filename0002cd96efb3f24183dcbf00a195c358df70b697.bin
size598016 (0x92000)
md508de20e6c2baed198be571059b066f7e
typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
109507273
1235072717
10168
1313072911
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4bc06ccb
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion9.0
SizeOfCode0x6400
SizeOfInitializedData0x69400
SizeOfUninitializedData0x4200
AddressOfEntryPoint0x33e9
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion6.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x17f000
SizeOfHeaders0x400
CheckSum0x4a2767
Subsystem2
DllCharacteristics0x8400
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Nullsoft install system v2.x

Sections

namevavsizeraw sizeflags
.text0x10000x62400x6400R-X CODE
.rdata0x80000x18ca0x1a00R-- IDATA
.data0xa0000x6667c0x200RW- IDATA
.ndata0x710000xb50000RW- UDATA
.rsrc0x1260000x585800x58600R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x89f00xb4
RESOURCE0x1260000x58580
EXCEPTION00
SECURITY0x4932c00xe78
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x80000x2c0
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#12703760
ICON#2676240
ICON#396400
ICON#442640
ICON#511280
ICON#67440
ICON#72960
DIALOG#1032880
DIALOG#1055760
DIALOG#1062480
DIALOG#1082440
DIALOG#1112380
DIALOG#2032720
DIALOG#2055600
DIALOG#2062320
DIALOG#2082280
DIALOG#2112220
DIALOG#3032800
DIALOG#3055680
DIALOG#3062400
DIALOG#3082360
DIALOG#3112300
GROUP_ICON#1031040
VERSION#16960
MANIFEST#19660
module_namehintordfunction_name
KERNEL32.dll995SetFileTime
KERNEL32.dll81CompareFileTime
KERNEL32.dll919SearchPathW
KERNEL32.dll568GetShortPathNameW
KERNEL32.dll479GetFullPathNameW
KERNEL32.dll790MoveFileW
KERNEL32.dll967SetCurrentDirectoryW
KERNEL32.dll462GetFileAttributesW
KERNEL32.dll486GetLastError
KERNEL32.dll113CreateDirectoryW
KERNEL32.dll986SetFileAttributesW
KERNEL32.dll1057Sleep
KERNEL32.dll614GetTickCount
KERNEL32.dll468GetFileSize
KERNEL32.dll501GetModuleFileNameW
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll101CopyFileW
KERNEL32.dll260ExitProcess
KERNEL32.dll641GetWindowsDirectoryW
KERNEL32.dll603GetTempPathW
KERNEL32.dll368GetCommandLineW
KERNEL32.dll978SetErrorMode
KERNEL32.dll1202lstrcpynA
KERNEL32.dll67CloseHandle
KERNEL32.dll1203lstrcpynW
KERNEL32.dll439GetDiskFreeSpaceW
KERNEL32.dll663GlobalUnlock
KERNEL32.dll656GlobalLock
KERNEL32.dll163CreateThread
KERNEL32.dll756LoadLibraryW
KERNEL32.dll151CreateProcessW
KERNEL32.dll1196lstrcmpiA
KERNEL32.dll127CreateFileW
KERNEL32.dll601GetTempFileNameW
KERNEL32.dll1191lstrcatW
KERNEL32.dll544GetProcAddress
KERNEL32.dll753LoadLibraryA
KERNEL32.dll502GetModuleHandleA
KERNEL32.dll819OpenProcess
KERNEL32.dll1200lstrcpyW
KERNEL32.dll630GetVersionExW
KERNEL32.dll582GetSystemDirectoryW
KERNEL32.dll628GetVersion
KERNEL32.dll1199lstrcpyA
KERNEL32.dll896RemoveDirectoryW
KERNEL32.dll1197lstrcmpiW
KERNEL32.dll1194lstrcmpW
KERNEL32.dll264ExpandEnvironmentStringsW
KERNEL32.dll645GlobalAlloc
KERNEL32.dll1124WaitForSingleObject
KERNEL32.dll453GetExitCodeProcess
KERNEL32.dll652GlobalFree
KERNEL32.dll505GetModuleHandleW
KERNEL32.dll755LoadLibraryExW
KERNEL32.dll332FreeLibrary
KERNEL32.dll1171WritePrivateProfileStringW
KERNEL32.dll541GetPrivateProfileStringW
KERNEL32.dll1146WideCharToMultiByte
KERNEL32.dll793MulDiv
KERNEL32.dll1205lstrlenA
KERNEL32.dll1165WriteFile
KERNEL32.dll872ReadFile
KERNEL32.dll794MultiByteToWideChar
KERNEL32.dll991SetFilePointer
KERNEL32.dll281FindClose
KERNEL32.dll304FindNextFileW
KERNEL32.dll292FindFirstFileW
KERNEL32.dll195DeleteFileW
KERNEL32.dll1206lstrlenW
USER32.dll596ScreenToClient
USER32.dll332GetMessagePos
USER32.dll29CallWindowProcW
USER32.dll458IsWindowVisible
USER32.dll465LoadBitmapW
USER32.dll71CloseClipboard
USER32.dll621SetClipboardData
USER32.dll206EmptyClipboard
USER32.dll527OpenClipboard
USER32.dll719TrackPopupMenu
USER32.dll392GetWindowRect
USER32.dll10AppendMenuW
USER32.dll101CreatePopupMenu
USER32.dll367GetSystemMetrics
USER32.dll211EndDialog
USER32.dll207EnableMenuItem
USER32.dll366GetSystemMenu
USER32.dll619SetClassLongW
USER32.dll454IsWindowEnabled
USER32.dll679SetWindowPos
USER32.dll166DialogBoxParamW
USER32.dll60CheckDlgButton
USER32.dll104CreateWindowExW
USER32.dll709SystemParametersInfoW
USER32.dll566RegisterClassW
USER32.dll631SetDlgItemTextW
USER32.dll290GetDlgItemTextW
USER32.dll508MessageBoxIndirectW
USER32.dll45CharNextA
USER32.dll58CharUpperW
USER32.dll50CharPrevW
USER32.dll169DispatchMessageW
USER32.dll540PeekMessageW
USER32.dll775wsprintfA
USER32.dll160DestroyWindow
USER32.dll93CreateDialogParamW
USER32.dll670SetTimer
USER32.dll684SetWindowTextW
USER32.dll544PostQuitMessage
USER32.dll634SetForegroundWindow
USER32.dll696ShowWindow
USER32.dll776wsprintfW
USER32.dll610SendMessageTimeoutW
USER32.dll469LoadCursorW
USER32.dll624SetCursor
USER32.dll386GetWindowLongW
USER32.dll364GetSysColor
USER32.dll47CharNextW
USER32.dll263GetClassInfoW
USER32.dll238ExitWindowsEx
USER32.dll242FindWindowExW
USER32.dll287GetDlgItem
USER32.dll677SetWindowLongW
USER32.dll473LoadImageW
USER32.dll282GetDC
USER32.dll209EnableWindow
USER32.dll426InvalidateRect
USER32.dll611SendMessageW
USER32.dll150DefWindowProcW
USER32.dll14BeginPaint
USER32.dll269GetClientRect
USER32.dll239FillRect
USER32.dll200DrawTextW
USER32.dll213EndPaint
USER32.dll453IsWindow
GDI32.dll613SetBkColor
GDI32.dll437GetDeviceCaps
GDI32.dll208DeleteObject
GDI32.dll42CreateBrushIndirect
GDI32.dll62CreateFontIndirectW
GDI32.dll614SetBkMode
GDI32.dll653SetTextColor
GDI32.dll606SelectObject
SHELL32.dll120SHBrowseForFolderW
SHELL32.dll209SHGetPathFromIDListW
SHELL32.dll186SHGetFileInfoW
SHELL32.dll280ShellExecuteW
SHELL32.dll169SHFileOperationW
SHELL32.dll216SHGetSpecialFolderLocation
ADVAPI32.dll586RegEnumKeyW
ADVAPI32.dll603RegOpenKeyExW
ADVAPI32.dll554RegCloseKey
ADVAPI32.dll574RegDeleteKeyW
ADVAPI32.dll578RegDeleteValueW
ADVAPI32.dll563RegCreateKeyExW
ADVAPI32.dll632RegSetValueExW
ADVAPI32.dll616RegQueryValueExW
ADVAPI32.dll588RegEnumValueW
COMCTL32.dll79ImageList_AddMasked
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll17
COMCTL32.dll83ImageList_Create
ole32.dll103CoTaskMemFree
ole32.dll244OleInitialize
ole32.dll267OleUninitialize
ole32.dll16CoCreateInstance
VERSION.dll4GetFileVersionInfoSizeW
VERSION.dll5GetFileVersionInfoW
VERSION.dll13VerQueryValueW

StringTable 04090000

CompanyNameReviverSoft LLC
FileDescriptionDriver Reviver installer
FileVersion4.0.1.30
InternalNameDriverReviverSetup.exe
LegalCopyrightReviverSoft LLC
ProductNameDriver Reviver
ProductVersion4.0.1.30

VS_FIXEDFILEINFO

FileVersion4.0.1.30
ProductVersion4.0.1.30
StrucVersion0
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0395776EXE04/10/2010 12:19:23#
15c115HTM#
60a00202240BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER