filenameInitMdul.dll
size3364864 (0x335800)
md52646d740e09c7b6538b1498dd29916f0
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
152201153
158303192
1703031912
156303194
171303195
135307291
17140219323
17040219309
156402199
1473072922
10302
1754021974
155402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x570f3463
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion10.0
SizeOfCode0x1b3800
SizeOfInitializedData0x181c00
SizeOfUninitializedData0
AddressOfEntryPoint0x1938b4
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x344000
SizeOfHeaders0x400
CheckSum0x339088
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x1b36fc0x1b3800R-X CODE
.rdata0x1b50000x1073110x107400R-- IDATA
.data0x2bd0000x63d680x59800RW- IDATA
.pdata0x3210000x179640x17a00R-- IDATA
.rsrc0x3390000x2c80x400R-- IDATA
.reloc0x33a0000x91360x9200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x2bc2700xa1
IMPORT0x2ba36c0x12c
RESOURCE0x3390000x2c8
EXCEPTION0x3210000x17964
SECURITY00
BASERELOC0x33a0000x6ca0
DEBUG0x1b5fb00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x1b50000x828
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#26241252
module_namehintordfunction_name
boost_thread.dll6public: __cdecl boost::thread::thread(void) __ptr64

??0thread@boost@@QEAA@XZ

boost_thread.dll7public: __cdecl boost::detail::thread_data_base::thread_data_base(void) __ptr64

??0thread_data_base@detail@boost@@QEAA@XZ

boost_thread.dll33public: void __cdecl boost::thread::interrupt(void) __ptr64

?interrupt@thread@boost@@QEAAXXZ

boost_thread.dll11public: __cdecl boost::thread::~thread(void) __ptr64

??1thread@boost@@QEAA@XZ

boost_thread.dll59private: void __cdecl boost::thread::start_thread(void) __ptr64

?start_thread@thread@boost@@AEAAXXZ

boost_thread.dll40public: void __cdecl boost::thread::join(void) __ptr64

?join@thread@boost@@QEAAXXZ

boost_thread.dll14??4thread@boost@@QEAAAEAV01@$$QEAV01@@Z
boost_thread.dll12public: virtual __cdecl boost::detail::thread_data_base::~thread_data_base(void) __ptr64

??1thread_data_base@detail@boost@@UEAA@XZ

boost_thread.dll37void __cdecl boost::this_thread::interruption_point(void)

?interruption_point@this_thread@boost@@YAXXZ

boost_thread.dll64public: bool __cdecl boost::thread::timed_join(class boost::posix_time::ptime const & __ptr64) __ptr64

?timed_join@thread@boost@@QEAA_NAEBVptime@posix_time@2@@Z

boost_thread.dll48public: virtual void __cdecl boost::detail::thread_data_base::notify_all_at_thread_exit(class boost::condition_variable * __ptr64, class boost::mutex * __ptr64) __ptr64

?notify_all_at_thread_exit@thread_data_base@detail@boost@@UEAAXPEAVcondition_variable@3@PEAVmutex@3@@Z

boost_thread.dll35bool __cdecl boost::this_thread::interruptible_wait(void * __ptr64, struct boost::detail::timeout)

?interruptible_wait@this_thread@boost@@YA_NPEAXUtimeout@detail@2@@Z

boost_date_time.dll2public: __cdecl boost::gregorian::greg_month::greg_month(unsigned short) __ptr64

??0greg_month@gregorian@boost@@QEAA@G@Z

boost_system.dll1class boost::system::error_category const & __ptr64 __cdecl boost::system::system_category(void)

?system_category@system@boost@@YAAEBVerror_category@12@XZ

boost_system.dllclass boost::system::error_category const & __ptr64 __cdecl boost::system::generic_category(void)

?generic_category@system@boost@@YAAEBVerror_category@12@XZ

KERNEL32.dll727HeapFree
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll520GetLastError
KERNEL32.dll542GetModuleHandleW
KERNEL32.dll682GetVersion
KERNEL32.dll873MultiByteToWideChar
KERNEL32.dll506GetFileType
KERNEL32.dll619GetStdHandle
KERNEL32.dll937QueryPerformanceCounter
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll711GlobalMemoryStatus
KERNEL32.dll360FreeLibrary
KERNEL32.dll833LoadLibraryW
KERNEL32.dll684GetVersionExW
KERNEL32.dll348FlushConsoleInputBuffer
KERNEL32.dll830LoadLibraryA
KERNEL32.dll769IsDBCSLeadByteEx
KERNEL32.dll1312WideCharToMultiByte
KERNEL32.dll780IsValidCodePage
KERNEL32.dll683GetVersionExA
KERNEL32.dll136CreateFileA
KERNEL32.dll143CreateFileW
KERNEL32.dll236DuplicateHandle
KERNEL32.dll454GetCurrentProcess
KERNEL32.dll1140SetFilePointer
KERNEL32.dll503GetFileSize
KERNEL32.dll963ReadFile
KERNEL32.dll593GetProcessHeap
KERNEL32.dll452GetCurrentDirectoryA
KERNEL32.dll453GetCurrentDirectoryW
KERNEL32.dll511GetFullPathNameA
KERNEL32.dll514GetFullPathNameW
KERNEL32.dll746InitializeCriticalSection
KERNEL32.dll210DeleteCriticalSection
KERNEL32.dll242EnterCriticalSection
KERNEL32.dll827LeaveCriticalSection
KERNEL32.dll770IsDebuggerPresent
KERNEL32.dll1203SetUnhandledExceptionFilter
KERNEL32.dll1250UnhandledExceptionFilter
KERNEL32.dll1230TerminateProcess
KERNEL32.dll203DecodePointer
KERNEL32.dll238EncodePointer
KERNEL32.dll405GetComputerNameW
KERNEL32.dll634GetSystemInfo
KERNEL32.dll723HeapAlloc
KERNEL32.dll640GetSystemTimeAsFileTime
KERNEL32.dll539GetModuleHandleA
KERNEL32.dll588GetProcAddress
KERNEL32.dll666GetTickCount
KERNEL32.dll1289WaitForSingleObjectEx
KERNEL32.dll1127SetEvent
KERNEL32.dll130CreateEventA
KERNEL32.dll82CloseHandle
KERNEL32.dll486GetExitCodeProcess
KERNEL32.dll1288WaitForSingleObject
KERNEL32.dll168CreateProcessW
KERNEL32.dll538GetModuleFileNameW
KERNEL32.dll1062RtlVirtualUnwind
KERNEL32.dll1055RtlLookupFunctionEntry
KERNEL32.dll1048RtlCaptureContext
KERNEL32.dll1216Sleep
KERNEL32.dll1253UnmapViewOfFile
KERNEL32.dll857MapViewOfFile
KERNEL32.dll215DeleteFileW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll497GetFileAttributesW
KERNEL32.dll652GetTempPathW
KERNEL32.dll533GetLongPathNameW
KERNEL32.dll695GetWindowsDirectoryW
KERNEL32.dll1275VirtualFree
KERNEL32.dll299FileTimeToSystemTime
KERNEL32.dll298FileTimeToLocalFileTime
KERNEL32.dll1144SetFileTime
KERNEL32.dll505GetFileTime
KERNEL32.dll866MoveFileExW
KERNEL32.dll521GetLocalTime
KERNEL32.dll638GetSystemTime
KERNEL32.dll1121SetEndOfFile
KERNEL32.dll140CreateFileMappingW
KERNEL32.dll1332WriteFile
KERNEL32.dll1227SystemTimeToFileTime
KERNEL32.dll840LocalFileTimeToFileTime
USER32.dll397GetUserObjectInformationW
USER32.dll175DispatchMessageW
USER32.dll772TranslateMessage
USER32.dll567PeekMessageW
USER32.dll362GetProcessWindowStation
USER32.dll293GetDesktopWindow
USER32.dll537MessageBoxW
ADVAPI32.dll590RegEnumKeyExA
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll655ReportEventW
ADVAPI32.dll108ConvertSidToStringSidW
ADVAPI32.dll399LookupAccountNameW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll643RegisterEventSourceW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll219DeregisterEventSource
SHELL32.dll289ShellExecuteExW
SHELL32.dll195SHGetFolderPathW
SHELL32.dll680
MSVCP100.dll652void __cdecl std::_Xlength_error(char const * __ptr64)

?_Xlength_error@std@@YAXPEBD@Z

MSVCP100.dll654void __cdecl std::_Xout_of_range(char const * __ptr64)

?_Xout_of_range@std@@YAXPEBD@Z

MSVCR100.dll1466qsort
MSVCR100.dll1448memcmp
MSVCR100.dll1573wcsstr
MSVCR100.dll1157_vsnwprintf
MSVCR100.dll1539vfprintf
MSVCR100.dll340__iob_func
MSVCR100.dll512_exit
MSVCR100.dll1468raise
MSVCR100.dll756_localtime64
MSVCR100.dll1087_time64
MSVCR100.dll1471realloc
MSVCR100.dll1405isdigit
MSVCR100.dll1411isspace
MSVCR100.dll1371fprintf
MSVCR100.dll1507strncmp
MSVCR100.dll1447memchr
MSVCR100.dll1356fclose
MSVCR100.dll1358ferror
MSVCR100.dll1377fread
MSVCR100.dll1390fwrite
MSVCR100.dll1359fflush
MSVCR100.dll1457pow
MSVCR100.dll988_setmode
MSVCR100.dll526_fileno
MSVCR100.dll1387ftell
MSVCR100.dll1357feof
MSVCR100.dll1385fseek
MSVCR100.dll1362fgets
MSVCR100.dll503_errno
MSVCR100.dll1249_wfopen
MSVCR100.dll1426isxdigit
MSVCR100.dll1395getenv
MSVCR100.dll1533tolower
MSVCR100.dll1049_strnicmp
MSVCR100.dll1336atoi
MSVCR100.dll1518strtol
MSVCR100.dll1412isupper
MSVCR100.dll1491sscanf
MSVCR100.dll1374fputs
MSVCR100.dll1481signal
MSVCR100.dll606_getch
MSVCR100.dll1519strtoul
MSVCR100.dll1486sprintf
MSVCR100.dll1514strstr
MSVCR100.dll296__CxxFrameHandler3
MSVCR100.dll270_CxxThrowException
MSVCR100.dll1496strcmp
MSVCR100.dll1504strlen
MSVCR100.dll1352exit
MSVCR100.dll1218_wcsupr
MSVCR100.dll1190_wcsicmp
MSVCR100.dll1200_wcsnicmp
MSVCR100.dll1194_wcslwr
MSVCR100.dll407_aligned_malloc
MSVCR100.dll406_aligned_free
MSVCR100.dll1436logf
MSVCR100.dll1351div
MSVCR100.dll1323abs
MSVCR100.dll1432localeconv
MSVCR100.dll1515strtod
MSVCR100.dll37public: __cdecl std::exception::exception(void) __ptr64

??0exception@std@@QEAA@XZ

MSVCR100.dll1487sprintf_s
MSVCR100.dll1547vswprintf_s
MSVCR100.dll1147_vscwprintf
MSVCR100.dll921_mktime64
MSVCR100.dll286__C_specific_handler
MSVCR100.dll1115_unlock
MSVCR100.dll328__dllonexit
MSVCR100.dll758_lock
MSVCR100.dll925_onexit
MSVCR100.dll256void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR100.dll775_malloc_crt
MSVCR100.dll646_initterm
MSVCR100.dll647_initterm_e
MSVCR100.dll498_encoded_null
MSVCR100.dll414_amsg_exit
MSVCR100.dll287__CppXcptFilter
MSVCR100.dll326__crt_debugger_hook
MSVCR100.dll238public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR100.dll320__clean_type_info_names_internal
MSVCR100.dll35public: __cdecl std::exception::exception(char const * __ptr64 const & __ptr64, int) __ptr64

??0exception@std@@QEAA@AEBQEBDH@Z

MSVCR100.dll93public: virtual __cdecl std::exception::~exception(void) __ptr64

??1exception@std@@UEAA@XZ

MSVCR100.dll34public: __cdecl std::exception::exception(char const * __ptr64 const & __ptr64) __ptr64

??0exception@std@@QEAA@AEBQEBD@Z

MSVCR100.dll1546vsprintf_s
MSVCR100.dll1438malloc
MSVCR100.dll1379free
MSVCR100.dll937_purecall
MSVCR100.dll99void * __ptr64 __cdecl operator new(unsigned __int64)

??2@YAPEAX_K@Z

MSVCR100.dll101void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

MSVCR100.dll1453memset
MSVCR100.dll1449memcpy
MSVCR100.dll1495strchr
MSVCR100.dll1501strerror
MSVCR100.dll1508strncpy
MSVCR100.dll631_gmtime64
MSVCR100.dll1490srand
MSVCR100.dll1451memmove
MSVCR100.dll109public: bool __cdecl type_info::operator==(class type_info const & __ptr64)const __ptr64

??8type_info@@QEBA_NAEBV0@@Z

MSVCR100.dll266public: virtual char const * __ptr64 __cdecl std::exception::what(void)const __ptr64

?what@exception@std@@UEBAPEBDXZ

MSVCR100.dll36public: __cdecl std::exception::exception(class std::exception const & __ptr64) __ptr64

??0exception@std@@QEAA@AEBV01@@Z

MSVCR100.dll122void __cdecl operator delete[](void * __ptr64)

??_V@YAXPEAX@Z

MSVCR100.dll1343ceilf
MSVCR100.dll1469rand
MSVCR100.dll1369fopen
IPHLPAPI.DLL63GetAdaptersInfo
boost_regex.dll268private: class boost::basic_regex<char, struct boost::regex_traits<char, class boost::w32_regex_traits<char> > > & __ptr64 __cdecl boost::basic_regex<char, struct boost::regex_traits<char, class boost::w32_regex_traits<char> > >::do_assign(char const * __ptr64, char const * __ptr64, unsigned int) __ptr64

?do_assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@AEAAAEAV12@PEBD0I@Z

boost_regex.dll460public: bool __cdecl boost::re_detail::perl_matcher<class std::_String_const_iterator<char, struct std::char_traits<char>, class std::allocator<char> >, class std::allocator<struct boost::sub_match<class std::_String_const_iterator<char, struct std::char_traits<char>, class std::allocator<char> > > >, struct boost::regex_traits<char, class boost::w32_regex_traits<char> > >::match(void) __ptr64

?match@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@QEAA_NXZ

boost_regex.dll254private: void __cdecl boost::re_detail::perl_matcher<class std::_String_const_iterator<char, struct std::char_traits<char>, class std::allocator<char> >, class std::allocator<struct boost::sub_match<class std::_String_const_iterator<char, struct std::char_traits<char>, class std::allocator<char> > > >, struct boost::regex_traits<char, class boost::w32_regex_traits<char> > >::construct_init(class boost::basic_regex<char, struct boost::regex_traits<char, class boost::w32_regex_traits<char> > > const & __ptr64, enum boost::regex_constants::_match_flags) __ptr64

?construct_init@?$perl_matcher@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@U?$sub_match@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@boost@@@2@U?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@re_detail@boost@@AEAAXAEBV?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@3@W4_match_flags@regex_constants@3@@Z

WINMM.dll135timeEndPeriod
WINMM.dll134timeBeginPeriod
WINMM.dll138timeGetTime
ole32.dll108CoTaskMemFree
WININET.dll107InternetCloseHandle
WININET.dll116InternetCrackUrlW
WININET.dll154InternetOpenW
WININET.dll175InternetSetOptionW
WININET.dll114InternetConnectW
WININET.dll159InternetReadFile
WININET.dll86HttpEndRequestW
WININET.dll191InternetWriteFile
WININET.dll93HttpSendRequestExW
WININET.dll90HttpQueryInfoW
WININET.dll94HttpSendRequestW
WININET.dll158InternetQueryOptionW
WININET.dll88HttpOpenRequestW
ordentry_vafunction_name
10x73b0InitMdulCoreCall
20x73f0InitMdulCoreExit
30x7400InitMdulCoreFree
40x73a0InitMdulCoreInit
module_nameInitMdul.dll
flags0
timestamp2016-04-14 06:10:37
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x2bc2a8
Functions(4)0x2bc298
NameOrdinals(4)0x2bc2b8
offsetsizetypecomment
15c115HTM#
15d03359280BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK