filenamePSRTA.dll
size118784 (0x1d000)
md53700d2b8080966b222e8059653b2fb80
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
185307162
149210221
203509292
205509292
2065092912
207509292
1034
147210227
0016
202610301
201610301
204610301

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x56b3aa71
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x12e00
SizeOfInitializedData0x9e00
SizeOfUninitializedData0
AddressOfEntryPoint0x12481
BaseOfCode0x1000
BaseOfData0x14000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x97000
SizeOfHeaders0x400
CheckSum0x277cd
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x12c9e0x12e00R-X CODE
.rdata0x140000x74110x7600R-- IDATA
.data0x1c0000x765f40xa00RW- IDATA
_RDATA0x930000x3500x400R-- IDATA
.rsrc0x940000x1b40x200R-- IDATA
.reloc0x950000x17da0x1800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1b3c00x51
IMPORT0x1b00c0x78
RESOURCE0x940000x1b4
EXCEPTION00
SECURITY00
BASERELOC0x950000x122c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1af400x40
Bound_IAT00
IAT0x140000x9c
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#23461252
module_namehintordfunction_name
libifcoremd.dll142d_int_val
libmmd.dll385__libm_sse2_exp
libmmd.dll393__libm_sse2_log
libmmd.dll401__libm_sse2_pow
libmmd.dll856pow
MSVCR110.dll909_malloc_crt
MSVCR110.dll766_initterm
MSVCR110.dll767_initterm_e
MSVCR110.dll1508free
MSVCR110.dll1254_unlock
MSVCR110.dll555_calloc_crt
MSVCR110.dll428__dllonexit
MSVCR110.dll1058_onexit
MSVCR110.dll400__clean_type_info_names_internal
MSVCR110.dll1580memset
MSVCR110.dll587_crt_debugger_hook
MSVCR110.dll426__crtUnhandledException
MSVCR110.dll425__crtTerminateProcess
MSVCR110.dll533_amsg_exit
MSVCR110.dll371__CppXcptFilter
MSVCR110.dll892_lock
MSVCR110.dll624_except_handler4_common
svml_dispmd.dll1646__svml_round2
svml_dispmd.dll1582__svml_pow2
svml_dispmd.dll1462__svml_log2
KERNEL32.dll316EncodePointer
KERNEL32.dll904IsProcessorFeaturePresent
KERNEL32.dll899IsDebuggerPresent
KERNEL32.dll302DisableThreadLibraryCalls
KERNEL32.dll756GetSystemTimeAsFileTime
KERNEL32.dll552GetCurrentThreadId
KERNEL32.dll1084QueryPerformanceCounter
KERNEL32.dll548GetCurrentProcessId
KERNEL32.dll279DecodePointer
ordentry_vafunction_name
10x1790PSRTA
20x11900PSTV
module_namePSRTA.dll
flags0
timestamp2016-02-04 19:45:53
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x1b3f0
Functions(2)0x1b3e8
NameOrdinals(2)0x1b3f8
offsetsizetypecomment
0118784DLL02/04/2016 19:45:53#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK