filename | termmgr.dll | |
---|---|---|
size | 352768 (0x56200) | |
md5 | 9fc4d46f7bcad9ee8517171195917776 | |
type | PE32 executable (DLL) (console) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xe0 |
Rich Header
lib id | version | times used |
---|---|---|
131 | 30729 | 24 |
149 | 30729 | 7 |
1 | 0 | 221 |
147 | 30729 | 19 |
146 | 30729 | 1 |
132 | 30729 | 47 |
148 | 30729 | 1 |
145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x4c52c | 0x4c600 | R-X CODE | |
.data | 0x4e000 | 0x13b4 | 0x1400 | RW- IDATA | |
.rsrc | 0x50000 | 0x39e0 | 0x3a00 | R-- IDATA | |
.reloc | 0x54000 | 0x4a00 | 0x4a00 | R-- IDATA DISCARDABLE |
Data Directory
type | name | size | cp | |
---|---|---|---|---|
MUI | #1 | 232 | 0 | |
REGISTRY | IDR_TSTORAGEUNITAVI | 553 | 0 | |
REGISTRY | #102 | 559 | 0 | |
REGISTRY | #103 | 570 | 0 | |
REGISTRY | #104 | 585 | 0 | |
REGISTRY | #111 | 553 | 0 | |
REGISTRY | #112 | 515 | 0 | |
REGISTRY | #120 | 630 | 0 | |
REGISTRY | #130 | 631 | 0 | |
TYPELIB | #1 | 8268 | 0 | |
VERSION | #1 | 944 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
msvcrt.dll | 934 | _unlock | |
msvcrt.dll | 43 | void __cdecl operator delete[](void *) ??_V@YAXPAX@Z | |
msvcrt.dll | 115 | __CxxFrameHandler3 | |
msvcrt.dll | 764 | _purecall | |
msvcrt.dll | 1260 | memmove | |
msvcrt.dll | 1279 | realloc | |
msvcrt.dll | 1190 | free | |
msvcrt.dll | 41 | void * __cdecl operator new[](unsigned int) ??_U@YAPAXI@Z | |
msvcrt.dll | 1258 | memcpy | |
msvcrt.dll | 18 | void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z | |
msvcrt.dll | 404 | _ftol2 | |
msvcrt.dll | 974 | _vsnwprintf | |
msvcrt.dll | 1129 | _wtoi | |
msvcrt.dll | 1262 | memset | |
msvcrt.dll | 1246 | malloc | |
msvcrt.dll | 106 | _XcptFilter | |
msvcrt.dll | 469 | _initterm | |
msvcrt.dll | 345 | _except_handler4_common | |
msvcrt.dll | 968 | _vsnprintf | |
msvcrt.dll | 17 | public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ | |
msvcrt.dll | 747 | _onexit | |
msvcrt.dll | 578 | _lock | |
msvcrt.dll | 141 | __dllonexit | |
msvcrt.dll | 20 | void __cdecl operator delete(void *) ??3@YAXPAX@Z | |
msvcrt.dll | 55 | void __cdecl terminate(void) ?terminate@@YAXXZ | |
msvcrt.dll | 257 | _amsg_exit | |
ATL.DLL | 15 | ||
ATL.DLL | 23 | ||
ATL.DLL | 22 | ||
ATL.DLL | 18 | ||
ATL.DLL | 21 | ||
ATL.DLL | 16 | ||
ATL.DLL | 32 | ||
ATL.DLL | 30 | ||
ADVAPI32.dll | 622 | RegQueryValueExW | |
ADVAPI32.dll | 608 | RegOpenKeyExA | |
ADVAPI32.dll | 621 | RegQueryValueExA | |
ADVAPI32.dll | 612 | RegOpenKeyW | |
ADVAPI32.dll | 569 | RegCreateKeyExW | |
ADVAPI32.dll | 638 | RegSetValueExW | |
ADVAPI32.dll | 591 | RegEnumKeyExW | |
ADVAPI32.dll | 560 | RegCloseKey | |
ADVAPI32.dll | 609 | RegOpenKeyExW | |
ADVAPI32.dll | 580 | RegDeleteKeyW | |
ADVAPI32.dll | 595 | RegFlushKey | |
KERNEL32.dll | 1202 | Sleep | |
KERNEL32.dll | 745 | InterlockedCompareExchange | |
KERNEL32.dll | 904 | OutputDebugStringA | |
KERNEL32.dll | 513 | GetLocalTime | |
KERNEL32.dll | 1137 | SetLastError | |
KERNEL32.dll | 935 | QueryPerformanceFrequency | |
KERNEL32.dll | 934 | QueryPerformanceCounter | |
KERNEL32.dll | 658 | GetTickCount | |
KERNEL32.dll | 449 | GetCurrentProcessId | |
KERNEL32.dll | 632 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 1346 | lstrcmpW | |
KERNEL32.dll | 354 | FreeLibrary | |
KERNEL32.dll | 1012 | RegisterWaitForSingleObject | |
KERNEL32.dll | 740 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 214 | DeleteFileW | |
KERNEL32.dll | 143 | CreateFileW | |
KERNEL32.dll | 1243 | UnregisterWaitEx | |
KERNEL32.dll | 1216 | TerminateProcess | |
KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
KERNEL32.dll | 1188 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 739 | InitializeCriticalSection | |
KERNEL32.dll | 209 | DeleteCriticalSection | |
KERNEL32.dll | 238 | EnterCriticalSection | |
KERNEL32.dll | 825 | LeaveCriticalSection | |
KERNEL32.dll | 751 | InterlockedIncrement | |
KERNEL32.dll | 1021 | ReleaseSemaphore | |
KERNEL32.dll | 82 | CloseHandle | |
KERNEL32.dll | 174 | CreateSemaphoreW | |
KERNEL32.dll | 1273 | WaitForSingleObject | |
KERNEL32.dll | 512 | GetLastError | |
KERNEL32.dll | 181 | CreateThread | |
KERNEL32.dll | 747 | InterlockedDecrement | |
KERNEL32.dll | 1271 | WaitForMultipleObjects | |
KERNEL32.dll | 1176 | SetThreadPriority | |
KERNEL32.dll | 452 | GetCurrentThread | |
KERNEL32.dll | 626 | GetSystemInfo | |
KERNEL32.dll | 232 | DuplicateHandle | |
KERNEL32.dll | 448 | GetCurrentProcess | |
KERNEL32.dll | 1038 | ResetEvent | |
KERNEL32.dll | 942 | QueueUserAPC | |
KERNEL32.dll | 1112 | SetEvent | |
KERNEL32.dll | 133 | CreateEventW | |
KERNEL32.dll | 579 | GetProcAddress | |
KERNEL32.dll | 534 | GetModuleHandleW | |
KERNEL32.dll | 453 | GetCurrentThreadId | |
KERNEL32.dll | 222 | DisableThreadLibraryCalls | |
KERNEL32.dll | 748 | InterlockedExchange | |
ole32.dll | 378 | StringFromIID | |
ole32.dll | 16 | CoCreateInstance | |
ole32.dll | 14 | CoCreateFreeThreadedMarshaler | |
ole32.dll | 8 | CLSIDFromString | |
ole32.dll | 104 | CoTaskMemFree | |
ole32.dll | 376 | StringFromCLSID | |
ole32.dll | 377 | StringFromGUID2 | |
ole32.dll | 103 | CoTaskMemAlloc | |
ole32.dll | 108 | CoUninitialize | |
ole32.dll | 63 | CoInitializeEx | |
ole32.dll | 29 | CoFreeUnusedLibraries | |
ole32.dll | 62 | CoInitialize | |
ole32.dll | 134 | CreateStreamOnHGlobal | |
OLEAUT32.dll | 26 | ||
OLEAUT32.dll | 201 | ||
OLEAUT32.dll | 162 | ||
OLEAUT32.dll | 19 | ||
OLEAUT32.dll | 20 | ||
OLEAUT32.dll | 17 | ||
OLEAUT32.dll | 25 | ||
OLEAUT32.dll | 10 | ||
OLEAUT32.dll | 8 | ||
OLEAUT32.dll | 15 | ||
OLEAUT32.dll | 16 | ||
OLEAUT32.dll | 7 | ||
OLEAUT32.dll | 6 | ||
OLEAUT32.dll | 2 | ||
OLEAUT32.dll | 9 | ||
rtutils.dll | 38 | TraceRegisterExW | |
rtutils.dll | 39 | TraceVprintfExA | |
rtutils.dll | 26 | TraceDeregisterW | |
USER32.dll | 166 | DestroyWindow | |
USER32.dll | 175 | DispatchMessageW | |
USER32.dll | 764 | TranslateMessage | |
USER32.dll | 563 | PeekMessageW | |
USER32.dll | 775 | UnregisterDeviceNotification | |
USER32.dll | 541 | MsgWaitForMultipleObjectsEx | |
USER32.dll | 594 | RegisterDeviceNotificationW | |
USER32.dll | 590 | RegisterClassW | |
USER32.dll | 708 | SetWindowLongW | |
USER32.dll | 774 | UnregisterClassW | |
USER32.dll | 156 | DefWindowProcW | |
USER32.dll | 110 | CreateWindowExW | |
USER32.dll | 506 | LoadStringW | |
USER32.dll | 406 | GetWindowLongW | |
WINMM.dll | 148 | timeGetTime |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x19c0e | DllCanUnloadNow | |
2 | 0x19c1f | DllGetClassObject | |
3 | 0x19c41 | DllRegisterServer | |
4 | 0x19c6b | DllUnregisterServer |
StringTable 040904B0
CompanyName | Microsoft Corporation |
FileDescription | Microsoft TAPI3 Terminal Manager |
FileVersion | 6.1.7601.17514 (win7sp1_rtm.101119-1850) |
InternalName | termmgr.dll |
LegalCopyright | © Microsoft Corporation. All rights reserved. |
OriginalFilename | termmgr.dll |
ProductName | Microsoft® Windows® Operating System |
ProductVersion | 6.1.7601.17514 |
VS_FIXEDFILEINFO
FileVersion | 6.1.7601.17514 |
ProductVersion | 6.1.7601.17514 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x40004 |
FileType | 2 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x278