EasySVB.exe - Spracovanie agendy SVB

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	EasySVB.exe
size	1960448 (0x1dea00)
md5	d5449e66612b86bd403a9a52ff1dc790

type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x94a46e0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818f
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x1d4000
SizeOfInitializedData	0xb000
SizeOfUninitializedData	0x6a4000
AddressOfEntryPoint	0x878d70
BaseOfCode	0x6a5000
BaseOfData	0x879000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x884000
SizeOfHeaders	0x1000
CheckSum	0x1edd01
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

UPX v0.89.6 - v1.02 / v1.05 - v1.22

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
UPX0	0x1000	0x6a4000	0	RWX UDATA
UPX1	0x6a5000	0x1d4000	0x1d4000	RWX IDATA
.rsrc	0x879000	0xb000	0xa600	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x883270	0x338
RESOURCE	0x879000	0xa270
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x878f14	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0xc78f2c	0xc78fbc	0x88a0cc	0	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	748
CURSOR	#9	748
CURSOR	#10	748
CURSOR	#11	748
CURSOR	#12	308
CURSOR	#13	308
CURSOR	#14	308
CURSOR	#15	308
CURSOR	#16	308
CURSOR	#17	748
CURSOR	#18	748
CURSOR	#19	748
CURSOR	#20	748
CURSOR	#21	748
CURSOR	#22	748
CURSOR	#23	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	CDROM	192
BITMAP	CLOSEDFOLDER	224
BITMAP	CURRENTFOLDER	224
BITMAP	EXECUTABLE	224
BITMAP	FLOPPY	192
BITMAP	FRXDEVICE_FNT	200
BITMAP	FRXTRUETYPE_FNT	200
BITMAP	HARD	192
BITMAP	KNOWNFILE	224
BITMAP	NETWORK	192
BITMAP	OPENFOLDER	224
BITMAP	PREVIEWGLYPH	232
BITMAP	RAM	192
BITMAP	UNKNOWNFILE	224
BITMAP	VT_CHECK_DARK	3304
BITMAP	VT_CHECK_LIGHT	3304
BITMAP	VT_FLAT	3304
BITMAP	VT_MOVEALL	616
BITMAP	VT_MOVEEW	616
BITMAP	VT_MOVENS	616
BITMAP	VT_TICK_DARK	3304
BITMAP	VT_TICK_LIGHT	3304
BITMAP	VT_UTILITIES	3368
BITMAP	VT_XP	19242
BITMAP	VT_XPBUTTONMINUS	294
BITMAP	VT_XPBUTTONPLUS	294
ICON	#1	9640
ICON	#2	4264
ICON	#3	1128
DIALOG	DLGTEMPLATE	82
STRING	#4028	1356
STRING	#4029	488
STRING	#4030	332
STRING	#4031	288
STRING	#4032	588
STRING	#4033	1264
STRING	#4034	1060
STRING	#4035	1076
STRING	#4036	892
STRING	#4037	568
STRING	#4038	1172
STRING	#4039	1044
STRING	#4040	1220
STRING	#4041	928
STRING	#4042	1368
STRING	#4043	1688
STRING	#4044	1848
STRING	#4045	820
STRING	#4046	2512
STRING	#4047	1228
STRING	#4048	552
STRING	#4049	812
STRING	#4050	1136
STRING	#4051	968
STRING	#4052	736
STRING	#4053	980
STRING	#4054	892
STRING	#4055	1248
STRING	#4056	576
STRING	#4057	1048
STRING	#4058	1268
STRING	#4059	1068
STRING	#4060	948
STRING	#4061	996
STRING	#4062	832
STRING	#4063	812
STRING	#4064	1068
STRING	#4065	1072
STRING	#4066	920
STRING	#4067	948
RCDATA	TFRMPERSONSPNL	38310
RCDATA	TFRMRECEIVABLES	10281
RCDATA	TFRMREMINDERS	6107
RCDATA	TFRMROOMS	14579
RCDATA	TFRMSERVICEPRICELISTS	9555
RCDATA	TFRMSERVICEROOMS	8514
RCDATA	TFRMSERVICES	13368
RCDATA	TFRMSERVICESPNL	37311
RCDATA	TFRMSTATEMENTS	14875
RCDATA	TFRMSTATEMENTSPNL	38526
RCDATA	TFRMTAB	377
RCDATA	TFRMYEARCLOSING	8891
RCDATA	TFRXACCOUNTMOVEMENTS	18760
RCDATA	TFRXACCOUNTS	16371
RCDATA	TFRXADVANCEPLAN	33714
RCDATA	TFRXADVANCEPLANS	20646
RCDATA	TFRXADVANCES	36694
RCDATA	TFRXBALANCESHEET07	122435
RCDATA	TFRXBALANCESHEET08	119521
RCDATA	TFRXBANKBOOK	26242
RCDATA	TFRXBOOKENTRIES	127281
RCDATA	TFRXCASHBOOK	23269
RCDATA	TFRXCASHINVENTORY	28645
RCDATA	TFRXCASHVOUCHER	20842
RCDATA	TFRXCHARTEDITORFORM	8020
RCDATA	TFRXCOSTALLOCATIONS	22655
RCDATA	TFRXCROSSEDITORFORM	7480
RCDATA	TFRXDIALOGFORM	304
RCDATA	TFRXFLOATWINDOW	625
RCDATA	TFRXFORMATEDITORFORM	1356
RCDATA	TFRXFRAMEEDITORFORM	2623
RCDATA	TFRXHIGHLIGHTEDITORFORM	2048
RCDATA	TFRXINMATES	19509
RCDATA	TFRXINMATESUMMARY	17953
RCDATA	TFRXINTERNALBOOK	17243
RCDATA	TFRXINTERNALVOUCHER	20841
RCDATA	TFRXJOURNAL	16769
RCDATA	TFRXLEDGER	24071
RCDATA	TFRXLIABILITIES	22450
RCDATA	TFRXMASSREADING	23257
RCDATA	TFRXMEASURES	22290
RCDATA	TFRXMEMOEDITORFORM	1213
RCDATA	TFRXOBJECTINSPECTOR	3181
RCDATA	TFRXOVERPAYMENTS	19375
RCDATA	TFRXOWNERBALANCE	50560
RCDATA	TFRXOWNERS	24093
RCDATA	TFRXPAGESETTINGSFORM	4376
RCDATA	TFRXPASSWORDFORM	686
RCDATA	TFRXPDFEXPORTDIALOG	1659
RCDATA	TFRXPENALTY	48311
RCDATA	TFRXPOPUPFORM	364
RCDATA	TFRXPREVIEWFORM	7834
RCDATA	TFRXPRINTDIALOG	8005
RCDATA	TFRXPROFITANDLOSS	192030
RCDATA	TFRXPROGRESS	954
RCDATA	TFRXPURPOSEBALANCE	21676
RCDATA	TFRXREADINGCOLLECTION	49505
RCDATA	TFRXRECEIVABLES	21573
RCDATA	TFRXREMINDER	40067
RCDATA	TFRXROOMS	28893
RCDATA	TFRXRTFEXPORTDIALOG	1756
RCDATA	TFRXSEARCHDIALOG	1471
RCDATA	TFRXSERVICEBALANCE	32013
RCDATA	TFRXSERVICEECONOMY	33228
RCDATA	TFRXSTATEMENT	111553
RCDATA	TFRXSTATEMENTS	22563
RCDATA	TFRXSTATEMENTVAT	112097
RCDATA	TFRXSYSMEMOEDITORFORM	2574
RCDATA	TFRXWEBLOGINS	26300
RCDATA	TFRXXLSEXPORTDIALOG	1888
GROUP_CURSOR	FRXFORMAT	20
GROUP_CURSOR	FRXHAND	20
GROUP_CURSOR	FRXZOOM	20
GROUP_CURSOR	TEE_CURSOR_HAND	20
GROUP_CURSOR	VT_HEADERSPLIT	20
GROUP_CURSOR	VT_MOVEALL	20
GROUP_CURSOR	VT_MOVEE	20
GROUP_CURSOR	VT_MOVEEW	20
GROUP_CURSOR	VT_MOVEN	20
GROUP_CURSOR	VT_MOVENE	20
GROUP_CURSOR	VT_MOVENS	20
GROUP_CURSOR	VT_MOVENW	20
GROUP_CURSOR	VT_MOVES	20
GROUP_CURSOR	VT_MOVESE	20
GROUP_CURSOR	VT_MOVESW	20
GROUP_CURSOR	VT_MOVEW	20
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	48
VERSION	#1	804
MANIFEST	#1	581

module_name	hint	ord	function_name
KERNEL32.DLL			LoadLibraryA
KERNEL32.DLL			GetProcAddress
KERNEL32.DLL			VirtualProtect
KERNEL32.DLL			ExitProcess
advapi32.dll			RegCloseKey
comctl32.dll			ImageList_Add
comdlg32.dll			PrintDlgA
gdi32.dll			Pie
IMAGEHLP.DLL			MapFileAndCheckSumA
ole32.dll			DoDragDrop
oleaut32.dll			VariantCopy
shell32.dll			SHGetMalloc
user32.dll			GetDC
version.dll			VerQueryValueA
winmm.dll			timeGetTime
winspool.drv			WritePrinter
wsock32.dll			recv

StringTable 041B04E2

CompanyName	ŠTOLC CAD-Software
FileDescription	Spracovanie agendy SVB
FileVersion	5.9.1.25
InternalName	EasySVB
LegalCopyright	ŠTOLC CAD-Software © 2005-2015
LegalTrademarks
OriginalFilename	easysvb.exe
ProductName	EasySVB
ProductVersion
Comments

VS_FIXEDFILEINFO

FileVersion	5.9.1.25
ProductVersion	5.9.1.25
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	1960448	EXE	12/09/1974 23:12:32	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x4f5204

[?] can't find file_offset of VA 0x4f5338

[?] can't find file_offset of VA 0x4f546c

[?] can't find file_offset of VA 0x4f55a0

[?] can't find file_offset of VA 0x4f56d4

[?] can't find file_offset of VA 0x4f5808

[?] can't find file_offset of VA 0x4f593c

[?] can't find file_offset of VA 0x4f5a70

[?] can't find file_offset of VA 0x4f5d5c

[?] can't find file_offset of VA 0x4f6048

[?] can't find file_offset of VA 0x4f6334

[?] can't find file_offset of VA 0x4f6620

[?] can't find file_offset of VA 0x4f6754

[?] can't find file_offset of VA 0x4f6888

[?] can't find file_offset of VA 0x4f69bc

[?] can't find file_offset of VA 0x4f6af0

[?] can't find file_offset of VA 0x4f6c24

[?] can't find file_offset of VA 0x4f6f10

[?] can't find file_offset of VA 0x4f71fc

[?] can't find file_offset of VA 0x4f74e8

[?] can't find file_offset of VA 0x4f77d4

[?] can't find file_offset of VA 0x4f7ac0

[?] can't find file_offset of VA 0x4f7dac

[?] can't find file_offset of VA 0x4f7ee0

[?] can't find file_offset of VA 0x4f80b0

[?] can't find file_offset of VA 0x4f8294

[?] can't find file_offset of VA 0x4f8464

[?] can't find file_offset of VA 0x4f8634

[?] can't find file_offset of VA 0x4f8804

[?] can't find file_offset of VA 0x4f89d4

[?] can't find file_offset of VA 0x4f8ba4

[?] can't find file_offset of VA 0x4f8d74

[?] can't find file_offset of VA 0x4f8f44

[?] can't find file_offset of VA 0x4f9114

[?] can't find file_offset of VA 0x4f91d4

[?] can't find file_offset of VA 0x4f92b4

[?] can't find file_offset of VA 0x4f9394

[?] can't find file_offset of VA 0x4f9474

[?] can't find file_offset of VA 0x4f9534

[?] can't find file_offset of VA 0x4f95fc

[?] can't find file_offset of VA 0x4f96c4

[?] can't find file_offset of VA 0x4f9784

[?] can't find file_offset of VA 0x4f9864

[?] can't find file_offset of VA 0x4f9924

[?] can't find file_offset of VA 0x4f9a04

[?] can't find file_offset of VA 0x4f9aec

[?] can't find file_offset of VA 0x4f9bac

[?] can't find file_offset of VA 0x4f9c8c

[?] can't find file_offset of VA 0x4fa974

[?] can't find file_offset of VA 0x4fb65c

[?] can't find file_offset of VA 0x4fc344

[?] can't find file_offset of VA 0x4fc5ac

[?] can't find file_offset of VA 0x4fc814

[?] can't find file_offset of VA 0x4fca7c

[?] can't find file_offset of VA 0x4fd764

[?] can't find file_offset of VA 0x4fe44c

[?] can't find file_offset of VA 0x4ff174

[?] can't find file_offset of VA 0x503ca0

[?] can't find file_offset of VA 0x503dc8

[?] can't find file_offset of VA 0x5079a8

[?] can't find file_offset of VA 0x5079fc

[?] can't find file_offset of VA 0x507f48

[?] can't find file_offset of VA 0x508130

[?] can't find file_offset of VA 0x50827c

[?] can't find file_offset of VA 0x50839c

[?] can't find file_offset of VA 0x5085e8

[?] can't find file_offset of VA 0x508ad8

[?] can't find file_offset of VA 0x508efc

[?] can't find file_offset of VA 0x509330

[?] can't find file_offset of VA 0x5096ac

[?] can't find file_offset of VA 0x5098e4

[?] can't find file_offset of VA 0x509d78

[?] can't find file_offset of VA 0x50a18c

[?] can't find file_offset of VA 0x50a650

[?] can't find file_offset of VA 0x50a9f0

[?] can't find file_offset of VA 0x50af48

[?] can't find file_offset of VA 0x50b5e0

[?] can't find file_offset of VA 0x50bd18

[?] can't find file_offset of VA 0x50c04c

[?] can't find file_offset of VA 0x50ca1c

[?] can't find file_offset of VA 0x50cee8

[?] can't find file_offset of VA 0x50d110

[?] can't find file_offset of VA 0x50d43c

[?] can't find file_offset of VA 0x50d8ac

[?] can't find file_offset of VA 0x50dc74

[?] can't find file_offset of VA 0x50df54

[?] can't find file_offset of VA 0x50e328

[?] can't find file_offset of VA 0x50e6a4

[?] can't find file_offset of VA 0x50eb84

[?] can't find file_offset of VA 0x50edc4

[?] can't find file_offset of VA 0x50f1dc

[?] can't find file_offset of VA 0x50f6d0

[?] can't find file_offset of VA 0x50fafc

[?] can't find file_offset of VA 0x50feb0

[?] can't find file_offset of VA 0x510294

[?] can't find file_offset of VA 0x5105d4

[?] can't find file_offset of VA 0x510900

[?] can't find file_offset of VA 0x510d2c

[?] can't find file_offset of VA 0x51115c

[?] can't find file_offset of VA 0x5114f4

[?] can't find file_offset of VA 0x5118a8

[?] too many errors getting resource data, stopped on 0 of 1

[!] refusing to read CURDIRENTRY beyond resource size

[?] can't find file_offset of VA 0x48a0cc

EasySVB.exe-