filenameATLProject1.dll
size186880 (0x2da00)
md5e726e351af4ad400d9fbc6accce5d864
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
221210052
223210051
2242100511
2252100515
225208062
206655012
2036550111
10102
224307231
225307234
220307231
219210051
15101
222307231

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x5426d4cd
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x1fc00
SizeOfInitializedData0x10600
SizeOfUninitializedData0
AddressOfEntryPoint0x11686
BaseOfCode0x1000
BaseOfData0x1000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x44000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.textbss0x10000x100000RWX CODE UDATA
.text0x110000x1fa3d0x1fc00R-X CODE
.rdata0x310000x91c20x9200R-- IDATA
.data0x3b0000x35b00xa00RW- IDATA
.idata0x3f0000xea10x1000R-- IDATA
.rsrc0x400000x15660x1600R-- IDATA
.reloc0x420000x16660x1800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x39fe00x1e2
IMPORT0x3f2e80x8c
RESOURCE0x400000x1566
EXCEPTION00
SECURITY00
BASERELOC0x420000x12c8
DEBUG0x318a00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x37cf00x40
Bound_IAT00
IAT0x3f0000x2e8
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#101120
REGISTRY#1066630
TYPELIB#117160
STRING#7540
VERSION#18320
MANIFEST#23810
idlangstring
1001033ATLProject1
module_namehintordfunction_name
KERNEL32.dll611GetModuleFileNameW
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll669GetProcAddress
KERNEL32.dll935LoadLibraryExW
KERNEL32.dll939LoadResource
KERNEL32.dll1359SizeofResource
KERNEL32.dll1536lstrcmpiW
KERNEL32.dll393FindResourceW
KERNEL32.dll414FreeLibrary
KERNEL32.dll747GetThreadLocale
KERNEL32.dll1329SetThreadLocale
KERNEL32.dll674GetProcessHeap
KERNEL32.dll819HeapFree
KERNEL32.dll815HeapAlloc
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll841InitializeCriticalSectionEx
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll293EnterCriticalSection
KERNEL32.dll592GetLastError
KERNEL32.dll1087RaiseException
KERNEL32.dll254DecodePointer
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll289EncodePointer
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll1483WideCharToMultiByte
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll1018OutputDebugStringW
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll1441VirtualQuery
USER32.dll841UnregisterClassW
USER32.dll271GetActiveWindow
USER32.dll589MessageBoxW
USER32.dll49CharNextW
ADVAPI32.dll652RegQueryInfoKeyW
ADVAPI32.dll645RegOpenKeyExW
ADVAPI32.dll627RegEnumKeyExW
ADVAPI32.dll620RegDeleteValueW
ADVAPI32.dll616RegDeleteKeyW
ADVAPI32.dll605RegCreateKeyExW
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll674RegSetValueExW
ole32.dll442StringFromGUID2
ole32.dll122CoTaskMemAlloc
ole32.dll123CoTaskMemFree
ole32.dll26CoCreateInstance
ole32.dll124CoTaskMemRealloc
OLEAUT32.dll2
OLEAUT32.dll162
OLEAUT32.dll186
OLEAUT32.dll163
OLEAUT32.dll161
OLEAUT32.dll277
OLEAUT32.dll7
OLEAUT32.dll6
MSVCR120D.dll464__dllonexit
MSVCR120D.dll1535_wsplitpath_s
MSVCR120D.dll1501_wmakepath_s
MSVCR120D.dll430__clean_type_info_names_internal
MSVCR120D.dll685_except_handler4_common
MSVCR120D.dll838_initterm_e
MSVCR120D.dll837_initterm
MSVCR120D.dll114void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR120D.dll1732free
MSVCR120D.dll1820malloc
MSVCR120D.dll1166_recalloc
MSVCR120D.dll366_CrtSetCheckCount
MSVCR120D.dll137void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR120D.dll1830memcmp
MSVCR120D.dll1832memcpy_s
MSVCR120D.dll1835memset
MSVCR120D.dll1985wcscat_s
MSVCR120D.dll1990wcscpy_s
MSVCR120D.dll1993wcslen
MSVCR120D.dll1998wcsncpy_s
MSVCR120D.dll2005wcsstr
MSVCR120D.dll1431_wcsnicmp
MSVCR120D.dll1936swprintf_s
MSVCR120D.dll1388_vsnwprintf_s
MSVCR120D.dll1376_vscwprintf
MSVCR120D.dll376_CxxThrowException
MSVCR120D.dll406__CxxFrameHandler3
MSVCR120D.dll1154_purecall
MSVCR120D.dll1834memmove_s
MSVCR120D.dll971_lock
MSVCR120D.dll1343_unlock
MSVCR120D.dll603_calloc_dbg
MSVCR120D.dll349_CrtDbgReportW
MSVCR120D.dll1139_onexit
MSVCR120D.dll642_crt_debugger_hook
MSVCR120D.dll462__crtUnhandledException
MSVCR120D.dll461__crtTerminateProcess
MSVCR120D.dll343_CRT_RTC_INITW
MSVCR120D.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120D.dll311void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120D.dll112void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR120D.dll401__CppXcptFilter
MSVCR120D.dll580_amsg_exit
MSVCR120D.dll989_malloc_dbg
MSVCR120D.dll740_free_dbg
ordentry_vafunction_name
10x115d7DllCanUnloadNow
20x11bccDllGetClassObject
30x119e7DllInstall
40x11b86DllRegisterServer
50x11028DllUnregisterServer
module_nameATLProject1.dll
flags0
timestamp2014-09-27 15:16:28
version0.0
ordinal_base1
nFunctions5
nNames5
Names(5)0x3a01c
Functions(5)0x3a008
NameOrdinals(5)0x3a030

StringTable 040904B0

CompanyNameTODO: <Company name>
FileDescriptionTODO: <File description>
FileVersion1.0.0.1
LegalCopyrightTODO: (c) <Company name>. All rights reserved.
InternalNameATLProject1.dll
OriginalFilenameATLProject1.dll
ProductNameTODO: <Product name>
ProductVersion1.0.0.1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags1
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
0186880DLL09/27/2014 15:16:29#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK