setup_deu.EXE - WinAAS InstallationXXXXXXXXXXXXXXXXXXXXXXX

info
MZ
NE
resources
imports
exports
foremost
7zip
version info
hexdump
log
discuss
donate

filename	setup_deu.EXE
size	3930195 (0x3bf853)
md5	ad7fe665fd595816f4ec2a6e7fbc072b

type	MS-DOS executable, NE for MS Windows 3.x (EXE)
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x9a
blocks_in_file	3
num_relocs	3
header_paragraphs	0x20
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0x48
sp	0xff
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0x726a30fb0001
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x400

DOS stub

00000000: eb 15 90 00 00 00 00 b4  09 ba 42 01 cd 21 ba 81  |..........B..!..|
00000010: 01 cd 21 b4 4c cd 21 0e  1f b4 1a ba 00 04 cd 21  |..!.L.!........!|
00000020: b8 00 16 cd 2f 24 7f 3c  00 75 dc b8 80 46 cd 2f  |..../$.<.u...F./|
00000030: 3d 00 00 74 d2 b4 62 cd  21 8e db 8b d3 1e 52 8e  |=..t..b.!.....R.|
00000040: c2 bb 00 04 b4 4a cd 21  5a 1f be 2c 00 8b 04 8e  |.....J.!Z..,....|
00000050: d8 33 f6 eb 5a 90 52 56  06 57 0e 07 83 c6 05 b8  |.3..Z.RV.W......|
00000060: 01 00 50 58 3c 00 74 40  bf 00 03 ac aa 3c 3b 74  |..PX<.t@.....<;t|
00000070: 06 3c 00 74 02 eb f4 50  4f 26 8a 45 ff 3c 5c 75  |.<.t...PO&.E.<\u|
00000080: 01 4f b8 5c 57 ab b8 49  4e ab b8 2e 43 ab b8 4f  |.O.\W..IN...C..O|
00000090: 4d ab b0 00 aa 1e 8c c0  8e d8 b4 4e b9 01 00 ba  |M..........N....|
000000a0: 00 03 cd 21 1f 72 bc 58  5f 07 5e 5a eb 1c 90 8b  |...!.r.X_.^Z....|
000000b0: 1c 81 fb 50 41 75 13 8b  5c 02 81 fb 54 48 75 0a  |...PAu..\...THu.|
000000c0: 8a 5c 04 80 fb 3d 75 02  eb 8c bb ff ff 43 80 38  |.\...=u......C.8|
000000d0: 00 75 fa 80 78 01 00 74  05 43 03 f3 eb d1 83 c3  |.u..x..t.C......|
000000e0: 04 03 f3 fc b1 fe 0e 07  bf 00 02 ac aa fe c1 3c  |...............<|
000000f0: 00 75 f8 4f b0 20 aa fe  c1 8e da be 81 00 ac aa  |.u.O. ..........|
00000100: fe c1 3c 0d 75 f8 0e 1f  2e 8c 16 03 00 2e 89 26  |..<.u..........&|
00000110: 05 00 be fe 01 88 0c b8  00 4b ba 00 03 bb a6 01  |.........K......|
00000120: 1e 07 cd 21 2e 8e 16 03  00 2e 8b 26 05 00 0e 1f  |...!.......&....|
00000130: 73 0c b4 09 ba 42 01 cd  21 ba 62 01 cd 21 b4 4c  |s....B..!.b..!.L|
00000140: cd 21 0d 0a 50 6c 65 61  73 65 20 72 75 6e 20 74  |.!..Please run t|
00000150: 68 69 73 20 69 6e 73 74  61 6c 6c 61 74 69 6f 6e  |his installation|
00000160: 20 24 75 6e 64 65 72 20  57 69 6e 64 6f 77 73 20  | $under Windows |
00000170: 33 2e 31 20 6f 72 20 68  69 67 68 65 72 2e 0d 0a  |3.1 or higher...|
00000180: 24 75 73 69 6e 67 20 74  68 65 20 46 69 6c 65 20  |$using the File |
00000190: 6f 72 20 50 72 6f 67 72  61 6d 20 4d 61 6e 61 67  |or Program Manag|
000001a0: 65 72 2e 0d 0a 24 00 00  fe 01 00 00 b4 01 00 00  |er...$..........|
000001b0: d9 01 00 00 00 3f 3f 3f  3f 3f 3f 3f 3f 3f 3f 3f  |.....???????????|
000001c0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000001d0: 00 00 00 00 00 00 00 00  00 00 20 20 20 20 20 20  |..........      |
000001e0: 20 20 20 20 20 00 00 00  00 00 00 00 00 00 00 00  |     ...........|
000001f0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 20  |............... |

NE Header

ne_magic	NE
ne_ver	5
ne_rev	0x3c
ne_enttab	0xc5
ne_cbenttab	9
ne_crc	0
ne_flags	0x302
ne_autodata	2
ne_heap	0x400
ne_stack	0xc000
ne_csip	0x10018
ne_sssp	0x20000
ne_cseg	2
ne_cmod	3
ne_cbnrestab	0xc
ne_segtab	0x40
ne_rsrctab	0x50
ne_restab	0x90
ne_modtab	0xae
ne_imptab	0xb4
ne_nrestab	0x4ce
ne_cmovent	1
ne_align	4
ne_cres	0
ne_exetyp	2
ne_flagsothers	0
ne_pretthunks	0
ne_psegrefbytes	0
ne_swaparea	0
ne_expver	0x30a

Segments

#	offset	size	min alloc	flags
1	0x4e	0x2d77	0x2d78	0d50:COMOPRRE
2	0x34b	0x359	0x472	0d51:DAMOPRRE

show previews

type	name	size
GROUP_ICON	#108	32
VERSION	#1	336
ICON	#1	752

module_name	hint	ord	function_name
USER		232
USER		107
USER		111
KERNEL		1
KERNEL		3
KERNEL		131
USER		246
KERNEL		134
GDI		128
KERNEL		113
KERNEL		137
GDI		2
KERNEL		114
USER		124
USER		125
KERNEL		15
KERNEL		16
USER		1
GDI		9
KERNEL		17
KERNEL		18
KERNEL		19
KERNEL		20
USER		5
USER		6
USER		7
KERNEL		23
USER		10
KERNEL		30
GDI		29
KERNEL		166
GDI		33
USER		282
USER		283
KERNEL		49
USER		33
KERNEL		50
KERNEL		51
USER		420
GDI		45
USER		39
USER		40
USER		41
USER		42
USER		173
USER		174
GDI		439
GDI		56
USER		57
KERNEL		74
GDI		66
KERNEL		178
GDI		69
KERNEL		81
KERNEL		82
USER		66
KERNEL		83
KERNEL		84
USER		68
KERNEL		85
KERNEL		86
KERNEL		88
GDI		80
KERNEL		89
KERNEL		90
KERNEL		91
KERNEL		95
GDI		87
KERNEL		96
USER		85
KERNEL		102
GDI		360

ord	segment	offset	function_name
1	1	0x5d6	___EXPORTEDSTUB

module_name	GLBSSTUB
module_description	STUB.exe

StringTable 040904E4

CompanyName	Analytik Jena AGXXXXXXXXXXXXXXXXXXXXXXXXXX
FileDescription	WinAAS InstallationXXXXXXXXXXXXXXXXXXXXXXX
FileVersion	3XXXXXXXXXXXXX
LegalCopyright	Analytik Jena AGXXXXXXXXXXXXXXXXXXXXXXXXXX

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x10001
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	3924611	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 3930195 bytes (3839 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] invalid VS_VERSIONINFO child type "\x00\x00\x00"

setup_deu.EXE- WinAAS InstallationXXXXXXXXXXXXXXXXXXXXXXX

MZ Header

DOS stub

NE Header

Segments

StringTable 040904E4

VS_FIXEDFILEINFO

setup_deu.EXE
- WinAAS InstallationXXXXXXXXXXXXXXXXXXXXXXX