filenamelibsndfile-1.dll
size1679360 (0x19a000)
md5039519e063b15169d258732507c5f81a
typePE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xa
TimeDateStamp0
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x230e
Magic0x10b
LinkerVersion2.28
SizeOfCode0xee600
SizeOfInitializedData0x199c00
SizeOfUninitializedData0x3600
AddressOfEntryPoint0x1400
BaseOfCode0x1000
BaseOfData0xf0000
ImageBase0x70640000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1a3000
SizeOfHeaders0x400
CheckSum0x1a0a99
Subsystem3
DllCharacteristics0x140
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Creative Audio file

Sections

namevavsizeraw sizeflags
.text0x10000xee4440xee600R-X CODE IDATA
.data0xf00000xb600xc00RW- IDATA
.rdata0xf10000xa2d540xa2e00R-- IDATA
.bss0x1940000x34c00RW- UDATA
.edata0x1980000x5330x600R-- IDATA
.idata0x1990000xefc0x1000RW- IDATA
.CRT0x19a0000x2c0x200RW- IDATA
.tls0x19b0000x200x200RW- IDATA
.rsrc0x19c0000x3d00x400RW- IDATA
.reloc0x19d0000x5dc00x5e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1980000x533
IMPORT0x1990000xefc
RESOURCE0x19c0000x3d0
EXCEPTION00
SECURITY00
BASERELOC0x19d0000x5dc0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x19b0040x18
LOAD_CONFIG00
Bound_IAT00
IAT0x1992ac0x25c
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x707db0000x707db01c0x707d69ac0x707da01800
typenamesizecp
VERSION#18880
module_namehintordfunction_name
KERNEL32.dll84CloseHandle
KERNEL32.dll140CreateFileA
KERNEL32.dll147CreateFileW
KERNEL32.dll213DeleteCriticalSection
KERNEL32.dll241EnterCriticalSection
KERNEL32.dll347FlushFileBuffers
KERNEL32.dll353FormatMessageA
KERNEL32.dll358FreeLibrary
KERNEL32.dll440GetConsoleScreenBufferInfo
KERNEL32.dll454GetCurrentProcess
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll499GetFileSize
KERNEL32.dll502GetFileType
KERNEL32.dll517GetLastError
KERNEL32.dll534GetModuleFileNameW
KERNEL32.dll535GetModuleHandleA
KERNEL32.dll538GetModuleHandleW
KERNEL32.dll583GetProcAddress
KERNEL32.dll616GetStdHandle
KERNEL32.dll637GetSystemTimeAsFileTime
KERNEL32.dll665GetTickCount
KERNEL32.dll669GetTimeZoneInformation
KERNEL32.dll749InitializeCriticalSection
KERNEL32.dll777IsDBCSLeadByteEx
KERNEL32.dll808LeaveCriticalSection
KERNEL32.dll811LoadLibraryA
KERNEL32.dll824LocalFree
KERNEL32.dll855MultiByteToWideChar
KERNEL32.dll920QueryPerformanceCounter
KERNEL32.dll946ReadFile
KERNEL32.dll1053SetEndOfFile
KERNEL32.dll1071SetFilePointer
KERNEL32.dll1133SetUnhandledExceptionFilter
KERNEL32.dll1146Sleep
KERNEL32.dll1160TerminateProcess
KERNEL32.dll1167TlsGetValue
KERNEL32.dll1180UnhandledExceptionFilter
KERNEL32.dll1212VirtualProtect
KERNEL32.dll1215VirtualQuery
KERNEL32.dll1248WideCharToMultiByte
KERNEL32.dll1267WriteConsoleW
KERNEL32.dll1268WriteFile
msvcrt.dll48__dllonexit
msvcrt.dll49__doserrno
msvcrt.dll61__mb_cur_max
msvcrt.dll92__pioinfo
msvcrt.dll97__setusermatherr
msvcrt.dll125_amsg_exit
msvcrt.dll148_chmod
msvcrt.dll186_errno
msvcrt.dll197_exit
msvcrt.dll208_filelengthi64
msvcrt.dll209_fileno
msvcrt.dll233_fstat64
msvcrt.dll251_get_osfhandle
msvcrt.dll280_initterm
msvcrt.dll284_iob
msvcrt.dll381_lock
msvcrt.dll389_lseeki64
msvcrt.dll538_onexit
msvcrt.dll587_setmode
msvcrt.dll599_snwprintf
msvcrt.dll622_stat
msvcrt.dll623_stat64
msvcrt.dll642_strnicmp
msvcrt.dll1126_wstat64
msvcrt.dll1128_wutime64
msvcrt.dll1079time
msvcrt.dll979gmtime
msvcrt.dll941exit
msvcrt.dll944fclose
msvcrt.dll945feof
msvcrt.dll946ferror
msvcrt.dll947fflush
msvcrt.dll949fgetpos
msvcrt.dll955fopen
msvcrt.dll956fprintf
msvcrt.dll957fputc
msvcrt.dll960fputws
msvcrt.dll961fread
msvcrt.dll962free
msvcrt.dll964frexp
msvcrt.dll966fseek
msvcrt.dll967fsetpos
msvcrt.dll970fwprintf
msvcrt.dll971fwrite
msvcrt.dll973getc
msvcrt.dll975getenv
msvcrt.dll988islower
msvcrt.dll989isprint
msvcrt.dll991isspace
msvcrt.dll992isupper
msvcrt.dll1006isxdigit
msvcrt.dll1010localeconv
msvcrt.dll1015malloc
msvcrt.dll1019memchr
msvcrt.dll1020memcmp
msvcrt.dll1021memcpy
msvcrt.dll1022memmove
msvcrt.dll1023memset
msvcrt.dll1029printf
msvcrt.dll1032puts
msvcrt.dll1035qsort
msvcrt.dll1036raise
msvcrt.dll1038realloc
msvcrt.dll1039remove
msvcrt.dll1040rename
msvcrt.dll1044setlocale
msvcrt.dll1045setvbuf
msvcrt.dll1053strcat
msvcrt.dll1054strchr
msvcrt.dll1055strcmp
msvcrt.dll1057strcpy
msvcrt.dll1059strerror
msvcrt.dll1061strlen
msvcrt.dll1062strncat
msvcrt.dll1063strncmp
msvcrt.dll1064strncpy
msvcrt.dll1066strrchr
msvcrt.dll1068strstr
msvcrt.dll1071strtol
msvcrt.dll1072strtoul
msvcrt.dll677_unlink
msvcrt.dll679_unlock
msvcrt.dll685_wchmod
msvcrt.dll714_wfopen
msvcrt.dll733_wrename
msvcrt.dll734_write
msvcrt.dll757_wunlink
msvcrt.dll762abort
msvcrt.dll764acos
msvcrt.dll767atan
msvcrt.dll771atoi
msvcrt.dll1132tolower
msvcrt.dll1133toupper
msvcrt.dll1136ungetc
msvcrt.dll1138vfprintf
msvcrt.dll1148wcscpy
msvcrt.dll1151wcslen
msvcrt.dll1154wcsncpy
msvcrt.dll1156wcsrchr
msvcrt.dll931calloc
msvcrt.dll1210_utime
msvcrt.dll1226_strdup
msvcrt.dll1268_fileno
msvcrt.dll1292_access
USER32.dll596MessageBoxW
ordentry_vafunction_name
10x2950sf_command
20x80f0sf_open
30x1ca0sf_close
40x2600sf_seek
70x1e10sf_error
80x1e80sf_perror
90x1f10sf_error_str
100x1d40sf_error_number
110x1fb0sf_format_check
160x3bb0sf_read_raw
170x4210sf_readf_short
180x48c0sf_readf_int
190x4f70sf_readf_float
200x5620sf_readf_double
210x3ec0sf_read_short
220x4570sf_read_int
230x4c20sf_read_float
240x52d0sf_read_double
320x5980sf_write_raw
330x5e90sf_writef_short
340x63b0sf_writef_int
350x68d0sf_writef_float
360x6df0sf_writef_double
370x5c00sf_write_short
380x6120sf_write_int
390x6640sf_write_float
400x6b60sf_write_double
500x1db0sf_strerror
600x39e0sf_get_string
610x3a10sf_set_string
680x25f0sf_version_string
700x81c0sf_open_fd
710x5ab80sf_wchar_open
800x8290sf_open_virtual
900x1d20sf_write_sync
1000x8410sf_set_chunk
1010x8620sf_get_chunk_size
1020x86e0sf_get_chunk_data
1030x84d0sf_get_chunk_iterator
1040x8580sf_next_chunk_iterator
1100x3ab0sf_current_byterate
module_namelibsndfile-1.dll
flags0
timestamp2017-04-02 08:57:44
version0.0
ordinal_base1
nFunctions110
nNames41
Names(41)0x1981e0
Functions(110)0x198028
NameOrdinals(41)0x198284

StringTable 040904e4

FileDescriptionA library for reading and writing audio files.
FileVersion1.0.28.0
Full Version1.0.28
InternalNamelibsndfile
LegalCopyrightCopyright (C) 1999-2012, Licensed LGPL
OriginalFilenamelibsndfile-1.dll
ProductNamelibsndfile-1 DLL
ProductVersion1.0.28.0
LanguageLanguage Neutral

VS_FIXEDFILEINFO

FileVersion1.0.28.0
ProductVersion1.0.28.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
01679360DLL01/01/1970 00:00:00#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x1969ac