filenameigfxtvcx.dll
size140288 (0x22400)
md5394b26364b21b65151153631ddebc0d5
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1492102222
13121022112
131307292
1473072911
10138
1322102259
146210221
148210221
145210221

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4aba6dcd
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x16c00
SizeOfInitializedData0xb400
SizeOfUninitializedData0
AddressOfEntryPoint0xa54b
BaseOfCode0x1000
BaseOfData0x18000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x28000
SizeOfHeaders0x400
CheckSum0x2355e
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x16a040x16c00R-X CODE
.rdata0x180000x46a50x4800R-- IDATA
.data0x1d0000x40b80x2400RW- IDATA
.rsrc0x220000x24540x2600R-- IDATA
.reloc0x250000x21fe0x2200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1c6000xa5
IMPORT0x1bbbc0x78
RESOURCE0x220000x2454
EXCEPTION00
SECURITY00
BASERELOC0x250000x161c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1a6d00x40
Bound_IAT00
IAT0x180000x1f0
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#1016321252
REGISTRY#1026561252
TYPELIB#164241252
STRING#7481252
VERSION#17321252
MANIFEST#23461252
idlangstring
1001033igfxtvcx
module_namehintordfunction_name
KERNEL32.dll530GetModuleHandleA
KERNEL32.dll1307lstrlenA
KERNEL32.dll1298lstrcmpiA
KERNEL32.dll221DisableThreadLibraryCalls
KERNEL32.dll749InterlockedIncrement
KERNEL32.dll745InterlockedDecrement
KERNEL32.dll528GetModuleFileNameA
KERNEL32.dll533GetModuleHandleW
KERNEL32.dll764IsDBCSLeadByte
KERNEL32.dll351FreeLibrary
KERNEL32.dll1152SizeofResource
KERNEL32.dll831LoadResource
KERNEL32.dll578GetProcAddress
KERNEL32.dll827LoadLibraryExA
KERNEL32.dll1301lstrcpyA
KERNEL32.dll513GetLocaleInfoA
KERNEL32.dll826LoadLibraryA
KERNEL32.dll673GetVersionExA
KERNEL32.dll717HeapFree
KERNEL32.dll583GetProcessHeap
KERNEL32.dll1266WriteConsoleW
KERNEL32.dll429GetConsoleOutputCP
KERNEL32.dll1256WriteConsoleA
KERNEL32.dll82CloseHandle
KERNEL32.dll511GetLastError
KERNEL32.dll208DeleteCriticalSection
KERNEL32.dll736InitializeCriticalSection
KERNEL32.dll823LeaveCriticalSection
KERNEL32.dll235EnterCriticalSection
KERNEL32.dll940RaiseException
KERNEL32.dll1308lstrlenW
KERNEL32.dll1248WideCharToMultiByte
KERNEL32.dll328FindResourceA
KERNEL32.dll869MultiByteToWideChar
KERNEL32.dll340FlushFileBuffers
KERNEL32.dll425GetConsoleMode
KERNEL32.dll407GetConsoleCP
KERNEL32.dll1111SetStdHandle
KERNEL32.dll1078SetFilePointer
KERNEL32.dll955ReadFile
KERNEL32.dll737InitializeCriticalSectionAndSpinCount
KERNEL32.dll614GetStringTypeW
KERNEL32.dll611GetStringTypeA
KERNEL32.dll631GetSystemTimeAsFileTime
KERNEL32.dll446GetCurrentProcessId
KERNEL32.dll657GetTickCount
KERNEL32.dll931QueryPerformanceCounter
KERNEL32.dll471GetEnvironmentStringsW
KERNEL32.dll713HeapAlloc
KERNEL32.dll1214VirtualProtect
KERNEL32.dll1208VirtualAlloc
KERNEL32.dll624GetSystemInfo
KERNEL32.dll1216VirtualQuery
KERNEL32.dll1000RtlUnwind
KERNEL32.dll450GetCurrentThreadId
KERNEL32.dll387GetCommandLineA
KERNEL32.dll367GetCPInfo
KERNEL32.dll357GetACP
KERNEL32.dll564GetOEMCP
KERNEL32.dll776IsValidCodePage
KERNEL32.dll1174TlsGetValue
KERNEL32.dll1172TlsAlloc
KERNEL32.dll1175TlsSetValue
KERNEL32.dll1173TlsFree
KERNEL32.dll1091SetLastError
KERNEL32.dll1167TerminateProcess
KERNEL32.dll445GetCurrentProcess
KERNEL32.dll1186UnhandledExceptionFilter
KERNEL32.dll1140SetUnhandledExceptionFilter
KERNEL32.dll766IsDebuggerPresent
KERNEL32.dll1211VirtualFree
KERNEL32.dll720HeapReAlloc
KERNEL32.dll715HeapCreate
KERNEL32.dll716HeapDestroy
KERNEL32.dll1153Sleep
KERNEL32.dll278ExitProcess
KERNEL32.dll1267WriteFile
KERNEL32.dll609GetStdHandle
KERNEL32.dll722HeapSize
KERNEL32.dll809LCMapStringA
KERNEL32.dll811LCMapStringW
KERNEL32.dll1087SetHandleCount
KERNEL32.dll496GetFileType
KERNEL32.dll607GetStartupInfoA
KERNEL32.dll349FreeEnvironmentStringsA
KERNEL32.dll469GetEnvironmentStrings
KERNEL32.dll350FreeEnvironmentStringsW
KERNEL32.dll136CreateFileA
USER32.dll49CharNextW
USER32.dll36ChangeDisplaySettingsExA
USER32.dll232EnumDisplaySettingsA
USER32.dll47CharNextA
ADVAPI32.dll590RegEnumKeyExA
ADVAPI32.dll615RegQueryInfoKeyA
ADVAPI32.dll637RegSetValueExA
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll568RegCreateKeyExA
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll583RegDeleteValueA
ADVAPI32.dll573RegDeleteKeyA
ADVAPI32.dll621RegQueryValueExA
ole32.dll103CoTaskMemAlloc
ole32.dll16CoCreateInstance
ole32.dll377StringFromGUID2
ole32.dll62CoInitialize
ole32.dll108CoUninitialize
ole32.dll105CoTaskMemRealloc
ole32.dll104CoTaskMemFree
OLEAUT32.dll9
OLEAUT32.dll149
OLEAUT32.dll150
OLEAUT32.dll162
OLEAUT32.dll277
OLEAUT32.dll163
OLEAUT32.dll186
OLEAUT32.dll161
OLEAUT32.dll2
OLEAUT32.dll6
OLEAUT32.dll7
ordentry_vafunction_name
10x19a2DllCanUnloadNow
20x4330DllGetClassObject
30x4797DllRegisterServer
40x47a6DllUnregisterServer
module_nameigfxtvcx.DLL
flags0
timestamp2009-09-23 18:49:49
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x1c638
Functions(4)0x1c628
NameOrdinals(4)0x1c648

StringTable 040904B0

CompanyName
FileDescriptionigfxtvcx Module
FileVersion1, 0, 0, 1
InternalNameigfxtvcx
LegalCopyrightCopyright 2005
OriginalFilenameigfxtvcx.DLL
ProductNameigfxtvcx Module
ProductVersion1, 0, 0, 1
OLESelfRegister

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0140288DLL09/23/2009 18:49:49#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK