filename | romloader_usb.dll | |
---|---|---|
size | 690747 (0xa8a3b) | |
md5 | dd42281ac84485050feb5a1ef173810b | |
type | PE32 executable (DLL) (console) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x80 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0x695b7000 | 0x695b701c | 0x695aebcc | 0x695b6018 | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.dll | 67 | CancelIo | |
KERNEL32.dll | 83 | CloseHandle | |
KERNEL32.dll | 132 | CreateEventA | |
KERNEL32.dll | 139 | CreateFileA | |
KERNEL32.dll | 158 | CreateMutexA | |
KERNEL32.dll | 173 | CreateSemaphoreA | |
KERNEL32.dll | 176 | CreateSemaphoreW | |
KERNEL32.dll | 212 | DeleteCriticalSection | |
KERNEL32.dll | 224 | DeviceIoControl | |
KERNEL32.dll | 234 | DuplicateHandle | |
KERNEL32.dll | 239 | EnterCriticalSection | |
KERNEL32.dll | 351 | FormatMessageA | |
KERNEL32.dll | 452 | GetCurrentProcess | |
KERNEL32.dll | 453 | GetCurrentProcessId | |
KERNEL32.dll | 457 | GetCurrentThreadId | |
KERNEL32.dll | 515 | GetLastError | |
KERNEL32.dll | 532 | GetModuleFileNameW | |
KERNEL32.dll | 533 | GetModuleHandleA | |
KERNEL32.dll | 568 | GetOverlappedResult | |
KERNEL32.dll | 581 | GetProcAddress | |
KERNEL32.dll | 582 | GetProcessAffinityMask | |
KERNEL32.dll | 633 | GetSystemTime | |
KERNEL32.dll | 635 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 663 | GetTickCount | |
KERNEL32.dll | 667 | GetTimeZoneInformation | |
KERNEL32.dll | 678 | GetVersionExA | |
KERNEL32.dll | 747 | InitializeCriticalSection | |
KERNEL32.dll | 806 | LeaveCriticalSection | |
KERNEL32.dll | 809 | LoadLibraryA | |
KERNEL32.dll | 915 | QueryPerformanceCounter | |
KERNEL32.dll | 916 | QueryPerformanceFrequency | |
KERNEL32.dll | 941 | ReadFile | |
KERNEL32.dll | 958 | ReleaseMutex | |
KERNEL32.dll | 962 | ReleaseSemaphore | |
KERNEL32.dll | 979 | ResetEvent | |
KERNEL32.dll | 1053 | SetEvent | |
KERNEL32.dll | 1078 | SetLastError | |
KERNEL32.dll | 1108 | SetThreadAffinityMask | |
KERNEL32.dll | 1127 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 1140 | Sleep | |
KERNEL32.dll | 1143 | SleepEx | |
KERNEL32.dll | 1151 | SystemTimeToFileTime | |
KERNEL32.dll | 1154 | TerminateProcess | |
KERNEL32.dll | 1155 | TerminateThread | |
KERNEL32.dll | 1159 | TlsAlloc | |
KERNEL32.dll | 1160 | TlsFree | |
KERNEL32.dll | 1161 | TlsGetValue | |
KERNEL32.dll | 1162 | TlsSetValue | |
KERNEL32.dll | 1174 | UnhandledExceptionFilter | |
KERNEL32.dll | 1192 | VerSetConditionMask | |
KERNEL32.dll | 1195 | VerifyVersionInfoA | |
KERNEL32.dll | 1206 | VirtualProtect | |
KERNEL32.dll | 1209 | VirtualQuery | |
KERNEL32.dll | 1216 | WaitForMultipleObjects | |
KERNEL32.dll | 1218 | WaitForSingleObject | |
KERNEL32.dll | 1262 | WriteFile | |
msvcrt.dll | 55 | __dllonexit | |
msvcrt.dll | 142 | _amsg_exit | |
msvcrt.dll | 155 | _beginthreadex | |
msvcrt.dll | 208 | _errno | |
msvcrt.dll | 219 | _exit | |
msvcrt.dll | 303 | _initterm | |
msvcrt.dll | 307 | _iob | |
msvcrt.dll | 404 | _lock | |
msvcrt.dll | 561 | _onexit | |
msvcrt.dll | 619 | _snprintf | |
msvcrt.dll | 629 | _snwprintf | |
msvcrt.dll | 668 | _vsnprintf | |
msvcrt.dll | 793 | calloc | |
msvcrt.dll | 819 | fprintf | |
msvcrt.dll | 821 | fputc | |
msvcrt.dll | 822 | fputs | |
msvcrt.dll | 826 | free | |
msvcrt.dll | 835 | fwprintf | |
msvcrt.dll | 837 | fwrite | |
msvcrt.dll | 842 | getenv | |
msvcrt.dll | 881 | malloc | |
msvcrt.dll | 888 | memcmp | |
msvcrt.dll | 889 | memcpy | |
msvcrt.dll | 890 | memmove | |
msvcrt.dll | 892 | memset | |
msvcrt.dll | 896 | printf | |
msvcrt.dll | 899 | putchar | |
msvcrt.dll | 900 | puts | |
msvcrt.dll | 905 | raise | |
msvcrt.dll | 907 | realloc | |
msvcrt.dll | 919 | sprintf | |
msvcrt.dll | 922 | sscanf | |
msvcrt.dll | 927 | strcmp | |
msvcrt.dll | 929 | strcpy | |
msvcrt.dll | 934 | strlen | |
msvcrt.dll | 937 | strncmp | |
msvcrt.dll | 938 | strncpy | |
msvcrt.dll | 945 | strtok | |
msvcrt.dll | 956 | _stricmp | |
msvcrt.dll | 1003 | _unlock | |
msvcrt.dll | 1084 | abort | |
msvcrt.dll | 1093 | atoi | |
msvcrt.dll | 1108 | toupper | |
msvcrt.dll | 1113 | vfprintf | |
msvcrt.dll | 1131 | wcscpy | |
msvcrt.dll | 1200 | _write | |
msvcrt.dll | 1227 | _strdup | |
USER32.dll | 443 | MessageBoxW | |
lua5.1.dll | 14 | luaL_error | |
lua5.1.dll | 20 | luaL_loadstring | |
lua5.1.dll | 30 | luaL_ref | |
lua5.1.dll | 33 | luaL_unref | |
lua5.1.dll | 34 | luaL_where | |
lua5.1.dll | 36 | lua_call | |
lua5.1.dll | 37 | lua_checkstack | |
lua5.1.dll | 39 | lua_concat | |
lua5.1.dll | 41 | lua_createtable | |
lua5.1.dll | 44 | lua_error | |
lua5.1.dll | 48 | lua_getfield | |
lua5.1.dll | 54 | lua_getmetatable | |
lua5.1.dll | 56 | lua_gettable | |
lua5.1.dll | 57 | lua_gettop | |
lua5.1.dll | 59 | lua_insert | |
lua5.1.dll | 60 | lua_iscfunction | |
lua5.1.dll | 61 | lua_isnumber | |
lua5.1.dll | 62 | lua_isstring | |
lua5.1.dll | 63 | lua_isuserdata | |
lua5.1.dll | 68 | lua_newuserdata | |
lua5.1.dll | 69 | lua_next | |
lua5.1.dll | 70 | lua_objlen | |
lua5.1.dll | 71 | lua_pcall | |
lua5.1.dll | 72 | lua_pushboolean | |
lua5.1.dll | 73 | lua_pushcclosure | |
lua5.1.dll | 74 | lua_pushfstring | |
lua5.1.dll | 76 | lua_pushlightuserdata | |
lua5.1.dll | 77 | lua_pushlstring | |
lua5.1.dll | 78 | lua_pushnil | |
lua5.1.dll | 79 | lua_pushnumber | |
lua5.1.dll | 80 | lua_pushstring | |
lua5.1.dll | 82 | lua_pushvalue | |
lua5.1.dll | 83 | lua_pushvfstring | |
lua5.1.dll | 85 | lua_rawget | |
lua5.1.dll | 86 | lua_rawgeti | |
lua5.1.dll | 87 | lua_rawset | |
lua5.1.dll | 88 | lua_rawseti | |
lua5.1.dll | 89 | lua_remove | |
lua5.1.dll | 90 | lua_replace | |
lua5.1.dll | 98 | lua_setmetatable | |
lua5.1.dll | 100 | lua_settop | |
lua5.1.dll | 103 | lua_toboolean | |
lua5.1.dll | 104 | lua_tocfunction | |
lua5.1.dll | 106 | lua_tolstring | |
lua5.1.dll | 107 | lua_tonumber | |
lua5.1.dll | 110 | lua_touserdata | |
lua5.1.dll | 111 | lua_type | |
lua5.1.dll | 112 | lua_typename |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x13825 | luaopen_romloader_usb |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x6ebcc