0690.dll - msi.dll - Windows Installer

info
MZ
PE
resources
imports
exports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	0690.dll
size	229129 (0x37f09)
md5	38d021475b582d9fcaf0ec12cef58c49

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
109	50727	25
125	50727	5
1	0	169
123	50727	17
122	50727	1
110	50727	22
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x46073942
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x9000
SizeOfInitializedData	0x38000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1005
BaseOfCode	0x1000
BaseOfData	0xa000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x42000
SizeOfHeaders	0x1000
CheckSum	0x2c38f
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x8320	0x9000	R-X CODE
.idata	0xa000	0x73c	0x1000	RW- IDATA
.3	0xb000	0x3eb	0x1000	RW- IDATA
.rdata	0xc000	0x37f4	0x4000	R-- IDATA
.data	0x10000	0x1f1d0	0x5000	RW- IDATA
.rsrc	0x30000	0x108e8	0x11000	R-- IDATA
.reloc	0x41000	0x493	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xf4e0	0x1b8
IMPORT	0xa000	0x64
RESOURCE	0x30000	0x108e8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x41000	0x208
DEBUG	0xc000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xa1c4	0x160
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
TYPELIB	#1	35932
ICON	#1	744
ICON	#2	296
ICON	#3	1640
ICON	#4	2216
ICON	#5	3752
ICON	#6	1384
ICON	#7	1640
ICON	#8	1384
ICON	#9	2216
ICON	#10	3752
ICON	#11	296
ICON	#12	744
ICON	#13	296
ICON	#14	1384
ICON	#15	744
ICON	#16	2216
DIALOG	#101	330
DIALOG	#103	190
DIALOG	#104	222
DIALOG	#105	190
DIALOG	#110	302
DIALOG	#111	162
DIALOG	#112	330
DIALOG	#113	190
DIALOG	#114	222
DIALOG	#115	302
DIALOG	#116	162
DIALOG	#117	330
DIALOG	#119	392
DIALOG	#120	190
DIALOG	#121	218
DIALOG	#122	218
GROUP_ICON	#201	90
GROUP_ICON	#202	90
GROUP_ICON	#203	62
VERSION	#1	816
#240	IDD_DIALOG1	62

module_name	hint	function_name
KERNEL32.dll	612	MultiByteToWideChar
KERNEL32.dll	432	GetStringTypeExA
KERNEL32.dll	552	IsDBCSLeadByte
KERNEL32.dll	433	GetStringTypeExW
KERNEL32.dll	787	SetLastError
KERNEL32.dll	845	TlsGetValue
KERNEL32.dll	257	GetCalendarInfoW
KERNEL32.dll	256	GetCalendarInfoA
KERNEL32.dll	843	TlsAlloc
KERNEL32.dll	137	DisableThreadLibraryCalls
KERNEL32.dll	844	TlsFree
KERNEL32.dll	240	FreeLibrary
KERNEL32.dll	347	GetFileSize
KERNEL32.dll	765	SetEndOfFile
KERNEL32.dll	439	GetSystemDirectoryW
KERNEL32.dll	457	GetTempPathW
KERNEL32.dll	345	GetFileAttributesW
KERNEL32.dll	74	CreateDirectoryW
KERNEL32.dll	936	lstrcmpW
KERNEL32.dll	846	TlsSetValue
KERNEL32.dll	230	FlushFileBuffers
USER32.dll	371	GetWindowModuleFileNameA
USER32.dll	7	AnyPopup
USER32.dll	645	SetWindowPos
USER32.dll	357	GetTopWindow
ADVAPI32.dll	426	OpenProcessToken
ADVAPI32.dll	216	EqualSid
ADVAPI32.dll	225	FreeSid
ADVAPI32.dll	484	RegOpenKeyExW
ADVAPI32.dll	463	RegCreateKeyExW
ADVAPI32.dll	462	RegCreateKeyExA
ADVAPI32.dll	506	RegSetValueExA
ADVAPI32.dll	29	AllocateAndInitializeSid
ADVAPI32.dll	493	RegQueryValueExA
ADVAPI32.dll	467	RegDeleteValueA
ADVAPI32.dll	468	RegDeleteValueW
ADVAPI32.dll	281	GetTokenInformation
msvcrt.dll	1190	free

ord	entry_va	function_name
1	0x1023	OfInUpdateIncorporateVersions
2	0x1032	TechnologiesInterfacesMayIncluded
3	0x107d	ToMechanismIt

module_name	a.dll
flags	0
timestamp	2007-03-26 03:08:50
version	0.0
ordinal_base	1
nFunctions	3
nNames	3
Names(3)	0xf514
Functions(3)	0xf508
NameOrdinals(3)	0xf520

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Windows Installer
FileVersion	4.0.6001.18000
InternalName	msi
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	msi.dll
ProductName	Windows Installer - Unicode
ProductVersion	4.0.6001.18000

VS_FIXEDFILEINFO

FileVersion	4.0.6001.18000
ProductVersion	4.0.6001.18000
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	8
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	159744	DLL	03/26/2007 03:08:50	#
15c1	15	HTM		#
27000	69385	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 229129 bytes (224 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

0690.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

0690.dll
-