PHPMaker.exe - PHPMaker

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	PHPMaker.exe
size	5042176 (0x4cf000)
md5	ff4ff2e7f429c0afeba22ecfaa73178b

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xc
TimeDateStamp	0x52299510
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0xf24c00
SizeOfInitializedData	0x3e0400
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1395001
BaseOfCode	0x1000
BaseOfData	0xf26000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x139b000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASPack v2.12

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xf19000	0x43fe00	RWX CODE IDATA
.itext	0xf1a000	0xc000	0x4800	RWX CODE IDATA
.data	0xf26000	0x35000	0xf400	RW- IDATA
.bss	0xf5b000	0x8b000	0	RW- IDATA
.idata	0xfe6000	0x6000	0x1c00	RW- IDATA
.didata	0xfec000	0x1000	0x400	RW- IDATA
.tls	0xfed000	0x1000	0	RW- IDATA
.rdata	0xfee000	0x1000	0x200	RW- IDATA
.reloc	0xfef000	0x130000	0	RW- IDATA DISCARDABLE
.rsrc	0x111f000	0x276000	0x74600	RW- IDATA
.eworld	0x1395000	0x5000	0x4a00	RWX CODE IDATA
.adata	0x139a000	0x1000	0	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1396008	0x754
RESOURCE	0x111f000	0x275400
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1395fb0	8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x1395f98	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

TLS

raw start	raw end	index	callbks	zero fill	flags
0x13ed000	0x13ed04c	0x1326a20	0x13ee010	0	0

show previews

type	name	size
LANGUAGE	BULGARIAN.LNG	33169
LANGUAGE	CHINESE.LNG	22064
LANGUAGE	CZECH.LNG	22490
LANGUAGE	ENGLISH.LNG	24104
LANGUAGE	FRENCH.LNG	25458
LANGUAGE	GERMAN.LNG	24996
LANGUAGE	GREEK.LNG	35808
LANGUAGE	ITALIAN.LNG	25101
LANGUAGE	JAPANESE.LNG	26589
LANGUAGE	PORTUGUESE_BRAZIL.LNG	24770
LANGUAGE	RUSSIAN.LNG	33672
LANGUAGE	SPANISH.LNG	25263
LANGUAGE	SWEDISH.LNG	23501
LANGUAGE	TURKISH.LNG	23307
UNICODEDATA	CASE	29013
UNICODEDATA	CATEGORIES	31653
UNICODEDATA	COMBINING	1662
UNICODEDATA	COMPOSITION	40177
UNICODEDATA	DECOMPOSITION	53873
UNICODEDATA	NUMBERS	5173
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	308
CURSOR	#9	308
CURSOR	#10	308
CURSOR	#11	308
CURSOR	#12	308
CURSOR	#13	308
CURSOR	#14	308
CURSOR	#15	308
CURSOR	#16	308
CURSOR	#17	308
CURSOR	#18	308
CURSOR	#19	308
CURSOR	#20	308
CURSOR	#21	308
CURSOR	#22	308
CURSOR	#23	308
CURSOR	#24	308
CURSOR	#25	308
CURSOR	#26	300
CURSOR	#27	308
CURSOR	#28	308
CURSOR	#29	308
CURSOR	#30	308
CURSOR	#31	308
CURSOR	#32	308
CURSOR	#33	308
CURSOR	#34	308
CURSOR	#35	308
CURSOR	#36	308
CURSOR	#37	308
CURSOR	#38	308
CURSOR	#39	308
CURSOR	#40	308
CURSOR	#41	308
CURSOR	#42	308
CURSOR	#43	308
CURSOR	#44	308
CURSOR	#45	308
CURSOR	#46	308
CURSOR	#47	308
CURSOR	#48	308
CURSOR	#49	3244
CURSOR	#50	3244
CURSOR	#51	308
CURSOR	#52	308
CURSOR	#53	308
CURSOR	#54	308
CURSOR	#55	308
CURSOR	#56	308
CURSOR	#57	308
CURSOR	#58	308
CURSOR	#59	308
CURSOR	#60	308
CURSOR	#61	308
CURSOR	#62	308
CURSOR	#63	308
CURSOR	#64	308
CURSOR	#65	308
CURSOR	#66	308
CURSOR	#67	308
BITMAP	ACQBBGDARK	159264
BITMAP	ACQBBGLIGHT	159264
BITMAP	ACQBBGWHITE	159264
BITMAP	ACQBDATASOURCE_COLLAPSE	292
BITMAP	ACQBDATASOURCE_EXPAND	292
BITMAP	ACQBFIELDMARK_PRIMARYKEY	360
BITMAP	ACQBGRIDTOOLBAR_COLLAPSE	208
BITMAP	ACQBGRIDTOOLBAR_DELETE	544
BITMAP	ACQBGRIDTOOLBAR_DOWN	544
BITMAP	ACQBGRIDTOOLBAR_EXPAND	208
BITMAP	ACQBGRIDTOOLBAR_INSERT	544
BITMAP	ACQBGRIDTOOLBAR_UP	544
BITMAP	ACQBLINKCARDINALITYMANY	232
BITMAP	ACQBLINKCARDINALITYONE	232
BITMAP	ACQBUNION_ADD	208
BITMAP	ACQB_EXCEPT	232
BITMAP	ACQB_EXCEPTALL	232
BITMAP	ACQB_INTERSECT	232
BITMAP	ACQB_INTERSECTALL	232
BITMAP	ACQB_UNION	232
BITMAP	ACQB_UNIONALL	232
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
ICON	#1	872
ICON	#2	3240
ICON	#3	7336
GROUP_ICON	MAINICON	48
VERSION	#1	744
MANIFEST	#1	662

module_name	hint	ord	function_name
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleA
kernel32.dll			LoadLibraryA
oleaut32.dll			SysFreeString
advapi32.dll			RegQueryValueExW
user32.dll			LoadStringW
user32.dll			CreateWindowExW
msimg32.dll			AlphaBlend
gdi32.dll			WidenPath
version.dll			VerQueryValueW
mpr.dll			WNetGetConnectionW
advapi32.dll			SetSecurityDescriptorDacl
imagehlp.dll			ImageDirectoryEntryToData
ole32.dll			CoCreateGuid
oleaut32.dll			CreateErrorInfo
ole32.dll			CreateStreamOnHGlobal
oleaut32.dll			SafeArrayPtrOfIndex
comctl32.dll			InitializeFlatSB
user32.dll			EnumDisplayMonitors
imm32.dll			ImmSetCompositionWindow
winspool.drv			OpenPrinterW
winspool.drv			GetDefaultPrinterW
shell32.dll			SHGetFileInfoW
wininet.dll			InternetGetConnectedState
urlmon.dll			CoInternetCreateZoneManager
shell32.dll			SHGetSpecialFolderPathW
comdlg32.dll			ChooseFontW
winmm.dll			waveOutGetNumDevs
ole32.dll			CoCreateGuid
wsock32.dll			WSACleanup
crypt32.dll			CertOpenSystemStoreW
shdocvw.dll			DoOrganizeFavDlg
ole32.dll			CoUninitialize
shell32.dll			SHGetMalloc

StringTable 040904E4

CompanyName	e.World Technology Ltd.
FileDescription	PHPMaker
FileVersion	10.0.1.2
InternalName	PHPMaker
LegalCopyright
LegalTrademarks
OriginalFilename	PHPMaker.exe
ProductName	PHPMaker
ProductVersion	10.0
Comments

VS_FIXEDFILEINFO

FileVersion	10.0.1.2
ProductVersion	10.0.1.2
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	5036592	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x119c1ac

[?] can't find file_offset of VA 0x11a9420

[?] can't find file_offset of VA 0x11aa858

[?] can't find file_offset of VA 0x11aa98c

[?] can't find file_offset of VA 0x11aaac0

[?] can't find file_offset of VA 0x11aabf4

[?] can't find file_offset of VA 0x11aad28

[?] can't find file_offset of VA 0x11aae5c

[?] can't find file_offset of VA 0x11aaf90

[?] can't find file_offset of VA 0x11ab0c4

[?] can't find file_offset of VA 0x11ab1f8

[?] can't find file_offset of VA 0x11ab32c

[?] can't find file_offset of VA 0x11ab460

[?] can't find file_offset of VA 0x11ab594

[?] can't find file_offset of VA 0x11ab6c8

[?] can't find file_offset of VA 0x11ab7fc

[?] can't find file_offset of VA 0x11ab930

[?] can't find file_offset of VA 0x11aba64

[?] can't find file_offset of VA 0x11abb98

[?] can't find file_offset of VA 0x11abccc

[?] can't find file_offset of VA 0x11abe00

[?] can't find file_offset of VA 0x11abf34

[?] can't find file_offset of VA 0x11ac068

[?] can't find file_offset of VA 0x11ac19c

[?] can't find file_offset of VA 0x11ac2d0

[?] can't find file_offset of VA 0x11ac404

[?] can't find file_offset of VA 0x11ac538

[?] can't find file_offset of VA 0x11ac66c

[?] can't find file_offset of VA 0x11ac798

[?] can't find file_offset of VA 0x11ac8cc

[?] can't find file_offset of VA 0x11aca00

[?] can't find file_offset of VA 0x11acb34

[?] can't find file_offset of VA 0x11acc68

[?] can't find file_offset of VA 0x11acd9c

[?] can't find file_offset of VA 0x11aced0

[?] can't find file_offset of VA 0x11ad004

[?] can't find file_offset of VA 0x11ad138

[?] can't find file_offset of VA 0x11ad26c

[?] can't find file_offset of VA 0x11ad3a0

[?] can't find file_offset of VA 0x11ad4d4

[?] can't find file_offset of VA 0x11ad608

[?] can't find file_offset of VA 0x11ad73c

[?] can't find file_offset of VA 0x11ad870

[?] can't find file_offset of VA 0x11ad9a4

[?] can't find file_offset of VA 0x11adad8

[?] can't find file_offset of VA 0x11adc0c

[?] can't find file_offset of VA 0x11add40

[?] can't find file_offset of VA 0x11ade74

[?] can't find file_offset of VA 0x11adfa8

[?] can't find file_offset of VA 0x11ae0dc

[?] can't find file_offset of VA 0x11ae210

[?] can't find file_offset of VA 0x11aeebc

[?] can't find file_offset of VA 0x11afb68

[?] can't find file_offset of VA 0x11afc9c

[?] can't find file_offset of VA 0x11afdd0

[?] can't find file_offset of VA 0x11aff04

[?] can't find file_offset of VA 0x11b0038

[?] can't find file_offset of VA 0x11b016c

[?] can't find file_offset of VA 0x11b02a0

[?] can't find file_offset of VA 0x11b03d4

[?] can't find file_offset of VA 0x11b0508

[?] can't find file_offset of VA 0x11b063c

[?] can't find file_offset of VA 0x11b0770

[?] can't find file_offset of VA 0x11b08a4

[?] can't find file_offset of VA 0x11b09d8

[?] can't find file_offset of VA 0x11b0b0c

[?] can't find file_offset of VA 0x11b0c40

[?] can't find file_offset of VA 0x11b0d74

[?] can't find file_offset of VA 0x11b0ea8

[?] can't find file_offset of VA 0x11b0fdc

[?] can't find file_offset of VA 0x11d7dfc

[?] can't find file_offset of VA 0x11fec1c

[?] can't find file_offset of VA 0x1225a3c

[?] can't find file_offset of VA 0x1225b60

[?] can't find file_offset of VA 0x1225c84

[?] can't find file_offset of VA 0x1225dec

[?] can't find file_offset of VA 0x1225ebc

[?] can't find file_offset of VA 0x12260dc

[?] can't find file_offset of VA 0x12262fc

[?] can't find file_offset of VA 0x12263cc

[?] can't find file_offset of VA 0x12265ec

[?] can't find file_offset of VA 0x122680c

[?] can't find file_offset of VA 0x12268f4

[?] can't find file_offset of VA 0x12269dc

[?] can't find file_offset of VA 0x1226aac

[?] can't find file_offset of VA 0x1226b94

[?] can't find file_offset of VA 0x1226c7c

[?] can't find file_offset of VA 0x1226d64

[?] can't find file_offset of VA 0x1226e4c

[?] can't find file_offset of VA 0x1226f34

[?] can't find file_offset of VA 0x122701c

[?] can't find file_offset of VA 0x12271ec

[?] can't find file_offset of VA 0x12273d0

[?] can't find file_offset of VA 0x12275a0

[?] can't find file_offset of VA 0x1227770

[?] can't find file_offset of VA 0x1227940

[?] can't find file_offset of VA 0x1227b10

[?] can't find file_offset of VA 0x1227ce0

[?] can't find file_offset of VA 0x1227eb0

[?] can't find file_offset of VA 0x1228080

[?] can't find file_offset of VA 0x1228250

[?] too many errors getting resource data, stopped on 0 of 1

[?] too many errors getting resource data, stopped on 0 of 2