CarProKey.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	CarProKey.exe
size	1229824 (0x12c400)
md5	fedf8112b0641a2aa9ef953250bbd000

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x120

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0: a6 7e 3d 4c fc 88 62 c8  38 9b 3c e7 e7 cb 74 6f  |.~=L..b.8.<...to|
000000d0: 26 f5 1a 1e 26 f5 1a 1e  26 f5 1a 1e 26 f5 1a 1e  |&...&...&...&...|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xc
TimeDateStamp	0x2a425e19
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818f
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0xb2800
SizeOfInitializedData	0x4c600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2fa27c
BaseOfCode	0x1dc000
BaseOfData	0xb4000
ImageBase	0x40000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2fc000
SizeOfHeaders	0x1000
CheckSum	0x12e520
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

EXECryptor v2.2x - v2.4x (StrongBit Technology >> $ignBy.fly)

Sections

name	va	vsize	raw size	flags
CODE	0x1000	0xb3000	0	RWX CODE
DATA	0xb4000	0x4000	0	RW- IDATA
BSS	0xb8000	0x6000	0	RW-
k6d1403o	0xbe000	0x3000	0	RWX CODE IDATA
4kubt23m	0xc1000	0x1000	0	RWX CODE IDATA
.tls	0xc2000	0x1000	0	RW-
.rdata	0xc3000	0x1000	0	RW- IDATA
6x56no9o	0xc4000	0xd000	0	RWX CODE IDATA
.rsrc	0xd1000	0x39000	0xda00	RW- IDATA
zr2wecxl	0x10a000	0xd2000	0	RWX CODE
7dmltpxy	0x1dc000	0x11f000	0x11e2a0	RWX CODE IDATA
a502ztcr	0x2fb000	0x1000	0x200	R-- UDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1dc000	0x110
RESOURCE	0xd1000	0x39000
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x1dc110	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x401dc128	0x401dc138	0x401dc138	0x401dc13c	0	0

show previews

type	name	size
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	PREVIEWGLYPH	232
ICON	#1	51240
DIALOG	DLGTEMPLATE	82
STRING	#4071	64
STRING	#4072	876
STRING	#4073	1060
STRING	#4074	868
STRING	#4075	956
STRING	#4076	720
STRING	#4077	868
STRING	#4078	1300
STRING	#4079	852
STRING	#4080	476
STRING	#4081	340
STRING	#4082	576
STRING	#4083	688
STRING	#4084	224
STRING	#4085	300
STRING	#4086	652
STRING	#4087	1064
STRING	#4088	924
STRING	#4089	904
STRING	#4090	1032
STRING	#4091	236
STRING	#4092	208
STRING	#4093	668
STRING	#4094	1036
STRING	#4095	816
STRING	#4096	788
RCDATA	DVCLAL	16
RCDATA	TFORM1	148443
RCDATA	TFORM2	1711
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	20
MANIFEST	#1	1164

module_name	hint	ord	function_name
kernel32.dll			GetModuleHandleA
kernel32.dll			LoadLibraryA
kernel32.dll			GetProcAddress
kernel32.dll			ExitProcess
kernel32.dll			VirtualAlloc
kernel32.dll			VirtualFree
user32.dll			MessageBoxA

show previews

offset	size	type	comment
0	1229824	EXE	06/19/1992 22:22:17	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0xdeac0

[?] can't find file_offset of VA 0xdebf4

[?] can't find file_offset of VA 0xded28

[?] can't find file_offset of VA 0xdee5c

[?] can't find file_offset of VA 0xdef90

[?] can't find file_offset of VA 0xdf0c4

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0xdf1f8

[?] can't find file_offset of VA 0xdf3c8

[?] can't find file_offset of VA 0xdf5ac

[?] can't find file_offset of VA 0xdf77c

[?] can't find file_offset of VA 0xdf94c

[?] can't find file_offset of VA 0xdfb1c

[?] can't find file_offset of VA 0xdfcec

[?] can't find file_offset of VA 0xdfebc

[?] can't find file_offset of VA 0xe008c

[?] can't find file_offset of VA 0xe025c

[?] can't find file_offset of VA 0xe042c

[?] can't find file_offset of VA 0xe0514

[?] can't find file_offset of VA 0xe0568

[?] can't find file_offset of VA 0xe05a8

[?] can't find file_offset of VA 0xe0914

[?] can't find file_offset of VA 0xe0d38

[?] can't find file_offset of VA 0xe109c

[?] can't find file_offset of VA 0xe1458

[?] can't find file_offset of VA 0xe1728

[?] can't find file_offset of VA 0xe1a8c

[?] can't find file_offset of VA 0xe1fa0

[?] can't find file_offset of VA 0xe22f4

[?] can't find file_offset of VA 0xe24d0

[?] can't find file_offset of VA 0xe2624

[?] can't find file_offset of VA 0xe2864

[?] can't find file_offset of VA 0xe2b14

[?] can't find file_offset of VA 0xe2bf4

[?] can't find file_offset of VA 0xe2d20

[?] can't find file_offset of VA 0xe2fac

[?] can't find file_offset of VA 0xe33d4

[?] can't find file_offset of VA 0xe3770

[?] can't find file_offset of VA 0xe3af8

[?] can't find file_offset of VA 0xe3f00

[?] can't find file_offset of VA 0xe3fec

[?] can't find file_offset of VA 0xe40bc

[?] can't find file_offset of VA 0xe4358

[?] can't find file_offset of VA 0xe4764

[?] can't find file_offset of VA 0xe4a94

[?] can't find file_offset of VA 0xe4da8

[?] can't find file_offset of VA 0xe4db8

[?] can't find file_offset of VA 0x109194

[?] can't find file_offset of VA 0x109844

[?] can't find file_offset of VA 0x109858

[?] can't find file_offset of VA 0x10986c

[?] can't find file_offset of VA 0x109880

[?] can't find file_offset of VA 0x109894

[?] can't find file_offset of VA 0x1098a8

[?] can't find file_offset of VA 0x1098bc