filenameInstallOptions.dll
size12288 (0x3000)
md54c7d97d0786ff08b20d0e8315b5fc3cb
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xc8

Rich Header

lib idversiontimes used
1061
93217911
4990441
617351
484471

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x401bf54b
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x1800
SizeOfInitializedData0x3600
SizeOfUninitializedData0
AddressOfEntryPoint0x270b
BaseOfCode0x1000
BaseOfData0x3000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x9000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x17fe0x1800R-X CODE
.rdata0x30000x7400x800R-- IDATA
.data0x40000x27d90x600RW- IDATA
.rsrc0x70000x980x200R-- IDATA
.reloc0x80000x39c0x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x36d00x70
IMPORT0x31080x78
RESOURCE0x70000x98
EXCEPTION00
SECURITY00
BASERELOC0x80000x2f8
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x108
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#101540
module_namehintordfunction_name
KERNEL32.dll398GetPrivateProfileIntA
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll404GetPrivateProfileStringA
KERNEL32.dll618MulDiv
KERNEL32.dll950lstrcmpiA
KERNEL32.dll944lstrcatA
KERNEL32.dll956lstrcpynA
KERNEL32.dll924WritePrivateProfileStringA
KERNEL32.dll959lstrlenA
KERNEL32.dll953lstrcpyA
KERNEL32.dll501GlobalFree
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll494GlobalAlloc
USER32.dll523PtInRect
USER32.dll473MapWindowPoints
USER32.dll272GetDlgCtrlID
USER32.dll445LoadIconA
USER32.dll447LoadImageA
USER32.dll441LoadCursorA
USER32.dll96CreateWindowExA
USER32.dll268GetDC
USER32.dll642SetWindowPos
USER32.dll372GetWindowRect
USER32.dll85CreateDialogParamA
USER32.dll657ShowWindow
USER32.dll273GetDlgItem
USER32.dll150DestroyIcon
USER32.dll153DestroyWindow
USER32.dll161DispatchMessageA
USER32.dll681TranslateMessage
USER32.dll314GetMessageA
USER32.dll417IsDialogMessageA
USER32.dll588SetCursor
USER32.dll188DrawTextA
USER32.dll366GetWindowLongA
USER32.dll179DrawFocusRect
USER32.dll27CallWindowProcA
USER32.dll513PostMessageA
USER32.dll478MessageBoxA
USER32.dll196EnableWindow
USER32.dll570SendMessageA
USER32.dll645SetWindowTextA
USER32.dll375GetWindowTextA
USER32.dll725wsprintfA
USER32.dll42CharNextA
USER32.dll639SetWindowLongA
GDI32.dll572SetTextColor
GDI32.dll45CreateCompatibleDC
GDI32.dll526SelectObject
GDI32.dll444GetTextMetricsA
GDI32.dll436GetTextExtentPoint32A
GDI32.dll140DeleteDC
GDI32.dll143DeleteObject
comdlg32.dll9GetOpenFileNameA
comdlg32.dll4CommDlgExtendedError
comdlg32.dll11GetSaveFileNameA
SHELL32.dll188SHGetPathFromIDListA
SHELL32.dll121SHBrowseForFolderA
SHELL32.dll167SHGetDesktopFolder
SHELL32.dll183SHGetMalloc
SHELL32.dll263ShellExecuteA
ordentry_vafunction_name
10x263edialog
20x268ainitDialog
30x26d1show
module_nameInstallOptions.dll
flags0
timestamp2004-01-31 18:34:51
version0.0
ordinal_base1
nFunctions3
nNames3
Names(3)0x3704
Functions(3)0x36f8
NameOrdinals(3)0x3710
offsetsizetypecomment
012288DLL01/31/2004 18:34:51#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK