filenamedll_prog.exe
size3751676 (0x393efc)
md53cf5db7fa48b793c1ff279c9af12ee62
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
1272919
1180471
1472999
10804712
480474
10330
25921015
617351
11978223

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x5333022e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion6.0
SizeOfCode0x12f000
SizeOfInitializedData0x6d000
SizeOfUninitializedData0
AddressOfEntryPoint0x12beec
BaseOfCode0x1000
BaseOfData0x130000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x19d000
SizeOfHeaders0x1000
CheckSum0x3a2fe5
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x10000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.text0x10000x12e6b30x12f000R-X CODE
.rdata0x1300000x8b500x9000R-- IDATA
.data0x1390000x52e980x51000RW- IDATA
.tls0x18c0000x3e00x1000RW- IDATA
.rsrc0x18d0000x5e00x1000R-- IDATA
.reloc0x18e0000xe02c0xf000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x1371200xc8
RESOURCE0x18d0000x5e0
EXCEPTION00
SECURITY00
BASERELOC0x18e0000xcb80
DEBUG0x1305500x54
ARCHITECTURE00
GLOBALPTR00
TLS0x1311700x18
LOAD_CONFIG00
Bound_IAT00
IAT0x1300000x54c
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x58c0000x58c3dc0x58be780x53902400
typenamesizecp
VERSION#114080
module_namehintordfunction_name
KERNEL32.dll448GetTimeFormatW
KERNEL32.dll308GetDateFormatW
KERNEL32.dll184FileTimeToSystemTime
KERNEL32.dll183FileTimeToLocalFileTime
KERNEL32.dll815SystemTimeToTzSpecificLocalTime
KERNEL32.dll497HeapCreate
KERNEL32.dll499HeapDestroy
KERNEL32.dll495HeapAlloc
KERNEL32.dll507HeapSize
KERNEL32.dll505HeapReAlloc
KERNEL32.dll501HeapFree
KERNEL32.dll853VirtualAlloc
KERNEL32.dll856VirtualFree
KERNEL32.dll316GetDiskFreeSpaceW
KERNEL32.dll69CreateDirectoryW
KERNEL32.dll77CreateFileW
KERNEL32.dll727SetConsoleMode
KERNEL32.dll288GetConsoleMode
KERNEL32.dll340GetFullPathNameW
KERNEL32.dll766SetLastError
KERNEL32.dll694SearchPathW
KERNEL32.dll302GetCurrentDirectoryW
KERNEL32.dll580MapViewOfFile
KERNEL32.dll76CreateFileMappingW
KERNEL32.dll604OpenFileMappingW
KERNEL32.dll837UnmapViewOfFile
KERNEL32.dll221FlushViewOfFile
KERNEL32.dll588MoveFileExW
KERNEL32.dll752SetFileAttributesW
KERNEL32.dll331GetFileAttributesW
KERNEL32.dll61CopyFileW
KERNEL32.dll753SetFilePointer
KERNEL32.dll333GetFileSize
KERNEL32.dll744SetEndOfFile
KERNEL32.dll207FindNextFileW
KERNEL32.dll121DeleteFileW
KERNEL32.dll672RemoveDirectoryW
KERNEL32.dll656ReadFile
KERNEL32.dll225FormatMessageW
KERNEL32.dll91CreatePipe
KERNEL32.dll643RaiseException
KERNEL32.dll873WideCharToMultiByte
KERNEL32.dll424GetSystemInfo
KERNEL32.dll483GlobalMemoryStatus
KERNEL32.dll348GetLocalTime
KERNEL32.dll315GetDiskFreeSpaceExW
KERNEL32.dll51CompareStringW
KERNEL32.dll350GetLocaleInfoW
KERNEL32.dll885WriteConsoleW
KERNEL32.dll734SetConsoleScreenBufferSize
KERNEL32.dll735SetConsoleTextAttribute
KERNEL32.dll414GetStdHandle
KERNEL32.dll9AllocConsole
KERNEL32.dll577LockResource
KERNEL32.dll563LoadResource
KERNEL32.dll593MultiByteToWideChar
KERNEL32.dll101CreateThread
KERNEL32.dll792SetThreadPriority
KERNEL32.dll775SetPriorityClass
KERNEL32.dll37CancelIo
KERNEL32.dll774SetNamedPipeHandleState
KERNEL32.dll872WaitNamedPipeW
KERNEL32.dll323GetEnvironmentVariableW
KERNEL32.dll558LoadLibraryA
KERNEL32.dll422GetSystemDirectoryA
KERNEL32.dll620PeekNamedPipe
KERNEL32.dll381GetOverlappedResult
KERNEL32.dll830TryEnterCriticalSection
KERNEL32.dll442GetThreadPriority
KERNEL32.dll867WaitForMultipleObjects
KERNEL32.dll260GetComputerNameW
KERNEL32.dll317GetDriveTypeA
KERNEL32.dll313GetDiskFreeSpaceA
KERNEL32.dll927lstrlenW
KERNEL32.dll257GetComputerNameA
KERNEL32.dll568LocalFree
KERNEL32.dll566LocalFileTimeToFileTime
KERNEL32.dll712SetConsoleCtrlHandler
KERNEL32.dll886WriteFile
KERNEL32.dll445GetThreadTimes
KERNEL32.dll638QueryPerformanceCounter
KERNEL32.dll639QueryPerformanceFrequency
KERNEL32.dll601OpenEventW
KERNEL32.dll71CreateEventW
KERNEL32.dll681ResetEvent
KERNEL32.dll518InterlockedDecrement
KERNEL32.dll517InterlockedCompareExchange
KERNEL32.dll522InterlockedIncrement
KERNEL32.dll748SetEvent
KERNEL32.dll669ReleaseMutex
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll88CreateMutexW
KERNEL32.dll305GetCurrentThread
KERNEL32.dll136DuplicateHandle
KERNEL32.dll557LeaveCriticalSection
KERNEL32.dll139EnterCriticalSection
KERNEL32.dll44CloseHandle
KERNEL32.dll226FreeConsole
KERNEL32.dll254GetCommandLineW
KERNEL32.dll200FindFirstFileW
KERNEL32.dll193FindClose
KERNEL32.dll303GetCurrentProcess
KERNEL32.dll400GetProcessTimes
KERNEL32.dll426GetSystemTime
KERNEL32.dll814SystemTimeToFileTime
KERNEL32.dll26Beep
KERNEL32.dll809Sleep
KERNEL32.dll439GetTempPathW
KERNEL32.dll306GetCurrentThreadId
KERNEL32.dll304GetCurrentProcessId
KERNEL32.dll358GetModuleFileNameW
KERNEL32.dll346GetLastError
KERNEL32.dll561LoadLibraryW
KERNEL32.dll393GetProcAddress
KERNEL32.dll457GetVersionExW
KERNEL32.dll441GetThreadLocale
KERNEL32.dll362GetModuleHandleW
KERNEL32.dll171ExitProcess
KERNEL32.dll560LoadLibraryExW
KERNEL32.dll214FindResourceExW
KERNEL32.dll229FreeLibrary
KERNEL32.dll118DeleteCriticalSection
KERNEL32.dll514InitializeCriticalSection
KERNEL32.dll446GetTickCount
KERNEL32.dll172ExitThread
KERNEL32.dll95CreateProcessW
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll461RegCreateKeyExW
ADVAPI32.dll510RegisterEventSourceW
ADVAPI32.dll175DeregisterEventSource
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll558SetSecurityDescriptorDacl
ADVAPI32.dll304InitializeSecurityDescriptor
ADVAPI32.dll384LsaRetrievePrivateData
ADVAPI32.dll352LsaFreeMemory
ADVAPI32.dll369LsaOpenPolicy
ADVAPI32.dll367LsaNtStatusToWinError
ADVAPI32.dll395LsaStorePrivateData
ADVAPI32.dll338LsaClose
ADVAPI32.dll243GetKernelObjectSecurity
ADVAPI32.dll315IsValidSecurityDescriptor
ADVAPI32.dll262GetSecurityDescriptorDacl
ADVAPI32.dll265GetSecurityDescriptorOwner
ADVAPI32.dll314IsValidAcl
ADVAPI32.dll227GetAclInformation
ADVAPI32.dll226GetAce
ADVAPI32.dll290GetUserNameW
ADVAPI32.dll56CheckTokenMembership
ADVAPI32.dll482RegOpenKeyExW
ADVAPI32.dll485RegOverridePredefKey
ADVAPI32.dll324LookupAccountNameW
ADVAPI32.dll276GetSidLengthRequired
ADVAPI32.dll305InitializeSid
ADVAPI32.dll316IsValidSid
ADVAPI32.dll275GetSidIdentifierAuthority
ADVAPI32.dll278GetSidSubAuthorityCount
ADVAPI32.dll277GetSidSubAuthority
ADVAPI32.dll326LookupAccountSidW
ADVAPI32.dll244GetLengthSid
ADVAPI32.dll90CopySid
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll223FreeSid
ADVAPI32.dll214EqualSid
ADVAPI32.dll429OpenThreadToken
ADVAPI32.dll424OpenProcessToken
ADVAPI32.dll279GetTokenInformation
ADVAPI32.dll521ReportEventW
ADVAPI32.dll456RegCloseKey
WS2_32.dll151
WS2_32.dll7
WS2_32.dll21
WS2_32.dll3
WS2_32.dll116
WS2_32.dll111
WS2_32.dll115
WS2_32.dll18
WS2_32.dll20
WS2_32.dll6
WS2_32.dll16
WS2_32.dll63WSASocketW
WS2_32.dll17WSACreateEvent
WS2_32.dll25WSAEventSelect
WS2_32.dll15WSACloseEvent
WS2_32.dll2
WS2_32.dll68WSAWaitForMultipleEvents
WS2_32.dll22WSAEnumNetworkEvents
WS2_32.dll15
WS2_32.dll56
WS2_32.dll51
WS2_32.dll52
WS2_32.dll11
WS2_32.dll9
WS2_32.dll55
WS2_32.dll8
WS2_32.dll12
WS2_32.dll23
WS2_32.dll10
WS2_32.dll4
USER32.dll483MessageBoxW
USER32.dll411IsCharLowerW
USER32.dll413IsCharUpperW
USER32.dll475MessageBeep
USER32.dll41CharLowerW
USER32.dll408IsCharAlphaNumericW
USER32.dll409IsCharAlphaW
USER32.dll729wsprintfW
USER32.dll349GetSystemMetrics
MPR.dll40WNetGetConnectionW
MPR.dll45WNetGetLastErrorW
MPR.dll47WNetGetNetworkInformationW
NETAPI32.dll104NetApiBufferFree
NETAPI32.dll246NetWkstaGetInfo
NETAPI32.dll143NetGetDCName
CRYPT32.dll58CertFreeCertificateChain
CRYPT32.dll107CertVerifyCertificateChainPolicy
CRYPT32.dll60CertFreeCertificateContext
CRYPT32.dll80CertOpenStore
CRYPT32.dll50CertFindCertificateInStore
CRYPT32.dll64CertGetCertificateChain
CRYPT32.dll15CertCloseStore
MSVCRT.dll459_strupr
MSVCRT.dll477_unlink
MSVCRT.dll176_chmod
MSVCRT.dll308_itoa
MSVCRT.dll129__set_app_type
MSVCRT.dll111__p__fmode
MSVCRT.dll106__p__commode
MSVCRT.dll157_adjust_fdiv
MSVCRT.dll249_getcwd
MSVCRT.dll271_initterm
MSVCRT.dll88__getmainargs
MSVCRT.dll100__p___initenv
MSVCRT.dll585exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll211_exit
MSVCRT.dll14public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCRT.dll390_onexit
MSVCRT.dll85__dllonexit
MSVCRT.dll688sin
MSVCRT.dll580cos
MSVCRT.dll709strstr
MSVCRT.dll224_findfirst
MSVCRT.dll226_findnext
MSVCRT.dll385_memicmp
MSVCRT.dll142_access
MSVCRT.dll131__setusermatherr
MSVCRT.dll556_wtoi
MSVCRT.dll223_findclose
MSVCRT.dll625isalpha
MSVCRT.dll242_fullpath
MSVCRT.dll253_getdrive
MSVCRT.dll442_stat
MSVCRT.dll610fseek
MSVCRT.dll612ftell
MSVCRT.dll601fputc
MSVCRT.dll592fgetc
MSVCRT.dll614fwrite
MSVCRT.dll605fread
MSVCRT.dll599fopen
MSVCRT.dll745wcsncpy
MSVCRT.dll665memset
MSVCRT.dll742wcslen
MSVCRT.dll183_controlfp
MSVCRT.dll663memcpy
MSVCRT.dll757wprintf
MSVCRT.dll715swprintf
MSVCRT.dll702strlen
MSVCRT.dll690sprintf
MSVCRT.dll202_except_handler3
MSVCRT.dll741wcsftime
MSVCRT.dll653localtime
MSVCRT.dll720time
MSVCRT.dll565abs
MSVCRT.dll573atoi
MSVCRT.dll662memcmp
MSVCRT.dll735wcscat
MSVCRT.dll743wcsncat
MSVCRT.dll739wcscpy
MSVCRT.dll737wcscmp
MSVCRT.dll490_wcsicmp
MSVCRT.dll736wcschr
MSVCRT.dll749wcsstr
MSVCRT.dll659mbstowcs
MSVCRT.dll670printf
MSVCRT.dll241_ftol
MSVCRT.dll16void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCRT.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCRT.dll752wcstol
MSVCRT.dll754wcstoul
MSVCRT.dll705strncpy
MSVCRT.dll386_mkdir
MSVCRT.dll178_clearfp
MSVCRT.dll669pow
MSVCRT.dll73__CxxFrameHandler
MSVCRT.dll65_CxxThrowException
MSVCRT.dll617getchar
MSVCRT.dll595fgetwc
MSVCRT.dll275_iob
MSVCRT.dll597floor
MSVCRT.dll244_gcvt
MSVCRT.dll482_vsnwprintf
MSVCRT.dll587fabs
MSVCRT.dll307_isnan
MSVCRT.dll691sqrt
MSVCRT.dll698strcpy
MSVCRT.dll676qsort
MSVCRT.dll200_errno
MSVCRT.dll321_lrotl
MSVCRT.dll44void (__cdecl*__cdecl set_terminate(void (__cdecl*)(void)))(void)

?set_terminate@@YAP6AXXZP6AXXZ@Z

MSVCRT.dll694strcat
MSVCRT.dll606free
MSVCRT.dll713strtoul
MSVCRT.dll576calloc
MSVCRT.dll696strcmp
MSVCRT.dll695strchr
MSVCRT.dll655log10
MSVCRT.dll402_purecall
MSVCRT.dll746wcspbrk
MSVCRT.dll228_finite
MSVCRT.dll492_wcslwr
MSVCRT.dll664memmove
MSVCRT.dll657malloc
MSVCRT.dll707strrchr
MSVCRT.dll681rename
MSVCRT.dll480_utime
MSVCRT.dll588fclose
MSVCP60.dll265public: __thiscall std::ios_base::Init::~Init(void)

??1Init@ios_base@std@@QAE@XZ

MSVCP60.dll165public: __thiscall std::_Winit::_Winit(void)

??0_Winit@std@@QAE@XZ

MSVCP60.dll269public: __thiscall std::_Winit::~_Winit(void)

??1_Winit@std@@QAE@XZ

MSVCP60.dll158public: __thiscall std::ios_base::Init::Init(void)

??0Init@ios_base@std@@QAE@XZ

StringTable 040904b0

CompanyNameAllen Systems Group, Inc.
FileDescriptionCypress® Server DLL Caller
FileVersion7.3.1.13
LegalCopyrightCopyright © 1998-2014 Allen Systems Group, Inc. All Rights Reserved
LegalTrademarksCypress® and DocuVault® are registered trademarks of Allen Systems Group, Inc. The Cypress logo is a trademark of Allen Systems Group, Inc..
OriginalFilenamedll_prog.exe
ProductNameASG-Cypress®
ProductVersion7.3.1.13
PatentsU.S. Patent No. 6,070,164 and 6,499,033. Other U.S. and foreign patents pending.
Target PlatformsMicrosoft® Windows NT®

VS_FIXEDFILEINFO

FileVersion7.3.1.13
ProductVersion7.3.1.13
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
01683456EXE03/26/2014 16:37:02#
15c115HTM#
19b0002068220BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x18be78