presentations.dll
695eaac161c28662e7ddbf04efe611713e8798e026ea57b192226f5beed77c43
Identity
| Property | Value |
|---|---|
| Architecture | x86 |
| Source size | 970,352 bytes |
| Preferred image base | 0x10000000 |
| Entry RVA | 0x6ca40 |
| Imports / exports | 186 / 5 |
| Exception/unwind ranges | 0 |
| Executable raw bytes | 698,368 |
Physical paths:
Installer2\installer.{414B0123-8E6B-417D-9D7B-F3F765532B2B}\presentations.dll
Decompilation coverage
Complete with errors: 3,059 successful reconstructions, 11 failures, 3,070 attempted entries, 3,070 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
698,368 | 698,284 | yes / no / yes | 6.5584 |
.rdata |
0xac000 |
699392 |
175,616 | 175,396 | yes / no / no | 4.8696 |
.data |
0xd7000 |
875008 |
22,016 | 26,504 | yes / yes / no | 4.8901 |
.fptable |
0xde000 |
897024 |
512 | 128 | yes / yes / no | 0.0 |
.rsrc |
0xdf000 |
897536 |
19,456 | 19,424 | yes / no / no | 4.7942 |
.reloc |
0xe4000 |
916992 |
43,008 | 42,528 | yes / no / no | 6.5787 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | false |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.