ld.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	ld.exe
size	1209344 (0x127400)
md5	0579f2898294d50dd7a17b26e240d190

type	PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x516bc745
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22f
Magic	0x20b
LinkerVersion	2.23
SizeOfCode	0xba800
SizeOfInitializedData	0x127000
SizeOfUninitializedData	0x5a00
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
ImageBase	0x100400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x131000
SizeOfHeaders	0x400
CheckSum	0x1361e4
Subsystem	3
DllCharacteristics	0x8000
SizeOfStackReserve	0xc00000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xba6c0	0xba800	R-X CODE IDATA
.data	0xbc000	0x51a8	0x5200	RW- IDATA
.rdata	0xc2000	0x5b3f8	0x5b400	R-- IDATA
.pdata	0x11e000	0x5838	0x5a00	R-- IDATA
.xdata	0x124000	0x57c8	0x5800	R-- IDATA
.bss	0x12a000	0x5980	0	RW- UDATA
.idata	0x130000	0xee4	0x1000	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x130000	0xee4
RESOURCE	0	0
EXCEPTION	0x11e000	0x5838
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x130404	0x3a0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
msys-intl-8.dll	26	libintl_bindtextdomain
msys-intl-8.dll	30	libintl_dgettext
msys-intl-8.dll	32	libintl_gettext
msys-intl-8.dll	47	libintl_setlocale
msys-intl-8.dll	48	libintl_textdomain
msys-2.0.dll	17	__errno
msys-2.0.dll	21	__getreent
msys-2.0.dll	28	__main
msys-2.0.dll	70	_dll_crt0
msys-2.0.dll	71	_exit
msys-2.0.dll	75	_impure_ptr
msys-2.0.dll	85	abort
msys-2.0.dll	89	access
msys-2.0.dll	124	asprintf
msys-2.0.dll	134	atoi
msys-2.0.dll	143	bsearch
msys-2.0.dll	152	calloc
msys-2.0.dll	181	chmod
msys-2.0.dll	197	close
msys-2.0.dll	228	ctime
msys-2.0.dll	236	cygwin_internal
msys-2.0.dll	249	dlclose
msys-2.0.dll	250	dlerror
msys-2.0.dll	253	dll_dllcrt0
msys-2.0.dll	255	dlopen
msys-2.0.dll	256	dlsym
msys-2.0.dll	280	environ
msys-2.0.dll	307	exit
msys-2.0.dll	325	fclose
msys-2.0.dll	327	fcntl
msys-2.0.dll	334	fdopen
msys-2.0.dll	355	fflush
msys-2.0.dll	357	fgetc
msys-2.0.dll	363	fileno
msys-2.0.dll	382	fopen
msys-2.0.dll	387	fprintf
msys-2.0.dll	389	fputc
msys-2.0.dll	390	fputs
msys-2.0.dll	393	fread
msys-2.0.dll	394	free
msys-2.0.dll	402	fseek
msys-2.0.dll	403	fseeko
msys-2.0.dll	406	fstat
msys-2.0.dll	411	ftell
msys-2.0.dll	412	ftello
msys-2.0.dll	433	fwrite
msys-2.0.dll	448	getc
msys-2.0.dll	452	getcwd
msys-2.0.dll	457	getenv
msys-2.0.dll	459	getgid
msys-2.0.dll	504	getrusage
msys-2.0.dll	514	getuid
msys-2.0.dll	577	isatty
msys-2.0.dll	664	lseek
msys-2.0.dll	666	lstat
msys-2.0.dll	670	malloc
msys-2.0.dll	686	memchr
msys-2.0.dll	687	memcmp
msys-2.0.dll	688	memcpy
msys-2.0.dll	690	memmove
msys-2.0.dll	693	memset
msys-2.0.dll	729	msys_detach_dll
msys-2.0.dll	747	open
msys-2.0.dll	762	perror
msys-2.0.dll	778	printf
msys-2.0.dll	881	putc
msys-2.0.dll	883	putchar
msys-2.0.dll	886	puts
msys-2.0.dll	893	qsort
msys-2.0.dll	906	realloc
msys-2.0.dll	908	realpath
msys-2.0.dll	941	rewind
msys-2.0.dll	953	sbrk
msys-2.0.dll	1063	snprintf
msys-2.0.dll	1074	sprintf
msys-2.0.dll	1080	sscanf
msys-2.0.dll	1081	stat
msys-2.0.dll	1084	stpcpy
msys-2.0.dll	1086	strcasecmp
msys-2.0.dll	1088	strcat
msys-2.0.dll	1089	strchr
msys-2.0.dll	1091	strcmp
msys-2.0.dll	1093	strcpy
msys-2.0.dll	1094	strcspn
msys-2.0.dll	1095	strdup
msys-2.0.dll	1096	strerror
msys-2.0.dll	1102	strlen
msys-2.0.dll	1104	strncasecmp
msys-2.0.dll	1105	strncat
msys-2.0.dll	1106	strncmp
msys-2.0.dll	1107	strncpy
msys-2.0.dll	1110	strpbrk
msys-2.0.dll	1112	strrchr
msys-2.0.dll	1115	strspn
msys-2.0.dll	1116	strstr
msys-2.0.dll	1120	strtok
msys-2.0.dll	1122	strtol
msys-2.0.dll	1126	strtoul
msys-2.0.dll	1127	strtoull
msys-2.0.dll	1165	time
msys-2.0.dll	1192	umask
msys-2.0.dll	1195	ungetc
msys-2.0.dll	1197	unlink
msys-2.0.dll	1217	vfprintf
msys-z.dll	11	compress
msys-z.dll	13	compressBound
msys-z.dll	63	inflate
msys-z.dll	68	inflateEnd
msys-z.dll	71	inflateInit_
msys-z.dll	74	inflateReset
KERNEL32.dll	548	GetModuleHandleA
KERNEL32.dll	598	GetProcAddress

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	1203760	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK