filenameriched20.dll
size513536 (0x7d600)
md59d2136dde6753b36a0771ff34337b5d1
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
205655016
2076550113
10347
2036550115
2066550161
202655011
2166550163
126507271
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5221c993
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x6ce00
SizeOfInitializedData0x10600
SizeOfUninitializedData0
AddressOfEntryPoint0x1117
BaseOfCode0x1000
BaseOfData0x6e000
ImageBase0x46080000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion5.1
Reserved10
SizeOfImage0x80000
SizeOfHeaders0x400
CheckSum0x815f1
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x6cd510x6ce00R-X CODE
.data0x6e0000xb8c0xa00RW- IDATA
.idata0x6f0000x1d1c0x1e00R-- IDATA
.rsrc0x710000xa7700xa800R-- IDATA
.reloc0x7c0000x32500x3400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x6dbac0x13d
IMPORT0x6f4d40xa0
RESOURCE0x710000xa770
EXCEPTION00
SECURITY00
BASERELOC0x7c0000x3250
DEBUG0x6dcec0x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xdbb00x40
Bound_IAT00
IAT0x6f0000x4d4
Delay_IAT00
CLR_Header00
typenamesizecp
TYPELIB#1306880
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#41800
CURSOR#53080
CURSOR#63080
CURSOR#73080
CURSOR#83080
CURSOR#93080
CURSOR#103080
CURSOR#113080
CURSOR#123080
CURSOR#133080
CURSOR#143080
CURSOR#153080
CURSOR#163080
CURSOR#171800
CURSOR#183080
CURSOR#191800
CURSOR#203080
CURSOR#211800
BITMAP#1255520
BITMAP#1265520
BITMAP#1275520
BITMAP#21001200
BITMAP#21011840
BITMAP#21021840
BITMAP#21031840
GROUP_CURSOR#105200
GROUP_CURSOR#106200
GROUP_CURSOR#107340
GROUP_CURSOR#109340
GROUP_CURSOR#110340
GROUP_CURSOR#111340
GROUP_CURSOR#112200
GROUP_CURSOR#113200
GROUP_CURSOR#114200
GROUP_CURSOR#115200
GROUP_CURSOR#116200
GROUP_CURSOR#117200
GROUP_CURSOR#118200
GROUP_CURSOR#119200
GROUP_CURSOR#120200
GROUP_CURSOR#121200
GROUP_CURSOR#122200
VERSION#19160
module_namehintordfunction_name
msvcrt.dll1295memset
msvcrt.dll1291memcpy
msvcrt.dll490_initterm
msvcrt.dll1279malloc
msvcrt.dll1223free
msvcrt.dll275_amsg_exit
msvcrt.dll113_XcptFilter
msvcrt.dll361_errno
msvcrt.dll1000_vsnprintf
msvcrt.dll1404wcsncmp
msvcrt.dll1293memmove
msvcrt.dll1290memcmp
KERNEL32.dll127CloseHandle
KERNEL32.dll1275SetFilePointer
KERNEL32.dll747GetThreadLocale
KERNEL32.dll1535lstrcmpiA
KERNEL32.dll822HeapReAlloc
KERNEL32.dll186CreateFileA
KERNEL32.dll1395TlsGetValue
KERNEL32.dll815HeapAlloc
KERNEL32.dll806GlobalSize
KERNEL32.dll819HeapFree
KERNEL32.dll802GlobalLock
KERNEL32.dll692GetProfileSectionA
KERNEL32.dll764GetUserDefaultLCID
KERNEL32.dll674GetProcessHeap
KERNEL32.dll1396TlsSetValue
KERNEL32.dll791GlobalAlloc
KERNEL32.dll936LoadLibraryW
KERNEL32.dll708GetStringTypeExW
KERNEL32.dll797GlobalFlags
KERNEL32.dll976MulDiv
KERNEL32.dll611GetModuleFileNameW
KERNEL32.dll194CreateFileW
KERNEL32.dll147CompareStringW
KERNEL32.dll420GetACP
KERNEL32.dll809GlobalUnlock
KERNEL32.dll707GetStringTypeExA
KERNEL32.dll690GetProfileIntA
KERNEL32.dll798GlobalFree
KERNEL32.dll933LoadLibraryA
KERNEL32.dll801GlobalHandle
KERNEL32.dll610GetModuleFileNameA
KERNEL32.dll1536lstrcmpiW
KERNEL32.dll612GetModuleHandleA
KERNEL32.dll772GetVersionExA
KERNEL32.dll1393TlsAlloc
KERNEL32.dll359FindAtomW
KERNEL32.dll805GlobalReAlloc
KERNEL32.dll1394TlsFree
KERNEL32.dll693GetProfileSectionW
KERNEL32.dll1408UnhandledExceptionFilter
KERNEL32.dll1345SetUnhandledExceptionFilter
KERNEL32.dll521GetCurrentProcess
KERNEL32.dll1375TerminateProcess
KERNEL32.dll1017OutputDebugStringA
KERNEL32.dll1196RtlUnwind
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll771GetVersion
KERNEL32.dll574GetFileType
KERNEL32.dll882IsValidCodePage
KERNEL32.dll1503WriteFile
KERNEL32.dll592GetLastError
KERNEL32.dll1103ReadFile
KERNEL32.dll358FindAtomA
KERNEL32.dll713GetSystemDefaultLangID
KERNEL32.dll144CompareStringA
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll712GetSystemDefaultLCID
KERNEL32.dll1483WideCharToMultiByte
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll948LocalLock
KERNEL32.dll1360Sleep
KERNEL32.dll754GetTickCount
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll669GetProcAddress
KERNEL32.dll414FreeLibrary
KERNEL32.dll596GetLocaleInfoW
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll839InitializeCriticalSection
KERNEL32.dll275DisableThreadLibraryCalls
KERNEL32.dll293EnterCriticalSection
ADVAPI32.dll658RegQueryValueExW
ADVAPI32.dll626RegEnumKeyExA
ADVAPI32.dll644RegOpenKeyExA
ADVAPI32.dll645RegOpenKeyExW
ADVAPI32.dll627RegEnumKeyExW
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll657RegQueryValueExA
USER32.dll204DrawFrameControl
USER32.dll293GetClientRect
USER32.dll202DrawFocusRect
USER32.dll423GetSysColor
USER32.dll783SetWindowPos
USER32.dll855UpdateWindow
USER32.dll484InflateRect
USER32.dll339GetKeyState
USER32.dll459GetWindowRect
USER32.dll634PtInRect
USER32.dll307GetCursorPos
USER32.dll685ScreenToClient
USER32.dll14BeginPaint
USER32.dll261FillRect
USER32.dll233EndPaint
USER32.dll533IsWindowUnicode
USER32.dllActivateKeyboardLayout
USER32.dll87CopyRect
USER32.dll497InvertRect
USER32.dll605OffsetRect
USER32.dll494IntersectRect
USER32.dll370GetMessageTime
USER32.dll426GetSystemMetrics
USER32.dll704SetCapture
USER32.dll278GetAsyncKeyState
USER32.dll676ReleaseCapture
USER32.dll378GetParent
USER32.dll595MoveWindow
USER32.dll651RegisterClipboardFormatA
USER32.dll167DestroyCaret
USER32.dll171DestroyMenu
USER32.dll882WindowFromDC
USER32.dll724SetFocus
USER32.dll581MessageBeep
USER32.dll514IsIconic
USER32.dll759SetScrollRange
USER32.dll316GetDlgItem
USER32.dll322GetFocus
USER32.dll534IsWindowVisible
USER32.dll577MapWindowPoints
USER32.dll758SetScrollPos
USER32.dll91CreateCaret
USER32.dll794ShowCaret
USER32.dll472HideCaret
USER32.dll706SetCaretPos
USER32.dll769SetTimer
USER32.dll537KillTimer
USER32.dll689ScrollWindowEx
USER32.dll725SetForegroundWindow
USER32.dll757SetScrollInfo
USER32.dll311GetDesktopWindow
USER32.dll529IsWindow
USER32.dll443GetWindow
USER32.dll530IsWindowEnabled
USER32.dll323GetForegroundWindow
USER32.dll884WindowFromPoint
USER32.dll815SystemParametersInfoW
USER32.dll506IsChild
USER32.dll283GetCaretPos
USER32.dll281GetCapture
USER32.dll606OpenClipboard
USER32.dll223EmptyClipboard
USER32.dll710SetClipboardData
USER32.dll75CloseClipboard
USER32.dll507IsClipboardFormatAvailable
USER32.dll299GetClipboardOwner
USER32.dll296GetClipboardData
USER32.dll60CharUpperW
USER32.dll840UnregisterClassA
USER32.dll288GetClassLongA
USER32.dll647RegisterClassA
USER32.dll161DefWindowProcW
USER32.dll341GetKeyboardLayoutList
USER32.dll542LoadCursorA
USER32.dll262FindWindowA
USER32.dll700SendMessageW
USER32.dll650RegisterClassW
USER32.dll814SystemParametersInfoA
USER32.dll623PostMessageA
USER32.dll797ShowScrollBar
USER32.dll226EnableScrollBar
USER32.dll541LoadBitmapW
USER32.dll160DefWindowProcA
USER32.dll781SetWindowLongW
USER32.dll619PeekMessageA
USER32.dll620PeekMessageW
USER32.dll452GetWindowLongA
USER32.dll43CharLowerA
USER32.dll453GetWindowLongW
USER32.dll780SetWindowLongA
USER32.dll340GetKeyboardLayout
USER32.dll320GetDoubleClickTime
USER32.dll289GetClassLongW
USER32.dll674RegisterWindowMessageA
USER32.dll695SendMessageA
USER32.dll45CharLowerBuffW
USER32.dll57CharUpperA
USER32.dll545LoadCursorW
USER32.dll540LoadBitmapA
USER32.dll624PostMessageW
USER32.dll841UnregisterClassW
USER32.dll59CharUpperBuffW
USER32.dll73ClientToScreen
USER32.dll745SetParent
USER32.dll800ShowWindow
USER32.dll112CreateWindowExA
USER32.dll113CreateWindowExW
USER32.dll173DestroyWindow
USER32.dll677ReleaseDC
USER32.dll308GetDC
USER32.dll228EnableWindow
USER32.dll495InvalidateRect
USER32.dll304GetCursor
USER32.dll713SetCursor
USER32.dll599NotifyWinEvent
USER32.dll369GetMessagePos
USER32.dll825TrackPopupMenu
USP10.dll14ScriptGetLogicalWidths
USP10.dll21ScriptPlace
USP10.dll25ScriptShape
USP10.dll17ScriptItemize
USP10.dll3ScriptBreak
USP10.dll29ScriptStringFree
USP10.dll33ScriptStringValidate
USP10.dll35ScriptString_pLogAttr
USP10.dll27ScriptStringAnalyse
USP10.dll39ScriptTextOut
USP10.dll6ScriptFreeCache
USP10.dll7ScriptGetCMap
USP10.dll15ScriptGetProperties
GDI32.dll62CreateFontIndirectA
GDI32.dll589GetTextFaceA
GDI32.dll74CreatePalette
GDI32.dll482GetCharWidthA
GDI32.dll539GetMapMode
GDI32.dll551GetObjectType
GDI32.dll552GetObjectW
GDI32.dll591GetTextFaceW
GDI32.dll342Escape
GDI32.dll592GetTextMetricsA
GDI32.dll333EnumFontFamiliesExW
GDI32.dll69CreateICA
GDI32.dll70CreateICW
GDI32.dll75CreatePatternBrush
GDI32.dll31CloseMetaFile
GDI32.dll71CreateMetaFileA
GDI32.dll339EnumMetaFile
GDI32.dll774SetViewportOrgEx
GDI32.dll541GetMetaFileBitsEx
GDI32.dll41CreateBitmap
GDI32.dll755SetMetaFileBitsEx
GDI32.dll86CreateSolidBrush
GDI32.dll351ExtTextOutA
GDI32.dll48CreateCompatibleBitmap
GDI32.dll204DPtoLP
GDI32.dll550GetObjectA
GDI32.dll753SetMapMode
GDI32.dll468GetBkMode
GDI32.dll791TranslateCharsetInfo
GDI32.dll578GetTextCharsetInfo
GDI32.dll65CreateFontIndirectW
GDI32.dll269DeleteMetaFile
GDI32.dll609LineTo
GDI32.dll623MoveToEx
GDI32.dll76CreatePen
GDI32.dll19BitBlt
GDI32.dll559GetPixel
GDI32.dll777SetWindowExtEx
GDI32.dll778SetWindowOrgEx
GDI32.dll352ExtTextOutW
GDI32.dll502GetDeviceCaps
GDI32.dll270DeleteObject
GDI32.dll769SetTextAlign
GDI32.dll267DeleteDC
GDI32.dll784StretchBlt
GDI32.dll635PatBlt
GDI32.dll731SetBkColor
GDI32.dll771SetTextColor
GDI32.dll603IntersectClipRect
GDI32.dll725SelectPalette
GDI32.dll657RealizePalette
GDI32.dll677SaveDC
GDI32.dll670RestoreDC
GDI32.dll724SelectObject
GDI32.dll764SetROP2
GDI32.dll568GetStockObject
GDI32.dll660Rectangle
GDI32.dll495GetCurrentObject
GDI32.dll54CreateDIBSection
GDI32.dll49CreateCompatibleDC
GDI32.dll732SetBkMode
GDI32.dll487GetCharWidthW
GDI32.dll607LPtoDP
GDI32.dll593GetTextMetricsW
GDI32.dll553GetOutlineTextMetricsA
msls31.dll31
msls31.dll27
msls31.dll20
msls31.dll60
msls31.dll43
msls31.dll42
msls31.dll40
msls31.dll44
msls31.dll1
msls31.dll71
msls31.dll2
msls31.dll5
msls31.dll48
msls31.dll52
msls31.dll3
msls31.dll59
ordentry_vafunction_name
20x1a698IID_IRichEditOle
30xf268IID_IRichEditOleCallback
40x5d4e5CreateTextServices
50xc720IID_ITextServices
60x9b14IID_ITextHost
70x307cIID_ITextHost2
80x4a178REExtendedRegisterClass
90x33f45RichEdit10ANSIWndProc
100x33fc9RichEditANSIWndProc
module_nameRICHED20.dll
flags0
timestamp2013-08-31 10:46:43
version0.0
ordinal_base2
nFunctions9
nNames9
Names(9)0x6dbf8
Functions(9)0x6dbd4
NameOrdinals(9)0x6dc1c

StringTable 000004b0

CommentsRichedit Version 3.1
CompanyNameMicrosoft Corporation
FileDescriptionRich Text Edit Control, v3.1
FileVersion5.31.23.1231
InternalNameriched20
LegalCopyrightCopyright © Microsoft Corp. 1997-2008.
OriginalFilenameriched20.dll
ProductNameMicrosoft RichEdit Control, version 3.1
ProductVersion3.1

VS_FIXEDFILEINFO

FileVersion5.31.23.1231
ProductVersion5.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0513536DLL08/31/2013 10:46:43#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK