filenamed2vgehgt.dll
size45056 (0xb000)
md51a5defc54806f6d854f062684921bbfc
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
1980342
1472991
1084474
1068
1184475
617351
484476

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x3b3c4f7e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x1000
SizeOfInitializedData0xa000
SizeOfUninitializedData0
AddressOfEntryPoint0x14c1
BaseOfCode0x1000
BaseOfData0x2000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xc000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x6160x1000R-X CODE
.rdata0x20000x5450x1000R-- IDATA
.data0x30000x12440x1000RW- IDATA
.rsrc0x50000x51f00x6000R-- IDATA
.reloc0xb0000x1ce0x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x25100x35
IMPORT0x22c80x50
RESOURCE0x50000x51f0
EXCEPTION00
SECURITY00
BASERELOC0xb0000x178
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x20000x11c
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#11118700
DIALOG#22116980
DIALOG#23842360
DIALOG#34016960
DIALOG#340213480
DIALOG#34068540
DIALOG#340713420
DIALOG#340833060
DIALOG#340933260
DIALOG#34224060
DIALOG#34234000
DIALOG#342410520
DIALOG#34255820
DIALOG#34266900
DIALOG#34276200
DIALOG#34286380
DIALOG#34292340
DIALOG#34306440
STRING#147780
STRING#148420
STRING#1767700
idlangstring
23441031Option Files (*.ini)
23451031ini
23521031*.ini
28011031Die Einsehbarkeit ist bereits aktiv !
28021031Bitte Beobachterhöhe korrekt eintragen !
28031031Bitte Sichtweite korrekt eintragen !
28041031Bitte Zielhöhe korrekt eintragen !
28051031Bitte rechten Blickwinkel korrekt eintragen !
28061031Bitte linken Blickwinkel korrekt eintragen !
28071031Winkel kann nicht größer als 360° sein !
28081031Abbruch, da linke untere Ecke negativ !
28091031Abbruch, Beobachterhöhe unterhalb der aktuellen Höhe !
module_namehintordfunction_name
MFC42.DLL2554
MFC42.DLL5731
MFC42.DLL3922
MFC42.DLL1089
MFC42.DLL5199
MFC42.DLL2396
MFC42.DLL3346
MFC42.DLL5300
MFC42.DLL5302
MFC42.DLL2725
MFC42.DLL4079
MFC42.DLL4698
MFC42.DLL5307
MFC42.DLL5289
MFC42.DLL5714
MFC42.DLL2982
MFC42.DLL3147
MFC42.DLL4486
MFC42.DLL2512
MFC42.DLL3136
MFC42.DLL3262
MFC42.DLL2985
MFC42.DLL3081
MFC42.DLL2976
MFC42.DLL3401
MFC42.DLL3830
MFC42.DLL3831
MFC42.DLL3825
MFC42.DLL3079
MFC42.DLL4080
MFC42.DLL4622
MFC42.DLL4424
MFC42.DLL6375
MFC42.DLL561
MFC42.DLL825
MFC42.DLL815
MFC42.DLL3259
MFC42.DLL4465
MFC42.DLL3738
MFC42.DLL1578
MFC42.DLL600
MFC42.DLL1116
MFC42.DLL1176
MFC42.DLL1575
MFC42.DLL1168
MFC42.DLL1577
MFC42.DLL1182
MFC42.DLL342
MFC42.DLL1243
MFC42.DLL269
MFC42.DLL826
MFC42.DLL1570
MFC42.DLL1197
MFC42.DLL6467
MFC42.DLL1255
MFC42.DLL1253
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll66_EH_prolog
MSVCRT.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll157_adjust_fdiv
MSVCRT.dll657malloc
MSVCRT.dll271_initterm
MSVCRT.dll606free
MSVCRT.dll390_onexit
MSVCRT.dll85__dllonexit
KERNEL32.dll456LocalAlloc
KERNEL32.dll460LocalFree
ordentry_vafunction_name
module_named2vgehgt.dll
flags0
timestamp2001-06-29 09:50:53
version0.0
ordinal_base1
nFunctions0
nNames0
Names(0)0x2538
Functions(0)0x2538
NameOrdinals(0)0x2538
offsetsizetypecomment
045056DLL06/29/2001 09:50:54#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK