unrar.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	unrar.dll
size	223744 (0x36a00)
md5	c8b41f2b2a1574669dd34cdbf5e7a2f1

type	PE32 executable (DLL) (Windows CE) ARM, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
110	50725	4
48	9615	6
49	9615	3
0	0	3
109	50725	6
89	3064	5
1	0	98
110	50727	44
122	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x1c0
NumberOfSections	5
TimeDateStamp	0x446cab74
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x31e00
SizeOfInitializedData	0x9000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x31648
BaseOfCode	0x1000
BaseOfData	0x33000
ImageBase	0x100000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.10
Reserved1	0
SizeOfImage	0x3f000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x31d28	0x31e00	R-X CODE
.rdata	0x33000	0x153c	0x1600	R-- IDATA
.data	0x35000	0x5098	0xa00	RW- IDATA
.pdata	0x3b000	0x1290	0x1400	R-- IDATA
.reloc	0x3d000	0x1340	0x1400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x343b0	0x18c
IMPORT	0x34230	0x28
RESOURCE	0	0
EXCEPTION	0x3b000	0x1290
SECURITY	0	0
BASERELOC	0x3d000	0xcd4
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x35000	0x140
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
COREDLL.dll		1044
COREDLL.dll		1068
COREDLL.dll		2005
COREDLL.dll		1047
COREDLL.dll		1094
COREDLL.dll		1065
COREDLL.dll		1018
COREDLL.dll		1041
COREDLL.dll		1054
COREDLL.dll		1071
COREDLL.dll		1095
COREDLL.dll		1064
COREDLL.dll		1091
COREDLL.dll		1066
COREDLL.dll		719
COREDLL.dll		1406
COREDLL.dll		993
COREDLL.dll		1417
COREDLL.dll		2008
COREDLL.dll		1043
COREDLL.dll		2
COREDLL.dll		87
COREDLL.dll		3
COREDLL.dll		1097
COREDLL.dll		1551
COREDLL.dll		177
COREDLL.dll		516
COREDLL.dll		168
COREDLL.dll		553
COREDLL.dll		171
COREDLL.dll		170
COREDLL.dll		173
COREDLL.dll		178
COREDLL.dll		160
COREDLL.dll		166
COREDLL.dll		169
COREDLL.dll		165
COREDLL.dll		180
COREDLL.dll		181
COREDLL.dll		167
COREDLL.dll		2000
COREDLL.dll		224
COREDLL.dll		1070
COREDLL.dll		1407
COREDLL.dll		1046
COREDLL.dll		221
COREDLL.dll		19
COREDLL.dll		20
COREDLL.dll		21
COREDLL.dll		22
COREDLL.dll		197
COREDLL.dll		196
COREDLL.dll		229
COREDLL.dll		191
COREDLL.dll		188
COREDLL.dll		550
COREDLL.dll		549
COREDLL.dll		548
COREDLL.dll		1167
COREDLL.dll		1556
COREDLL.dll		34
COREDLL.dll		33
COREDLL.dll		35
COREDLL.dll		36
COREDLL.dll		1232
COREDLL.dll		520
COREDLL.dll		16
COREDLL.dll		15
COREDLL.dll		1492
COREDLL.dll		530
COREDLL.dll		528
COREDLL.dll		1177
COREDLL.dll		557
COREDLL.dll		1474
COREDLL.dll		544
COREDLL.dll		496
COREDLL.dll		29
COREDLL.dll		1443
COREDLL.dll		606

ord	entry_va	function_name
1	0xab04	RARCEGetBuildInfo
2	0x9b3c	RARCloseArchive
3	0xaaec	RARGetDllVersion
4	0x9398	RAROpenArchive
5	0x9454	RAROpenArchiveEx
6	0xa970	RARProcessFile
7	0xa9bc	RARProcessFileW
8	0x9c0c	RARReadHeader
9	0x9ff4	RARReadHeaderEx
10	0xaa3c	RARSetCallback
11	0xaa08	RARSetChangeVolProc
12	0xaab4	RARSetPassword
13	0xaa84	RARSetProcessDataProc

module_name	unrar.dll
flags	0
timestamp	2006-05-18 17:14:28
version	0.0
ordinal_base	1
nFunctions	13
nNames	13
Names(13)	0x3440c
Functions(13)	0x343d8
NameOrdinals(13)	0x34440

show previews

offset	size	type	comment
0	223744	DLL	05/18/2006 17:14:28	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK