filenamee1ef9889d3630a1ebae17e6342085fabca270babff184ea74b3683b7f6bbe53d
size471040 (0x73000)
md5a793f5ae2e4a80baabe2e9082f7afa06
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x2a425e19
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0xa18e
Magic0x10b
LinkerVersion2.25
SizeOfCode0x5cc00
SizeOfInitializedData0x16000
SizeOfUninitializedData0
AddressOfEntryPoint0x5da08
BaseOfCode0x1000
BaseOfData0x5e000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x78000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics1
SizeOfStackReserve0
SizeOfStackCommit0
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland Delphi 2006

Sections

namevavsizeraw sizeflags
CODE0x10000x5ca500x5cc00R-X CODE
DATA0x5e0000x49a00x4a00RW- IDATA
BSS0x630000xa310RW-
.idata0x640000x13640x1400RW- IDATA
.edata0x660000x4d0x200R-- IDATA SHARED
.reloc0x670000x7b700x7c00R-- IDATA SHARED
.rsrc0x6f0000x84000x8400R-- IDATA SHARED

Data Directory

typevasize
EXPORT0x660000x4d
IMPORT0x640000x1364
RESOURCE0x6f0000x8400
EXCEPTION00
SECURITY00
BASERELOC0x670000x7b70
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#40814480
STRING#408211760
STRING#408313240
STRING#408412120
STRING#408510880
STRING#408611960
STRING#408712920
STRING#40888800
STRING#40899520
STRING#40906080
STRING#40912360
STRING#40924760
STRING#409310040
STRING#409410120
STRING#40957800
STRING#40968080
RCDATABDDEEFGGIJJK174150
RCDATADVCLAL160
RCDATAPACKAGEINFO4360
RCDATATCEFFHHIJJKL2600
idlangstring
652800Missing DataSetField property
652810Not in cached update mode
652820Invalid alias name %s
652830Cannot access field '%s' in a filter
652840Untitled Application
652850The transaction isolation level must be dirty read for local databases
652960Invalid session name %s
652970Database name missing
652980Session name missing
652990Cannot perform this operation on an open database
653000Cannot perform this operation on a closed database
653010Database handle owned by a different session
653020Cannot perform this operation on an active session
653030Error creating cursor handle
653040ReferenceTableName not specified for field '%s'
653050No value for parameter '%s'
653060Cannot connect to database '%s'
653070An error occurred while attempting to initialize the Borland Database Engine (error $%.4x)
6530800009
653090BDE error $%.4x
653100Index does not exist. Index: %s
653110Missing TableName property
653120Unassigned variant value
653130Record not found
653140BCD overflow
653150%s is not a valid BCD value
653160Invalid format type for BCD
653170Could not parse SQL TimeStamp string
653180Invalid SQL date/time values
653190OLE error %.8x
653200Method '%s' not supported by automation object
653210Variant does not reference an automation object
653220Dispatch methods do not support more than 64 parameters
653230Cannot enable AutoSessionName property with more than one session on a form or data-module
653240Cannot add a session to the form or data-module while session '%s' has AutoSessionName enabled
653250Cannot modify SessionName while AutoSessionName is enabled
653260Duplicate database name '%s'
653270Duplicate session name '%s'
653280Type mismatch in expression
653290Operation cannot mix aggregate value with record-varying value
653300Arithmetic in filter expressions not supported
653310Expression is not an aggregate expression
653320Constant is not correct type %s
653330Aggregate expressions not allowed in filters
653340IN predicate list may not be empty
653350Invalid use of keyword
653360False
653370True
653380Parameter '%s' not found
653390Field '%s' is of an unsupported type
653400SQL not supported: %s
653410Execute not supported: %s
653420Field '%s' is not the correct type of calculated field to be used in an aggregate, use an internalcalc
653430Operation not allowed on a unidirectional dataset
653440Dataset not in edit or insert mode
653450Cannot perform this operation on a closed dataset
653460Nested dataset must inherit from %s
653470Filter expression incorrectly terminated
653480Unterminated field name
653490Unterminated string constant
653500Invalid filter expression character: '%s'
653510'(' expected but %s found
653520')' expected but %s found
653530')' or ',' expected but %s found
653540Expression expected but %s found
653550Field '%s' cannot be used in a filter expression
653560NULL only allowed with '=' and '<>'
653570Constant out of range
653580Incorrectly formed filter expression
653590nothing
653600Size mismatch for field '%s', expecting: %d actual: %d
653610Invalid variant type or size for field '%s'
653620Value of field '%s' is out of range
653630Field '%s' must have a value
653640Field '%s' has no dataset
653650Field '%s' cannot be a calculated or lookup field
653660Field '%s' cannot be modified
653670Field index out of range
653680Field '%s' is not indexed and cannot be modified
653690Cannot access index field '%s'
653700No index for fields '%s'
653710Index '%s' not found
653720Circular datalinks are not allowed
653730Lookup information for field '%s' is incomplete
653740DataSource cannot be changed
653750Cannot perform this operation on an open dataset
653760Clipboard does not support Icons
653770Invalid class reference for TAppletApplication
653780Invalid field size
653790Invalid FieldKind
653800Field '%s' is of an unknown type
653810Field name missing
653820Duplicate field name '%s'
653830Field '%s' not found
653840Cannot access field '%s' as type %s
653850Invalid value for field '%s'
653860%g is not a valid value for field '%s'. The allowed range is %g to %g
653870%s is not a valid value for field '%s'. The allowed range is %s to %s
653880'%s' is not a valid integer value for field '%s'
653890'%s' is not a valid boolean value for field '%s'
653900'%s' is not a valid floating point value for field '%s'
653910Type mismatch for field '%s', expecting: %s actual: %s
653920Out of memory while expanding memory stream
653930Error reading %s%s%s: %s
653940Stream read error
653950Property is read-only
653960Resource %s not found
653970%s.Seek not implemented
653980Operation not allowed on sorted list
653990Property %s does not exist
654000Stream write error
654010Thread creation error: %s
654020Thread Error: %s (%d)
654030Bitmap image is not valid
654040Icon image is not valid
654050Cannot change the size of an icon
654060Out of system resources
654070Canvas does not allow drawing
654080Class %s not found
654090List does not allow duplicates ($0%x)
654100A component named %s already exists
654110String list does not allow duplicates
654120Cannot create file "%s". %s
654130Cannot open file "%s". %s
654140Invalid stream format
654150''%s'' is not a valid component name
654160Invalid property value
654170Invalid property element: %s
654180Invalid property path
654190Invalid property type: %s
654200Invalid property value
654210List capacity out of bounds (%d)
654220List count out of bounds (%d)
654230List index out of bounds (%d)
654240Thu
654250Fri
654260Sat
654270Sunday
654280Monday
654290Tuesday
654300Wednesday
654310Thursday
654320Friday
654330Saturday
654340Unable to create directory
654350Ancestor for '%s' not found
654360Cannot assign a %s to a %s
654370Bits index out of range
654380Can't write to a read-only resource stream
654390CheckSynchronize called from thread $%x, which is NOT the main thread
654400January
654410February
654420March
654430April
654440May
654450June
654460July
654470August
654480September
654490October
654500November
654510December
654520Sun
654530Mon
654540Tue
654550Wed
654560Access violation at address %p in module '%s'. %s of address %p
654570System Error. Code: %d. %s
654580A call to an OS function failed
654590Application is not licensed to use this feature
654600Jan
654610Feb
654620Mar
654630Apr
654640May
654650Jun
654660Jul
654670Aug
654680Sep
654690Oct
654700Nov
654710Dec
654720Custom variant type (%s%.4x) already used by %s
654730Custom variant type (%s%.4x) is not usable
654740Too many custom variant types have been registered
654750Could not convert variant of type (%s) into type (%s)
654760Overflow while converting variant of type (%s) into type (%s)
654770Variant overflow
654780Invalid argument
654790Invalid variant type
654800Operation not supported
654810Unexpected variant error
654820External exception %x
654830Assertion failed
654840Interface not supported
654850Exception in safecall method
654860%s (%s, line %d)
654870Abstract Error
654880Exception %s in module %s at %p. %s%s
654890Application Error
654900Format '%s' invalid or incompatible with argument
654910No argument for format '%s'
654920Variant method calls not supported
654930Read
654940Write
654950Format string too long
654960Error creating variant or safe array
654970Variant or safe array index out of bounds
654980Variant or safe array is locked
654990Invalid variant type conversion
655000Invalid variant operation
655010Invalid NULL variant operation
655020Invalid variant operation (%s%.8x) %s
655030Custom variant type (%s%.4x) is out of range
655040Invalid numeric input
655050Division by zero
655060Range check error
655070Integer overflow
655080Invalid floating point operation
655090Floating point division by zero
655100Floating point overflow
655110Floating point underflow
655120Invalid pointer operation
655130Invalid class typecast
655140Access violation at address %p. %s of address %p
655150Access violation
655160Stack overflow
655170Control-C hit
655180Privileged instruction
655190Operation aborted
655200'%s' is not a valid integer value
655210'%s' is not a valid floating point value
655220'%s' is not a valid date
655230'%s' is not a valid time
655240'%s' is not a valid date and time
655250'%d.%d' is not a valid timestamp
655260Invalid argument to time encode
655270Invalid argument to date encode
655280Out of memory
655290I/O error %d
655300File not found
655310Invalid filename
655320Too many open files
655330File access denied
655340Read beyond end of file
655350Disk full
module_namehintordfunction_name
kernel32.dllDeleteCriticalSection
kernel32.dllLeaveCriticalSection
kernel32.dllEnterCriticalSection
kernel32.dllInitializeCriticalSection
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllLocalFree
kernel32.dllLocalAlloc
kernel32.dllGetVersion
kernel32.dllGetCurrentThreadId
kernel32.dllInterlockedDecrement
kernel32.dllInterlockedIncrement
kernel32.dllVirtualQuery
kernel32.dllWideCharToMultiByte
kernel32.dllMultiByteToWideChar
kernel32.dlllstrlenA
kernel32.dlllstrcpynA
kernel32.dllLoadLibraryExA
kernel32.dllGetThreadLocale
kernel32.dllGetStartupInfoA
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleA
kernel32.dllGetModuleFileNameA
kernel32.dllGetLocaleInfoA
kernel32.dllGetCommandLineA
kernel32.dllFreeLibrary
kernel32.dllFindFirstFileA
kernel32.dllFindClose
kernel32.dllExitProcess
kernel32.dllExitThread
kernel32.dllCreateThread
kernel32.dllWriteFile
kernel32.dllUnhandledExceptionFilter
kernel32.dllRtlUnwind
kernel32.dllRaiseException
kernel32.dllGetStdHandle
user32.dllGetKeyboardType
user32.dllLoadStringA
user32.dllMessageBoxA
user32.dllCharNextA
advapi32.dllRegQueryValueExA
advapi32.dllRegOpenKeyExA
advapi32.dllRegCloseKey
oleaut32.dllSysFreeString
oleaut32.dllSysReAllocStringLen
oleaut32.dllSysAllocStringLen
kernel32.dllTlsSetValue
kernel32.dllTlsGetValue
kernel32.dllTlsFree
kernel32.dllTlsAlloc
kernel32.dllLocalFree
kernel32.dllLocalAlloc
advapi32.dllRegQueryValueExA
advapi32.dllRegOpenKeyExA
advapi32.dllRegCloseKey
kernel32.dllWriteFile
kernel32.dllWaitForSingleObject
kernel32.dllVirtualQuery
kernel32.dllSizeofResource
kernel32.dllSetFilePointer
kernel32.dllSetEvent
kernel32.dllSetErrorMode
kernel32.dllSetEndOfFile
kernel32.dllSearchPathA
kernel32.dllResumeThread
kernel32.dllResetEvent
kernel32.dllReleaseMutex
kernel32.dllReadFile
kernel32.dllOpenFileMappingA
kernel32.dllMultiByteToWideChar
kernel32.dllMulDiv
kernel32.dllLockResource
kernel32.dllLoadResource
kernel32.dllLoadLibraryA
kernel32.dllLeaveCriticalSection
kernel32.dllIsDBCSLeadByte
kernel32.dllInitializeCriticalSection
kernel32.dllGlobalUnlock
kernel32.dllGlobalReAlloc
kernel32.dllGlobalHandle
kernel32.dllGlobalLock
kernel32.dllGlobalFree
kernel32.dllGlobalAlloc
kernel32.dllGetVolumeInformationA
kernel32.dllGetVersionExA
kernel32.dllGetTickCount
kernel32.dllGetThreadLocale
kernel32.dllGetStringTypeExA
kernel32.dllGetStdHandle
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleA
kernel32.dllGetModuleFileNameA
kernel32.dllGetLocaleInfoA
kernel32.dllGetLocalTime
kernel32.dllGetLastError
kernel32.dllGetFullPathNameA
kernel32.dllGetFileAttributesA
kernel32.dllGetExitCodeThread
kernel32.dllGetEnvironmentVariableA
kernel32.dllGetDiskFreeSpaceA
kernel32.dllGetDateFormatA
kernel32.dllGetCurrentThreadId
kernel32.dllGetCurrentProcess
kernel32.dllGetCurrentDirectoryA
kernel32.dllGetCPInfo
kernel32.dllGetACP
kernel32.dllFreeResource
kernel32.dllInterlockedIncrement
kernel32.dllInterlockedExchange
kernel32.dllInterlockedDecrement
kernel32.dllFreeLibrary
kernel32.dllFormatMessageA
kernel32.dllFindResourceA
kernel32.dllFindFirstFileA
kernel32.dllFindClose
kernel32.dllFileTimeToLocalFileTime
kernel32.dllFileTimeToDosDateTime
kernel32.dllFatalAppExitA
kernel32.dllEnumCalendarInfoA
kernel32.dllEnterCriticalSection
kernel32.dllDeleteFileA
kernel32.dllDeleteCriticalSection
kernel32.dllCreateMutexA
kernel32.dllCreateFileA
kernel32.dllCreateEventA
kernel32.dllCreateDirectoryA
kernel32.dllCompareStringA
kernel32.dllCloseHandle
gdi32.dllUnrealizeObject
gdi32.dllStretchBlt
gdi32.dllSetTextColor
gdi32.dllSetROP2
gdi32.dllSetBkMode
gdi32.dllSetBkColor
gdi32.dllSelectPalette
gdi32.dllSelectObject
gdi32.dllRealizePalette
gdi32.dllMoveToEx
gdi32.dllGetTextMetricsA
gdi32.dllGetSystemPaletteEntries
gdi32.dllGetStockObject
gdi32.dllGetObjectA
gdi32.dllGetDeviceCaps
gdi32.dllGetDIBits
gdi32.dllGetCurrentPositionEx
gdi32.dllGetBitmapBits
gdi32.dllDeleteObject
gdi32.dllDeleteDC
gdi32.dllCreatePenIndirect
gdi32.dllCreatePalette
gdi32.dllCreateFontIndirectA
gdi32.dllCreateDIBitmap
gdi32.dllCreateCompatibleDC
gdi32.dllCreateCompatibleBitmap
gdi32.dllCreateBrushIndirect
gdi32.dllCreateBitmap
user32.dllSetTimer
user32.dllReleaseDC
user32.dllPeekMessageA
user32.dllOemToCharBuffA
user32.dllOemToCharA
user32.dllMsgWaitForMultipleObjects
user32.dllMessageBoxA
user32.dllLoadStringA
user32.dllLoadIconA
user32.dllKillTimer
user32.dllGetSystemMetrics
user32.dllGetSysColor
user32.dllGetIconInfo
user32.dllGetDC
user32.dllDrawIconEx
user32.dllDestroyIcon
user32.dllCreateIcon
user32.dllCharNextA
user32.dllCharUpperBuffA
user32.dllCharToOemBuffA
user32.dllCharToOemA
kernel32.dllSleep
oleaut32.dllSafeArrayPtrOfIndex
oleaut32.dllSafeArrayPutElement
oleaut32.dllSafeArrayGetElement
oleaut32.dllSafeArrayUnaccessData
oleaut32.dllSafeArrayAccessData
oleaut32.dllSafeArrayGetUBound
oleaut32.dllSafeArrayGetLBound
oleaut32.dllSafeArrayCreate
oleaut32.dllVariantChangeType
oleaut32.dllVariantCopyInd
oleaut32.dllVariantCopy
oleaut32.dllVariantClear
oleaut32.dllVariantInit
ole32.dllCoCreateInstance
ole32.dllCoUninitialize
ole32.dllCoInitialize
oleaut32.dllGetErrorInfo
oleaut32.dllSysFreeString
shell32.dllShellExecuteA
wininet.dllInternetReadFile
wininet.dllInternetOpenA
wininet.dllInternetCrackUrlA
wininet.dllInternetConnectA
wininet.dllInternetCloseHandle
wininet.dllInternetCanonicalizeUrlA
wininet.dllHttpSendRequestA
wininet.dllHttpOpenRequestA
ordentry_vafunction_name
10x25728CPlApplet
module_nameS223456679AA.cpl
flags0
timestamp0
version0.0
ordinal_base1
nFunctions1
nNames1
Names(1)0x6602c
Functions(1)0x66028
NameOrdinals(1)0x66030
offsetsizetypecomment
0471040DLL06/19/1992 22:22:17#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK