filenameCCAPI.dll
size1708032 (0x1a1000)
md5c2fe9e1c387cf29aac781482c28ecf86
typePE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x54104c02
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x230e
Magic0x10b
LinkerVersion2.23
SizeOfCode0x16c000
SizeOfInitializedData0x36000
SizeOfUninitializedData0x286000
AddressOfEntryPoint0x3f2780
BaseOfCode0x287000
BaseOfData0x3f3000
ImageBase0x68600000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x429000
SizeOfHeaders0x1000
CheckSum0
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
0x10000x2860000RWX UDATA
0x2870000x16c0000x16ba00RWX IDATA
.rsrc0x3f30000x360000x35400RW- IDATA

Data Directory

typevasize
EXPORT0x42801c0x244
IMPORT0x427e580x1c4
RESOURCE0x3f30000x34e58
EXCEPTION00
SECURITY00
BASERELOC0x4282600x18
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x3f29a80x18
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x689f29c00x689f29c40x6899dee00x689f29c400
typenamesizecp
ICON#148820
ICON#2101370
ICON#3255130
ICON#42960
ICON#54880
ICON#67440
ICON#716400
ICON#813840
ICON#917360
ICON#1022160
ICON#1137520
ICON#1211280
ICON#1324400
ICON#1442640
ICON#1596400
ICON#16169360
ICON#17216400
ICON#18380560
ICON#19676240
GROUP_ICONIDI_ICON12720
VERSION#16680
module_namehintordfunction_name
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLVirtualProtect
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLVirtualFree
ADVAPI32.dllCopySid
msvcrt.dll_iob
ole32.dllCoCreateGuid
USER32.dllSetTimer
WS2_32.dllWSAAsyncSelect
WSOCK32.DLLrecv
ordentry_vafunction_name
10x19ac70CCAPIConnectConsole
20x19ac80CCAPIDisconnectConsole
30x19ac90CCAPIGetConnectionStatus
40x19aca0CCAPIGetConsoleInfo
50x19acb0CCAPIGetDllVersion
60x19acc0CCAPIGetFirmwareInfo
70x19acf0CCAPIGetMemory
80x19ad00CCAPIGetNumberOfConsoles
90x19ad10CCAPIGetProcessList
100x19ad20CCAPIGetProcessName
110x19ad30CCAPIGetTemperature
120x19ad40CCAPIRingBuzzer
130x19ad50CCAPISetBootConsoleIds
140x19ad60CCAPISetConsoleIds
150x19ad70CCAPISetConsoleLed
160x19ad80CCAPISetMemory
170x19ad90CCAPIShutdown
180x19ada0CCAPIVshNotify
module_nameCCAPI.dll
flags0
timestamp2014-09-10 13:02:58
version0.0
ordinal_base1
nFunctions18
nNames18
Names(18)0x42808c
Functions(18)0x428044
NameOrdinals(18)0x4280d4

StringTable 040904b0

CompanyNameEnstone
FileDescriptionControlConsole API
FileVersion2.6.0.0
LegalCopyrightCopyright © 2014 Enstone
OriginalFilenameCCAPI.dll
ProductNameControlConsole API
ProductVersion2.6.0.0

VS_FIXEDFILEINFO

FileVersion2.6.0.0
ProductVersion2.6.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
01708032DLL09/10/2014 13:02:58#
15c115HTM#
16c0604882PNG(256 x 256)#
16d37810137PNG(256 x 256)#
16fb1825513PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER