0x0022AE00.exe

info
MZ
PE
imports
exports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	0x0022AE00.exe
size	291840 (0x47400)
md5	bc6f82f9b984f1c0619fc0d637e4bbbe

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
15	6030	30
96	6030	29
95	6030	162
96	3077	3
95	2179	1
25	9210	4
93	2067	2
96	2179	1
93	2179	15
1	0	311
100	6030	50
92	6030	1
90	6030	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4fbcbbb4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x2e200
SizeOfInitializedData	0x15600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x228af
BaseOfCode	0x1000
BaseOfData	0x30000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x47000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2e02a	0x2e200	R-X CODE
.rdata	0x30000	0xb58f	0xb600	R-- IDATA
.data	0x3c000	0x3060	0x1600	RW- IDATA
.reloc	0x40000	0x6d16	0x6e00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x3b490	0xff
IMPORT	0x3a478	0xc8
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x40000	0x2994
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x35230	0x40
Bound_IAT	0	0
IAT	0x30000	0x344
Delay_IAT	0x3a274	0x40
CLR_Header	0	0

module_name	hint	ord	function_name
msi.dll		114
msi.dll		67
msi.dll		89
msi.dll		17
msi.dll		8
msi.dll		121
msi.dll		103
msi.dll		116
msi.dll		118
msi.dll		115
msi.dll		166
msi.dll		159
msi.dll		32
msi.dll		120
msi.dll		204
msi.dll		160
msi.dll		74
msi.dll		171
msi.dll		158
msi.dll		52
msi.dll		33
msi.dll		49
msi.dll		140
msi.dll		147
msi.dll		54
msi.dll		139
msi.dll		58
msi.dll		62
msi.dll		47
msi.dll		145
msi.dll		125
VERSION.dll	10		VerQueryValueA
VERSION.dll			GetFileVersionInfoA
VERSION.dll	1		GetFileVersionInfoSizeA
KERNEL32.dll	443		GetSystemInfo
KERNEL32.dll	883		VirtualAlloc
KERNEL32.dll	889		VirtualProtect
KERNEL32.dll	667		RaiseException
KERNEL32.dll	122		DeleteCriticalSection
KERNEL32.dll	537		InitializeCriticalSection
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	239		FreeLibrary
KERNEL32.dll	361		GetLastError
KERNEL32.dll	446		GetSystemTime
KERNEL32.dll	77		CreateFileA
KERNEL32.dll	347		GetFileSize
KERNEL32.dll	201		FindFirstFileA
KERNEL32.dll	234		FormatMessageA
KERNEL32.dll	364		GetLocaleInfoA
KERNEL32.dll	96		CreateProcessA
KERNEL32.dll	899		WaitForSingleObject
KERNEL32.dll	338		GetExitCodeProcess
KERNEL32.dll	46		CloseHandle
KERNEL32.dll	681		ReadFile
KERNEL32.dll	478		GetVersion
KERNEL32.dll	479		GetVersionExA
KERNEL32.dll	197		FindClose
KERNEL32.dll	903		WideCharToMultiByte
KERNEL32.dll	543		InterlockedExchange
KERNEL32.dll	245		GetACP
KERNEL32.dll	464		GetThreadLocale
KERNEL32.dll	218		FindResourceA
KERNEL32.dll	838		SizeofResource
KERNEL32.dll	603		LockResource
KERNEL32.dll	589		LoadResource
KERNEL32.dll	219		FindResourceExA
KERNEL32.dll	459		GetTempPathA
KERNEL32.dll	457		GetTempFileNameA
KERNEL32.dll	124		DeleteFileA
KERNEL32.dll	211		FindNextFileA
KERNEL32.dll	696		RemoveDirectoryA
KERNEL32.dll	366		GetLogicalDriveStringsA
KERNEL32.dll	331		GetDriveTypeA
KERNEL32.dll	69		CreateDirectoryA
KERNEL32.dll	326		GetDiskFreeSpaceExA
KERNEL32.dll	441		GetSystemDirectoryA
KERNEL32.dll	489		GetWindowsDirectoryA
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	336		GetEnvironmentVariableA
KERNEL32.dll	375		GetModuleHandleA
KERNEL32.dll	314		GetCurrentProcess
KERNEL32.dll	339		GetExitCodeThread
KERNEL32.dll	795		SetLastError
KERNEL32.dll	105		CreateThread
KERNEL32.dll	73		CreateEventA
KERNEL32.dll	777		SetEvent
KERNEL32.dll	891		VirtualQuery
KERNEL32.dll	612		MoveFileA
KERNEL32.dll	916		WriteFile
KERNEL32.dll	839		Sleep
KERNEL32.dll	229		FlushFileBuffers
KERNEL32.dll	706		ResetEvent
KERNEL32.dll	947		lstrcmpiA
KERNEL32.dll	92		CreateNamedPipeA
KERNEL32.dll	54		ConnectNamedPipe
KERNEL32.dll	619		MultiByteToWideChar
KERNEL32.dll	204		FindFirstFileW
KERNEL32.dll	125		DeleteFileW
KERNEL32.dll	718		SearchPathA
KERNEL32.dll	546		InterlockedIncrement
KERNEL32.dll	542		InterlockedDecrement
KERNEL32.dll	557		IsDBCSLeadByte
KERNEL32.dll	953		lstrcpynA
KERNEL32.dll	585		LoadLibraryExA
KERNEL32.dll	956		lstrlenA
KERNEL32.dll	957		lstrlenW
KERNEL32.dll	583		LeaveCriticalSection
KERNEL32.dll	143		EnterCriticalSection
KERNEL32.dll	442		GetSystemDirectoryW
KERNEL32.dll	378		GetModuleHandleW
KERNEL32.dll	64		CopyFileW
KERNEL32.dll	439		GetSystemDefaultLangID
KERNEL32.dll	315		GetCurrentProcessId
KERNEL32.dll	80		CreateFileW
KERNEL32.dll	318		GetCurrentThreadId
KERNEL32.dll	363		GetLocalTime
KERNEL32.dll	433		GetStdHandle
KERNEL32.dll	448		GetSystemTimeAsFileTime
KERNEL32.dll	411		GetProcessHeap
KERNEL32.dll	530		HeapSize
KERNEL32.dll	528		HeapReAlloc
KERNEL32.dll	524		HeapFree
KERNEL32.dll	518		HeapAlloc
KERNEL32.dll	522		HeapDestroy
KERNEL32.dll	590		LocalAlloc
KERNEL32.dll	264		GetCommandLineA
KERNEL32.dll	714		RtlUnwind
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	252		GetCPInfo
KERNEL32.dll	570		LCMapStringA
KERNEL32.dll	571		LCMapStringW
KERNEL32.dll	434		GetStringTypeA
KERNEL32.dll	437		GetStringTypeW
KERNEL32.dll	520		HeapCreate
KERNEL32.dll	886		VirtualFree
KERNEL32.dll	556		IsBadWritePtr
KERNEL32.dll	847		TerminateProcess
KERNEL32.dll	395		GetOEMCP
KERNEL32.dll	852		TlsAlloc
KERNEL32.dll	853		TlsFree
KERNEL32.dll	855		TlsSetValue
KERNEL32.dll	854		TlsGetValue
KERNEL32.dll	791		SetHandleCount
KERNEL32.dll	350		GetFileType
KERNEL32.dll	431		GetStartupInfoA
KERNEL32.dll	237		FreeEnvironmentStringsA
KERNEL32.dll	333		GetEnvironmentStrings
KERNEL32.dll	238		FreeEnvironmentStringsW
KERNEL32.dll	335		GetEnvironmentStringsW
KERNEL32.dll	864		UnhandledExceptionFilter
KERNEL32.dll	827		SetUnhandledExceptionFilter
KERNEL32.dll	663		QueryPerformanceCounter
KERNEL32.dll	469		GetTickCount
KERNEL32.dll	553		IsBadReadPtr
KERNEL32.dll	550		IsBadCodePtr
KERNEL32.dll	810		SetStdHandle
KERNEL32.dll	782		SetFilePointer
USER32.dll	270		GetDesktopWindow
USER32.dll	42		CharNextA
USER32.dll	227		FindWindowA
USER32.dll	433		IsWindowVisible
ADVAPI32.dll	483		RegOpenKeyExW
ADVAPI32.dll	465		RegDeleteKeyW
ADVAPI32.dll	467		RegDeleteValueW
ADVAPI32.dll	488		RegQueryInfoKeyW
ADVAPI32.dll	506		RegSetValueExW
ADVAPI32.dll	62		CloseServiceHandle
ADVAPI32.dll	427		OpenSCManagerA
ADVAPI32.dll	470		RegEnumKeyExA
ADVAPI32.dll	457		RegCloseKey
ADVAPI32.dll	482		RegOpenKeyExA
ADVAPI32.dll	492		RegQueryValueExA
ADVAPI32.dll	481		RegOpenKeyA
ADVAPI32.dll	429		OpenServiceA
ADVAPI32.dll	449		QueryServiceStatus
ADVAPI32.dll	574		StartServiceA
ADVAPI32.dll	464		RegDeleteKeyA
ADVAPI32.dll	487		RegQueryInfoKeyA
ADVAPI32.dll	505		RegSetValueExA
ADVAPI32.dll	461		RegCreateKeyExA
ADVAPI32.dll	466		RegDeleteValueA
ADVAPI32.dll	462		RegCreateKeyExW
SHELL32.dll	265		ShellExecuteExW
SHELL32.dll	264		ShellExecuteExA
SHELL32.dll	194		SHGetSpecialFolderLocation
SHELL32.dll	187		SHGetPathFromIDListA
SHELL32.dll	182		SHGetMalloc
ole32.dll	100		CoTaskMemFree
ole32.dll	101		CoTaskMemRealloc
ole32.dll	99		CoTaskMemAlloc
ole32.dll	8		CLSIDFromString
ole32.dll	16		CoCreateInstance
OLEAUT32.dll		6
OLEAUT32.dll		2
OLEAUT32.dll		277
SHLWAPI.dll	52		PathGetArgsW
SHLWAPI.dll	128		PathUnquoteSpacesW
SHLWAPI.dll	100		PathRemoveArgsW
SHLWAPI.dll	64		PathIsFileSpecW

ord	entry_va	function_name
1	0x101fe	CleanPrereq
2	0x10215	ConfigurePrereqLauncher
3	0x1014f	DoAppSearchEx
4	0x10164	DownloadPrereq
5	0x10182	ExtractPrereq
6	0x101c0	InstallPostPrereq
7	0x101a0	InstallPrereq
8	0x101e0	VerifyPrereq

module_name	Prereq.dll
flags	0
timestamp	2012-05-23 10:28:02
version	0.0
ordinal_base	1
nFunctions	8
nNames	8
Names(8)	0x3b4d8
Functions(8)	0x3b4b8
NameOrdinals(8)	0x3b4f8

show previews

offset	size	type	comment
0	270336	DLL	05/23/2012 10:28:04	#
15c1	15	HTM		#
42000	21504	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 291840 bytes (285 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK