filenameIssProc.dll
size976786 (0xee792)
md587e1a4947e7e93d1fad095ab91b20d70
typePE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x4d9d6a2b
PointerToSymbolTable0xe0400
NumberOfSymbols0x93d
SizeOfOptionalHeader0xe0
Characteristics0x2306
Magic0x10b
LinkerVersion2.56
SizeOfCode0xc000
SizeOfInitializedData0xe0000
SizeOfUninitializedData0x7a00
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0xd000
ImageBase0x6b700000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xec000
SizeOfHeaders0x400
CheckSum0xf0b9e
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000xbf340xc000R-X CODE IDATA
.data0xd0000x4900x600RW- IDATA
.rdata0xe0000xc5c0xe00R-- IDATA
.bss0xf0000x78900RW- UDATA
.edata0x170000x2360x400R-- IDATA
.idata0x180000x13680x1400RW- IDATA
.rsrc0x1a0000xd03780xd0400RW- IDATA
.reloc0xeb0000xe300x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x170000x236
IMPORT0x180000x1368
RESOURCE0x1a0000xd0378
EXCEPTION00
SECURITY00
BASERELOC0xeb0000xe30
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
MFILES#30023072000
MFILESDRV#300239680
X64#30015304320
BITMAP#10134580
ICON#12960
ICON#213840
ICON#37440
ICON#422160
DIALOG#50011440
DIALOG#5012600
GROUP_ICONIDI_LOADINGICO620
VERSION#18320
module_namehintordfunction_name
ADVAPI32.DLL25AdjustTokenPrivileges
ADVAPI32.DLL235GetTokenInformation
ADVAPI32.DLL278LookupPrivilegeValueA
ADVAPI32.DLL357OpenProcessToken
ADVAPI32.DLL453SetEntriesInAclA
ADVAPI32.DLL472SetSecurityInfo
COMCTL32.DLL59ImageList_Create
COMCTL32.DLL60ImageList_Destroy
COMCTL32.DLL84ImageList_ReplaceIcon
COMCTL32.DLL92InitCommonControlsEx
GDI32.dll46CreateFontIndirectA
GDI32.dll72DeleteObject
GDI32.dll182GetObjectA
GDI32.dll198GetStockObject
GDI32.dll277SelectObject
GDI32.dll284SetBkMode
KERNEL32.dll1AddAtomA
KERNEL32.dll38CloseHandle
KERNEL32.dll64CreateEventA
KERNEL32.dll68CreateFileA
KERNEL32.dll71CreateFileW
KERNEL32.dll85CreateProcessW
KERNEL32.dll87CreateSemaphoreA
KERNEL32.dll93CreateToolhelp32Snapshot
KERNEL32.dll108DeleteFileA
KERNEL32.dll109DeleteFileW
KERNEL32.dll122DuplicateHandle
KERNEL32.dll175FindAtomA
KERNEL32.dll177FindClose
KERNEL32.dll181FindFirstFileA
KERNEL32.dll184FindFirstFileW
KERNEL32.dll196FindResourceA
KERNEL32.dll213FreeLibrary
KERNEL32.dll220GetAtomNameA
KERNEL32.dll281GetCurrentProcess
KERNEL32.dll311GetFileSize
KERNEL32.dll323GetLastError
KERNEL32.dll331GetLongPathNameW
KERNEL32.dll333GetModuleFileNameA
KERNEL32.dll334GetModuleFileNameW
KERNEL32.dll335GetModuleHandleA
KERNEL32.dll351GetPriorityClass
KERNEL32.dll359GetPrivateProfileStringW
KERNEL32.dll362GetProcAddress
KERNEL32.dll365GetProcessHeap
KERNEL32.dll412GetTempPathA
KERNEL32.dll413GetTempPathW
KERNEL32.dll471HeapAlloc
KERNEL32.dll477HeapFree
KERNEL32.dll481HeapReAlloc
KERNEL32.dll494InterlockedDecrement
KERNEL32.dll498InterlockedIncrement
KERNEL32.dll522LoadLibraryA
KERNEL32.dll527LoadResource
KERNEL32.dll532LocalFree
KERNEL32.dll541LockResource
KERNEL32.dll548Module32FirstW
KERNEL32.dll550Module32NextW
KERNEL32.dll558MultiByteToWideChar
KERNEL32.dll569OpenProcess
KERNEL32.dll584Process32FirstW
KERNEL32.dll586Process32NextW
KERNEL32.dll613ReadFile
KERNEL32.dll626ReleaseSemaphore
KERNEL32.dll694SetEvent
KERNEL32.dll699SetFilePointer
KERNEL32.dll709SetLastError
KERNEL32.dll746SizeofResource
KERNEL32.dll747Sleep
KERNEL32.dll755TerminateProcess
KERNEL32.dll759TlsAlloc
KERNEL32.dll760TlsFree
KERNEL32.dll761TlsGetValue
KERNEL32.dll762TlsSetValue
KERNEL32.dll805WaitForSingleObject
KERNEL32.dll809WideCharToMultiByte
KERNEL32.dll822WriteFile
KERNEL32.dll865lstrlenW
msvcrt.dll36__dllonexit
msvcrt.dll111_assert
msvcrt.dll117_beginthreadex
msvcrt.dll152_errno
msvcrt.dll233_iob
msvcrt.dll524_wtoi
msvcrt.dll533abort
msvcrt.dll560fflush
msvcrt.dll569fprintf
msvcrt.dll575free
msvcrt.dll626malloc
msvcrt.dll628mbstowcs
msvcrt.dll632memcpy
msvcrt.dll634memset
msvcrt.dll659sprintf
msvcrt.dll662sscanf
msvcrt.dll663strcat
msvcrt.dll665strcmp
msvcrt.dll667strcpy
msvcrt.dll671strlen
msvcrt.dll676strrchr
msvcrt.dll684swprintf
msvcrt.dll685swscanf
msvcrt.dll692tolower
msvcrt.dll693toupper
msvcrt.dll694towlower
msvcrt.dll704wcscat
msvcrt.dll705wcschr
msvcrt.dll706wcscmp
msvcrt.dll708wcscpy
msvcrt.dll711wcslen
msvcrt.dll714wcsncpy
msvcrt.dll716wcsrchr
msvcrt.dll718wcsstr
SHELL32.DLL85SHGetFileInfoW
SHELL32.DLL144ShellExecuteExW
USER32.dll6AppendMenuA
USER32.dll7AppendMenuW
USER32.dll88CreatePopupMenu
USER32.dll89CreateWindowExA
USER32.dll126DefDlgProcA
USER32.dll133DefWindowProcA
USER32.dll146DialogBoxParamA
USER32.dll148DispatchMessageA
USER32.dll179EnableWindow
USER32.dll181EndDialog
USER32.dll204EnumWindows
USER32.dll217GetActiveWindow
USER32.dll246GetCursorPos
USER32.dll252GetDlgItem
USER32.dll292GetMessageA
USER32.dll303GetParent
USER32.dll324GetSystemMenu
USER32.dll325GetSystemMetrics
USER32.dll340GetWindowLongA
USER32.dll348GetWindowTextA
USER32.dll351GetWindowTextW
USER32.dll352GetWindowThreadProcessId
USER32.dll401LoadCursorA
USER32.dll405LoadIconA
USER32.dll407LoadImageA
USER32.dll430MessageBoxA
USER32.dll454OpenIcon
USER32.dll460PeekMessageA
USER32.dll464PostQuitMessage
USER32.dll473RegisterClassA
USER32.dll474RegisterClassExA
USER32.dll500SendMessageA
USER32.dll505SendMessageW
USER32.dll526SetForegroundWindow
USER32.dll555SetTimer
USER32.dll561SetWindowLongA
USER32.dll567SetWindowTextW
USER32.dll577ShowWindow
USER32.dll594TrackPopupMenu
USER32.dll600TranslateMessage
USER32.dll607UnregisterClassA
VERSION.dll2GetFileVersionInfoSizeW
VERSION.dll3GetFileVersionInfoW
VERSION.dll13VerQueryValueW
ordentry_vafunction_name
10x1560IssEnableAnyFileInUseCheck
20x1560IssEnableAnyFileInUseCheck@4
30x14f0IssEnableAnyFileInUseCheckW
40x14f0IssEnableAnyFileInUseCheckW@4
50x1880IssFindModule
60x1880IssFindModule@20
70x1600IssFindModuleW
80x1600IssFindModuleW@20
90x1230IssRegister
100x1230IssRegister@8
module_nameIssProc.dll
flags0
timestamp2011-04-07 07:39:23
version0.0
ordinal_base1
nFunctions10
nNames10
Names(10)0x1705c
Functions(10)0x17034
NameOrdinals(10)0x17084

StringTable 040904E4

CompanyNamerlByte Software Development (http://rlbyte.com)
FileVersion1.1.4
FileDescriptionFiles-In-Use Extension For Inno Setup
InternalNameIssProc
LegalCopyrightrlByte Software Development
LegalTrademarks
OriginalFilename
ProductNameIssProcess
ProductVersion

VS_FIXEDFILEINFO

FileVersion1.1.4.767
ProductVersion1.1.4.767
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0
FileType2
FileSubtype0
offsetsizetypecomment
0918528DLL04/07/2011 07:39:23#
15c115HTM#
e040058258BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK