filenamepm701tryout.exe
size67253473 (0x40234e1)
md5bc1283d6b4678e0bce5e46964834805f
typePE32 executable (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
0021
1181688
14729918
10816873
19904915
10185
11844710
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3b965ac1
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x12000
SizeOfInitializedData0x34000
SizeOfUninitializedData0
AddressOfEntryPoint0x8947
BaseOfCode0x1000
BaseOfData0x13000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x47000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v4.x

Sections

namevavsizeraw sizeflags
.text0x10000x11b160x12000R-X CODE
.rdata0x130000x19500x2000R-- IDATA
.data0x150000x4e380x2000RW- IDATA
.rsrc0x1a0000x2caa80x2d000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x139380xa0
RESOURCE0x1a0000x2caa8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x130000x2fc
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#1181545300
BITMAP#132145640
ICON#12960
ICON#213840
ICON#37440
ICON#422160
DIALOGIDD_WIZ97SHEET4100
DIALOG#10001460
DIALOG#10011900
DIALOG#10022140
DIALOG#10031740
DIALOG#10046260
DIALOG#10052260
DIALOG#10061440
DIALOG#10072400
DIALOG#1009980
STRING#115860
STRING#34240
STRING#42820
STRING#191860
STRING#208700
STRING#211520
STRING#376880
GROUP_ICON#103620
VERSION#116400
idlangstring
11033PackageForTheWeb Error
21033This self extracting executable file appears to have been corrupted and cannot be executed. You should obtain a new copy of this file to insure that it will execute correctly.
31033Unable to open the self-extracting executable file. The file is locked or in use by another process. The installation will terminate.
41033PackageForTheWeb
51033Unable to access the source file!
61033Unable to create the cabinet file!
71033Unable to access the specified path.
81033Unable to create the specified output folder. Bad path name.
91033Unable to start the decompression process!
101033The EXE file has been corrupted. Unable to continue.
121033Unable to execute the specified command line!
131033This program is used internally by PackageFromTheWeb. It should not be executed directly.
141033Bad or missing header information!
321033Do you wish to cancel the installation?
341033Insufficient disk space to open the package!
351033Security error! Invalid password.
371033Unpacking '%s'...
381033Memory allocation failure!
441033General failure reading this package.
481033Unable to initialize the extension DLL.
491033Error Executing the Specified Program
501033Unpacking %s...
521033The specified drive does not exist
3001033No error
3011033Missing cabinet file!
3021033Input file is not a cabinet.
3031033Bad cabinet version.
3041033Corrupt cabinet file!
3051033Memory allocation failure!
3061033Invalid file compression type!
3071033CRC failure.
3081033System error during decompression
3101033Incorrect cabinet file selected
3111033The package decompression has been cancelled.
3121033Unable to create the specified output folder!
3131033Unable to compute required disk space
3141033There is not enough space on drive %s to extract this package.
3151033MB
3161033KB
3171033bytes
3181033There is not enough space on drive %s to extract this package
3191033version
3241033Please free up %.2f %s and click Retry
328103312,MS Shell Dlg
3291033&Finish
600110338,MS Shell Dlg
600210338,MS Shell Dlg
module_namehintordfunction_name
KERNEL32.dll339GetProcAddress
KERNEL32.dll190FormatMessageA
KERNEL32.dll92DeleteFileA
KERNEL32.dll513MulDiv
KERNEL32.dll468IsDBCSLeadByte
KERNEL32.dll286GetExitCodeProcess
KERNEL32.dll71CreateProcessA
KERNEL32.dll380GetTempFileNameA
KERNEL32.dll365GetSystemDefaultLCID
KERNEL32.dll765WaitForSingleObject
KERNEL32.dll36CompareStringA
KERNEL32.dll707Sleep
KERNEL32.dll663SetFileTime
KERNEL32.dll487LocalFileTimeToFileTime
KERNEL32.dll104DosDateTimeToFileTime
KERNEL32.dll195FreeLibrary
KERNEL32.dll587RemoveDirectoryA
KERNEL32.dll172FindNextFileA
KERNEL32.dll785WritePrivateProfileSectionA
KERNEL32.dll358GetStartupInfoA
KERNEL32.dll782WriteFile
KERNEL32.dll573ReadFile
KERNEL32.dll659SetFileAttributesA
KERNEL32.dll489LocalFree
KERNEL32.dll485LocalAlloc
KERNEL32.dll498LockResource
KERNEL32.dll484LoadResource
KERNEL32.dll178FindResourceA
KERNEL32.dll706SizeofResource
KERNEL32.dll314GetModuleHandleA
KERNEL32.dll419GlobalFree
KERNEL32.dll430GlobalUnlock
KERNEL32.dll423GlobalLock
KERNEL32.dll412GlobalAlloc
KERNEL32.dll514MultiByteToWideChar
KERNEL32.dll812lstrcmpiA
KERNEL32.dll275GetDiskFreeSpaceA
KERNEL32.dll436HeapAlloc
KERNEL32.dll341GetProcessHeap
KERNEL32.dll442HeapFree
KERNEL32.dll312GetModuleFileNameA
KERNEL32.dll140ExitProcess
KERNEL32.dll55CreateFileA
KERNEL32.dll56CreateFileMappingA
KERNEL32.dll501MapViewOfFile
KERNEL32.dll734UnmapViewOfFile
KERNEL32.dll818lstrcpynA
KERNEL32.dll661SetFilePointer
KERNEL32.dll293GetFileSize
KERNEL32.dll163FindFirstFileA
KERNEL32.dll48CreateDirectoryA
KERNEL32.dll301GetLastError
KERNEL32.dll335GetPrivateProfileStringA
KERNEL32.dll159FindClose
KERNEL32.dll288GetFileAttributesA
KERNEL32.dll806lstrcatA
KERNEL32.dll821lstrlenA
KERNEL32.dll407GetWindowsDirectoryA
KERNEL32.dll815lstrcpyA
KERNEL32.dll368GetSystemDirectoryA
KERNEL32.dll382GetTempPathA
KERNEL32.dll331GetPrivateProfileSectionA
KERNEL32.dll479LoadLibraryA
KERNEL32.dll508MoveFileExA
KERNEL32.dll787WritePrivateProfileStringA
KERNEL32.dll356GetShortPathNameA
KERNEL32.dll185FlushFileBuffers
KERNEL32.dll30CloseHandle
KERNEL32.dll461IsBadCodePtr
KERNEL32.dll464IsBadReadPtr
KERNEL32.dll680SetStdHandle
KERNEL32.dll477LCMapStringW
KERNEL32.dll476LCMapStringA
KERNEL32.dll696SetUnhandledExceptionFilter
KERNEL32.dll360GetStdHandle
KERNEL32.dll664SetHandleCount
KERNEL32.dll296GetFileType
KERNEL32.dll281GetEnvironmentStrings
KERNEL32.dll769WideCharToMultiByte
KERNEL32.dll283GetEnvironmentStringsW
KERNEL32.dll193FreeEnvironmentStringsA
KERNEL32.dll731UnhandledExceptionFilter
KERNEL32.dll194FreeEnvironmentStringsW
KERNEL32.dll715TerminateProcess
KERNEL32.dll364GetStringTypeW
KERNEL32.dll265GetCurrentProcess
KERNEL32.dll326GetOEMCP
KERNEL32.dll201GetACP
KERNEL32.dll361GetStringTypeA
KERNEL32.dll467IsBadWritePtr
KERNEL32.dll445HeapReAlloc
KERNEL32.dll207GetCPInfo
KERNEL32.dll753VirtualFree
KERNEL32.dll438HeapCreate
KERNEL32.dll750VirtualAlloc
KERNEL32.dll398GetVersion
KERNEL32.dll218GetCommandLineA
KERNEL32.dll440HeapDestroy
KERNEL32.dll599RtlUnwind
USER32.dll312GetParent
USER32.dll261GetDlgItem
USER32.dll563SetFocus
USER32.dll531SendDlgItemMessageA
USER32.dll185EnableWindow
USER32.dll54CheckRadioButton
USER32.dll346GetWindowLongA
USER32.dll431LoadStringA
USER32.dll420LoadImageA
USER32.dll451MessageBoxA
USER32.dll37CharNextA
USER32.dll398IsDlgButtonChecked
USER32.dll263GetDlgItemTextA
USER32.dll51CheckDlgButton
USER32.dll560SetDlgItemTextA
USER32.dll519ReleaseDC
USER32.dll256GetDC
USER32.dll342GetWindow
USER32.dll483PostMessageA
USER32.dll611SetWindowTextA
USER32.dll691wsprintfA
USER32.dll258GetDesktopWindow
USER32.dll354GetWindowTextA
USER32.dll144DestroyWindow
USER32.dll80CreateDialogParamA
USER32.dll214FillRect
USER32.dll326GetSysColor
USER32.dll327GetSysColorBrush
USER32.dll189EndPaint
USER32.dll12BeginPaint
USER32.dll177DrawTextA
USER32.dll462MoveWindow
USER32.dll243GetClientRect
USER32.dll526ScreenToClient
USER32.dll310GetNextDlgTabItem
USER32.dll579SetParent
USER32.dll441MapDialogRect
USER32.dll403IsWindow
USER32.dll352GetWindowRect
USER32.dll77CreateDialogIndirectParamA
USER32.dll623ShowWindow
USER32.dll382InvalidateRect
USER32.dll404IsWindowEnabled
USER32.dll608SetWindowPos
USER32.dll662UpdateWindow
USER32.dll396IsDialogMessageA
USER32.dll605SetWindowLongA
USER32.dll223GetActiveWindow
USER32.dll544SetActiveWindow
USER32.dll418LoadIconA
USER32.dll481PeekMessageA
USER32.dll536SendMessageA
USER32.dll151DispatchMessageA
USER32.dll647TranslateMessage
GDI32.dll56CreateFontIndirectA
GDI32.dll435RealizePalette
GDI32.dll463SelectPalette
GDI32.dll67CreatePalette
GDI32.dll343GetObjectA
GDI32.dll359GetStockObject
GDI32.dll49CreateDIBitmap
GDI32.dll376GetTextExtentPointA
GDI32.dll462SelectObject
GDI32.dll143EnumFontFamiliesExA
GDI32.dll81DeleteDC
GDI32.dll18BitBlt
GDI32.dll524TextOutA
GDI32.dll469SetBkMode
GDI32.dll468SetBkColor
GDI32.dll43CreateCompatibleDC
GDI32.dll78CreateSolidBrush
GDI32.dll506SetTextColor
GDI32.dll84DeleteObject
GDI32.dll301GetDeviceCaps
ADVAPI32.dll388RegCloseKey
ADVAPI32.dll423RegQueryValueExA
ADVAPI32.dll413RegOpenKeyExA
SHELL32.dll140ShellExecuteA
SHELL32.dll62SHBrowseForFolderA
SHELL32.dll99SHGetPathFromIDListA
SHELL32.dll94SHGetMalloc
LZ32.dll9LZOpenFileA
LZ32.dll5LZCopy
LZ32.dll3LZClose
COMCTL32.dll17

StringTable 040904b0

Comments
CompanyNameAdobe
FileDescription
InternalNamestub32
OriginalFilenamestub32i.exe
FileVersion7.0.1
LegalCopyright
ProductNamePageMaker Tryout
ProductVersion7.0.1

VS_FIXEDFILEINFO

FileVersion4.0.100.1190
ProductVersion4.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0278528EXE09/05/2001 17:02:57#
15c115HTM#
190d1553175GIF(291 x 208)#
190ddbc40982309BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 67253473 bytes (65 MiB)


--
Type = Cab
Offset = 283986
Physical Size = 66969487
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 12345

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2002-05-22 01:04:14 ....A          117               /DATA.TAG
2002-05-22 01:05:56 ....A     62253030               /data1.cab
2002-05-22 01:04:26 ....A       254187               /data1.hdr
1998-09-18 02:42:08 ....A         4679               /lang.dat
2002-05-22 01:05:56 ....A          609               /layout.bin
1998-07-27 06:11:06 ....A          450               /os.dat
2002-05-13 23:40:20 ....A       381656               /Setup.bmp
1998-10-02 06:34:32 ....A        71680               /Setup.exe
2002-05-22 01:04:14 ....A          110               /SETUP.INI
2002-05-22 01:04:08 ....A       116980               /setup.ins
2002-05-22 01:04:14 ....A           49               /setup.lid
1998-10-02 06:45:08 ....A       297989               /_INST32I.EX_
1998-10-02 06:36:10 ....A        27648               /_ISDel.exe
1998-09-29 05:04:56 ....A        34816               /_Setup.dll
2002-05-22 01:04:10 ....A       168265               /_sys1.cab
2002-05-22 01:04:10 ....A         5324               /_sys1.hdr
2002-05-22 01:04:12 ....A      4288018               /_user1.cab
2002-05-22 01:04:12 ....A         7708               /_user1.hdr
------------------- ----- ------------ ------------  ------------------------
2002-05-22 01:05:56           67913315     67253473  18 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK