filenameSetup_AMCG.exe
size2048371 (0x1f4173)
md5c5dade1a3eb08527e11b592c9443eedf
typePE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x48cfc008
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.0
SizeOfCode0x14000
SizeOfInitializedData0xc400
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0x15000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x2a000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Rar SFX Archive

Sections

namevavsizeraw sizeflags
.text0x10000x140000x13a00R-X CODE
.data0x150000x80000xa00RW- IDATA
.idata0x1d0000x20000x1200R-- IDATA
.rsrc0x1f0000xa7940xa800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1d0000x1007
RESOURCE0x1f0000xa794
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#10129981252
ICON#1169361252
ICON#296401252
ICON#342641252
ICON#424401252
ICON#511281252
DIALOGASKNEXTVOL3741252
DIALOGGETPASSWORD12141252
DIALOGLICENSEDLG1821252
DIALOGRENAMEDLG2581252
DIALOGREPLACEFILEDLG6421252
DIALOGSTARTDLG4141252
STRING#72261252
STRING#83601252
STRING#92161252
STRING#104201252
RCDATADVCLAL161252
GROUP_ICON#100761252
MANIFEST#18311252
idlangstring
1002052选择目标文件夹
1012052正在解压 %s
1022052正在跳过 %s
1032052不可预料的压缩文件末端
1042052文件"%s"头损坏
1052052压缩文件注释头损坏
1062052压缩文件注释损坏
1072052没有足够的内存
1082052%s 的未知方式
1092052无法打开 %s
1102052无法创建 %s
1112052无法创建文件夹 %s
1122052加密文件 %s CRC 失败(密码错误?)
1132052%s CRC 失败。
1142052包裹数据中的 %s CRC 失败。
1152052%s 的密码错误
1162052文件 %s 写入错误。磁盘可能已满
1172052文件 %s 读取错误
1182052文件关闭错误
1192052必需的压缩卷不存在
1202052压缩文件格式未知或已经损坏
1212052正在从 %s 中解压
1232052下一压缩卷
1242052压缩文件头损坏。
1252052关闭
1262052错误
1272052执行指定操作时发生错误 查看信息窗口获取更多细节信息
1282052字节
1292052修改于
1302052文件夹无法访问
1312052某些文件无法被创建。 请关闭所有正在运行的应用程序,重新启动 Windows 并再次运行此安装程序
1322052某些安装文件被破坏。 请下载一个最新版本或重试安装程序
1332052所有文件
1502052<style>body{font-family:"Arial,宋体";font-size:12;}</style><ul><li>单击 <b>安装</b> 按钮开始解压。</li><br><br>
1512052<li>使用 <b>浏览</b> 按钮从目录树中选择目标文件夹。它也可以手动输入。
1522052</lI>
1532052<br><br>
1542052<lI>如果指定的目标文件夹不存在，在文件解压前它将被自动创建。
1552052</lI></ul>
module_namehintordfunction_name
ADVAPI32.DLLAdjustTokenPrivileges
ADVAPI32.DLLLookupPrivilegeValueA
ADVAPI32.DLLOpenProcessToken
ADVAPI32.DLLRegCloseKey
ADVAPI32.DLLRegCreateKeyExA
ADVAPI32.DLLRegOpenKeyExA
ADVAPI32.DLLRegQueryValueExA
ADVAPI32.DLLRegSetValueExA
ADVAPI32.DLLSetFileSecurityA
ADVAPI32.DLLSetFileSecurityW
KERNEL32.DLLCloseHandle
KERNEL32.DLLCompareStringA
KERNEL32.DLLCreateDirectoryA
KERNEL32.DLLCreateDirectoryW
KERNEL32.DLLCreateFileA
KERNEL32.DLLCreateFileW
KERNEL32.DLLDeleteFileA
KERNEL32.DLLDeleteFileW
KERNEL32.DLLDosDateTimeToFileTime
KERNEL32.DLLExitProcess
KERNEL32.DLLExpandEnvironmentStringsA
KERNEL32.DLLFileTimeToLocalFileTime
KERNEL32.DLLFileTimeToSystemTime
KERNEL32.DLLFindClose
KERNEL32.DLLFindFirstFileA
KERNEL32.DLLFindFirstFileW
KERNEL32.DLLFindNextFileA
KERNEL32.DLLFindNextFileW
KERNEL32.DLLFindResourceA
KERNEL32.DLLFreeLibrary
KERNEL32.DLLGetCPInfo
KERNEL32.DLLGetCommandLineA
KERNEL32.DLLGetCurrentDirectoryA
KERNEL32.DLLGetCurrentProcess
KERNEL32.DLLGetDateFormatA
KERNEL32.DLLGetFileAttributesA
KERNEL32.DLLGetFileAttributesW
KERNEL32.DLLGetFileType
KERNEL32.DLLGetFullPathNameA
KERNEL32.DLLGetLastError
KERNEL32.DLLGetLocaleInfoA
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetModuleFileNameW
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetNumberFormatA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLGetProcessHeap
KERNEL32.DLLGetStdHandle
KERNEL32.DLLGetSystemTime
KERNEL32.DLLGetTempPathA
KERNEL32.DLLGetTickCount
KERNEL32.DLLGetTimeFormatA
KERNEL32.DLLGetVersionExA
KERNEL32.DLLGlobalAlloc
KERNEL32.DLLHeapAlloc
KERNEL32.DLLHeapFree
KERNEL32.DLLHeapReAlloc
KERNEL32.DLLIsDBCSLeadByte
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLLocalFileTimeToFileTime
KERNEL32.DLLMoveFileA
KERNEL32.DLLMoveFileExA
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLReadFile
KERNEL32.DLLSetCurrentDirectoryA
KERNEL32.DLLSetEndOfFile
KERNEL32.DLLSetEnvironmentVariableA
KERNEL32.DLLSetFileAttributesA
KERNEL32.DLLSetFileAttributesW
KERNEL32.DLLSetFilePointer
KERNEL32.DLLSetFileTime
KERNEL32.DLLSetLastError
KERNEL32.DLLSleep
KERNEL32.DLLSystemTimeToFileTime
KERNEL32.DLLWaitForSingleObject
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLWriteFile
KERNEL32.DLLlstrcmpiA
KERNEL32.DLLlstrlenA
COMCTL32.DLL17
COMDLG32.DLLCommDlgExtendedError
COMDLG32.DLLGetOpenFileNameA
COMDLG32.DLLGetSaveFileNameA
GDI32.DLLDeleteObject
SHELL32.DLLSHBrowseForFolderA
SHELL32.DLLSHChangeNotify
SHELL32.DLLSHFileOperationA
SHELL32.DLLSHGetFileInfoA
SHELL32.DLLSHGetMalloc
SHELL32.DLLSHGetSpecialFolderLocation
SHELL32.DLLShellExecuteExA
SHELL32.DLLSHGetPathFromIDListA
USER32.DLLCharToOemA
USER32.DLLCharToOemBuffA
USER32.DLLCharUpperA
USER32.DLLCopyRect
USER32.DLLCreateWindowExA
USER32.DLLDefWindowProcA
USER32.DLLDestroyIcon
USER32.DLLDestroyWindow
USER32.DLLDialogBoxParamA
USER32.DLLDispatchMessageA
USER32.DLLEnableWindow
USER32.DLLEndDialog
USER32.DLLFindWindowExA
USER32.DLLGetClassNameA
USER32.DLLGetClientRect
USER32.DLLGetDlgItem
USER32.DLLGetDlgItemTextA
USER32.DLLGetMessageA
USER32.DLLGetParent
USER32.DLLGetSysColor
USER32.DLLGetSystemMetrics
USER32.DLLGetWindow
USER32.DLLGetWindowLongA
USER32.DLLGetWindowRect
USER32.DLLGetWindowTextA
USER32.DLLIsWindow
USER32.DLLIsWindowVisible
USER32.DLLLoadBitmapA
USER32.DLLLoadCursorA
USER32.DLLLoadIconA
USER32.DLLLoadStringA
USER32.DLLMapWindowPoints
USER32.DLLMessageBoxA
USER32.DLLOemToCharA
USER32.DLLOemToCharBuffA
USER32.DLLPeekMessageA
USER32.DLLPostMessageA
USER32.DLLRegisterClassExA
USER32.DLLSendDlgItemMessageA
USER32.DLLSendMessageA
USER32.DLLSetDlgItemTextA
USER32.DLLSetFocus
USER32.DLLSetMenu
USER32.DLLSetWindowLongA
USER32.DLLSetWindowPos
USER32.DLLSetWindowTextA
USER32.DLLShowWindow
USER32.DLLTranslateMessage
USER32.DLLUpdateWindow
USER32.DLLWaitForInputIdle
USER32.DLLwsprintfA
USER32.DLLwvsprintfA
OLE32.DLLCLSIDFromString
OLE32.DLLCoCreateInstance
OLE32.DLLCreateStreamOnHGlobal
OLE32.DLLOleInitialize
OLE32.DLLOleUninitialize
offsetsizetypecomment
0132096EXE09/16/2008 14:17:44#
15c115HTM#
2040051207RAREncrypted Headers!#
2cc071865068BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 2048371 bytes (2001 KiB)


--
Type = Rar
Offset = 132096
Physical Size = 1916275
Solid = -
Blocks = 1
Multivolume = -
Volumes = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2014-05-10 22:01:30 ....A      1925423      1916091  AMCSetupen.exe
------------------- ----- ------------ ------------  ------------------------
2014-05-10 22:01:30            1925423      1916091  1 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK