filenamea
size439296 (0x6b400)
md5744cf74fce8523e1a7d02cd3e1637ed5
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
203655012
10219
221208063
223208068
2252080651
2242080678
229208066
220208061
219208061
222208061

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x524f7ced
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2122
Magic0x10b
LinkerVersion12.0
SizeOfCode0x61c00
SizeOfInitializedData0xc400
SizeOfUninitializedData0
AddressOfEntryPoint0x3b707
BaseOfCode0x1000
BaseOfData0x63000
ImageBase0x72e40000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion10.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x71000
SizeOfHeaders0x400
CheckSum0x778ed
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x61a3c0x61c00R-X CODE
.data0x630000x5eb00x3000RW- IDATA
.idata0x690000x19e80x1a00R-- IDATA
.rsrc0x6b0000x3e80x400R-- IDATA
.reloc0x6c0000x44c40x4600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x457f00x1d24c
IMPORT0x6933c0x3c
RESOURCE0x6b0000x3e8
EXCEPTION00
SECURITY0x6b4000x3ea0
BASERELOC0x6c0000x44c4
DEBUG0x11000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x4ba80x40
Bound_IAT00
IAT0x690000x33c
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#19000
module_namehintordfunction_name
MSVCR120.dll323public: virtual char const * __thiscall std::exception::what(void)const

?what@exception@std@@UBEPBDXZ

MSVCR120.dll344_CxxThrowException
MSVCR120.dll372__CxxFrameHandler3
MSVCR120.dll1623fclose
MSVCR120.dll1640fflush
MSVCR120.dll1641fgetc
MSVCR120.dll1642fgetpos
MSVCR120.dll1674fsetpos
MSVCR120.dll694_fseeki64
MSVCR120.dll1678fwrite
MSVCR120.dll1827setvbuf
MSVCR120.dll1892ungetc
MSVCR120.dll917_lock_file
MSVCR120.dll1285_unlock_file
MSVCR120.dll1767memcpy_s
MSVCR120.dll1770memset
MSVCR120.dll696_fsopen
MSVCR120.dll1673fseek
MSVCR120.dll1430_wfsopen
MSVCR120.dll266void __cdecl __ExceptionPtrDestroy(void *)

?__ExceptionPtrDestroy@@YAXPAX@Z

MSVCR120.dll262void __cdecl __ExceptionPtrCopy(void *, void const *)

?__ExceptionPtrCopy@@YAXPAXPBX@Z

MSVCR120.dll267void __cdecl __ExceptionPtrRethrow(void const *)

?__ExceptionPtrRethrow@@YAXPBX@Z

MSVCR120.dll139void * __cdecl Concurrency::Alloc(unsigned int)

?Alloc@Concurrency@@YAPAXI@Z

MSVCR120.dll151void __cdecl Concurrency::Free(void *)

?Free@Concurrency@@YAXPAX@Z

MSVCR120.dll234public: static void __cdecl Concurrency::details::_CurrentScheduler::_ScheduleTask(void (__cdecl*)(void *), void *)

?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z

MSVCR120.dll58public: __thiscall Concurrency::invalid_operation::invalid_operation(char const *)

??0invalid_operation@Concurrency@@QAE@PBD@Z

MSVCR120.dll38public: __thiscall Concurrency::critical_section::critical_section(void)

??0critical_section@Concurrency@@QAE@XZ

MSVCR120.dll104public: __thiscall Concurrency::critical_section::~critical_section(void)

??1critical_section@Concurrency@@QAE@XZ

MSVCR120.dll41public: __thiscall Concurrency::event::event(void)

??0event@Concurrency@@QAE@XZ

MSVCR120.dll105public: __thiscall Concurrency::event::~event(void)

??1event@Concurrency@@QAE@XZ

MSVCR120.dll320public: unsigned int __thiscall Concurrency::event::wait(unsigned int)

?wait@event@Concurrency@@QAEII@Z

MSVCR120.dll299public: void __thiscall Concurrency::event::set(void)

?set@event@Concurrency@@QAEXXZ

MSVCR120.dll1723ldexp
MSVCR120.dll1832sprintf_s
MSVCR120.dll1844strcspn
MSVCR120.dll1928wcslen
MSVCR120.dll358_Strftime
MSVCR120.dll362_Wcsftime
MSVCR120.dll1840strcmp
MSVCR120.dll1826setlocale
MSVCR120.dll933_malloc_crt
MSVCR120.dll1108_realloc_crt
MSVCR120.dll278int (__cdecl*__cdecl _set_new_handler(int (__cdecl*)(unsigned int)))(unsigned int)

?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

MSVCR120.dll1644fgetwc
MSVCR120.dll1663fputwc
MSVCR120.dll1893ungetwc
MSVCR120.dll513__uncaught_exception
MSVCR120.dll630_errno
MSVCR120.dll1765memcmp
MSVCR120.dll1357_wcsdup
MSVCR120.dll388___lc_locale_name_func
MSVCR120.dll387___lc_collate_cp_func
MSVCR120.dll399__crtCompareStringA
MSVCR120.dll420__crtLCMapStringA
MSVCR120.dll386___lc_codepage_func
MSVCR120.dll817_ismbblead
MSVCR120.dll1805remove
MSVCR120.dll1809rename
MSVCR120.dll1451_wremove
MSVCR120.dll1843strcpy_s
MSVCR120.dll1925wcscpy_s
MSVCR120.dll1432_wgetcwd
MSVCR120.dll1351_wchdir
MSVCR120.dll1438_wmkdir
MSVCR120.dll1454_wrmdir
MSVCR120.dll102public: virtual __thiscall std::bad_cast::~bad_cast(void)

??1bad_cast@std@@UAE@XZ

MSVCR120.dll744_getcwd
MSVCR120.dll564_chdir
MSVCR120.dll1073_mkdir
MSVCR120.dll1112_rmdir
MSVCR120.dll418__crtIsPackagedApp
MSVCR120.dll404__crtCreateSymbolicLinkW
MSVCR120.dll411__crtGetFileInformationByHandleEx
MSVCR120.dll423__crtSetFileInformationByHandle
MSVCR120.dll558_calloc_crt
MSVCR120.dll7public: __thiscall Concurrency::details::_Condition_variable::_Condition_variable(void)

??0_Condition_variable@details@Concurrency@@QAE@XZ

MSVCR120.dll92public: __thiscall Concurrency::details::_Condition_variable::~_Condition_variable(void)

??1_Condition_variable@details@Concurrency@@QAE@XZ

MSVCR120.dll319public: void __thiscall Concurrency::details::_Condition_variable::wait(class Concurrency::critical_section &)

?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z

MSVCR120.dll321public: bool __thiscall Concurrency::details::_Condition_variable::wait_for(class Concurrency::critical_section &, unsigned int)

?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z

MSVCR120.dll296public: void __thiscall Concurrency::details::_Condition_variable::notify_one(void)

?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ

MSVCR120.dll295public: void __thiscall Concurrency::details::_Condition_variable::notify_all(void)

?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ

MSVCR120.dll426__crtSleep
MSVCR120.dll551_beginthreadex
MSVCR120.dll627_endthreadex
MSVCR120.dll290public: void __thiscall Concurrency::critical_section::lock(void)

?lock@critical_section@Concurrency@@QAEXXZ

MSVCR120.dll310public: bool __thiscall Concurrency::critical_section::try_lock(void)

?try_lock@critical_section@Concurrency@@QAE_NXZ

MSVCR120.dll312public: bool __thiscall Concurrency::critical_section::try_lock_for(unsigned int)

?try_lock_for@critical_section@Concurrency@@QAE_NI@Z

MSVCR120.dll315public: void __thiscall Concurrency::critical_section::unlock(void)

?unlock@critical_section@Concurrency@@QAEXXZ

MSVCR120.dll309void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120.dll406__crtFlsAlloc
MSVCR120.dll407__crtFlsFree
MSVCR120.dll408__crtFlsGetValue
MSVCR120.dll409__crtFlsSetValue
MSVCR120.dll1534calloc
MSVCR120.dll75public: __thiscall Concurrency::operation_timed_out::operation_timed_out(void)

??0operation_timed_out@Concurrency@@QAE@XZ

MSVCR120.dll172public: static void __cdecl Concurrency::CurrentScheduler::ScheduleTask(void (__cdecl*)(void *), void *)

?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z

MSVCR120.dll54public: __thiscall Concurrency::invalid_link_target::invalid_link_target(char const *)

??0invalid_link_target@Concurrency@@QAE@PBD@Z

MSVCR120.dll69public: __thiscall Concurrency::message_not_found::message_not_found(void)

??0message_not_found@Concurrency@@QAE@XZ

MSVCR120.dll246void __cdecl Concurrency::_Trace_agents(enum Concurrency::Agents_EventType, __int64, ...)

?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ

MSVCR120.dll31public: __thiscall Concurrency::bad_target::bad_target(void)

??0bad_target@Concurrency@@QAE@XZ

MSVCR120.dll96public: __thiscall Concurrency::details::_ReentrantPPLLock::_Scoped_lock::~_Scoped_lock(void)

??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ

MSVCR120.dll19public: __thiscall Concurrency::details::_ReentrantPPLLock::_Scoped_lock::_Scoped_lock(class Concurrency::details::_ReentrantPPLLock &)

??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

MSVCR120.dll16public: __thiscall Concurrency::details::_ReentrantPPLLock::_ReentrantPPLLock(void)

??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ

MSVCR120.dll95public: __thiscall Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::~_Scoped_lock(void)

??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

MSVCR120.dll18public: __thiscall Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock(class Concurrency::details::_NonReentrantPPLLock &)

??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

MSVCR120.dll12public: __thiscall Concurrency::details::_NonReentrantPPLLock::_NonReentrantPPLLock(void)

??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

MSVCR120.dll259public: static void __cdecl Concurrency::details::_Context::_Yield(void)

?_Yield@_Context@details@Concurrency@@SAXXZ

MSVCR120.dll254void __cdecl Concurrency::details::_UnderlyingYield(void)

?_UnderlyingYield@details@Concurrency@@YAXXZ

MSVCR120.dll240public: bool __thiscall Concurrency::details::_SpinWait<1>::_SpinOnce(void)

?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ

MSVCR120.dll155public: static unsigned int __cdecl Concurrency::CurrentScheduler::GetNumberOfVirtualProcessors(void)

?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

MSVCR120.dll166public: static bool __cdecl Concurrency::Context::IsCurrentTaskCollectionCanceling(void)

?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

MSVCR120.dll97public: __thiscall Concurrency::details::_SpinLock::~_SpinLock(void)

??1_SpinLock@details@Concurrency@@QAE@XZ

MSVCR120.dll20public: __thiscall Concurrency::details::_SpinLock::_SpinLock(long volatile &)

??0_SpinLock@details@Concurrency@@QAE@ACJ@Z

MSVCR120.dll167unsigned long __cdecl Concurrency::details::Log2(unsigned int)

?Log2@details@Concurrency@@YAKI@Z

MSVCR120.dll916_lock
MSVCR120.dll1284_unlock
MSVCR120.dll493__pctype_func
MSVCR120.dll1706isupper
MSVCR120.dll412__crtGetLocaleInfoEx
MSVCR120.dll1702islower
MSVCR120.dll422__crtLCMapStringW
MSVCR120.dll1705isspace
MSVCR120.dll1884tolower
MSVCR120.dll1764memchr
MSVCR120.dll1833sqrt
MSVCR120.dll1699isdigit
MSVCR120.dll1721isxdigit
MSVCR120.dll1695isalnum
MSVCR120.dll401__crtCompareStringW
MSVCR120.dll430__dllonexit
MSVCR120.dll1082_onexit
MSVCR120.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120.dll367__CppXcptFilter
MSVCR120.dll535_amsg_exit
MSVCR120.dll780_initterm
MSVCR120.dll781_initterm_e
MSVCR120.dll634_except_handler4_common
MSVCR120.dll592_crt_debugger_hook
MSVCR120.dll428__crtUnhandledException
MSVCR120.dll427__crtTerminateProcess
MSVCR120.dll396__clean_type_info_names_internal
MSVCR120.dll28public: __thiscall std::bad_cast::bad_cast(class std::bad_cast const &)

??0bad_cast@std@@QAE@ABV01@@Z

MSVCR120.dll361_W_Gettnames
MSVCR120.dll360_W_Getmonths
MSVCR120.dll359_W_Getdays
MSVCR120.dll350_Gettnames
MSVCR120.dll349_Getmonths
MSVCR120.dll348_Getdays
MSVCR120.dll1736localeconv
MSVCR120.dll29public: __thiscall std::bad_cast::bad_cast(char const *)

??0bad_cast@std@@QAE@PBD@Z

MSVCR120.dll137void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR120.dll106public: virtual __thiscall std::exception::~exception(void)

??1exception@std@@UAE@XZ

MSVCR120.dll44public: __thiscall std::exception::exception(class std::exception const &)

??0exception@std@@QAE@ABV01@@Z

MSVCR120.dll43public: __thiscall std::exception::exception(char const * const &, int)

??0exception@std@@QAE@ABQBDH@Z

MSVCR120.dll42public: __thiscall std::exception::exception(char const * const &)

??0exception@std@@QAE@ABQBD@Z

MSVCR120.dll45public: __thiscall std::exception::exception(void)

??0exception@std@@QAE@XZ

MSVCR120.dll1768memmove
MSVCR120.dll1848strlen
MSVCR120.dll1766memcpy
MSVCR120.dll1755malloc
MSVCR120.dll1667free
MSVCR120.dll389___mb_cur_max_func
MSVCR120.dll1097_purecall
MSVCR120.dll1800rand_s
MSVCR120.dll1662fputs
MSVCR120.dll1661fputc
MSVCR120.dll440__iob_func
MSVCR120.dll1500abort
MSVCR120.dll1737log
MSVCR120.dll417__crtInitializeCriticalSectionEx
MSVCR120.dll114void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR120.dll112void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR120.dll1452_wrename
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll709GetStringTypeW
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll557GetExitCodeThread
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll525GetCurrentThread
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll1449WaitForSingleObject
KERNEL32.dll287DuplicateHandle
KERNEL32.dll27AreFileApisANSI
KERNEL32.dll198CreateHardLinkW
KERNEL32.dll165CopyFileW
KERNEL32.dll592GetLastError
KERNEL32.dll127CloseHandle
KERNEL32.dll567GetFileInformationByHandle
KERNEL32.dll562GetFileAttributesExW
KERNEL32.dll538GetDiskFreeSpaceExW
KERNEL32.dll383FindNextFileW
KERNEL32.dll366FindFirstFileExW
KERNEL32.dll360FindClose
KERNEL32.dll194CreateFileW
KERNEL32.dll1483WideCharToMultiByte
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll254DecodePointer
KERNEL32.dll289EncodePointer
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll293EnterCriticalSection
KERNEL32.dll275DisableThreadLibraryCalls
ordentry_vafunction_name
module_name
flags0
timestamp0
version0.0
ordinal_base0
nFunctions0
nNames0
Names(0)0
Functions(0)0
NameOrdinals(0)0

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft® C Runtime Library
FileVersion12.00.21005.1 built by: REL
InternalNamemsvcp120.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamemsvcp120.dll
ProductNameMicrosoft® Visual Studio® 2013
ProductVersion12.00.21005.1

VS_FIXEDFILEINFO

FileVersion12.0.21005.1
ProductVersion12.0.21005.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0439296DLL10/05/2013 02:43:57#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x0