Aurora-A11.exe - RunVista64.EXE - RunVista64 MFC Application

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	Aurora-A11.exe
size	2032543 (0x1f039f)
md5	10ce85e8561a35d91240302753480c97

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x1b8
blocks_in_file	0x48
num_relocs	0x123
header_paragraphs	0x60
min_extra_paragraphs	0x141
max_extra_paragraphs	0xffff
ss	0x89c
sp	0x1400
checksum	0
ip	0x10
cs	0x104
reloc_table_offset	0x40
overlay_number	0
reserved0	0x100000001
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x9020

DOS stub

00000000: 55 8b ec 57 56 8b 7e 08  8b 76 06 57 56 0e e8 21  |U..WV.~..v.WV..!|
00000010: 00 83 c4 04 0b c0 75 15  57 56 0e e8 7c 08 83 c4  |......u.WV..|...|
00000020: 04 0b c0 75 08 0e e8 47  0a 0e e8 3d 0d 5e 5f c9  |...u...G...=.^_.|
00000030: cb 90 c8 0e 00 00 57 56  68 59 00 68 56 00 9a 3e  |......WVhY.hV..>|
00000040: 19 04 01 83 c4 02 50 9a  aa 20 04 01 83 c4 04 0b  |......P.. ......|
00000050: c0 74 13 68 60 00 9a dc  08 04 01 83 c4 02 b8 ff  |.t.h`...........|
00000060: ff 5e 5f c9 cb 90 8b 76  06 83 fe 01 0f 8e 0d 01  |.^_....v........|
00000070: 68 8b 00 9a dc 08 04 01  83 c4 02 bf 01 00 3b f7  |h.............;.|
00000080: 0f 8e ee 00 8b 56 08 83  c2 02 89 56 fe 8b f2 68  |.....V.....V...h|
00000090: a6 00 ff 34 9a b0 1f 04  01 83 c4 04 0b c0 75 0a  |...4..........u.|
000000a0: c7 06 48 00 01 00 e9 be  00 90 68 af 00 ff 34 9a  |..H.......h...4.|
000000b0: b0 1f 04 01 83 c4 04 0b  c0 75 09 c7 06 4a 00 01  |.........u...J..|
000000c0: 00 e9 a3 00 68 b8 00 ff  34 9a b0 1f 04 01 83 c4  |....h...4.......|
000000d0: 04 0b c0 75 09 c7 06 4c  00 01 00 e9 89 00 68 c3  |...u...L......h.|
000000e0: 00 ff 34 9a b0 1f 04 01  83 c4 04 0b c0 75 09 c7  |..4..........u..|
000000f0: 06 4e 00 01 00 eb 70 90  68 cc 00 ff 34 9a b0 1f  |.N....p.h...4...|
00000100: 04 01 83 c4 04 0b c0 75  09 c7 06 50 00 01 00 eb  |.......u...P....|
00000110: 56 90 68 d7 00 ff 34 9a  b0 1f 04 01 83 c4 04 0b  |V.h...4.........|
00000120: c0 75 09 c7 06 52 00 01  00 eb 3c 90 68 e0 00 ff  |.u...R....<.h...|
00000130: 34 9a b0 1f 04 01 83 c4  04 0b c0 75 09 c7 06 54  |4..........u...T|
00000140: 00 01 00 eb 22 90 68 ea  00 9a dc 08 04 01 83 c4  |....".h.........|
00000150: 02 68 03 01 9a dc 08 04  01 83 c4 02 9a 7e 2d 04  |.h...........~-.|
00000160: 01 0a c0 0f 85 f7 fe 83  c6 02 47 3b 7e 06 0f 8c  |..........G;~...|
00000170: 1d ff 68 1a 01 9a dc 08  04 01 83 c4 02 68 1d 01  |..h..........h..|
00000180: 8b 5e 08 ff 37 9a de 06  04 01 83 c4 04 a3 ea 0c  |.^..7...........|
00000190: 0e e8 cc 01 68 20 01 9a  dc 08 04 01 83 c4 02 68  |....h .........h|
000001a0: 39 01 9a dc 08 04 01 83  c4 02 ff 36 44 00 0e e8  |9..........6D...|
000001b0: ae 05 83 c4 02 8b 1e 44  00 8d 7f 18 be ee 0c 8c  |.......D........|
000001c0: d9 8e c1 b9 ff ff 33 c0  f2 ae f7 d1 2b f9 87 fe  |......3.....+...|
000001d0: d1 e9 f3 a5 13 c9 f3 a4  39 06 50 00 75 7e 68 94  |........9.P.u~h.|
000001e0: 0c ff 36 44 00 9a aa 20  04 01 83 c4 04 0b c0 75  |..6D... .......u|
000001f0: 6b 80 3e dd 0c 00 74 46  68 ac 0c ff 36 44 00 9a  |k.>...tFh...6D..|
00000200: aa 20 04 01 83 c4 04 0b  c0 75 11 68 4c 01 9a dc  |. .......u.hL...|
00000210: 08 04 01 83 c4 02 68 67  01 eb 31 90 bf ac 0c be  |......hg..1.....|
00000220: 94 0c 8c d9 8e c1 b9 ff  ff 33 c0 f2 ae f7 d1 2b  |.........3.....+|
00000230: f9 87 fe d1 e9 f3 a5 13  c9 f3 a4 eb 1f 90 68 87  |..............h.|
00000240: 01 9a dc 08 04 01 83 c4  02 68 a2 01 9a dc 08 04  |.........h......|
00000250: 01 83 c4 02 9a 7e 2d 04  01 e9 02 fe 80 3e dc 0c  |.....~-......>..|
00000260: 00 0f 84 f5 00 8b 1e 44  00 8d 7f 18 be 36 0d 8c  |.......D.....6..|
00000270: d9 8e c1 b9 ff ff 33 c0  f2 ae f7 d1 2b f9 87 fe  |......3.....+...|
00000280: d1 e9 f3 a5 13 c9 f3 a4  68 c2 01 68 ee 0c 9a 1a  |........h..h....|
00000290: 20 04 01 83 c4 04 89 46  fe 0b c0 74 1d 8d 76 fa  | ......F...t..v.|
000002a0: 1e 07 8b 7e fe b9 ff ff  33 c0 f2 ae f7 d1 2b f9  |...~....3.....+.|
000002b0: 87 fe d1 e9 f3 a5 13 c9  f3 a4 68 c4 01 6a 00 9a  |..........h..j..|
000002c0: 1a 20 04 01 83 c4 04 8b  f0 0b f0 74 20 56 8b f8  |. .........t V..|
000002d0: 8d 76 f6 8c d9 8e c1 b9  ff ff 33 c0 f2 ae f7 d1  |.v........3.....|
000002e0: 2b f9 87 fe d1 e9 f3 a5  13 c9 f3 a4 5e 68 c6 01  |+...........^h..|
000002f0: 6a 00 9a 1a 20 04 01 83  c4 04 8b f0 0b f0 74 20  |j... .........t |
00000300: 56 8b f8 8d 76 f2 8c d9  8e c1 b9 ff ff 33 c0 f2  |V...v........3..|
00000310: ae f7 d1 2b f9 87 fe d1  e9 f3 a5 13 c9 f3 a4 5e  |...+...........^|
00000320: 8d 46 f2 50 9a 82 18 04  01 83 c4 02 50 8d 46 f6  |.F.P........P.F.|
00000330: 50 9a 82 18 04 01 83 c4  02 50 8d 46 fa 50 9a 82  |P........P.F.P..|
00000340: 18 04 01 83 c4 02 50 68  c8 01 68 ee 0c 9a c0 1b  |......Ph..h.....|
00000350: 04 01 83 c4 0a c6 06 f4  0c 00 33 c0 5e 5f c9 cb  |..........3.^_..|
00000360: 57 56 0e e8 00 01 6a 00  52 50 ff 36 ea 0c 9a c4  |WV....j.RP.6....|
00000370: 19 04 01 83 c4 08 ff 36  ea 0c 66 68 e0 00 01 00  |.......6..fh....|
00000380: ff 36 42 00 9a f4 06 04  01 83 c4 08 8b 1e 42 00  |.6B...........B.|
00000390: 8d 7f 18 be 7c 0c 8c d9  8e c1 b9 ff ff 33 c0 f2  |....|........3..|
000003a0: ae f7 d1 2b f9 87 fe d1  e9 f3 a5 13 c9 f3 a4 8b  |...+............|
000003b0: 1e 42 00 8d 7f 24 be 94  0c b9 ff ff f2 ae f7 d1  |.B...$..........|
000003c0: 2b f9 87 fe d1 e9 f3 a5  13 c9 f3 a4 8b 1e 42 00  |+.............B.|
000003d0: 8d 7f 3c be 06 0d b9 ff  ff f2 ae f7 d1 2b f9 87  |..<..........+..|
000003e0: fe d1 e9 f3 a5 13 c9 f3  a4 8b 1e 42 00 8b fb be  |...........B....|
000003f0: c4 0c b9 ff ff f2 ae f7  d1 2b f9 87 fe d1 e9 f3  |.........+......|
00000400: a5 13 c9 f3 a4 8b 1e 42  00 8a 47 48 a2 dc 0c 8a  |.......B..GH....|
00000410: 47 49 a2 dd 0c 8a 47 62  a2 46 00 38 26 dd 0c 74  |GI....Gb.F.8&..t|
00000420: 1b 8d 7f 4a be ac 0c b9  ff ff 33 c0 f2 ae f7 d1  |...J......3.....|
00000430: 2b f9 87 fe d1 e9 f3 a5  13 c9 f3 a4 80 3e 46 00  |+............>F.|
00000440: 00 74 1f 8b 1e 42 00 8d  7f 63 be de 0c b9 ff ff  |.t...B...c......|
00000450: 33 c0 f2 ae f7 d1 2b f9  87 fe d1 e9 f3 a5 13 c9  |3.....+.........|
00000460: f3 a4 5e 5f cb 90 c8 16  00 00 57 56 33 c0 89 46  |..^_......WV3..F|
00000470: f2 89 46 f4 89 46 fe c7  46 f6 08 00 8d 7e ea be  |..F..F..F....~..|
00000480: d5 01 8c d0 8e c0 66 a5  66 a5 66 c7 46 f8 00 00  |......f.f.f.F...|
00000490: 00 00 8d 46 ea 89 46 fc  8b f0 8b 7e fe eb 0f 90  |...F..F....~....|
000004a0: 8a 04 98 50 9a 28 19 04  01 83 c4 02 88 04 46 8b  |...P.(........F.|
000004b0: df 47 8d 46 ea 03 d8 80  3f 00 75 e4 68 50 c3 9a  |.G.F....?.u.hP..|
000004c0: a1 2c 04 01 83 c4 02 8b  f8 ff 36 ea 0c 66 68 01  |.,........6..fh.|
000004d0: 00 50 c3 50 9a f4 06 04  01 83 c4 08 8b 1e ea 0c  |.P.P............|
000004e0: f6 47 06 10 75 5f 89 7e  fc 83 7e f4 00 75 56 33  |.G..u_.~..~..uV3|
000004f0: f6 66 81 7e f8 50 c3 00  00 7c 1e ff 36 ea 0c 66  |.f.~.P...|..6..f|
00000500: 68 01 00 50 c3 57 9a f4  06 04 01 83 c4 08 ff 46  |h..P.W.........F|
00000510: f2 66 c7 46 f8 00 00 00  00 8b 46 f8 66 ff 46 f8  |.f.F......F.f.F.|
00000520: 8b d8 8a 42 ea 38 01 75  12 83 fe 07 74 08 46 83  |...B.8.u....t.F.|
00000530: fe 08 7c bd eb 05 c7 46  f4 01 00 8b 1e ea 0c f6  |..|....F........|
00000540: 47 06 10 74 a4 57 9a 80  2c 04 01 83 c4 02 83 7e  |G..t.W..,......~|
00000550: f4 00 74 14 66 0f bf 46  f2 66 b9 50 c3 00 00 66  |..t.f..F.f.P...f|
00000560: f7 e9 66 01 46 f8 eb 1d  66 c7 46 f8 00 00 00 00  |..f.F...f.F.....|
00000570: 68 dd 01 9a dc 08 04 01  83 c4 02 6a 01 9a e3 01  |h..........j....|
00000580: 04 01 83 c4 02 8b 46 f8  8b 56 fa 5e 5f c9 cb 90  |......F..V.^_...|
00000590: c8 04 00 00 80 7e 06 00  7e 08 8a 46 06 98 99 c9  |.....~..~..F....|
000005a0: cb 90 8a 46 06 25 7f 00  0c 80 99 c9 cb 90 c8 16  |...F.%..........|
000005b0: 00 00 57 56 66 c7 46 f4  00 00 00 00 8d 7e ea be  |..WVf.F......~..|
000005c0: f2 01 8c d0 8e c0 66 a5  a5 66 c7 46 fc 00 00 00  |......f..f.F....|
000005d0: 00 8b 46 fc 2b d2 2b c2  81 da 00 10 b9 05 00 8c  |..F.+.+.........|
000005e0: d3 1e 8d 7e ea 8b f0 8e  c3 8e da 33 c0 f3 a6 74  |...~.......3...t|
000005f0: 05 1b c0 1d ff ff 1f 0b  c0 74 11 66 ff 46 fc 83  |.........t.f.F..|
00000600: 7e fe 00 7c cc 0f 8f 9d  00 eb c6 90 8b 5e fc 2b  |~..|.........^.+|
00000610: c9 83 eb f8 81 d9 ff 0f  8e c1 66 26 8b 07 66 89  |..........f&..f.|
00000620: 46 f0 8a 46 f1 50 0e e8  66 ff 83 c4 02 89 46 f8  |F..F.P..f.....F.|
00000630: 89 56 fa 03 c0 13 d2 03  c0 13 d2 03 c0 13 d2 03  |.V..............|
00000640: c0 13 d2 89 46 f8 89 56  fa 89 46 f4 89 56 f6 8a  |....F..V..F..V..|
00000650: 46 f2 50 0e e8 39 ff 83  c4 02 89 46 f8 89 56 fa  |F.P..9.....F..V.|
00000660: d1 ea d1 d8 d1 da d1 d8  d1 da d1 d8 d1 da d1 d8  |................|
00000670: d1 da 92 25 00 f0 89 46  f8 89 56 fa 01 46 f4 11  |...%...F..V..F..|
00000680: 56 f6 8a 46 f3 50 0e e8  06 ff 83 c4 02 89 46 f8  |V..F.P........F.|
00000690: 89 56 fa c1 e0 04 8b d0  2b c9 89 4e f8 89 46 fa  |.V......+..N..F.|
000006a0: 01 4e f4 11 56 f6 8b 46  f4 8b 56 f6 5e 5f c9 cb  |.N..V..F..V.^_..|
000006b0: c8 0a 00 00 57 56 c6 46  f6 0d c6 46 f7 0a c7 46  |....WV.F...F...F|
000006c0: f8 00 00 8b 46 0a b9 02  00 8b f8 8d 76 f6 1e 07  |....F.......v...|
000006d0: 33 c0 f3 a6 74 05 1b c0  1d ff ff 0b c0 75 05 bb  |3...t........u..|
000006e0: 02 00 eb 0f 8b 7e 0a b9  ff ff 33 c0 f2 ae f7 d1  |.....~....3.....|
000006f0: 49 8b d9 89 46 fe 89 46  fc 89 5e fa 8b 46 fc 8b  |I...F..F..^..F..|
00000700: 56 06 8b 5e 0a 8b 4e fa  1e 1e 8b fb 8b f0 07 8e  |V..^..N.........|
00000710: da 33 c0 f3 a6 74 05 1b  c0 1d ff ff 1f 0b c0 74  |.3...t.........t|
00000720: 11 66 ff 46 fc 83 7e fe  00 7c d1 7e cf 8b 5e f8  |.f.F..~..|.~..^.|
00000730: eb 11 8b 46 fc 8b 5e 0c  8b 56 fe 89 07 89 57 02  |...F..^..V....W.|
00000740: bb 01 00 83 7e fe 01 7c  02 33 db 0b db 75 0a 8b  |....~..|.3...u..|
00000750: 76 0c 66 c7 04 00 00 00  00 8b c3 5e 5f c9 cb 90  |v.f........^_...|
00000760: c8 12 00 00 57 56 8b 5e  06 32 c0 88 47 18 88 07  |....WV.^.2..G...|
00000770: 66 2b c0 66 89 46 f2 89  46 fa c7 46 f8 94 0c c7  |f+.f.F..F..F....|
00000780: 46 f6 ac 0c 8d 46 f2 50  68 7c 0c 0e e8 1f fe 89  |F....F.Ph|......|
00000790: 46 fc 89 56 fe 52 50 0e  e8 15 ff 83 c4 08 0b c0  |F..V.RP.........|
000007a0: 0f 84 ef 00 8b 5e 06 83  c3 18 8b 4e fc 8b d1 2b  |.....^.....N...+|
000007b0: f6 89 76 ee 89 4e f0 03  76 f2 83 d2 00 1e 1e 8b  |..v..N..v.......|
000007c0: fe 8b f3 8e c2 1f b9 ff  ff 33 c0 f2 ae f7 d1 2b  |.........3.....+|
000007d0: f9 87 fe 1e 52 1f 07 d1  e9 f3 a5 13 c9 f3 a4 1f  |....R...........|
000007e0: 8b fb 8c d8 8e c0 b9 ff  ff 33 c0 f2 ae f7 d1 89  |.........3......|
000007f0: 4e f8 8b c1 99 8b 76 f2  2b c9 03 76 ee 13 4e f0  |N.....v.+..v..N.|
00000800: 03 f0 13 ca 1e 8b fe 8b  f3 8e c1 b9 ff ff 33 c0  |..............3.|
00000810: f2 ae f7 d1 2b f9 87 fe  1e 06 1f 07 d1 e9 f3 a5  |....+...........|
00000820: 13 c9 f3 a4 1f 89 46 f4  89 46 f2 8d 46 f2 50 68  |......F..F..F.Ph|
00000830: 94 0c 66 ff 76 fc 0e e8  76 fe 83 c4 08 89 46 f6  |..f.v...v.....F.|
00000840: 0b c0 75 1c 80 3e dd 0c  00 74 15 8d 46 f2 50 68  |..u..>...t..F.Ph|
00000850: ac 0c 66 ff 76 fc 0e e8  56 fe 83 c4 08 89 46 f6  |..f.v...V.....F.|
00000860: 0b c0 74 2f 8b 5e 06 8b  76 f2 8b 4e fc 1e 8b fe  |..t/.^..v..N....|
00000870: 8b f3 8e c1 b9 ff ff 33  c0 f2 ae f7 d1 2b f9 87  |.......3.....+..|
00000880: fe 1e 06 1f 07 d1 e9 f3  a5 13 c9 f3 a4 1f c7 46  |...............F|
00000890: fa 01 00 8b 46 fa 5e 5f  c9 cb 57 56 6a 00 9a 72  |....F.^_..WVj..r|
000008a0: 1c 04 01 83 c4 02 50 9a  e8 21 04 01 83 c4 02 33  |......P..!.....3|
000008b0: ff 9a fa 21 04 01 b9 5a  00 99 f7 f9 8b f2 83 fe  |...!...Z........|
000008c0: 39 7f 05 83 fe 30 7d 09  3b f1 7f e5 83 fe 41 7e  |9....0}.;.....A~|
000008d0: e0 8b c2 88 85 b2 0d 47  83 ff 08 7c d4 c6 06 bb  |.......G...|....|
000008e0: 0d 00 68 f8 01 9a dc 08  04 01 83 c4 02 68 b2 0d  |..h..........h..|
000008f0: 9a a6 2d 04 01 83 c4 02  68 b2 0d 68 0a 02 68 0e  |..-.....h..h..h.|
00000900: 02 68 4e 0d 9a c0 1b 04  01 83 c4 08 68 4e 0d 9a  |.hN.........hN..|
00000910: e8 28 04 01 83 c4 02 68  14 02 9a dc 08 04 01 83  |.(.....h........|
00000920: c4 02 a1 42 00 05 80 00  50 68 16 02 0e e8 68 00  |...B....Ph....h.|
00000930: 83 c4 04 68 1f 02 9a dc  08 04 01 83 c4 02 a1 42  |...h...........B|
00000940: 00 05 70 00 50 68 21 02  0e e8 4c 00 83 c4 04 68  |..p.Ph!...L....h|
00000950: 2a 02 9a dc 08 04 01 83  c4 02 68 2c 02 9a dc 08  |*.........h,....|
00000960: 04 01 83 c4 02 68 2e 02  68 37 02 68 40 02 68 49  |.....h..h7.h@.hI|
00000970: 02 68 4e 0d 9a c0 1b 04  01 83 c4 0a 68 4e 0d 9a  |.hN.........hN..|
00000980: e8 28 04 01 83 c4 02 68  52 02 9a dc 08 04 01 83  |.(.....hR.......|
00000990: c4 02 33 c0 5e 5f cb 90  c8 08 00 00 57 56 8b 76  |..3.^_......WV.v|
000009a0: 08 68 54 02 ff 76 06 9a  de 06 04 01 83 c4 04 89  |.hT..v..........|
000009b0: 46 fa 68 88 13 9a a1 2c  04 01 83 c4 02 8b f8 6a  |F.h....,.......j|
000009c0: 00 66 ff 34 ff 36 ea 0c  9a c4 19 04 01 83 c4 08  |.f.4.6..........|
000009d0: 66 b9 88 13 00 00 66 8b  44 04 66 99 66 f7 f9 66  |f.....f.D.f.f..f|
000009e0: 8b d0 66 c1 ea 10 89 46  fe 66 b9 88 13 00 00 66  |..f....F.f.....f|
000009f0: 8b 44 04 66 99 66 f7 f9  66 8b c2 66 c1 ea 10 89  |.D.f.f..f..f....|
00000a00: 46 f8 8b f7 8b 7e fe eb  26 90 ff 36 ea 0c 66 68  |F....~..&..6..fh|
00000a10: 01 00 88 13 56 9a f4 06  04 01 83 c4 08 ff 76 fa  |....V.........v.|
00000a20: 66 68 01 00 88 13 56 9a  d8 07 04 01 83 c4 08 8b  |fh....V.........|
00000a30: c7 4f 0b c0 75 d4 8b 7e  fa ff 36 ea 0c ff 76 f8  |.O..u..~..6...v.|
00000a40: 6a 01 56 9a f4 06 04 01  83 c4 08 57 ff 76 f8 6a  |j.V........W.v.j|
00000a50: 01 56 9a d8 07 04 01 83  c4 08 56 9a 80 2c 04 01  |.V........V..,..|
00000a60: 83 c4 02 57 9a f2 05 04  01 83 c4 02 5e 5f c9 cb  |...W........^_..|
00000a70: c8 0c 00 00 57 56 68 57  02 9a dc 08 04 01 83 c4  |....WVhW........|
00000a80: 02 c6 06 47 00 00 80 3e  dc 0c 00 0f 84 71 01 80  |...G...>.....q..|
00000a90: 3e 46 00 00 74 45 bf ee  0c be 06 0d 8c d9 8e c1  |>F..tE..........|
00000aa0: b9 ff ff 33 c0 f2 ae f7  d1 2b f9 f3 a6 74 05 1b  |...3.....+...t..|
00000ab0: c0 1d ff ff 0b c0 7e 23  bf de 0c be ee 0c b9 ff  |......~#........|
00000ac0: ff 33 c0 f2 ae f7 d1 2b  f9 f3 a6 74 05 1b c0 1d  |.3.....+...t....|
00000ad0: ff ff 0b c0 7f 05 c6 06  47 00 01 a0 07 0d 98 50  |........G......P|
00000ae0: a0 06 0d 98 50 68 71 02  8d 46 fc 50 9a c0 1b 04  |....Phq..F.P....|
00000af0: 01 83 c4 08 a0 09 0d 98  50 a0 08 0d 98 50 68 76  |........P....Phv|
00000b00: 02 8d 46 f8 50 9a c0 1b  04 01 83 c4 08 a0 0b 0d  |..F.P...........|
00000b10: 98 50 a0 0a 0d 98 50 68  7b 02 8d 46 f4 50 9a c0  |.P....Ph{..F.P..|
00000b20: 1b 04 01 83 c4 08 68 80  02 9a dc 08 04 01 83 c4  |......h.........|
00000b30: 02 68 36 0d 68 98 02 9a  dc 08 04 01 83 c4 04 68  |.h6.h..........h|
00000b40: 9b 02 9a dc 08 04 01 83  c4 02 8d 46 f4 50 9a 82  |...........F.P..|
00000b50: 18 04 01 83 c4 02 50 8d  46 f8 50 9a 82 18 04 01  |......P.F.P.....|
00000b60: 83 c4 02 50 8d 46 fc 50  9a 82 18 04 01 83 c4 02  |...P.F.P........|
00000b70: 50 68 ab 02 68 1e 0d 9a  c0 1b 04 01 83 c4 0a 68  |Ph..h..........h|
00000b80: 1e 0d 68 b4 02 9a dc 08  04 01 83 c4 04 bf ee 0c  |..h.............|
00000b90: be 06 0d 8c d9 8e c1 b9  ff ff 33 c0 f2 ae f7 d1  |..........3.....|
00000ba0: 2b f9 f3 a6 74 05 1b c0  1d ff ff 0b c0 7e 07 68  |+...t........~.h|
00000bb0: b7 02 e9 a9 01 90 bf ee  0c be 06 0d b9 ff ff 33  |...............3|
00000bc0: c0 f2 ae f7 d1 2b f9 f3  a6 74 05 1b c0 1d ff ff  |.....+...t......|
00000bd0: 0b c0 75 06 68 b9 02 e9  84 01 bf ee 0c be 06 0d  |..u.h...........|
00000be0: b9 ff ff 33 c0 f2 ae f7  d1 2b f9 f3 a6 74 05 1b  |...3.....+...t..|
00000bf0: c0 1d ff ff 0b c0 0f 8d  6c 01 68 d7 02 e9 5e 01  |........l.h...^.|
00000c00: 68 05 03 9a dc 08 04 01  83 c4 02 80 3e ee 0c 58  |h...........>..X|
00000c10: 75 17 80 3e 06 0d 58 74  10 a0 06 0d 98 50 9a 06  |u..>..Xt.....P..|
00000c20: 19 04 01 83 c4 02 a2 06  0d 80 3e 46 00 00 74 45  |..........>F..tE|
00000c30: bf ee 0c be 06 0d 8c d9  8e c1 b9 ff ff 33 c0 f2  |.............3..|
00000c40: ae f7 d1 2b f9 f3 a6 74  05 1b c0 1d ff ff 0b c0  |...+...t........|
00000c50: 7e 23 bf de 0c be ee 0c  b9 ff ff 33 c0 f2 ae f7  |~#.........3....|
00000c60: d1 2b f9 f3 a6 74 05 1b  c0 1d ff ff 0b c0 7f 05  |.+...t..........|
00000c70: c6 06 47 00 01 68 07 03  9a dc 08 04 01 83 c4 02  |..G..h..........|
00000c80: 68 09 03 9a dc 08 04 01  83 c4 02 68 ee 0c 68 1d  |h..........h..h.|
00000c90: 03 9a dc 08 04 01 83 c4  04 bf ee 0c be 06 0d 8c  |................|
00000ca0: d9 8e c1 b9 ff ff 33 c0  f2 ae f7 d1 2b f9 f3 a6  |......3.....+...|
00000cb0: 74 05 1b c0 1d ff ff 0b  c0 7e 2d a0 06 0d 98 50  |t........~-....P|
00000cc0: 9a 28 19 04 01 83 c4 02  a2 06 0d 68 20 03 9a dc  |.(.........h ...|
00000cd0: 08 04 01 83 c4 02 68 06  0d 68 34 03 9a dc 08 04  |......h..h4.....|
00000ce0: 01 83 c4 04 5e 5f c9 cb  bf ee 0c be 06 0d b9 ff  |....^_..........|
00000cf0: ff 33 c0 f2 ae f7 d1 2b  f9 f3 a6 74 05 1b c0 1d  |.3.....+...t....|
00000d00: ff ff 0b c0 75 1e 68 38  03 9a dc 08 04 01 83 c4  |....u.h8........|
00000d10: 02 68 06 0d 68 4c 03 9a  dc 08 04 01 83 c4 04 68  |.h..hL.........h|
00000d20: 4f 03 eb 3a bf ee 0c be  06 0d b9 ff ff 33 c0 f2  |O..:.........3..|
00000d30: ae f7 d1 2b f9 f3 a6 74  05 1b c0 1d ff ff 0b c0  |...+...t........|
00000d40: 7d 24 68 6c 03 9a dc 08  04 01 83 c4 02 68 06 0d  |}$hl.........h..|
00000d50: 68 80 03 9a dc 08 04 01  83 c4 04 68 83 03 9a dc  |h..........h....|
00000d60: 08 04 01 83 c4 02 5e 5f  c9 cb 83 3e 48 00 00 0f  |......^_...>H...|
00000d70: 85 a7 00 83 3e 52 00 00  0f 85 9e 00 68 cb 03 9a  |....>R......h...|
00000d80: dc 08 04 01 83 c4 02 68  e5 03 9a dc 08 04 01 83  |.......h........|
00000d90: c4 02 9a 7e 2d 04 01 a2  ec 0c 0a c0 0f 84 89 00  |...~-...........|
00000da0: 3c 79 74 70 3c 59 74 6c  ff 36 ea 0c 9a f2 05 04  |....|
00000e30: 04 01 83 c4 02 a1 42 00  05 90 00 50 68 41 04 0e  |......B....PhA..|
00000e40: e8 55 fb 83 c4 04 68 4c  04 9a dc 08 04 01 83 c4  |.U....hL........|
00000e50: 02 a1 42 00 05 a0 00 50  68 4e 04 0e e8 39 fb 83  |..B....PhN...9..|
00000e60: c4 04 68 5a 04 9a dc 08  04 01 83 c4 02 ff 36 ea  |..hZ..........6.|
00000e70: 0c 9a f2 05 04 01 83 c4  02 80 3e 46 00 00 74 10  |..........>F..t.|
00000e80: 80 3e 47 00 00 74 09 b8  7d 00 e6 70 33 c0 e6 71  |.>G..t..}..p3..q|
00000e90: 83 3e 4a 00 00 74 35 68  5e 04 68 c4 0c 68 6a 04  |.>J..t5h^.h..hj.|
00000ea0: 68 75 04 68 4e 0d 9a c0  1b 04 01 83 c4 0a 68 4e  |hu.hN.........hN|
00000eb0: 0d 9a e8 28 04 01 83 c4  02 68 7e 04 68 8a 04 68  |...(.....h~.h..h|
00000ec0: 4e 0d 9a c0 1b 04 01 83  c4 06 eb 43 83 3e 4c 00  |N..........C.>L.|
00000ed0: 00 74 0f 68 8d 04 68 c4  0c 68 96 04 68 a1 04 eb  |.t.h..h..h..h...|
00000ee0: 23 90 83 3e 50 00 00 74  0f 68 aa 04 68 c4 0c 68  |#..>P..t.h..h..h|
00000ef0: b3 04 68 be 04 eb 0d 90  68 c7 04 68 c4 0c 68 cd  |..h.....h..h..h.|
00000f00: 04 68 d8 04 68 4e 0d 9a  c0 1b 04 01 83 c4 0a 68  |.h..hN.........h|
00000f10: 4e 0d 9a e8 28 04 01 83  c4 02 68 e1 04 9a dc 08  |N...(.....h.....|
00000f20: 04 01 83 c4 02 68 fb 04  9a 58 2d 04 01 83 c4 02  |.....h...X-.....|
00000f30: 68 04 05 9a 58 2d 04 01  83 c4 02 68 10 05 9a 58  |h...X-.....h...X|
00000f40: 2d 04 01 83 c4 02 68 c4  0c 9a 58 2d 04 01 83 c4  |-.....h...X-....|
00000f50: 02 68 1b 05 9a dc 08 04  01 83 c4 02 68 1e 05 68  |.h..........h..h|
00000f60: 23 05 68 4e 0d 9a c0 1b  04 01 83 c4 06 68 4e 0d  |#.hN.........hN.|
00000f70: 9a e8 28 04 01 83 c4 02  68 b2 0d 9a ba 2d 04 01  |..(.....h....-..|
00000f80: 83 c4 02 68 27 05 9a dc  08 04 01 83 c4 02 83 3e  |...h'..........>|
00000f90: 48 00 00 74 0b 6a 01 9a  e3 01 04 01 83 c4 02 cb  |H..t.j..........|
00000fa0: 83 3e 52 00 00 75 3c 83  3e 54 00 00 75 e7 68 2c  |.>R..u<.>T..u.h,|
00000fb0: 05 9a dc 08 04 01 83 c4  02 68 44 05 9a dc 08 04  |.........hD.....|
00000fc0: 01 83 c4 02 68 4f 05 9a  dc 08 04 01 83 c4 02 9a  |....hO..........|
00000fd0: 7e 2d 04 01 a2 ec 0c 0a  c0 74 0c 3c 79 74 04 3c  |~-.......t.

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4afd0421
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x39000
SizeOfInitializedData	0x1c000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2c589
BaseOfCode	0xa000
BaseOfData	0x43000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x63000
SizeOfHeaders	0xa000
CheckSum	0x67f10
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0xa000	0x38414	0x39000	R-X CODE
.rdata	0x43000	0xe5bc	0xf000	R-- IDATA
.data	0x52000	0x6538	0x3000	RW- IDATA
.rsrc	0x59000	0x9768	0xa000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x4f89c	0xdc
RESOURCE	0x59000	0x9768
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x48ed0	0x40
Bound_IAT	0	0
IAT	0x43000	0x584
Delay_IAT	0x4f814	0x40
CLR_Header	0	0

show previews

type	name	size	cp
CURSOR	#10	308	1252
CURSOR	#11	180	1252
CURSOR	#12	308	1252
CURSOR	#13	308	1252
CURSOR	#14	308	1252
CURSOR	#15	308	1252
CURSOR	#16	308	1252
CURSOR	#17	308	1252
CURSOR	#18	308	1252
CURSOR	#19	308	1252
CURSOR	#20	308	1252
CURSOR	#21	308	1252
CURSOR	#22	308	1252
CURSOR	#23	308	1252
CURSOR	#24	308	1252
CURSOR	#25	308	1252
BITMAP	#30994	184	1252
BITMAP	#30996	324	1252
ICON	#1	1640	1252
ICON	#2	744	1252
ICON	#3	296	1252
ICON	#4	3752	1252
ICON	#5	2216	1252
ICON	#6	1384	1252
ICON	#7	7336	1252
ICON	#8	3240	1252
ICON	#9	872	1252
DIALOG	#102	748	1252
DIALOG	#103	350	1252
DIALOG	#30721	232	1252
DIALOG	#30734	52	1252
STRING	#3841	130	1252
STRING	#3842	42	1252
STRING	#3843	402	1252
STRING	#3857	1250	1252
STRING	#3858	794	1252
STRING	#3859	732	1252
STRING	#3860	138	1252
STRING	#3865	172	1252
STRING	#3866	222	1252
STRING	#3867	1220	1252
STRING	#3868	612	1252
STRING	#3869	44	1252
STRING	#3887	66	1252
GROUP_CURSOR	#30977	34	1252
GROUP_CURSOR	#30998	20	1252
GROUP_CURSOR	#30999	20	1252
GROUP_CURSOR	#31000	20	1252
GROUP_CURSOR	#31001	20	1252
GROUP_CURSOR	#31002	20	1252
GROUP_CURSOR	#31003	20	1252
GROUP_CURSOR	#31004	20	1252
GROUP_CURSOR	#31005	20	1252
GROUP_CURSOR	#31006	20	1252
GROUP_CURSOR	#31007	20	1252
GROUP_CURSOR	#31008	20	1252
GROUP_CURSOR	#31009	20	1252
GROUP_CURSOR	#31010	20	1252
GROUP_CURSOR	#31011	20	1252
GROUP_ICON	#128	132	1252
VERSION	#1	716	1252
MANIFEST	#1	373	1252

id	lang	string
61440	1033	Open
61441	1033	Save As
61442	1033	All Files (.)
61443	1033	Untitled
61446	1033	an unnamed file
61457	1033	&Hide
61472	1033	No error message is available.
61473	1033	An unsupported operation was attempted.
61474	1033	A required resource was unavailable.
61475	1033	Out of memory.
61476	1033	An unknown error has occurred.
61477	1033	An invalid argument was encountered.
61696	1033	Invalid filename.
61697	1033	Failed to open document.
61698	1033	Failed to save document.
61699	1033	Save changes to %1?
61700	1033	Failed to create empty document.
61701	1033	The file is too large to open.
61702	1033	Could not start print job.
61703	1033	Failed to launch help.
61704	1033	Internal application error.
61705	1033	Command failed.
61706	1033	Insufficient memory to perform operation.
61707	1033	System registry entries have been removed and the INI file (if any) was deleted.
61708	1033	Not all of the system registry entries (or INI file) were removed.
61709	1033	This program requires the file %s, which was not found on this system.
61710	1033	This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
61712	1033	Please enter an integer.
61713	1033	Please enter a number.
61714	1033	Please enter an integer between %1 and %2.
61715	1033	Please enter a number between %1 and %2.
61716	1033	Please enter no more than %1 characters.
61717	1033	Please select a button.
61718	1033	Please enter an integer between 0 and 255.
61719	1033	Please enter a positive integer.
61720	1033	Please enter a date and/or time.
61721	1033	Please enter a currency.
61722	1033	Please enter a GUID.
61723	1033	Please enter a time.
61724	1033	Please enter a date.
61728	1033	Unexpected file format.
61729	1033	%1 Cannot find this file. Please verify that the correct path and file name are given.
61730	1033	Destination disk drive is full.
61731	1033	Unable to read from %1, it is opened by someone else.
61732	1033	Unable to write to %1, it is read-only or opened by someone else.
61733	1033	An unexpected error occurred while reading %1.
61734	1033	An unexpected error occurred while writing %1.
61744	1033	%1: %2 Continue running script?
61745	1033	Dispatch exception: %1
61836	1033	Unable to read write-only property.
61837	1033	Unable to write read-only property.
61840	1033	Unable to load mail system support.
61841	1033	Mail system DLL is invalid.
61842	1033	Send Mail failed to send message.
61856	1033	No error occurred.
61857	1033	An unknown error occurred while accessing %1.
61858	1033	%1 was not found.
61859	1033	%1 contains an invalid path.
61860	1033	%1 could not be opened because there are too many open files.
61861	1033	Access to %1 was denied.
61862	1033	An invalid file handle was associated with %1.
61863	1033	%1 could not be removed because it is the current directory.
61864	1033	%1 could not be created because the directory is full.
61865	1033	Seek failed on %1
61866	1033	A hardware I/O error was reported while accessing %1.
61867	1033	A sharing violation occurred while accessing %1.
61868	1033	A locking violation occurred while accessing %1.
61869	1033	Disk full while accessing %1.
61870	1033	An attempt was made to access %1 past its end.
61872	1033	No error occurred.
61873	1033	An unknown error occurred while accessing %1.
61874	1033	An attempt was made to write to the reading %1.
61875	1033	An attempt was made to access %1 past its end.
61876	1033	An attempt was made to read from the writing %1.
61877	1033	%1 has a bad format.
61878	1033	%1 contained an unexpected object.
61879	1033	%1 contains an incorrect schema.
61888	1033	pixels
62177	1033	Uncheck
62178	1033	Check
62179	1033	Mixed

module_name	hint	ord	function_name
KERNEL32.dll	350		GetFileAttributesA
KERNEL32.dll	357		GetFileTime
KERNEL32.dll	479		GetTickCount
KERNEL32.dll	727		RtlUnwind
KERNEL32.dll	458		GetSystemTimeAsFileTime
KERNEL32.dll	534		HeapFree
KERNEL32.dll	185		ExitProcess
KERNEL32.dll	528		HeapAlloc
KERNEL32.dll	862		TerminateProcess
KERNEL32.dll	878		UnhandledExceptionFilter
KERNEL32.dll	842		SetUnhandledExceptionFilter
KERNEL32.dll	569		IsDebuggerPresent
KERNEL32.dll	538		HeapReAlloc
KERNEL32.dll	679		RaiseException
KERNEL32.dll	902		VirtualProtect
KERNEL32.dll	897		VirtualAlloc
KERNEL32.dll	453		GetSystemInfo
KERNEL32.dll	904		VirtualQuery
KERNEL32.dll	272		GetCommandLineA
KERNEL32.dll	419		GetProcessHeap
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	540		HeapSize
KERNEL32.dll	532		HeapDestroy
KERNEL32.dll	530		HeapCreate
KERNEL32.dll	899		VirtualFree
KERNEL32.dll	196		FileTimeToLocalFileTime
KERNEL32.dll	253		GetACP
KERNEL32.dll	580		LCMapStringA
KERNEL32.dll	581		LCMapStringW
KERNEL32.dll	441		GetStdHandle
KERNEL32.dll	290		GetConsoleCP
KERNEL32.dll	307		GetConsoleMode
KERNEL32.dll	246		FreeEnvironmentStringsA
KERNEL32.dll	341		GetEnvironmentStrings
KERNEL32.dll	247		FreeEnvironmentStringsW
KERNEL32.dll	343		GetEnvironmentStringsW
KERNEL32.dll	804		SetHandleCount
KERNEL32.dll	358		GetFileType
KERNEL32.dll	675		QueryPerformanceCounter
KERNEL32.dll	442		GetStringTypeA
KERNEL32.dll	445		GetStringTypeW
KERNEL32.dll	482		GetTimeZoneInformation
KERNEL32.dll	823		SetStdHandle
KERNEL32.dll	921		WriteConsoleA
KERNEL32.dll	309		GetConsoleOutputCP
KERNEL32.dll	931		WriteConsoleW
KERNEL32.dll	787		SetEnvironmentVariableA
KERNEL32.dll	789		SetErrorMode
KERNEL32.dll	197		FileTimeToSystemTime
KERNEL32.dll	83		CreateFileA
KERNEL32.dll	361		GetFullPathNameA
KERNEL32.dll	491		GetVolumeInformationA
KERNEL32.dll	210		FindFirstFileA
KERNEL32.dll	206		FindClose
KERNEL32.dll	147		DuplicateHandle
KERNEL32.dll	474		GetThreadLocale
KERNEL32.dll	355		GetFileSize
KERNEL32.dll	784		SetEndOfFile
KERNEL32.dll	879		UnlockFile
KERNEL32.dll	611		LockFile
KERNEL32.dll	238		FlushFileBuffers
KERNEL32.dll	795		SetFilePointer
KERNEL32.dll	932		WriteFile
KERNEL32.dll	693		ReadFile
KERNEL32.dll	937		WritePrivateProfileStringA
KERNEL32.dll	403		GetOEMCP
KERNEL32.dll	260		GetCPInfo
KERNEL32.dll	556		InterlockedIncrement
KERNEL32.dll	868		TlsFree
KERNEL32.dll	129		DeleteCriticalSection
KERNEL32.dll	607		LocalReAlloc
KERNEL32.dll	870		TlsSetValue
KERNEL32.dll	867		TlsAlloc
KERNEL32.dll	547		InitializeCriticalSection
KERNEL32.dll	514		GlobalHandle
KERNEL32.dll	518		GlobalReAlloc
KERNEL32.dll	152		EnterCriticalSection
KERNEL32.dll	869		TlsGetValue
KERNEL32.dll	593		LeaveCriticalSection
KERNEL32.dll	600		LocalAlloc
KERNEL32.dll	510		GlobalFlags
KERNEL32.dll	552		InterlockedDecrement
KERNEL32.dll	382		GetModuleFileNameW
KERNEL32.dll	243		FormatMessageA
KERNEL32.dll	604		LocalFree
KERNEL32.dll	628		MulDiv
KERNEL32.dll	323		GetCurrentProcessId
KERNEL32.dll	325		GetCurrentThread
KERNEL32.dll	63		ConvertDefaultLocale
KERNEL32.dll	163		EnumResourceLanguagesA
KERNEL32.dll	372		GetLocaleInfoA
KERNEL32.dll	960		lstrcmpA
KERNEL32.dll	504		GlobalAlloc
KERNEL32.dll	326		GetCurrentThreadId
KERNEL32.dll	512		GlobalGetAtomNameA
KERNEL32.dll	502		GlobalAddAtomA
KERNEL32.dll	507		GlobalFindAtomA
KERNEL32.dll	506		GlobalDeleteAtom
KERNEL32.dll	248		FreeLibrary
KERNEL32.dll	808		SetLastError
KERNEL32.dll	961		lstrcmpW
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	515		GlobalLock
KERNEL32.dll	522		GlobalUnlock
KERNEL32.dll	511		GlobalFree
KERNEL32.dll	250		FreeResource
KERNEL32.dll	59		CompareStringW
KERNEL32.dll	58		CompareStringA
KERNEL32.dll	488		GetVersion
KERNEL32.dll	553		InterlockedExchange
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	75		CreateDirectoryA
KERNEL32.dll	854		Sleep
KERNEL32.dll	67		CopyFileA
KERNEL32.dll	131		DeleteFileA
KERNEL32.dll	594		LoadLibraryA
KERNEL32.dll	416		GetProcAddress
KERNEL32.dll	778		SetCurrentDirectoryA
KERNEL32.dll	966		lstrcpyA
KERNEL32.dll	102		CreateProcessA
KERNEL32.dll	917		WinExec
KERNEL32.dll	973		lstrlenW
KERNEL32.dll	972		lstrlenA
KERNEL32.dll	629		MultiByteToWideChar
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	227		FindResourceA
KERNEL32.dll	599		LoadResource
KERNEL32.dll	613		LockResource
KERNEL32.dll	853		SizeofResource
KERNEL32.dll	369		GetLastError
KERNEL32.dll	489		GetVersionExA
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	52		CloseHandle
USER32.dll	404		InvalidateRgn
USER32.dll	322		GetNextDlgGroupItem
USER32.dll	478		MessageBeep
USER32.dll	691		UnregisterClassA
USER32.dll	538		RegisterClipboardFormatA
USER32.dll	517		PostThreadMessageA
USER32.dll	151		DestroyMenu
USER32.dll	442		LoadCursorA
USER32.dll	347		GetSysColorBrush
USER32.dll	639		SetWindowContextHelpId
USER32.dll	469		MapDialogRect
USER32.dll	200		EndPaint
USER32.dll	13		BeginPaint
USER32.dll	364		GetWindowDC
USER32.dll	554		ReleaseDC
USER32.dll	268		GetDC
USER32.dll	64		ClientToScreen
USER32.dll	381		GrayStringA
USER32.dll	189		DrawTextExA
USER32.dll	188		DrawTextA
USER32.dll	667		TabbedTextOutA
USER32.dll	379		GetWindowThreadProcessId
USER32.dll	589		SetCursor
USER32.dll	314		GetMessageA
USER32.dll	682		TranslateMessage
USER32.dll	267		GetCursorPos
USER32.dll	708		ValidateRect
USER32.dll	516		PostQuitMessage
USER32.dll	658		ShowWindow
USER32.dll	492		MoveWindow
USER32.dll	646		SetWindowTextA
USER32.dll	417		IsDialogMessageA
USER32.dll	594		SetDlgItemInt
USER32.dll	609		SetMenuItemBitmaps
USER32.dll	403		InvalidateRect
USER32.dll	440		LoadBitmapA
USER32.dll	487		ModifyMenuA
USER32.dll	311		GetMenuState
USER32.dll	194		EnableMenuItem
USER32.dll	57		CheckMenuItem
USER32.dll	551		RegisterWindowMessageA
USER32.dll	566		SendDlgItemMessageA
USER32.dll	721		WinHelpA
USER32.dll	414		IsChild
USER32.dll	243		GetCapture
USER32.dll	650		SetWindowsHookExA
USER32.dll	26		CallNextHookEx
USER32.dll	250		GetClassLongA
USER32.dll	252		GetClassNameA
USER32.dll	618		SetPropA
USER32.dll	330		GetPropA
USER32.dll	556		RemovePropA
USER32.dll	278		GetFocus
USER32.dll	598		SetFocus
USER32.dll	375		GetWindowTextA
USER32.dll	279		GetForegroundWindow
USER32.dll	296		GetLastActivePopup
USER32.dll	161		DispatchMessageA
USER32.dll	355		GetTopWindow
USER32.dll	686		UnhookWindowsHookEx
USER32.dll	317		GetMessageTime
USER32.dll	316		GetMessagePos
USER32.dll	512		PeekMessageA
USER32.dll	474		MapWindowPoints
USER32.dll	289		GetKeyState
USER32.dll	599		SetForegroundWindow
USER32.dll	433		IsWindowVisible
USER32.dll	700		UpdateWindow
USER32.dll	300		GetMenu
USER32.dll	225		ExitWindowsEx
USER32.dll	196		EnableWindow
USER32.dll	182		DrawIcon
USER32.dll	571		SendMessageA
USER32.dll	422		IsIconic
USER32.dll	255		GetClientRect
USER32.dll	514		PostMessageA
USER32.dll	345		GetSubMenu
USER32.dll	307		GetMenuItemID
USER32.dll	306		GetMenuItemCount
USER32.dll	479		MessageBoxA
USER32.dll	96		CreateWindowExA
USER32.dll	247		GetClassInfoExA
USER32.dll	246		GetClassInfoA
USER32.dll	534		RegisterClassA
USER32.dll	346		GetSysColor
USER32.dll	2		AdjustWindowRectEx
USER32.dll	223		EqualRect
USER32.dll	74		CopyRect
USER32.dll	620		SetRect
USER32.dll	425		IsRectEmpty
USER32.dll	70		CopyAcceleratorTableA
USER32.dll	42		CharNextA
USER32.dll	553		ReleaseCapture
USER32.dll	580		SetCapture
USER32.dll	302		GetMenuCheckMarkDimensions
USER32.dll	634		SetTimer
USER32.dll	437		KillTimer
USER32.dll	446		LoadIconA
USER32.dll	349		GetSystemMetrics
USER32.dll	52		CharUpperA
USER32.dll	198		EndDialog
USER32.dll	323		GetNextDlgTabItem
USER32.dll	325		GetParent
USER32.dll	430		IsWindowEnabled
USER32.dll	273		GetDlgItem
USER32.dll	366		GetWindowLongA
USER32.dll	429		IsWindow
USER32.dll	153		DestroyWindow
USER32.dll	82		CreateDialogIndirectParamA
USER32.dll	579		SetActiveWindow
USER32.dll	235		GetActiveWindow
USER32.dll	270		GetDesktopWindow
USER32.dll	362		GetWindow
USER32.dll	372		GetWindowRect
USER32.dll	371		GetWindowPlacement
USER32.dll	665		SystemParametersInfoA
USER32.dll	402		IntersectRect
USER32.dll	501		OffsetRect
USER32.dll	643		SetWindowPos
USER32.dll	640		SetWindowLongA
USER32.dll	27		CallWindowProcA
USER32.dll	142		DefWindowProcA
USER32.dll	272		GetDlgCtrlID
USER32.dll	524		PtInRect
USER32.dll	595		SetDlgItemTextA
GDI32.dll	220		ExtSelectClipRgn
GDI32.dll	140		DeleteDC
GDI32.dll	363		GetDeviceCaps
GDI32.dll	76		CreateRectRgnIndirect
GDI32.dll	397		GetMapMode
GDI32.dll	332		GetBkColor
GDI32.dll	431		GetTextColor
GDI32.dll	420		GetRgnBox
GDI32.dll	521		ScaleWindowExtEx
GDI32.dll	578		SetWindowExtEx
GDI32.dll	520		ScaleViewportExtEx
GDI32.dll	574		SetViewportExtEx
GDI32.dll	469		OffsetViewportOrgEx
GDI32.dll	575		SetViewportOrgEx
GDI32.dll	526		SelectObject
GDI32.dll	212		Escape
GDI32.dll	421		GetStockObject
GDI32.dll	590		TextOutA
GDI32.dll	501		RectVisible
GDI32.dll	497		PtVisible
GDI32.dll	450		GetWindowExtEx
GDI32.dll	447		GetViewportExtEx
GDI32.dll	143		DeleteObject
GDI32.dll	555		SetMapMode
GDI32.dll	512		RestoreDC
GDI32.dll	519		SaveDC
GDI32.dll	39		CreateBitmap
GDI32.dll	405		GetObjectA
GDI32.dll	533		SetBkColor
GDI32.dll	572		SetTextColor
GDI32.dll	352		GetClipBox
GDI32.dll	221		ExtTextOutA
comdlg32.dll	7		GetFileTitleA
WINSPOOL.DRV	70		DocumentPropertiesA
WINSPOOL.DRV	125		OpenPrinterA
WINSPOOL.DRV	27		ClosePrinter
ADVAPI32.dll	516		RegSetValueExA
ADVAPI32.dll	465		RegCreateKeyExA
ADVAPI32.dll	502		RegQueryValueA
ADVAPI32.dll	491		RegOpenKeyA
ADVAPI32.dll	477		RegEnumKeyA
ADVAPI32.dll	468		RegDeleteKeyA
ADVAPI32.dll	492		RegOpenKeyExA
ADVAPI32.dll	503		RegQueryValueExA
ADVAPI32.dll	459		RegCloseKey
ADVAPI32.dll	335		LookupPrivilegeValueA
ADVAPI32.dll	428		OpenProcessToken
ADVAPI32.dll	28		AdjustTokenPrivileges
SHLWAPI.dll	49		PathFindFileNameA
SHLWAPI.dll	125		PathStripToRootA
SHLWAPI.dll	47		PathFindExtensionA
SHLWAPI.dll	85		PathIsUNCA
oledlg.dll		8
ole32.dll	238		OleInitialize
ole32.dll	28		CoFreeUnusedLibraries
ole32.dll	261		OleUninitialize
ole32.dll	125		CreateILockBytesOnHGlobal
ole32.dll	292		StgCreateDocfileOnILockBytes
ole32.dll	305		StgOpenStorageOnILockBytes
ole32.dll	34		CoGetClassObject
ole32.dll	100		CoTaskMemAlloc
ole32.dll	92		CoRevokeClassObject
ole32.dll	101		CoTaskMemFree
ole32.dll	8		CLSIDFromString
ole32.dll	6		CLSIDFromProgID
ole32.dll	59		CoInitialize
ole32.dll	105		CoUninitialize
ole32.dll	61		CoInitializeSecurity
ole32.dll	16		CoCreateInstance
ole32.dll	83		CoRegisterMessageFilter
ole32.dll	233		OleFlushClipboard
ole32.dll	240		OleIsCurrentClipboard
OLEAUT32.dll		8
OLEAUT32.dll		9
OLEAUT32.dll		4
OLEAUT32.dll		2
OLEAUT32.dll		12
OLEAUT32.dll		7
OLEAUT32.dll		150
OLEAUT32.dll		420
OLEAUT32.dll		185
OLEAUT32.dll		184
OLEAUT32.dll		16
OLEAUT32.dll		10
OLEAUT32.dll		6

StringTable 040904B0

FileDescription	RunVista64 MFC Application
FileVersion	1, 0, 0, 1
InternalName	RunVista64
LegalCopyright	Copyright (C) 2008
OriginalFilename	RunVista64.EXE
ProductName	RunVista64 Application
ProductVersion	1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
83b18	307200	EXE	10/26/2009 03:22:06	#
d86fe	91648	EXE	12/02/1997 17:52:51	#
f3bb1	114688	DLL	01/13/2009 06:35:04	#
10fc21	8736	EXE	04/21/2008 03:19:01	#
115709	90112	DLL	01/12/2009 03:48:38	#
12b709	28672	EXE	01/12/2009 03:15:05	#
132709	777366	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 2032543 bytes (1985 KiB)


--
Type = gzip
Offset = 1299521
Physical Size = 733022
Headers Size = 18
Streams = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2010-11-10 18:19:30 .....      4194304       733022  a11.bin
------------------- ----- ------------ ------------  ------------------------
2010-11-10 18:19:30            4194304       733022  1 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] DOS stub size too big (35360), limiting to 0x1000

Aurora-A11.exe-

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Aurora-A11.exe
-