filenamecldll12.dll
size794624 (0xc2000)
md5062042814922db5482f087f4d65a95fa
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
10520679
9521794
9320672
2592104
15307734
10269
93217913
96307727
953077483
9230771
9430521
9030771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4ee961d4
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.10
SizeOfCode0x7f000
SizeOfInitializedData0x4a000
SizeOfUninitializedData0
AddressOfEntryPoint0x6a577
BaseOfCode0x1000
BaseOfData0x80000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xca000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 7.0

Sections

namevavsizeraw sizeflags
.text0x10000x7ed7e0x7f000R-X CODE
.rdata0x800000x2418f0x25000R-- IDATA
.data0xa50000x183240x11000RW- IDATA
.rsrc0xbe0000xf100x1000R-- IDATA
.reloc0xbf0000xa9aa0xb000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xa3cc00x4cf
IMPORT0xa28040xc8
RESOURCE0xbe0000xf10
EXCEPTION00
SECURITY00
BASERELOC0xbf0000x8870
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x800000x410
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#12810640
MENU#1282840
STRING#111520
STRING#20492440
STRING#36011960
STRING#3605820
STRING#37131980
ACCELERATORS#128240
#241#128160
idlangstring
11033Error
21033OLE initialization failed. Make sure that the OLE libraries are the correct version.
31033Invalid command line parameter is specified.
41033No document filename is specified.
51033Invalid timeout parameter is specified.
61033Usage: flowrap [options] filename Options: -r - open document read-only -m - minimize editor on document close -tN - wait timeout N milliseconds (default = 100)
71033Unknown document type.
81033OLE Automation Error: 0x%08lX. %s
91033OLE Automation Error: 0x%08lX. %s Would you like to ignore this error?
101033Word not found.
111033Excel not found.
121033The document could not be found
327711033Navigates backward one item in the history list Back
327721033Navigates forward one item in the history list Forward
576061033Change the printer and printing options Print Setup
576071033Print the active document Print
576651033Quit the application Exit
593921033Show or hide the toolbar Toggle ToolBar
593931033Show or hide the status bar Toggle StatusBar
module_namehintordfunction_name
ADVAPI32.dll464RegDeleteKeyA
ADVAPI32.dll461RegCreateKeyExA
ADVAPI32.dll466RegDeleteValueA
ADVAPI32.dll482RegOpenKeyExA
ADVAPI32.dll457RegCloseKey
ADVAPI32.dll487RegQueryInfoKeyA
ADVAPI32.dll470RegEnumKeyExA
ADVAPI32.dll505RegSetValueExA
ADVAPI32.dll492RegQueryValueExA
ADVAPI32.dll176DeregisterEventSource
ADVAPI32.dll521ReportEventA
ADVAPI32.dll510RegisterEventSourceA
GDI32.dll44CreateCompatibleBitmap
GDI32.dll45CreateCompatibleDC
GDI32.dll18BitBlt
GDI32.dll363GetDeviceCaps
GDI32.dll405GetObjectA
GDI32.dll421GetStockObject
GDI32.dll80CreateSolidBrush
GDI32.dll140DeleteDC
GDI32.dll143DeleteObject
GDI32.dll526SelectObject
COMCTL32.dll10CreateToolbarEx
COMCTL32.dll6
WSOCK32.dll112
WSOCK32.dll22
WSOCK32.dll4
WSOCK32.dll21
WSOCK32.dll23
WSOCK32.dll9
WSOCK32.dll111
WSOCK32.dll52
WSOCK32.dll115
WSOCK32.dll16
WSOCK32.dll19
WSOCK32.dll3
USER32.dll429IsWindow
USER32.dll478MessageBoxA
USER32.dll458LoadStringA
USER32.dll691UnregisterClassA
USER32.dll640SetWindowLongA
USER32.dll366GetWindowLongA
USER32.dll679TranslateAcceleratorA
USER32.dll161DispatchMessageA
USER32.dll682TranslateMessage
USER32.dll314GetMessageA
USER32.dll153DestroyWindow
USER32.dll571SendMessageA
USER32.dll658ShowWindow
USER32.dll434IsZoomed
USER32.dll57CheckMenuItem
USER32.dll300GetMenu
USER32.dll194EnableMenuItem
USER32.dll665SystemParametersInfoA
USER32.dll515PostQuitMessage
USER32.dll345GetSubMenu
USER32.dll534RegisterClassA
USER32.dll445LoadIconA
USER32.dll359GetUserObjectInformationW
USER32.dll328GetProcessWindowStation
USER32.dll481MessageBoxIndirectA
USER32.dll372GetWindowRect
USER32.dll491MoveWindow
USER32.dll433IsWindowVisible
USER32.dll437LoadAcceleratorsA
USER32.dll551RegisterWindowMessageA
USER32.dll376GetWindowTextLengthA
USER32.dll375GetWindowTextA
USER32.dll646SetWindowTextA
USER32.dll247GetClassInfoExA
USER32.dll441LoadCursorA
USER32.dll535RegisterClassExA
USER32.dll96CreateWindowExA
USER32.dll76CreateAcceleratorTableA
USER32.dll42CharNextA
USER32.dll325GetParent
USER32.dll252GetClassNameA
USER32.dll643SetWindowPos
USER32.dll533RedrawWindow
USER32.dll726wsprintfA
USER32.dll273GetDlgItem
USER32.dll598SetFocus
USER32.dll278GetFocus
USER32.dll414IsChild
USER32.dll362GetWindow
USER32.dll147DestroyAcceleratorTable
USER32.dll13BeginPaint
USER32.dll200EndPaint
USER32.dll27CallWindowProcA
USER32.dll270GetDesktopWindow
USER32.dll404InvalidateRgn
USER32.dll403InvalidateRect
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll255GetClientRect
USER32.dll226FillRect
USER32.dll580SetCapture
USER32.dll553ReleaseCapture
USER32.dll346GetSysColor
USER32.dll142DefWindowProcA
USER32.dll422IsIconic
SHELL32.dll264ShellExecuteExA
SHELL32.dll262ShellExecuteA
SHELL32.dll52FindExecutableA
KERNEL32.dll299GetConsoleMode
KERNEL32.dll752SetConsoleMode
KERNEL32.dll670ReadConsoleInputA
KERNEL32.dll353GetFullPathNameA
KERNEL32.dll312GetCurrentDirectoryA
KERNEL32.dll331GetDriveTypeA
KERNEL32.dll187FileTimeToLocalFileTime
KERNEL32.dll188FileTimeToSystemTime
KERNEL32.dll771SetEndOfFile
KERNEL32.dll774SetEnvironmentVariableA
KERNEL32.dll53CompareStringW
KERNEL32.dll52CompareStringA
KERNEL32.dll437GetStringTypeW
KERNEL32.dll434GetStringTypeA
KERNEL32.dll550IsBadCodePtr
KERNEL32.dll553IsBadReadPtr
KERNEL32.dll681ReadFile
KERNEL32.dll472GetTimeZoneInformation
KERNEL32.dll571LCMapStringW
KERNEL32.dll570LCMapStringA
KERNEL32.dll864UnhandledExceptionFilter
KERNEL32.dll335GetEnvironmentStringsW
KERNEL32.dll238FreeEnvironmentStringsW
KERNEL32.dll333GetEnvironmentStrings
KERNEL32.dll237FreeEnvironmentStringsA
KERNEL32.dll810SetStdHandle
KERNEL32.dll782SetFilePointer
KERNEL32.dll530HeapSize
KERNEL32.dll431GetStartupInfoA
KERNEL32.dll791SetHandleCount
KERNEL32.dll229FlushFileBuffers
KERNEL32.dll916WriteFile
KERNEL32.dll854TlsGetValue
KERNEL32.dll855TlsSetValue
KERNEL32.dll853TlsFree
KERNEL32.dll852TlsAlloc
KERNEL32.dll252GetCPInfo
KERNEL32.dll395GetOEMCP
KERNEL32.dll827SetUnhandledExceptionFilter
KERNEL32.dll556IsBadWritePtr
KERNEL32.dll886VirtualFree
KERNEL32.dll520HeapCreate
KERNEL32.dll522HeapDestroy
KERNEL32.dll737SetConsoleCtrlHandler
KERNEL32.dll264GetCommandLineA
KERNEL32.dll847TerminateProcess
KERNEL32.dll175ExitProcess
KERNEL32.dll865UnlockFile
KERNEL32.dll601LockFile
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll780SetFileAttributesA
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll528HeapReAlloc
KERNEL32.dll891VirtualQuery
KERNEL32.dll443GetSystemInfo
KERNEL32.dll883VirtualAlloc
KERNEL32.dll889VirtualProtect
KERNEL32.dll714RtlUnwind
KERNEL32.dll228FlushConsoleInputBuffer
KERNEL32.dll197FindClose
KERNEL32.dll201FindFirstFileA
KERNEL32.dll433GetStdHandle
KERNEL32.dll350GetFileType
KERNEL32.dll478GetVersion
KERNEL32.dll506GlobalMemoryStatus
KERNEL32.dll315GetCurrentProcessId
KERNEL32.dll663QueryPerformanceCounter
KERNEL32.dll469GetTickCount
KERNEL32.dll795SetLastError
KERNEL32.dll473GetUserDefaultLCID
KERNEL32.dll429GetShortPathNameA
KERNEL32.dll409GetProcessAffinityMask
KERNEL32.dll805SetProcessAffinityMask
KERNEL32.dll543InterlockedExchange
KERNEL32.dll245GetACP
KERNEL32.dll364GetLocaleInfoA
KERNEL32.dll464GetThreadLocale
KERNEL32.dll479GetVersionExA
KERNEL32.dll903WideCharToMultiByte
KERNEL32.dll667RaiseException
KERNEL32.dll537InitializeCriticalSection
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll947lstrcmpiA
KERNEL32.dll46CloseHandle
KERNEL32.dll77CreateFileA
KERNEL32.dll899WaitForSingleObject
KERNEL32.dll839Sleep
KERNEL32.dll594LocalFree
KERNEL32.dll234FormatMessageA
KERNEL32.dll361GetLastError
KERNEL32.dll619MultiByteToWideChar
KERNEL32.dll957lstrlenW
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll524HeapFree
KERNEL32.dll411GetProcessHeap
KERNEL32.dll777SetEvent
KERNEL32.dll105CreateThread
KERNEL32.dll73CreateEventA
KERNEL32.dll546InterlockedIncrement
KERNEL32.dll542InterlockedDecrement
KERNEL32.dll956lstrlenA
KERNEL32.dll618MulDiv
KERNEL32.dll230FlushInstructionCache
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll518HeapAlloc
KERNEL32.dll512GlobalUnlock
KERNEL32.dll505GlobalLock
KERNEL32.dll494GlobalAlloc
KERNEL32.dll944lstrcmpA
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll239FreeLibrary
KERNEL32.dll838SizeofResource
KERNEL32.dll589LoadResource
KERNEL32.dll218FindResourceA
KERNEL32.dll585LoadLibraryExA
KERNEL32.dll953lstrcpynA
KERNEL32.dll557IsDBCSLeadByte
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll408GetProcAddress
KERNEL32.dll584LoadLibraryA
ole32.dll237OleInitialize
ole32.dll243OleLockRunning
ole32.dll130CreateStreamOnHGlobal
ole32.dll34CoGetClassObject
ole32.dll6CLSIDFromProgID
ole32.dll8CLSIDFromString
ole32.dll100CoTaskMemFree
ole32.dll101CoTaskMemRealloc
ole32.dll260OleUninitialize
ole32.dll16CoCreateInstance
ole32.dll99CoTaskMemAlloc
ole32.dll308StringFromGUID2
OLEAUT32.dll6
OLEAUT32.dll4
OLEAUT32.dll200
OLEAUT32.dll8
OLEAUT32.dll277
OLEAUT32.dll161
OLEAUT32.dll162
OLEAUT32.dll420
OLEAUT32.dll149
OLEAUT32.dll7
OLEAUT32.dll35
OLEAUT32.dll9
OLEAUT32.dll2
offsetsizetypecomment
0794624DLL12/15/2011 02:56:20#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK