filenamemsvcm90.dll
size245760 (0x3c000)
md5e6e1b7adeed68fc899703f79ef980401
typePE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
147307293
150204131
149307291
123605162
123507274
10152
1313072912
13230729101
146307291
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections7
TimeDateStamp0x4a594e4d
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion9.0
SizeOfCode0x10a00
SizeOfInitializedData0x38c00
SizeOfUninitializedData0
AddressOfEntryPoint0xe18a
BaseOfCode0x1000
ImageBase0x78480000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion9.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x4e000
SizeOfHeaders0x400
CheckSum0x3caad
Subsystem2
DllCharacteristics0x40
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xf8bb0xfa00R-X CODE
.nep0x110000x10000x1000R-X CODE
.rdata0x120000x291060x29200R-- IDATA
.data0x3c0000xec380x1400RW- IDATA
.pdata0x4b0000x1440x200R-- IDATA
.rsrc0x4c0000x3d00x400R-- IDATA
.reloc0x4d0000x49a0x600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x39a600x16a6
IMPORT0x38c5c0x64
RESOURCE0x4c0000x3d0
EXCEPTION0x4b0000x144
SECURITY00
BASERELOC0x4d0000x114
DEBUG0x130800x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x120000x440
Delay_IAT00
CLR_Header0x130a80x48
typenamesizecp
VERSION#18760
module_namehintordfunction_name
MSVCR90.dll123__clean_type_info_names_internal
MSVCR90.dll131__crt_debugger_hook
MSVCR90.dll56public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll90__CppXcptFilter
MSVCR90.dll226_amsg_exit
MSVCR90.dll312_encoded_null
MSVCR90.dll463_initterm_e
MSVCR90.dll462_initterm
MSVCR90.dll590_malloc_crt
MSVCR90.dll301_decode_pointer
MSVCR90.dll740_onexit
MSVCR90.dll573_lock
MSVCR90.dll311_encode_pointer
MSVCR90.dll133__dllonexit
MSVCR90.dll932_unlock
MSVCR90.dll191__setusermatherr
MSVCR90.dll51int (__cdecl*__cdecl _set_new_handler(int (__cdecl*)(unsigned __int64)))(unsigned __int64)

?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z

MSVCR90.dll48int (__cdecl*__cdecl _query_new_handler(void))(unsigned __int64)

?_query_new_handler@@YAP6AH_K@ZXZ

MSVCR90.dll1296signal
MSVCR90.dll464_invalid_parameter
MSVCR90.dll317_errno
MSVCR90.dll794_set_invalid_parameter_handler
MSVCR90.dll409_get_invalid_parameter_handler
MSVCR90.dll64void (__cdecl*__cdecl set_terminate(void (__cdecl*)(void)))(void)

?set_terminate@@YAP6AXXZP6AXXZ@Z

MSVCR90.dll416_get_terminate
MSVCR90.dll798_set_purecall_handler
MSVCR90.dll414_get_purecall_handler
MSVCR90.dll66void (__cdecl*__cdecl set_unexpected(void (__cdecl*)(void)))(void)

?set_unexpected@@YAP6AXXZP6AXXZ@Z

MSVCR90.dll419_get_unexpected
MSVCR90.dll357_fpieee_flt
MSVCR90.dll249_cexit
MSVCR90.dll1314strcpy_s
MSVCR90.dll1319strlen
MSVCR90.dll326_exit
MSVCR90.dll85_XcptFilter
MSVCR90.dll313_endthread
MSVCR90.dll436_getptd
MSVCR90.dll371_freefls
MSVCR90.dll137__fls_setvalue
MSVCR90.dll136__fls_getvalue
MSVCR90.dll142__get_flsindex
MSVCR90.dll189__set_flsgetvalue
MSVCR90.dll304_dosmaperr
MSVCR90.dll461_initptd
MSVCR90.dll1158calloc
MSVCR90.dll314_endthreadex
MSVCR90.dll89__C_specific_handler
MSVCR90.dll1265memcpy_s
MSVCR90.dll1267memmove_s
MSVCR90.dll1268memset
MSVCR90.dll466_invoke_watson
MSVCR90.dll465_invalid_parameter_noinfo
MSVCR90.dll17void * __ptr64 __cdecl operator new(unsigned __int64)

??2@YAPEAX_K@Z

MSVCR90.dll35void __cdecl operator delete[](void * __ptr64)

??_V@YAXPEAX@Z

MSVCR90.dll102__CxxUnregisterExceptionObject
MSVCR90.dll95__CxxDetectRethrow
MSVCR90.dll73_CxxThrowException
MSVCR90.dll101__CxxRegisterExceptionObject
MSVCR90.dll96__CxxExceptionFilter
MSVCR90.dll100__CxxQueryExceptionSize
MSVCR90.dll116___mb_cur_max_func
MSVCR90.dll1139abort
MSVCR90.dll1190fputc
MSVCR90.dll146__iob_func
MSVCR90.dll1177fgetc
MSVCR90.dll1352ungetc
MSVCR90.dll1176fflush
MSVCR90.dll1295setvbuf
MSVCR90.dll1207fwrite
MSVCR90.dll1178fgetpos
MSVCR90.dll1202fseek
MSVCR90.dll1203fsetpos
MSVCR90.dll1173fclose
MSVCR90.dll1180fgetwc
MSVCR90.dll1192fputwc
MSVCR90.dll1353ungetwc
MSVCR90.dll1286realloc
MSVCR90.dll1294setlocale
MSVCR90.dll1302sprintf_s
MSVCR90.dll1264memcpy
MSVCR90.dll115___lc_handle_func
MSVCR90.dll128__crtGetStringTypeW
MSVCR90.dll183__pctype_func
MSVCR90.dll117___mb_cur_max_l_func
MSVCR90.dll113___lc_codepage_func
MSVCR90.dll130__crtLCMapStringW
MSVCR90.dll129__crtLCMapStringA
MSVCR90.dll1070_wfsopen
MSVCR90.dll1260mbstowcs_s
MSVCR90.dll204__uncaught_exception
MSVCR90.dll1229isupper
MSVCR90.dll1225islower
MSVCR90.dll1350towlower
MSVCR90.dll1351towupper
MSVCR90.dll1311strcmp
MSVCR90.dll104__FrameUnwindFilter
MSVCR90.dll19void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

MSVCR90.dll915_ui64toa_s
MSVCR90.dll280_create_locale
MSVCR90.dll1253malloc
MSVCR90.dll368_free_locale
MSVCR90.dll1263memcmp
MSVCR90.dll1196free
KERNEL32.dll903ResumeThread
KERNEL32.dll486GetLastError
KERNEL32.dll262ExitThread
KERNEL32.dll505GetModuleHandleW
KERNEL32.dll544GetProcAddress
KERNEL32.dll163CreateThread
KERNEL32.dll788MultiByteToWideChar
KERNEL32.dll1150WideCharToMultiByte
KERNEL32.dll692InitializeCriticalSection
KERNEL32.dll191DeleteCriticalSection
KERNEL32.dll204DisableThreadLibraryCalls
KERNEL32.dll905RtlCaptureContext
KERNEL32.dll912RtlLookupFunctionEntry
KERNEL32.dll919RtlVirtualUnwind
KERNEL32.dll715IsDebuggerPresent
KERNEL32.dll1049SetUnhandledExceptionFilter
KERNEL32.dll1090UnhandledExceptionFilter
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll1073TerminateProcess
KERNEL32.dll1061Sleep
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll846QueryPerformanceCounter
KERNEL32.dll614GetTickCount
KERNEL32.dll430GetCurrentThreadId
ole32.dll20CoCreateInstance
mscoree.dll14CorBindToRuntimeEx
mscoree.dll115_CorDllMain
ordentry_vafunction_name
10x110f0?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6AJPEAX@Z0@Z
20x11110?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
30x11090?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXPE$AAVEventHandler@System@@@Z
40x11050?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@@Z
50x11070?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVString@System@@PE$AAVException@3@@Z
60x11230?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXPE$AAVException@System@@0@Z
70x116f0?_Addstd@ios_base@std@@SAXPEAV12@@Z
80x11790?_Atexit@@YAXP6AXXZ@Z
90x11690?_BADOFF_func@std@@YAAEB_JXZ
100x117b0?_Cerr_func@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@XZ
110x117d0?_Cin_func@std@@YAAEAV?$basic_istream@DU?$char_traits@D@std@@@1@XZ
120x11a30?_Clocptr_func@_Locimp@locale@std@@CAAEAPEAV123@XZ
130x117f0?_Clog_func@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@XZ
140x11810?_Cout_func@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@XZ
150x11ef0?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
160x11ed0?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z
170x11eb0?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
180x11670?_Fpz_func@std@@YAAEA_JXZ
190x11c70?_Getcvt@@YA?AU_Cvtvec@@XZ
200x119f0?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
210x11a50?_Id_cnt_func@id@locale@std@@CAAEAHXZ
220x11af0?_Id_func@?$codecvt@GDH@std@@SAAEAVid@locale@2@XZ
230x11ab0?_Id_func@?$codecvt@_WDH@std@@SAAEAVid@locale@2@XZ
240x11a70?_Id_func@?$ctype@D@std@@SAAEAVid@locale@2@XZ
250x11ad0?_Id_func@?$ctype@G@std@@SAAEAVid@locale@2@XZ
260x11a90?_Id_func@?$ctype@_W@std@@SAAEAVid@locale@2@XZ
270x116b0?_Index_func@ios_base@std@@CAAEAHXZ
280x11b50?_Init@locale@std@@CAPEAV_Locimp@12@XZ
290x11730?_Init_cnt_func@Init@ios_base@std@@CAAEAHXZ
300x11750?_Init_ctor@Init@ios_base@std@@CAXPEAV123@@Z
310x11770?_Init_dtor@Init@ios_base@std@@CAXPEAV123@@Z
320x11d30?_Init_locks_ctor@_Init_locks@std@@CAXPEAV12@@Z
330x11d50?_Init_locks_dtor@_Init_locks@std@@CAXPEAV12@@Z
340x11710?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
350x11950?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
360x11b10?_Locimp_dtor@_Locimp@locale@std@@CAXPEAV123@@Z
370x11990?_Locinfo_Addcats@_Locinfo@std@@SAAEAV12@PEAV12@HPEBD@Z
380x11b90?_Locinfo_ctor@_Locinfo@std@@SAXPEAV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
390x119b0?_Locinfo_ctor@_Locinfo@std@@SAXPEAV12@HPEBD@Z
400x11b70?_Locinfo_ctor@_Locinfo@std@@SAXPEAV12@PEBD@Z
410x11b30?_Locinfo_dtor@_Locinfo@std@@SAXPEAV12@@Z
420x11d70?_Lockit_ctor@_Lockit@std@@CAXPEAV12@@Z
430x11d90?_Lockit_ctor@_Lockit@std@@CAXPEAV12@H@Z
440x11dd0?_Lockit_ctor@_Lockit@std@@SAXH@Z
450x11db0?_Lockit_dtor@_Lockit@std@@CAXPEAV12@@Z
460x11df0?_Lockit_dtor@_Lockit@std@@SAXH@Z
470x11c10?_Mbrtowc@@YAHPEAGPEBD_KPEAHPEBU_Cvtvec@@@Z
480x11bf0?_Mbrtowc@@YAHPEA_WPEBD_KPEAHPEBU_Cvtvec@@@Z
490x11e50?_Mtxdst@@YAXPEAU_RTL_CRITICAL_SECTION@@@Z
500x11e30?_Mtxinit@@YAXPEAU_RTL_CRITICAL_SECTION@@@Z
510x11e70?_Mtxlock@@YAXPEAU_RTL_CRITICAL_SECTION@@@Z
520x11e90?_Mtxunlock@@YAXPEAU_RTL_CRITICAL_SECTION@@@Z
530x11cf0?_Mutex_Lock@_Mutex@std@@CAXPEAV12@@Z
540x11d10?_Mutex_Unlock@_Mutex@std@@CAXPEAV12@@Z
550x11cb0?_Mutex_ctor@_Mutex@std@@CAXPEAV12@@Z
560x11cd0?_Mutex_dtor@_Mutex@std@@CAXPEAV12@@Z
570x11f70?_Nomemory@std@@YAXXZ
580x11e10?_Once@@YAXPEAJP6AXXZ@Z
590x11a10?_Setgloballocale@locale@std@@CAXPEAX@Z
600x116d0?_Sync_func@ios_base@std@@CAAEA_NXZ
610x11830?_Wcerr_func@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@1@XZ
620x118b0?_Wcerr_func@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@XZ
630x11850?_Wcin_func@std@@YAAEAV?$basic_istream@GU?$char_traits@G@std@@@1@XZ
640x118d0?_Wcin_func@std@@YAAEAV?$basic_istream@_WU?$char_traits@_W@std@@@1@XZ
650x11870?_Wclog_func@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@1@XZ
660x118f0?_Wclog_func@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@XZ
670x11890?_Wcout_func@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@1@XZ
680x11910?_Wcout_func@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@XZ
690x11c50?_Wcrtomb@@YAHPEADGPEAHPEBU_Cvtvec@@@Z
700x11c30?_Wcrtomb@@YAHPEAD_WPEAHPEBU_Cvtvec@@@Z
710x11f50?_Xinvarg@_String_base@std@@SAXXZ
720x11f10?_Xlen@_String_base@std@@SAXXZ
730x11f30?_Xran@_String_base@std@@SAXXZ
740x11c90?__Wcrtomb_lk@@YAHPEAD_WPEAHPEBU_Cvtvec@@@Z
750x110b0?__get_default_appdomain@@YAJPEAPEAUIUnknown@@@Z
760x111b0?__query_new_handler_m@@YAP6MH_K@ZXZ
770x110d0?__release_appdomain@@YAXPEAUIUnknown@@@Z
780x114b0?_beginthread@@YA_KP6MXPEAX@ZI0@Z
790x11510?_beginthreadex@@YA_KPEAXIP6MI0@Z0IPEAI@Z
800x113b0?_fpieee_flt@@YAHKPEAU_EXCEPTION_POINTERS@@P6MHPEAU_FPIEEE_RECORD@@@Z@Z
810x11350?_set_invalid_parameter_handler@@YAP6AXPEB_W00I_K@ZH@Z
820x11270?_set_invalid_parameter_handler@@YAP6MXPEB_W00I_K@ZP6MX000I1@Z@Z
830x11170?_set_new_handler@@YAP6MH_K@ZP6MH0@Z@Z
840x11370?_set_purecall_handler@@YAP6AXXZH@Z
850x112f0?_set_purecall_handler@@YAP6MXXZP6MXXZ@Z
860x11f90?_uncaught_exception_m@std@@YA_NXZ
870x11bb0?classic@locale@std@@SAAEBV12@XZ
880x11bd0?empty@locale@std@@SA?AV12@XZ
890x11970?global@locale@std@@SA?AV12@AEBV12@@Z
900x115d0?resetiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
910x11190?set_new_handler@std@@YAP6MXXZP6MXXZ@Z
920x112b0?set_terminate@@YAP6MXXZP6MXXZ@Z
930x11330?set_unexpected@@YAP6MXXZP6MXXZ@Z
940x11610?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
950x115f0?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
960x11630?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
970x11650?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
980x11210?signal@@YAP6MXH@ZHH@Z
990x111f0?signal@@YAP6MXH@ZHP6MXH@Z@Z
1000x11030__setusermatherr_m
1010x11fb0towctrans
1020x11fd0wctrans
1030x11ff0wctype
module_namemsvcm90.dll
flags0
timestamp2009-07-12 02:41:29
version0.0
ordinal_base1
nFunctions103
nNames103
Names(103)0x39c24
Functions(103)0x39a88
NameOrdinals(103)0x39dc0

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft® C Runtime Library
FileVersion9.00.30729.4148
InternalNameMSVCM90.DLL
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameMSVCM90.DLL
ProductNameMicrosoft® Visual Studio® 2008
ProductVersion9.00.30729.4148

VS_FIXEDFILEINFO

FileVersion9.0.30729.4148
ProductVersion9.0.30729.4148
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0240176BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK