eoep.dll - appmgr.dll - Software Installation Snapin Extenstion

info
MZ
PE
resources
imports
exports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	eoep.dll
size	203529 (0x31b09)
md5	20b820d0e6b2b8c61fc7a65985a31b11

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
125	50727	4
1	0	165
123	50727	19
122	50727	1
109	50727	24
110	50727	99
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4426eaf5
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0xb000
SizeOfInitializedData	0x32c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x8cc8
BaseOfCode	0x1000
BaseOfData	0xc000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x400
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x41000
SizeOfHeaders	0x400
CheckSum	0x28649
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xae10	0xb000	R-X CODE
.rdata	0xc000	0x8f2	0xc00	R-- IDATA
.data	0xd000	0x1e0a0	0x1000	RW- IDATA
.rsrc	0x2c000	0x1363c	0x13800	R-- IDATA
.reloc	0x40000	0x390	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xc860	0x92
IMPORT	0xc4a4	0x64
RESOURCE	0x2c000	0x1363c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x40000	0x1ac
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xc000	0xa8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BITMAP	#202	8232	1252
BITMAP	#203	32808	1252
BITMAP	#207	3112	1252
BITMAP	#219	1064	1252
ICON	#1	744	1252
ICON	#2	488	1252
ICON	#3	296	1252
ICON	#4	2216	1252
ICON	#5	1736	1252
ICON	#6	1384	1252
ICON	#7	4264	1252
ICON	#8	2440	1252
ICON	#9	1128	1252
ICON	#10	744	1252
ICON	#11	488	1252
ICON	#12	296	1252
ICON	#13	2216	1252
ICON	#14	1736	1252
ICON	#15	1384	1252
ICON	#16	4264	1252
ICON	#17	2440	1252
ICON	#18	1128	1252
GROUP_ICON	#205	132	1252
GROUP_ICON	#218	132	1252
VERSION	#1	1004	1252
#5000	#102	64	1252
#5000	#106	168	1252
#5000	#107	64	1252
#5000	#110	104	1252
#5000	#111	64	1252
#5000	#113	48	1252
#5000	#115	104	1252
#5000	#117	48	1252
#5000	#118	48	1252
#5000	#120	96	1252
#5000	#210	16	1252
#5000	#211	48	1252
#5000	#213	48	1252
#5000	#215	40	1252
#5000	#217	120	1252
#5000	#218	40	1252
#5000	#219	24	1252
#5000	#220	32	1252
#5000	#221	48	1252
#5000	#222	24	1252

module_name	hint	function_name
KERNEL32.dll	497	GlobalFree
KERNEL32.dll	612	MultiByteToWideChar
KERNEL32.dll	404	GetPrivateProfileStringW
KERNEL32.dll	939	lstrcmpiW
KERNEL32.dll	108	CreateThread
KERNEL32.dll	241	FreeLibraryAndExitThread
KERNEL32.dll	240	FreeLibrary
KERNEL32.dll	439	GetSystemDirectoryW
KERNEL32.dll	360	GetLastError
KERNEL32.dll	830	Sleep
KERNEL32.dll	410	GetProcessHeap
KERNEL32.dll	514	HeapAlloc
KERNEL32.dll	520	HeapFree
KERNEL32.dll	948	lstrlenW
KERNEL32.dll	150	EnterCriticalSection
KERNEL32.dll	873	VerifyVersionInfoW
KERNEL32.dll	137	DisableThreadLibraryCalls
KERNEL32.dll	76	CreateEventW
KERNEL32.dll	49	CloseHandle
KERNEL32.dll	127	DeleteCriticalSection
KERNEL32.dll	533	InitializeCriticalSection
KERNEL32.dll	787	SetLastError
KERNEL32.dll	136	DeviceIoControl
KERNEL32.dll	631	OpenSemaphoreW
KERNEL32.dll	236	FormatMessageW
KERNEL32.dll	182	ExitProcess
KERNEL32.dll	691	RemoveDirectoryW
KERNEL32.dll	635	OutputDebugStringA
USER32.dll	414	IsCharUpperA
USER32.dll	504	OpenIcon
msvcrt.dll	1371	wcsncmp
msvcrt.dll	1385	wcstombs
msvcrt.dll	1380	wcsstr
msvcrt.dll	281	_chdir
msvcrt.dll	1190	free
msvcrt.dll	1253	mbstowcs
msvcrt.dll	1361	wcschr
SHLWAPI.dll	35	PathCombineW

ord	entry_va	function_name
1	0x9b66	AToCorrespondOverride
2	0x8f01	MayPlatformOrgThatTo
3	0x8b3e	MeansTimeWhereby

module_name	information.dll
flags	0
timestamp	2006-03-26 19:26:45
version	0.0
ordinal_base	1
nFunctions	3
nNames	3
Names(3)	0xc894
Functions(3)	0xc888
NameOrdinals(3)	0xc8a0

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Software Installation Snapin Extenstion
FileVersion	6.0.6001.18000 (longhorn_rtm.080118-1840)
InternalName	Software Installation Editor Snapin
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	appmgr.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.0.6001.18000

VS_FIXEDFILEINFO

FileVersion	6.0.6001.18000
ProductVersion	6.0.6001.18000
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	134144	DLL	03/26/2006 19:26:45	#
15c1	15	HTM		#
20c00	69385	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 203529 bytes (199 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

eoep.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

eoep.dll
-