filenameIKEA_Home_Planner-2010.exe
size20470272 (0x1385a00)
md53383ebf998c499121fb032c172c22431
typePE32 executable (GUI) Intel 80386, for MS Windows, WISE installer self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
2592102
9320672
9321799
1099
0025
9530773
9230771
9430521
9030771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x42569939
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x5c00
SizeOfInitializedData0x138fe00
SizeOfUninitializedData0
AddressOfEntryPoint0x4095
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion4.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1399000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x1000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000x5ac20x5c00R-X CODE
.rdata0x70000x189a0x1a00R-- IDATA
.data0x90000x108500x600RW- IDATA
.WISE0x1a0000x13785ed0x1378600RW- IDATA
.rsrc0x13930000x53d80x5400R-- IDATA

Data Directory

typevasize
EXPORT0x87e00xba
IMPORT0x7e8c0xa0
RESOURCE0x13930000x53d8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x70000x1d8
Delay_IAT00
CLR_Header00
typenamesizecp
AVI#11266040
ICON#137520
ICON#222160
ICON#313840
ICON#416400
ICON#57440
ICON#62960
DIALOG#1094420
DIALOG#1104360
DIALOG#1114420
STRING#115840
STRING#23660
GROUP_ICON#108900
VERSION#15880
idlangstring
11033You must have administrator rights to run this installation. Please login as an administrator and re-run this installation.
21033Corrupt installation detected, check source media or re-download.
31033Not enough free temporary disk space.
41033This system must reboot before the installation can begin. After the reboot the installation will restart automatically. Do you want to reboot this system?
51033%s Version %s is already installed. You must uninstall the existing version before installing %s Version %s. Do you want to uninstall the existing version of %s?
61033An attempt to install this product from the Internet has failed, possibly due to a missing Internet connection or server error. Please check your Internet connection and contact the vendor of this product for additional information.
191033The Windows Installer 2.0 runtime can only be installed with Windows NT Service Pack 6 or higher. Please install Windows NT Service Pack 6 and rerun this installation.
module_namehintordfunction_name
WSOCK32.dll116
WSOCK32.dll115
WSOCK32.dll23
WSOCK32.dll9
WSOCK32.dll4
WSOCK32.dll101
WSOCK32.dll111
WSOCK32.dll22
WSOCK32.dll16
WSOCK32.dll21
WSOCK32.dll19
WSOCK32.dll3
WSOCK32.dll10
WSOCK32.dll52
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
KERNEL32.dll479GetVersionExA
KERNEL32.dll947lstrcmpiA
KERNEL32.dll941lstrcatA
KERNEL32.dll950lstrcpyA
KERNEL32.dll956lstrlenA
KERNEL32.dll939_lwrite
KERNEL32.dll786SetFileTime
KERNEL32.dll592LocalFileTimeToFileTime
KERNEL32.dll136DosDateTimeToFileTime
KERNEL32.dll934_lclose
KERNEL32.dll408GetProcAddress
KERNEL32.dll584LoadLibraryA
KERNEL32.dll935_lcreat
KERNEL32.dll404GetPrivateProfileStringA
KERNEL32.dll398GetPrivateProfileIntA
KERNEL32.dll505GlobalLock
KERNEL32.dll494GlobalAlloc
KERNEL32.dll501GlobalFree
KERNEL32.dll512GlobalUnlock
KERNEL32.dll921WritePrivateProfileStringA
KERNEL32.dll441GetSystemDirectoryA
KERNEL32.dll457GetTempFileNameA
KERNEL32.dll459GetTempPathA
KERNEL32.dll239FreeLibrary
KERNEL32.dll124DeleteFileA
KERNEL32.dll936_llseek
KERNEL32.dll944lstrcmpA
KERNEL32.dll938_lread
KERNEL32.dll264GetCommandLineA
KERNEL32.dll46CloseHandle
KERNEL32.dll349GetFileTime
KERNEL32.dll77CreateFileA
KERNEL32.dll241FreeResource
KERNEL32.dll603LockResource
KERNEL32.dll589LoadResource
KERNEL32.dll838SizeofResource
KERNEL32.dll218FindResourceA
KERNEL32.dll175ExitProcess
KERNEL32.dll937_lopen
KERNEL32.dll338GetExitCodeProcess
KERNEL32.dll899WaitForSingleObject
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll776SetErrorMode
KERNEL32.dll618MulDiv
KERNEL32.dll474GetUserDefaultLangID
KERNEL32.dll765SetCurrentDirectoryA
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll178ExpandEnvironmentStringsA
KERNEL32.dll839Sleep
KERNEL32.dll347GetFileSize
KERNEL32.dll774SetEnvironmentVariableA
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll953lstrcpynA
USER32.dll161DispatchMessageA
USER32.dll682TranslateMessage
USER32.dll511PeekMessageA
USER32.dll726wsprintfA
USER32.dll268GetDC
USER32.dll478MessageBoxA
USER32.dll153DestroyWindow
USER32.dll42CharNextA
USER32.dll458LoadStringA
USER32.dll571SendMessageA
USER32.dll273GetDlgItem
USER32.dll203EnumChildWindows
USER32.dll554ReleaseDC
USER32.dll198EndDialog
USER32.dll275GetDlgItemTextA
USER32.dll646SetWindowTextA
USER32.dll595SetDlgItemTextA
USER32.dll85CreateDialogParamA
USER32.dll225ExitWindowsEx
USER32.dll196EnableWindow
USER32.dll658ShowWindow
USER32.dll634SetTimer
USER32.dll158DialogBoxParamA
GDI32.dll363GetDeviceCaps
GDI32.dll143DeleteObject
GDI32.dll57CreateFontA
ADVAPI32.dll461RegCreateKeyExA
ADVAPI32.dll466RegDeleteValueA
ADVAPI32.dll473RegEnumValueA
ADVAPI32.dll427OpenSCManagerA
ADVAPI32.dll62CloseServiceHandle
ADVAPI32.dll426OpenProcessToken
ADVAPI32.dll333LookupPrivilegeValueA
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll492RegQueryValueExA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll491RegQueryValueA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll457RegCloseKey
SHELL32.dll264ShellExecuteExA
ordentry_vafunction_name
10x3b09_LanguageDlg@16
20x3a07_PasswordDlg@16
30x3a5e_ProgressDlg@16
40x292f_UpdateCRC@8
50x1d5f_t1@40
60x1743_t2@12
module_nameSTUB32.EXE
flags0
timestamp2005-04-08 14:46:17
version0.0
ordinal_base1
nFunctions6
nNames6
Names(6)0x8820
Functions(6)0x8808
NameOrdinals(6)0x8838

StringTable 040904E4

CompanyNameIKEA ITXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
FileDescriptionIKEA Home PlannerXXXXXXXXXXXXXXXXXXXXXXXXX
FileVersion2.0.3XXXXXXXXX
LegalCopyrightIKEA ITXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

VS_FIXEDFILEINFO

FileVersion2.0.3.0
ProductVersion2.0.3.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x10001
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
12988a9818BMP(35 x 35)#
1298de994554BMP(500 x 63)#
12b2fe9472312BMP(501 x 314)#
133ebe9162816DLL04/03/2008 05:07:21#
13687e95120DLL04/03/2008 05:47:07#
136abe99728EXE08/22/1997 15:56:30#
136d1e99728EXE08/22/1997 15:56:30#
136fbe961440DLL07/13/2007 13:18:12#
13836186596AVI#
1384fdc2596BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] invalid VS_VERSIONINFO child type "{\x00Y\x00o\x00"