| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 1992-Jun-19 22:22:17 |
| Detected languages |
Spanish - Mexico
|
| CompanyName | SPI |
| FileDescription | Pplan Windows |
| FileVersion | 2.9.0.12 |
| InternalName | PPW |
| LegalCopyright | SPI |
| LegalTrademarks | SPI |
| OriginalFilename | PPW |
| ProductName | PPLan Windows |
| ProductVersion | 1.0.0.0 |
| Comments |
| Info | Matching compiler(s): | Borland Delphi 5 -> Portions Copyright (c) 1983,99 Borland (h) |
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The PE header may have been manually modified. |
The resource timestamps differ from the PE header:
|
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x50 |
| e_cp | 0x2 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0xf |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0x1a |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x100 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 8 |
| TimeDateStamp | 1992-Jun-19 22:22:17 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x16fc00 |
| SizeOfInitializedData | 0x83400 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x001709C8 (Section: CODE) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x171000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 1.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x1fa000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| kernel32.dll |
GetCurrentThreadId
DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte SetCurrentDirectoryA MultiByteToWideChar lstrlenA lstrcpynA lstrcpyA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCurrentDirectoryA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess ExitThread CreateThread WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileA GetStdHandle GetFileSize GetSystemTime GetFileType DeleteFileA CreateFileA CloseHandle |
|---|---|
| user32.dll |
GetKeyboardType
LoadStringA MessageBoxA CharNextA |
| advapi32.dll |
RegQueryValueExA
RegOpenKeyExA RegCloseKey |
| oleaut32.dll |
SafeArrayPutElement
SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayCreate VariantChangeTypeEx VariantCopyInd VariantClear SysStringLen SysFreeString SysReAllocStringLen SysAllocStringLen |
| kernel32.dll (#2) |
GetCurrentThreadId
DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte SetCurrentDirectoryA MultiByteToWideChar lstrlenA lstrcpynA lstrcpyA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCurrentDirectoryA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess ExitThread CreateThread WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileA GetStdHandle GetFileSize GetSystemTime GetFileType DeleteFileA CreateFileA CloseHandle |
| advapi32.dll (#2) |
RegQueryValueExA
RegOpenKeyExA RegCloseKey |
| kernel32.dll (#3) |
GetCurrentThreadId
DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte SetCurrentDirectoryA MultiByteToWideChar lstrlenA lstrcpynA lstrcpyA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCurrentDirectoryA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess ExitThread CreateThread WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileA GetStdHandle GetFileSize GetSystemTime GetFileType DeleteFileA CreateFileA CloseHandle |
| version.dll |
VerQueryValueA
GetFileVersionInfoSizeA GetFileVersionInfoA |
| gdi32.dll |
UnrealizeObject
TextOutA StretchBlt StartPage StartDocA SetWindowOrgEx SetWindowExtEx SetWinMetaFileBits SetViewportOrgEx SetViewportExtEx SetTextColor SetTextAlign SetStretchBltMode SetROP2 SetPixel SetMapMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyPolyline PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsA GetTextExtentPointA GetTextExtentPoint32A GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectType GetObjectA GetNearestColor GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionA GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush ExtTextOutA ExtCreatePen ExcludeClipRect EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePen CreatePalette CreateICA CreateHalftonePalette CreateFontIndirectA CreateEnhMetaFileA CreateDIBitmap CreateDIBSection CreateDCA CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileA CombineRgn CloseEnhMetaFile BitBlt Arc |
| user32.dll (#2) |
GetKeyboardType
LoadStringA MessageBoxA CharNextA |
| ole32.dll |
CoUninitialize
CoInitialize IsEqualGUID |
| oleaut32.dll (#2) |
SafeArrayPutElement
SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayCreate VariantChangeTypeEx VariantCopyInd VariantClear SysStringLen SysFreeString SysReAllocStringLen SysAllocStringLen |
| comctl32.dll |
ImageList_SetIconSize
ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls |
| winspool.drv |
OpenPrinterA
EnumPrintersA DocumentPropertiesA ClosePrinter |
| comdlg32.dll |
PrintDlgA
ChooseFontA ChooseColorA GetSaveFileNameA GetOpenFileNameA |
| kernel32.dll (#4) |
GetCurrentThreadId
DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualFree VirtualAlloc LocalFree LocalAlloc InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte SetCurrentDirectoryA MultiByteToWideChar lstrlenA lstrcpynA lstrcpyA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetLastError GetCurrentDirectoryA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess ExitThread CreateThread WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException MoveFileA GetStdHandle GetFileSize GetSystemTime GetFileType DeleteFileA CreateFileA CloseHandle |
| ML_WIN32 |
EspecificarLlave
VerificarLlave |
| winmm.dll |
mciSendCommandA
mciGetErrorStringA |
| avifil32.dll |
AVIFileRelease
AVIStreamRelease AVIStreamWrite AVIStreamSetFormat AVIFileCreateStreamA AVIFileOpenA AVIFileExit AVIFileInit |
| Error (debug) |
| Cannot perform this operation on an open dataset |
| Field '%s' cannot be a calculated field |
| Field '%s' is not of the expected type |
| Field '%s' not found |
| Field name missing |
| Duplicate field name '%s' |
| Invalid field name '%s' |
| Invalid field type '%s' for '%s' |
| Field index out of range |
| Dataset not in edit or insert mode |
| Cannot perform this operation on a closed dataset |
| Cannot modify a read-only dataset |
| Field '%s' must have a value |
| Cannot perform this operation on an empty dataset |
| Wrong database name (must be alphanumeric): |
| '%s' [SetDbfName] |
| Not enough memory to open a virtual file |
| '%s' |
| is not a valid file name, or cannot write to disk |
| '%s' |
| is not a valid key expression |
| Cannot add more than %d indexes to the list. |
| Database is not open |
| Field '%s' not in '%s' |
| '%s()' expects field '%s' to be of type: |
| '%s'.'%s' actually is: '%s' |
| User buffer size doesn't match internal DBF buffer size |
| Push/Pop stack is empty |
| Not enough memory to Push a record |
| Too many columns in grid |
| Data for '%s' is invalid, there may be problems at runtime. |
| Please check if the data matches the mask you have specified. |
| Warning (debug) |
| Could not create '%s' |
| This field cannot be left empty! |
| The first 10 characters of Name property |
| must be unique, since this part |
| of the name is used as an ALIAS. |
| DbfFieldList is Nil trying to create a database |
| FieldList.Count is <= 0 trying to create a database |
| Cannot open: |
| '%s' |
| Error no: '%s' |
| '%s' |
| DBF file name or alias may contain alphanumeric characters and underscores only |
| Could not open the database and get field info: |
| '%s' |
| Index file name must be unique |
| '%s' |
| is not a valid filename, or you cannot write into the specified directory |
| '%s' is not a valid index file |
| Could not open index and get key expression for: |
| '%s' |
| Error '%s' '%s' |
| Key expression for: |
| '%s' |
| is not valid |
| Specify DataSource before using DataField |
| DataSource not specified |
| Wrong field type, should be 'C','L','N','F' or 'D' |
| Unknown field, please click on down |
| arrow button to pick up from the list |
| Attempt to open the database: |
| '%s'('%s') failed. |
| Changes in index key expressions will not be |
| validated, and error checking will happen only at run time |
| Invalid Date '%s' specified (Field: %s) |
| Lock failed [%s] |
| String (debug) |
| true |
| false |
| yes |
| no |
| The demo version of Topaz works only when Delphi is running |
| Restore Record ? |
| Delete Record ? |
| Go to first record |
| Go to prior record |
| Go to next record |
| Go to last record |
| Insert a record |
| Delete/Restore record |
| Edit record |
| Save changes |
| Cancel edit |
| Refresh record |
| Invalid input value. |
| Changes in this data field will be discarded |
| Invalid stream operation |
| GIF Image |
| Loading... |
| Saving... |
| Converting... |
| Rendering... |
| Copying... |
| Failed to allocate memory for GIF DIB |
| Failed to create DIB from Bitmap |
| Decoder bit buffer under-run |
| Circular decoder table entry |
| Invalid Image trailer |
| Internal error: Extension Instance does not match Extension Label |
| Unsupported Application Extension block size |
| Unknown GIF block type |
| Object type not supported for operation |
| Invalid GIF data |
| Image height too small for contained frames |
| Image width too small for contained frames |
| Image exceeds Logical Screen size |
| No global or local color table defined |
| Unsupported PixelFormat |
| Image has no DIB |
| Record not found |
| Operation not allowed in a DBCtrlGrid |
| Property already defined by lookup field |
| Grid requested to display more than 256 columns |
| OLE error %.8x |
| Method '%s' not supported by automation object |
| Variant does not reference an automation object |
| Premature end of data |
| Color table overflow |
| Invalid color index |
| Unsupported GIF version |
| Invalid GIF signature |
| Invalid number of colors specified in Screen Descriptor |
| Invalid number of colors specified in Image Descriptor |
| Unknown extension type |
| Invalid extension introducer |
| False |
| True |
| SQL not supported: %s |
| Execute not supported: %s |
| First record |
| Prior record |
| Next record |
| Last record |
| Insert record |
| Delete record |
| Edit record |
| Post edit |
| Cancel edit |
| Refresh data |
| Delete record? |
| Delete all selected records? |
| Size mismatch for field '%s', expecting: %d actual: %d |
| Invalid variant type or size for field '%s' |
| Value of field '%s' is out of range |
| (Overflow) |
| Field '%s' must have a value |
| Field '%s' has no dataset |
| Field '%s' cannot be a calculated or lookup field |
| Circular datalinks are not allowed |
| Lookup information for field '%s' is incomplete |
| DataSource cannot be changed |
| Cannot perform this operation on an open dataset |
| Dataset not in edit or insert mode |
| Cannot perform this operation on a closed dataset |
| Cannot perform this operation on an empty dataset |
| Cannot modify a read-only dataset |
| Nested dataset must inherit from %s |
| Failed to Load Stream |
| Failed to Save Stream |
| %d is an invalid PageIndex value. PageIndex must be between 0 and %d |
| Invalid field size |
| Invalid FieldKind |
| Field '%s' is of an unknown type |
| Field name missing |
| Duplicate field name '%s' |
| Field '%s' not found |
| Cannot access field '%s' as type %s |
| Invalid value for field '%s' |
| %g is not a valid value for field '%s'. The allowed range is %g to %g |
| '%s' is not a valid integer value for field '%s' |
| '%s' is not a valid boolean value for field '%s' |
| '%s' is not a valid floating point value for field '%s' |
| Type mismatch for field '%s', expecting: %s actual: %s |
| Cannot open AVI |
| No MCI device open |
| Unknown error code |
| Docked control must have a name |
| Error removing control from dock tree |
| - Dock zone not found |
| - Dock zone has no control |
| List does not allow duplicates ($0%x) |
| Failed to clear tab control |
| Failed to delete tab at index %d |
| Failed to retrieve tab at index %d |
| Failed to get object at index %d |
| Failed to set tab "%s" at index %d |
| Failed to set object at index %d |
| MultiLine must be True when TabPosition is tpLeft or tpRight |
| RichEdit line insertion error |
| Shift+ |
| Ctrl+ |
| Alt+ |
| Invalid file name - %s |
| Unable to insert a line |
| Unable to create directory |
| Invalid clipboard format |
| Clipboard does not support Icons |
| Cannot open clipboard |
| Default |
| Text exceeds memo capacity |
| Operation not supported on selected printer |
| There is no default printer currently selected |
| Unable to write to %s |
| Bits index out of range |
| Menu '%s' is already being used by another form |
| Yes to &All |
| BkSp |
| Tab |
| Esc |
| Enter |
| Space |
| PgUp |
| PgDn |
| End |
| Home |
| Left |
| Up |
| Right |
| Down |
| Ins |
| Del |
| Invalid input value |
| Invalid input value. Use escape key to abandon changes |
| Warning |
| Error |
| Information |
| Confirm |
| &Yes |
| &No |
| OK |
| Cancel |
| &Help |
| &Abort |
| &Retry |
| &Ignore |
| &All |
| N&o to All |
| &Ignore |
| &Retry |
| Abort |
| &All |
| Cannot drag a form |
| Metafiles |
| Enhanced Metafiles |
| Icons |
| Bitmaps |
| Grid too large for operation |
| Too many rows or columns deleted |
| Grid index out of range |
| Fixed column count must be less than column count |
| Fixed row count must be less than row count |
| Cannot insert or delete rows from grid |
| Invalid property value |
| Sub-menu is not in menu |
| Not enough timers available |
| Printer is not currently printing |
| Printing in progress |
| Printer selected is not valid |
| %s on %s |
| GroupIndex cannot be less than a previous menu item's GroupIndex |
| Cannot create form. No MDI forms are currently active |
| Can only modify an image if it contains a bitmap |
| A control cannot have itself as its parent |
| OK |
| Cancel |
| &Yes |
| &No |
| &Help |
| &Close |
| Invalid image size |
| Invalid ImageList |
| Unable to Replace Image |
| Invalid ImageList Index |
| Failed to read ImageList data from stream |
| Failed to write ImageList data to stream |
| Error creating window device context |
| Error creating window class |
| Cannot focus a disabled or invisible window |
| Control '%s' has no parent window |
| Cannot hide an MDI Child Form |
| Cannot change Visible in OnShow or OnHide |
| Cannot make a visible window modal |
| %s property out of range |
| Menu index out of range |
| Menu inserted twice |
| Invalid property value |
| Invalid property path |
| Property does not exist |
| Property is read-only |
| Error reading %s%s%s: %s |
| Ancestor for '%s' not found |
| Bitmap image is not valid |
| Icon image is not valid |
| Metafile is not valid |
| Invalid pixel format |
| Scan line index out of range |
| Cannot change the size of an icon |
| Unknown picture file extension (.%s) |
| Unsupported clipboard format |
| Out of system resources |
| Canvas does not allow drawing |
| Out of memory while expanding memory stream |
| Can't write to a read-only resource stream |
| Class %s not found |
| Invalid stream format |
| Resource %s not found |
| List index out of bounds (%d) |
| List capacity out of bounds (%d) |
| List count out of bounds (%d) |
| Operation not allowed on sorted string list |
| String list does not allow duplicates |
| Tab index out of bounds |
| Tab position incompatible with current tab style |
| Tab style incompatible with current tab position |
| A component named %s already exists |
| ''%s'' is not a valid component name |
| A class named %s already exists |
| Wed |
| Thu |
| Fri |
| Sat |
| Sunday |
| Monday |
| Tuesday |
| Wednesday |
| Thursday |
| Friday |
| Saturday |
| Cannot assign a %s to a %s |
| Cannot create file %s |
| Cannot open file %s |
| Stream read error |
| Stream write error |
| Dec |
| January |
| February |
| March |
| April |
| May |
| June |
| July |
| August |
| September |
| October |
| November |
| December |
| Sun |
| Mon |
| Tue |
| Abstract Error |
| Access violation at address %p in module '%s'. %s of address %p |
| Win32 Error. Code: %d. |
| %s |
| A Win32 API function failed |
| Application is not licensed to use this feature |
| Jan |
| Feb |
| Mar |
| Apr |
| May |
| Jun |
| Jul |
| Aug |
| Sep |
| Oct |
| Nov |
| Format '%s' invalid or incompatible with argument |
| No argument for format '%s' |
| Invalid variant type conversion |
| Invalid variant operation |
| Variant method calls not supported |
| Read |
| Write |
| Format string too long |
| Error creating variant array |
| Variant is not an array |
| Variant array index out of bounds |
| External exception %x |
| Assertion failed |
| Interface not supported |
| Exception in safecall method |
| %s (%s, line %d) |
| Division by zero |
| Range check error |
| Integer overflow |
| Invalid floating point operation |
| Floating point division by zero |
| Floating point overflow |
| Floating point underflow |
| Invalid pointer operation |
| Invalid class typecast |
| Access violation at address %p. %s of address %p |
| Stack overflow |
| Control-C hit |
| Privileged instruction |
| Operation aborted |
| Exception %s in module %s at %p. |
| %s%s |
| Application Error |
| '%s' is not a valid integer value |
| '%s' is not a valid floating point value |
| '%s' is not a valid date |
| '%s' is not a valid time |
| '%s' is not a valid date and time |
| Invalid argument to time encode |
| Invalid argument to date encode |
| Out of memory |
| I/O error %d |
| File not found |
| Invalid filename |
| Too many open files |
| File access denied |
| Read beyond end of file |
| Disk full |
| Invalid numeric input |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 2.9.0.12 |
| ProductVersion | 2.9.0.12 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | Spanish - Mexico |
| CompanyName | SPI |
| FileDescription | Pplan Windows |
| FileVersion (#2) | 2.9.0.12 |
| InternalName | PPW |
| LegalCopyright | SPI |
| LegalTrademarks | SPI |
| OriginalFilename | PPW |
| ProductName | PPLan Windows |
| ProductVersion (#2) | 1.0.0.0 |
| Comments |
| Resource LangID | Spanish - Mexico |
|---|
| StartAddressOfRawData | 0x57c000 |
|---|---|
| EndAddressOfRawData | 0x57c010 |
| AddressOfIndex | 0x5764d4 |
| AddressOfCallbacks | 0x57d010 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks | (EMPTY) |