filenamecabc_600e.DLL
size94259 (0x17033)
md51d52b942bf0db3ff7ad463d677e1f5c0
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
1472992
1187972
1087974
487972
1181681
1187983
001
19802215
1980349
1063
484473
1187991
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4d4c2934
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x7000
SizeOfInitializedData0xf000
SizeOfUninitializedData0
AddressOfEntryPoint0x7209
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x17000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x65bc0x7000R-X CODE
.rdata0x80000x1b310x2000R-- IDATA
.data0xa0000x17940x2000RW- IDATA
.rsrc0xc0000x98880xa000R-- IDATA
.reloc0x160000x82c0x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x9a900xa1
IMPORT0x94400xa0
RESOURCE0xc0000x9888
EXCEPTION00
SECURITY00
BASERELOC0x160000x764
DEBUG0x81500x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x80000x14c
Delay_IAT00
CLR_Header00
typenamesizecp
TYPELIB#1198640
CURSOR#13080
CURSOR#21800
CURSOR#33080
CURSOR#41800
CURSOR#53080
CURSOR#61800
CURSOR#73080
CURSOR#81800
CURSOR#93080
CURSOR#101800
CURSOR#115120
CURSOR#121800
CURSOR#135120
CURSOR#141800
CURSOR#155120
CURSOR#161800
CURSOR#175120
CURSOR#181800
CURSOR#193080
CURSOR#201800
CURSOR#213080
CURSOR#221800
BITMAP#2656715080
BITMAP#309941840
BITMAP#309953640
BITMAP#309963240
DIALOG#307212320
STRING#38411300
STRING#3842420
STRING#38433300
STRING#3850740
STRING#385712500
STRING#38586740
STRING#38597320
STRING#38654100
STRING#38662220
STRING#386712200
STRING#38686120
STRING#3869440
GROUP_CURSOR#30977340
GROUP_CURSOR#30979340
GROUP_CURSOR#30980340
GROUP_CURSOR#30981340
GROUP_CURSOR#30982340
GROUP_CURSOR#30983340
GROUP_CURSOR#30984340
GROUP_CURSOR#30985340
GROUP_CURSOR#30986340
GROUP_CURSOR#30987340
GROUP_CURSOR#30988340
VERSION#113580
idlangstring
614401033Open
614411033Save As
614421033All Files (*.*)
614431033Untitled
614461033an unnamed file
614571033&Hide
614721033No error message is available.
614731033An unsupported operation was attempted.
614741033A required resource was unavailable.
614751033Out of memory.
614761033An unknown error has occurred.
615881033Linked %s
615891033Unknown Type
616961033Invalid filename.
616971033Failed to open document.
616981033Failed to save document.
616991033Save changes to %1?
617001033Failed to create empty document.
617011033The file is too large to open.
617021033Could not start print job.
617031033Failed to launch help.
617041033Internal application error.
617051033Command failed.
617061033Insufficient memory to perform operation.
617071033System registry entries have been removed and the INI file (if any) was deleted.
617081033Not all of the system registry entries (or INI file) were removed.
617091033This program requires the file %s, which was not found on this system.
617101033This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617121033Please enter an integer.
617131033Please enter a number.
617141033Please enter an integer between %1 and %2.
617151033Please enter a number between %1 and %2.
617161033Please enter no more than %1 characters.
617171033Please select a button.
617181033Please enter an integer between 0 and 255.
617191033Please enter a positive integer.
617201033Please enter a date and/or time.
617211033Please enter a currency.
617281033Unexpected file format.
617291033%1 Cannot find this file. Please verify that the correct path and file name are given.
617301033Destination disk drive is full.
617311033Unable to read from %1, it is opened by someone else.
617321033Unable to write to %1, it is read-only or opened by someone else.
617331033An unexpected error occurred while reading %1.
617341033An unexpected error occurred while writing %1.
618281033The file is not supported by a Document Object server.
618291033%1 Unable to register document. The document may already be open.
618361033Unable to read write-only property.
618371033Unable to write read-only property.
618401033Unable to load mail system support.
618411033Mail system DLL is invalid.
618421033Send Mail failed to send message.
618561033No error occurred.
618571033An unknown error occurred while accessing %1.
618581033%1 was not found.
618591033%1 contains an invalid path.
618601033%1 could not be opened because there are too many open files.
618611033Access to %1 was denied.
618621033An invalid file handle was associated with %1.
618631033%1 could not be removed because it is the current directory.
618641033%1 could not be created because the directory is full.
618651033Seek failed on %1
618661033A hardware I/O error was reported while accessing %1.
618671033A sharing violation occurred while accessing %1.
618681033A locking violation occurred while accessing %1.
618691033Disk full while accessing %1.
618701033An attempt was made to access %1 past its end.
618721033No error occurred.
618731033An unknown error occurred while accessing %1.
618741033An attempt was made to write to the reading %1.
618751033An attempt was made to access %1 past its end.
618761033An attempt was made to read from the writing %1.
618771033%1 has a bad format.
618781033%1 contained an unexpected object.
618791033%1 contains an incorrect schema.
618881033pixels
module_namehintordfunction_name
KERNEL32.dll318GetProcAddress
KERNEL32.dll453LoadLibraryW
KERNEL32.dll429InterlockedDecrement
KERNEL32.dll432InterlockedIncrement
KERNEL32.dll374GetVersionExW
KERNEL32.dll180FreeLibrary
KERNEL32.dll771lstrcpyW
KERNEL32.dll762lstrcatW
KERNEL32.dll282GetLastError
KERNEL32.dll722WideCharToMultiByte
KERNEL32.dll777lstrlenW
KERNEL32.dll484MultiByteToWideChar
KERNEL32.dll776lstrlenA
KERNEL32.dll293GetModuleFileNameW
KERNEL32.dll102EnterCriticalSection
KERNEL32.dll250GetCurrentThreadId
KERNEL32.dll449LeaveCriticalSection
KERNEL32.dll85DeleteCriticalSection
KERNEL32.dll413HeapDestroy
KERNEL32.dll426InitializeCriticalSection
KERNEL32.dll460LocalFree
USER32.dll39CharNextW
ADVAPI32.dll402ReportEventW
ADVAPI32.dll121DeregisterEventSource
ADVAPI32.dll391RegSetValueExW
ADVAPI32.dll352RegCreateKeyExW
ADVAPI32.dll347RegCloseKey
ADVAPI32.dll371RegOpenKeyExW
ADVAPI32.dll360RegEnumKeyExW
ADVAPI32.dll355RegDeleteKeyW
ADVAPI32.dll397RegisterEventSourceW
ole32.dll6CLSIDFromString
ole32.dll52CoLoadLibrary
ole32.dll5CLSIDFromProgID
ole32.dll216OleRun
ole32.dll268StringFromCLSID
ole32.dll79CoTaskMemFree
ole32.dll13CoCreateInstance
OLEAUT32.dll161
OLEAUT32.dll163
OLEAUT32.dll149
OLEAUT32.dll150
OLEAUT32.dll2
OLEAUT32.dll4
OLEAUT32.dll6
OLEAUT32.dll9
OLEAUT32.dll202
OLEAUT32.dll12
OLEAUT32.dll200
OLEAUT32.dll201
OLEAUT32.dll8
provcont.DLLCanUnloadNow
provcont.DLL5GetProvider
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll85__dllonexit
MSVCRT.dll46void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCRT.dll202_except_handler3
MSVCRT.dll606free
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll65_CxxThrowException
MSVCRT.dll742wcslen
MSVCRT.dll663memcpy
MSVCRT.dll499_wcsupr
MSVCRT.dll749wcsstr
MSVCRT.dll733vswprintf
MSVCRT.dll715swprintf
MSVCRT.dll739wcscpy
MSVCRT.dll657malloc
MSVCRT.dll271_initterm
MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll390_onexit
MSVCRT.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCRT.dll490_wcsicmp
MSVCRT.dll402_purecall
MSVCRT.dll662memcmp
MSVCRT.dll735wcscat
ordentry_vafunction_name
10x459eDllCanUnloadNow
20x45dcDllGetClassObject
30x4cc5DllRegisterServer
40x4d7fDllUnregisterServer
module_nameCABC.dll
flags0
timestamp2011-02-04 16:28:35
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x9ac8
Functions(4)0x9ab8
NameOrdinals(4)0x9ad8

StringTable 040904E4

CompanyNameNEC Corporation
FileDescriptionUNICODE Symbols By NAME
FileVersion6.0.00_E
InternalNamef1
LegalCopyrightCopyright(C) Wonderware Corporation, 1994 - 2011. All Rights Reserved.
LegalTrademarksNEC(TM) and FlexProcess(TM) are trademarks of NEC Corporation.Wonderware(R) and Protean(R) are Registered Trademarks of Wonderware Corporation.
CommentsThis program is protected by US and International copyright laws as described in Help About.
OriginalFilenamecabc.DLL
ProductNameFlexProcess
ProductVersion6.0.00

VS_FIXEDFILEINFO

FileVersion6.0.0.61802
ProductVersion6.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags2
FileOS0
FileType1
FileSubtype0
offsetsizetypecomment
094208DLL02/04/2011 16:28:36#
15c115HTM#
1700051BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK