filenameNXULNK32.dll
size102400 (0x19000)
md544e1d4a7c86f2bb199fa939e4e352d0b
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1255072717
123507272
9340355
10117
10950727106
1105072744
122507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x56215e5f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion8.0
SizeOfCode0xe000
SizeOfInitializedData0xa000
SizeOfUninitializedData0
AddressOfEntryPoint0x3990
BaseOfCode0x1000
BaseOfData0xf000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1a000
SizeOfHeaders0x1000
CheckSum0x1c3c6
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000xd3650xe000R-X CODE
.rdata0xf0000x3b590x4000R-- IDATA
.data0x130000x2ea80x2000RW- IDATA
.Shared0x1600040x1000RW- IDATA SHARED
.rsrc0x170000x4480x1000R-- IDATA
.reloc0x180000x18cc0x2000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x129b00x1a9
IMPORT0x11fa40x50
RESOURCE0x170000x448
EXCEPTION00
SECURITY00
BASERELOC0x180000xd38
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x114d00x40
Bound_IAT00
IAT0xf0000x1a4
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18481252
MANIFEST#2861252
module_namehintordfunction_name
RPCRT4.dll135NdrClientCall2
RPCRT4.dll475RpcStringBindingComposeA
RPCRT4.dll334RpcBindingFromStringBindingA
RPCRT4.dll479RpcStringFreeA
RPCRT4.dll333RpcBindingFree
OsAbstraction.dll147protected: virtual void __thiscall DThread::Kill(void)

?Kill@DThread@@MAEXXZ

OsAbstraction.dll181public: virtual enum IThread::status_t __thiscall DThread::WaitForThreadDeath(long)

?WaitForThreadDeath@DThread@@UAE?AW4status_t@IThread@@J@Z

OsAbstraction.dll139public: virtual unsigned long __thiscall DThread::GetThreadId(void)

?GetThreadId@DThread@@UAEKXZ

OsAbstraction.dll131public: virtual char const * __thiscall DThread::GetName(void)

?GetName@DThread@@UAEPBDXZ

OsAbstraction.dll169public: virtual void __thiscall DThread::SetName(char const *)

?SetName@DThread@@UAEXPBD@Z

OsAbstraction.dll132public: virtual long __thiscall DThread::GetPriority(void)

?GetPriority@DThread@@UAEJXZ

OsAbstraction.dll170public: virtual long __thiscall DThread::SetPriority(long)

?SetPriority@DThread@@UAEJJ@Z

OsAbstraction.dll11public: __thiscall DThread::DThread(char const *, long, long, long)

??0DThread@@QAE@PBDJJJ@Z

OsAbstraction.dll3public: __thiscall DEvent::DEvent(bool, bool)

??0DEvent@@QAE@_N0@Z

OsAbstraction.dll7public: __thiscall DInterlockedValue::DInterlockedValue(long)

??0DInterlockedValue@@QAE@J@Z

OsAbstraction.dll176public: virtual void __thiscall DThread::Start(void)

?Start@DThread@@UAEXXZ

OsAbstraction.dll49public: virtual __thiscall DThread::~DThread(void)

??1DThread@@UAE@XZ

OsAbstraction.dll40public: virtual __thiscall DEvent::~DEvent(void)

??1DEvent@@UAE@XZ

OsAbstraction.dll44public: virtual __thiscall DInterlockedValue::~DInterlockedValue(void)

??1DInterlockedValue@@UAE@XZ

KERNEL32.dll530HeapCreate
KERNEL32.dll693ReadFile
KERNEL32.dll784SetEndOfFile
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll445GetStringTypeW
KERNEL32.dll442GetStringTypeA
KERNEL32.dll581LCMapStringW
KERNEL32.dll580LCMapStringA
KERNEL32.dll795SetFilePointer
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll931WriteConsoleW
KERNEL32.dll309GetConsoleOutputCP
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll854Sleep
KERNEL32.dll52CloseHandle
KERNEL32.dll912WaitForSingleObject
KERNEL32.dll79CreateEventA
KERNEL32.dll790SetEvent
KERNEL32.dll604LocalFree
KERNEL32.dll243FormatMessageA
KERNEL32.dll369GetLastError
KERNEL32.dll102CreateProcessA
KERNEL32.dll707ReleaseSemaphore
KERNEL32.dll412GetPrivateProfileStringA
KERNEL32.dll107CreateSemaphoreA
KERNEL32.dll719ResetEvent
KERNEL32.dll528HeapAlloc
KERNEL32.dll534HeapFree
KERNEL32.dll727RtlUnwind
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll272GetCommandLineA
KERNEL32.dll489GetVersionExA
KERNEL32.dll419GetProcessHeap
KERNEL32.dll862TerminateProcess
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll804SetHandleCount
KERNEL32.dll441GetStdHandle
KERNEL32.dll358GetFileType
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll899VirtualFree
KERNEL32.dll897VirtualAlloc
KERNEL32.dll538HeapReAlloc
KERNEL32.dll532HeapDestroy
KERNEL32.dll416GetProcAddress
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll185ExitProcess
KERNEL32.dll932WriteFile
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll679RaiseException
KERNEL32.dll869TlsGetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll870TlsSetValue
KERNEL32.dll868TlsFree
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll808SetLastError
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll246FreeEnvironmentStringsA
KERNEL32.dll341GetEnvironmentStrings
KERNEL32.dll247FreeEnvironmentStringsW
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll343GetEnvironmentStringsW
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll479GetTickCount
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll823SetStdHandle
KERNEL32.dll290GetConsoleCP
KERNEL32.dll307GetConsoleMode
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll260GetCPInfo
KERNEL32.dll253GetACP
KERNEL32.dll403GetOEMCP
KERNEL32.dll575IsValidCodePage
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll83CreateFileA
KERNEL32.dll594LoadLibraryA
KERNEL32.dll540HeapSize
KERNEL32.dll921WriteConsoleA
ordentry_vafunction_name
10x23f0RP1210_ClientConnect
20x22b0RP1210_ClientDisconnect
30x1720RP1210_ReadMessage
40x1500RP1210_SendMessage
50x15c0RP1210_SendCommand
60x17e0RP1210_ReadVersion
70x1820RP1210_ReadDetailedVersion
80x19d0RP1210_GetErrorMsg
90x1ad0RP1210_GetLastErrorMsg
100x1c00RP1210_GetHardwareStatus
110x1910RP1210_ReadSerialNumber
120x1cc0RP1210_Ioctl
module_nameNXULNK32.dll
flags0
timestamp2015-10-16 20:30:23
version0.0
ordinal_base1
nFunctions12
nNames12
Names(12)0x12a08
Functions(12)0x129d8
NameOrdinals(12)0x12a38

StringTable 040904b0

CommentsUSB-Link RP1210 DLL; x86 version
CompanyNameSnap-on Inc
FileDescriptionNX121032
FileVersion9, 5, 0, 1
InternalNameNXULNK32
LegalCopyrightCopyright © 2014 IDSC Holdings LLC
OriginalFilenameNXULNK32.DLL
ProductNameSnap-on Inc NXULNK32
ProductVersion9, 5, 0, 1

VS_FIXEDFILEINFO

FileVersion9.5.0.1
ProductVersion9.5.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0102400DLL10/16/2015 20:30:23#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK