filenamelibconfig_d.dll
size52736 (0xce00)
md520a338e8094743ba8af311ad00e9dcbe
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
152201153
156402193
158402192
171402192
147307292
1065
1704021917
155402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x51c86792
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x8400
SizeOfInitializedData0x4600
SizeOfUninitializedData0
AddressOfEntryPoint0x7800
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0xe120
Subsystem2
DllCharacteristics0x100
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x83d00x8400R-X CODE
.rdata0xa0000x2f470x3000R-- IDATA
.data0xd0000x4b40x200RW- IDATA
.idata0xe0000x8810xa00RW- IDATA
.rsrc0xf0000x1b40x200R-- IDATA
.reloc0x100000x63c0x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xc5b00x997
IMPORT0xe0000x3c
RESOURCE0xf0000x1b4
EXCEPTION00
SECURITY00
BASERELOC0x100000x530
DEBUG0xa6200x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xbc200x40
Bound_IAT00
IAT0xe1c80x18c
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#23461252
module_namehintordfunction_name
MSVCR100D.dll1447atoi
MSVCR100D.dll1172_strtoui64
MSVCR100D.dll1460exit
MSVCR100D.dll391__iob_func
MSVCR100D.dll593_errno
MSVCR100D.dll1454clearerr
MSVCR100D.dll1482fread
MSVCR100D.dll1465ferror
MSVCR100D.dll1498getc
MSVCR100D.dll1616strtoul
MSVCR100D.dll505_atoi64
MSVCR100D.dll1446atof
MSVCR100D.dll1495fwrite
MSVCR100D.dll1615strtol
MSVCR100D.dll1474fopen
MSVCR100D.dll647_free_dbg
MSVCR100D.dll588_encoded_null
MSVCR100D.dll311_CrtSetCheckCount
MSVCR100D.dll745_initterm
MSVCR100D.dll746_initterm_e
MSVCR100D.dll498_amsg_exit
MSVCR100D.dll339__CppXcptFilter
MSVCR100D.dll557_crt_debugger_hook
MSVCR100D.dll373__clean_type_info_names_internal
MSVCR100D.dll1224_unlock
MSVCR100D.dll381__dllonexit
MSVCR100D.dll858_lock
MSVCR100D.dll1026_onexit
MSVCR100D.dll596_except_handler4_common
MSVCR100D.dll1463fclose
MSVCR100D.dll1097_snprintf
MSVCR100D.dll1479fputs
MSVCR100D.dll1556memset
MSVCR100D.dll1452calloc
MSVCR100D.dll1508isalpha
MSVCR100D.dll1510isdigit
MSVCR100D.dll1554memmove
MSVCR100D.dll1572realloc
MSVCR100D.dll1476fprintf
MSVCR100D.dll1478fputc
MSVCR100D.dll1592strchr
MSVCR100D.dll539_configthreadlocale
MSVCR100D.dll1579setlocale
MSVCR100D.dll1541malloc
MSVCR100D.dll876_malloc_dbg
MSVCR100D.dll1484free
MSVCR100D.dll1142_strdup
MSVCR100D.dll755_isatty
MSVCR100D.dll620_fileno
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll1202Sleep
KERNEL32.dll748InterlockedExchange
KERNEL32.dll202DecodePointer
KERNEL32.dll234EncodePointer
KERNEL32.dll633GetSystemTimeAsFileTime
ordentry_vafunction_name
10x11d1config_destroy
20x1087config_get_auto_convert
30x106econfig_init
40x119fconfig_lookup
50x105fconfig_lookup_bool
60x112cconfig_lookup_float
70x11aeconfig_lookup_from
80x11c7config_lookup_int
90x1050config_lookup_int64
100x10f5config_lookup_string
110x1069config_read
120x1118config_read_file
130x1078config_read_string
140x1109config_set_auto_convert
150x10afconfig_set_destructor
160x1037config_set_include_dir
170x1055config_setting_add
180x10ebconfig_setting_get_bool
190x11c2config_setting_get_bool_elem
200x10ffconfig_setting_get_elem
210x1131config_setting_get_float
220x110econfig_setting_get_float_elem
230x1096config_setting_get_format
240x1136config_setting_get_int
250x10f0config_setting_get_int64
260x105aconfig_setting_get_int64_elem
270x1091config_setting_get_int_elem
280x10c8config_setting_get_member
290x10b9config_setting_get_string
300x11a4config_setting_get_string_elem
310x11ccconfig_setting_index
320x101econfig_setting_length
330x11e0config_setting_lookup_bool
340x1023config_setting_lookup_float
350x1104config_setting_lookup_int
360x11dbconfig_setting_lookup_int64
370x10faconfig_setting_lookup_string
380x1014config_setting_remove
390x1145config_setting_remove_elem
400x10dcconfig_setting_set_bool
410x1122config_setting_set_bool_elem
420x111dconfig_setting_set_float
430x11bdconfig_setting_set_float_elem
440x10a0config_setting_set_format
450x10e1config_setting_set_hook
460x117cconfig_setting_set_int
470x10cdconfig_setting_set_int64
480x10b4config_setting_set_int64_elem
490x1046config_setting_set_int_elem
500x10beconfig_setting_set_string
510x100fconfig_setting_set_string_elem
520x1005config_write
530x108cconfig_write_file
module_namelibconfig_d.dll
flags0
timestamp2013-06-24 15:36:50
version0.0
ordinal_base1
nFunctions53
nNames53
Names(53)0xc6ac
Functions(53)0xc5d8
NameOrdinals(53)0xc780
offsetsizetypecomment
052736DLL06/24/2013 15:36:50#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK