chngtrk.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	chngtrk.dll
size	28672 (0x7000)
md5	00f6b726b8822887fcdb723937cf9191

type	PE32 executable (DLL) (Windows CE) ARM, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd0

Rich Header

lib id	version	times used
48	9615	3
89	2064	11
1	0	57
49	9615	19
88	2064	1
86	2064	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x1c0
NumberOfSections	4
TimeDateStamp	0x3efc9c82
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x212e
Magic	0x10b
LinkerVersion	6.24
SizeOfCode	0x5c00
SizeOfInitializedData	0x1200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x6694
BaseOfCode	0x1000
BaseOfData	0x7000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.20
Reserved1	0
SizeOfImage	0xa000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x5b02	0x5c00	R-X CODE
.data	0x7000	0x294	0x200	RW- IDATA
.pdata	0x8000	0x700	0x800	R-- IDATA
.reloc	0x9000	0x4b2	0x600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x6a70	0x92
IMPORT	0x686c	0x78
RESOURCE	0	0
EXCEPTION	0x8000	0x700
SECURITY	0	0
BASERELOC	0x9000	0x4a4
DEBUG	0x1000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x7000	0xf8
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
ossvcs.dll		130
ole32.dll	37		StringFromGUID2
ole32.dll	3		CoCreateInstance
OLEAUT32.dll	41		SysFreeString
OLEAUT32.dll	38		SysAllocString
commctrl.dll		26
commctrl.dll		23
commctrl.dll		27
commctrl.dll		24
commctrl.dll		29
commctrl.dll		60
commctrl.dll		51
commctrl.dll		50
commctrl.dll		31
commctrl.dll		59
commctrl.dll		62
COREDLL.dll		3
COREDLL.dll		528
COREDLL.dll		530
COREDLL.dll		456
COREDLL.dll		463
COREDLL.dll		455
COREDLL.dll		1092
COREDLL.dll		1132
COREDLL.dll		321
COREDLL.dll		36
COREDLL.dll		319
COREDLL.dll		4
COREDLL.dll		5
COREDLL.dll		60
COREDLL.dll		160
COREDLL.dll		73
COREDLL.dll		66
COREDLL.dll		1047
COREDLL.dll		58
COREDLL.dll		555
COREDLL.dll		517
COREDLL.dll		553
COREDLL.dll		10
COREDLL.dll		516
COREDLL.dll		1192
COREDLL.dll		11
COREDLL.dll		1094
COREDLL.dll		322
COREDLL.dll		1095
COREDLL.dll		1044
COREDLL.dll		1043
COREDLL.dll		2
COREDLL.dll		1232
COREDLL.dll		63
COREDLL.dll		550
COREDLL.dll		551
COREDLL.dll		556
COREDLL.dll		549
COREDLL.dll		548
COREDLL.dll		1167
COREDLL.dll		497

ord	entry_va	function_name
1	0x170c
2	0x1448
3	0x1600
4	0x1670
5	0x2098
6	0x210c
7	0x2144
8	0x216c
9	0x21a8
10	0x21d0
11	0x1ee0	DllCanUnloadNow
12	0x1f28	DllGetClassObject

module_name	chngtrk.dll
flags	0
timestamp	2003-06-27 19:35:30
version	0.0
ordinal_base	1
nFunctions	12
nNames	2
Names(2)	0x6ac8
Functions(12)	0x6a98
NameOrdinals(2)	0x6ad0

show previews

offset	size	type	comment
0	28672	DLL	06/27/2003 19:35:30	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK