New EPCnet EWAnet KG.EXE

info
MZ
PE
resources
strings
imports
foremost
hexdump
disasm
log
discuss
donate

filename	New EPCnet EWAnet KG.EXE
size	1503232 (0x16f000)
md5	ef1150e2d96ee9dbe889a826c2346c52

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xe
TimeDateStamp	0x2a425e19
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x67e00
SizeOfInitializedData	0x16200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1976b
BaseOfCode	0x1000
BaseOfData	0x69000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x438000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Enigma Protector 1.1X-1.3X (Sukhov Vladimir & Serge N. Markin)

Sections

name	va	vsize	raw size	flags
	0x1000	0x68000	0x2f000	RWX IDATA
	0x69000	0x5000	0x3000	RWX IDATA
	0x6e000	0x2000	0	RWX IDATA
	0x70000	0x3000	0	RWX IDATA
	0x73000	0x1000	0	RWX IDATA
	0x74000	0x1000	0x1000	RWX IDATA
	0x75000	0x8000	0	RWX IDATA
	0x7d000	0x8000	0x2000	RWX IDATA
	0x85000	0x2000	0x1000	RWX IDATA
	0x87000	0x1000	0	RWX IDATA
	0x88000	0x3000	0x1000	RWX IDATA
.rsrc	0x8b000	0x3000	0x3000	RWX IDATA
	0x8e000	0x2a0000	0x2a000	RWX IDATA
.data	0x32e000	0x10a000	0x10a000	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x32e048	0x21c
RESOURCE	0x8b000	0x2cd4
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x32e028	0x10
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x32e000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

TLS

raw start	raw end	index	callbks	zero fill	flags
0x473000	0x473010	0x72e018	0x72e020	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
ICON	#1	744
STRING	#4084	508
STRING	#4085	604
STRING	#4086	232
STRING	#4087	268
STRING	#4088	956
STRING	#4089	916
STRING	#4090	940
STRING	#4091	896
STRING	#4092	228
STRING	#4093	188
STRING	#4094	744
STRING	#4095	948
STRING	#4096	708
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	612
RCDATA	TFMENTERKEY	1901
RCDATA	TFMPASSWORD	1787
RCDATA	TFMREGISTRATION	9152
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	20

id	lang	string
65328	0	- Dock zone has no control
65329	0	Error setting %s.Count
65330	0	Listbox (%s) style must be virtual in order to set Count
65331	0	Unable to find a Table Of Contents
65332	0	No help found for %s
65333	0	No context-sensitive help installed
65334	0	No topic-based help system installed
65344	0	Up
65345	0	Right
65346	0	Down
65347	0	Ins
65348	0	Del
65349	0	Shift+
65350	0	Ctrl+
65351	0	Alt+
65352	0	Unable to insert a line
65353	0	Invalid clipboard format
65354	0	Clipboard does not support Icons
65355	0	Cannot open clipboard
65356	0	Menu '%s' is already being used by another form
65357	0	Docked control must have a name
65358	0	Error removing control from dock tree
65359	0	- Dock zone not found
65360	0	&Abort
65361	0	&Retry
65362	0	&Ignore
65363	0	&All
65364	0	N&o to All
65365	0	Yes to &All
65366	0	BkSp
65367	0	Tab
65368	0	Esc
65369	0	Enter
65370	0	Space
65371	0	PgUp
65372	0	PgDn
65373	0	End
65374	0	Home
65375	0	Left
65376	0	&Help
65377	0	&Close
65378	0	&Ignore
65379	0	&Retry
65380	0	Abort
65381	0	&All
65382	0	Cannot drag a form
65383	0	Warning
65384	0	Error
65385	0	Information
65386	0	Confirm
65387	0	&Yes
65388	0	&No
65389	0	OK
65390	0	Cancel
65391	0	&Help
65392	0	Cannot focus a disabled or invisible window
65393	0	Control '%s' has no parent window
65394	0	Cannot hide an MDI Child Form
65395	0	Cannot change Visible in OnShow or OnHide
65396	0	Cannot make a visible window modal
65397	0	Menu index out of range
65398	0	Menu inserted twice
65399	0	Sub-menu is not in menu
65400	0	Not enough timers available
65401	0	GroupIndex cannot be less than a previous menu item's GroupIndex
65402	0	Cannot create form. No MDI forms are currently active
65403	0	A control cannot have itself as its parent
65404	0	OK
65405	0	Cancel
65406	0	&Yes
65407	0	&No
65408	0	Stream write error
65409	0	Bitmap image is not valid
65410	0	Icon image is not valid
65411	0	Metafile is not valid
65412	0	Cannot change the size of an icon
65413	0	Unsupported clipboard format
65414	0	Out of system resources
65415	0	Canvas does not allow drawing
65416	0	Invalid image size
65417	0	Invalid ImageList
65418	0	Unable to Replace Image
65419	0	Invalid ImageList Index
65420	0	Failed to read ImageList data from stream
65421	0	Failed to write ImageList data to stream
65422	0	Error creating window device context
65423	0	Error creating window class
65424	0	Invalid stream format
65425	0	''%s'' is not a valid component name
65426	0	Invalid property path
65427	0	Invalid property value
65428	0	List capacity out of bounds (%d)
65429	0	List count out of bounds (%d)
65430	0	List index out of bounds (%d)
65431	0	Out of memory while expanding memory stream
65432	0	Error reading %s%s%s: %s
65433	0	Stream read error
65434	0	Property is read-only
65435	0	Resource %s not found
65436	0	%s.Seek not implemented
65437	0	Operation not allowed on sorted list
65438	0	%s not in a class registration group
65439	0	Property %s does not exist
65440	0	Wednesday
65441	0	Thursday
65442	0	Friday
65443	0	Saturday
65444	0	Ancestor for '%s' not found
65445	0	Cannot assign a %s to a %s
65446	0	Bits index out of range
65447	0	Can't write to a read-only resource stream
65448	0	CheckSynchronize called from thread $%x, which is NOT the main thread
65449	0	Class %s not found
65450	0	A class named %s already exists
65451	0	List does not allow duplicates ($0%x)
65452	0	A component named %s already exists
65453	0	String list does not allow duplicates
65454	0	Cannot create file %s
65455	0	Cannot open file %s
65456	0	July
65457	0	August
65458	0	September
65459	0	October
65460	0	November
65461	0	December
65462	0	Sun
65463	0	Mon
65464	0	Tue
65465	0	Wed
65466	0	Thu
65467	0	Fri
65468	0	Sat
65469	0	Sunday
65470	0	Monday
65471	0	Tuesday
65472	0	Mar
65473	0	Apr
65474	0	May
65475	0	Jun
65476	0	Jul
65477	0	Aug
65478	0	Sep
65479	0	Oct
65480	0	Nov
65481	0	Dec
65482	0	January
65483	0	February
65484	0	March
65485	0	April
65486	0	May
65487	0	June
65488	0	Read
65489	0	Write
65490	0	Error creating variant array
65491	0	Variant is not an array
65492	0	Variant array index out of bounds
65493	0	External exception %x
65494	0	Assertion failed
65495	0	Interface not supported
65496	0	Exception in safecall method
65497	0	%s (%s, line %d)
65498	0	Abstract Error
65499	0	Access violation at address %p in module '%s'. %s of address %p
65500	0	System Error. Code: %d. %s
65501	0	A call to an OS function failed
65502	0	Jan
65503	0	Feb
65504	0	Floating point division by zero
65505	0	Floating point overflow
65506	0	Floating point underflow
65507	0	Invalid pointer operation
65508	0	Invalid class typecast
65509	0	Access violation at address %p. %s of address %p
65510	0	Stack overflow
65511	0	Control-C hit
65512	0	Privileged instruction
65513	0	Exception %s in module %s at %p. %s%s
65514	0	Application Error
65515	0	Format '%s' invalid or incompatible with argument
65516	0	No argument for format '%s'
65517	0	Invalid variant type conversion
65518	0	Invalid variant operation
65519	0	Variant method calls not supported
65520	0	'%s' is not a valid integer value
65521	0	Invalid argument to time encode
65522	0	Invalid argument to date encode
65523	0	Out of memory
65524	0	I/O error %d
65525	0	File not found
65526	0	Invalid filename
65527	0	Too many open files
65528	0	File access denied
65529	0	Read beyond end of file
65530	0	Disk full
65531	0	Invalid numeric input
65532	0	Division by zero
65533	0	Range check error
65534	0	Integer overflow
65535	0	Invalid floating point operation

module_name	hint	ord	function_name
kernel32.dll			GetModuleHandleA
kernel32.dll			GetProcAddress
kernel32.dll			ExitProcess
kernel32.dll			LoadLibraryA
user32.dll			MessageBoxA
advapi32.dll			RegCloseKey
oleaut32.dll			SysFreeString
gdi32.dll			CreateFontA
shell32.dll			ShellExecuteA
version.dll			GetFileVersionInfoA
comctl32.dll			ImageList_SetIconSize

show previews

offset	size	type	comment
0	1503232	EXE	06/19/1992 22:22:17	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x7f110

[?] can't find file_offset of VA 0x7f2e0

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x81760

[?] can't find file_offset of VA 0x81770

[?] can't find file_offset of VA 0x819d4

[?] can't find file_offset of VA 0x82144

[?] can't find file_offset of VA 0x82840

[?] can't find file_offset of VA 0x84c00

[?] can't find file_offset of VA 0x84c14

[?] can't find file_offset of VA 0x84c28

[?] can't find file_offset of VA 0x84c3c

[?] can't find file_offset of VA 0x84c50

[?] can't find file_offset of VA 0x84c64

[?] can't find file_offset of VA 0x84c78

[?] can't find file_offset of VA 0x0