000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xe997	0xea00	R-X CODE
.rdata	0x10000	0x2ab0	0x2c00	R-- IDATA
.data	0x13000	0x3dbc	0x1600	RW- IDATA
.rsrc	0x17000	0x10	0x200	R-- IDATA
.reloc	0x18000	0x14ea	0x1600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x12a20	0x90
IMPORT	0x12024	0x78
RESOURCE	0x17000	0x10
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x18000	0xb78
DEBUG	0x10210	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x11bc0	0x40
Bound_IAT	0	0
IAT	0x10000	0x1b8
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
KERNEL32.dll	132	DeleteFileW
KERNEL32.dll	326	GetCurrentThreadId
KERNEL32.dll	854	Sleep
KERNEL32.dll	416	GetProcAddress
KERNEL32.dll	594	LoadLibraryA
KERNEL32.dll	323	GetCurrentProcessId
KERNEL32.dll	97	CreateMutexW
KERNEL32.dll	912	WaitForSingleObject
KERNEL32.dll	706	ReleaseMutex
KERNEL32.dll	238	FlushFileBuffers
KERNEL32.dll	795	SetFilePointer
KERNEL32.dll	629	MultiByteToWideChar
KERNEL32.dll	916	WideCharToMultiByte
KERNEL32.dll	808	SetLastError
KERNEL32.dll	322	GetCurrentProcess
KERNEL32.dll	129	DeleteCriticalSection
KERNEL32.dll	85	CreateFileMappingW
KERNEL32.dll	139	DisableThreadLibraryCalls
KERNEL32.dll	152	EnterCriticalSection
KERNEL32.dll	369	GetLastError
KERNEL32.dll	593	LeaveCriticalSection
KERNEL32.dll	547	InitializeCriticalSection
KERNEL32.dll	419	GetProcessHeap
KERNEL32.dll	479	GetTickCount
KERNEL32.dll	534	HeapFree
KERNEL32.dll	528	HeapAlloc
KERNEL32.dll	881	UnmapViewOfFile
KERNEL32.dll	616	MapViewOfFile
KERNEL32.dll	52	CloseHandle
KERNEL32.dll	470	GetTempPathW
KERNEL32.dll	522	GlobalUnlock
KERNEL32.dll	383	GetModuleHandleA
KERNEL32.dll	86	CreateFileW
KERNEL32.dll	353	GetFileAttributesW
KERNEL32.dll	932	WriteFile
KERNEL32.dll	515	GlobalLock
KERNEL32.dll	83	CreateFileA
KERNEL32.dll	445	GetStringTypeW
KERNEL32.dll	442	GetStringTypeA
KERNEL32.dll	581	LCMapStringW
KERNEL32.dll	580	LCMapStringA
KERNEL32.dll	931	WriteConsoleW
KERNEL32.dll	309	GetConsoleOutputCP
KERNEL32.dll	921	WriteConsoleA
KERNEL32.dll	823	SetStdHandle
KERNEL32.dll	372	GetLocaleInfoA
KERNEL32.dll	575	IsValidCodePage
KERNEL32.dll	403	GetOEMCP
KERNEL32.dll	253	GetACP
KERNEL32.dll	260	GetCPInfo
KERNEL32.dll	307	GetConsoleMode
KERNEL32.dll	290	GetConsoleCP
KERNEL32.dll	727	RtlUnwind
KERNEL32.dll	548	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	675	QueryPerformanceCounter
KERNEL32.dll	343	GetEnvironmentStringsW
KERNEL32.dll	247	FreeEnvironmentStringsW
KERNEL32.dll	341	GetEnvironmentStrings
KERNEL32.dll	246	FreeEnvironmentStringsA
KERNEL32.dll	439	GetStartupInfoA
KERNEL32.dll	358	GetFileType
KERNEL32.dll	804	SetHandleCount
KERNEL32.dll	458	GetSystemTimeAsFileTime
KERNEL32.dll	272	GetCommandLineA
KERNEL32.dll	899	VirtualFree
KERNEL32.dll	897	VirtualAlloc
KERNEL32.dll	538	HeapReAlloc
KERNEL32.dll	530	HeapCreate
KERNEL32.dll	532	HeapDestroy
KERNEL32.dll	386	GetModuleHandleW
KERNEL32.dll	185	ExitProcess
KERNEL32.dll	441	GetStdHandle
KERNEL32.dll	381	GetModuleFileNameA
KERNEL32.dll	862	TerminateProcess
KERNEL32.dll	878	UnhandledExceptionFilter
KERNEL32.dll	842	SetUnhandledExceptionFilter
KERNEL32.dll	569	IsDebuggerPresent
KERNEL32.dll	869	TlsGetValue
KERNEL32.dll	867	TlsAlloc
KERNEL32.dll	870	TlsSetValue
KERNEL32.dll	868	TlsFree
KERNEL32.dll	556	InterlockedIncrement
KERNEL32.dll	552	InterlockedDecrement
KERNEL32.dll	540	HeapSize
ADVAPI32.dll	504	RegQueryValueExW
ADVAPI32.dll	459	RegCloseKey
ADVAPI32.dll	247	GetLengthSid
ADVAPI32.dll	493	RegOpenKeyExW
ADVAPI32.dll	226	FreeSid
ADVAPI32.dll	16	AddAccessAllowedAce
ADVAPI32.dll	29	AllocateAndInitializeSid
ADVAPI32.dll	307	InitializeAcl
ADVAPI32.dll	570	SetSecurityDescriptorDacl
ADVAPI32.dll	308	InitializeSecurityDescriptor
ADVAPI32.dll	480	RegEnumKeyW
ole32.dll	276	ReleaseStgMedium
SHELL32.dll	178	SHGetFolderPathW
SHELL32.dll	267	ShellExecuteW
SHELL32.dll	35	DragQueryFileW
USER32.dll	378	GetWindowTextW
USER32.dll	94	CreatePopupMenu
USER32.dll	400	InsertMenuW
USER32.dll	433	IsWindowVisible
USER32.dll	576	SendMessageW
USER32.dll	229	FindWindowExW

ord	entry_va	function_name
1	0x2648	StateChanged
2	0x25e1	DllCanUnloadNow
3	0x25e5	DllGetClassObject
4	0x25a9	DllMain

module_name	ezcm.dll
flags	0
timestamp	2015-06-24 22:09:24
version	0.0
ordinal_base	1
nFunctions	4
nNames	4
Names(4)	0x12a58
Functions(4)	0x12a48
NameOrdinals(4)	0x12a68

show previews

offset	size	type	comment
0	83968	DLL	06/24/2015 22:09:24	#
15c1	15	HTM		#
2e600	207360	EXE	06/23/2005 12:39:24	#
7066b	303104	EXE	05/26/2003 17:52:44	#
ba66b	380416	DLL	05/07/2017 07:35:21	#
11746b	212992	DLL	03/04/2015 11:45:34	#
14ccc3	315392	DLL	06/22/2015 16:26:39	#
199cc3	290816	DLL	03/23/2011 21:57:22	#
1e0cc3	66048	DLL	10/13/2011 15:35:15	#
1f0ec3	651776	EXE	05/10/2016 09:41:09	#
2900c3	155648	EXE	11/16/2011 20:31:04	#
2b60c3	327680	EXE	01/23/2018 03:01:56	#
3060c3	52	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 3170551 bytes (3097 KiB)


--
Type = Arj
WARNINGS:
There are data after the end of archive
Offset = 452752
Physical Size = 7643
Tail Size = 2710156
Name = help.arj
Created = 2005-06-23 15:39:30
Modified = 2005-06-23 15:39:30
Host OS = 11

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2005-06-21 22:32:46 .....        18566         6911  arjl.txt
2002-03-28 03:04:08 .....         1147          542  arjs.txt
------------------- ----- ------------ ------------  ------------------------
2005-06-21 22:32:46              19713         7453  2 files

Warnings: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK