filenameADVPACK.DLL
size91136 (0x16400)
md584f97568ea488bdfa0199a14ecd0bc7b
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
10142
25921015
6492106
6392101
6991111
28917827
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3d6e2bf3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.0
SizeOfCode0x12200
SizeOfInitializedData0x10c00
SizeOfUninitializedData0
AddressOfEntryPoint0x48c5
BaseOfCode0x1000
BaseOfData0x14000
ImageBase0x715f0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x27000
SizeOfHeaders0x400
CheckSum0x1c7a4
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++

Sections

namevavsizeraw sizeflags
.text0x10000x120440x12200R-X CODE
.data0x140000xd26c0x600RW- IDATA
.rsrc0x220000x21b00x2200R-- IDATA
.reloc0x250000x15ec0x1600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x12cd00x374
IMPORT0x120240xa0
RESOURCE0x220000x21b0
EXCEPTION00
SECURITY00
BASERELOC0x250000x1218
DEBUG0x12500x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x250
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#11624800
DIALOG#20003180
STRING#634860
STRING#694420
STRING#7010760
STRING#7111580
STRING#7212160
STRING#7318200
STRING#741900
VERSION#18400
idlangstring
10001033Please select a folder to store the extracted files.
10011033The folder '%1' does not exist. Do you want to create it?
10021033%1
10041033You must restart your computer before the new settings will take effect. Do you want to restart your computer now?
11001033A required resource cannot be located.
11011033Unable to retrieve operating system version information.
11021033Memory allocation request failed.
11031033That folder is invalid. Please make sure the directory exists and is writable.
11041033You must specify a folder with full pathname or choose Cancel.
11051033Could not update folder edit box.
11061033Could not load functions required for browser dialog.
11071033Could not load Shell32.dll required for browser dialog.
11081033Windows 95 or Windows NT 4.0 is required for this installation.
11091033Error loading %1
11101033Error getting procedure address
11111033Windows 95 or Windows NT is required to install
11121033Could not create folder '%1'
11131033Error setting an LDID to '%1'
11141033INF Install failure. Reason: %1
11151033INF Install failure. Reason: %1
11171033Incorrect INF file syntax in section '%1'
11211033User cancelled installation.
11221033Error generating short name
11231033Error registering the OCX %1
11241033Error adding runonce entry to register OCX %1 on next boot
11251033Invalid registry root key specified in INF installation file
11261033Error retrieving Windows folder
11301033To install this package, you need %1 KB disk space on this drive. It is recommended that you free up the required disk space before you continue. Do you still want to continue?
11321033Failed to get disk space information from: %1.
11331033Error unregistering the OCX %1
11341033NT Shutdown: OpenProcessToken error.
11351033NT Shutdown: AdjustTokenPrivileges error.
11361033NT Shutdown: ExitWindowsEx error.
11371033Incorrect arguments for LaunchINFSection(). Syntax: rundll32 advpack.dll,LaunchINFSection <INF Filename (required)>,<Install Section (optional)>
11381033Incorrect arguments for RegisterOCX(). Syntax: rundll32 advpack.dll,RegisterOCX <OCX Filename (required)>
11401033Error getting full path of '%1'.
11421033Error creating process <%1>. Reason: %2
11431033Failed to get drive volume information from: %1.
11441033Error: the custom directory value is too big.
11451033Error: could not locate INF file '%1'.
11491033You must give the full path of file: %1 when calling LaunchINFSectionEx() function.
11511033Invalid root key: %1
11521033A valid separator character could not be found.
11531033Could not set the following registry value: %1
11541033Could not query the following registry value: %1
11551033The file %1 was not backed up properly. Do you want to continue? If you choose to continue, you will not be able to uninstall later.
11561033The backup file to save uninstall information could not initialize. Do you want to continue? If you choose to continue, you will not be able to uninstall later.
11571033The backup file to restore the files could not initialize. Setup will not continue.
11581033The file %1 could not be restored. Error code:%2 Do you want to continue without restoring this file?
11591033The file %1 could not be restored. Do you want to continue without restoring this file?
11601033File Backup
11611033File Restore
11661033You do not have administrator privileges on this machine. This installation cannot be completed correctly unless it is run by an administrator.
11671033Advanced INF Installer
11681033Could not retrieve the system message. You may run out of the system resource.
module_namehintordfunction_name
ntdll.dll833RtlUnwind
USER32.dll85CreateDialogParamA
USER32.dll699UpdateWindow
USER32.dll153DestroyWindow
USER32.dll658ShowWindow
USER32.dll427IsWindow
USER32.dll494OemToCharA
USER32.dll158DialogBoxParamA
USER32.dll595SetDlgItemTextA
USER32.dll275GetDlgItemTextA
USER32.dll270GetDesktopWindow
USER32.dll646SetWindowTextA
USER32.dll273GetDlgItem
USER32.dll196EnableWindow
USER32.dll198EndDialog
USER32.dll225ExitWindowsEx
USER32.dll48CharToOemA
USER32.dll475MessageBeep
USER32.dll476MessageBoxA
USER32.dll566SendDlgItemMessageA
USER32.dll349GetSystemMetrics
USER32.dll52CharUpperA
USER32.dll509PeekMessageA
USER32.dll490MsgWaitForMultipleObjects
USER32.dll161DispatchMessageA
USER32.dll45CharPrevA
USER32.dll372GetWindowRect
USER32.dll268GetDC
USER32.dll554ReleaseDC
USER32.dll643SetWindowPos
USER32.dll571SendMessageA
USER32.dll456LoadStringA
USER32.dll728wsprintfA
USER32.dll42CharNextA
GDI32.dll421GetStockObject
GDI32.dll405GetObjectA
GDI32.dll58CreateFontIndirectA
GDI32.dll363GetDeviceCaps
GDI32.dll143DeleteObject
KERNEL32.dll668ReadFile
KERNEL32.dll903WritePrivateProfileSectionA
KERNEL32.dll416GetProfileStringA
KERNEL32.dll342GetFileTime
KERNEL32.dll346GetFullPathNameA
KERNEL32.dll433GetSystemInfo
KERNEL32.dll705SearchPathA
KERNEL32.dll390GetPrivateProfileIntA
KERNEL32.dll771SetFileTime
KERNEL32.dll154EnumResourceLanguagesA
KERNEL32.dll604MulDiv
KERNEL32.dll318GetDiskFreeSpaceA
KERNEL32.dll355GetLocalTime
KERNEL32.dll400GetProcAddress
KERNEL32.dll353GetLastError
KERNEL32.dll934lstrcpyA
KERNEL32.dll324GetDriveTypeA
KERNEL32.dll937lstrcpynA
KERNEL32.dll940lstrlenA
KERNEL32.dll329GetEnvironmentVariableA
KERNEL32.dll47CloseHandle
KERNEL32.dll900WriteFile
KERNEL32.dll77CreateFileA
KERNEL32.dll905WritePrivateProfileStringA
KERNEL32.dll589LockResource
KERNEL32.dll575LoadResource
KERNEL32.dll822SizeofResource
KERNEL32.dll216FindResourceA
KERNEL32.dll447GetTempFileNameA
KERNEL32.dll478GetWindowsDirectoryA
KERNEL32.dll449GetTempPathA
KERNEL32.dll767SetFilePointer
KERNEL32.dll580LocalFree
KERNEL32.dll576LocalAlloc
KERNEL32.dll925lstrcatA
KERNEL32.dll364GetModuleFileNameA
KERNEL32.dll541IsBadReadPtr
KERNEL32.dll124DeleteFileA
KERNEL32.dll583LocalReAlloc
KERNEL32.dll928lstrcmpA
KERNEL32.dll396GetPrivateProfileStringA
KERNEL32.dll233FreeLibrary
KERNEL32.dll335GetFileAttributesA
KERNEL32.dll605MultiByteToWideChar
KERNEL32.dll468GetVersionExA
KERNEL32.dll920_llseek
KERNEL32.dll921_lopen
KERNEL32.dll340GetFileSize
KERNEL32.dll765SetFileAttributesA
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll96CreateProcessA
KERNEL32.dll392GetPrivateProfileSectionA
KERNEL32.dll61CopyFileA
KERNEL32.dll570LoadLibraryA
KERNEL32.dll571LoadLibraryExA
KERNEL32.dll851UnmapViewOfFile
KERNEL32.dll780SetLastError
KERNEL32.dll593MapViewOfFileEx
KERNEL32.dll78CreateFileMappingA
KERNEL32.dll683RemoveDirectoryA
KERNEL32.dll419GetShortPathNameA
KERNEL32.dll431GetSystemDirectoryA
KERNEL32.dll931lstrcmpiA
KERNEL32.dll228FormatMessageA
KERNEL32.dll545IsDBCSLeadByte
KERNEL32.dll178ExpandEnvironmentStringsA
KERNEL32.dll470GetVolumeInformationA
KERNEL32.dll599MoveFileExA
KERNEL32.dll598MoveFileA
KERNEL32.dll197FindClose
KERNEL32.dll210FindNextFileA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll308GetCurrentProcess
KERNEL32.dll918_lclose
ADVAPI32.dll468RegEnumKeyA
ADVAPI32.dll507RegUnLoadKeyA
ADVAPI32.dll476RegLoadKeyA
ADVAPI32.dll498RegSaveKeyA
ADVAPI32.dll474RegFlushKey
ADVAPI32.dll463RegDeleteKeyA
ADVAPI32.dll465RegDeleteValueA
ADVAPI32.dll279GetTokenInformation
ADVAPI32.dll214EqualSid
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll223FreeSid
ADVAPI32.dll472RegEnumValueA
ADVAPI32.dll424OpenProcessToken
ADVAPI32.dll331LookupPrivilegeValueA
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll503RegSetValueA
ADVAPI32.dll504RegSetValueExA
ADVAPI32.dll486RegQueryInfoKeyA
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll460RegCreateKeyExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll456RegCloseKey
ole32.dll274OleUninitialize
ole32.dll251OleInitialize
ole32.dll99CoTaskMemFree
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
ordentry_vafunction_name
10xffc5AddDelBackupEntry
20x3cdcAdvInstallFile
30xaa34CloseINFEngine
40x6e79DelNode
50x7033DelNodeRunDLL32
60x48c5DllMain
70x9ae1DoInfInstall
80xb2d7ExecuteCab
90xd6e4ExtractFiles
100xffafFileSaveMarkNotExist
110x10d87FileSaveRestore
120xc910FileSaveRestoreOnINF
130x55b7GetVersionFromFile
140x5522GetVersionFromFileEx
150xa44bIsNTAdmin
160x9b8fLaunchINFSection
170xc35aLaunchINFSectionEx
180x7609NeedReboot
190x75f0NeedRebootInit
200xa989OpenINFEngine
210xba06RebootCheckOnInstall
220x4718RegInstall
230xf01aRegRestoreAll
240xeaa9RegSaveRestore
250xc795RegSaveRestoreOnINF
260x7074RegisterOCX
270x9dd5RunSetupCommand
280xbad1SetPerUserSecValues
290x929eTranslateInfString
300xa943TranslateInfStringEx
310xbf1bUserInstStubWrapper
320xc12eUserUnInstStubWrapper
module_nameADVPACK.dll
flags0
timestamp2002-08-29 11:04:20
version0.0
ordinal_base1
nFunctions32
nNames32
Names(32)0x12d78
Functions(32)0x12cf8
NameOrdinals(32)0x12df8

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionADVPACK
FileVersion6.00.2800.1106
InternalNameADVPACK.DLL
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameADVPACK.DLL
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.00.2800.1106

VS_FIXEDFILEINFO

FileVersion6.0.2800.1106
ProductVersion6.0.2800.1106
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
091136DLL08/29/2002 14:13:07#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK