zlibwapi.dll - zlib data compression and ZIP file I/O library

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	zlibwapi.dll
size	113664 (0x1bc00)
md5	18e507fdffa680d422555112db5b126e

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
147	30729	12
257	26706	2
261	26706	10
260	26706	7
259	26706	2
203	65501	3
1	0	63
264	27034	20
259	27034	2
256	27034	1
255	27034	1
258	27034	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5de4f7d9
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	14.16
SizeOfCode	0x12600
SizeOfInitializedData	0x9200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x12818
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	1.2
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x21000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x125b3	0x12600	R-X CODE
.rdata	0x14000	0x76a6	0x7800	R-- IDATA
.data	0x1c000	0xe0	0x200	RW- IDATA
.pdata	0x1d000	0x114c	0x1200	R-- IDATA
.rsrc	0x1f000	0x398	0x400	R-- IDATA
.reloc	0x20000	0x60	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1a1d0	0xcfc
IMPORT	0x1aecc	0xb4
RESOURCE	0x1f000	0x398
EXCEPTION	0x1d000	0x114c
SECURITY	0	0
BASERELOC	0x20000	0x60
DEBUG	0x185e0	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x18640	0x100
Bound_IAT	0	0
IAT	0x14000	0x238
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	824	0

module_name	hint	function_name
KERNEL32.dll	1108	ReadFile
KERNEL32.dll	1521	WriteFile
KERNEL32.dll	1291	SetFilePointer
KERNEL32.dll	194	CreateFileW
KERNEL32.dll	598	GetLastError
KERNEL32.dll	186	CreateFileA
KERNEL32.dll	127	CloseHandle
KERNEL32.dll	528	GetCurrentProcessId
KERNEL32.dll	532	GetCurrentThreadId
KERNEL32.dll	733	GetSystemTimeAsFileTime
KERNEL32.dll	279	DisableThreadLibraryCalls
KERNEL32.dll	852	InitializeSListHead
KERNEL32.dll	621	GetModuleHandleW
KERNEL32.dll	880	IsProcessorFeaturePresent
KERNEL32.dll	709	GetStartupInfoW
KERNEL32.dll	1362	SetUnhandledExceptionFilter
KERNEL32.dll	1426	UnhandledExceptionFilter
KERNEL32.dll	874	IsDebuggerPresent
KERNEL32.dll	1212	RtlVirtualUnwind
KERNEL32.dll	1205	RtlLookupFunctionEntry
KERNEL32.dll	1198	RtlCaptureContext
KERNEL32.dll	1072	QueryPerformanceCounter
VCRUNTIME140.dll	8	__C_specific_handler
VCRUNTIME140.dll	37	__std_type_info_destroy_list
VCRUNTIME140.dll	62	memset
VCRUNTIME140.dll	58	memchr
VCRUNTIME140.dll	60	memcpy
api-ms-win-crt-stdio-l1-1-0.dll	116	fclose
api-ms-win-crt-stdio-l1-1-0.dll	135	fseek
api-ms-win-crt-stdio-l1-1-0.dll	105	_wopen
api-ms-win-crt-stdio-l1-1-0.dll	73	_open
api-ms-win-crt-stdio-l1-1-0.dll	51	_ftelli64
api-ms-win-crt-stdio-l1-1-0.dll	125	fopen
api-ms-win-crt-stdio-l1-1-0.dll	118	ferror
api-ms-win-crt-stdio-l1-1-0.dll	137	ftell
api-ms-win-crt-stdio-l1-1-0.dll	107	_write
api-ms-win-crt-stdio-l1-1-0.dll	70	_lseeki64
api-ms-win-crt-stdio-l1-1-0.dll	131	fread
api-ms-win-crt-stdio-l1-1-0.dll	23	_close
api-ms-win-crt-stdio-l1-1-0.dll	82	_read
api-ms-win-crt-stdio-l1-1-0.dll	138	fwrite
api-ms-win-crt-stdio-l1-1-0.dll	47	_fseeki64
api-ms-win-crt-stdio-l1-1-0.dll	13	__stdio_common_vsprintf
api-ms-win-crt-convert-l1-1-0.dll	113	wcstombs
api-ms-win-crt-heap-l1-1-0.dll	24	free
api-ms-win-crt-heap-l1-1-0.dll	25	malloc
api-ms-win-crt-runtime-l1-1-0.dll	100	strerror
api-ms-win-crt-runtime-l1-1-0.dll	22	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	54	_initterm
api-ms-win-crt-runtime-l1-1-0.dll	55	_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll	63	_seh_filter_dll
api-ms-win-crt-runtime-l1-1-0.dll	24	_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll	51	_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll	52	_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	60	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	34	_execute_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	30	_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	29	_crt_at_quick_exit
api-ms-win-crt-runtime-l1-1-0.dll	33	_errno
api-ms-win-crt-runtime-l1-1-0.dll	103	terminate
api-ms-win-crt-utility-l1-1-0.dll	29	srand
api-ms-win-crt-utility-l1-1-0.dll	27	rand
api-ms-win-crt-time-l1-1-0.dll	48	_time64

ord	entry_va	function_name
1	0x12e0	adler32
2	0x14e0	compress
3	0x1540	crc32
4	0x29e0	deflate
5	0x33b0	deflateCopy
6	0x3300	deflateEnd
7	0x1ed0	deflateInit2_
8	0x1e90	deflateInit_
9	0x2660	deflateParams
10	0x24f0	deflateReset
11	0x21c0	deflateSetDictionary
12	0x4b70	gzclose
13	0x5010	gzdopen
14	0x53e0	gzerror
15	0x6980	gzflush
16	0x4ff0	gzopen
17	0x5c30	gzread
18	0x65f0	gzwrite
19	0x8240	inflate
20	0x99c0	inflateEnd
21	0x7f90	inflateInit2_
22	0x8090	inflateInit_
23	0x7ec0	inflateReset
24	0x9aa0	inflateSetDictionary
25	0x9c00	inflateSync
26	0xcf00	uncompress
27	0x11e40	zlibVersion
28	0x6950	gzprintf
29	0x66c0	gzputc
30	0x5d20	gzgetc
31	0x52b0	gzseek
32	0x50f0	gzrewind
33	0x5320	gztell
34	0x53c0	gzeof
35	0x69f0	gzsetparams
36	0x11e60	zError
37	0x9d20	inflateSyncPoint
38	0x1520	get_crc_table
39	0x13e0	compress2
40	0x6790	gzputs
41	0x5ed0	gzgets
42	0x9d60	inflateCopy
43	0x6b70	inflateBackInit_
44	0x6cc0	inflateBack
45	0x7bd0	inflateBackEnd
46	0x1500	compressBound
47	0x2820	deflateBound
48	0x5430	gzclearerr
49	0x5db0	gzungetc
50	0x11e50	zlibCompileFlags
51	0x25b0	deflatePrime
52	0x2560	deflatePending
61	0xdb90	unzOpen
62	0xdbb0	unzClose
63	0xdc20	unzGetGlobalInfo
64	0xe250	unzGetCurrentFileInfo
65	0xe350	unzGoToFirstFile
66	0xe3d0	unzGoToNextFile
67	0xec60	unzOpenCurrentFile
68	0xece0	unzReadCurrentFile
69	0xe9d0	unzOpenCurrentFile3
70	0xefb0	unztell
71	0xf000	unzeof
72	0xf120	unzCloseCurrentFile
73	0xf1e0	unzGetGlobalComment
74	0xd2d0	unzStringFileNameCompare
75	0xe490	unzLocateFile
76	0xf030	unzGetLocalExtrafield
77	0xdae0	unzOpen2
78	0xeca0	unzOpenCurrentFile2
79	0xec80	unzOpenCurrentFilePassword
80	0x104e0	zipOpen
81	0x110e0	zipOpenNewFileInZip
82	0x11250	zipWriteInFileInZip
83	0x11840	zipCloseFileInZip
84	0x11bb0	zipClose
86	0x10f20	zipOpenNewFileInZip2
87	0x113c0	zipCloseFileInZipRaw
88	0x10430	zipOpen2
89	0x10db0	zipOpenNewFileInZip3
100	0xe6c0	unzGetFilePos
101	0xe770	unzGoToFilePos
110	0xaec0	fill_win32_filefunc
111	0xaf20	fill_win32_filefunc64
112	0xaf80	fill_win32_filefunc64A
113	0xafe0	fill_win32_filefunc64W
120	0xdba0	unzOpen64
121	0xdb30	unzOpen2_64
122	0xdc00	unzGetGlobalInfo64
124	0xe200	unzGetCurrentFileInfo64
125	0xecc0	unzGetCurrentFileZStreamPos64
126	0xefd0	unztell64
127	0xe680	unzGetFilePos64
128	0xe6f0	unzGoToFilePos64
130	0x104f0	zipOpen64
131	0x10480	zipOpen2_64
132	0x11050	zipOpenNewFileInZip64
133	0x10fb0	zipOpenNewFileInZip2_64
134	0x10e60	zipOpenNewFileInZip3_64
135	0x10760	zipOpenNewFileInZip4_64
136	0x113d0	zipCloseFileInZipRaw64
140	0x13c0	adler32_combine
142	0x1df0	crc32_combine
144	0x2520	deflateSetHeader
145	0x27d0	deflateTune
146	0x50b0	gzbuffer
147	0x6050	gzclose_r
148	0x6aa0	gzclose_w
149	0x6010	gzdirect
150	0x53a0	gzoffset
156	0x9b50	inflateGetHeader
157	0x9f80	inflateMark
158	0x80a0	inflatePrime
159	0x7ef0	inflateReset2
160	0x9f10	inflateUndermine
161	0x5da0	gzgetc_
163	0x7e30	inflateResetKeep
164	0x2440	deflateResetKeep
165	0x50a0	gzopen_w
166	0x9a10	inflateGetDictionary
167	0x6800	gzvprintf
168	0x9ff0	inflateCodesUsed
169	0x9f40	inflateValidate
170	0xcda0	uncompress2
171	0x5ca0	gzfread
172	0x6640	gzfwrite
173	0x23c0	deflateGetDictionary
174	0x1000	adler32_z
175	0x1530	crc32_z

module_name	zlibwapi.dll
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	175
nNames	129
Names(129)	0x1a4b4
Functions(175)	0x1a1f8
NameOrdinals(129)	0x1a6b8

StringTable 040904E4

FileDescription	zlib data compression and ZIP file I/O library
FileVersion	1.2.11
InternalName	zlib
OriginalFilename	zlibwapi.dll
ProductName	ZLib.DLL
Comments	DLL support by Alessandro Iacopetti & Gilles Vollant
LegalCopyright	(C) 1995-2017 Jean-loup Gailly & Mark Adler

VS_FIXEDFILEINFO

FileVersion	1.2.11.0
ProductVersion	1.2.11.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x10004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	108080	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

zlibwapi.dll- zlib data compression and ZIP file I/O library

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

zlibwapi.dll
- zlib data compression and ZIP file I/O library