filenameESetup.exe
size466362 (0x71dba)
md5f2524aa32b635aee73a458ba2decda77
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 55  |mode....$......U|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x3368fcc7
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion3.10
SizeOfCode0x2800
SizeOfInitializedData0x3600
SizeOfUninitializedData0
AddressOfEntryPoint0x21a0
BaseOfCode0x1000
BaseOfData0x4000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xa000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v4.2

Sections

namevavsizeraw sizeflags
.text0x10000x26240x2800R-X CODE IDATA
.rdata0x40000x34a0x400R-- IDATA
.data0x50000x15080x1000RW- IDATA
.idata0x70000x6e20x800RW- IDATA
.rsrc0x80000xd940xe00R-- IDATA
.reloc0x90000x41a0x600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x70000x50
RESOURCE0x80000xd94
EXCEPTION00
SECURITY00
BASERELOC0x90000x32c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x71680x118
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
STRING#19640
GROUP_ICON#101340
VERSION#110840
idlangstring
11033Launch32
21033Setup
31033Initializing Setup...
41033Could not extract support files - setup will abort
51033Could not start the setup
61033The temp directory you specified on the command line does not exist!
71033Could not determine a temp directory name. Try running setup.exe <d:\dirname>
81033You must have at least 2MB of free space on your TEMP drive!
91033Unable to open archive file
101033Unable to allocate memory buffer
111033Could not find data segment
121033Unable to open output file
131033Error in compressed file - Bad CRC
141033Error
module_namehintordfunction_name
KERNEL32.dll614lstrcatA
KERNEL32.dll55CreateProcessA
KERNEL32.dll22CloseHandle
KERNEL32.dll595WritePrivateProfileStringA
KERNEL32.dll204GetDiskFreeSpaceA
KERNEL32.dll629lstrlenA
KERNEL32.dll491SetCurrentDirectoryA
KERNEL32.dll623lstrcpyA
KERNEL32.dll37CreateDirectoryA
KERNEL32.dll620lstrcmpiA
KERNEL32.dll611_lread
KERNEL32.dll612_lwrite
KERNEL32.dll607_lclose
KERNEL32.dll610_lopen
KERNEL32.dll608_lcreat
KERNEL32.dll609_llseek
KERNEL32.dll297GetTempPathA
KERNEL32.dll376LoadLibraryA
KERNEL32.dll339HeapAlloc
KERNEL32.dll235GetModuleHandleA
KERNEL32.dll278GetStdHandle
KERNEL32.dll220GetFileType
KERNEL32.dll591WriteFile
KERNEL32.dll246GetOEMCP
KERNEL32.dll146GetACP
KERNEL32.dll506SetHandleCount
KERNEL32.dll578WideCharToMultiByte
KERNEL32.dll210GetEnvironmentStringsW
KERNEL32.dll152GetCPInfo
KERNEL32.dll208GetEnvironmentStrings
KERNEL32.dll140FreeEnvironmentStringsW
KERNEL32.dll259GetProcAddress
KERNEL32.dll233GetModuleFileNameA
KERNEL32.dll276GetStartupInfoA
KERNEL32.dll159GetCommandLineA
KERNEL32.dll550UnhandledExceptionFilter
KERNEL32.dll455RtlUnwind
KERNEL32.dll139FreeEnvironmentStringsA
KERNEL32.dll541TerminateProcess
KERNEL32.dll98ExitProcess
KERNEL32.dll345HeapFree
KERNEL32.dll341HeapCreate
KERNEL32.dll311GetVersion
KERNEL32.dll196GetCurrentProcess
USER32.dll427RegisterClassA
USER32.dll392MessageBoxA
USER32.dll421PostQuitMessage
USER32.dll125DefWindowProcA
USER32.dll428RegisterClassExA
USER32.dll163DrawTextA
USER32.dll9BeginPaint
USER32.dll220GetClientRect
USER32.dll140DispatchMessageA
USER32.dll419PostMessageA
USER32.dll556TranslateMessage
USER32.dll307GetWindowRect
USER32.dll269GetMessageA
USER32.dll232GetDesktopWindow
USER32.dll567UpdateWindow
USER32.dll82CreateWindowExA
USER32.dll534ShowWindow
USER32.dll359LoadCursorA
USER32.dll375LoadStringA
USER32.dll363LoadIconA
USER32.dll585wsprintfA
USER32.dll175EndPaint
GDI32.dll323SetBkMode

StringTable 040904e4

CommentsThis setup code is the property of Indigo Rose Corporation
CompanyNameIndigo Rose Corporation
FileDescriptionSetup Factory Setup Launcher
FileVersion1, 0, 0, 0
InternalNamesetup
LegalCopyrightCopyright © 1996 Indigo Rose Corporation
LegalTrademarksSetup Factory is a trademark of Indigo Rose Corporation.
OriginalFilenamesetup.exe
ProductNamesetup
ProductVersion4, 0, 0, 0

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion4.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
023552EXE05/01/1997 20:27:51#
15c115HTM#
5c00442810BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 466362 bytes (456 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK