filenameAllocate.dll
size124928 (0x1e800)
md5be2af9dd7f5e50d9d4c065c115c2eff8
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
2055062818
20650628137
2075062852
185307163
10146
207507275
202507271
201507271
15101
204507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x53f1ab32
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x14c00
SizeOfInitializedData0xb800
SizeOfUninitializedData0
AddressOfEntryPoint0x84b3
BaseOfCode0x1000
BaseOfData0x16000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x24000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x14b000x14c00R-X CODE
.rdata0x160000x579c0x5800R-- IDATA
.data0x1c0000x35780x1600RW- IDATA
.rsrc0x200000x5980x600R-- IDATA
.reloc0x210000x23ae0x2400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1b2200x57c
IMPORT0x1aa7c0x28
RESOURCE0x200000x598
EXCEPTION00
SECURITY00
BASERELOC0x210000x1420
DEBUG0x162100x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x199480x40
Bound_IAT00
IAT0x160000x14c
Delay_IAT0x1a8b40x40
CLR_Header00
typenamesizecp
VERSION#18880
MANIFEST#23810
module_namehintordfunction_name
KERNEL32.dll881InterlockedIncrement
KERNEL32.dll877InterlockedDecrement
KERNEL32.dll302DisableThreadLibraryCalls
KERNEL32.dll637GetModuleFileNameW
KERNEL32.dll747GetSystemDirectoryW
KERNEL32.dll440FreeLibrary
KERNEL32.dll963LoadLibraryW
KERNEL32.dll1501WideCharToMultiByte
KERNEL32.dll618GetLastError
KERNEL32.dll878InterlockedExchange
KERNEL32.dll693GetProcAddress
KERNEL32.dll969LocalAlloc
KERNEL32.dll960LoadLibraryA
KERNEL32.dll316EncodePointer
KERNEL32.dll279DecodePointer
KERNEL32.dll1096RaiseException
KERNEL32.dll1210RtlUnwind
KERNEL32.dll569GetDriveTypeW
KERNEL32.dll610GetFullPathNameW
KERNEL32.dll394FindFirstFileExW
KERNEL32.dll411FindNextFileW
KERNEL32.dll388FindClose
KERNEL32.dll1388SystemTimeToTzSpecificLocalTime
KERNEL32.dll377FileTimeToSystemTime
KERNEL32.dll482GetCommandLineA
KERNEL32.dll552GetCurrentThreadId
KERNEL32.dll733GetStdHandle
KERNEL32.dll1521WriteFile
KERNEL32.dll904IsProcessorFeaturePresent
KERNEL32.dll845HeapAlloc
KERNEL32.dll849HeapFree
KERNEL32.dll365ExitProcess
KERNEL32.dll640GetModuleHandleExW
KERNEL32.dll1004MultiByteToWideChar
KERNEL32.dll854HeapSize
KERNEL32.dll1375Sleep
KERNEL32.dll899IsDebuggerPresent
KERNEL32.dll1303SetLastError
KERNEL32.dll909IsValidCodePage
KERNEL32.dll446GetACP
KERNEL32.dll672GetOEMCP
KERNEL32.dll461GetCPInfo
KERNEL32.dll541GetCurrentDirectoryW
KERNEL32.dll698GetProcessHeap
KERNEL32.dll599GetFileType
KERNEL32.dll870InitializeCriticalSectionAndSpinCount
KERNEL32.dll286DeleteCriticalSection
KERNEL32.dll865InitOnceExecuteOnce
KERNEL32.dll727GetStartupInfoW
KERNEL32.dll636GetModuleFileNameA
KERNEL32.dll1084QueryPerformanceCounter
KERNEL32.dll756GetSystemTimeAsFileTime
KERNEL32.dll785GetTickCount64
KERNEL32.dll576GetEnvironmentStringsW
KERNEL32.dll439FreeEnvironmentStringsW
KERNEL32.dll1424UnhandledExceptionFilter
KERNEL32.dll1360SetUnhandledExceptionFilter
KERNEL32.dll424FlsAlloc
KERNEL32.dll426FlsGetValue
KERNEL32.dll427FlsSetValue
KERNEL32.dll425FlsFree
KERNEL32.dll547GetCurrentProcess
KERNEL32.dll1391TerminateProcess
KERNEL32.dll641GetModuleHandleW
KERNEL32.dll1045OutputDebugStringW
KERNEL32.dll962LoadLibraryExW
KERNEL32.dll165CompareStringEx
KERNEL32.dll944LCMapStringEx
KERNEL32.dll320EnterCriticalSection
KERNEL32.dll957LeaveCriticalSection
KERNEL32.dll852HeapReAlloc
KERNEL32.dll738GetStringTypeW
KERNEL32.dll502GetConsoleCP
KERNEL32.dll520GetConsoleMode
KERNEL32.dll1289SetFilePointerEx
KERNEL32.dll791GetTimeZoneInformation
KERNEL32.dll1327SetStdHandle
KERNEL32.dll1520WriteConsoleW
KERNEL32.dll429FlushFileBuffers
KERNEL32.dll214CreateFileW
KERNEL32.dll142CloseHandle
KERNEL32.dll1273SetEnvironmentVariableA
ordentry_vafunction_name
10x2340AllOpen
20x2190AllClose
30x2440AllRun
40x2420AllRunReport
50x22b0AllGetLastError
60x21e0AllFastOpen
70x21c0AllFastClose
80x22e0AllGetReportTemplates
90x2360AllRunDataCallback
100x22d0AllGetNumInfo
110x2290AllGetInfo
120x23f0AllRunInit
130x2400AllRunNextGeo
140x23c0AllRunGetGeoField
150x23a0AllRunGetGeoFieldValue
160x2260AllGetGeoInfoInit
170x2240AllGetGeoInfoField
180x2270AllGetGeoInfoRegion
190x21b0AllCreateVgf
200x2470AllSetProgressCallback
210x2450AllSetGlobalOptions
220x2390AllRunGetGeoFieldType
230x2380AllRunGetGeoFieldMaxStringLen
240x2210AllGUI_CreateFormula
250x23d0AllRunGetRegion
260x2370AllRunGetGeoFieldInfo
270x2460AllSetProgressCallback2
280x2320AllOpenVariableSearch
290x2300AllGetVariableSearchResult
320x2350AllRestrictLicensedGeographies
400x2330AllOpenW
410x2430AllRunW
420x2410AllRunReportW
430x22a0AllGetLastErrorW
440x21d0AllFastOpenW
450x22c0AllGetNumInfoW
460x2280AllGetInfoW
470x23e0AllRunInitW
480x23b0AllRunGetGeoFieldW
490x2250AllGetGeoInfoInitW
500x2230AllGetGeoInfoFieldW
510x2200AllGUI_CreateFormulaW
520x2310AllOpenVariableSearchW
530x22f0AllGetVariableSearchResultW
540x21a0AllCreateVgfW
550x2480AllVerifyDataset
560x21f0AllFree
570x2220AllGetDatasetRegistryNameW
module_nameAllocate.dll
flags0
timestamp2014-08-18 07:28:50
version0.0
ordinal_base1
nFunctions57
nNames48
Names(48)0x1b32c
Functions(57)0x1b248
NameOrdinals(48)0x1b3ec

StringTable 040904b0

CompanyNameAlteryx, Inc.
FileDescriptionAlteryx Allocate(tm)
FileVersion9,1,50,49361
InternalNameAllocate
LegalCopyright© Alteryx, Inc. – All Rights Reserved.
OriginalFilenameAllocate.dll
ProductNameAlteryx Allocate(tm)
ProductVersion9,1,50,49361
AuthorAlteryx, Inc. -- www.alteryx.com

VS_FIXEDFILEINFO

FileVersion9.1.50.49361
ProductVersion9.1.50.49361
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0124928DLL08/18/2014 07:28:50#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK