filenameVERSION.bin
size3017216 (0x2e0a00)
md54cdccf4d4532a95217ab76cebce177d7
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
123507274
150204135
149307293
1313072914
147307295
109507271
132210223
132307297
10129
138307293
146307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x56795a4f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x5c00
SizeOfInitializedData0x2daa00
SizeOfUninitializedData0
AddressOfEntryPoint0x5cc1
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x2e4000
SizeOfHeaders0x400
CheckSum0x2ea52d
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x5a360x5c00R-X CODE
.rdata0x70000x36e70x3800R-- IDATA
.data0xb0000x2d3ba00x2d3800RW- IDATA
.rsrc0x2df0000x4c00x600R-- IDATA
.reloc0x2e00000x32020x3400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xa5000x1e7
IMPORT0x994c0x50
RESOURCE0x2df0000x4c0
EXCEPTION00
SECURITY00
BASERELOC0x2e00000x15e8
DEBUG0x71b00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x86300x40
Bound_IAT00
IAT0x70000x194
Delay_IAT0x97a80xa0
CLR_Header00
typenamesizecp
MANIFEST#211261252
module_namehintordfunction_name
MSVCP90.dll379public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void)

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

MSVCP90.dll374public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(char const *)

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

MSVCP90.dll367public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &)

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

MSVCP90.dll607public: __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void)

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

MSVCP90.dll691public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::operator=(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &)

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

MSVCP90.dll693public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::operator=(char const *)

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

MSVCP90.dll864public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::operator+=(char const *)

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

MSVCP90.dll863public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::operator+=(char)

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z

MSVCP90.dll2796public: void __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::reserve(unsigned int)

?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z

MSVCP90.dll2809public: unsigned int __thiscall std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::rfind(char const *, unsigned int, unsigned int)const

?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

MSVCP90.dll2496public: static unsigned int const std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::npos

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

MSVCP90.dll103class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > __cdecl std::operator+<char, struct std::char_traits<char>, class std::allocator<char> >(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > const &, char const *)

??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

MSVCR90.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR90.dll1034_vsnprintf
MSVCR90.dll1318memcpy
MSVCR90.dll362_encode_pointer
MSVCR90.dll647_malloc_crt
MSVCR90.dll363_encoded_null
MSVCR90.dll352_decode_pointer
MSVCR90.dll516_initterm
MSVCR90.dll517_initterm_e
MSVCR90.dll277_amsg_exit
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll106__CppXcptFilter
MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll54public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR90.dll140__clean_type_info_names_internal
MSVCR90.dll998_unlock
MSVCR90.dll150__dllonexit
MSVCR90.dll630_lock
MSVCR90.dll796_onexit
MSVCR90.dll371_except_handler4_common
MSVCR90.dll1231fclose
MSVCR90.dll1357strcat_s
MSVCR90.dll1382strtoul
MSVCR90.dll1375strrchr
MSVCR90.dll918_strdup
MSVCR90.dll17void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR90.dll1278isdigit
MSVCR90.dll1244fprintf
MSVCR90.dll1276isalpha
MSVCR90.dll1237fgets
MSVCR90.dll522_invalid_parameter_noinfo
MSVCR90.dll1282isprint
MSVCR90.dll1243fopen_s
MSVCR90.dll1275isalnum
MSVCR90.dll368_errno
MSVCR90.dll873_snprintf
MSVCR90.dll1364strerror
MSVCR90.dll1307malloc
MSVCR90.dll1220calloc
MSVCR90.dll1252free
MSVCR90.dll1284isspace
MSVCR90.dll1354sscanf
MSVCR90.dll8public: __thiscall std::exception::exception(class std::exception const &)

??0exception@std@@QAE@ABV01@@Z

MSVCR90.dll6public: __thiscall std::exception::exception(char const * const &)

??0exception@std@@QAE@ABQBD@Z

MSVCR90.dll9public: __thiscall std::exception::exception(void)

??0exception@std@@QAE@XZ

MSVCR90.dll13public: virtual __thiscall std::exception::~exception(void)

??1exception@std@@UAE@XZ

MSVCR90.dll70public: virtual char const * __thiscall std::exception::what(void)const

?what@exception@std@@UBEPBDXZ

MSVCR90.dll1368strncat
MSVCR90.dll1232feof
MSVCR90.dll1321memmove_s
MSVCR90.dll922_stricmp
MSVCR90.dll1322memset
MSVCR90.dll90_CxxThrowException
MSVCR90.dll115__CxxFrameHandler3
MSVCR90.dll84_CIsqrt
KERNEL32.dll332FreeLibrary
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll712IsBadReadPtr
KERNEL32.dll819OpenProcess
KERNEL32.dll581GetSystemDirectoryA
KERNEL32.dll322FlushInstructionCache
KERNEL32.dll486GetLastError
KERNEL32.dll544GetProcAddress
KERNEL32.dll753LoadLibraryA
KERNEL32.dll500GetModuleFileNameA
KERNEL32.dll502GetModuleHandleA
KERNEL32.dll1114VirtualProtect
KERNEL32.dll826OutputDebugStringA
KERNEL32.dll629GetVersionExA
KERNEL32.dll67CloseHandle
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll614GetTickCount
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll1069TerminateProcess
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll1057Sleep
KERNEL32.dll858RaiseException
KERNEL32.dll701InterlockedExchange
KERNEL32.dll761LocalAlloc
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll1116VirtualQuery
ordentry_vafunction_name
10x1110GetFileVersionInfoA
20x1120GetFileVersionInfoByHandle
30x1130GetFileVersionInfoExW
40x1140GetFileVersionInfoSizeA
50x1150GetFileVersionInfoSizeExW
60x1160GetFileVersionInfoSizeW
70x1170GetFileVersionInfoW
80x1180VerFindFileA
90x1190VerFindFileW
100x11a0VerInstallFileA
110x11b0VerInstallFileW
120x11c0VerLanguageNameA
130x11d0VerLanguageNameW
140x11e0VerQueryValueA
150x11f0VerQueryValueW
module_nameversion.dll
flags0
timestamp2015-12-22 14:12:31
version0.0
ordinal_base1
nFunctions15
nNames15
Names(15)0xa564
Functions(15)0xa528
NameOrdinals(15)0xa5a0
offsetsizetypecomment
03017216DLL12/22/2015 14:12:31#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK