filenamemodule.1516.f7a0a50.73cf0000.dll
size592384 (0x90a00)
md509de0631165b583d9d6a318f8ecfd419
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
149307299
10351
1473072911
132210221
146307291
1323072982
1313072961
126507271
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4ce7b8f2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x81400
SizeOfInitializedData0xf400
SizeOfUninitializedData0
AddressOfEntryPoint0xd53d
BaseOfCode0x1000
BaseOfData0x7c000
ImageBase0x73cf0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion5.1
Reserved10
SizeOfImage0x94000
SizeOfHeaders0x400
CheckSum0x924f3
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x812d10x81400R-X CODE
.data0x830000x10200x1000RW- IDATA
.rsrc0x850000xb1200xb200R-- IDATA
.reloc0x910000x2f780x3000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x9f640x1ce
IMPORT0x80b300x78
RESOURCE0x850000xb120
EXCEPTION00
SECURITY00
BASERELOC0x910000x2f78
DEBUG0x822700x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x4e7900x40
Bound_IAT0x2880x7c
IAT0x10000x474
Delay_IAT0x809400x60
CLR_Header00
typenamesizecp
TYPELIB#1323040
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#41800
CURSOR#53080
CURSOR#63080
CURSOR#73080
CURSOR#83080
CURSOR#93080
CURSOR#103080
CURSOR#113080
CURSOR#123080
CURSOR#133080
CURSOR#143080
CURSOR#153080
CURSOR#163080
CURSOR#171800
CURSOR#183080
CURSOR#191800
CURSOR#203080
CURSOR#211800
CURSOR#223080
CURSOR#233080
BITMAP#1255520
BITMAP#1265520
BITMAP#1275520
BITMAP#21001200
BITMAP#21011840
BITMAP#21021840
BITMAP#21031840
GROUP_CURSOR#105200
GROUP_CURSOR#106200
GROUP_CURSOR#107340
GROUP_CURSOR#109340
GROUP_CURSOR#110340
GROUP_CURSOR#111340
GROUP_CURSOR#112200
GROUP_CURSOR#113200
GROUP_CURSOR#114200
GROUP_CURSOR#115200
GROUP_CURSOR#116200
GROUP_CURSOR#117200
GROUP_CURSOR#118200
GROUP_CURSOR#119200
GROUP_CURSOR#120200
GROUP_CURSOR#121200
GROUP_CURSOR#122200
GROUP_CURSOR#129200
GROUP_CURSOR#130200
VERSION#19160
module_namehintordfunction_name
msvcrt.dll257_amsg_exit
msvcrt.dll469_initterm
msvcrt.dll1190free
msvcrt.dll1246malloc
msvcrt.dll106_XcptFilter
msvcrt.dll342_errno
msvcrt.dll968_vsnprintf
msvcrt.dll1371wcsncmp
msvcrt.dll1258memcpy
msvcrt.dll1262memset
msvcrt.dll1260memmove
KERNEL32.dll349FormatMessageA
KERNEL32.dll619GetSystemDefaultLangID
KERNEL32.dll300FindAtomA
KERNEL32.dll512GetLastError
KERNEL32.dll959ReadFile
KERNEL32.dll1317WriteFile
KERNEL32.dll82CloseHandle
KERNEL32.dll1124SetFilePointer
KERNEL32.dll497GetFileType
KERNEL32.dll778IsValidCodePage
KERNEL32.dll651GetThreadLocale
KERNEL32.dll1348lstrcmpiA
KERNEL32.dll719HeapFree
KERNEL32.dll715HeapAlloc
KERNEL32.dll717HeapCreate
KERNEL32.dll722HeapReAlloc
KERNEL32.dll869MulDiv
KERNEL32.dll674GetVersionExA
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll691GlobalAlloc
KERNEL32.dll698GlobalFree
KERNEL32.dll697GlobalFlags
KERNEL32.dll705GlobalReAlloc
KERNEL32.dll706GlobalSize
KERNEL32.dll702GlobalLock
KERNEL32.dll701GlobalHandle
KERNEL32.dll709GlobalUnlock
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1222TlsFree
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1224TlsSetValue
KERNEL32.dll531GetModuleHandleA
KERNEL32.dll529GetModuleFileNameA
KERNEL32.dll530GetModuleFileNameW
KERNEL32.dll360GetACP
KERNEL32.dll614GetStringTypeExA
KERNEL32.dll615GetStringTypeExW
KERNEL32.dll136CreateFileA
KERNEL32.dll143CreateFileW
KERNEL32.dll100CompareStringW
KERNEL32.dll601GetProfileSectionA
KERNEL32.dll602GetProfileSectionW
KERNEL32.dll828LoadLibraryA
KERNEL32.dll831LoadLibraryW
KERNEL32.dll301FindAtomW
KERNEL32.dll599GetProfileIntA
KERNEL32.dll666GetUserDefaultLCID
KERNEL32.dll836LocalAlloc
KERNEL32.dll748InterlockedExchange
KERNEL32.dll944RaiseException
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll904OutputDebugStringA
KERNEL32.dll1047RtlUnwind
KERNEL32.dll934QueryPerformanceCounter
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll632GetSystemTimeAsFileTime
KERNEL32.dll1216TerminateProcess
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1188SetUnhandledExceptionFilter
KERNEL32.dll673GetVersion
KERNEL32.dll718HeapDestroy
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll739InitializeCriticalSection
KERNEL32.dll222DisableThreadLibraryCalls
KERNEL32.dll840LocalFree
KERNEL32.dll97CompareStringA
KERNEL32.dll516GetLocaleInfoW
KERNEL32.dll579GetProcAddress
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll618GetSystemDefaultLCID
KERNEL32.dll514GetLocaleInfoA
KERNEL32.dll870MultiByteToWideChar
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll1202Sleep
KERNEL32.dll658GetTickCount
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll354FreeLibrary
KERNEL32.dll1357lstrlenA
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll590RegEnumKeyExA
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll560RegCloseKey
USER32.dll576PtInRect
USER32.dll437InflateRect
USER32.dll317GetKeyState
USER32.dll412GetWindowRect
USER32.dll621ScreenToClient
USER32.dll288GetCursorPos
USER32.dll613ReleaseDC
USER32.dll253FrameRect
USER32.dll290GetDCEx
USER32.dll289GetDC
USER32.dll382GetSystemMetrics
USER32.dll196DrawFocusRect
USER32.dll785UpdateWindow
USER32.dll710SetWindowPos
USER32.dll735ShowWindow
USER32.dll220EndPaint
USER32.dll246FillRect
USER32.dll14BeginPaint
USER32.dll539MoveWindow
USER32.dll379GetSysColor
USER32.dll678SetParent
USER32.dll109CreateWindowExA
USER32.dll110CreateWindowExW
USER32.dll216EnableWindow
USER32.dll479IsWindowUnicode
USER32.dll300GetFocus
USER32.dll640SetCapture
USER32.dll612ReleaseCapture
USER32.dll264GetCapture
USER32.dllActivateKeyboardLayout
USER32.dll85CopyRect
USER32.dll549OffsetRect
USER32.dll347GetMessagePos
USER32.dll348GetMessageTime
USER32.dll263GetAsyncKeyState
USER32.dll445IntersectRect
USER32.dll758TrackPopupMenu
USER32.dll356GetParent
USER32.dll591RegisterClipboardFormatA
USER32.dll525MessageBeep
USER32.dll164DestroyMenu
USER32.dll810WindowFromDC
USER32.dll658SetFocus
USER32.dll161DestroyCaret
USER32.dll465IsIconic
USER32.dll690SetScrollRange
USER32.dll689SetScrollPos
USER32.dll521MapWindowPoints
USER32.dll89CreateCaret
USER32.dll425HideCaret
USER32.dll729ShowCaret
USER32.dll642SetCaretPos
USER32.dll699SetTimer
USER32.dll483KillTimer
USER32.dll659SetForegroundWindow
USER32.dll688SetScrollInfo
USER32.dll295GetDlgItem
USER32.dll398GetWindow
USER32.dll475IsWindow
USER32.dll291GetDesktopWindow
USER32.dll748SystemParametersInfoW
USER32.dll812WindowFromPoint
USER32.dll301GetForegroundWindow
USER32.dll457IsChild
USER32.dll476IsWindowEnabled
USER32.dll266GetCaretPos
USER32.dll458IsClipboardFormatAvailable
USER32.dll646SetClipboardData
USER32.dll73CloseClipboard
USER32.dll213EmptyClipboard
USER32.dll550OpenClipboard
USER32.dll281GetClipboardOwner
USER32.dll278GetClipboardData
USER32.dll732ShowScrollBar
USER32.dll215EnableScrollBar
USER32.dll155DefWindowProcA
USER32.dll156DefWindowProcW
USER32.dll405GetWindowLongA
USER32.dll406GetWindowLongW
USER32.dll271GetClassLongA
USER32.dll272GetClassLongW
USER32.dll486LoadBitmapA
USER32.dll487LoadBitmapW
USER32.dll488LoadCursorA
USER32.dll491LoadCursorW
USER32.dll707SetWindowLongA
USER32.dll708SetWindowLongW
USER32.dll565PostMessageA
USER32.dll566PostMessageW
USER32.dll562PeekMessageA
USER32.dll563PeekMessageW
USER32.dll448InvertRect
USER32.dll318GetKeyboardLayout
USER32.dll747SystemParametersInfoA
USER32.dll631SendMessageA
USER32.dll247FindWindowA
USER32.dll610RegisterWindowMessageA
USER32.dll636SendMessageW
USER32.dll319GetKeyboardLayoutList
USER32.dll43CharLowerA
USER32.dll45CharLowerBuffW
USER32.dll57CharUpperA
USER32.dll59CharUpperBuffW
USER32.dll773UnregisterClassA
USER32.dll774UnregisterClassW
USER32.dll587RegisterClassA
USER32.dll590RegisterClassW
USER32.dll299GetDoubleClickTime
USER32.dll480IsWindowVisible
USER32.dll276GetClientRect
USER32.dll446InvalidateRect
USER32.dll625ScrollWindowEx
USER32.dll198DrawFrameControl
USER32.dll648SetCursor
USER32.dll285GetCursor
USER32.dll166DestroyWindow
USER32.dll543NotifyWinEvent
USER32.dll526MessageBoxA
USER32.dll71ClientToScreen
GDI32.dll61CreateFontIndirectA
GDI32.dll548GetTextFaceW
GDI32.dll546GetTextFaceA
GDI32.dll491GetKerningPairsA
GDI32.dll440GetCharWidthA
GDI32.dll445GetCharWidthW
GDI32.dll676SetTextAlign
GDI32.dll293EnumFontFamiliesExW
GDI32.dll564LPtoDP
GDI32.dll73CreatePalette
GDI32.dll508GetObjectType
GDI32.dll302Escape
GDI32.dll311ExtTextOutA
GDI32.dll510GetOutlineTextMetricsA
GDI32.dll70CreateMetaFileA
GDI32.dll31CloseMetaFile
GDI32.dll74CreatePatternBrush
GDI32.dll299EnumMetaFile
GDI32.dll498GetMetaFileBitsEx
GDI32.dll41CreateBitmap
GDI32.dll662SetMetaFileBitsEx
GDI32.dll75CreatePen
GDI32.dll599Polyline
GDI32.dll47CreateCompatibleBitmap
GDI32.dll164DPtoLP
GDI32.dll19BitBlt
GDI32.dll426GetBkMode
GDI32.dll64CreateFontIndirectW
GDI32.dll229DeleteMetaFile
GDI32.dll516GetPixel
GDI32.dll685SetWindowOrgEx
GDI32.dll684SetWindowExtEx
GDI32.dll312ExtTextOutW
GDI32.dll459GetDeviceCaps
GDI32.dll48CreateCompatibleDC
GDI32.dll691StretchBlt
GDI32.dll227DeleteDC
GDI32.dll53CreateDIBSection
GDI32.dll671SetROP2
GDI32.dll525GetStockObject
GDI32.dll607Rectangle
GDI32.dll452GetCurrentObject
GDI32.dll535GetTextCharsetInfo
GDI32.dll698TranslateCharsetInfo
GDI32.dll632SelectPalette
GDI32.dll624SaveDC
GDI32.dll617RestoreDC
GDI32.dll639SetBkMode
GDI32.dll631SelectObject
GDI32.dll582PatBlt
GDI32.dll638SetBkColor
GDI32.dll678SetTextColor
GDI32.dll560IntersectClipRect
GDI32.dll84CreateSolidBrush
GDI32.dll230DeleteObject
GDI32.dll507GetObjectA
GDI32.dll509GetObjectW
GDI32.dll549GetTextMetricsA
GDI32.dll550GetTextMetricsW
GDI32.dll68CreateICA
GDI32.dll69CreateICW
GDI32.dll511GetOutlineTextMetricsW
GDI32.dll604RealizePalette
ordentry_vafunction_name
20xa1b4IID_IRichEditOle
30xa1c4IID_IRichEditOleCallback
40xb1ceCreateTextServices
50x9f54IID_ITextServices
60xa244IID_ITextHost
70xa254IID_ITextHost2
80x6e7eaREExtendedRegisterClass
90x5eb96RichEditANSIWndProc
100x5eb18RichEdit10ANSIWndProc
110x7cd21SetCustomTextOutHandlerEx
120x6e7afDllGetVersion
130x337a8RichEditWndProc
140x67858RichListBoxWndProc
150x51501RichComboBoxWndProc
module_nameMSFTEDIT.dll
flags0
timestamp2010-11-20 09:09:10
version0.0
ordinal_base2
nFunctions14
nNames14
Names(14)0x9fc4
Functions(14)0x9f8c
NameOrdinals(14)0x9ffc

StringTable 000004b0

CommentsMsftEdit Version 4.1
CompanyNameMicrosoft Corporation
FileDescriptionRich Text Edit Control, v4.1
FileVersion5.41.21.2510
InternalNameMsftEdit
LegalCopyrightCopyright © Microsoft Corp. 1997-2008.
OriginalFilenameMsftEdit.dll
ProductNameMicrosoft RichEdit Control, version 4.1
ProductVersion4.1

VS_FIXEDFILEINFO

FileVersion5.41.21.2510
ProductVersion5.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0592384DLL11/20/2010 12:02:58#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x288