setup.exe - Setup

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	setup.exe
size	677888 (0xa5800)
md5	d02112f8e4eb790f40095b9266c43eeb

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
93	4035	15
1	0	330
125	50727	18
109	50727	142
110	50727	76
114	50727	28
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4333dcc9
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x46c00
SizeOfInitializedData	0x5e800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2aca8
BaseOfCode	0x1000
BaseOfData	0x48000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	8.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xa9000
SizeOfHeaders	0x400
CheckSum	0xb0aae
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x46bcc	0x46c00	R-X CODE
.data	0x48000	0x35dc	0x1a00	RW- IDATA
.rsrc	0x4c000	0x5cc3a	0x5ce00	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x46a98	0x78
RESOURCE	0x4c000	0x5cc3a
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x1380	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x6c50	0x40
Bound_IAT	0	0
IAT	0x1000	0x31c
Delay_IAT	0x4678c	0x80
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	270376	0
ICON	#2	67624	0
ICON	#3	9640	0
ICON	#4	4264	0
ICON	#5	2440	0
ICON	#6	1128	0
ICON	#10	744	1252
ICON	#11	296	1252
DIALOG	#119	144	1252
DIALOG	#120	416	1252
DIALOG	#1101	420	1252
GROUP_ICON	#107	90	1252
GROUP_ICON	#108	34	1252
VERSION	#1	736	1252
#40	HOMESITE	10	1252
#41	SETUPCFG	1940	1252
#43	1000	22	1252
#43	1001	20	1252
#43	1002	18	1252
#43	1003	24	1252
#43	1004	24	1252
#43	1005	6	1252
#43	1006	8	1252
#43	1008	246	1252
#43	1009	144	1252
#43	1010	64	1252
#43	1011	68	1252
#43	1012	18	1252
#43	1013	64	1252
#43	1016	336	1252
#43	1017	462	1252
#43	1018	1044	1252
#43	1019	54	1252
#43	1020	14	1252
#43	1021	94	1252
#43	1022	194	1252
#43	1023	10	1252
#43	1025	82	1252
#43	1026	154	1252
#43	1028	126	1252
#43	1029	134	1252
#43	1030	352	1252
#43	1031	76	1252
#43	1032	222	1252
#43	1033	136	1252
#43	1034	118	1252
#43	1035	308	1252
#43	1036	12	1252
#43	1037	68	1252
#43	1038	38	1252
#43	1039	70	1252
#43	1041	148	1252
#43	1042	106	1252
#43	1043	178	1252
#43	1044	96	1252
#43	1045	130	1252
#43	1046	102	1252
#43	1047	88	1252
#43	1048	22	1252
#43	1049	108	1252
#43	1050	202	1252
#43	1051	18	1252
#43	1052	74	1252
#43	1053	20	1252
#43	1054	190	1252
#43	1055	16	1252
#43	1057	312	1252
#43	1058	174	1252
#43	1200	58	1252
#43	1201	220	1252
#43	1202	96	1252
#43	1203	122	1252
#43	1204	242	1252
#43	1205	30	1252
#43	1206	40	1252
#43	1207	132	1252
#43	1208	130	1252
#43	1209	72	1252
#43	1210	92	1252
#43	1211	26	1252
#43	1212	22	1252
#43	1213	18	1252
#43	1400	362	1252
#43	1401	136	1252
#43	1402	88	1252
#43	1405	114	1252
#43	1416	142	1252
#43	1420	84	1252
#43	1423	84	1252
#43	1424	136	1252
#43	1425	238	1252
#43	1426	170	1252
#43	1427	268	1252
#43	1429	146	1252
#43	1430	136	1252
#43	1432	218	1252
#43	1433	256	1252
#43	1435	124	1252
#43	1436	186	1252
#43	1437	130	1252
#43	1438	152	1252
#43	1442	176	1252
#43	1443	192	1252
#43	1444	142	1252
#43	1446	164	1252
#43	1447	284	1252
#43	1448	208	1252
#43	CULTURE	6	1252
#44	COUNT	4	1252
#45	CODEPAGE	10	1252
#45	SETUPRES	514	1252

module_name	hint	function_name
KERNEL32.dll	150	EndUpdateResourceA
KERNEL32.dll	629	MultiByteToWideChar
KERNEL32.dll	575	IsValidCodePage
KERNEL32.dll	334	GetDiskFreeSpaceExA
KERNEL32.dll	854	Sleep
KERNEL32.dll	795	SetFilePointer
KERNEL32.dll	227	FindResourceA
KERNEL32.dll	599	LoadResource
KERNEL32.dll	613	LockResource
KERNEL32.dll	853	SizeofResource
KERNEL32.dll	79	CreateEventA
KERNEL32.dll	790	SetEvent
KERNEL32.dll	243	FormatMessageA
KERNEL32.dll	604	LocalFree
KERNEL32.dll	102	CreateProcessA
KERNEL32.dll	381	GetModuleFileNameA
KERNEL32.dll	188	ExpandEnvironmentStringsA
KERNEL32.dll	504	GlobalAlloc
KERNEL32.dll	511	GlobalFree
KERNEL32.dll	449	GetSystemDirectoryA
KERNEL32.dll	489	GetVersionExA
KERNEL32.dll	58	CompareStringA
KERNEL32.dll	453	GetSystemInfo
KERNEL32.dll	322	GetCurrentProcess
KERNEL32.dll	350	GetFileAttributesA
KERNEL32.dll	469	GetTempPathA
KERNEL32.dll	467	GetTempFileNameA
KERNEL32.dll	131	DeleteFileA
KERNEL32.dll	75	CreateDirectoryA
KERNEL32.dll	67	CopyFileA
KERNEL32.dll	916	WideCharToMultiByte
KERNEL32.dll	344	GetEnvironmentVariableA
KERNEL32.dll	693	ReadFile
KERNEL32.dll	499	GetWindowsDirectoryA
KERNEL32.dll	327	GetDateFormatA
KERNEL32.dll	480	GetTimeFormatA
KERNEL32.dll	556	InterlockedIncrement
KERNEL32.dll	552	InterlockedDecrement
KERNEL32.dll	553	InterlockedExchange
KERNEL32.dll	272	GetCommandLineA
KERNEL32.dll	534	HeapFree
KERNEL32.dll	528	HeapAlloc
KERNEL32.dll	419	GetProcessHeap
KERNEL32.dll	439	GetStartupInfoA
KERNEL32.dll	862	TerminateProcess
KERNEL32.dll	878	UnhandledExceptionFilter
KERNEL32.dll	842	SetUnhandledExceptionFilter
KERNEL32.dll	569	IsDebuggerPresent
KERNEL32.dll	323	GetCurrentProcessId
KERNEL32.dll	679	RaiseException
KERNEL32.dll	727	RtlUnwind
KERNEL32.dll	52	CloseHandle
KERNEL32.dll	185	ExitProcess
KERNEL32.dll	580	LCMapStringA
KERNEL32.dll	581	LCMapStringW
KERNEL32.dll	260	GetCPInfo
KERNEL32.dll	441	GetStdHandle
KERNEL32.dll	246	FreeEnvironmentStringsA
KERNEL32.dll	341	GetEnvironmentStrings
KERNEL32.dll	247	FreeEnvironmentStringsW
KERNEL32.dll	343	GetEnvironmentStringsW
KERNEL32.dll	804	SetHandleCount
KERNEL32.dll	358	GetFileType
KERNEL32.dll	869	TlsGetValue
KERNEL32.dll	867	TlsAlloc
KERNEL32.dll	870	TlsSetValue
KERNEL32.dll	868	TlsFree
KERNEL32.dll	808	SetLastError
KERNEL32.dll	326	GetCurrentThreadId
KERNEL32.dll	532	HeapDestroy
KERNEL32.dll	530	HeapCreate
KERNEL32.dll	899	VirtualFree
KERNEL32.dll	675	QueryPerformanceCounter
KERNEL32.dll	458	GetSystemTimeAsFileTime
KERNEL32.dll	253	GetACP
KERNEL32.dll	403	GetOEMCP
KERNEL32.dll	897	VirtualAlloc
KERNEL32.dll	538	HeapReAlloc
KERNEL32.dll	290	GetConsoleCP
KERNEL32.dll	307	GetConsoleMode
KERNEL32.dll	238	FlushFileBuffers
KERNEL32.dll	540	HeapSize
KERNEL32.dll	483	GetUserDefaultLCID
KERNEL32.dll	372	GetLocaleInfoA
KERNEL32.dll	175	EnumSystemLocalesA
KERNEL32.dll	577	IsValidLocale
KERNEL32.dll	442	GetStringTypeA
KERNEL32.dll	445	GetStringTypeW
KERNEL32.dll	373	GetLocaleInfoW
KERNEL32.dll	921	WriteConsoleA
KERNEL32.dll	309	GetConsoleOutputCP
KERNEL32.dll	931	WriteConsoleW
KERNEL32.dll	823	SetStdHandle
KERNEL32.dll	83	CreateFileA
KERNEL32.dll	86	CreateFileW
KERNEL32.dll	784	SetEndOfFile
KERNEL32.dll	129	DeleteCriticalSection
KERNEL32.dll	593	LeaveCriticalSection
KERNEL32.dll	152	EnterCriticalSection
KERNEL32.dll	111	CreateThread
KERNEL32.dll	547	InitializeCriticalSection
KERNEL32.dll	628	MulDiv
KERNEL32.dll	973	lstrlenW
KERNEL32.dll	346	GetExitCodeProcess
KERNEL32.dll	912	WaitForSingleObject
KERNEL32.dll	479	GetTickCount
KERNEL32.dll	220	FindNextFileA
KERNEL32.dll	206	FindClose
KERNEL32.dll	210	FindFirstFileA
KERNEL32.dll	932	WriteFile
KERNEL32.dll	248	FreeLibrary
KERNEL32.dll	369	GetLastError
KERNEL32.dll	416	GetProcAddress
KERNEL32.dll	594	LoadLibraryA
KERNEL32.dll	383	GetModuleHandleA
KERNEL32.dll	474	GetThreadLocale
KERNEL32.dll	885	UpdateResourceA
KERNEL32.dll	32	BeginUpdateResourceA
KERNEL32.dll	600	LocalAlloc
KERNEL32.dll	972	lstrlenA
KERNEL32.dll	886	UpdateResourceW
KERNEL32.dll	470	GetTempPathW
KERNEL32.dll	468	GetTempFileNameW
KERNEL32.dll	450	GetSystemDirectoryW
KERNEL32.dll	382	GetModuleFileNameW
KERNEL32.dll	353	GetFileAttributesW
KERNEL32.dll	244	FormatMessageW
KERNEL32.dll	230	FindResourceW
KERNEL32.dll	132	DeleteFileW
KERNEL32.dll	105	CreateProcessW
KERNEL32.dll	78	CreateDirectoryW
KERNEL32.dll	70	CopyFileW
KERNEL32.dll	33	BeginUpdateResourceW
KERNEL32.dll	488	GetVersion
GDI32.dll	58	CreateFontIndirectA
GDI32.dll	202	EnumFontFamiliesExA
GDI32.dll	143	DeleteObject
GDI32.dll	405	GetObjectA
GDI32.dll	421	GetStockObject
GDI32.dll	140	DeleteDC
GDI32.dll	407	GetObjectW
GDI32.dll	363	GetDeviceCaps
GDI32.dll	45	CreateCompatibleDC
GDI32.dll	436	GetTextExtentPoint32A
GDI32.dll	444	GetTextMetricsA
GDI32.dll	526	SelectObject
USER32.dll	561	ScreenToClient
USER32.dll	583	SetClassLongA
USER32.dll	442	LoadCursorA
USER32.dll	589	SetCursor
USER32.dll	446	LoadIconA
USER32.dll	448	LoadImageA
USER32.dll	598	SetFocus
USER32.dll	278	GetFocus
USER32.dll	196	EnableWindow
USER32.dll	493	MsgWaitForMultipleObjects
USER32.dll	595	SetDlgItemTextA
USER32.dll	646	SetWindowTextA
USER32.dll	273	GetDlgItem
USER32.dll	161	DispatchMessageA
USER32.dll	682	TranslateMessage
USER32.dll	417	IsDialogMessageA
USER32.dll	512	PeekMessageA
USER32.dll	153	DestroyWindow
USER32.dll	658	ShowWindow
USER32.dll	599	SetForegroundWindow
USER32.dll	492	MoveWindow
USER32.dll	85	CreateDialogParamA
USER32.dll	82	CreateDialogIndirectParamA
USER32.dll	571	SendMessageA
USER32.dll	255	GetClientRect
USER32.dll	656	ShowScrollBar
USER32.dll	566	SendDlgItemMessageA
USER32.dll	665	SystemParametersInfoA
USER32.dll	372	GetWindowRect
USER32.dll	42	CharNextA
USER32.dll	225	ExitWindowsEx
USER32.dll	479	MessageBoxA
USER32.dll	349	GetSystemMetrics
USER32.dll	191	DrawTextW
USER32.dll	554	ReleaseDC
USER32.dll	271	GetDialogBaseUnits
USER32.dll	459	LoadStringA
USER32.dll	268	GetDC
USER32.dll	486	MessageBoxW
ole32.dll	105	CoUninitialize
ole32.dll	59	CoInitialize
SHELL32.dll	263	ShellExecuteA
SHELL32.dll	267	ShellExecuteW
SHELL32.dll	183	SHGetMalloc
SHELL32.dll	189	SHGetPathFromIDListW
SHELL32.dll	195	SHGetSpecialFolderLocation
SHELL32.dll	266	ShellExecuteExW
SHELL32.dll	265	ShellExecuteExA

StringTable 040904B0

CompanyName
FileDescription	Setup
FileVersion	8.0.50727.42 (RTM.050727-4200)
InternalName	setup.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	setup.exe
ProductName
ProductVersion	8.0.50727.42

VS_FIXEDFILEINFO

FileVersion	8.0.50727.42
ProductVersion	8.0.50727.42
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0xa
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	677888	EXE	09/23/2005 10:45:29	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

setup.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

setup.exe
-