324432234423.exe

info
MZ
PE
resources
strings
imports
foremost
hexdump
disasm
log
discuss
donate

filename	324432234423.exe
size	1216512 (0x129000)
md5	b3e17111b8c3815744f96d910ea1eeff

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x6b616e73
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818f
Magic	0x10b
LinkerVersion	5.12
SizeOfCode	0x77000
SizeOfInitializedData	0x6000
SizeOfUninitializedData	0xd0000
AddressOfEntryPoint	0x4ed96
BaseOfCode	0xd1000
BaseOfData	0x148000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x4aa000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Enigma Protector 1.X (Sukhov Vladimir & Serge N. Markin)

Sections

name	va	vsize	raw size	flags
	0x1000	0xd0000	0x58000	RWX IDATA
	0xd1000	0x77000	0x2d000	RWX IDATA
	0x148000	0x6000	0x1000	RWX IDATA
	0x14e000	0x2000	0	RWX IDATA
.rsrc	0x150000	0x9000	0x9000	RWX IDATA
	0x159000	0x2b8000	0	RWX IDATA
.	0x411000	0x99000	0x99000	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x411028	0x278
RESOURCE	0x150000	0x8710
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x411000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x5472b8	0x5472c8	0x811018	0x811020	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	CDROM	192
BITMAP	CLOSEDFOLDER	224
BITMAP	CURRENTFOLDER	224
BITMAP	EXECUTABLE	224
BITMAP	FLOPPY	192
BITMAP	HARD	192
BITMAP	KNOWNFILE	224
BITMAP	MENUBTN	3160
BITMAP	METRIC	808
BITMAP	NETWORK	192
BITMAP	OPENFOLDER	224
BITMAP	PREVIEWGLYPH	232
BITMAP	PS	808
BITMAP	RAM	192
BITMAP	RASTER	808
BITMAP	TTF	808
BITMAP	UNKNOWN	808
BITMAP	UNKNOWNFILE	224
ICON	#1	16936
DIALOG	DLGTEMPLATE	82
STRING	#3682	76
STRING	#3683	170
STRING	#3684	390
STRING	#3685	462
STRING	#3686	324
STRING	#3687	126
STRING	#3688	36
STRING	#4079	336
STRING	#4080	464
STRING	#4081	516
STRING	#4082	268
STRING	#4083	848
STRING	#4084	320
STRING	#4085	232
STRING	#4086	312
STRING	#4087	1012
STRING	#4088	944
STRING	#4089	916
STRING	#4090	1060
STRING	#4091	276
STRING	#4092	228
STRING	#4093	588
STRING	#4094	980
STRING	#4095	904
STRING	#4096	728
RCDATA	ACGL	3263
RCDATA	ACSHDA	3416
RCDATA	ACSHDI	3341
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	1656
RCDATA	SC	1076
RCDATA	SD	1201
RCDATA	SE	417
RCDATA	SF	1649
RCDATA	SR	1969
RCDATA	TFORM1	60295
RCDATA	TFRMSELECTPROC	1260
RCDATA	TPATHDIALOGFORM	1379
RCDATA	TSCALCFORM	6919
RCDATA	TSCOLORDIALOGFORM	7053
RCDATA	TSPOPUPCALENDAR	778
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	20

id	lang	string
58910	9	Create
58911	9	Select directory
58923	9	Invalid date
58924	9	Preview of the future hint window
58925	9	Gradient
58926	9	Background
58927	9	Shadow
58928	9	Bottom border
58929	9	Top border
58930	9	Color
58931	9	Save to file as...
58932	9	Load from file
58933	9	Texture
58934	9	Font
58935	9	No picture available
58936	9	Transparency
58937	9	Offset
58938	9	Percent
58939	9	Pause hide (ms)
58940	9	Max width
58941	9	Corners radius
58942	9	Vert. margin
58943	9	Horiz. margin
58944	9	Arrow length
58945	9	Blur
58946	9	Bevel width
58947	9	Style :
58948	9	Preserved settings :
58949	9	Hint Designer Form
58950	9	TsFrameAdapter adapter must be placed on the handled frame
58951	9	Hex -
58952	9	Decimal -
58953	9	Blue :
58954	9	Green :
58955	9	Red :
58956	9	Color
58957	9	Additional colors :
58958	9	Main palette :
58959	9	Define colors
58960	9	Add to custom colors set
58961	9	Listbox (%s) style must be virtual in order to set Count
58962	9	Error setting %s.Count
58963	9	(internal)
58964	9	Available skins
58970	9	File open
58975	9	Calculator
58976	9	Close
58977	9	Maximize
58978	9	Minimize
58979	9	Size
58980	9	Move
58981	9	Restore
58990	9	&Help
58991	9	Cancel
58992	9	OK
65248	0	Method '%s' not supported by automation object
65249	0	Variant does not reference an automation object
65250	0	Dispatch methods do not support more than 64 parameters
65264	0	Info Text
65265	0	Menu Background
65266	0	Menu Text
65267	0	None
65268	0	Scroll Bar
65269	0	3D Dark Shadow
65270	0	3D Light
65271	0	Window Background
65272	0	Window Frame
65273	0	Window Text
65274	0	No help keyword specified.
65275	0	Root :
65276	0	Directory with skins :
65277	0	Select skin
65278	0	Skin preview
65279	0	OLE error %.8x
65280	0	Active Caption
65281	0	Application Workspace
65282	0	Background
65283	0	Button Face
65284	0	Button Highlight
65285	0	Button Shadow
65286	0	Button Text
65287	0	Caption Text
65288	0	Default
65289	0	Gray Text
65290	0	Highlight Background
65291	0	Highlight Text
65292	0	Inactive Border
65293	0	Inactive Caption
65294	0	Inactive Caption Text
65295	0	Info Background
65296	0	Purple
65297	0	Teal
65298	0	Gray
65299	0	Silver
65300	0	Red
65301	0	Lime
65302	0	Yellow
65303	0	Blue
65304	0	Fuchsia
65305	0	Aqua
65306	0	White
65307	0	Money Green
65308	0	Sky Blue
65309	0	Cream
65310	0	Medium Gray
65311	0	Active Border
65312	0	Menu '%s' is already being used by another form
65313	0	Docked control must have a name
65314	0	Error removing control from dock tree
65315	0	- Dock zone not found
65316	0	- Dock zone has no control
65317	0	Error setting %s.Count
65318	0	Listbox (%s) style must be virtual in order to set Count
65319	0	Unable to find a Table of Contents
65320	0	No help found for %s
65321	0	No context-sensitive help installed
65322	0	No topic-based help system installed
65323	0	Black
65324	0	Maroon
65325	0	Green
65326	0	Olive
65327	0	Navy
65328	0	PgUp
65329	0	PgDn
65330	0	End
65331	0	Home
65332	0	Left
65333	0	Up
65334	0	Right
65335	0	Down
65336	0	Ins
65337	0	Del
65338	0	Shift+
65339	0	Ctrl+
65340	0	Alt+
65341	0	Unable to insert a line
65342	0	Clipboard does not support Icons
65343	0	Cannot open clipboard
65344	0	&Yes
65345	0	&No
65346	0	OK
65347	0	Cancel
65348	0	&Help
65349	0	&Abort
65350	0	&Retry
65351	0	&Ignore
65352	0	&All
65353	0	N&o to All
65354	0	Yes to &All
65355	0	BkSp
65356	0	Tab
65357	0	Esc
65358	0	Enter
65359	0	Space
65360	0	&No
65361	0	&Help
65362	0	&Close
65363	0	&Ignore
65364	0	&Retry
65365	0	Abort
65366	0	&All
65367	0	Cannot drag a form
65368	0	Metafiles
65369	0	Enhanced Metafiles
65370	0	Icons
65371	0	Bitmaps
65372	0	Warning
65373	0	Error
65374	0	Information
65375	0	Confirm
65376	0	Cannot focus a disabled or invisible window
65377	0	Control '%s' has no parent window
65378	0	Cannot hide an MDI Child Form
65379	0	Cannot change Visible in OnShow or OnHide
65380	0	Cannot make a visible window modal
65381	0	Scrollbar property out of range
65382	0	Menu index out of range
65383	0	Menu inserted twice
65384	0	Sub-menu is not in menu
65385	0	Not enough timers available
65386	0	GroupIndex cannot be less than a previous menu item's GroupIndex
65387	0	Cannot create form. No MDI forms are currently active
65388	0	A control cannot have itself as its parent
65389	0	OK
65390	0	Cancel
65391	0	&Yes
65392	0	Metafile is not valid
65393	0	Invalid pixel format
65394	0	Scan line index out of range
65395	0	Cannot change the size of an icon
65396	0	Invalid operation on TOleGraphic
65397	0	Unsupported clipboard format
65398	0	Out of system resources
65399	0	Canvas does not allow drawing
65400	0	Invalid image size
65401	0	Invalid ImageList
65402	0	Unable to Replace Image
65403	0	Invalid ImageList Index
65404	0	Failed to read ImageList data from stream
65405	0	Failed to write ImageList data to stream
65406	0	Error creating window device context
65407	0	Error creating window class
65408	0	Invalid property value
65409	0	List capacity out of bounds (%d)
65410	0	List count out of bounds (%d)
65411	0	List index out of bounds (%d)
65412	0	Out of memory while expanding memory stream
65413	0	Error reading %s%s%s: %s
65414	0	Stream read error
65415	0	Property is read-only
65416	0	Resource %s not found
65417	0	%s.Seek not implemented
65418	0	Operation not allowed on sorted list
65419	0	%s not in a class registration group
65420	0	Property %s does not exist
65421	0	Stream write error
65422	0	Bitmap image is not valid
65423	0	Icon image is not valid
65424	0	Cannot assign a %s to a %s
65425	0	Bits index out of range
65426	0	Can't write to a read-only resource stream
65427	0	CheckSynchronize called from thread $%x, which is NOT the main thread
65428	0	Class %s not found
65429	0	A class named %s already exists
65430	0	List does not allow duplicates ($0%x)
65431	0	A component named %s already exists
65432	0	String list does not allow duplicates
65433	0	Cannot create file "%s". %s
65434	0	Cannot open file "%s". %s
65435	0	Invalid stream format
65436	0	''%s'' is not a valid component name
65437	0	Invalid property value
65438	0	Invalid property element: %s
65439	0	Invalid property path
65440	0	December
65441	0	Sun
65442	0	Mon
65443	0	Tue
65444	0	Wed
65445	0	Thu
65446	0	Fri
65447	0	Sat
65448	0	Sunday
65449	0	Monday
65450	0	Tuesday
65451	0	Wednesday
65452	0	Thursday
65453	0	Friday
65454	0	Saturday
65455	0	Ancestor for '%s' not found
65456	0	Aug
65457	0	Sep
65458	0	Oct
65459	0	Nov
65460	0	Dec
65461	0	January
65462	0	February
65463	0	March
65464	0	April
65465	0	May
65466	0	June
65467	0	July
65468	0	August
65469	0	September
65470	0	October
65471	0	November
65472	0	External exception %x
65473	0	Assertion failed
65474	0	Interface not supported
65475	0	Exception in safecall method
65476	0	%s (%s, line %d)
65477	0	Abstract Error
65478	0	Access violation at address %p in module '%s'. %s of address %p
65479	0	System Error. Code: %d. %s
65480	0	A call to an OS function failed
65481	0	Jan
65482	0	Feb
65483	0	Mar
65484	0	Apr
65485	0	May
65486	0	Jun
65487	0	Jul
65488	0	Variant method calls not supported
65489	0	Read
65490	0	Write
65491	0	Error creating variant or safe array
65492	0	Variant or safe array index out of bounds
65493	0	Variant or safe array is locked
65494	0	Invalid variant type conversion
65495	0	Invalid variant operation
65496	0	Invalid variant operation (%s%.8x) %s
65497	0	Could not convert variant of type (%s) into type (%s)
65498	0	Overflow while converting variant of type (%s) into type (%s)
65499	0	Variant overflow
65500	0	Invalid argument
65501	0	Invalid variant type
65502	0	Operation not supported
65503	0	Unexpected variant error
65504	0	Integer overflow
65505	0	Invalid floating point operation
65506	0	Floating point division by zero
65507	0	Floating point overflow
65508	0	Floating point underflow
65509	0	Invalid pointer operation
65510	0	Invalid class typecast
65511	0	Access violation at address %p. %s of address %p
65512	0	Access violation
65513	0	Stack overflow
65514	0	Control-C hit
65515	0	Privileged instruction
65516	0	Exception %s in module %s at %p. %s%s
65517	0	Application Error
65518	0	Format '%s' invalid or incompatible with argument
65519	0	No argument for format '%s'
65520	0	'%s' is not a valid integer value
65521	0	'%s' is not a valid floating point value
65522	0	'%s' is not a valid date
65523	0	'%s' is not a valid time
65524	0	'%s' is not a valid date and time
65525	0	Out of memory
65526	0	I/O error %d
65527	0	File not found
65528	0	Invalid filename
65529	0	Too many open files
65530	0	File access denied
65531	0	Read beyond end of file
65532	0	Disk full
65533	0	Invalid numeric input
65534	0	Division by zero
65535	0	Range check error

module_name	hint	ord	function_name
kernel32.dll			VirtualAlloc
kernel32.dll			VirtualFree
kernel32.dll			GetModuleHandleA
kernel32.dll			GetProcAddress
kernel32.dll			ExitProcess
kernel32.dll			LoadLibraryA
user32.dll			MessageBoxA
advapi32.dll			RegCloseKey
oleaut32.dll			SysFreeString
gdi32.dll			CreateFontA
shell32.dll			ShellExecuteA
version.dll			GetFileVersionInfoA
ole32.dll			OleUninitialize
comctl32.dll			ImageList_SetIconSize

show previews

offset	size	type	comment
0	1216512	EXE	02/02/2027 05:49:39	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x1223e8

[?] can't find file_offset of VA 0x12251c

[?] can't find file_offset of VA 0x122650

[?] can't find file_offset of VA 0x122784

[?] can't find file_offset of VA 0x1228b8

[?] can't find file_offset of VA 0x1229ec

[?] can't find file_offset of VA 0x122b20

[?] can't find file_offset of VA 0x122c54

[?] can't find file_offset of VA 0x122e24

[?] can't find file_offset of VA 0x123008

[?] can't find file_offset of VA 0x1231d8

[?] can't find file_offset of VA 0x1233a8

[?] can't find file_offset of VA 0x123578

[?] can't find file_offset of VA 0x123748

[?] can't find file_offset of VA 0x123918

[?] can't find file_offset of VA 0x123ae8

[?] can't find file_offset of VA 0x123cb8

[?] can't find file_offset of VA 0x123e88

[?] can't find file_offset of VA 0x123f48

[?] can't find file_offset of VA 0x124028

[?] can't find file_offset of VA 0x124108

[?] can't find file_offset of VA 0x1241e8

[?] can't find file_offset of VA 0x1242a8

[?] can't find file_offset of VA 0x124368

[?] can't find file_offset of VA 0x124448

[?] can't find file_offset of VA 0x1250a0

[?] can't find file_offset of VA 0x1253c8

[?] can't find file_offset of VA 0x125488

[?] can't find file_offset of VA 0x125568

[?] can't find file_offset of VA 0x125650

[?] can't find file_offset of VA 0x125978

[?] can't find file_offset of VA 0x125a38

[?] can't find file_offset of VA 0x125d60

[?] can't find file_offset of VA 0x126088

[?] can't find file_offset of VA 0x1263b0

[?] can't find file_offset of VA 0x12a6b8

[?] can't find file_offset of VA 0x12d7f8

[?] can't find file_offset of VA 0x12e4b8

[?] can't find file_offset of VA 0x12f210

[?] can't find file_offset of VA 0x12ff20

[?] can't find file_offset of VA 0x12ff30

[?] can't find file_offset of VA 0x1305a8

[?] can't find file_offset of VA 0x1309dc

[?] can't find file_offset of VA 0x130e90

[?] can't find file_offset of VA 0x131034

[?] can't find file_offset of VA 0x1316a8

[?] can't find file_offset of VA 0x131e5c

[?] can't find file_offset of VA 0x1409e4

[?] can't find file_offset of VA 0x140ed0

[?] can't find file_offset of VA 0x141434

[?] can't find file_offset of VA 0x142f3c

[?] can't find file_offset of VA 0x144acc

[?] can't find file_offset of VA 0x144dd8

[?] can't find file_offset of VA 0x144dec

[?] can't find file_offset of VA 0x144e00

[?] can't find file_offset of VA 0x144e14

[?] can't find file_offset of VA 0x144e28

[?] can't find file_offset of VA 0x144e3c

[?] can't find file_offset of VA 0x144e50