CLIENT.DLL

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	CLIENT.DLL
size	120832 (0x1d800)
md5	2b56fb455830c50c25577749c767c01f

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x33fdc92f
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0x15200
SizeOfInitializedData	0xb200
SizeOfUninitializedData	0
AddressOfEntryPoint	0xbfa0
BaseOfCode	0x1000
BaseOfData	0x17000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x24000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x151a0	0x15200	R-X CODE
.rdata	0x17000	0x1294	0x1400	R-- IDATA
.data	0x19000	0x7b58	0x4c00	RW- IDATA
.idata	0x21000	0xa0a	0xc00	RW- IDATA
.reloc	0x22000	0x1580	0x1600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x180f0	0x1a4
IMPORT	0x21000	0x50
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x22000	0xfd4
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x211d0	0x180
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
ADVAPI32.dll	310	RegQueryValueExA
ADVAPI32.dll	302	RegOpenKeyExA
ADVAPI32.dll	321	RegSetValueExA
ADVAPI32.dll	279	RegCloseKey
USER32.dll	557	ShowWindow
USER32.dll	213	GetActiveWindow
USER32.dll	405	MessageBoxA
KERNEL32.dll	542	SetLastError
KERNEL32.dll	364	HeapDestroy
KERNEL32.dll	362	HeapCreate
KERNEL32.dll	369	HeapReAlloc
KERNEL32.dll	78	DeleteFileA
KERNEL32.dll	126	FindClose
KERNEL32.dll	135	FindNextFileA
KERNEL32.dll	130	FindFirstFileA
KERNEL32.dll	353	GlobalMemoryStatus
KERNEL32.dll	307	GetSystemInfo
KERNEL32.dll	219	GetDiskFreeSpaceA
KERNEL32.dll	223	GetDriveTypeA
KERNEL32.dll	274	GetPrivateProfileStringA
KERNEL32.dll	337	GetWindowsDirectoryA
KERNEL32.dll	42	CreateDirectoryA
KERNEL32.dll	37	CopyFileA
KERNEL32.dll	377	InitializeCriticalSection
KERNEL32.dll	76	DeleteCriticalSection
KERNEL32.dll	88	EnterCriticalSection
KERNEL32.dll	399	LeaveCriticalSection
KERNEL32.dll	485	RtlUnwind
KERNEL32.dll	366	HeapFree
KERNEL32.dll	244	GetLastError
KERNEL32.dll	120	FileTimeToSystemTime
KERNEL32.dll	119	FileTimeToLocalFileTime
KERNEL32.dll	107	ExitProcess
KERNEL32.dll	582	TerminateProcess
KERNEL32.dll	211	GetCurrentProcess
KERNEL32.dll	422	MoveFileA
KERNEL32.dll	170	GetCommandLineA
KERNEL32.dll	278	GetProcAddress
KERNEL32.dll	254	GetModuleHandleA
KERNEL32.dll	332	GetVersion
KERNEL32.dll	360	HeapAlloc
KERNEL32.dll	24	CloseHandle
KERNEL32.dll	635	WriteFile
KERNEL32.dll	470	ReadFile
KERNEL32.dll	537	SetFilePointer
KERNEL32.dll	539	SetHandleCount
KERNEL32.dll	298	GetStdHandle
KERNEL32.dll	239	GetFileType
KERNEL32.dll	296	GetStartupInfoA
KERNEL32.dll	49	CreateFileA
KERNEL32.dll	214	GetCurrentThreadId
KERNEL32.dll	587	TlsSetValue
KERNEL32.dll	584	TlsAlloc
KERNEL32.dll	585	TlsFree
KERNEL32.dll	387	IsBadReadPtr
KERNEL32.dll	586	TlsGetValue
KERNEL32.dll	529	SetEnvironmentVariableA
KERNEL32.dll	606	VirtualFree
KERNEL32.dll	603	VirtualAlloc
KERNEL32.dll	240	GetFullPathNameA
KERNEL32.dll	209	GetCurrentDirectoryA
KERNEL32.dll	252	GetModuleFileNameA
KERNEL32.dll	163	GetCPInfo
KERNEL32.dll	157	GetACP
KERNEL32.dll	265	GetOEMCP
KERNEL32.dll	150	FreeEnvironmentStringsA
KERNEL32.dll	427	MultiByteToWideChar
KERNEL32.dll	151	FreeEnvironmentStringsW
KERNEL32.dll	225	GetEnvironmentStrings
KERNEL32.dll	227	GetEnvironmentStringsW
KERNEL32.dll	622	WideCharToMultiByte
KERNEL32.dll	142	FlushFileBuffers
KERNEL32.dll	553	SetStdHandle
KERNEL32.dll	528	SetEndOfFile
KERNEL32.dll	566	SetUnhandledExceptionFilter
KERNEL32.dll	61	CreateProcessA
KERNEL32.dll	390	IsBadWritePtr
KERNEL32.dll	384	IsBadCodePtr
KERNEL32.dll	397	LCMapStringA
KERNEL32.dll	398	LCMapStringW
KERNEL32.dll	328	GetTimeZoneInformation
KERNEL32.dll	379	InterlockedDecrement
KERNEL32.dll	382	InterlockedIncrement
KERNEL32.dll	232	GetFileAttributesA
KERNEL32.dll	230	GetExitCodeProcess
KERNEL32.dll	618	WaitForSingleObject
KERNEL32.dll	400	LoadLibraryA
KERNEL32.dll	299	GetStringTypeA
KERNEL32.dll	302	GetStringTypeW
KERNEL32.dll	246	GetLocaleInfoA
KERNEL32.dll	247	GetLocaleInfoW
KERNEL32.dll	30	CompareStringA
KERNEL32.dll	31	CompareStringW

ord	entry_va	function_name
1	0x2525	ApplyAppVersion
2	0x2eba	Copy_Directory
3	0x2873	Copy_File
4	0x2bec	Delete_File
5	0x21b5	ExecProgram
6	0x2de8	Get_Install_Dir
7	0x2456	InitClientDll
8	0x2492	RenameFile
9	0x2429	RestartApp
10	0x226f	SavePatch
11	0x1000	compact
12	0x1208	decompact
13	0x1b08	file_list
14	0x214a	get_config
15	0x1eb4	hard_state
16	0x1683	is_file_exist
17	0x1fbb	version

module_name	client.dll
flags	0
timestamp	1997-08-22 17:15:27
version	0.0
ordinal_base	1
nFunctions	17
nNames	17
Names(17)	0x1815c
Functions(17)	0x18118
NameOrdinals(17)	0x181a0

show previews

offset	size	type	comment
0	120832	DLL	08/22/1997 17:15:27	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK