filenameEETechCode.exe
size225280 (0x37000)
md5782a5e1c7ad6de8d53998f34e81c122a
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
001
9521908
93217925
10507
14729927
109782138
9621901
11978296
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4dde3448
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x24000
SizeOfInitializedData0x16000
SizeOfUninitializedData0
AddressOfEntryPoint0x9b6c
BaseOfCode0x1000
BaseOfData0x25000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x3b000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x236670x24000R-X CODE
.rdata0x250000x8d380x9000R-- IDATA
.data0x2e0000x84080x5000RW- IDATA
.rsrc0x370000x35a80x4000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2c2180xf0
RESOURCE0x370000x35a8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x250000x524
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#33080
CURSOR#41800
BITMAP#2656715080
BITMAP#309941840
BITMAP#309953640
BITMAP#309963240
ICON#17440
ICON#22960
DIALOG#1003300
DIALOG#1023100
DIALOG#307212320
STRING#7880
STRING#38411300
STRING#3842420
STRING#38433300
STRING#385712500
STRING#38586740
STRING#38597320
STRING#38651720
STRING#38662220
STRING#386712200
STRING#38686120
STRING#3869440
GROUP_CURSOR#30977340
GROUP_ICON#128340
VERSION#19880
MANIFEST#17460
idlangstring
1011033&About EETechCode...
1021033Date
1031033Code
614401033Open
614411033Save As
614421033All Files (*.*)
614431033Untitled
614461033an unnamed file
614571033&Hide
614721033No error message is available.
614731033An unsupported operation was attempted.
614741033A required resource was unavailable.
614751033Out of memory.
614761033An unknown error has occurred.
616961033Invalid filename.
616971033Failed to open document.
616981033Failed to save document.
616991033Save changes to %1?
617001033Failed to create empty document.
617011033The file is too large to open.
617021033Could not start print job.
617031033Failed to launch help.
617041033Internal application error.
617051033Command failed.
617061033Insufficient memory to perform operation.
617071033System registry entries have been removed and the INI file (if any) was deleted.
617081033Not all of the system registry entries (or INI file) were removed.
617091033This program requires the file %s, which was not found on this system.
617101033This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617121033Please enter an integer.
617131033Please enter a number.
617141033Please enter an integer between %1 and %2.
617151033Please enter a number between %1 and %2.
617161033Please enter no more than %1 characters.
617171033Please select a button.
617181033Please enter an integer between 0 and 255.
617191033Please enter a positive integer.
617201033Please enter a date and/or time.
617211033Please enter a currency.
617281033Unexpected file format.
617291033%1 Cannot find this file. Please verify that the correct path and file name are given.
617301033Destination disk drive is full.
617311033Unable to read from %1, it is opened by someone else.
617321033Unable to write to %1, it is read-only or opened by someone else.
617331033An unexpected error occurred while reading %1.
617341033An unexpected error occurred while writing %1.
618361033Unable to read write-only property.
618371033Unable to write read-only property.
618401033Unable to load mail system support.
618411033Mail system DLL is invalid.
618421033Send Mail failed to send message.
618561033No error occurred.
618571033An unknown error occurred while accessing %1.
618581033%1 was not found.
618591033%1 contains an invalid path.
618601033%1 could not be opened because there are too many open files.
618611033Access to %1 was denied.
618621033An invalid file handle was associated with %1.
618631033%1 could not be removed because it is the current directory.
618641033%1 could not be created because the directory is full.
618651033Seek failed on %1
618661033A hardware I/O error was reported while accessing %1.
618671033A sharing violation occurred while accessing %1.
618681033A locking violation occurred while accessing %1.
618691033Disk full while accessing %1.
618701033An attempt was made to access %1 past its end.
618721033No error occurred.
618731033An unknown error occurred while accessing %1.
618741033An attempt was made to write to the reading %1.
618751033An attempt was made to access %1 past its end.
618761033An attempt was made to read from the writing %1.
618771033%1 has a bad format.
618781033%1 contained an unexpected object.
618791033%1 contains an incorrect schema.
618881033pixels
module_namehintordfunction_name
KERNEL32.dll518HeapAlloc
KERNEL32.dll669RaiseException
KERNEL32.dll472GetTimeZoneInformation
KERNEL32.dll245GetACP
KERNEL32.dll528HeapReAlloc
KERNEL32.dll530HeapSize
KERNEL32.dll866UnhandledExceptionFilter
KERNEL32.dll237FreeEnvironmentStringsA
KERNEL32.dll238FreeEnvironmentStringsW
KERNEL32.dll333GetEnvironmentStrings
KERNEL32.dll335GetEnvironmentStringsW
KERNEL32.dll793SetHandleCount
KERNEL32.dll433GetStdHandle
KERNEL32.dll350GetFileType
KERNEL32.dll336GetEnvironmentVariableA
KERNEL32.dll479GetVersionExA
KERNEL32.dll522HeapDestroy
KERNEL32.dll520HeapCreate
KERNEL32.dll888VirtualFree
KERNEL32.dll556IsBadWritePtr
KERNEL32.dll829SetUnhandledExceptionFilter
KERNEL32.dll570LCMapStringA
KERNEL32.dll571LCMapStringW
KERNEL32.dll434GetStringTypeA
KERNEL32.dll437GetStringTypeW
KERNEL32.dll553IsBadReadPtr
KERNEL32.dll550IsBadCodePtr
KERNEL32.dll812SetStdHandle
KERNEL32.dll52CompareStringA
KERNEL32.dll53CompareStringW
KERNEL32.dll776SetEnvironmentVariableA
KERNEL32.dll524HeapFree
KERNEL32.dll849TerminateProcess
KERNEL32.dll426GetProfileStringA
KERNEL32.dll175ExitProcess
KERNEL32.dll264GetCommandLineA
KERNEL32.dll431GetStartupInfoA
KERNEL32.dll716RtlUnwind
KERNEL32.dll349GetFileTime
KERNEL32.dll347GetFileSize
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll469GetTickCount
KERNEL32.dll234FormatMessageA
KERNEL32.dll353GetFullPathNameA
KERNEL32.dll481GetVolumeInformationA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll773SetEndOfFile
KERNEL32.dll867UnlockFile
KERNEL32.dll601LockFile
KERNEL32.dll229FlushFileBuffers
KERNEL32.dll784SetFilePointer
KERNEL32.dll919WriteFile
KERNEL32.dll683ReadFile
KERNEL32.dll77CreateFileA
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll140DuplicateHandle
KERNEL32.dll778SetErrorMode
KERNEL32.dll395GetOEMCP
KERNEL32.dll252GetCPInfo
KERNEL32.dll464GetThreadLocale
KERNEL32.dll840SizeofResource
KERNEL32.dll419GetProcessVersion
KERNEL32.dll361GetLastError
KERNEL32.dll924WritePrivateProfileStringA
KERNEL32.dll500GlobalFlags
KERNEL32.dll956lstrcpynA
KERNEL32.dll856TlsGetValue
KERNEL32.dll597LocalReAlloc
KERNEL32.dll857TlsSetValue
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll508GlobalReAlloc
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll855TlsFree
KERNEL32.dll504GlobalHandle
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll854TlsAlloc
KERNEL32.dll537InitializeCriticalSection
KERNEL32.dll594LocalFree
KERNEL32.dll590LocalAlloc
KERNEL32.dll187FileTimeToLocalFileTime
KERNEL32.dll188FileTimeToSystemTime
KERNEL32.dll618MulDiv
KERNEL32.dll797SetLastError
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll905WideCharToMultiByte
KERNEL32.dll546InterlockedIncrement
KERNEL32.dll584LoadLibraryA
KERNEL32.dll239FreeLibrary
KERNEL32.dll478GetVersion
KERNEL32.dll944lstrcatA
KERNEL32.dll502GlobalGetAtomNameA
KERNEL32.dll492GlobalAddAtomA
KERNEL32.dll497GlobalFindAtomA
KERNEL32.dll953lstrcpyA
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll408GetProcAddress
KERNEL32.dll542InterlockedDecrement
KERNEL32.dll959lstrlenA
KERNEL32.dll512GlobalUnlock
KERNEL32.dll501GlobalFree
KERNEL32.dll603LockResource
KERNEL32.dll218FindResourceA
KERNEL32.dll589LoadResource
KERNEL32.dll46CloseHandle
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll505GlobalLock
KERNEL32.dll494GlobalAlloc
KERNEL32.dll496GlobalDeleteAtom
KERNEL32.dll947lstrcmpA
KERNEL32.dll950lstrcmpiA
KERNEL32.dll317GetCurrentThread
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll587LoadLibraryW
KERNEL32.dll475GetUserDefaultUILanguage
KERNEL32.dll374GetModuleFileNameW
KERNEL32.dll204FindFirstFileW
KERNEL32.dll197FindClose
KERNEL32.dll885VirtualAlloc
USER32.dll403InvalidateRect
USER32.dll52CharUpperA
USER32.dll537RegisterClipboardFormatA
USER32.dll516PostThreadMessageA
USER32.dll698UpdateWindow
USER32.dll565SendDlgItemMessageA
USER32.dll473MapWindowPoints
USER32.dll346GetSysColor
USER32.dll597SetFocus
USER32.dll2AdjustWindowRectEx
USER32.dll560ScreenToClient
USER32.dll355GetTopWindow
USER32.dll414IsChild
USER32.dll243GetCapture
USER32.dll719WinHelpA
USER32.dll725wsprintfA
USER32.dll246GetClassInfoA
USER32.dll533RegisterClassA
USER32.dll300GetMenu
USER32.dll306GetMenuItemCount
USER32.dll345GetSubMenu
USER32.dll307GetMenuItemID
USER32.dll376GetWindowTextLengthA
USER32.dll375GetWindowTextA
USER32.dll272GetDlgCtrlID
USER32.dll96CreateWindowExA
USER32.dll250GetClassLongA
USER32.dll617SetPropA
USER32.dll330GetPropA
USER32.dll27CallWindowProcA
USER32.dll555RemovePropA
USER32.dll142DefWindowProcA
USER32.dll317GetMessageTime
USER32.dll316GetMessagePos
USER32.dll598SetForegroundWindow
USER32.dll639SetWindowLongA
USER32.dll550RegisterWindowMessageA
USER32.dll500OffsetRect
USER32.dll402IntersectRect
USER32.dll42CharNextA
USER32.dll371GetWindowPlacement
USER32.dll372GetWindowRect
USER32.dll685UnhookWindowsHookEx
USER32.dll468MapDialogRect
USER32.dll642SetWindowPos
USER32.dll362GetWindow
USER32.dll638SetWindowContextHelpId
USER32.dll74CopyRect
USER32.dll268GetDC
USER32.dll553ReleaseDC
USER32.dll198EndDialog
USER32.dll578SetActiveWindow
USER32.dll429IsWindow
USER32.dll82CreateDialogIndirectParamA
USER32.dll153DestroyWindow
USER32.dll619SetRect
USER32.dll302GetMenuCheckMarkDimensions
USER32.dll439LoadBitmapA
USER32.dll311GetMenuState
USER32.dll486ModifyMenuA
USER32.dll608SetMenuItemBitmaps
USER32.dll57CheckMenuItem
USER32.dll194EnableMenuItem
USER32.dll278GetFocus
USER32.dll323GetNextDlgTabItem
USER32.dll314GetMessageA
USER32.dll681TranslateMessage
USER32.dll161DispatchMessageA
USER32.dll235GetActiveWindow
USER32.dll445LoadIconA
USER32.dll458LoadStringA
USER32.dll255GetClientRect
USER32.dll690UnregisterClassA
USER32.dll383HideCaret
USER32.dll652ShowCaret
USER32.dll224ExcludeUpdateRgn
USER32.dll179DrawFocusRect
USER32.dll289GetKeyState
USER32.dll26CallNextHookEx
USER32.dll706ValidateRect
USER32.dll433IsWindowVisible
USER32.dll511PeekMessageA
USER32.dll267GetCursorPos
USER32.dll649SetWindowsHookExA
USER32.dll325GetParent
USER32.dll296GetLastActivePopup
USER32.dll430IsWindowEnabled
USER32.dll366GetWindowLongA
USER32.dll478MessageBoxA
USER32.dll588SetCursor
USER32.dll477MessageBeep
USER32.dll279GetForegroundWindow
USER32.dll322GetNextDlgGroupItem
USER32.dll515PostQuitMessage
USER32.dll513PostMessageA
USER32.dll270GetDesktopWindow
USER32.dll196EnableWindow
USER32.dll422IsIconic
USER32.dll349GetSystemMetrics
USER32.dll182DrawIcon
USER32.dll348GetSystemMenu
USER32.dll8AppendMenuA
USER32.dll135DefDlgProcA
USER32.dll432IsWindowUnicode
USER32.dll570SendMessageA
USER32.dll394InflateRect
USER32.dll347GetSysColorBrush
USER32.dll523PtInRect
USER32.dll252GetClassNameA
USER32.dll441LoadCursorA
USER32.dll381GrayStringA
USER32.dll188DrawTextA
USER32.dll666TabbedTextOutA
USER32.dll200EndPaint
USER32.dll13BeginPaint
USER32.dll364GetWindowDC
USER32.dll64ClientToScreen
USER32.dll151DestroyMenu
USER32.dll657ShowWindow
USER32.dll491MoveWindow
USER32.dll645SetWindowTextA
USER32.dll417IsDialogMessageA
USER32.dll273GetDlgItem
USER32.dll70CopyAcceleratorTableA
USER32.dll664SystemParametersInfoA
GDI32.dll520ScaleViewportExtEx
GDI32.dll578SetWindowExtEx
GDI32.dll521ScaleWindowExtEx
GDI32.dll455IntersectClipRect
GDI32.dll143DeleteObject
GDI32.dll574SetViewportExtEx
GDI32.dll363GetDeviceCaps
GDI32.dll447GetViewportExtEx
GDI32.dll450GetWindowExtEx
GDI32.dll80CreateSolidBrush
GDI32.dll497PtVisible
GDI32.dll501RectVisible
GDI32.dll590TextOutA
GDI32.dll221ExtTextOutA
GDI32.dll212Escape
GDI32.dll397GetMapMode
GDI32.dll81DPtoLP
GDI32.dll431GetTextColor
GDI32.dll332GetBkColor
GDI32.dll459LPtoDP
GDI32.dll469OffsetViewportOrgEx
GDI32.dll575SetViewportOrgEx
GDI32.dll555SetMapMode
GDI32.dll534SetBkMode
GDI32.dll421GetStockObject
GDI32.dll526SelectObject
GDI32.dll512RestoreDC
GDI32.dll519SaveDC
GDI32.dll140DeleteDC
GDI32.dll405GetObjectA
GDI32.dll533SetBkColor
GDI32.dll572SetTextColor
GDI32.dll352GetClipBox
GDI32.dll477PatBlt
GDI32.dll51CreateDIBitmap
GDI32.dll438GetTextExtentPointA
GDI32.dll18BitBlt
GDI32.dll45CreateCompatibleDC
GDI32.dll39CreateBitmap
comdlg32.dll7GetFileTitleA
WINSPOOL.DRV27ClosePrinter
WINSPOOL.DRV70DocumentPropertiesA
WINSPOOL.DRV125OpenPrinterA
ADVAPI32.dll461RegCreateKeyExA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll457RegCloseKey
COMCTL32.dll56ImageList_Destroy
COMCTL32.dll17
oledlg.dll8
ole32.dll260OleUninitialize
ole32.dll237OleInitialize
ole32.dll28CoFreeUnusedLibraries
ole32.dll99CoTaskMemAlloc
ole32.dll100CoTaskMemFree
ole32.dll124CreateILockBytesOnHGlobal
ole32.dll291StgCreateDocfileOnILockBytes
ole32.dll304StgOpenStorageOnILockBytes
ole32.dll34CoGetClassObject
ole32.dll8CLSIDFromString
ole32.dll6CLSIDFromProgID
ole32.dll82CoRegisterMessageFilter
ole32.dll91CoRevokeClassObject
ole32.dll232OleFlushClipboard
ole32.dll239OleIsCurrentClipboard
OLEPRO32.DLL253
OLEAUT32.dll4
OLEAUT32.dll6
OLEAUT32.dll9
OLEAUT32.dll10
OLEAUT32.dll2
OLEAUT32.dll150
OLEAUT32.dll12
OLEAUT32.dll185
OLEAUT32.dll7

StringTable 040904b0

Comments
CompanyNameMcAfee, Inc.
FileDescriptionMcAfee EE Tech Code Generator
FileVersion5, 2, 10, 4
InternalNameEETechCode
LegalCopyrightCopyright © 1991-2011 McAfee, Inc. All Rights Reserved.
LegalTrademarks
OriginalFilenameEETechCode.EXE
PrivateBuild
ProductNameMcAfee Endpoint Encryption
ProductVersion5, 2, 10, 4
SpecialBuild

VS_FIXEDFILEINFO

FileVersion5.2.10.4
ProductVersion5.2.10.4
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0225280EXE05/26/2011 11:06:48#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK