filenameSETUP.EXE
size86016 (0x15000)
md5057f5a53a123e21261a495dec2828759
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x32ae628b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion3.10
SizeOfCode0xd800
SizeOfInitializedData0x9800
SizeOfUninitializedData0
AddressOfEntryPoint0x99b0
BaseOfCode0x1000
BaseOfData0xf000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1c000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v4.2

Sections

namevavsizeraw sizeflags
.text0x10000xd6fa0xd800R-X CODE
.rdata0xf0000x4e00x600R-- IDATA
.data0x100000x53d40x3000RW- IDATA
.idata0x160000x13da0x1400RW- IDATA
.rsrc0x180000x109b0x1200R-- IDATA
.reloc0x1a0000x16c90x1800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x160000x8c
RESOURCE0x180000x109b
EXCEPTION00
SECURITY00
BASERELOC0x1a0000x13d8
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x164500x3c4
Delay_IAT00
CLR_Header00
typenamesizecp
MENU#101340
DIALOG#7703140
DIALOG#77114440
VERSION#110400
module_namehintordfunction_name
SSP.dll4CentWnd
SSP.dll27PathStringCheck
SSP.dll8CrDir
SSP.dll20GetDiskFreeSpaceString
SSP.dll7CopyProc
SSP.dll31Restart
SSP.dllAddProgramItem
SSP.dll5ControlIME
SSP.dll14DeleteGroup
SSP.dll15DeleteProc
SSP.dll2AppendPPSString
SSP.dll24InitFileCopy
SSP.dll9CreateRegistryString
SSP.dll30RemovePPSString
SSP.dll26NewCopy
SSP.dll38WinPlatformString
SSP.dll1AppSlash
SSP.dll12DelSlash
SSP.dll16FindFileCheck
SSP.dll3Browse
SSP.dll17GetCountry
SSP.dll19GetDirectory
SSP.dll11DLLInitialize
SSP.dll25NTCheck
KERNEL32.dll278GetProcAddress
KERNEL32.dll603VirtualAlloc
KERNEL32.dll49CreateFileA
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll170GetCommandLineA
KERNEL32.dll332GetVersion
KERNEL32.dll661lstrcmpA
KERNEL32.dll664lstrcmpiA
KERNEL32.dll667lstrcpyA
KERNEL32.dll274GetPrivateProfileStringA
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll400LoadLibraryA
KERNEL32.dll305GetSystemDirectoryA
KERNEL32.dll126FindClose
KERNEL32.dll130FindFirstFileA
KERNEL32.dll658lstrcatA
KERNEL32.dll209GetCurrentDirectoryA
KERNEL32.dll639WritePrivateProfileStringA
KERNEL32.dll535SetFileAttributesA
KERNEL32.dll333GetVersionExA
KERNEL32.dll337GetWindowsDirectoryA
KERNEL32.dll78DeleteFileA
KERNEL32.dll673lstrlenA
KERNEL32.dll108ExitThread
KERNEL32.dll618WaitForSingleObject
KERNEL32.dll477ReleaseMutex
KERNEL32.dll152FreeLibrary
KERNEL32.dll24CloseHandle
KERNEL32.dll231GetExitCodeThread
KERNEL32.dll532SetEvent
KERNEL32.dll583TerminateThread
KERNEL32.dll67CreateThread
KERNEL32.dll481ResetEvent
KERNEL32.dll46CreateEventA
KERNEL32.dll244GetLastError
KERNEL32.dll56CreateMutexA
KERNEL32.dll219GetDiskFreeSpaceA
KERNEL32.dll470ReadFile
KERNEL32.dll537SetFilePointer
KERNEL32.dll107ExitProcess
KERNEL32.dll61CreateProcessA
KERNEL32.dll606VirtualFree
KERNEL32.dll623WinExec
KERNEL32.dll524SetCurrentDirectoryA
KERNEL32.dll360HeapAlloc
KERNEL32.dll232GetFileAttributesA
KERNEL32.dll366HeapFree
KERNEL32.dll398LCMapStringW
KERNEL32.dll397LCMapStringA
KERNEL32.dll302GetStringTypeW
KERNEL32.dll299GetStringTypeA
KERNEL32.dll635WriteFile
KERNEL32.dll364HeapDestroy
KERNEL32.dll362HeapCreate
KERNEL32.dll298GetStdHandle
KERNEL32.dll239GetFileType
KERNEL32.dll230GetExitCodeProcess
KERNEL32.dll151FreeEnvironmentStringsW
KERNEL32.dll539SetHandleCount
KERNEL32.dll265GetOEMCP
KERNEL32.dll157GetACP
KERNEL32.dll163GetCPInfo
KERNEL32.dll622WideCharToMultiByte
KERNEL32.dll227GetEnvironmentStringsW
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll582TerminateProcess
KERNEL32.dll225GetEnvironmentStrings
KERNEL32.dll427MultiByteToWideChar
KERNEL32.dll150FreeEnvironmentStringsA
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll592UnhandledExceptionFilter
KERNEL32.dll485RtlUnwind
USER32.dll441PostQuitMessage
USER32.dll238GetDC
USER32.dll317GetWindowRect
USER32.dll466ReleaseDC
USER32.dll9BeginPaint
USER32.dll182EndPaint
USER32.dll410MessageBeep
USER32.dll499SetCursor
USER32.dll128DefWindowProcA
USER32.dll243GetDlgItem
USER32.dll439PostMessageA
USER32.dll393LoadStringA
USER32.dll245GetDlgItemTextA
USER32.dll505SetDlgItemTextA
USER32.dll205FindWindowA
USER32.dll509SetForegroundWindow
USER32.dll508SetFocus
USER32.dll380LoadIconA
USER32.dll376LoadCursorA
USER32.dll451RegisterClassA
USER32.dll228GetClientRect
USER32.dll546SetWindowLongA
USER32.dll277GetMessageA
USER32.dll587TranslateMessage
USER32.dll144DispatchMessageA
USER32.dll142DialogBoxParamA
USER32.dll240GetDesktopWindow
USER32.dll180EndDialog
USER32.dll75CreateDialogParamA
USER32.dll564ShowWindow
USER32.dll599UpdateWindow
USER32.dll138DestroyWindow
USER32.dll411MessageBoxA
USER32.dll621wsprintfA
USER32.dll314GetWindowLongA
USER32.dll85CreateWindowExA
GDI32.dll367SetStretchBltMode
GDI32.dll383StretchBlt
GDI32.dll31CreateCompatibleDC
GDI32.dll312RealizePalette
GDI32.dll251GetStockObject
GDI32.dll10BitBlt
GDI32.dll331SelectObject
GDI32.dll332SelectPalette
GDI32.dll67DeleteDC
GDI32.dll53CreatePalette
GDI32.dll47CreateHalftonePalette
GDI32.dll36CreateDIBSection
GDI32.dll70DeleteObject
ADVAPI32.dll286RegDeleteKeyA
DSETUP.dll4DirectXSetupA

StringTable 041104b0

CommentsSEGA SETUP Program Native.
CompanyNameSEGA ENTERPRISES.
FileDescriptionSEGA SETUP Program Main.
FileVersion1.7.0.0
InternalNameSEGA SETUP Program.
LegalCopyrightCopyright (C) SEGA ENTERPRISES Co, Ltd 1996.
LegalTrademarksSEGA
OriginalFilenameSETUP.EXE
PrivateBuild1.7.0.0
ProductNameSEGA PCD Setup
ProductVersion1, 7, 0, 0
SpecialBuild1.7.0.0

VS_FIXEDFILEINFO

FileVersion1.7.0.0
ProductVersion1.7.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0x28
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
086016EXE12/11/1996 07:28:11#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK