RepAnalyser.dll

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	RepAnalyser.dll
size	114688 (0x1c000)
md5	01269943f2f85d99ba406990f1dea880

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
93	4035	3
1	0	88
125	50727	21
109	50727	129
110	50727	53
122	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4671484c
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x12000
SizeOfInitializedData	0x9000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x505a
BaseOfCode	0x1000
BaseOfData	0x13000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1f000
SizeOfHeaders	0x1000
CheckSum	0x1f1d2
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x115af	0x12000	R-X CODE
.rdata	0x13000	0x3bc0	0x4000	R-- IDATA
.data	0x17000	0x47a0	0x2000	RW- IDATA
.rsrc	0x1c000	0xb0	0x1000	R-- IDATA
.reloc	0x1d000	0x1f20	0x2000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x16b70	0x50
IMPORT	0x16504	0x28
RESOURCE	0x1c000	0xb0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1d000	0x137c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x15c40	0x40
Bound_IAT	0	0
IAT	0x13000	0x124
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#2	86	1252

module_name	hint	function_name
KERNEL32.dll	369	GetLastError
KERNEL32.dll	534	HeapFree
KERNEL32.dll	538	HeapReAlloc
KERNEL32.dll	528	HeapAlloc
KERNEL32.dll	727	RtlUnwind
KERNEL32.dll	326	GetCurrentThreadId
KERNEL32.dll	272	GetCommandLineA
KERNEL32.dll	489	GetVersionExA
KERNEL32.dll	419	GetProcessHeap
KERNEL32.dll	416	GetProcAddress
KERNEL32.dll	383	GetModuleHandleA
KERNEL32.dll	862	TerminateProcess
KERNEL32.dll	322	GetCurrentProcess
KERNEL32.dll	878	UnhandledExceptionFilter
KERNEL32.dll	842	SetUnhandledExceptionFilter
KERNEL32.dll	569	IsDebuggerPresent
KERNEL32.dll	532	HeapDestroy
KERNEL32.dll	530	HeapCreate
KERNEL32.dll	899	VirtualFree
KERNEL32.dll	129	DeleteCriticalSection
KERNEL32.dll	593	LeaveCriticalSection
KERNEL32.dll	152	EnterCriticalSection
KERNEL32.dll	897	VirtualAlloc
KERNEL32.dll	185	ExitProcess
KERNEL32.dll	932	WriteFile
KERNEL32.dll	441	GetStdHandle
KERNEL32.dll	381	GetModuleFileNameA
KERNEL32.dll	52	CloseHandle
KERNEL32.dll	629	MultiByteToWideChar
KERNEL32.dll	693	ReadFile
KERNEL32.dll	795	SetFilePointer
KERNEL32.dll	804	SetHandleCount
KERNEL32.dll	358	GetFileType
KERNEL32.dll	439	GetStartupInfoA
KERNEL32.dll	869	TlsGetValue
KERNEL32.dll	867	TlsAlloc
KERNEL32.dll	870	TlsSetValue
KERNEL32.dll	868	TlsFree
KERNEL32.dll	556	InterlockedIncrement
KERNEL32.dll	808	SetLastError
KERNEL32.dll	552	InterlockedDecrement
KERNEL32.dll	260	GetCPInfo
KERNEL32.dll	253	GetACP
KERNEL32.dll	403	GetOEMCP
KERNEL32.dll	854	Sleep
KERNEL32.dll	246	FreeEnvironmentStringsA
KERNEL32.dll	341	GetEnvironmentStrings
KERNEL32.dll	247	FreeEnvironmentStringsW
KERNEL32.dll	916	WideCharToMultiByte
KERNEL32.dll	343	GetEnvironmentStringsW
KERNEL32.dll	675	QueryPerformanceCounter
KERNEL32.dll	479	GetTickCount
KERNEL32.dll	323	GetCurrentProcessId
KERNEL32.dll	458	GetSystemTimeAsFileTime
KERNEL32.dll	290	GetConsoleCP
KERNEL32.dll	307	GetConsoleMode
KERNEL32.dll	547	InitializeCriticalSection
KERNEL32.dll	594	LoadLibraryA
KERNEL32.dll	83	CreateFileA
KERNEL32.dll	823	SetStdHandle
KERNEL32.dll	238	FlushFileBuffers
KERNEL32.dll	679	RaiseException
KERNEL32.dll	580	LCMapStringA
KERNEL32.dll	581	LCMapStringW
KERNEL32.dll	442	GetStringTypeA
KERNEL32.dll	445	GetStringTypeW
KERNEL32.dll	372	GetLocaleInfoA
KERNEL32.dll	921	WriteConsoleA
KERNEL32.dll	309	GetConsoleOutputCP
KERNEL32.dll	931	WriteConsoleW
KERNEL32.dll	540	HeapSize
KERNEL32.dll	784	SetEndOfFile

ord	entry_va	function_name
1	0x3120	GetReplayInfo

module_name	RepAnalyser.dll
flags	0
timestamp	2007-06-14 13:53:16
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x16b9c
Functions(1)	0x16b98
NameOrdinals(1)	0x16ba0

show previews

offset	size	type	comment
0	114688	DLL	06/14/2007 13:53:16	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK