filenamearcrend.dll
size12368 (0x3050)
md55c8645c8bd96741ee36cc6f6a629909f
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4f391a13
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion2.50
SizeOfCode0x1fe0
SizeOfInitializedData0xe30
SizeOfUninitializedData0
AddressOfEntryPoint0xdd0
BaseOfCode0x240
BaseOfData0x2220
ImageBase0x10000000
SectionAlignment0x10
FileAlignment0x10
OperatingSystemVersion1.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x3050
SizeOfHeaders0x240
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x2400x1fe00x1fe0R-X CODE
.rdata0x22200x1c90x1d0R-- IDATA
.data0x23f00x7880x790RW- IDATA
.rsrc0x2b800x2980x2a0R-- IDATA
.reloc0x2e200x2240x230R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x22800x169
IMPORT0x23f00x3c
RESOURCE0x2b800x298
EXCEPTION00
SECURITY00
BASERELOC0x2e200x224
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x24a00x74
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#15760
module_namehintordfunction_name
GDI32.dllGetLayout
KERNEL32.dllVirtualFree
KERNEL32.dllHeapCreate
KERNEL32.dllHeapDestroy
KERNEL32.dllHeapAlloc
KERNEL32.dllHeapReAlloc
KERNEL32.dllHeapFree
KERNEL32.dllHeapSize
KERNEL32.dllHeapValidate
KERNEL32.dllGetStartupInfoA
KERNEL32.dllGetFileType
KERNEL32.dllGetStdHandle
KERNEL32.dllGetCurrentProcess
KERNEL32.dllDuplicateHandle
KERNEL32.dllSetHandleCount
KERNEL32.dllGetSystemTimeAsFileTime
KERNEL32.dllGetCommandLineA
KERNEL32.dllGetModuleFileNameA
KERNEL32.dllGetEnvironmentStrings
KERNEL32.dllFreeEnvironmentStringsA
KERNEL32.dllGetCommandLineW
KERNEL32.dllGetModuleFileNameW
KERNEL32.dllGetEnvironmentStringsW
KERNEL32.dllFreeEnvironmentStringsW
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualQuery
KERNEL32.dllExitProcess
ordentry_vafunction_name
10x3f0AR_AddViewport
20x240AR_BindDotsBuffer
30x270AR_BindTalesBuffer
40x4f0AR_BindViewport
50x620AR_GetViewportParameter
60x670AR_MoveCamera
70x420AR_ReleaseViewport
80x6d0AR_RotateCamera
90x780AR_SetCameraAngle
100x720AR_SetCameraPos
110x5d0AR_SetViewportParameter
module_nameArcRend.dll
flags0
timestamp2012-02-13 14:11:31
version0.0
ordinal_base1
nFunctions11
nNames11
Names(11)0x22d4
Functions(11)0x22a8
NameOrdinals(11)0x2300

StringTable 040904E2

CompanyNameYarigin Oleg
FileDescriptionArcRender library
FileVersion1.0.1
LegalCopyright© Yarigin Oleg, 2012
ProductNameArcRend
ProductVersion1.0.1

VS_FIXEDFILEINFO

FileVersion1.0.1.0
ProductVersion1.0.1.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
012368DLL02/13/2012 14:11:31#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK