filenameIMF32.DLL
size28672 (0x7000)
md5a0df3f3aa3dc40fe160aaefbb5187fd9
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1472991
1080474
480472
1041
1980346
0011
1089667
617351
484471

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x3deebfe8
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x2000
SizeOfInitializedData0x4000
SizeOfUninitializedData0
AddressOfEntryPoint0x28ca
BaseOfCode0x1000
BaseOfData0x3000
ImageBase0x71600000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x7000
SizeOfHeaders0x1000
CheckSum0x15a87
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x196e0x2000R-X CODE
.rdata0x30000x6620x1000R-- IDATA
.data0x40000x12c0x1000RW- IDATA
.rsrc0x50000x4800x1000R-- IDATA
.reloc0x60000x16a0x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x35400x122
IMPORT0x30cc0x78
RESOURCE0x50000x480
EXCEPTION00
SECURITY00
BASERELOC0x60000xfc
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000xcc
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#1460
VERSION#19440
idlangstring
11033SDIMF32
module_namehintordfunction_name
ZTAG32.dll9ZTagUpdateBlock
ZTAG32.dll7ZTagGetUINT
ZTAG32.dll5ZTagGetElementPtr
ZTAG32.dll2ZTagCreateBlock
ZTAG32.dll4ZTagGetElement
ZTAG32.dllZTagAddElement
ZTAG32.dll1ZTagCloseBlock
KERNEL32.dll770lstrcpyA
KERNEL32.dll347GetSystemInfo
KERNEL32.dll688UnmapViewOfFile
KERNEL32.dll53CreateFileMappingA
KERNEL32.dll470MapViewOfFile
KERNEL32.dll536ReadFile
KERNEL32.dll180FreeLibrary
KERNEL32.dll294GetModuleHandleA
KERNEL32.dll675TlsFree
KERNEL32.dll674TlsAlloc
KERNEL32.dll248GetCurrentProcessId
KERNEL32.dll385GlobalAlloc
KERNEL32.dll392GlobalFree
KERNEL32.dll52CreateFileA
KERNEL32.dll355GetTempFileNameA
KERNEL32.dll357GetTempPathA
KERNEL32.dll735WriteFile
KERNEL32.dll87DeleteFileA
KERNEL32.dll27CloseHandle
KERNEL32.dll397GlobalMemoryStatus
KERNEL32.dll273GetFileInformationByHandle
KERNEL32.dll618SetFilePointer
KERNEL32.dll677TlsSetValue
KERNEL32.dll676TlsGetValue
KERNEL32.dll662Sleep
KERNEL32.dll451LoadLibraryExA
KERNEL32.dll318GetProcAddress
KERNEL32.dll450LoadLibraryA
KERNEL32.dll722WideCharToMultiByte
USER32.dll684wsprintfA
WINSPOOL.DRV116GetPrinterDriverDirectoryA
WINSPOOL.DRV111GetPrinterDataA
MSVCRT.dll679realloc
MSVCRT.dll328_makepath
MSVCRT.dll441_splitpath
MSVCRT.dll271_initterm
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll606free
MSVCRT.dll657malloc
ordentry_vafunction_name
10x11d0DrvSplAbort
20x1170DrvSplClose
30x1140DrvSplEndDoc
40x11b0DrvSplEndPage
50x1050DrvSplStartDoc
60x1190DrvSplStartPage
70x1110DrvSplWritePrinter
80x1880ImfGetLastError
90x20f0ImfPlayJob
100x2070ImfPrintJob
module_nameImf32.dll
flags0
timestamp2002-12-05 02:53:50
version0.0
ordinal_base1
nFunctions10
nNames10
Names(10)0x3590
Functions(10)0x3568
NameOrdinals(10)0x35b8

StringTable 040904b0

Comments
CompanyNameZenographics, Inc.
FileDescriptionIMF32
FileVersion5, 60, 1204, 0
InternalNameIMF32
LegalCopyrightCopyright © 2000-2002, Zenographics, Inc.
LegalTrademarksSuperPrint, SuperRIP
OriginalFilenameIMF32.dll
PrivateBuild
ProductNameZenographics SuperPrint
ProductVersion5, 60, 0, 0
SpecialBuild

VS_FIXEDFILEINFO

FileVersion5.60.1204.0
ProductVersion5.60.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
028672DLL12/05/2002 02:54:32#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK