filenamecabc.DLL
size135680 (0x21200)
md5e4c5e1c477f5ee1f8a35c48f5787e468
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
152201151
158402194
1704021911
171303195
156402196
131307291
1473072911
10122
155402191
171402198
154402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5447d8e8
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2122
Magic0x10b
LinkerVersion10.0
SizeOfCode0xe800
SizeOfInitializedData0x12600
SizeOfUninitializedData0
AddressOfEntryPoint0xddef
BaseOfCode0x1000
BaseOfData0x10000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x25000
SizeOfHeaders0x400
CheckSum0x27828
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000xe68c0xe800R-X CODE
.rdata0x100000x5dd10x5e00R-- IDATA
.data0x160000x7f00x400RW- IDATA
.rsrc0x170000xb0040xb200R-- IDATA
.reloc0x230000x10600x1200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x15d300xa1
IMPORT0x152640xb4
RESOURCE0x170000xb004
EXCEPTION00
SECURITY00
BASERELOC0x230000xfe0
DEBUG0x102400x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x137c00x40
Bound_IAT00
IAT0x100000x208
Delay_IAT00
CLR_Header00
typenamesizecp
TYPELIB#1200841252
CURSOR#13081252
CURSOR#21801252
CURSOR#33081252
CURSOR#41801252
CURSOR#53081252
CURSOR#61801252
CURSOR#73081252
CURSOR#81801252
CURSOR#93081252
CURSOR#101801252
CURSOR#115121252
CURSOR#121801252
CURSOR#135121252
CURSOR#141801252
CURSOR#155121252
CURSOR#161801252
CURSOR#175121252
CURSOR#181801252
CURSOR#193081252
CURSOR#201801252
CURSOR#213081252
CURSOR#221801252
CURSOR#233081252
CURSOR#243081252
CURSOR#253081252
CURSOR#263081252
CURSOR#273081252
CURSOR#283081252
CURSOR#293081252
CURSOR#303081252
CURSOR#313081252
CURSOR#323081252
CURSOR#333081252
CURSOR#343081252
CURSOR#353081252
CURSOR#363081252
BITMAP#309941841252
BITMAP#309963241252
DIALOG#307212321252
DIALOG#30734521252
STRING#38411301252
STRING#3842421252
STRING#38433881252
STRING#3850741252
STRING#385712541252
STRING#38586121252
STRING#38597301252
STRING#38601381252
STRING#38654101252
STRING#38662221252
STRING#386711921252
STRING#38685521252
STRING#3869441252
STRING#388713401252
GROUP_CURSOR#30977341252
GROUP_CURSOR#30979341252
GROUP_CURSOR#30980341252
GROUP_CURSOR#30981341252
GROUP_CURSOR#30982341252
GROUP_CURSOR#30983341252
GROUP_CURSOR#30984341252
GROUP_CURSOR#30985341252
GROUP_CURSOR#30986341252
GROUP_CURSOR#30987341252
GROUP_CURSOR#30988341252
GROUP_CURSOR#30998201252
GROUP_CURSOR#30999201252
GROUP_CURSOR#31000201252
GROUP_CURSOR#31001201252
GROUP_CURSOR#31002201252
GROUP_CURSOR#31003201252
GROUP_CURSOR#31004201252
GROUP_CURSOR#31005201252
GROUP_CURSOR#31006201252
GROUP_CURSOR#31007201252
GROUP_CURSOR#31008201252
GROUP_CURSOR#31009201252
GROUP_CURSOR#31010201252
GROUP_CURSOR#31011201252
VERSION#113581252
MANIFEST#23461252
idlangstring
614401033Open
614411033Save As
614421033All Files (*.*)
614431033Untitled
614461033an unnamed file
614571033&Hide
614721033No error message is available.
614731033Attempted an unsupported operation.
614741033A required resource was unavailable.
614751033Out of memory.
614761033An unknown error has occurred.
614771033Encountered an improper argument.
615881033Linked %s
615891033Unknown Type
616961033Incorrect filename.
616971033Failed to open document.
616981033Failed to save document.
616991033Save changes to %1?
617001033Failed to create empty document.
617011033The file is too large to open.
617021033Could not start print job.
617031033Failed to launch help.
617041033Internal application error.
617051033Command failed.
617061033Insufficient memory to perform operation.
617071033System registry entries have been removed and the INI file (if any) was deleted.
617081033Not all of the system registry entries (or INI file) were removed.
617091033This program requires the file %s, which was not found on this system.
617101033This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
617121033Enter an integer.
617131033Enter a number.
617141033Enter an integer between %1 and %2.
617151033Enter a number between %1 and %2.
617161033Enter no more than %1 characters.
617171033Select a button.
617181033Enter an integer between 0 and 255.
617191033Enter a positive integer.
617201033Enter a date and/or time.
617211033Enter a currency.
617221033Enter a GUID.
617231033Enter a time.
617241033Enter a date.
617281033Unexpected file format.
617291033%1 Cannot find this file. Verify that the correct path and file name are given.
617301033Destination disk drive is full.
617311033Unable to read from %1, it is opened by someone else.
617321033Unable to write to %1, it is read-only or opened by someone else.
617331033Encountered an unexpected error while reading %1.
617341033Encountered an unexpected error while writing %1.
617441033%1: %2 Continue running script?
617451033Dispatch exception: %1
618281033The file is not supported by a Document Object server.
618291033%1 Unable to register document. The document may already be open.
618361033Unable to read write-only property.
618371033Unable to write read-only property.
618401033Unable to load mail system support.
618411033Mail system DLL is invalid.
618421033Send Mail failed to send message.
618561033No error occurred.
618571033An unknown error occurred while accessing %1.
618581033%1 was not found.
618591033%1 contains an incorrect path.
618601033Could not open %1 because there are too many open files.
618611033Access to %1 was denied.
618621033An incorrect file handle was associated with %1.
618631033Could not remove %1 because it is the current directory.
618641033Could not create %1 because the directory is full.
618651033Seek failed on %1
618661033Encountered a hardware I/O error while accessing %1.
618671033Encountered a sharing violation while accessing %1.
618681033Encountered a locking violation while accessing %1.
618691033Disk full while accessing %1.
618701033Attempted to access %1 past its end.
618721033No error occurred.
618731033An unknown error occurred while accessing %1.
618741033Attempted to write to the reading %1.
618751033Attempted to access %1 past its end.
618761033Attempted to read from the writing %1.
618771033%1 has a bad format.
618781033%1 contained an unexpected object.
618791033%1 contains an incorrect schema.
618881033pixels
621771033Uncheck
621781033Check
621791033Mixed
621801033One or more auto-saved documents were found.
621811033These are more recently saved than the currently open documents and contain changes that were made before the application closed.
621821033Do you want to recover these auto-saved documents?
621831033Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.
621841033Recover the auto-saved documents Open the auto-saved versions instead of the explicitly saved versions
621851033Don't recover the auto-saved documents Use the last explicitly saved versions of the documents
621861033%s [Recovered]
module_namehintordfunction_name
KERNEL32.dll833LoadResource
KERNEL32.dll334FindResourceW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll581GetProcAddress
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll1201SizeofResource
KERNEL32.dll1357lstrlenA
KERNEL32.dll831LoadLibraryW
KERNEL32.dll676GetVersionExW
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll354FreeLibrary
KERNEL32.dll945RaiseException
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll1358lstrlenW
KERNEL32.dll514GetLastError
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll1202Sleep
KERNEL32.dll748InterlockedExchange
KERNEL32.dll202DecodePointer
KERNEL32.dll234EncodePointer
KERNEL32.dll840LocalFree
KERNEL32.dll1297WideCharToMultiByte
USER32.dll49CharNextW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll643RegisterEventSourceW
ADVAPI32.dll655ReportEventW
ADVAPI32.dll219DeregisterEventSource
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll584RegDeleteValueW
ole32.dll105CoTaskMemRealloc
ole32.dll103CoTaskMemAlloc
ole32.dll104CoTaskMemFree
ole32.dll16CoCreateInstance
ole32.dll376StringFromCLSID
ole32.dll6CLSIDFromProgID
ole32.dll70CoLoadLibrary
ole32.dll8CLSIDFromString
ole32.dll321OleRun
OLEAUT32.dll202
OLEAUT32.dll201
OLEAUT32.dll8
OLEAUT32.dll186
OLEAUT32.dll161
OLEAUT32.dll7
OLEAUT32.dll163
OLEAUT32.dll149
OLEAUT32.dll150
OLEAUT32.dll2
OLEAUT32.dll4
OLEAUT32.dll277
OLEAUT32.dll6
OLEAUT32.dll12
OLEAUT32.dll9
OLEAUT32.dll200
provcont.DLLCanUnloadNow
provcont.DLL5GetProvider
MSVCP100.dll652void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP100.dll593public: void __thiscall std::_Container_base0::_Orphan_all(void)

?_Orphan_all@_Container_base0@std@@QAEXXZ

MSVCR100.dll545_except_handler4_common
MSVCR100.dll305__CppXcptFilter
MSVCR100.dll507_crt_debugger_hook
MSVCR100.dll689_initterm_e
MSVCR100.dll688_initterm
MSVCR100.dll537_encoded_null
MSVCR100.dll238public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR100.dll453_amsg_exit
MSVCR100.dll339__clean_type_info_names_internal
MSVCR100.dll101void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR100.dll122void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR100.dll314__CxxFrameHandler3
MSVCR100.dll1491memset
MSVCR100.dll289_CxxThrowException
MSVCR100.dll1488memcpy_s
MSVCR100.dll1419free
MSVCR100.dll1596wcsncpy_s
MSVCR100.dll1603wcsstr
MSVCR100.dll1240_wcsicmp
MSVCR100.dll984_purecall
MSVCR100.dll99void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR100.dll1486memcmp
MSVCR100.dll1582wcscat
MSVCR100.dll1587wcscpy
MSVCR100.dll1123_swprintf
MSVCR100.dll1215_vswprintf
MSVCR100.dll1268_wcsupr
MSVCR100.dll1588wcscpy_s
MSVCR100.dll996_recalloc
MSVCR100.dll1489memmove
MSVCR100.dll1476malloc
MSVCR100.dll93public: virtual __thiscall std::exception::~exception(void)

??1exception@std@@UAE@XZ

MSVCR100.dll34public: __thiscall std::exception::exception(char const * const &)

??0exception@std@@QAE@ABQBD@Z

MSVCR100.dll269public: virtual char const * __thiscall std::exception::what(void)const

?what@exception@std@@UBEPBDXZ

MSVCR100.dll36public: __thiscall std::exception::exception(class std::exception const &)

??0exception@std@@QAE@ABV01@@Z

MSVCR100.dll1490memmove_s
MSVCR100.dll258void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR100.dll1165_unlock
MSVCR100.dll347__dllonexit
MSVCR100.dll803_lock
MSVCR100.dll969_onexit
MSVCR100.dll820_malloc_crt
ordentry_vafunction_name
10x37f0DllCanUnloadNow
20x3800DllGetClassObject
30x3fe0DllRegisterServer
40x4130DllUnregisterServer
module_nameCABC.dll
flags0
timestamp2014-10-22 16:18:48
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x15d68
Functions(4)0x15d58
NameOrdinals(4)0x15d78

StringTable 040904E4

CompanyNameNEC Corporation
FileDescriptionUNICODE Symbols By NAME
FileVersion9.0.00
InternalNamef1
LegalCopyrightCopyright(C) Wonderware Corporation, 1994 - 2014. All Rights Reserved.
LegalTrademarksNEC(TM) and FlexProcess(TM) are trademarks of NEC Corporation.Wonderware(R) and Protean(R) are Registered Trademarks of Wonderware Corporation.
CommentsThis program is protected by US and International copyright laws as described in Help About.
OriginalFilenamecabc.DLL
ProductNameFlexProcess
ProductVersion9.0.00

VS_FIXEDFILEINFO

FileVersion9.0.0.41023
ProductVersion9.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags2
FileOS0
FileType1
FileSubtype0
offsetsizetypecomment
0135680DLL10/22/2014 16:18:48#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK