filenameInstall Levett Titanium 2.exe
size1211372 (0x127bec)
md5ce77c569cea1bc0820224b6b598ad251
typePE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x50953197
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion2.50
SizeOfCode0x30800
SizeOfInitializedData0x3f200
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0x33000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x74000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

PureBasic 4.x (Neil Hodgson)

Sections

namevavsizeraw sizeflags
.code0x10000x84700x8600R-X CODE
.text0xa0000x2812a0x28200R-X CODE
.rdata0x330000x54ac0x5600R-- IDATA
.data0x390000x3311c0x31e00RW- IDATA
.rsrc0x6d0000x68400x6a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x691e40xf0
RESOURCE0x6d0000x6840
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x697440x470
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#116400
ICON#27440
ICON#32960
ICON#437520
ICON#522160
ICON#613840
ICON#796400
ICON#842640
ICON#911280
GROUP_ICON#11320
MANIFEST#18740
module_namehintordfunction_name
MSVCR100.dll1491memset
MSVCR100.dll1487memcpy
MSVCR100.dll1425fseek
MSVCR100.dll1427ftell
MSVCR100.dll1417fread
MSVCR100.dll1474log10
MSVCR100.dll1299_wfopen
MSVCR100.dll1398fclose
MSVCR100.dll1409fopen
MSVCR100.dll1595wcsncpy
MSVCR100.dll1591wcslen
MSVCR100.dll1585wcscmp
MSVCR100.dll1489memmove
MSVCR100.dll1587wcscpy
MSVCR100.dll1582wcscat
MSVCR100.dll1536strlen
MSVCR100.dll1530strcpy
MSVCR100.dll1525strcat
MSVCR100.dll1486memcmp
MSVCR100.dll1382atoi
MSVCR100.dll1089_stricmp
MSVCR100.dll1475longjmp
MSVCR100.dll1034_setjmp3
MSVCR100.dll1476malloc
MSVCR100.dll1419free
MSVCR100.dll1430fwrite
MSVCR100.dll1400ferror
MSVCR100.dll1522srand
MSVCR100.dll1505rand
MSVCR100.dll1594wcsncmp
MSVCR100.dll1397fabs
MSVCR100.dll1388ceil
MSVCR100.dll1407floor
MSVCR100.dll1250_wcsnicmp
MSVCR100.dll1236_wcsdup
MSVCR100.dll766_isnan
MSVCR100.dll1240_wcsicmp
MSVCR100.dll1514setlocale
MSVCR100.dll1554swscanf
MSVCR100.dll1395exit
MSVCR100.dll399__p__iob
MSVCR100.dll1411fprintf
MSVCR100.dll1519sprintf
MSVCR100.dll1435getenv
MSVCR100.dll1523sscanf
MSVCR100.dll1207_vsnwprintf
MSVCR100.dll1136_time32
MSVCR100.dll799_localtime32
MSVCR100.dll965_mktime32
MSVCR100.dll671_gmtime32
KERNEL32.dll506GetModuleHandleW
KERNEL32.dll676HeapCreate
KERNEL32.dll677HeapDestroy
KERNEL32.dll261ExitProcess
KERNEL32.dll893ReleaseMutex
KERNEL32.dll68CloseHandle
KERNEL32.dll143CreateMutexW
KERNEL32.dll487GetLastError
KERNEL32.dll986SetErrorMode
KERNEL32.dll439GetDiskFreeSpaceExW
KERNEL32.dll627GetUserDefaultLangID
KERNEL32.dll586GetSystemDirectoryW
KERNEL32.dll635GetVersionExW
KERNEL32.dll1156WideCharToMultiByte
KERNEL32.dll333FreeLibrary
KERNEL32.dll674HeapAlloc
KERNEL32.dll761LoadLibraryW
KERNEL32.dll546GetProcAddress
KERNEL32.dll678HeapFree
KERNEL32.dll218EnterCriticalSection
KERNEL32.dll1134WaitForSingleObject
KERNEL32.dll756LeaveCriticalSection
KERNEL32.dll697InitializeCriticalSection
KERNEL32.dll164CreateThread
KERNEL32.dll1080TerminateThread
KERNEL32.dll128CreateFileW
KERNEL32.dll469GetFileSize
KERNEL32.dll878ReadFile
KERNEL32.dll1067Sleep
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll502GetModuleFileNameW
KERNEL32.dll452GetEnvironmentVariableW
KERNEL32.dll985SetEnvironmentVariableW
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll213DuplicateHandle
KERNEL32.dll146CreatePipe
KERNEL32.dll574GetStdHandle
KERNEL32.dll152CreateProcessW
KERNEL32.dll999SetFilePointer
KERNEL32.dll981SetEndOfFile
KERNEL32.dll1175WriteFile
KERNEL32.dll799MultiByteToWideChar
KERNEL32.dll798MulDiv
KERNEL32.dll994SetFileAttributesW
KERNEL32.dll1003SetFileTime
KERNEL32.dll1076SystemTimeToFileTime
KERNEL32.dll768LocalFileTimeToFileTime
KERNEL32.dll681HeapReAlloc
KERNEL32.dll607GetTempPathW
KERNEL32.dll114CreateDirectoryW
KERNEL32.dll444GetDriveTypeW
KERNEL32.dll293FindFirstFileW
KERNEL32.dll282FindClose
KERNEL32.dll463GetFileAttributesW
KERNEL32.dll196DeleteFileW
KERNEL32.dll305FindNextFileW
KERNEL32.dll902RemoveDirectoryW
KERNEL32.dll102CopyFileW
KERNEL32.dll683HeapSize
KERNEL32.dll758LoadLibraryA
KERNEL32.dll1012SetLastError
KERNEL32.dll488GetLocalTime
KERNEL32.dll650GlobalAlloc
KERNEL32.dll657GlobalFree
KERNEL32.dll1084TlsAlloc
KERNEL32.dll1087TlsSetValue
KERNEL32.dll191DeleteCriticalSection
USER32.DLLSetWindowLongW
USER32.DLLShowWindow
USER32.DLLExitWindowsEx
USER32.DLLSendMessageW
USER32.DLLGetActiveWindow
USER32.DLLClipCursor
USER32.DLLShowCursor
USER32.DLLGetWindowRect
USER32.DLLSetCursorPos
USER32.DLLDestroyWindow
USER32.DLLInvalidateRect
USER32.DLLGetForegroundWindow
USER32.DLLBeginPaint
USER32.DLLEndPaint
USER32.DLLDefWindowProcW
USER32.DLLLoadIconW
USER32.DLLRegisterClassExW
USER32.DLLCreateWindowExW
USER32.DLLMessageBoxW
USER32.DLLGetWindowThreadProcessId
USER32.DLLIsWindowVisible
USER32.DLLGetWindowLongA
USER32.DLLIsWindowEnabled
USER32.DLLEnableWindow
USER32.DLLEnumWindows
USER32.DLLSetWindowPos
USER32.DLLOemToCharW
USER32.DLLGetSysColorBrush
USER32.DLLSetClassLongW
USER32.DLLGetParent
USER32.DLLGetWindowLongW
USER32.DLLGetWindow
USER32.DLLRedrawWindow
USER32.DLLGetSysColor
USER32.DLLGetClassNameW
USER32.DLLIsWindow
USER32.DLLFillRect
USER32.DLLDrawIconEx
USER32.DLLDrawTextW
USER32.DLLGetDlgCtrlID
USER32.DLLCallWindowProcW
USER32.DLLScreenToClient
USER32.DLLGetIconInfo
USER32.DLLUpdateWindow
USER32.DLLReleaseCapture
USER32.DLLDrawStateW
USER32.DLLSetCapture
USER32.DLLGetSystemMetrics
USER32.DLLSetWindowTextW
USER32.DLLGetWindowTextLengthW
USER32.DLLGetWindowTextW
USER32.DLLGetClientRect
USER32.DLLLoadCursorW
USER32.DLLSendMessageA
USER32.DLLGetDC
USER32.DLLInflateRect
USER32.DLLGetPropW
USER32.DLLReleaseDC
USER32.DLLGetWindowDC
USER32.DLLRemovePropW
USER32.DLLSetPropW
USER32.DLLValidateRect
USER32.DLLMapWindowPoints
USER32.DLLMoveWindow
USER32.DLLPeekMessageW
USER32.DLLTranslateMessage
USER32.DLLDispatchMessageW
USER32.DLLDrawFrameControl
USER32.DLLSetActiveWindow
USER32.DLLUnregisterClassW
USER32.DLLDestroyAcceleratorTable
USER32.DLLRegisterClassW
USER32.DLLAdjustWindowRectEx
USER32.DLLCreateAcceleratorTableW
USER32.DLLGetMenu
USER32.DLLIsZoomed
USER32.DLLIsIconic
USER32.DLLMsgWaitForMultipleObjects
USER32.DLLGetMessageW
USER32.DLLTranslateAcceleratorW
USER32.DLLSetFocus
USER32.DLLGetFocus
USER32.DLLEnumChildWindows
USER32.DLLPostMessageW
USER32.DLLDefFrameProcW
USER32.DLLLoadImageW
USER32.DLLSetCursor
USER32.DLLSystemParametersInfoW
USER32.DLLGetKeyState
USER32.DLLGetCursorPos
USER32.DLLIsChild
USER32.DLLDestroyIcon
USER32.DLLCreateIconFromResourceEx
USER32.DLLCreateIconFromResource
USER32.DLLCharUpperW
GDI32.DLLGetStockObject
GDI32.DLLDeleteObject
GDI32.DLLCreateDCW
GDI32.DLLGetDeviceCaps
GDI32.DLLCreateFontW
GDI32.DLLDeleteDC
GDI32.DLLCreateSolidBrush
GDI32.DLLCreatePatternBrush
GDI32.DLLSetBkMode
GDI32.DLLSetTextColor
GDI32.DLLSetBkColor
GDI32.DLLSelectObject
GDI32.DLLGetObjectType
GDI32.DLLGetObjectW
GDI32.DLLExcludeClipRect
GDI32.DLLCreateCompatibleBitmap
GDI32.DLLCreateCompatibleDC
GDI32.DLLStretchBlt
GDI32.DLLCreateDIBSection
GDI32.DLLGetObjectA
GDI32.DLLGetDIBits
GDI32.DLLBitBlt
GDI32.DLLCreateBitmap
GDI32.DLLSetPixel
GDI32.DLLSetStretchBltMode
GDI32.DLLSetBrushOrgEx
GDI32.DLLSetDIBits
ADVAPI32.DLLGetUserNameW
ADVAPI32.DLLRegOpenKeyExW
ADVAPI32.DLLRegConnectRegistryW
ADVAPI32.DLLRegQueryValueExW
ADVAPI32.DLLRegCloseKey
ADVAPI32.DLLRegCreateKeyExW
ADVAPI32.DLLRegSetValueExW
COMCTL32.DLLInitCommonControlsEx
COMCTL32.DLLImageList_SetBkColor
COMCTL32.DLLImageList_GetIcon
COMCTL32.DLLImageList_GetIconSize
COMCTL32.DLLImageList_Destroy
COMCTL32.DLLImageList_Remove
COMCTL32.DLLImageList_AddMasked
COMCTL32.DLLImageList_Create
COMCTL32.DLLImageList_Add
COMCTL32.DLLImageList_ReplaceIcon
OLE32.DLLCoInitialize
OLE32.DLLCoCreateInstance
OLE32.DLLCoUninitialize
OLE32.DLLCoCreateGuid
OLE32.DLLStringFromGUID2
OLE32.DLLCoTaskMemFree
OLE32.DLLRevokeDragDrop
SHELL32.DLLExtractIconW
SHELL32.DLLSHGetSpecialFolderLocation
SHELL32.DLLSHGetPathFromIDListW
SHELL32.DLLSHBrowseForFolderW
SHELL32.DLLShellExecuteExW
WINMM.DLLtimeEndPeriod
WINMM.DLLtimeBeginPeriod
IMAGEHLP.DLLMakeSureDirectoryPathExists
SETUPAPI.DLLSetupIterateCabinetW
offsetsizetypecomment
0453120EXE11/03/2012 15:00:39#
15c115HTM#
536b21543JPG#
53cb94158BMP(55 x 55)#
5af8e1543JPG#
5b59526494BMP(164 x 314)#
61d134158BMP(55 x 55)#
8a9d9643599ZIP#
127be84BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 1211372 bytes (1183 KiB)


--
Type = Cab
WARNINGS:
There are data after the end of archive
Offset = 453128
Physical Size = 114641
Tail Size = 643603
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2013-05-25 12:31:10 ....A          668               SC.dat
2013-05-25 12:31:10 ....A            9               languages.dat
2013-05-25 12:31:10 ....A           83               Desktop.dat
2013-05-25 12:31:10 ....A           83               Startmenu.dat
2013-05-25 12:31:10 ....A            0               Registry.dat
2013-05-25 12:31:10 ....A          158               OS.dat
2013-05-25 12:31:10 ....A          850               Serials.dat
2013-05-25 12:31:10 ....A            0               Variables.dat
2009-12-12 21:48:00 ....A         3006               Default.ifl
2009-12-12 21:48:00 ....A         3006               English.ifl
2013-05-25 12:13:34 ....A        46108               Image_Left.jpg
2013-05-25 12:14:30 ....A        14154               Image_Top.jpg
2012-12-30 17:22:16 ....A         8423               icon.dat
2013-05-25 12:24:30 ....A        58574               isps.dat
2013-05-25 12:31:10 ....A         8668               licence.rtf
------------------- ----- ------------ ------------  ------------------------
2013-05-25 12:31:10             143790      1211372  15 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK