filename | 0E1BFBE5F8C63F479E8791F5E0E94161 | |
---|---|---|
size | 147456 (0x24000) | |
md5 | 0e1bfbe5f8c63f479e8791f5e0e94161 | |
type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x110 |
Rich Header
lib id | version | times used |
---|---|---|
4 | 8397 | 2 |
10 | 8397 | 4 |
11 | 8447 | 1 |
14 | 7299 | 9 |
19 | 8022 | 7 |
19 | 9049 | 29 |
1 | 0 | 603 |
12 | 7291 | 1 |
0 | 0 | 45 |
54 | 8971 | 1 |
6 | 1735 | 1 |
10 | 8168 | 23 |
11 | 8168 | 14 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
type | name | size | cp | |
---|---|---|---|---|
REGISTRY | #201 | 954 | 0 | |
ICON | #1 | 1640 | 0 | |
ICON | #2 | 296 | 0 | |
ICON | #3 | 744 | 0 | |
STRING | #7 | 44 | 0 | |
GROUP_ICON | #202 | 48 | 0 | |
VERSION | #1 | 972 | 0 |
id | lang | string |
---|---|---|
100 | 1033 | CEWMDM |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.dll | 153 | FileTimeToSystemTime | |
KERNEL32.dll | 374 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 656 | SetEvent | |
KERNEL32.dll | 30 | CloseHandle | |
KERNEL32.dll | 77 | CreateThread | |
KERNEL32.dll | 765 | WaitForSingleObject | |
KERNEL32.dll | 339 | GetProcAddress | |
KERNEL32.dll | 440 | HeapDestroy | |
KERNEL32.dll | 301 | GetLastError | |
KERNEL32.dll | 453 | InitializeCriticalSection | |
KERNEL32.dll | 90 | DeleteCriticalSection | |
KERNEL32.dll | 478 | LeaveCriticalSection | |
KERNEL32.dll | 459 | InterlockedIncrement | |
KERNEL32.dll | 821 | lstrlenA | |
KERNEL32.dll | 484 | LoadResource | |
KERNEL32.dll | 706 | SizeofResource | |
KERNEL32.dll | 111 | EnterCriticalSection | |
KERNEL32.dll | 195 | FreeLibrary | |
KERNEL32.dll | 456 | InterlockedDecrement | |
KERNEL32.dll | 481 | LoadLibraryExW | |
KERNEL32.dll | 763 | WaitForMultipleObjects | |
KERNEL32.dll | 99 | DeviceIoControl | |
KERNEL32.dll | 266 | GetCurrentProcessId | |
KERNEL32.dll | 356 | GetShortPathNameA | |
KERNEL32.dll | 275 | GetDiskFreeSpaceA | |
KERNEL32.dll | 467 | IsBadWritePtr | |
KERNEL32.dll | 668 | SetLastError | |
KERNEL32.dll | 816 | lstrcpyW | |
KERNEL32.dll | 813 | lstrcmpiW | |
KERNEL32.dll | 268 | GetCurrentThreadId | |
KERNEL32.dll | 390 | GetTickCount | |
KERNEL32.dll | 303 | GetLocalTime | |
KERNEL32.dll | 555 | QueryPerformanceCounter | |
KERNEL32.dll | 424 | GlobalMemoryStatus | |
KERNEL32.dll | 370 | GetSystemInfo | |
KERNEL32.dll | 560 | RaiseException | |
KERNEL32.dll | 457 | InterlockedExchange | |
KERNEL32.dll | 357 | GetShortPathNameW | |
KERNEL32.dll | 222 | GetComputerNameA | |
KERNEL32.dll | 479 | LoadLibraryA | |
KERNEL32.dll | 480 | LoadLibraryExA | |
KERNEL32.dll | 807 | lstrcatW | |
KERNEL32.dll | 482 | LoadLibraryW | |
KERNEL32.dll | 100 | DisableThreadLibraryCalls | |
KERNEL32.dll | 819 | lstrcpynW | |
KERNEL32.dll | 315 | GetModuleHandleW | |
KERNEL32.dll | 399 | GetVersionExA | |
KERNEL32.dll | 822 | lstrlenW | |
KERNEL32.dll | 514 | MultiByteToWideChar | |
KERNEL32.dll | 769 | WideCharToMultiByte | |
KERNEL32.dll | 812 | lstrcmpiA | |
KERNEL32.dll | 52 | CreateEventA | |
KERNEL32.dll | 53 | CreateEventW | |
KERNEL32.dll | 489 | LocalFree | |
KERNEL32.dll | 314 | GetModuleHandleA | |
KERNEL32.dll | 178 | FindResourceA | |
KERNEL32.dll | 181 | FindResourceW | |
KERNEL32.dll | 485 | LocalAlloc | |
KERNEL32.dll | 312 | GetModuleFileNameA | |
KERNEL32.dll | 313 | GetModuleFileNameW | |
ADVAPI32.dll | 418 | RegQueryInfoKeyA | |
ADVAPI32.dll | 243 | GetUserNameA | |
ADVAPI32.dll | 392 | RegCreateKeyExA | |
ADVAPI32.dll | 393 | RegCreateKeyExW | |
ADVAPI32.dll | 404 | RegEnumValueA | |
ADVAPI32.dll | 405 | RegEnumValueW | |
ADVAPI32.dll | 395 | RegDeleteKeyA | |
ADVAPI32.dll | 396 | RegDeleteKeyW | |
ADVAPI32.dll | 397 | RegDeleteValueA | |
ADVAPI32.dll | 398 | RegDeleteValueW | |
ADVAPI32.dll | 413 | RegOpenKeyExA | |
ADVAPI32.dll | 414 | RegOpenKeyExW | |
ADVAPI32.dll | 419 | RegQueryInfoKeyW | |
ADVAPI32.dll | 388 | RegCloseKey | |
ADVAPI32.dll | 402 | RegEnumKeyExW | |
ADVAPI32.dll | 401 | RegEnumKeyExA | |
ADVAPI32.dll | 423 | RegQueryValueExA | |
ADVAPI32.dll | 435 | RegSetValueExW | |
ADVAPI32.dll | 434 | RegSetValueExA | |
ole32.dll | 49 | CoInitialize | |
ole32.dll | 15 | CoCreateInstance | |
ole32.dll | 85 | CoTaskMemFree | |
ole32.dll | 86 | CoTaskMemRealloc | |
ole32.dll | 89 | CoUninitialize | |
ole32.dll | 84 | CoTaskMemAlloc | |
OLEAUT32.dll | 163 | ||
OLEAUT32.dll | 161 | ||
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 277 | ||
OLEAUT32.dll | 6 | ||
MSVCRT.dll | 606 | free | |
MSVCRT.dll | 733 | vswprintf | |
MSVCRT.dll | 157 | _adjust_fdiv | |
MSVCRT.dll | 271 | _initterm | |
MSVCRT.dll | 664 | memmove | |
MSVCRT.dll | 490 | _wcsicmp | |
MSVCRT.dll | 736 | wcschr | |
MSVCRT.dll | 747 | wcsrchr | |
MSVCRT.dll | 735 | wcscat | |
MSVCRT.dll | 715 | swprintf | |
MSVCRT.dll | 745 | wcsncpy | |
MSVCRT.dll | 742 | wcslen | |
MSVCRT.dll | 739 | wcscpy | |
MSVCRT.dll | 16 | void __cdecl operator delete(void *) ??3@YAXPAX@Z | |
MSVCRT.dll | 15 | void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z | |
MSVCRT.dll | 402 | _purecall | |
MSVCRT.dll | 657 | malloc | |
MSVCRT.dll | 679 | realloc | |
USER32.dll | 463 | MsgWaitForMultipleObjects | |
USER32.dll | 39 | CharNextW | |
USER32.dll | 694 | wvsprintfW | |
USER32.dll | 536 | SendMessageA | |
USER32.dll | 301 | GetMessageA | |
USER32.dll | 486 | PostThreadMessageA | |
USER32.dll | 516 | RegisterWindowMessageA | |
USER32.dll | 151 | DispatchMessageA | |
USER32.dll | 152 | DispatchMessageW | |
USER32.dll | 487 | PostThreadMessageW | |
USER32.dll | 305 | GetMessageW | |
USER32.dll | 418 | LoadIconA | |
USER32.dll | 419 | LoadIconW | |
USER32.dll | 481 | PeekMessageA |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x1089 | DllCanUnloadNow | |
2 | 0x1095 | DllGetClassObject | |
3 | 0x10af | DllRegisterServer | |
4 | 0x10be | DllUnregisterServer |
StringTable 040904E4
CompanyName | Microsoft Corporation |
FileDescription | Windows CE WMDM Service Provider |
FileVersion | 7.01.00.3055 |
InternalName | CEWMDM.DLL |
LegalCopyright | Copyright (C) 1992-2000 Microsoft Corp. |
OriginalFilename | CEWMDM.DLL |
ProductName | Windows CE WMDM Service Provider |
ProductVersion | 7.01.00.3055 |
OLESelfRegister | Microsoft(R) Windows Media Player |
VS_FIXEDFILEINFO
FileVersion | 7.1.0.3055 |
ProductVersion | 7.1.0.3055 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x30003f |
FileFlags | 0 |
FileOS | 4 |
FileType | 2 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK