f912605770af6d6909760208bc2f1ff3
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2019-Nov-11 03:41:10 |
| Detected languages |
Chinese - PRC
English - United States |
Plugin Output
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Contains references to system / monitoring tools:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to MD5 |
| Suspicious | The PE is possibly packed. | Unusual section name found: .itext |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Info | The PE's resources present abnormal characteristics. |
Resource TFRMABOUT is possibly compressed or encrypted.
Resource TFRMADDSHAREFOLDER is possibly compressed or encrypted. Resource TFRMCHECKLOCKPASSWORD is possibly compressed or encrypted. Resource TFRMCONFIG is possibly compressed or encrypted. Resource TFRMDMSETTINGS is possibly compressed or encrypted. Resource TFRMEXCLUDESUB is possibly compressed or encrypted. Resource TFRMGETNEWVERSION is possibly compressed or encrypted. Resource TFRMMAIN is possibly compressed or encrypted. Resource TFRMREG is possibly compressed or encrypted. Resource TFRMREGTIP is possibly compressed or encrypted. Resource TFRMRENAME is possibly compressed or encrypted. Resource TFRMRETRIEVEPASSWORD is possibly compressed or encrypted. Resource TFRMSELECTDRIVE is possibly compressed or encrypted. Resource TFRMSETLOCKPASSWORD is possibly compressed or encrypted. Resource TFRMSETPASSWORD is possibly compressed or encrypted. |
| Info | The PE is digitally signed. |
Signer: SiChuan HengYiDa XinXiJiShu YouXianGongSi
Issuer: GlobalSign CodeSigning CA - SHA256 - G3 |
| Suspicious | No VirusTotal score. | This file has never been scanned on VirusTotal. |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x50 |
| e_cp | 0x2 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0xf |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0x1a |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x100 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 9 |
| TimeDateStamp | 2019-Nov-11 03:41:10 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x17c000 |
| SizeOfInitializedData | 0x24b000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0017D178 (Section: .itext) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x17e000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3d3000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x3d6a9f |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.itext
.data
.bss
.idata
.tls
.rdata
.reloc
.rsrc
Imports
| oleaut32.dll |
SysFreeString
SysReAllocStringLen SysAllocStringLen |
|---|---|
| advapi32.dll |
RegQueryValueExW
RegOpenKeyExW RegCloseKey |
| user32.dll |
GetKeyboardType
LoadStringW MessageBoxA CharNextW |
| kernel32.dll |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileW CloseHandle |
| kernel32.dll (#2) |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileW CloseHandle |
| user32.dll (#2) |
GetKeyboardType
LoadStringW MessageBoxA CharNextW |
| msimg32.dll |
AlphaBlend
|
| gdi32.dll |
UnrealizeObject
StretchDIBits StretchBlt SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetPaletteEntries SetMapMode SetEnhMetaFileBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SelectPalette SelectObject SelectClipRgn SaveDC RoundRect RestoreDC ResizePalette Rectangle RectVisible RealizePalette Polyline PlayEnhMetaFile PatBlt MoveToEx MaskBlt LineTo LPtoDP IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetNearestPaletteIndex GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits GdiFlush FrameRgn ExtTextOutW ExcludeClipRect Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRoundRectRgn CreateRectRgn CreatePenIndirect CreatePalette CreateHalftonePalette CreateFontIndirectW CreateEnhMetaFileW CreateDIBitmap CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW CloseEnhMetaFile BitBlt |
| version.dll |
VerQueryValueW
GetFileVersionInfoSizeW GetFileVersionInfoW |
| mpr.dll |
WNetOpenEnumW
WNetGetConnectionW WNetEnumResourceW WNetCloseEnum |
| kernel32.dll (#3) |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileW CloseHandle |
| advapi32.dll (#2) |
RegQueryValueExW
RegOpenKeyExW RegCloseKey |
| oleaut32.dll (#2) |
SysFreeString
SysReAllocStringLen SysAllocStringLen |
| ole32.dll |
CreateStreamOnHGlobal
IsAccelerator OleDraw OleSetMenuDescriptor OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitialize IsEqualGUID |
| kernel32.dll (#4) |
GetACP
Sleep VirtualFree VirtualAlloc GetSystemInfo GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte SetCurrentDirectoryW MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLastError GetCurrentDirectoryW GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter SetFilePointer SetEndOfFile RtlUnwind ReadFile RaiseException GetStdHandle GetFileSize GetFileType CreateFileW CloseHandle |
| ole32.dll (#2) |
CreateStreamOnHGlobal
IsAccelerator OleDraw OleSetMenuDescriptor OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc ProgIDFromCLSID StringFromCLSID CoCreateInstance CoGetClassObject CoUninitialize CoInitialize IsEqualGUID |
| oleaut32.dll (#3) |
SysFreeString
SysReAllocStringLen SysAllocStringLen |
| comctl32.dll |
InitializeFlatSB
FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Draw ImageList_GetBkColor ImageList_SetBkColor ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create InitCommonControls |
| shell32.dll |
Shell_NotifyIconW
ShellExecuteExW ShellExecuteW SHFileOperationW DragQueryFileW DragFinish DragAcceptFiles |
| shell32.dll (#2) |
Shell_NotifyIconW
ShellExecuteExW ShellExecuteW SHFileOperationW DragQueryFileW DragFinish DragAcceptFiles |
| comdlg32.dll |
GetSaveFileNameW
GetOpenFileNameW |
| USBHidden.DLL |
USBHidden_GetUSBList
USBHidden_GetLockFileIsTrialVersion USBHidden_GetLockFileIsAllowUnLock USBHidden_GetLockFileIsAllowChangePassword USBHidden_GetLockFileName USBHidden_GetLockFilePassword USBHidden_UnLockFile USBHidden_LockFile USBHidden_GetPathTooLong USBHidden_GetGUIDFromExeFile USBHidden_GetLockedGUIDFromConfigEx USBHidden_GetLastUsedFile USBHidden_ChangeDirIcon USBHidden_GetLockDirIsTrialVersion USBHidden_GetLockDirIsAllowUnLock USBHidden_GetLockDirIsAllowChangePassword USBHidden_GetLockDirName USBHidden_GetLockDirPassword USBHidden_IsLockedFolder USBHidden_UnLockFolder USBHidden_LockFolder USBHidden_GetLockFilesList USBHidden_GetHiddedPassword USBHidden_GetHideFileList USBHidden_IsHidded USBHidden_Show USBHidden_Hide |
| SafeWipe.dll |
SetOptionFreeNum
SetOptionWipeNum GetOptionFreeNum GetOptionWipeNum SafeFree SafeWipe |
| Verify.dll |
CheckSN_WriteRegInfoToAppdata
CheckSN_GetIsHasReg CheckSNVersion CheckSN_GetEmail2 CheckSN_WriteEmail CheckSN_GetSN2 CheckSNOnLine_WhenRegist CheckSNOnLine2 CheckSN_LogOff CheckSNWhenRegist2 |
| MagicSkin.dll |
MS_SetOneYearVersion
MS_Regx MS_CheckSN MS_Check MS_Init |
| CommonDll.dll |
GetUserEmail
SetUserEmail GetUserPw SetUserPw GetAllUsersAppData IsValidEmail |
| FileLock.dll |
FileLock_IsExcludeFile
FileLock_IsExcludeFolder FileLock_IsExcludeDisk FileLock_GetItByIndex FileLock_GetItCount FileLock_ReadOnlyIt FileLock_LockIt FileLock_HideIt FileLock_GetHideDrive |
| shlwapi.dll |
PathIsDirectoryW
|
| advapi32.dll (#3) |
RegQueryValueExW
RegOpenKeyExW RegCloseKey |
Delayed Imports
1
2
3
4
5
6
7
BBABORT
BBALL
BBCANCEL
BBCLOSE
BBHELP
BBIGNORE
BBNO
BBOK
BBRETRY
BBYES
CDROM
CLOSEDFOLDER
CURRENTFOLDER
EXECUTABLE
FLOPPY
HARD
KNOWNFILE
NETWORK
OPENFOLDER
PREVIEWGLYPH
RAM
UNKNOWNFILE
1 (#2)
2 (#2)
3 (#2)
4 (#2)
5 (#2)
6 (#2)
7 (#2)
8
9
10
11
DLGTEMPLATE
TEXTFILEDLG
4070
4071
4072
4073
4074
4075
4076
4077
4078
4079
4080
4081
4082
4083
4084
4085
4086
4087
4088
4089
4090
4091
4092
4093
4094
4095
4096
CHARTABLE
DVCLAL
PACKAGEINFO
TFRMABOUT
TFRMADDSHAREFOLDER
TFRMCHECKLOCKPASSWORD
TFRMCHECKPASS
TFRMCONFIG
TFRMDMSETTINGS
TFRMEXCLUDESUB
TFRMGETNEWVERSION
TFRMMAIN
TFRMREG
TFRMREGTIP
TFRMRENAME
TFRMRETRIEVEPASSWORD
TFRMSELECTDRIVE
TFRMSELECTSHAREFOLDER
TFRMSETLOCKPASSWORD
TFRMSETPASSWORD
TFRMSHOWPROCESS
32761
32762
32763
32764
32765
32766
32767
MAINICON
1 (#3)
String Table contents
| Protocol field is empty |
| Host field is empty |
| This authentication method is already registered with class name %s. |
| Unsupported hash algorithm. This implementation supports only MD5 encoding. |
| Error accepting connection with SSL. |
| Error connecting with SSL. |
| SetCipher failed. |
| Error creating SSL context. |
| Could not load root certificate. |
| Could not load certificate. |
| Could not load key, check password. |
| Error geting SSL method. |
| Error setting File Descriptor for SSL |
| Error binding data to SSL socket. |
| EOF was observed that violates the protocol |
| Mode has not been set. |
| Could not load SSL library. |
| SSL status: "%s" |
| Max line length exceeded. |
| Connect timed out. |
| Already connected. |
| Maximum number of line allowed exceeded |
| The IOHandler already has a different Intercept assigned |
| Transparent proxy cannot bind. |
| UDP Not supported by this proxy. |
| Buffer terminator must be specified. |
| Buffer start position is invalid. |
| Reply Code is not valid: %s |
| Reply Code already exists: %s |
| IOHandler value is not valid |
| Chunk Started |
| Not Acceptable |
| Unknown Protocol |
| Request method requires HTTP version 1.1 |
| Connection not allowed by ruleset. |
| Network unreachable. |
| Host unreachable. |
| Connection refused. |
| TTL expired. |
| Command not supported. |
| Address type not supported. |
| %d: Circular links are not allowed |
| Not enough data in buffer. |
| Too much data in buffer. |
| File "%s" not found |
| Not Connected |
| Object type not supported. |
| No data to read. |
| Read timed out. |
| Max line read attempts exceeded. |
| IPv6 unavailable |
| %s is not a valid IPv6 address |
| The requested IPVersion / Address family is not supported. |
| Not all bytes sent. |
| Package Size Too Big. |
| Set Size Exceeded. |
| No encoding specified. |
| UDP is not support in this SOCKS version. |
| Request rejected or failed. |
| Request rejected because SOCKS server cannot connect. |
| Request rejected because the client program and identd report different user-ids. |
| Unknown socks error. |
| Socks server did not respond. |
| Invalid socks authentication method. |
| Authentication error to socks server. |
| General SOCKS server failure. |
| Connection refused. |
| Too many levels of symbolic links. |
| File name too long. |
| Host is down. |
| No route to host. |
| Directory not empty |
| Host not found. |
| Stack Class is undefined. |
| Stack already created. |
| Only one TIdAntiFreeze can exist per application. |
| Cannot change IPVersion when connected |
| Can not bind in port range (%d - %d) |
| Connection Closed Gracefully. |
| Could not bind socket. Address and port are already in use. |
| Invalid Port Range (%d - %d) |
| %s is not a valid service. |
| Operation not supported on socket. |
| Protocol family not supported. |
| Address family not supported by protocol family. |
| Address already in use. |
| Cannot assign requested address. |
| Network is down. |
| Network is unreachable. |
| Net dropped connection or reset. |
| Software caused connection abort. |
| Connection reset by peer. |
| No buffer space available. |
| Socket is already connected. |
| Socket is not connected. |
| Cannot send or receive after socket is closed. |
| Too many references, cannot splice. |
| Connection timed out. |
| Interrupted system call. |
| Bad file number. |
| Access denied. |
| Buffer fault. |
| Invalid argument. |
| Too many open files. |
| Operation would block. |
| Operation now in progress. |
| Operation already in progress. |
| Socket operation on non-socket. |
| Destination address required. |
| Message too long. |
| Protocol wrong type for socket. |
| Bad protocol option. |
| Protocol not supported. |
| Socket type not supported. |
| The chunks must be compatible to be assigned. |
| This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file. |
| This "Portable Network Graphics" image contains no data. |
| Some operation could not be performed because the system is out of resources. Close some windows and try again. |
| This operation is not valid because the current image contains no valid header. |
| The new size provided for image resizing is invalid. |
| Failed attempting to retrieve time zone information. |
| Error on call to Winsock2 library function %s |
| Error on loading Winsock2 library (%s) |
| Resolving hostname %s. |
| Connecting to %s. |
| Connected. |
| Disconnecting. |
| Disconnected. |
| %s |
| Socket Error # %d |
| %s |
| Could not obtain OLE control window handle |
| License information for %s is invalid |
| License information for %s not found. You cannot use this control in design mode |
| Unable to retrieve a pointer to a running object registered with OLE for %s/%s |
| This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error) |
| The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted |
| This "Portable Network Graphics" image is invalid because it has missing image parts. |
| Could not decompress the image because it contains invalid compressed data. |
| Description: |
| The "Portable Network Graphics" image contains an invalid palette. |
| The file being readed is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corruped, try obtaining it again. |
| This "Portable Network Graphics" image is not supported or it might be invalid. |
| (IHDR chunk is not the first) |
| This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length. |
| There is no such palette entry. |
| This "Portable Network Graphics" image contains an unknown critical part which could not be decoded. |
| This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded. |
| This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded. |
| UTF-8 |
| UTF-7 |
| Cannot remove shell notification icon |
| Cannot create shell notification icon |
| %s requires Windows Vista or later |
| Invalid owner |
| This control requires version 4.70 or greater of COMCTL32.DLL |
| Cannot change the size of a JPEG image |
| JPEG error #%d |
| JPEG Image File |
| OLE error %.8x |
| Method '%s' not supported by automation object |
| Variant does not reference an automation object |
| Dispatch methods do not support more than 64 parameters |
| DCOM not installed |
| OLE control activation failed |
| Value must be between %d and %d |
| Unable to insert a line |
| Clipboard does not support Icons |
| Menu '%s' is already being used by another form |
| Docked control must have a name |
| Error removing control from dock tree |
| - Dock zone not found |
| - Dock zone has no control |
| Error loading dock zone from the stream. Expecting version %d, but found %d. |
| Error setting %s.Count |
| Listbox (%s) style must be virtual in order to set Count |
| No OnGetItem event handler assigned |
| ANSI |
| ASCII |
| Unicode |
| Big Endian Unicode |
| Esc |
| Enter |
| Space |
| PgUp |
| PgDn |
| End |
| Home |
| Left |
| Up |
| Right |
| Down |
| Ins |
| Del |
| Shift+ |
| Ctrl+ |
| Alt+ |
| Information |
| Confirm |
| &Yes |
| &No |
| OK |
| Cancel |
| &Help |
| &Abort |
| &Retry |
| &Ignore |
| &All |
| N&o to All |
| Yes to &All |
| &Close |
| BkSp |
| Tab |
| Cancel |
| &Yes |
| &No |
| &Help |
| &Close |
| &Ignore |
| &Retry |
| Abort |
| &All |
| Cannot drag a form |
| Metafiles |
| Enhanced Metafiles |
| Icons |
| Bitmaps |
| Warning |
| Error |
| Error creating window class |
| Cannot focus a disabled or invisible window |
| Control '%s' has no parent window |
| Parent given is not a parent of '%s' |
| Cannot hide an MDI Child Form |
| Cannot change Visible in OnShow or OnHide |
| Cannot make a visible window modal |
| %s property out of range |
| Menu index out of range |
| Menu inserted twice |
| Sub-menu is not in menu |
| Not enough timers available |
| GroupIndex cannot be less than a previous menu item's GroupIndex |
| Cannot create form. No MDI forms are currently active |
| A control cannot have itself as its parent |
| OK |
| Icon image is not valid |
| Metafile is not valid |
| Invalid pixel format |
| Scan line index out of range |
| Cannot change the size of an icon |
| Invalid operation on TOleGraphic |
| Unknown picture file extension (.%s) |
| Unsupported clipboard format |
| Out of system resources |
| Canvas does not allow drawing |
| Invalid image size |
| Invalid ImageList |
| Invalid ImageList Index |
| Failed to read ImageList data from stream |
| Failed to write ImageList data to stream |
| Error creating window device context |
| String index out of range (%d). Must be >= 1 and <= %d |
| High surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properly |
| Low surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly |
| ''%s'' is not a valid date |
| ''%s'' is not a valid date and time |
| ''%s'' is not a valid integer value |
| ''%s'' is not a valid time |
| Invalid argument to time encode |
| No context-sensitive help installed |
| No help found for context |
| Unable to open Index |
| Unable to open Search |
| Unable to find a Table of Contents |
| No topic-based help system installed |
| No help found for %s |
| Bitmap image is not valid |
| Error reading %s%s%s: %s |
| Stream read error |
| Property is read-only |
| Failed to get data for '%s' |
| Failed to set data for '%s' |
| Resource %s not found |
| %s.Seek not implemented |
| Operation not allowed on sorted list |
| %s not in a class registration group |
| Property %s does not exist |
| Stream write error |
| Thread creation error: %s |
| Thread Error: %s (%d) |
| Cannot terminate an externally created thread |
| Cannot wait for an externally created thread |
| No help viewer that supports filters |
| A component named %s already exists |
| String list does not allow duplicates |
| Cannot create file "%s". %s |
| Cannot open file "%s". %s |
| Unable to write to %s |
| Invalid file name - %s |
| Invalid stream format |
| ''%s'' is not a valid component name |
| Invalid property value |
| Invalid property path |
| Invalid property value |
| Invalid data type for '%s' |
| List capacity out of bounds (%d) |
| List count out of bounds (%d) |
| List index out of bounds (%d) |
| Out of memory while expanding memory stream |
| Unable to create directory |
| Invalid source array |
| Invalid destination array |
| Character index out of bounds (%d) |
| Start index out of bounds (%d) |
| Invalid count (%d) |
| Invalid destination index (%d) |
| Invalid code page |
| Ancestor for '%s' not found |
| Cannot assign a %s to a %s |
| Bits index out of range |
| Can't write to a read-only resource stream |
| CheckSynchronize called from thread $%x, which is NOT the main thread |
| Class %s not found |
| A class named %s already exists |
| List does not allow duplicates ($0%x) |
| November |
| December |
| Sun |
| Mon |
| Tue |
| Wed |
| Thu |
| Fri |
| Sat |
| Sunday |
| Monday |
| Tuesday |
| Wednesday |
| Thursday |
| Friday |
| Saturday |
| Jul |
| Aug |
| Sep |
| Oct |
| Nov |
| Dec |
| January |
| February |
| March |
| April |
| May |
| June |
| July |
| August |
| September |
| October |
| Assertion failed |
| Interface not supported |
| Exception in safecall method |
| Object lock not owned |
| Monitor support function not initialized |
| %s (%s, line %d) |
| Abstract Error |
| Access violation at address %p in module '%s'. %s of address %p |
| System Error. Code: %d. |
| %s |
| A call to an OS function failed |
| Jan |
| Feb |
| Mar |
| Apr |
| May |
| Jun |
| Write |
| Error creating variant or safe array |
| Variant or safe array index out of bounds |
| Variant or safe array is locked |
| Invalid variant type conversion |
| Invalid variant operation |
| Invalid NULL variant operation |
| Invalid variant operation (%s%.8x) |
| %s |
| Could not convert variant of type (%s) into type (%s) |
| Overflow while converting variant of type (%s) into type (%s) |
| Variant overflow |
| Invalid argument |
| Invalid variant type |
| Operation not supported |
| Unexpected variant error |
| External exception %x |
| Floating point overflow |
| Floating point underflow |
| Invalid pointer operation |
| Invalid class typecast |
| Access violation at address %p. %s of address %p |
| Access violation |
| Stack overflow |
| Control-C hit |
| Privileged instruction |
| Operation aborted |
| Exception %s in module %s at %p. |
| %s%s |
| Application Error |
| Format '%s' invalid or incompatible with argument |
| No argument for format '%s' |
| Variant method calls not supported |
| Read |
| '%s' is not a valid floating point value |
| '%s' is not a valid GUID value |
| Invalid argument to date encode |
| Out of memory |
| I/O error %d |
| File not found |
| Too many open files |
| File access denied |
| Read beyond end of file |
| Disk full |
| Invalid numeric input |
| Division by zero |
| Range check error |
| Integer overflow |
| Invalid floating point operation |
| Floating point division by zero |
Version Info
TLS Callbacks
| StartAddressOfRawData | 0x592000 |
|---|---|
| EndAddressOfRawData | 0x59203c |
| AddressOfIndex | 0x57e7bc |
| AddressOfCallbacks | 0x593010 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks | (EMPTY) |
Load Configuration
RICH Header
Errors
[*] Warning: Section .bss has a size of 0!
[*] Warning: Section .tls has a size of 0!