{BC4C6753-5770-452A-865E-50D9FC71C73E}.pe - Gallant.dll

info
MZ
PE
resources
imports
exports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	{BC4C6753-5770-452A-865E-50D9FC71C73E}.pe
size	26158432 (0x18f2560)
md5	8e3f02f5ab39df26586ea5cd1525b7a4

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
10	8168	4
19	8022	34
1	0	132
19	8034	26
0	0	65
11	8168	2
6	1720	1
4	8168	3

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x49d995a2
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xa000
SizeOfInitializedData	0x10000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa283
BaseOfCode	0x1000
BaseOfData	0xb000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1b000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x937a	0xa000	R-X CODE
.rdata	0xb000	0xbad7	0xc000	R-- IDATA
.data	0x17000	0x6c0	0x1000	RW- IDATA
.rsrc	0x18000	0x598	0x1000	R-- IDATA
.reloc	0x19000	0x16ae	0x2000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x16a70	0x67
IMPORT	0x15488	0x1b8
RESOURCE	0x18000	0x598
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x19000	0x14ec
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xb000	0x3a8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MENU	#19914	20
ACCELERATORS	#21910	32
ACCELERATORS	#21911	96
ACCELERATORS	#21912	64
VERSION	#1	876

module_name	hint	ord	function_name
SHLWAPI.dll	139		SHRegGetBoolUSValueA
SHLWAPI.dll	191		StrSpnW
SHLWAPI.dll	34		PathFindNextComponentW
SHLWAPI.dll	126		SHQueryValueExA
SHLWAPI.dll	143		SHRegOpenUSKeyA
SHLWAPI.dll	148		SHRegQueryUSValueW
SHLWAPI.dll	89		PathRenameExtensionA
SHLWAPI.dll	102		PathUnmakeSystemFolderW
SHLWAPI.dll	136		SHRegEnumUSKeyW
SHLWAPI.dll	8		PathAddBackslashW
SHLWAPI.dll	140		SHRegGetBoolUSValueW
SHLWAPI.dll	49		PathIsPrefixA
SHLWAPI.dll	28		PathFileExistsW
SHLWAPI.dll	10		PathAddExtensionW
SHLWAPI.dll	152		SHRegWriteUSValueW
RPCRT4.dll	380		RpcServerUseAllProtseqs
RPCRT4.dll	348		RpcMgmtSetComTimeout
RPCRT4.dll	225		NdrPointerMemorySize
RPCRT4.dll	127		NdrConformantArrayFree
RPCRT4.dll	131		NdrConformantStringBufferSize
RPCRT4.dll	248		NdrServerInitializeMarshall
RPCRT4.dll	432		UuidIsNil
RPCRT4.dll	124		NdrComplexStructMemorySize
RPCRT4.dll	130		NdrConformantArrayUnmarshall
RPCRT4.dll	320		RpcEpRegisterNoReplaceA
RPCRT4.dll	272		NdrUserMarshalUnmarshall
RPCRT4.dll	192		NdrInterfacePointerMemorySize
RPCRT4.dll	357		RpcNetworkIsProtseqValidW
RPCRT4.dll	174		NdrFullPointerFree
RPCRT4.dll	135		NdrConformantStructBufferSize
RPCRT4.dll	250		NdrServerInitializePartial
RPCRT4.dll	136		NdrConformantStructFree
RPCRT4.dll	306		RpcBindingSetAuthInfoA
RPCRT4.dll	420		RpcStringFreeA
RPCRT4.dll	195		NdrMapCommAndFaultStatus
RPCRT4.dll	323		RpcEpResolveBinding
RPCRT4.dll	177		NdrFullPointerQueryRefId
RPCRT4.dll	262		NdrStubCall2
RPCRT4.dll	437		data_from_ndr
RPCRT4.dll	206		NdrNonConformantStringMemorySize
RPCRT4.dll	239		NdrRpcSsEnableAllocate
MPR.dll	29		WNetEnumResourceW
MPR.dll	44		WNetGetLastErrorA
MPR.dll	12		WNetCancelConnection2A
MPR.dll	6		WNetAddConnection2A
urlmon.dll	62		URLDownloadToFileA
urlmon.dll	40		HlinkNavigateString
urlmon.dll	67		URLOpenPullStreamA
urlmon.dll	44		IsLoggingEnabledA
urlmon.dll	42		HlinkSimpleNavigateToString
urlmon.dll	47		MkParseDisplayNameEx
urlmon.dll	52		RegisterFormatEnumerator
ole32.dll	36		CoGetObject
ole32.dll	126		HBITMAP_UserSize
ole32.dll	13		CoCreateInstance
ole32.dll	136		HGLOBAL_UserFree
ole32.dll	28		CoGetClassObject
ole32.dll	53		CoLockObjectExternal
ole32.dll	153		HPALETTE_UserMarshal
ole32.dll	170		MonikerRelativePathTo
ole32.dll	6		CLSIDFromString
ole32.dll	18		CoFileTimeNow
ole32.dll	86		CoUnmarshalInterface
KERNEL32.dll	192		GetCPInfoExA
IMAGEHLP.dll	1		BindImageEx
IMAGEHLP.dll	2		CheckSumMappedFile
IMAGEHLP.dll	13		ImageAddCertificate
SHELL32.dll	55		SHAppBarMessage
SHELL32.dll	72		SHGetFileInfoA
VERSION.dll			GetFileVersionInfoA
WINSPOOL.DRV	32		ConfigurePortW
WINSPOOL.DRV	41		DeleteMonitorA
WINSPOOL.DRV	45		DeletePrintProcessorA
WINSPOOL.DRV	33		ConnectToPrinterDlg
WINSPOOL.DRV	100		FindClosePrinterChangeNotification
WINSPOOL.DRV	54		DeletePrinterDataExW
WINSPOOL.DRV	110		GetPrinterA
WINSPOOL.DRV	90		EnumPrinterDataExA
WINSPOOL.DRV	107		GetJobW
WINSPOOL.DRV	153		SetPrinterDataExW
WINSPOOL.DRV	117		GetPrinterDriverDirectoryW
WINSPOOL.DRV	5		AddJobW
WINSPOOL.DRV	91		EnumPrinterDataExW
WINSPOOL.DRV	97		EnumPrintersA
WINSPOOL.DRV	7		AddMonitorW
WINSPOOL.DRV	168		WritePrinter
WINSPOOL.DRV	42		DeleteMonitorW
WINSPOOL.DRV	59		DeletePrinterDriverW
WINSPOOL.DRV	154		SetPrinterDataW
WINSPOOL.DRV	132		PrinterProperties
WINSPOOL.DRV	17		AddPrinterConnectionA
WINSPOOL.DRV	78		EnumFormsW
WINSPOOL.DRV	57		DeletePrinterDriverExA
WINSPOOL.DRV	79		EnumJobsA
OLEAUT32.dll		215
OLEAUT32.dll		226
OLEAUT32.dll		130
OLEAUT32.dll		229
OLEAUT32.dll		66
OLEAUT32.dll		264
OLEAUT32.dll		242
OLEAUT32.dll		21
OLEAUT32.dll		255
OLEAUT32.dll		251
OLEAUT32.dll		266
OLEAUT32.dll		245
OLEAUT32.dll		63
OLEAUT32.dll		210
OLEAUT32.dll		7
OLEAUT32.dll		164
OLEAUT32.dll		122
OLEAUT32.dll		134
OLEAUT32.dll		110
OLEAUT32.dll		2
OLEAUT32.dll		70
OLEAUT32.dll		414
OLEAUT32.dll		40
OLEAUT32.dll		81
OLEAUT32.dll		237
OLEAUT32.dll		184
OLEAUT32.dll		6
OLEAUT32.dll		91
OLEAUT32.dll		191
OLEAUT32.dll		227
OLEAUT32.dll		189
OLEAUT32.dll		148
USER32.dll	631		ToAscii
USER32.dll	574		SetParent
USER32.dll	125		DdeUninitialize
USER32.dll	552		SetCursorPos
USER32.dll	55		ChildWindowFromPoint
USER32.dll	36		CharLowerW
USER32.dll	322		GetSubMenu
USER32.dll	38		CharNextExA
USER32.dll	532		SendMessageA
USER32.dll	73		CreateCursor
USER32.dll	147		DialogBoxParamA
USER32.dll	42		CharPrevW
USER32.dll	416		LoadImageA
USER32.dll	582		SetScrollInfo
USER32.dll	375		InsertMenuW
pdh.dll	69		PdhUpdateLogA
pdh.dll	55		PdhOpenLogW
pdh.dll	12		PdhConnectMachineW
pdh.dll	19		PdhEnumObjectItemsA
pdh.dll	40		PdhGetRawCounterArrayA
pdh.dll	39		PdhGetLogFileSize
pdh.dll	27		PdhGetCounterInfoW
pdh.dll	57		PdhOpenQueryA
WININET.dll	150		SetUrlCacheEntryGroup
WININET.dll	59		GopherGetAttributeA
WININET.dll	120		InternetReadFileExA
WININET.dll	67		HttpEndRequestA
WININET.dll	86		InternetCloseHandle
WININET.dll	18		FindFirstUrlCacheEntryExW
COMCTL32.dll	42		ImageList_Duplicate
COMCTL32.dll	20		FlatSB_GetScrollProp
COMCTL32.dll	2		CreatePropertySheetPageA
COMCTL32.dll		14
COMCTL32.dll	3		CreatePropertySheetPageW
COMCTL32.dll	32		ImageList_Copy
COMCTL32.dll	53		ImageList_LoadImageW
COMCTL32.dll	56		ImageList_Remove
COMCTL32.dll	60		ImageList_SetDragCursorImage
OLEACC.dll	10		GetStateTextW
OLEACC.dll	8		GetRoleTextW
ADVAPI32.dll	316		ObjectPrivilegeAuditAlarmA
ADVAPI32.dll	264		LsaEnumerateTrustedDomains
ADVAPI32.dll	373		RegOverridePredefKey
ADVAPI32.dll	436		StartServiceCtrlDispatcherW
ADVAPI32.dll	362		RegEnumValueA
ADVAPI32.dll	355		RegDeleteKeyW
ADVAPI32.dll	196		GetServiceDisplayNameW
ADVAPI32.dll	369		RegOpenKeyA
ADVAPI32.dll	340		QueryServiceObjectSecurity
ADVAPI32.dll	319		OpenBackupEventLogW
ADVAPI32.dll	370		RegOpenKeyExA
ADVAPI32.dll	389		RegSetValueA
MSVCRT.dll	606		free
MSVCRT.dll	271		_initterm
MSVCRT.dll	657		malloc
MSVCRT.dll	157		_adjust_fdiv
CLUSAPI.dll	85		RemoveClusterResourceDependency
CLUSAPI.dll	14		ClusterGroupControl
CLUSAPI.dll	83		PauseClusterNode
CLUSAPI.dll	82		OpenClusterResource
CLUSAPI.dll	27		ClusterRegCloseKey
CLUSAPI.dll	70		GetClusterResourceState
CLUSAPI.dll	49		DeleteClusterResource
CLUSAPI.dll	30		ClusterRegDeleteValue
CLUSAPI.dll	92		SetClusterNetworkPriorityOrder
CLUSAPI.dll	20		ClusterNetworkEnum
CLUSAPI.dll	21		ClusterNetworkOpenEnum
CLUSAPI.dll	94		SetClusterResourceName
RESUTILS.dll	18		ResUtilGetDwordValue
RESUTILS.dll	10		ResUtilEnumResources
SETUPAPI.dll	72		SetupDefaultQueueCallbackA
SETUPAPI.dll	288		SetupQueueDeleteA
SETUPAPI.dll	95		SetupDiCreateDeviceInfoA
SETUPAPI.dll	285		SetupQueueCopyW
SETUPAPI.dll	169		SetupDiInstallDeviceInterfaces
SETUPAPI.dll	311		SetupSetDirectoryIdA
SETUPAPI.dll	192		SetupDiSetDeviceInstallParamsW
SETUPAPI.dll	178		SetupDiOpenDeviceInfoW
SETUPAPI.dll	194		SetupDiSetDeviceRegistryPropertyW
SETUPAPI.dll	108		SetupDiDestroyClassImageList
SETUPAPI.dll	122		SetupDiGetClassDescriptionW
SETUPAPI.dll	177		SetupDiOpenDeviceInfoA
SETUPAPI.dll	88		SetupDiClassGuidsFromNameW
SETUPAPI.dll	92		SetupDiClassNameFromGuidW
SETUPAPI.dll	300		SetupRemoveFromSourceListA
SETUPAPI.dll	270		SetupQueryDrivesInDiskSpaceListA
SETUPAPI.dll	94		SetupDiCreateDevRegKeyW

ord	entry_va	function_name
1	0x13d0	NzX5dJ3fHpNjHpVv
2	0x6d80	s20Z67E

module_name	rLtV7jLtV7jHZ.dll
flags	0
timestamp	2009-04-06 05:39:46
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0x16aa0
Functions(2)	0x16a98
NameOrdinals(2)	0x16aa8

StringTable 000004b0

Comments
CompanyName	Atomix Productions
FileDescription	Fetes
FileVersion	222, 200, 161, 207
InternalName	Disciplinarians
LegalCopyright	Copyright © 2011
LegalTrademarks
OriginalFilename	Gallant.dll
PrivateBuild
ProductName	Deactivated Dispensation
ProductVersion	26, 195, 156, 225
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	0.117.165.164
ProductVersion	0.141.64.63
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	110592	DLL	04/06/2009 05:39:46	#
15c1	15	HTM		#
1b000	26047840	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 26158432 bytes (25 MiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] invalid VS_VERSIONINFO child type "P\x003\x00D\x00"

{BC4C6753-5770-452A-865E-50D9FC71C73E}.pe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

{BC4C6753-5770-452A-865E-50D9FC71C73E}.pe
-