| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2009-Aug-18 12:00:27 |
| Detected languages |
Chinese - PRC
Chinese - Taiwan English - United States Korean - Korea |
| FileDescription | Download MFC Application |
| FileVersion | 1, 0, 0, 1 |
| InternalName | Download |
| LegalCopyright | Copyright (C) 1999 |
| OriginalFilename | Download.EXE |
| ProductName | Download Application |
| ProductVersion | 1, 0, 0, 1 |
| Info | Matching compiler(s): |
Microsoft Visual C++
Microsoft Visual C++ v6.0 Microsoft Visual C++ v5.0/v6.0 (MFC) |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Contains another PE executable:
|
| Info | The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The file contains overlay data. |
374819 bytes of data starting at offset 0x1a000.
The overlay data has an entropy of 7.77006 and is possibly compressed or encrypted. Overlay data amounts for 77.8739% of the executable. |
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0xe8 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 4 |
| TimeDateStamp | 2009-Aug-18 12:00:27 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
|
| Magic | PE32 |
|---|---|
| LinkerVersion | 6.0 |
| SizeOfCode | 0x6000 |
| SizeOfInitializedData | 0x17000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000616F (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x7000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x1000 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x1e000 |
| SizeOfHeaders | 0x1000 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| MFC42.DLL |
#4673
#500 #772 #4274 #6375 #4486 #2554 #2512 #5731 #3922 #1089 #5199 #2396 #3346 #5300 #5302 #4079 #4698 #5307 #5289 #5714 #4622 #3738 #561 #815 #617 #5214 #296 #2725 #1168 #795 #616 #765 #537 #541 #801 #535 #924 #941 #859 #3092 #665 #6153 #3790 #1979 #5773 #6385 #5186 #2915 #354 #939 #858 #4129 #2411 #2023 #4218 #2578 #4398 #3582 #3721 #3698 #2298 #6663 #1200 #6199 #6215 #4160 #1199 #353 #536 #5981 #6648 #3317 #5860 #5442 #1105 #2379 #6334 #823 #3874 #2642 #2302 #567 #4424 #3402 #5290 #1776 #6055 #4234 #825 #324 #540 #860 #641 #800 #3597 #4425 #4627 #4080 #3079 #3825 #3831 #3830 #2976 #3081 #2985 #3262 #3136 #4465 #3259 #3147 #2982 #5277 #2124 #2446 #5261 #1727 #5065 #3749 #6376 #2055 #2648 #4441 #4837 #3798 #5280 #4353 #6374 #5163 #2385 #5241 #4407 #1775 #4078 #6052 #2514 #4710 #4998 #4853 #4376 #2614 #5265 #1576 |
|---|---|
| MSVCRT.dll |
__set_app_type
__p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter _exit _except_handler3 _onexit __dllonexit free malloc _stricmp _setmbcp _controlfp __CxxFrameHandler _itoa _mkdir _splitpath |
| KERNEL32.dll |
LocalAlloc
SetEvent GetDiskFreeSpaceA FindFirstFileA FindClose WritePrivateProfileStringA GetTempPathA CopyFileA GetLastError SetCurrentDirectoryA GetModuleHandleA FindResourceA LoadResource GlobalLock GlobalUnlock DeleteFileA GetDriveTypeA WideCharToMultiByte lstrcatA lstrcpyA LoadLibraryA GetProcAddress GetModuleFileNameA GetShortPathNameA lstrlenA MultiByteToWideChar lstrlenW InitializeCriticalSection GetCurrentThreadId FormatMessageA lstrcmpiA CloseHandle DeleteCriticalSection HeapDestroy FreeLibrary CreateEventA WaitForSingleObject Sleep SetCommTimeouts EscapeCommFunction ResetEvent WaitForMultipleObjects PurgeComm LeaveCriticalSection GetTickCount GetStartupInfoA OutputDebugStringA LocalFree GetCommandLineA GetSystemInfo ExitProcess |
| USER32.dll |
SendMessageA
IsWindowVisible wsprintfA CharNextA MessageBoxA EnableWindow |
| ADVAPI32.dll |
RegQueryValueExA
RegCloseKey RegOpenKeyExA |
| ole32.dll |
CoInitialize
CoRegisterClassObject CoRevokeClassObject CoUninitialize CoCreateInstance |
| OLEAUT32.dll |
SysAllocString
LoadTypeLib RegisterTypeLib SysFreeString |
| 程式名稱: |
| 程式類別: |
| 空間不足,下載失敗. |
| Application Name: |
| Application Category: |
| No enough memory, download failure. |
| 프로그램명: |
| 프로그램 분류: |
| No enough memory, download failure. |
| 程序名称: |
| 程序类别: |
| 空间不足,下载失败! |
| 連接主機... |
| 連接失敗 |
| 連接成功 |
| 通訊完成 |
| 通訊出錯 |
| 通訊被中止 |
| 傳輸錯誤 |
| 不能打開檔案 |
| Connect with PDA... |
| Connect with PDA lost |
| Connect with PDA success |
| Communication Ok |
| Communication error |
| Transfer Canceled |
| Transfer error! |
| Can't open file! |
| 본체 연결... |
| 연결 실패 |
| 연결 성공 |
| 통신에 오류 발생 |
| 주식 명칭 |
| 통신이 중단됨 |
| 전송 오류 |
| 텍스트를 열 수 없습니다. |
| 连接主机... |
| 连接失败 |
| 连接成功 |
| 通讯完成 |
| 通讯出错 |
| 通讯被中止 |
| 传输错误 |
| 不能打开档案 |
| 不能傳輸如此大的檔案! |
| 傳送程式... |
| The file is too big to open |
| Send... |
| 파일이 커서 열 수 없습니다. |
| 프로그램 전송... |
| 不能传输如此大的档案! |
| 传送程序... |
| 此程式已存在,要覆蓋嗎? |
| 此程式已存在,要新建一個嗎? |
| This application aleady exist,overwrite it? |
| This application aleady exist,create a new application? |
| 본 프로그램은 이미 저장되어 있습니다. 덮어씌기를 하시겠습니까? |
| 본 프로그램은 이미 저장되어 있습니다. 다른 이름으로 저장하시겠습니까? |
| 此程序已存在,要覆盖吗? |
| 此程序已存在,要新建一个吗? |
| 正在下載程式... |
| 程式下載完成... |
| 程式類型有錯... |
| 無指定的功能 |
| 初始化連結埠失敗 |
| 檔案中指定的功能不正確 |
| 申請記憶體失敗 |
| 傳輸被中止 |
| CPDA主機電力不足 |
| 發送到CPDA主機的數據包長度錯 |
| 發送到CPDA主機的數據包格式錯 |
| 使用錯誤的ID號向CPDA主機發送數據 |
| 此功能在CPDA主機中沒有實現 |
| Program downloading... |
| Program downloading completed... |
| Program format error... |
| No current function! |
| Initialize serial port failed |
| The function id in the file error! |
| Allocate memory error! |
| Transfer canceled! |
| PDA no power! |
| The data packet length error! |
| The data packet format error! |
| Error ID! |
| No this function in PDA! |
| 프로그램 다운로드 중... |
| 프로그램 다운로드 완료... |
| 프로그램 유형 오류... |
| 지정하지 않은 기능 |
| 연결 포트 초기화 실패 |
| 파일 중 지정한 기능이 정확하지 않습니다. |
| 본체의 메모리 부족 |
| 전송이 중단되었습니다. |
| 본체 전력 부족 |
| 본체로 보내는 데이타 길이에 오류 발생 |
| 본체로 보내는 데이타 양식에 오류 발생 |
| 잘못된 ID로 본체에 데이타 전송 |
| 본체에서 실행할 수 없는 기능입니다. |
| 正在下载程序... |
| 程序下载完成... |
| 程序类型有错... |
| 无指定的功能 |
| 初始化COM口失败 |
| 档案中指定的功能不正确 |
| 申请记忆体失败 |
| 传输被中止 |
| CPDA主机电力不足 |
| 发送到CPDA主机的数据包长度错 |
| 发送到CPDA主机的数据包格式错 |
| 使用错误的ID号向CPDA主机发送数据 |
| 此功能在CPDA主机中没有实现 |
| CPDA主機的記憶體滿 |
| CPDA主機中無此記錄 |
| CPDA主機中處理錯 |
| 從頭開始 |
| 網路學習卡不存在! |
| 網路學習卡未格式化! |
| 不能將eBook下載到機型CD-95上! |
| 開機畫面 |
| 電子書城 |
| 文字瀏覽 |
| 遊戲天地 |
| 輸入法 |
| 專業辭典 |
| 學習助手 |
| 實用工具 |
| PDA no memory! |
| No this record in PDA! |
| PDA manage error! |
| Repeat |
| No extend card |
| Extend Card no format |
| start picture |
| eBook City |
| Text Viewer |
| Game World |
| Download IME |
| Professional Dictionary |
| Study Assistant |
| Tool Box |
| 본체의 메모리 부족 |
| 본체에 없는 자료입니다. |
| 본체에서 오류를 처리합니다. |
| 처음부터 시작 |
| 인터넷 카드가 꽂혀있지 않습니다! |
| 인터넷 카드가 포멧되지 않았습니다! |
| eBook을 AP-101로 다운로드할 수 없습니다. |
| start picture |
| eBook City |
| Text Viewer |
| Game World |
| Download IME |
| Professional Dictionary |
| Learning |
| Tool Box |
| CPDA主机的记忆体满 |
| CPDA主机中无此记录 |
| CPDA主机中处理错 |
| 从头开始 |
| 网路学习卡不存在! |
| 网路学习卡未格式化! |
| 不能将eBook下载到机型CD-95上! |
| start picture |
| 电子书城 |
| 文字浏览 |
| 游戏世界 |
| 输入法 |
| 用户字典 |
| Learning |
| 实用工具 |
| 增補辭典 |
| 多國會話 |
| 沒有找到PDA,請檢測連接或安裝驅動! |
| 互動英語 |
| 英語檢定 |
| 動畫語法 |
| 沒有找到卡片! |
| 影音天地 |
| 我的相簿 |
| MP3 |
| 開機音樂 |
| 媒體播放 |
| 動畫英語 |
| 閱讀教室 |
| 發音教室 |
| Extra Dictionary |
| Travel Dialog |
| Don't find PDA, please check line and PDA driver |
| Interact English |
| English Test |
| Animation Grammar |
| Not find Card! |
| Video Learning |
| My Album |
| HI-FI Paradise |
| Startup Music |
| Animated English |
| Reading Studio |
| Vocal Studio |
| Extra Dictionary |
| Travel Dialog |
| Don't find PDA, please check line and PDA driver |
| Interact English |
| English Test |
| Animation Grammar |
| Not find Card! |
| Media |
| My Album |
| HI-FI Paradise |
| Startup Music |
| Animated English |
| Reading Studio |
| Vocal Studio |
| 专业字典 |
| 多国会话 |
| 没有找到PDA, 请检测连接或者安装驱动! |
| 互动英语 |
| 英语考场 |
| 动画语法 |
| 没有找到卡片! |
| 影音天地 |
| 我的相簿 |
| MP3 |
| Startup Music |
| 媒体播放 |
| Animated English |
| Reading Studio |
| Vocal Studio |
| 聽力教室 |
| 親子美語 |
| 動畫片語 |
| 同步教材 |
| 辭典 |
| 開機動畫 |
| 學習類 |
| 英檢聽力 |
| 英檢閱讀 |
| 計算類 |
| 桌面 |
| 牛津附錄 |
| 國小字彙 |
| 國中字彙 |
| 高中字彙 |
| 閱讀教室 |
| Audio Studio |
| Baby American English |
| Animated Phrase |
| Synchronous Textbook |
| Dictionary |
| Startup Flash |
| Learning |
| GEPT Listening |
| GEPT Reading |
| Calculator |
| Desktop |
| Oxford Appendices |
| Elementary School Words |
| Junior High School Words |
| Senior High School Words |
| Reading Studio |
| Audio Studio |
| Baby American English |
| Animated Phrase |
| Synchronous Textbook |
| Dictionary |
| Learning |
| GEPT Listening |
| GEPT Reading |
| Calculator |
| Desktop |
| Oxford Appendices |
| Elementary School Words |
| Junior High School Words |
| Senior High School Words |
| Reading Studio |
| Audio Studio |
| Baby American English |
| Animated Phrase |
| 同步教材 |
| 词典 |
| 开机动画 |
| 学习类 |
| GEPT Listening |
| GEPT Reading |
| Calculator |
| Desktop |
| Oxford Appendices |
| Elementary School Words |
| Junior High School Words |
| Senior High School Words |
| Reading Studio |
| 國中英語 |
| 漢字筆順 |
| High School English |
| Stroke |
| Words Studio |
| Extension Sound File |
| Recite Word |
| Entrance Exams |
| Cartoon Words |
| Synchronous Exercises |
| High School English |
| Stroke |
| High School English |
| Stroke |
| Words Studio |
| Extension Sound File |
| Recite Word |
| Entrance Exams |
| Cartoon Words |
| Synchronous Exercises |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.1 |
| ProductVersion | 1.0.0.1 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| FileDescription | Download MFC Application |
| FileVersion (#2) | 1, 0, 0, 1 |
| InternalName | Download |
| LegalCopyright | Copyright (C) 1999 |
| OriginalFilename | Download.EXE |
| ProductName | Download Application |
| ProductVersion (#2) | 1, 0, 0, 1 |
| Resource LangID | Chinese - Taiwan |
|---|
| XOR Key | 0xec022ae4 |
|---|---|
| Unmarked objects | 0 |
| 19 (8022) | 6 |
| Unmarked objects (#2) | 3 |
| 19 (8034) | 8 |
| 14 (7299) | 2 |
| C objects (VS98 build 8168) | 11 |
| Linker (VS98 build 8168) | 5 |
| Total imports | 258 |
| C++ objects (VS98 build 8168) | 22 |
| Resource objects (VS98 cvtres build 1720) | 1 |
No comments yet.