parentECCRegen.exe
filenameECCRegen.unpacked.exe
size141344 (0x22820)
md5d1224538f78d5557dce833de1cf24dfa
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x3ae5821c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion1.3
SizeOfCode0x3a00
SizeOfInitializedData0x1ea00
SizeOfUninitializedData0x400
AddressOfEntryPoint0x11cb
BaseOfCode0x1000
BaseOfData0x5000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x26000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ (3.0 old crap)

Sections

namevavsizeraw sizeflags
.text0x10000x38a00x38a0R-X CODE
.bss0x50000x38c0RW- UDATA
.rdata0x60000x500x50R-- CODE
.data0x70000x9b80x9b8RW- IDATA
.idata0x80000xee40xee4RW- CODE IDATA
.rsrc0x90000x1cc580x1cc58RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x80000xee4
RESOURCE0x90000x1cc58
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#13080
BITMAP#100993060
BITMAP#10114740
ICON#12960
ICON#28720
ICON#37440
ICON#432400
ICON#513840
ICON#613840
ICON#713840
MENU#10003020
DIALOG#90008180
DIALOG#90013500
DIALOG#90023080
DIALOG#90032300
DIALOG#90044640
STRING#126480
RCDATA#90026360
GROUP_CURSOR#800200
GROUP_ICON#200620
GROUP_ICON#201200
GROUP_ICON#202200
GROUP_ICON#203200
VERSION#17360
idlangstring
20001040ECCRegen
module_namehintordfunction_name
KERNEL32.DLLFindResourceA
KERNEL32.DLLGetCommandLineA
KERNEL32.DLLGetExitCodeThread
KERNEL32.DLLGetFileSize
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLCloseHandle
KERNEL32.DLLGetPrivateProfileStringA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLLoadResource
KERNEL32.DLLLockResource
KERNEL32.DLLCreateFileA
KERNEL32.DLLReadFile
KERNEL32.DLLRtlUnwind
KERNEL32.DLLRtlZeroMemory
KERNEL32.DLLSetFilePointer
KERNEL32.DLLWriteFile
KERNEL32.DLLlstrlenA
ADVAPI32.DLLRegCloseKey
ADVAPI32.DLLRegCreateKeyExA
ADVAPI32.DLLRegOpenKeyExA
ADVAPI32.DLLRegQueryValueExA
ADVAPI32.DLLRegSetValueExA
COMCTL32.DLLInitCommonControlsEx
COMCTL32.DLLImageList_Create
COMCTL32.DLLImageList_AddMasked
COMDLG32.DLLGetOpenFileNameA
CRTDLL.DLL__GetMainArgs
CRTDLL.DLL_ltoa
CRTDLL.DLLexit
CRTDLL.DLL_beginthread
CRTDLL.DLLmemcmp
CRTDLL.DLLmemcpy
CRTDLL.DLLraise
CRTDLL.DLLsignal
CRTDLL.DLLstrchr
CRTDLL.DLLstrcmp
CRTDLL.DLL_endthread
GDI32.DLLGetCurrentObject
GDI32.DLLGetMapMode
GDI32.DLLGetObjectA
GDI32.DLLGetStockObject
GDI32.DLLSelectObject
GDI32.DLLSetBkMode
GDI32.DLLSetMapMode
GDI32.DLLSetTextColor
GDI32.DLLStretchBlt
GDI32.DLLCreateCompatibleDC
GDI32.DLLCreateFontIndirectA
GDI32.DLLDPtoLP
GDI32.DLLDeleteDC
GDI32.DLLDeleteObject
SHELL32.DLLDragAcceptFiles
SHELL32.DLLDragFinish
SHELL32.DLLDragQueryFileA
SHELL32.DLLShellExecuteA
SHLWAPI.DLLPathAddBackslashA
SHLWAPI.DLLStrToIntA
SHLWAPI.DLLStrNCatA
SHLWAPI.DLLPathRemoveFileSpecA
USER32.DLLGetClientRect
USER32.DLLGetWindow
USER32.DLLScreenToClient
USER32.DLLIsWindow
USER32.DLLCreateDialogParamA
USER32.DLLDialogBoxParamA
USER32.DLLEndDialog
USER32.DLLGetDlgItem
USER32.DLLSetDlgItemTextA
USER32.DLLGetDlgItemTextA
USER32.DLLSendDlgItemMessageA
USER32.DLLCheckDlgButton
USER32.DLLCheckRadioButton
USER32.DLLIsDlgButtonChecked
USER32.DLLIsDialogMessageA
USER32.DLLUpdateWindow
USER32.DLLInvalidateRect
USER32.DLLSetFocus
USER32.DLLGetCapture
USER32.DLLSetCapture
USER32.DLLReleaseCapture
USER32.DLLLoadMenuA
USER32.DLLLoadCursorA
USER32.DLLLoadIconA
USER32.DLLDestroyMenu
USER32.DLLGetSubMenu
USER32.DLLMessageBoxA
USER32.DLLSetCursor
USER32.DLLGetMessageA
USER32.DLLChildWindowFromPoint
USER32.DLLGetWindowLongA
USER32.DLLSetWindowLongA
USER32.DLLTranslateMessage
USER32.DLLDispatchMessageA
USER32.DLLWinHelpA
USER32.DLLSendMessageA
USER32.DLLwsprintfA
USER32.DLLChildWindowFromPointEx
USER32.DLLFindWindowExA
USER32.DLLLoadImageA
USER32.DLLRegisterClassExA
USER32.DLLSetMenuItemInfoA
USER32.DLLTrackPopupMenuEx
USER32.DLLPostQuitMessage
USER32.DLLGetSysColor
USER32.DLLShowWindow
USER32.DLLCreateWindowExA
USER32.DLLDestroyWindow
USER32.DLLDefWindowProcA
USER32.DLLCallWindowProcA
USER32.DLLEnableWindow

StringTable 000004b0

FileDescriptionRegenerates EDC/ECC in mode2 and mode1 sectors
FileVersion1.41
InternalNameECCRegen
LegalCopyrightCopyright © 2001 by LuHa
OriginalFilenameeccregen.exe
ProductNameECCRegen 1.41
URLhttp://eccregen.cjb.net

VS_FIXEDFILEINFO

FileVersion1.4.1.0
ProductVersion0.1040.0.1000
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0140888EXE04/24/2001 13:39:40#
15c115HTM#
22658456BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 141344 bytes (139 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK