filenamembapreq.dll
size180224 (0x2c000)
md528bdbf7bf0b48de60d35240963ffcc24
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x120

Rich Header

lib idversiontimes used
2414011610
24340116119
2424011624
2592593018
2602593017
2612593030
131307294
1473072929
10258
2612613125
256261311
255261311
15101
258261311

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5aeb9397
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion14.13
SizeOfCode0x1da00
SizeOfInitializedData0xec00
SizeOfUninitializedData0
AddressOfEntryPoint0xebfb
BaseOfCode0x1000
BaseOfData0x1f000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x30000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x1d9ab0x1da00R-X CODE
.rdata0x1f0000xb3220xb400R-- IDATA
.data0x2b0000x15fc0xc00RW- IDATA
.rsrc0x2d0000x5a80x600R-- IDATA
.reloc0x2e0000x1a780x1c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x28f500xec
IMPORT0x2903c0x118
RESOURCE0x2d0000x5a8
EXCEPTION00
SECURITY00
BASERELOC0x2e0000x1a78
DEBUG0x283e00x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x284380x40
Bound_IAT00
IAT0x1f0000x35c
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#19040
MANIFEST#23810
module_namehintordfunction_name
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll638RegSetValueExW
COMDLG32.dll12GetOpenFileNameW
USER32.dll566PostMessageW
USER32.dll636SendMessageW
USER32.dll563PeekMessageW
USER32.dll175DispatchMessageW
USER32.dll764TranslateMessage
USER32.dll774UnregisterClassW
USER32.dll590RegisterClassW
USER32.dll110CreateWindowExW
USER32.dll475IsWindow
USER32.dll166DestroyWindow
USER32.dll735ShowWindow
USER32.dll533MessageBoxW
USER32.dll288GetCursorPos
USER32.dll406GetWindowLongW
USER32.dll708SetWindowLongW
USER32.dll491LoadCursorW
USER32.dll493LoadIconW
USER32.dll536MonitorFromPoint
USER32.dll351GetMonitorInfoW
USER32.dll349GetMessageW
USER32.dll611RegisterWindowMessageW
USER32.dll567PostQuitMessage
USER32.dll807WaitMessage
USER32.dll156DefWindowProcW
USER32.dll461IsDialogMessageW
USER32.dll495LoadImageW
USER32.dll488LoadCursorA
USER32.dll643SetClassLongA
USER32.dll271GetClassLongA
USER32.dll196DrawFocusRect
USER32.dll648SetCursor
USER32.dll412GetWindowRect
USER32.dll276GetClientRect
USER32.dll419GetWindowTextW
USER32.dll715SetWindowTextW
USER32.dll446InvalidateRect
USER32.dll391GetUpdateRect
USER32.dll220EndPaint
USER32.dll14BeginPaint
USER32.dll382GetSystemMetrics
USER32.dll216EnableWindow
USER32.dll483KillTimer
USER32.dll699SetTimer
USER32.dll317GetKeyState
USER32.dll658SetFocus
USER32.dll354GetNextDlgTabItem
USER32.dll295GetDlgItem
USER32.dll539MoveWindow
USER32.dll77CloseWindow
USER32.dll270GetClassInfoW
OLEAUT32.dll2
OLEAUT32.dll6
OLEAUT32.dll8
OLEAUT32.dll9
GDI32.dll638SetBkColor
GDI32.dll631SelectObject
GDI32.dll525GetStockObject
GDI32.dll230DeleteObject
GDI32.dll639SetBkMode
GDI32.dll84CreateSolidBrush
GDI32.dll64CreateFontIndirectW
GDI32.dll48CreateCompatibleDC
GDI32.dll509GetObjectW
GDI32.dll312ExtTextOutW
GDI32.dll227DeleteDC
GDI32.dll691StretchBlt
GDI32.dll678SetTextColor
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll6CommandLineToArgvW
SHELL32.dll182SHGetDesktopFolder
SHELL32.dll289ShellExecuteExW
ole32.dll134CreateStreamOnHGlobal
ole32.dll108CoUninitialize
ole32.dll16CoCreateInstance
ole32.dll62CoInitialize
ole32.dll6CLSIDFromProgID
ole32.dll104CoTaskMemFree
VERSION.dll5GetFileVersionInfoSizeW
VERSION.dll6GetFileVersionInfoW
VERSION.dll14VerQueryValueW
KERNEL32.dll307FindFirstFileExA
KERNEL32.dll617GetStringTypeW
KERNEL32.dll499GetFileType
KERNEL32.dll612GetStdHandle
KERNEL32.dll360GetACP
KERNEL32.dll1222TlsFree
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll1139SetLastError
KERNEL32.dll1048RtlUnwind
KERNEL32.dll750InterlockedFlushSList
KERNEL32.dll945RaiseException
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll743InitializeSListHead
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll1216TerminateProcess
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll323FindNextFileA
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll370GetCPInfo
KERNEL32.dll390GetCommandLineA
KERNEL32.dll709GlobalUnlock
KERNEL32.dll702GlobalLock
KERNEL32.dll391GetCommandLineW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll1159SetStdHandle
KERNEL32.dll410GetConsoleCP
KERNEL32.dll428GetConsoleMode
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll202DecodePointer
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll535GetModuleHandleExW
KERNEL32.dll332FindResourceExA
KERNEL32.dll1201SizeofResource
KERNEL32.dll833LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll281ExitProcess
KERNEL32.dll813LCMapStringW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll350FormatMessageW
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll354FreeLibrary
KERNEL32.dll581GetProcAddress
KERNEL32.dll181CreateThread
KERNEL32.dll514GetLastError
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll1202Sleep
KERNEL32.dll82CloseHandle
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll100CompareStringW
KERNEL32.dll1175SetThreadLocale
KERNEL32.dll222DisableThreadLibraryCalls
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll1317WriteFile
KERNEL32.dll1357lstrlenA
KERNEL32.dll831LoadLibraryW
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll624GetSystemDirectoryW
KERNEL32.dll840LocalFree
KERNEL32.dll715HeapAlloc
KERNEL32.dll722HeapReAlloc
KERNEL32.dll719HeapFree
KERNEL32.dll724HeapSize
KERNEL32.dll586GetProcessHeap
KERNEL32.dll691GlobalAlloc
KERNEL32.dll698GlobalFree
KERNEL32.dll497GetFileSizeEx
KERNEL32.dll960ReadFile
KERNEL32.dll1127SetFilePointerEx
KERNEL32.dll302FindClose
KERNEL32.dll1358lstrlenW
KERNEL32.dll143CreateFileW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll622GetSystemDefaultUILanguage
KERNEL32.dll670GetUserDefaultUILanguage
KERNEL32.dll668GetUserDefaultLangID
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll83ImageList_Create
COMCTL32.dll123InitCommonControlsEx
COMCTL32.dll77ImageList_Add
gdiplus.dll152GdipDisposeImage
gdiplus.dll54GdipCloneImage
gdiplus.dll237GdipFree
gdiplus.dll33GdipAlloc
gdiplus.dll95GdipCreateHBITMAPFromBitmap
gdiplus.dll81GdipCreateBitmapFromStream
gdiplus.dll629GdiplusStartup
gdiplus.dll73GdipCreateBitmapFromFile
gdiplus.dll628GdiplusShutdown
MSIMG32.dllAlphaBlend
SHLWAPI.dll176
SHLWAPI.dll164SHAutoComplete
ordentry_vafunction_name
10x5983BootstrapperApplicationCreate
20x59c1BootstrapperApplicationDestroy
30x59f8MbaPrereqBootstrapperApplicationCreate
40x59c1MbaPrereqBootstrapperApplicationDestroy
module_nameWixStdBA.dll
flags0
timestamp2106-02-07 06:28:15
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x28f88
Functions(4)0x28f78
NameOrdinals(4)0x28f98

StringTable 040904E4

CompanyName.NET Foundation
FileDescriptionWiX Standard Bootstrapper Application
FileVersion3.14.0.1703
InternalNamewixstdba
LegalCopyrightCopyright (c) .NET Foundation and contributors.  All rights reserved.
OriginalFilenamewixstdba.dll
ProductNameWindows Installer XML Toolset
ProductVersion3.14.0.1703

VS_FIXEDFILEINFO

FileVersion3.14.1703.0
ProductVersion3.14.1703.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0180224DLL05/03/2018 22:56:23#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK