filename | 8759j3f434(2) | |
---|---|---|
size | 270848 (0x42200) | |
md5 | 3c89456ba5ab540e445a632ccfbbb958 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe0 |
Rich Header
lib id | version | times used |
---|---|---|
132 | 30729 | 33 |
149 | 30729 | 21 |
131 | 30729 | 112 |
123 | 50727 | 33 |
1 | 0 | 189 |
138 | 30729 | 1 |
148 | 21022 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0x441000 | 0x441008 | 0x43f0e8 | 0x413310 | 0 | 0 |
id | lang | string |
---|---|---|
1 | 1033 | IME Pad |
2 | 1033 | IME Pad Menu |
3 | 1033 | Applet Menu |
4 | 1033 | Back |
5 | 1033 | Version |
6 | 1033 | Help |
7 | 1033 | IME Pad's Help |
8 | 1033 | Close |
9 | 1033 | IME Pad Properties |
10 | 1033 | Add Applets |
11 | 1033 | Left |
12 | 1033 | Right |
13 | 1033 | Applet's title |
14 | 1033 | FileName |
15 | 1033 | User Settings |
16 | 1033 | Undef |
17 | 1033 | Undef |
18 | 1033 | Undef |
19 | 1033 | Property |
20 | 1033 | Help |
21 | 1033 | < &Back |
22 | 1033 | &Next > |
23 | 1033 | &Finish |
24 | 1033 | Undef |
25 | 1033 | Undef |
26 | 1033 | Undef |
27 | 1033 | Auto |
28 | 1033 | English |
29 | 1033 | Chinese(PRC) |
30 | 1033 | Chinese(Traditional) |
31 | 1033 | Japanese |
32 | 1033 | Korean |
33 | 1033 | BS |
34 | 1033 | Enter |
35 | 1033 | Space |
36 | 1033 | Del |
37 | 1033 | Esc |
38 | 1033 | Home |
39 | 1033 | PgUp |
40 | 1033 | Tab |
41 | 1033 | Win |
42 | 1033 | End |
43 | 1033 | PgDn |
44 | 1033 | Insert |
45 | 1033 | Appkey |
46 | 1033 | None |
47 | 1033 | Pinyin |
48 | 1033 | BPMF/Chgjie |
49 | 1033 | Conv |
50 | 1033 | Hanja |
51 | 1033 | 0x00 |
52 | 1033 | 0xC0 |
53 | 1033 | 0x1C/0x1C |
54 | 1033 | 0x1C |
55 | 1033 | 0x19 |
56 | 1033 | BackSpace |
57 | 1033 | Enter |
58 | 1033 | Space |
59 | 1033 | Delete |
60 | 1033 | Escape |
61 | 1033 | Home |
62 | 1033 | PageUp |
63 | 1033 | Tab |
64 | 1033 | Window |
65 | 1033 | End |
66 | 1033 | PageDown |
67 | 1033 | Insert |
68 | 1033 | AppKey |
69 | 1033 | ArrowLeft |
70 | 1033 | ArrowRight |
71 | 1033 | ArrowUp |
72 | 1033 | ArrowDown |
73 | 1033 | None |
74 | 1033 | PinYin |
75 | 1033 | Bopomofo/ChangJie |
76 | 1033 | Conversion |
77 | 1033 | Undef |
78 | 1033 | Undef |
79 | 1033 | Undef |
80 | 1033 | Undef |
81 | 1033 | Undef |
82 | 1033 | The specified folder does not exist. |
83 | 1033 | The specified folder does not exist. Do you want to create it? |
84 | 1033 | Failed to create folder. |
85 | 1033 | There is no IME Pad Applet in this folder. |
86 | 1033 | Not enough memory. |
87 | 1033 | Cannot find specified Applet. |
88 | 1033 | This operation requires Administrator privileges. |
89 | 1033 | Undef |
90 | 1033 | Undef |
91 | 1033 | Undef |
92 | 1033 | Undef |
93 | 1033 | Undef |
94 | 1033 | Undef |
95 | 1033 | Segoe UI |
96 | 1033 | Segoe UI |
97 | 1033 | Segoe UI |
98 | 1033 | Segoe UI |
99 | 1033 | Segoe UI |
100 | 1033 | Segoe UI |
101 | 1033 | Segoe UI |
102 | 1033 | Segoe UI |
103 | 1033 | About IME Pad |
104 | 1033 | Microsoft® IME Pad |
105 | 1033 | © Microsoft Corporation. All rights reserved. |
106 | 1033 | OK |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.dll | 837 | Process32Next | |
KERNEL32.dll | 775 | LockResource | |
KERNEL32.dll | 502 | GetModuleHandleA | |
KERNEL32.dll | 172 | CreateToolhelp32Snapshot | |
KERNEL32.dll | 67 | CloseHandle | |
KERNEL32.dll | 321 | FlushFileBuffers | |
KERNEL32.dll | 120 | CreateFileA | |
KERNEL32.dll | 678 | HeapSize | |
KERNEL32.dll | 1164 | WriteConsoleW | |
KERNEL32.dll | 409 | GetConsoleOutputCP | |
KERNEL32.dll | 1154 | WriteConsoleA | |
KERNEL32.dll | 1020 | SetStdHandle | |
KERNEL32.dll | 488 | GetLocaleInfoA | |
KERNEL32.dll | 576 | GetStringTypeW | |
KERNEL32.dll | 573 | GetStringTypeA | |
KERNEL32.dll | 753 | LoadLibraryA | |
KERNEL32.dll | 737 | LCMapStringA | |
KERNEL32.dll | 914 | RtlUnwind | |
KERNEL32.dll | 693 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 405 | GetConsoleMode | |
KERNEL32.dll | 387 | GetConsoleCP | |
KERNEL32.dll | 991 | SetFilePointer | |
KERNEL32.dll | 591 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 426 | GetCurrentProcessId | |
KERNEL32.dll | 614 | GetTickCount | |
KERNEL32.dll | 852 | QueryPerformanceCounter | |
KERNEL32.dll | 471 | GetFileType | |
KERNEL32.dll | 1000 | SetHandleCount | |
KERNEL32.dll | 449 | GetEnvironmentStringsW | |
KERNEL32.dll | 1146 | WideCharToMultiByte | |
KERNEL32.dll | 331 | FreeEnvironmentStringsW | |
KERNEL32.dll | 447 | GetEnvironmentStrings | |
KERNEL32.dll | 330 | FreeEnvironmentStringsA | |
KERNEL32.dll | 486 | GetLastError | |
KERNEL32.dll | 429 | GetCurrentThreadId | |
KERNEL32.dll | 1075 | TlsFree | |
KERNEL32.dll | 1077 | TlsSetValue | |
KERNEL32.dll | 1074 | TlsAlloc | |
KERNEL32.dll | 1004 | SetLastError | |
KERNEL32.dll | 794 | MultiByteToWideChar | |
KERNEL32.dll | 793 | MulDiv | |
KERNEL32.dll | 671 | HeapCreate | |
KERNEL32.dll | 114 | CreateEventA | |
KERNEL32.dll | 1056 | SizeofResource | |
KERNEL32.dll | 1057 | Sleep | |
KERNEL32.dll | 311 | FindResourceExA | |
KERNEL32.dll | 238 | EnumResourceTypesA | |
KERNEL32.dll | 712 | IsBadReadPtr | |
KERNEL32.dll | 821 | OpenSemaphoreA | |
KERNEL32.dll | 1124 | WaitForSingleObject | |
KERNEL32.dll | 835 | Process32First | |
KERNEL32.dll | 1097 | UpdateResourceA | |
KERNEL32.dll | 425 | GetCurrentProcess | |
KERNEL32.dll | 669 | HeapAlloc | |
KERNEL32.dll | 758 | LoadResource | |
KERNEL32.dll | 739 | LCMapStringW | |
KERNEL32.dll | 335 | FreeResource | |
KERNEL32.dll | 1076 | TlsGetValue | |
KERNEL32.dll | 731 | IsValidCodePage | |
KERNEL32.dll | 531 | GetOEMCP | |
KERNEL32.dll | 338 | GetACP | |
KERNEL32.dll | 700 | InterlockedDecrement | |
KERNEL32.dll | 704 | InterlockedIncrement | |
KERNEL32.dll | 347 | GetCPInfo | |
KERNEL32.dll | 500 | GetModuleFileNameA | |
KERNEL32.dll | 571 | GetStdHandle | |
KERNEL32.dll | 1165 | WriteFile | |
KERNEL32.dll | 260 | ExitProcess | |
KERNEL32.dll | 544 | GetProcAddress | |
KERNEL32.dll | 505 | GetModuleHandleW | |
KERNEL32.dll | 676 | HeapReAlloc | |
KERNEL32.dll | 1108 | VirtualAlloc | |
KERNEL32.dll | 1111 | VirtualFree | |
KERNEL32.dll | 673 | HeapFree | |
KERNEL32.dll | 217 | EnterCriticalSection | |
KERNEL32.dll | 751 | LeaveCriticalSection | |
KERNEL32.dll | 190 | DeleteCriticalSection | |
KERNEL32.dll | 721 | IsDebuggerPresent | |
KERNEL32.dll | 1045 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 1086 | UnhandledExceptionFilter | |
KERNEL32.dll | 1069 | TerminateProcess | |
KERNEL32.dll | 569 | GetStartupInfoA | |
KERNEL32.dll | 367 | GetCommandLineA | |
USER32.dll | 472 | LoadImageA | |
USER32.dll | 745 | UpdateWindow | |
USER32.dll | 683 | SetWindowTextA | |
USER32.dll | 367 | GetSystemMetrics | |
USER32.dll | 158 | DestroyMenu | |
USER32.dll | 289 | GetDlgItemTextA | |
USER32.dll | 285 | GetDialogBaseUnits | |
USER32.dll | 517 | MoveWindow | |
USER32.dll | 213 | EndPaint | |
USER32.dll | 330 | GetMessageA | |
USER32.dll | 392 | GetWindowRect | |
USER32.dll | 606 | SendMessageA | |
USER32.dll | 601 | SendDlgItemMessageA | |
USER32.dll | 719 | TrackPopupMenu | |
USER32.dll | 239 | FillRect | |
USER32.dll | 615 | SetCapture | |
USER32.dll | 775 | wsprintfA | |
USER32.dll | 269 | GetClientRect | |
USER32.dll | 100 | CreateMenu | |
USER32.dll | 633 | SetFocus | |
USER32.dll | 397 | GetWindowTextLengthA | |
USER32.dll | 544 | PostQuitMessage | |
USER32.dll | 14 | BeginPaint | |
USER32.dll | 282 | GetDC | |
USER32.dll | 257 | GetCapture | |
USER32.dll | 725 | TranslateMessage | |
USER32.dll | 316 | GetMenu | |
USER32.dll | 396 | GetWindowTextA | |
USER32.dll | 657 | SetRect | |
USER32.dll | 676 | SetWindowLongA | |
USER32.dll | 426 | InvalidateRect | |
USER32.dll | 385 | GetWindowLongA | |
USER32.dll | 103 | CreateWindowExA | |
USER32.dll | 588 | ReleaseDC | |
USER32.dll | 287 | GetDlgItem | |
USER32.dll | 149 | DefWindowProcA | |
USER32.dll | 364 | GetSysColor | |
USER32.dll | 679 | SetWindowPos | |
USER32.dll | 281 | GetCursorPos | |
USER32.dll | 696 | ShowWindow | |
USER32.dll | 639 | SetMenu | |
USER32.dll | 101 | CreatePopupMenu | |
USER32.dll | 442 | IsDlgButtonChecked | |
USER32.dll | 168 | DispatchMessageA | |
GDI32.dll | 516 | GetTextExtentPoint32A | |
GDI32.dll | 205 | DeleteDC | |
GDI32.dll | 51 | CreateDIBSection | |
GDI32.dll | 58 | CreateFontA | |
GDI32.dll | 437 | GetDeviceCaps | |
GDI32.dll | 208 | DeleteObject | |
GDI32.dll | 606 | SelectObject | |
GDI32.dll | 46 | CreateCompatibleDC | |
GDI32.dll | 599 | SaveDC | |
GDI32.dll | 592 | RestoreDC | |
GDI32.dll | 82 | CreateSolidBrush | |
GDI32.dll | 671 | TextOutA | |
GDI32.dll | 18 | BitBlt | |
ADVAPI32.dll | 340 | GetTokenInformation | |
ADVAPI32.dll | 497 | OpenProcessToken | |
SHELL32.dll | 117 | SHBindToParent | |
SHELL32.dll | 239 | SHParseDisplayName | |
SHELL32.dll | 177 | SHGetDataFromIDListA | |
ole32.dll | 103 | CoTaskMemFree | |
ODBC32.dll | 3 | ||
ODBC32.dll | 7 | ||
ODBC32.dll | 1 | ||
ODBC32.dll | 2 | ||
ODBC32.dll | 13 | ||
ODBC32.dll | 45 | ||
ODBC32.dll | 47 | ||
WININET.dll | 158 | InternetReadFile | |
WS2_32.dll | 21 | ||
WS2_32.dll | 54 | WSAIoctl | |
MPR.dll | 5 | WNetAddConnection2A | |
MSIMG32.dll | 3 | TransparentBlt | |
RPCRT4.dll | 341 | RpcBindingFree | |
RPCRT4.dll | 485 | RpcStringBindingComposeA | |
RPCRT4.dll | 356 | RpcBindingSetAuthInfoA | |
RPCRT4.dll | 342 | RpcBindingFromStringBindingA | |
RPCRT4.dll | 489 | RpcStringFreeA | |
RPCRT4.dll | 450 | RpcServerUseProtseqEpA | |
Secur32.dll | 80 | SetContextAttributesA | |
XmlLite.dll | CreateXmlReader | ||
SETUPAPI.dll | 317 | SetupDiDestroyDeviceInfoList | |
SETUPAPI.dll | 321 | SetupDiEnumDeviceInterfaces | |
SETUPAPI.dll | 337 | SetupDiGetClassDevsA | |
RPCNS4.dll | 10 | RpcNsBindingImportBeginA |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x3f0e8