BkrProcA6.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	BkrProcA6.dll
size	977920 (0xeec00)
md5	3f41a7b64caeae193105ce8183efd4e6

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
147	30729	2
156	30319	3
1	0	48
158	30319	2
171	30319	2
18	8444	33
0	0	60
170	30319	11
155	30319	1
157	30319	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4d23366e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0xdde00
SizeOfInitializedData	0x10e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x17ae
BaseOfCode	0x1000
BaseOfData	0xdf000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	1.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0xf2000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xddcca	0xdde00	R-X CODE
.rdata	0xdf000	0x8de	0xa00	R-- IDATA
.data	0xe0000	0x51b4	0x4e00	RW- IDATA
.data1	0xe6000	0x7530	0x7600	RW- IDATA
.reloc	0xee000	0x3b1e	0x3c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xdf550	0x38e
IMPORT	0xdf17c	0x3c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xee000	0x2bc0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xdf000	0xb8
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
MSVCR100.dll	545	_except_handler4_common
MSVCR100.dll	1395	exit
MSVCR100.dll	969	_onexit
MSVCR100.dll	803	_lock
MSVCR100.dll	347	__dllonexit
MSVCR100.dll	1165	_unlock
MSVCR100.dll	339	__clean_type_info_names_internal
MSVCR100.dll	305	__CppXcptFilter
MSVCR100.dll	453	_amsg_exit
MSVCR100.dll	689	_initterm_e
MSVCR100.dll	688	_initterm
MSVCR100.dll	537	_encoded_null
MSVCR100.dll	1419	free
MSVCR100.dll	820	_malloc_crt
MSVCR100.dll	507	_crt_debugger_hook
MSVCR100.dll	1476	malloc
MSVCR100.dll	1407	floor
MSVCR100.dll	1388	ceil
MSVCR100.dll	1522	srand
MSVCR100.dll	1505	rand
MSVCR100.dll	1539	strncmp
MSVCR100.dll	1519	sprintf
KERNEL32.dll	748	InterlockedExchange
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	659	GetTickCount
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	745	InterlockedCompareExchange
KERNEL32.dll	1202	Sleep
KERNEL32.dll	202	DecodePointer
KERNEL32.dll	234	EncodePointer
KERNEL32.dll	1221	TlsAlloc
KERNEL32.dll	1224	TlsSetValue
KERNEL32.dll	288	FatalAppExitA
KERNEL32.dll	836	LocalAlloc
KERNEL32.dll	1223	TlsGetValue
KERNEL32.dll	1222	TlsFree
KERNEL32.dll	840	LocalFree

ord	entry_va	function_name
1	0x56a0	iplAdd
2	0x6fb0	iplAllocateImage
3	0x73d0	iplAllocateImageFP
4	0x79e0	iplBitonalToGray
5	0x8f90	iplClose
6	0x91a0	iplColorToGray
7	0x97a0	iplComputeHisto
8	0x15c00	iplConvolve2D
9	0x16170	iplCopy
10	0xa760	iplCreateConvKernel
11	0x6c00	iplCreateImageHeader
12	0x77f0	iplDeallocate
13	0x19b60	iplDecimate
14	0xa900	iplDeleteConvKernel
15	0x1c540	iplDilate
16	0x1c6c0	iplErode
17	0x18440	iplExchange
18	0x2d460	iplFixedFilter
19	0x1160	iplGetErrStatus
20	0x1430	iplGetLibVersion
21	0x2e5b0	iplGetPixel
22	0x32660	iplGetRotateShift
23	0x9490	iplGrayToColor
24	0x2c410	iplMaxFilter
25	0x2cef0	iplMedianFilter
26	0x2c980	iplMinFilter
27	0x32770	iplOpen
28	0x334c0	iplPutPixel
29	0x396b0	iplReduceBits
30	0x3c5c0	iplResize
31	0x31670	iplRotate
32	0x17730	iplSet
33	0x3c6e0	iplSetBorderMode
34	0x11a0	iplSetErrMode
35	0x1170	iplSetErrStatus
36	0x43840	iplThreshold

module_name	BkrProcA6.dll
flags	0
timestamp	2011-01-04 15:02:06
version	0.0
ordinal_base	1
nFunctions	36
nNames	36
Names(36)	0xdf608
Functions(36)	0xdf578
NameOrdinals(36)	0xdf698

show previews

offset	size	type	comment
0	977920	DLL	01/04/2011 15:02:06	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK