graph.dll

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	graph.dll
size	45568 (0xb200)
md5	4c408eeaf30c8580fd8020b87a029fa7

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
123	50727	2
150	20413	1
149	21022	1
132	21022	2
147	21022	5
1	0	73
131	21022	23
146	21022	1
148	21022	1
145	21022	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4dd0dc56
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x8200
SizeOfInitializedData	0x3000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x8b27
BaseOfCode	0x1000
BaseOfData	0xa000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0xf000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x8034	0x8200	R-X CODE
.rdata	0xa000	0x14e0	0x1600	R-- IDATA
.data	0xc000	0xdc8	0xa00	RW- IDATA
.rsrc	0xd000	0x2f8	0x400	R-- IDATA
.reloc	0xe000	0x7e4	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xabd0	0x910
IMPORT	0xa63c	0x50
RESOURCE	0xd000	0x2f8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xe000	0x760
DEBUG	0xa150	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0xa538	0x40
Bound_IAT	0	0
IAT	0xa000	0x130
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#2	658	0

module_name	hint	function_name
cdt.dll	17	dtdisc
cdt.dll	29	dtwalk
cdt.dll	10	Dttree
cdt.dll	21	dtopen
cdt.dll	16	dtclose
cdt.dll	24	dtsize
MSVCR90.dll	161	__iob_func
MSVCR90.dll	1205	abort
MSVCR90.dll	1350	sprintf
MSVCR90.dll	1276	isalpha
MSVCR90.dll	1275	isalnum
MSVCR90.dll	1278	isdigit
MSVCR90.dll	1358	strchr
MSVCR90.dll	1370	strncmp
MSVCR90.dll	1233	ferror
MSVCR90.dll	1263	fwrite
MSVCR90.dll	1237	fgets
MSVCR90.dll	1281	islower
MSVCR90.dll	1394	tolower
MSVCR90.dll	1285	isupper
MSVCR90.dll	1283	ispunct
MSVCR90.dll	1277	iscntrl
MSVCR90.dll	1284	isspace
MSVCR90.dll	1354	sscanf
MSVCR90.dll	1361	strcpy
MSVCR90.dll	1244	fprintf
MSVCR90.dll	1258	fseek
MSVCR90.dll	1260	ftell
MSVCR90.dll	1234	fflush
MSVCR90.dll	1390	tmpfile
MSVCR90.dll	1400	vfprintf
MSVCR90.dll	1247	fputs
MSVCR90.dll	1228	exit
MSVCR90.dll	1356	strcat
MSVCR90.dll	1034	_vsnprintf
MSVCR90.dll	362	_encode_pointer
MSVCR90.dll	647	_malloc_crt
MSVCR90.dll	363	_encoded_null
MSVCR90.dll	352	_decode_pointer
MSVCR90.dll	516	_initterm
MSVCR90.dll	517	_initterm_e
MSVCR90.dll	277	_amsg_exit
MSVCR90.dll	267	_adjust_fdiv
MSVCR90.dll	106	__CppXcptFilter
MSVCR90.dll	331	_crt_debugger_hook
MSVCR90.dll	140	__clean_type_info_names_internal
MSVCR90.dll	998	_unlock
MSVCR90.dll	150	__dllonexit
MSVCR90.dll	630	_lock
MSVCR90.dll	796	_onexit
MSVCR90.dll	371	_except_handler4_common
MSVCR90.dll	1359	strcmp
MSVCR90.dll	1220	calloc
MSVCR90.dll	1252	free
MSVCR90.dll	1367	strlen
MSVCR90.dll	1338	realloc
MSVCR90.dll	1318	memcpy
MSVCR90.dll	1307	malloc
MSVCR90.dll	1250	fread
KERNEL32.dll	591	GetSystemTimeAsFileTime
KERNEL32.dll	426	GetCurrentProcessId
KERNEL32.dll	429	GetCurrentThreadId
KERNEL32.dll	614	GetTickCount
KERNEL32.dll	852	QueryPerformanceCounter
KERNEL32.dll	203	DisableThreadLibraryCalls
KERNEL32.dll	1045	SetUnhandledExceptionFilter
KERNEL32.dll	1086	UnhandledExceptionFilter
KERNEL32.dll	425	GetCurrentProcess
KERNEL32.dll	1069	TerminateProcess
KERNEL32.dll	698	InterlockedCompareExchange
KERNEL32.dll	1057	Sleep
KERNEL32.dll	701	InterlockedExchange
KERNEL32.dll	721	IsDebuggerPresent

ord	entry_va	function_name
1	0xcd80	AG
2	0xcd64	Line_number
3	0xc6c8	TrieStateTbl
4	0xc7d8	TrieTransTbl
5	0x2b10	agDELedge
6	0x67d0	agDELnode
7	0xc1d4	agEdgedisc
8	0x19a0	agFREEdict
9	0x2a60	agFREEedge
10	0x6ab0	agFREEnode
11	0x21e0	agINSedge
12	0x34e0	agINSgraph
13	0x6720	agINSnode
14	0xc0f0	agIndisc
15	0x1a60	agNEWdict
16	0x26a0	agNEWedge
17	0x6970	agNEWnode
18	0x1280	agNEWsym
19	0xc0a8	agNamedisc
20	0xc0cc	agNodedisc
21	0xc114	agOutdisc
22	0x1380	agattr
23	0x4140	agcanon
24	0x4080	agcanonical
25	0xcd60	agchar
26	0x3660	agclose
27	0x2c80	agcmpid
28	0x2c90	agcmpin
29	0x2de0	agcmpout
30	0x3930	agcontains
31	0x1ff0	agcopyattr
32	0x1ab0	agcopydict
33	0x3a20	agdelete
34	0x1210	agdictof
35	0x27e0	agedge
36	0x1960	agedgeattr
37	0x62f0	agerr
38	0xcdac	agerrno
39	0x6030	agerror
40	0x65d0	agerrorf
41	0x61c0	agerrors
42	0x1b50	agfindattr
43	0x20e0	agfindedge
44	0x6610	agfindnode
45	0x34a0	agfindsubg
46	0x1b90	agfstattr
47	0x2380	agfstedge
48	0x25e0	agfstin
49	0x68f0	agfstnode
50	0x2520	agfstout
51	0x1dc0	agget
52	0x8710	aghtmlstr
53	0x6670	agidnode
54	0x1e20	agindex
55	0x1c90	aginitlib
56	0x39c0	aginsert
57	0x6240	aglasterr
58	0x5440	aglex
59	0x5200	aglexinit
60	0x51d0	aglinenumber
61	0x1c10	aglstattr
62	0x6930	aglstnode
63	0xcd58	aglval
64	0x3ae0	agmemread
65	0x3aa0	agnedges
66	0xcd54	agnerrs
67	0x3a80	agnnodes
68	0x66a0	agnode
69	0x1920	agnodeattr
70	0x1bd0	agnxtattr
71	0x23d0	agnxtedge
72	0x2650	agnxtin
73	0x6910	agnxtnode
74	0x2590	agnxtout
75	0x3000	agopen
76	0x6ba0	agparse
77	0x2f60	agpopproto
78	0x18d0	agprotoedge
79	0x18b0	agprotograph
80	0x18c0	agprotonode
81	0x1c50	agprvattr
82	0x6950	agprvnode
83	0x2eb0	agpushproto
84	0x4050	agputc
85	0x4010	agputs
86	0x18e0	agraphattr
87	0x3ac0	agread
88	0x3c10	agread_usergets
89	0x51c0	agreadline
90	0x61f0	agreseterrors
91	0x1f20	agsafeset
92	0x1df0	agset
93	0x61b0	agseterr
94	0x6190	agseterrf
95	0x51e0	agsetfile
96	0x3fd0	agsetiodisc
97	0x3c50	agstrcanon
98	0x8480	agstrdup
99	0x8580	agstrdup_html
100	0x8650	agstrfree
101	0x33f0	agsubg
102	0x5300	agtoken
103	0x2fd0	agusergraph
104	0x65f0	agwarningf
105	0x43d0	agwredge
106	0x46e0	agwrite
107	0x4160	agwrnode
108	0x11b0	agxbfree
109	0x1000	agxbinit
110	0x1070	agxbmore
111	0x11d0	agxbpop
112	0x1180	agxbput
113	0x1130	agxbput_n
114	0x1e60	agxget
115	0x1e80	agxset
116	0x52a0	myaglex

module_name	graph.dll
flags	0
timestamp	2011-05-16 08:12:06
version	0.0
ordinal_base	1
nFunctions	116
nNames	116
Names(116)	0xadc8
Functions(116)	0xabf8
NameOrdinals(116)	0xaf98

show previews

offset	size	type	comment
0	45568	DLL	05/16/2011 08:12:06	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK