| filename | MXD04_DRV_PCL6-PS-PPD-Win64-ver1211a_NL.exe | |
|---|---|---|
| size | 23769053 (0x16aafdd) | |
| md5 | 7a6c02ebdc76e093e103a152441130cb | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xe8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x105ca | 0x11000 | R-X CODE | |
| .rdata | 0x12000 | 0x17e8 | 0x2000 | R-- IDATA | |
| .data | 0x14000 | 0x3cfc | 0x2000 | RW- IDATA | |
| .rsrc | 0x18000 | 0x11230 | 0x12000 | R-- IDATA |
Data Directory
| type | va | size | |
|---|---|---|---|
| EXPORT | 0 | 0 | |
| IMPORT | 0x12800 | 0xa0 | |
| RESOURCE | 0x18000 | 0x11230 | |
| EXCEPTION | 0 | 0 | |
| SECURITY | 0 | 0 | |
| BASERELOC | 0 | 0 | |
| DEBUG | 0 | 0 | |
| ARCHITECTURE | 0 | 0 | |
| GLOBALPTR | 0 | 0 | |
| TLS | 0 | 0 | |
| LOAD_CONFIG | 0 | 0 | |
| Bound_IAT | 0 | 0 | |
| IAT | 0x12000 | 0x2f4 | |
| Delay_IAT | 0 | 0 | |
| CLR_Header | 0 | 0 |
| id | lang | string |
|---|---|---|
| 1 | 1033 | PackageForTheWeb Error |
| 2 | 1033 | This self extracting executable file appears to have been corrupted and cannot be executed. You should obtain a new copy of this file to insure that it will execute correctly. |
| 3 | 1033 | Unable to open the self-extracting executable file. The file is locked or in use by another process. The installation will terminate. |
| 4 | 1033 | PackageForTheWeb |
| 5 | 1033 | Unable to access the source file! |
| 6 | 1033 | Unable to create the cabinet file! |
| 7 | 1033 | Unable to access the specified path. |
| 8 | 1033 | Unable to create the specified output folder. Bad path name. |
| 9 | 1033 | Unable to start the decompression process! |
| 10 | 1033 | The EXE file has been corrupted. Unable to continue. |
| 12 | 1033 | Unable to execute the specified command line! |
| 13 | 1033 | This program is used internally by PackageFromTheWeb. It should not be executed directly. |
| 14 | 1033 | Bad or missing header information! |
| 32 | 1033 | Do you wish to cancel the installation? |
| 34 | 1033 | Insufficient disk space to open the package! |
| 35 | 1033 | Security error! Invalid password. |
| 37 | 1033 | Unpacking '%s'... |
| 38 | 1033 | Memory allocation failure! |
| 44 | 1033 | General failure reading this package. |
| 48 | 1033 | Unable to initialize the extension DLL. |
| 49 | 1033 | Error Executing the Specified Program |
| 50 | 1033 | Unpacking %s... |
| 52 | 1033 | The specified drive does not exist |
| 300 | 1033 | No error |
| 301 | 1033 | Missing cabinet file! |
| 302 | 1033 | Input file is not a cabinet. |
| 303 | 1033 | Bad cabinet version. |
| 304 | 1033 | Corrupt cabinet file! |
| 305 | 1033 | Memory allocation failure! |
| 306 | 1033 | Invalid file compression type! |
| 307 | 1033 | CRC failure. |
| 308 | 1033 | System error during decompression |
| 310 | 1033 | Incorrect cabinet file selected |
| 311 | 1033 | The package decompression has been cancelled. |
| 312 | 1033 | Unable to create the specified output folder! |
| 313 | 1033 | Unable to compute required disk space |
| 314 | 1033 | There is not enough space on drive %s to extract this package. |
| 315 | 1033 | MB |
| 316 | 1033 | KB |
| 317 | 1033 | bytes |
| 318 | 1033 | There is not enough space on drive %s to extract this package |
| 319 | 1033 | version |
| 324 | 1033 | Please free up %.2f %s and click Retry |
| 328 | 1033 | 12,MS Shell Dlg |
| 329 | 1033 | &Finish |
| 6001 | 1033 | 8,MS Shell Dlg |
| 6002 | 1033 | 8,MS Shell Dlg |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.dll | 175 | FormatMessageA | |
| KERNEL32.dll | 343 | GetSystemDefaultLCID | |
| KERNEL32.dll | 318 | GetProcAddress | |
| KERNEL32.dll | 355 | GetTempFileNameA | |
| KERNEL32.dll | 483 | MulDiv | |
| KERNEL32.dll | 68 | CreateProcessA | |
| KERNEL32.dll | 718 | WaitForSingleObject | |
| KERNEL32.dll | 336 | GetStartupInfoA | |
| KERNEL32.dll | 441 | IsDBCSLeadByte | |
| KERNEL32.dll | 662 | Sleep | |
| KERNEL32.dll | 33 | CompareStringA | |
| KERNEL32.dll | 620 | SetFileTime | |
| KERNEL32.dll | 458 | LocalFileTimeToFileTime | |
| KERNEL32.dll | 95 | DosDateTimeToFileTime | |
| KERNEL32.dll | 180 | FreeLibrary | |
| KERNEL32.dll | 551 | RemoveDirectoryA | |
| KERNEL32.dll | 157 | FindNextFileA | |
| KERNEL32.dll | 739 | WritePrivateProfileSectionA | |
| KERNEL32.dll | 741 | WritePrivateProfileStringA | |
| KERNEL32.dll | 773 | lstrcpynA | |
| KERNEL32.dll | 310 | GetPrivateProfileSectionA | |
| KERNEL32.dll | 735 | WriteFile | |
| KERNEL32.dll | 87 | DeleteFileA | |
| KERNEL32.dll | 456 | LocalAlloc | |
| KERNEL32.dll | 469 | LockResource | |
| KERNEL32.dll | 455 | LoadResource | |
| KERNEL32.dll | 163 | FindResourceA | |
| KERNEL32.dll | 661 | SizeofResource | |
| KERNEL32.dll | 294 | GetModuleHandleA | |
| KERNEL32.dll | 392 | GlobalFree | |
| KERNEL32.dll | 403 | GlobalUnlock | |
| KERNEL32.dll | 396 | GlobalLock | |
| KERNEL32.dll | 385 | GlobalAlloc | |
| KERNEL32.dll | 484 | MultiByteToWideChar | |
| KERNEL32.dll | 767 | lstrcmpiA | |
| KERNEL32.dll | 256 | GetDiskFreeSpaceA | |
| KERNEL32.dll | 409 | HeapAlloc | |
| KERNEL32.dll | 320 | GetProcessHeap | |
| KERNEL32.dll | 415 | HeapFree | |
| KERNEL32.dll | 292 | GetModuleFileNameA | |
| KERNEL32.dll | 125 | ExitProcess | |
| KERNEL32.dll | 52 | CreateFileA | |
| KERNEL32.dll | 53 | CreateFileMappingA | |
| KERNEL32.dll | 470 | MapViewOfFile | |
| KERNEL32.dll | 688 | UnmapViewOfFile | |
| KERNEL32.dll | 616 | SetFileAttributesA | |
| KERNEL32.dll | 274 | GetFileSize | |
| KERNEL32.dll | 536 | ReadFile | |
| KERNEL32.dll | 618 | SetFilePointer | |
| KERNEL32.dll | 148 | FindFirstFileA | |
| KERNEL32.dll | 45 | CreateDirectoryA | |
| KERNEL32.dll | 282 | GetLastError | |
| KERNEL32.dll | 314 | GetPrivateProfileStringA | |
| KERNEL32.dll | 144 | FindClose | |
| KERNEL32.dll | 269 | GetFileAttributesA | |
| KERNEL32.dll | 761 | lstrcatA | |
| KERNEL32.dll | 776 | lstrlenA | |
| KERNEL32.dll | 381 | GetWindowsDirectoryA | |
| KERNEL32.dll | 770 | lstrcpyA | |
| KERNEL32.dll | 345 | GetSystemDirectoryA | |
| KERNEL32.dll | 357 | GetTempPathA | |
| KERNEL32.dll | 478 | MoveFileExA | |
| KERNEL32.dll | 450 | LoadLibraryA | |
| KERNEL32.dll | 460 | LocalFree | |
| KERNEL32.dll | 334 | GetShortPathNameA | |
| KERNEL32.dll | 170 | FlushFileBuffers | |
| KERNEL32.dll | 27 | CloseHandle | |
| KERNEL32.dll | 636 | SetStdHandle | |
| KERNEL32.dll | 434 | IsBadCodePtr | |
| KERNEL32.dll | 437 | IsBadReadPtr | |
| KERNEL32.dll | 651 | SetUnhandledExceptionFilter | |
| KERNEL32.dll | 448 | LCMapStringW | |
| KERNEL32.dll | 447 | LCMapStringA | |
| KERNEL32.dll | 277 | GetFileType | |
| KERNEL32.dll | 338 | GetStdHandle | |
| KERNEL32.dll | 621 | SetHandleCount | |
| KERNEL32.dll | 264 | GetEnvironmentStringsW | |
| KERNEL32.dll | 262 | GetEnvironmentStrings | |
| KERNEL32.dll | 722 | WideCharToMultiByte | |
| KERNEL32.dll | 179 | FreeEnvironmentStringsW | |
| KERNEL32.dll | 178 | FreeEnvironmentStringsA | |
| KERNEL32.dll | 685 | UnhandledExceptionFilter | |
| KERNEL32.dll | 247 | GetCurrentProcess | |
| KERNEL32.dll | 670 | TerminateProcess | |
| KERNEL32.dll | 342 | GetStringTypeW | |
| KERNEL32.dll | 339 | GetStringTypeA | |
| KERNEL32.dll | 305 | GetOEMCP | |
| KERNEL32.dll | 185 | GetACP | |
| KERNEL32.dll | 191 | GetCPInfo | |
| KERNEL32.dll | 440 | IsBadWritePtr | |
| KERNEL32.dll | 418 | HeapReAlloc | |
| KERNEL32.dll | 699 | VirtualAlloc | |
| KERNEL32.dll | 703 | VirtualFree | |
| KERNEL32.dll | 411 | HeapCreate | |
| KERNEL32.dll | 413 | HeapDestroy | |
| KERNEL32.dll | 372 | GetVersion | |
| KERNEL32.dll | 202 | GetCommandLineA | |
| KERNEL32.dll | 559 | RtlUnwind | |
| USER32.dll | 309 | GetParent | |
| USER32.dll | 258 | GetDlgItem | |
| USER32.dll | 527 | SendDlgItemMessageA | |
| USER32.dll | 183 | EnableWindow | |
| USER32.dll | 54 | CheckRadioButton | |
| USER32.dll | 606 | SetWindowTextA | |
| USER32.dll | 350 | GetWindowTextA | |
| USER32.dll | 427 | LoadStringA | |
| USER32.dll | 416 | LoadImageA | |
| USER32.dll | 446 | MessageBoxA | |
| USER32.dll | 394 | IsDlgButtonChecked | |
| USER32.dll | 260 | GetDlgItemTextA | |
| USER32.dll | 556 | SetDlgItemTextA | |
| USER32.dll | 515 | ReleaseDC | |
| USER32.dll | 253 | GetDC | |
| USER32.dll | 342 | GetWindowLongA | |
| USER32.dll | 559 | SetFocus | |
| USER32.dll | 478 | PostMessageA | |
| USER32.dll | 338 | GetWindow | |
| USER32.dll | 684 | wsprintfA | |
| USER32.dll | 255 | GetDesktopWindow | |
| USER32.dll | 142 | DestroyWindow | |
| USER32.dll | 79 | CreateDialogParamA | |
| USER32.dll | 149 | DispatchMessageA | |
| USER32.dll | 642 | TranslateMessage | |
| USER32.dll | 323 | GetSysColor | |
| USER32.dll | 324 | GetSysColorBrush | |
| USER32.dll | 212 | FillRect | |
| USER32.dll | 12 | BeginPaint | |
| USER32.dll | 175 | DrawTextA | |
| USER32.dll | 187 | EndPaint | |
| USER32.dll | 240 | GetClientRect | |
| USER32.dll | 522 | ScreenToClient | |
| USER32.dll | 457 | MoveWindow | |
| USER32.dll | 574 | SetParent | |
| USER32.dll | 436 | MapDialogRect | |
| USER32.dll | 307 | GetNextDlgTabItem | |
| USER32.dll | 348 | GetWindowRect | |
| USER32.dll | 76 | CreateDialogIndirectParamA | |
| USER32.dll | 399 | IsWindow | |
| USER32.dll | 378 | InvalidateRect | |
| USER32.dll | 400 | IsWindowEnabled | |
| USER32.dll | 618 | ShowWindow | |
| USER32.dll | 657 | UpdateWindow | |
| USER32.dll | 392 | IsDialogMessageA | |
| USER32.dll | 603 | SetWindowPos | |
| USER32.dll | 221 | GetActiveWindow | |
| USER32.dll | 540 | SetActiveWindow | |
| USER32.dll | 37 | CharNextA | |
| USER32.dll | 414 | LoadIconA | |
| USER32.dll | 532 | SendMessageA | |
| USER32.dll | 476 | PeekMessageA | |
| USER32.dll | 600 | SetWindowLongA | |
| GDI32.dll | 83 | DeleteObject | |
| GDI32.dll | 66 | CreatePalette | |
| GDI32.dll | 428 | RealizePalette | |
| GDI32.dll | 293 | GetDeviceCaps | |
| GDI32.dll | 48 | CreateDIBitmap | |
| GDI32.dll | 335 | GetObjectA | |
| GDI32.dll | 456 | SelectPalette | |
| GDI32.dll | 139 | EnumFontFamiliesExA | |
| GDI32.dll | 368 | GetTextExtentPointA | |
| GDI32.dll | 351 | GetStockObject | |
| GDI32.dll | 517 | TextOutA | |
| GDI32.dll | 80 | DeleteDC | |
| GDI32.dll | 455 | SelectObject | |
| GDI32.dll | 42 | CreateCompatibleDC | |
| GDI32.dll | 462 | SetBkMode | |
| GDI32.dll | 17 | BitBlt | |
| GDI32.dll | 499 | SetTextColor | |
| GDI32.dll | 77 | CreateSolidBrush | |
| GDI32.dll | 461 | SetBkColor | |
| GDI32.dll | 55 | CreateFontIndirectA | |
| ADVAPI32.dll | 347 | RegCloseKey | |
| ADVAPI32.dll | 379 | RegQueryValueExA | |
| ADVAPI32.dll | 370 | RegOpenKeyExA | |
| SHELL32.dll | 114 | ShellExecuteA | |
| SHELL32.dll | 57 | SHBrowseForFolderA | |
| SHELL32.dll | 80 | SHGetPathFromIDListA | |
| SHELL32.dll | 75 | SHGetMalloc | |
| LZ32.dll | 7 | LZOpenFileA | |
| LZ32.dll | 4 | LZCopy | |
| LZ32.dll | 3 | LZClose | |
| COMCTL32.dll | 17 |
StringTable 040904b0
| Comments |