427538c1e474fce0cf7ddff7bc45d236793b2db3791a74c61f73c553479e14e2
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2012-Jan-18 16:33:17 |
| Detected languages |
Dutch - Netherlands
English - United Kingdom English - United States French - France |
| CompanyName | |
| FileDescription | |
| FileVersion | 1.0.0.0 |
| InternalName | |
| LegalCopyright | |
| LegalTrademarks | |
| OriginalFilename | |
| ProductName | |
| ProductVersion | 1.0.0.0 |
| Comments |
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Microsoft's Cryptography API |
| Suspicious | The PE is possibly packed. |
Unusual section name found: .itext
Unusual section name found: .didata |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The file contains overlay data. |
1334132 bytes of data starting at offset 0x304000.
The overlay data has an entropy of 7.99067 and is possibly compressed or encrypted. |
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x50 |
| e_cp | 0x2 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0xf |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0x1a |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x100 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 10 |
| TimeDateStamp | 2012-Jan-18 16:33:17 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x27a000 |
| SizeOfInitializedData | 0x89c00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0027AE44 (Section: .itext) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x27c000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x53e000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.itext
.data
.bss
.idata
.didata
.tls
.rdata
.reloc
.rsrc
Imports
| oleaut32.dll |
SysFreeString
SysReAllocStringLen SysAllocStringLen |
|---|---|
| advapi32.dll |
RegQueryValueExW
RegOpenKeyExW RegCloseKey |
| user32.dll |
LoadStringW
MessageBoxA CharNextW |
| kernel32.dll |
lstrcmpiA
LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrlenA lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileW GetStdHandle GetFileSize GetFileType DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateFileW CloseHandle |
| kernel32.dll (#2) |
lstrcmpiA
LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrlenA lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileW GetStdHandle GetFileSize GetFileType DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateFileW CloseHandle |
| user32.dll (#2) |
LoadStringW
MessageBoxA CharNextW |
| msimg32.dll |
AlphaBlend
|
| gdi32.dll |
UnrealizeObject
StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWindowExtEx SetWinMetaFileBits SetViewportOrgEx SetViewportExtEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline Polygon PolyPolyline PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectType GetObjectW GetNearestPaletteIndex GetGlyphOutlineW GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExtFloodFill ExtCreatePen ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CombineRgn CloseEnhMetaFile Chord BitBlt Arc AbortDoc |
| version.dll |
VerQueryValueW
GetFileVersionInfoSizeW GetFileVersionInfoW |
| mpr.dll |
WNetGetConnectionW
|
| kernel32.dll (#3) |
lstrcmpiA
LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrlenA lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileW GetStdHandle GetFileSize GetFileType DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateFileW CloseHandle |
| advapi32.dll (#2) |
RegQueryValueExW
RegOpenKeyExW RegCloseKey |
| oleaut32.dll (#2) |
SysFreeString
SysReAllocStringLen SysAllocStringLen |
| ole32.dll |
CreateStreamOnHGlobal
OleRegEnumVerbs IsAccelerator OleDraw OleSetMenuDescriptor OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitialize IsEqualGUID |
| comctl32.dll |
InitializeFlatSB
FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls |
| kernel32.dll (#4) |
lstrcmpiA
LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrlenA lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileW GetStdHandle GetFileSize GetFileType DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateFileW CloseHandle |
| ole32.dll (#2) |
CreateStreamOnHGlobal
OleRegEnumVerbs IsAccelerator OleDraw OleSetMenuDescriptor OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitialize IsEqualGUID |
| oleaut32.dll (#3) |
SysFreeString
SysReAllocStringLen SysAllocStringLen |
| shell32.dll |
ShellExecuteW
|
| shell32.dll (#2) |
ShellExecuteW
|
| comdlg32.dll |
PrintDlgW
ChooseColorW GetSaveFileNameW GetOpenFileNameW |
| winspool.drv |
OpenPrinterW
EnumPrintersW DocumentPropertiesW ClosePrinter |
| winspool.drv (#2) |
OpenPrinterW
EnumPrintersW DocumentPropertiesW ClosePrinter |
| winmm.dll |
timeGetTime
mciSendStringW mciSendCommandW mciGetErrorStringW joyGetPosEx joyGetPos timeBeginPeriod |
| d3d8.dll |
Direct3DCreate8
|
| kernel32.dll (#5) |
lstrcmpiA
LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrlenA lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileW GetStdHandle GetFileSize GetFileType DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateFileW CloseHandle |
| wsock32.dll |
WSACleanup
WSAStartup gethostname gethostbyname |
| ddraw.dll |
DirectDrawCreate
|
| Crypt32.dll |
CryptQueryObject
|
| kernel32.dll (#6) |
lstrcmpiA
LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrlenA lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileW GetStdHandle GetFileSize GetFileType DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CreateFileW CloseHandle |
| Crypt32.dll (#2) |
CryptQueryObject
|
| Crypt32.dll (#3) |
CryptQueryObject
|
Delayed Imports
CASE
CATEGORIES
COMBINING
COMPOSITION
DECOMPOSITION
NUMBERS
1
4054
4055
4056
4057
4058
4059
4060
4061
4062
4063
4064
4065
4066
4067
4068
4069
4070
4071
4072
4073
4074
4075
4076
4077
4078
4079
4080
4081
4082
4083
4084
4085
4086
4087
4088
4089
4090
4091
4092
4093
4094
4095
4096
CHARTABLE
DVCLAL
PACKAGEINFO
TBETAFORM
TDEBUGFORM
TDEBUGINFOFORM
TERRORFORM
THELPFORM
TLITEEXITAD
TLOADFORM
TLOGOFORM
TMESSAGEFORM
TPARTICLEFORM
TRUNNERFORM
TSCOREFORM
TSPLASHFORM
MAINICON
MAINICON (#2)
1 (#2)
1 (#3)
String Table contents
| License information for %s is invalid |
| License information for %s not found. You cannot use this control in design mode |
| Unable to retrieve a pointer to a running object registered with OLE for %s/%s |
| Preparing... |
| Loading data... |
| Upsampling... |
| Transfering... |
| LZ77 decompression error. |
| JPEG decompression error. Unexpected end of input. |
| Improper JPEG strip/tile size. |
| Improper JPEG component count. |
| Improper JPEG data precision. |
| Improper JPEG sampling factors. |
| Bogus JPEG tables field. |
| Fractional JPEG scanline unsupported. |
| Warning |
| '%s' is not a valid property value |
| OLE control activation failed |
| Could not obtain OLE control window handle |
| Cannot load image. Invalid or unexpected %s image format. |
| Invalid color format in %s file. |
| Stream read error in %s file. |
| Cannot load image. %s not supported for %s files. |
| Cannot load image. CRC error found in %s file. |
| Cannot load image. Compression error found in %s file. |
| Cannot load image. Extra compressed data found in %s file. |
| Cannot load image. Palette in %s file is invalid. |
| Cannot load PNG image. Unexpected but critical chunk detected. |
| The compression scheme is |
| Conversion between indexed and non-indexed pixel formats is not supported. |
| Color conversion failed. Could not find a proper method. |
| Color depth is invalid. Bits per sample must be 1, 2, 4, 8 or 16. |
| Sample count per pixel does not correspond to the given color scheme. |
| Subsampling value is invalid. Allowed are 1, 2 and 4. |
| Vertical subsampling value must be <= horizontal subsampling value. |
| ZSoft Paintbrush images |
| Word 5.x screen capture images |
| Alias/Wavefront images |
| SGI true color images with alpha |
| SGI black/white images |
| Photoshop images |
| Portable map images |
| Portable pixel map images |
| Portable gray map images |
| Portable bitmap images |
| Autodesk images |
| Kodak Photo-CD images |
| CompuServe images |
| Dr. Halo images |
| Paintshop Pro images |
| Portable network graphic images |
| Device independant Windows bitmaps |
| Encapsulated Postscript images |
| Windows icons |
| Windows metafiles |
| Windows enhanced meta files |
| JPG images |
| JPEG images |
| JPE images |
| JFIF images |
| Truevision images |
| Tagged image file format images |
| Macintosh TIFF images |
| PC TIF images |
| GFI fax images |
| SGI images |
| SGI true color images |
| oversubscribed literal/length tree |
| incomplete literal/length tree |
| empty distance tree with lengths |
| invalid block type |
| invalid stored block lengths |
| too many length or distance symbols |
| invalid bit length repeat |
| incorrect data check |
| unknown compression method |
| invalid window size |
| incorrect header check |
| need dictionary |
| All images |
| Attempt to register %s twice. |
| Windows bitmaps |
| Run length encoded Windows bitmaps |
| Cannot change the size of a JPEG image |
| JPEG error #%d |
| JPEG Image File |
| JPEG error #%d |
| need dictionary |
| stream end |
| file error |
| stream error |
| data error |
| insufficient memory |
| buffer error |
| incompatible version |
| invalid distance code |
| invalid literal/length code |
| oversubscribed dynamic bit lengths tree |
| incomplete dynamic bit lengths tree |
| Can not write to a read-only memory stream |
| Invalid MMF name "%s" |
| The MMF named "%s" cannot be created empty |
| File [%s] has not TD32 debug information! |
| Unexpected end of sequence |
| Library not found: %s |
| Function not found: %s.%s |
| This windows version is not supported |
| The window with handle %d is not valid |
| The process with ID %d is not valid |
| The Module with handle %d is not valid |
| OLE error %.8x |
| Method '%s' not supported by automation object |
| Variant does not reference an automation object |
| Dispatch methods do not support more than 64 parameters |
| DCOM not installed |
| 2nd-level cache: 1 MBytes, 8-way associative, 32 byte line size |
| 2nd-level cache: 2 MBytes, 8-way associative, 32 byte line size |
| 2nd-level cache: 512 KByte, 4-way set associative, 64 byte line size |
| 2nd-level cache: 1 MByte, 8-way set associative, 64 byte line size |
| Instruction TLB: 4 KByte pages, 4-way set associative, 128 entries |
| Instruction TLB: 2 MByte pages, 4-way, 8 entries or 4 MByte pages, 4-way, 4 entries |
| Instruction TLB: 4 KByte pages, 4-way set associative, 64 entries |
| Data TLB: 4 KByte pages, 4-way set associative, 128 entries |
| Data TLB1: 4 KByte pages, 4-way set associative, 256 entries |
| Data TLB1: 4 KByte pages, 4-way set associative, 64 entries |
| Data TLB: 4 KByte and 4 MByte pages, 4-way set associative, 8 entries |
| Shared 2nd-Level TLB: 4 KByte pages, 4-way associative, 512 entries |
| 3rd-level cache: 8 MByte, 16-way set associative, 64 byte line size |
| 64-Byte Prefetching |
| 128-Byte Prefetching |
| CPUID leaf 2 does not report cache descriptor information, use CPUID leaf 4 to query cache parameters |
| 1st-level data cache: 16 KBytes, 4-way set associative, 64 byte line size |
| 1st-level data cache: 32 KBytes, 4-way set associative, 64 byte line size |
| Trace cache: 12 K-Ops, 8-way set associative |
| Trace cache: 16 K-Ops, 8-way set associative |
| Trace cache: 32 K-Ops, 8-way set associative |
| Trace cache: 64 K-Ops, 8-way set associative |
| 2nd-level cache: 1 MBytes, 4-way set associative, 64 bytes line size |
| 2nd-level cache: 128 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector |
| 2nd-level cache: 256 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector |
| 2nd-level cache: 512 KBytes, 8-way set associative, 64 bytes line size, 2 lines per sector |
| 2nd-level cache: 1 MBytes, 8-way set associative, 64 bytes line size, 2 lines per sector |
| 2nd-level cache: 2 MBytes, 8-way set associative, 64 byte line size |
| 2nd-level cache: 512 KBytes, 2-way set associative, 64 byte line size |
| 2nd-level cache: 512 KBytes, 8-way set associative, 64 byte line size |
| 2nd-level cache: 256 KBytes, 8-way associative, 32 byte line size |
| 2nd-level cache: 512 KBytes, 8-way associative, 32 byte line size |
| 3rd-level cache: 16MByte, 16-way set associative, 64 byte line size |
| 2nd-level cache: 6MByte, 24-way set associative, 64 byte line size |
| Instruction TLB: 4 KByte pages, 32 Entries |
| Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 64 Entries |
| Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 128 Entries |
| Instruction TLB: 4 KByte and 2 MByte or 4 MByte pages, 256 Entries |
| Instruction TLB: 2-MByte or 4-MByte pages, fully associative, 7 entries |
| Data TLB0: 4 MByte pages, 4-way set associative, 16 entries |
| Data TLB0: 4 KByte pages, 4-way associative, 16 entries |
| Data TLB0: 4 KByte pages, fully associative, 16 entries |
| Data TLB0: 2 MByte or 4 MByte pages, 4-way set associative, 32 entries |
| Data TLB: 4 KByte and 4 MByte pages, 64 Entries |
| Data TLB: 4 KByte and 4 MByte pages, 128 Entries |
| Data TLB: 4 KByte and 4 MByte pages, 256 Entries |
| 1st-level data cache: 16 KByte, 8-way set associative, 64 byte line size |
| 1st-level data cache: 8 KBytes, 4-way set associative, 64 byte line size |
| 2nd-level cache: 256 KBytes, 4-way set associative, sectored cache, 64-byte line size |
| 2nd-level cache: 384 KBytes, 6-way set associative, sectored cache, 64-byte line size |
| 2nd-level cache: 512 KBytes, 4-way set associative, sectored cache, 64-byte line size |
| No 2nd-level cache or, if processor contains a valid 2nd-level cache, no 3rd-level cache |
| 2nd-level cache: 128 KBytes, 4-way set associative, 32 byte line size |
| 2nd-level cache: 256 KBytes, 4-way set associative, 32 byte line size |
| 2nd-level cache: 512 KBytes, 4-way set associative, 32 byte line size |
| 2nd-level cache: 1 MBytes, 4-way set associative, 32 byte line size |
| 2nd-level cache: 2 MBytes, 4-way set associative, 32 byte line size |
| 3rd-level cache: 4 MBytes, 4-way set associative, 64 byte line size |
| 3rd-level cache: 8 MBytes, 4-way set associative, 64 byte line size |
| 3rd-level cache: 8 MByte, 8-way set associative, 64 byte line size |
| 2nd-level cache: 4 MBytes, 16-way set associative, 64 byte line size |
| 3rd-level cache: 6MByte, 12-way set associative, 64 byte line size |
| 3rd-level cache: 8MByte, 16-way set associative, 64 byte line size |
| 3rd-level cache: 12MByte, 12-way set associative, 64 byte line size |
| 1st level instruction cache: 32 KBytes, 4-way set associative, 64 byte line size |
| 1st level data cache: 8 KBytes, 2-way set associative, 32 byte line size |
| Instruction TLB: 4 MByte pages, 4-way set associative, 4 entries |
| 1st level data cache: 16 KBytes, 4-way set associative, 32 byte line size |
| 1st level data cache: 16 KBytes, 4-way set associative, 64 byte line size |
| 1st level data cache: 24 KBytes, 6-way set associative, 64 byte line size |
| 2nd level cache: 256 KBytes, 8-way set associative, 64 byte line size |
| 3rd level cache: 512 KBytes, 4-way set associative, 64 byte line size, 2 lines per sector |
| 3rd level cache: 1 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector |
| 3rd level cache: 2 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector |
| 3rd level cache: 4 MBytes, 8-way set associative, 64 byte line size, 2 lines per sector |
| 1st level data cache: 32 KBytes, 8-way set associative, 64 byte line size |
| 1st level instruction cache: 32 KBytes, 8-way set associative, 64 byte line size |
| 2nd-level cache: 128 KBytes, 4-way set associative, sectored cache, 64-byte line size |
| 2nd-level cache: 192 KBytes, 6-way set associative, sectored cache, 64-byte line size |
| 2nd-level cache: 128 KBytes, 2-way set associative, sectored cache, 64-byte line size |
| C++ Builder 4 or later |
| Delphi 4 or later |
| Main |
| Weak |
| OrgWeak |
| Implicit |
| Failed to create mutex |
| Failed to open mutex |
| Null descriptor |
| Instruction TLB: 4 KByte pages, 4-way set associative, 32 entries |
| Instruction TLB: 4 MByte pages, 4-way set associative, 2 entries |
| Data TLB: 4 KByte pages, 4-way set associative, 64 entries |
| Data TLB: 4 MByte pages, 4-way set associative, 8 entries |
| Data TLB1: 4 MByte pages, 4-way set associative, 32 entries |
| 1st level instruction cache: 8 KBytes, 4-way set associative, 32 byte line size |
| 1st level instruction cache: 16 KBytes, 4-way set associative, 32 byte line size |
| CODEVIEW |
| FPO |
| MISC |
| EXCEPTION |
| FIXUP |
| OMAP_TO_SRC |
| OMAP_FROM_SRC |
| Executable |
| Package |
| Library |
| NeverBuild |
| DesignOnly |
| RunOnly |
| IgnoreDupUnits |
| Delphi 3 or C++ Builder 3 |
| Undefined |
| Version |
| GlobalFlagsClear |
| GlobalFlagsSet |
| CriticalSectionDefaultTimeout |
| DeCommitFreeBlockThreshold |
| DeCommitTotalFreeThreshold |
| LockPrefixTable |
| MaximumAllocationSize |
| VirtualMemoryThreshold |
| ProcessHeapFlags |
| ProcessAffinityMask |
| CSDVersion |
| Reserved |
| EditList |
| UNKNOWN |
| COFF |
| File Alignment |
| Operating System Version |
| Image Version |
| Subsystem Version |
| Win32 Version |
| Size of Image |
| Size of Headers |
| CheckSum |
| Subsystem |
| Dll Characteristics |
| Size of Stack Reserve |
| Size of Stack Commit |
| Size of Heap Reserve |
| Size of Heap Commit |
| Loader Flags |
| Number of RVA |
| Number of Sections |
| Time Date Stamp |
| Symbols Pointer |
| Number of Symbols |
| Size of Optional Header |
| Characteristics |
| Magic |
| Linker Version |
| Size of Code |
| Size of Initialized Data |
| Size of Uninitialized Data |
| Address of Entry Point |
| Base of Code |
| Base of Data |
| Image Base |
| Section Alignment |
| Imports |
| Resources |
| Exceptions |
| Security |
| Base Relocations |
| Debug |
| Description |
| Machine Value |
| TLS |
| Load configuration |
| Bound Import |
| IAT |
| Delay load import |
| COM run-time |
| Signature |
| Machine |
| Failed to get ANSI replacement character |
| Error illegal date or time format |
| Unknown function at %s |
| File contains no version information |
| Illegal language index |
| Failed to create FileMapping |
| Failed to create FileMappingView |
| Failed to obtain size of file |
| Stream is read-only |
| Cannot open file "%s" |
| This is not a PE format |
| Unknown PE target |
| Not a resource directory |
| Feature is not available for attached images |
| Section "%s" not found |
| Exports |
| Unsupported PixelFormat |
| Invalid image dimensions |
| Image has no DIB |
| Invalid stream operation |
| Color not in color table |
| Invalid Bits Per Pixel value |
| Color table is empty |
| Image is empty |
| Invalid reduction method |
| Loading... |
| Saving... |
| Converting... |
| Rendering... |
| Copying... |
| Optimizing... |
| Win32: %s (%u) |
| Invalid extension introducer |
| Failed to allocate memory for GIF DIB |
| Decoder bit buffer under-run |
| Circular decoder table entry |
| Invalid Image trailer |
| Internal error: Extension Instance does not match Extension Label |
| Unsupported Application Extension block size |
| Unknown GIF block type |
| Object type not supported for operation |
| Invalid GIF data |
| Image height too small for contained frames |
| Image width too small for contained frames |
| Clipboard operations not supported for GIF objects |
| Image exceeds Logical Screen size |
| No global or local color table defined |
| Invalid pixel coordinates |
| The program tried to add a existent critical chunk to the current image which is not allowed. |
| It's not allowed to add a new chunk because the current image is invalid. |
| The png image could not be loaded from the resource ID. |
| Some operation could not be performed because the system is out of resources. Close some windows and try again. |
| Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA) |
| This operation is not valid because the current image contains no valid header. |
| The new size provided for image resizing is invalid. |
| The "Portable Network Graphics" could not be created because invalid image type parameters have being provided. |
| Premature end of data |
| Color table overflow |
| Invalid color index |
| Unsupported GIF version |
| Invalid GIF signature |
| Invalid number of colors specified in Screen Descriptor |
| Invalid number of colors specified in Image Descriptor |
| Unknown extension type |
| Failed to Save Stream |
| This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error) |
| The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted |
| This "Portable Network Graphics" image is invalid because it has missing image parts. |
| Could not decompress the image because it contains invalid compressed data. |
| Description: |
| The "Portable Network Graphics" image contains an invalid palette. |
| The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it again |
| This "Portable Network Graphics" image is not supported or it might be invalid. |
| (IHDR chunk is not the first) |
| This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length. |
| There is no such palette entry. |
| This "Portable Network Graphics" image contains an unknown critical part which could not be decoded. |
| This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded. |
| This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded. |
| The chunks must be compatible to be assigned. |
| This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file. |
| This "Portable Network Graphics" image contains no data. |
| Docked control must have a name |
| Error removing control from dock tree |
| - Dock zone not found |
| - Dock zone has no control |
| Error loading dock zone from the stream. Expecting version %d, but found %d. |
| Separator |
| Error setting %s.Count |
| Listbox (%s) style must be virtual in order to set Count |
| "%s" is an invalid path |
| %s requires Windows Vista or later |
| %s requires themes to be enabled |
| Button%d |
| RadioButton%d |
| Caption cannot be empty |
| RichEdit line insertion error |
| Failed to Load Stream |
| The specified directory does not exist. Create it? |
| Select Directory |
| Directory &Name: |
| D&rives: |
| &Directories: |
| &Files: (*.*) |
| Ne&twork... |
| Invalid clipboard format |
| Clipboard does not support Icons |
| Cannot open clipboard: %s |
| Text exceeds memo capacity |
| Operation not supported on selected printer |
| There is no default printer currently selected |
| Menu '%s' is already being used by another form |
| No MCI device open |
| Unknown error code |
| PgDn |
| End |
| Home |
| Left |
| Up |
| Right |
| Down |
| Ins |
| Del |
| Shift+ |
| Ctrl+ |
| Alt+ |
| Value must be between %d and %d |
| All files (*.*)|*.* |
| All |
| Unable to insert a line |
| OK |
| Cancel |
| &Help |
| &Abort |
| &Retry |
| &Ignore |
| &All |
| N&o to All |
| Yes to &All |
| &Close |
| BkSp |
| Tab |
| Esc |
| Enter |
| Space |
| PgUp |
| Bitmaps |
| TIFF Images |
| Grid too large for operation |
| Too many rows or columns deleted |
| Grid index out of range |
| Fixed column count must be less than column count |
| Fixed row count must be less than row count |
| Cannot insert or delete rows from grid |
| Invalid input value |
| Invalid input value. Use escape key to abandon changes |
| Warning |
| Error |
| Information |
| Confirm |
| &Yes |
| &No |
| Can only modify an image if it contains a bitmap |
| A control cannot have itself as its parent |
| OK |
| Cancel |
| &Yes |
| &No |
| &Help |
| &Close |
| &Ignore |
| &Retry |
| Abort |
| &All |
| Cannot drag a form |
| Metafiles |
| Enhanced Metafiles |
| Icons |
| Parent given is not a parent of '%s' |
| Cannot hide an MDI Child Form |
| Cannot change Visible in OnShow or OnHide |
| Cannot make a visible window modal |
| %s property out of range |
| Menu index out of range |
| Menu inserted twice |
| Sub-menu is not in menu |
| Not enough timers available |
| Printer is not currently printing |
| Printing in progress |
| Printer index out of range |
| Printer selected is not valid |
| %s on %s |
| GroupIndex cannot be less than a previous menu item's GroupIndex |
| Cannot create form. No MDI forms are currently active |
| Cannot change the size of a WIC Image |
| Invalid operation on TOleGraphic |
| Unknown picture file extension (.%s) |
| Unsupported clipboard format |
| Out of system resources |
| Canvas does not allow drawing |
| Invalid image size |
| Invalid ImageList |
| Unable to Replace Image |
| Invalid ImageList Index |
| Failed to read ImageList data from stream |
| Failed to write ImageList data to stream |
| Error creating window device context |
| Error creating window class |
| Cannot focus a disabled or invisible window |
| Control '%s' has no parent window |
| Invalid argument to time encode |
| No context-sensitive help installed |
| No help found for context |
| Unable to open Index |
| Unable to open Search |
| Unable to find a Table of Contents |
| No topic-based help system installed |
| No help found for %s |
| Argument out of range |
| Bitmap image is not valid |
| Icon image is not valid |
| Metafile is not valid |
| Invalid pixel format |
| Invalid image |
| Scan line index out of range |
| Cannot change the size of an icon |
| Stream write error |
| Thread creation error: %s |
| Thread Error: %s (%d) |
| Cannot terminate an externally created thread |
| Cannot wait for an externally created thread |
| Cannot call Start on a running or suspended thread |
| Parameter %s cannot be a negative value |
| Input buffer exceeded for %s = %d, %s = %d |
| The specified file was not found |
| ? |
| No help viewer that supports filters |
| Invalid Timeout value: %s |
| ''%s'' is not a valid date |
| ''%s'' is not a valid date and time |
| ''%s'' is not a valid integer value |
| ''%s'' is not a valid time |
| List capacity out of bounds (%d) |
| List count out of bounds (%d) |
| List index out of bounds (%d) |
| Out of memory while expanding memory stream |
| %s has not been registered as a COM class |
| Error reading %s%s%s: %s |
| Stream read error |
| Property is read-only |
| Failed to create key %s |
| Failed to get data for '%s' |
| Failed to set data for '%s' |
| Resource %s not found |
| %s.Seek not implemented |
| Operation not allowed on sorted list |
| %s not in a class registration group |
| Property %s does not exist |
| Can't write to a read-only resource stream |
| CheckSynchronize called from thread $%x, which is NOT the main thread |
| Class %s not found |
| A class named %s already exists |
| List does not allow duplicates ($0%x) |
| A component named %s already exists |
| String list does not allow duplicates |
| Cannot create file "%s". %s |
| Cannot open file "%s". %s |
| Invalid file name - %s |
| Invalid stream format |
| ''%s'' is not a valid component name |
| Invalid property value |
| Invalid property path |
| Invalid property value |
| Invalid data type for '%s' |
| Tuesday |
| Wednesday |
| Thursday |
| Friday |
| Saturday |
| Unable to create directory |
| Invalid source array |
| Invalid destination array |
| Character index out of bounds (%d) |
| Start index out of bounds (%d) |
| Invalid count (%d) |
| Invalid destination index (%d) |
| Invalid code page |
| Ancestor for '%s' not found |
| Cannot assign a %s to a %s |
| Bits index out of range |
| June |
| July |
| August |
| September |
| October |
| November |
| December |
| Sun |
| Mon |
| Tue |
| Wed |
| Thu |
| Fri |
| Sat |
| Sunday |
| Monday |
| Feb |
| Mar |
| Apr |
| May |
| Jun |
| Jul |
| Aug |
| Sep |
| Oct |
| Nov |
| Dec |
| January |
| February |
| March |
| April |
| May |
| Operation not supported |
| Unexpected variant error |
| External exception %x |
| Assertion failed |
| Interface not supported |
| Exception in safecall method |
| Object lock not owned |
| Monitor support function not initialized |
| %s (%s, line %d) |
| Abstract Error |
| Access violation at address %p in module '%s'. %s of address %p |
| Cannot access package information for package '%s' |
| Can't load package %s. |
| %s |
| System Error. Code: %d. |
| %s |
| A call to an OS function failed |
| Jan |
| Error creating variant or safe array |
| Variant or safe array index out of bounds |
| Variant or safe array is locked |
| Invalid variant type conversion |
| Invalid variant operation |
| Invalid NULL variant operation |
| Invalid variant operation (%s%.8x) |
| %s |
| Custom variant type (%s%.4x) is out of range |
| Custom variant type (%s%.4x) already used by %s |
| Custom variant type (%s%.4x) is not usable |
| Too many custom variant types have been registered |
| Could not convert variant of type (%s) into type (%s) |
| Overflow while converting variant of type (%s) into type (%s) |
| Variant overflow |
| Invalid argument |
| Invalid variant type |
| Floating point underflow |
| Invalid pointer operation |
| Invalid class typecast |
| Access violation at address %p. %s of address %p |
| Access violation |
| Stack overflow |
| Control-C hit |
| Privileged instruction |
| Operation aborted |
| Exception %s in module %s at %p. |
| %s%s |
| Application Error |
| Format '%s' invalid or incompatible with argument |
| No argument for format '%s' |
| Variant method calls not supported |
| Read |
| Write |
| '%s' is not a valid floating point value |
| '%s' is not a valid GUID value |
| Invalid argument to date encode |
| Out of memory |
| I/O error %d |
| Too many open files |
| File access denied |
| Read beyond end of file |
| Disk full |
| Invalid numeric input |
| Division by zero |
| Range check error |
| Integer overflow |
| Invalid floating point operation |
| Floating point division by zero |
| Floating point overflow |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.0 |
| ProductVersion | 1.0.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | |
| FileDescription | |
| FileVersion (#2) | 1.0.0.0 |
| InternalName | |
| LegalCopyright | |
| LegalTrademarks | |
| OriginalFilename | |
| ProductName | |
| ProductVersion (#2) | 1.0.0.0 |
| Comments |
| Resource LangID | Dutch - Netherlands |
|---|
TLS Callbacks
| StartAddressOfRawData | 0x895000 |
|---|---|
| EndAddressOfRawData | 0x895050 |
| AddressOfIndex | 0x67ca28 |
| AddressOfCallbacks | 0x896010 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks | (EMPTY) |
Load Configuration
RICH Header
Errors
[*] Warning: Could not read the name of the DLL to be delay-loaded!
[*] Warning: directory 5 has a size of 0! This PE may have been manually crafted!
[*] Warning: Section .bss has a size of 0!
[*] Warning: Section .tls has a size of 0!
[*] Warning: Section .reloc has a size of 0!
Leave a comment
No comments yet.