filenameAPLAYEXT.DLL
size25088 (0x6200)
md596ba01334dfffc60945cdd1b47e12f73
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xa
TimeDateStamp0x3027dcbd
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion2.50
SizeOfCode0x2c00
SizeOfInitializedData0x3200
SizeOfUninitializedData0x200
AddressOfEntryPoint0x2533
BaseOfCode0x1000
BaseOfData0x4000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x1000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x2a4a0x2c00R-X CODE
.bss0x40000x1340RW- UDATA
.sdata0x500040x200RW- IDATA SHARED
.rdata0x60000x5440x600R-- IDATA
.data0x70000xff0x200RW- IDATA
.idata0x80000xab40xc00RW- IDATA
.CRT0x900040x200RW- IDATA
.edata0xa0000xbe0x200R-- IDATA
.rsrc0xb0000x10d80x1200R-- IDATA
.reloc0xd0000x47c0x600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xa0000xbe
IMPORT0x80000xab4
RESOURCE0xb0000x10d8
EXCEPTION00
SECURITY00
BASERELOC0xd0000x364
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
MENU#110480
DIALOG#1041060
DIALOG#1055420
DIALOG#1062620
DIALOG#1099480
STRING#17480
GROUP_ICON#103340
idlangstring
11033AutoPlay Extender
41033AutoPlay Extender could not find a Setup program on the CD.
51033#Shortcuts#*.lnk;*.pif#
61033Add AutoPlay Shortcut
71033Add
81033Close
91033There are no components to add; you may only uninstall AutoPlay Extender at this time. Do you want to uninstall now?
111033AutoPlay Extender must be running to detect when a new CD-ROM is inserted.
121033AutoPlay Extender is currently running.
module_namehintordfunction_name
KERNEL32.dll84DeleteCriticalSection
KERNEL32.dll342GlobalFree
KERNEL32.dll399LocalAlloc
KERNEL32.dll403LocalFree
KERNEL32.dll352GlobalUnlock
KERNEL32.dll346GlobalLock
KERNEL32.dll370InitializeCriticalSection
KERNEL32.dll290GetShortPathNameA
KERNEL32.dll239GetLastError
KERNEL32.dll226GetFileAttributesA
KERNEL32.dll392LeaveCriticalSection
KERNEL32.dll94EnterCriticalSection
KERNEL32.dll668lstrcmpiA
KERNEL32.dll677lstrlenA
KERNEL32.dll674lstrcpynA
KERNEL32.dll662lstrcatA
KERNEL32.dll247GetModuleFileNameA
KERNEL32.dll164FormatMessageA
KERNEL32.dll329GetVolumeInformationA
USER32.dll454SetDlgItemTextA
USER32.dll350LoadIconA
USER32.dll223GetDlgItemTextA
USER32.dll221GetDlgItem
USER32.dll169EndDialog
USER32.dll431SendMessageA
USER32.dll557wsprintfA
USER32.dll70CreateDialogParamA
USER32.dll185FillRect
USER32.dll527TranslateMessage
USER32.dll134DispatchMessageA
USER32.dll336IsWindow
USER32.dll128DestroyMenu
USER32.dll409RegisterClipboardFormatA
USER32.dll341KillTimer
USER32.dll226GetFocus
USER32.dll485SetTimer
USER32.dll264GetParent
USER32.dll80CreateWindowExA
USER32.dll276GetSysColorBrush
USER32.dll275GetSysColor
USER32.dll155DrawIconEx
USER32.dll159DrawTextA
USER32.dll512SystemParametersInfoA
USER32.dll310InsertMenuItemA
USER32.dll127DestroyIcon
USER32.dll420RemoveMenu
USER32.dll489SetWindowLongA
USER32.dll289GetWindowLongA
USER32.dll79CreatePopupMenu
USER32.dll278GetSystemMetrics
USER32.dll249GetMenuItemInfoA
USER32.dll132DialogBoxParamA
USER32.dll247GetMenuItemCount
USER32.dll255GetMessageA
USER32.dll360LoadStringA
USER32.dll329IsDialogMessageA
USER32.dll398PostMessageA
USER32.dll129DestroyWindow
USER32.dll167EnableWindow
USER32.dll194GetAsyncKeyState
USER32.dll42CharUpperA
USER32.dll216GetDC
USER32.dll274GetSubMenu
USER32.dll356LoadMenuA
USER32.dll419ReleaseDC
GDI32.dll70DeleteObject
GDI32.dll31CreateCompatibleDC
GDI32.dll262SelectObject
GDI32.dll199GetTextExtentPoint32A
GDI32.dll173GetObjectA
GDI32.dll44CreateFontIndirectA
GDI32.dll268SetBkColor
GDI32.dll67DeleteDC
GDI32.dll30CreateCompatibleBitmap
GDI32.dll301SetTextColor
comdlg32.dll5GetOpenFileNameA
comdlg32.dll2CommDlgExtendedError
ADVAPI32.dll157RegQueryValueExA
ADVAPI32.dll148RegOpenKeyA
ADVAPI32.dll133RegDeleteKeyA
ADVAPI32.dll126RegCloseKey
ADVAPI32.dll169RegSetValueExA
ADVAPI32.dll129RegCreateKeyA
SHELL32.dll62SHGetSpecialFolderLocation
SHELL32.dll28
SHELL32.dll25
SHELL32.dll155
SHELL32.dll53SHGetFileInfo
SHELL32.dll85ShellExecuteEx
SHELL32.dll79
SHELL32.dll102
SHELL32.dll183
SHELL32.dll175
SHELL32.dll37
SHELL32.dll84ShellExecuteA
SHELL32.dll2
SHELL32.dll59SHGetPathFromIDList
SHELL32.dll4
SHELL32.dll64
SHELL32.dll67
COMCTL32.dll334
COMCTL32.dll2CreatePropertySheetPage
COMCTL32.dll321
COMCTL32.dll326
COMCTL32.dll324
COMCTL32.dll328
COMCTL32.dll329
COMCTL32.dll234
COMCTL32.dll323
COMCTL32.dll332
COMCTL32.dll320
ordentry_vafunction_name
10x2533DllMain
20x2582DllCanUnloadNow
30x2613DllGetClassObject
40x259fUninstall
50x1258CDPlayNotify
60x1970NewCDWindow
module_nameAPlayExt.dll
flags0
timestamp1995-08-08 21:53:00
version0.0
ordinal_base1
nFunctions6
nNames6
Names(6)0xa040
Functions(6)0xa028
NameOrdinals(6)0xa058
offsetsizetypecomment
025088DLL08/08/1995 21:53:01#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK