ihasp32.exe

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	ihasp32.exe
size	2999296 (0x2dc400)
md5	92870a74940ee1727e8f6508c2551489

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x51c5605a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818f
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x424c00
SizeOfInitializedData	0xe5000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x715000
BaseOfCode	0x1000
BaseOfData	0x427000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x716000
SizeOfHeaders	0x400
CheckSum	0x2e2fe6
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
	0x1000	0x4ad000	0x1cdc00	RWX IDATA
.rsrc	0x4ae000	0x67e00	0x13c00	RW- IDATA
.idata	0x516000	0x1000	0x200	RW- IDATA
	0x517000	0x104000	0x200	RWX IDATA
ucffuxcm	0x61b000	0xfa000	0xf9400	RWX IDATA
xswoqhvs	0x715000	0x1000	0x400	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x51605d	0x71
RESOURCE	0x4ae000	0x67e00
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x6e9f74	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0x43e000	0x986
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x83f000	0x83f040	0x827c14	0x840010	0	0

show previews

type	name	size
DXSKINS	DEFAULTSKINICONLARGE	2970
DXSKINS	DEFAULTSKINICONSMALL	841
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	300
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	308
CURSOR	#9	308
CURSOR	#10	308
CURSOR	#11	308
CURSOR	#12	308
CURSOR	#13	308
CURSOR	#14	308
CURSOR	#15	308
CURSOR	#16	308
CURSOR	#17	308
CURSOR	#18	4268
CURSOR	#19	4268
CURSOR	#20	308
CURSOR	#21	308
CURSOR	#22	308
CURSOR	#23	308
CURSOR	#24	308
CURSOR	#25	308
CURSOR	#26	308
CURSOR	#27	308
CURSOR	#28	308
CURSOR	#29	308
CURSOR	#30	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	CXBMBLOB_BLOB	664
BITMAP	CXBMBLOB_BLOB_NULL	664
BITMAP	CXBMBLOB_MEMO	664
BITMAP	CXBMBLOB_MEMO_NULL	664
BITMAP	CXBMBLOB_OLE	664
BITMAP	CXBMBLOB_OLE_NULL	664
BITMAP	CXBMBLOB_PICT	664
BITMAP	CXBMBLOB_PICT_NULL	664
BITMAP	CXGRIDOPTIONSTREEVIEWCATEGORYBITMAP	1196
BITMAP	CXNAVIGATORBUTTONS	8048
BITMAP	CX_ARROWBITMAP	140
BITMAP	CX_EDITBITMAP	140
BITMAP	CX_FILTERBITMAP	140
BITMAP	CX_FULLSCROLLBITMAP	568
BITMAP	CX_HORSCROLLBITMAP	568
BITMAP	CX_INSERTBITMAP	140
BITMAP	CX_MULTIARROWBITMAP	140
BITMAP	CX_MULTIDOTBITMAP	140
BITMAP	CX_SCROLLBITMAPNESW	3404
BITMAP	CX_SCROLLBITMAPNS	3404
BITMAP	CX_SCROLLBITMAPNWSE	3404
BITMAP	CX_SCROLLBITMAPWE	3404
BITMAP	CX_VERSCROLLBITMAP	568
BITMAP	DXEXPANDBUTTON_MINUS	1196
BITMAP	DXEXPANDBUTTON_PLUS	1196
BITMAP	DXSUBMENUEXPAND	1320
BITMAP	PREVIEWGLYPH	232
ICON	#1	9905
ICON	#2	67624
ICON	#3	38056
ICON	#4	21640
ICON	#5	16936
ICON	#6	9640
ICON	#7	4264
ICON	#8	2440
ICON	#9	1128
DIALOG	DLGTEMPLATE	82
DIALOG	TEXTFILEDLG	82
STRING	#4050	120
STRING	#4051	396
STRING	#4052	236
STRING	#4053	444
STRING	#4054	304
STRING	#4055	664
STRING	#4056	784
STRING	#4057	624
STRING	#4058	588
STRING	#4059	380
STRING	#4060	900
STRING	#4061	908
STRING	#4062	684
STRING	#4063	896
STRING	#4064	1008
STRING	#4065	1008
STRING	#4066	2000
STRING	#4067	440
STRING	#4068	244
STRING	#4069	356
STRING	#4070	604
STRING	#4071	360
STRING	#4072	392
STRING	#4073	676
STRING	#4074	504
STRING	#4075	344
STRING	#4076	1028
STRING	#4077	648
STRING	#4078	888
STRING	#4079	168
STRING	#4080	208
STRING	#4081	288
STRING	#4082	972
STRING	#4083	1008
STRING	#4084	1128
STRING	#4085	816
STRING	#4086	960
STRING	#4087	1020
STRING	#4088	920
STRING	#4089	1008
STRING	#4090	412
STRING	#4091	204
STRING	#4092	408
STRING	#4093	968
STRING	#4094	1044
STRING	#4095	788
STRING	#4096	804
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	3200
RCDATA	PLATFORMTARGETS	2
RCDATA	TCXFILTERDIALOG	1653
RCDATA	TCXIMAGERESOURCEFORM	17607
RCDATA	TFMAIN	125053
RCDATA	TFMFILTERCONTROLDIALOG	1652
GROUP_CURSOR	CXEDIT_MOUSEWHEEL	34
GROUP_CURSOR	CX_COLORPICKERCURSOR	20
GROUP_CURSOR	CX_DOWNSCROLLCURSOR	20
GROUP_CURSOR	CX_DRAGCOPYCURSOR	20
GROUP_CURSOR	CX_DRAGCURSOR	20
GROUP_CURSOR	CX_FULLSCROLLCURSOR	20
GROUP_CURSOR	CX_GRIDSELECTROWCURSOR	20
GROUP_CURSOR	CX_HANDCURSOR	20
GROUP_CURSOR	CX_HANDDRAGCURSOR	20
GROUP_CURSOR	CX_HANDPOINT	20
GROUP_CURSOR	CX_HANDPOINTCURSOR	20
GROUP_CURSOR	CX_HORSCROLLCURSOR	20
GROUP_CURSOR	CX_HORZSIZECURSOR	20
GROUP_CURSOR	CX_LEFTSCROLLCURSOR	20
GROUP_CURSOR	CX_MULTIDRAGCOPYCURSOR	20
GROUP_CURSOR	CX_MULTIDRAGCURSOR	20
GROUP_CURSOR	CX_NODROPCURSOR	20
GROUP_CURSOR	CX_REMOVECURSOR	20
GROUP_CURSOR	CX_RIGHTSCROLLCURSOR	20
GROUP_CURSOR	CX_UPSCROLLCURSOR	20
GROUP_CURSOR	CX_VERSCROLLCURSOR	20
GROUP_CURSOR	CX_VERTSIZECURSOR	20
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	132
VERSION	#1	320
MANIFEST	#1	714

module_name	hint	ord	function_name
kernel32.dll			GetStdHandle

VS_FIXEDFILEINFO

dwSignature	0x10000fe
FileVersion	0.0.256.0
ProductVersion	0.0.0.16128
StrucVersion	0x1000000
FileFlagsMask	0
FileFlags	0x400
FileOS	0x100
FileType	0
FileSubtype	0

show previews

offset	size	type	comment
0	2999296	EXE	06/22/2013 08:29:14	#
15c1	15	HTM		#
2b1b90	9905	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x4e9328

[?] can't find file_offset of VA 0x4e937c

[?] can't find file_offset of VA 0x4e93d0

[?] can't find file_offset of VA 0x4e9448

[?] can't find file_offset of VA 0x4e95d4

[?] can't find file_offset of VA 0x4e96c0

[?] can't find file_offset of VA 0x4e987c

[?] can't find file_offset of VA 0x4e99ac

[?] can't find file_offset of VA 0x4e9c44

[?] can't find file_offset of VA 0x4e9f54

[?] can't find file_offset of VA 0x4ea1c4

[?] can't find file_offset of VA 0x4ea410

[?] can't find file_offset of VA 0x4ea58c

[?] can't find file_offset of VA 0x4ea910

[?] can't find file_offset of VA 0x4eac9c

[?] can't find file_offset of VA 0x4eaf48

[?] can't find file_offset of VA 0x4eb2c8

[?] can't find file_offset of VA 0x4eb6b8

[?] can't find file_offset of VA 0x4ebaa8

[?] can't find file_offset of VA 0x4ec278

[?] can't find file_offset of VA 0x4ec430

[?] can't find file_offset of VA 0x4ec524

[?] can't find file_offset of VA 0x4ec688

[?] can't find file_offset of VA 0x4ec8e4

[?] can't find file_offset of VA 0x4eca4c

[?] can't find file_offset of VA 0x4ecbd4

[?] can't find file_offset of VA 0x4ece78

[?] can't find file_offset of VA 0x4ed070

[?] can't find file_offset of VA 0x4ed1c8

[?] can't find file_offset of VA 0x4ed5cc

[?] can't find file_offset of VA 0x4ed854

[?] can't find file_offset of VA 0x4edbcc

[?] can't find file_offset of VA 0x4edc74

[?] can't find file_offset of VA 0x4edd44

[?] can't find file_offset of VA 0x4ede64

[?] can't find file_offset of VA 0x4ee230

[?] can't find file_offset of VA 0x4ee620

[?] can't find file_offset of VA 0x4eea88

[?] can't find file_offset of VA 0x4eedb8

[?] can't find file_offset of VA 0x4ef178

[?] can't find file_offset of VA 0x4ef574

[?] can't find file_offset of VA 0x4ef90c

[?] can't find file_offset of VA 0x4efcfc

[?] can't find file_offset of VA 0x4efe98

[?] can't find file_offset of VA 0x4eff64

[?] can't find file_offset of VA 0x4f00fc

[?] can't find file_offset of VA 0x4f04c4

[?] can't find file_offset of VA 0x4f08d8

[?] can't find file_offset of VA 0x4f0bec

[?] can't find file_offset of VA 0x4f0f10

[?] can't find file_offset of VA 0x4f0f20

[?] can't find file_offset of VA 0x4f1ba0

[?] can't find file_offset of VA 0x4f1ba4

[?] can't find file_offset of VA 0x4f221c

[?] can't find file_offset of VA 0x4f66e4

[?] can't find file_offset of VA 0x514f64

[?] can't find file_offset of VA 0x5155d8

[?] can't find file_offset of VA 0x5155fc

[?] can't find file_offset of VA 0x515610

[?] can't find file_offset of VA 0x515624

[?] can't find file_offset of VA 0x515638

[?] can't find file_offset of VA 0x51564c

[?] can't find file_offset of VA 0x515660

[?] can't find file_offset of VA 0x515674

[?] can't find file_offset of VA 0x515688

[?] can't find file_offset of VA 0x51569c

[?] can't find file_offset of VA 0x5156b0

[?] can't find file_offset of VA 0x5156c4

[?] can't find file_offset of VA 0x5156d8

[?] can't find file_offset of VA 0x5156ec

[?] can't find file_offset of VA 0x515700

[?] can't find file_offset of VA 0x515714

[?] can't find file_offset of VA 0x515728

[?] can't find file_offset of VA 0x51573c

[?] can't find file_offset of VA 0x515750

[?] can't find file_offset of VA 0x515764

[?] can't find file_offset of VA 0x515778

[?] can't find file_offset of VA 0x51578c

[?] can't find file_offset of VA 0x5157a0

[?] can't find file_offset of VA 0x5157b4

[?] can't find file_offset of VA 0x5157c8

[?] can't find file_offset of VA 0x5157dc

[?] can't find file_offset of VA 0x5157f0

[?] can't find file_offset of VA 0x515804

[?] can't find file_offset of VA 0x515818

[?] invalid VS_VERSIONINFO child type "\x00r\x00i\x00n"

[?] can't find file_offset of VA 0x427c14

[?] can't find file_offset of VA 0x43e000