zlib1.dll - zlib data compression library

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	zlib1.dll
size	81920 (0x14000)
md5	4c44a1c5f776bcd22333b84d5bea39bf

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
93	4035	2
12	7291	4
14	7299	2
10	8047	5
4	8047	3
1	0	19
10	9782	15
6	1735	1
4	8447	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5335763a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xb000
SizeOfInitializedData	0x8000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xb1fc
BaseOfCode	0x1000
BaseOfData	0xc000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x14000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xa2c0	0xb000	R-X CODE
.rdata	0xc000	0x4627	0x5000	R-- IDATA
.data	0x11000	0x3d8	0x1000	RW- IDATA
.rsrc	0x12000	0x390	0x1000	R-- IDATA
.reloc	0x13000	0x358	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xff60	0x6c7
IMPORT	0xfdf0	0x3c
RESOURCE	0x12000	0x390
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x13000	0x2f0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xc000	0x4c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	812	0

module_name	hint	function_name
MSVCRT.dll	753	wcstombs
MSVCRT.dll	606	free
MSVCRT.dll	657	malloc
MSVCRT.dll	700	strerror
MSVCRT.dll	430	_snprintf
MSVCRT.dll	528	_wopen
MSVCRT.dll	200	_errno
MSVCRT.dll	481	_vsnprintf
MSVCRT.dll	325	_lseeki64
MSVCRT.dll	157	_adjust_fdiv
MSVCRT.dll	661	memchr
MSVCRT.dll	271	_initterm
MSVCRT.dll	391	_open
MSVCRT.dll	408	_read
MSVCRT.dll	179	_close
MSVCRT.dll	535	_write
KERNEL32.dll	139	DisableThreadLibraryCalls

ord	entry_va	function_name
1	0x1000	adler32
2	0x1270	adler32_combine
3	0x1340	adler32_combine64
4	0x1410	compress
5	0x1360	compress2
6	0x1430	compressBound
7	0x1460	crc32
8	0x1770	crc32_combine
9	0x1910	crc32_combine64
10	0x2120	deflate
11	0x2040	deflateBound
12	0x2ba0	deflateCopy
13	0x2ae0	deflateEnd
14	0x1960	deflateInit2_
15	0x1930	deflateInit_
16	0x1f00	deflateParams
17	0x1e30	deflatePending
18	0x1e70	deflatePrime
19	0x1dd0	deflateReset
20	0x1d40	deflateResetKeep
21	0x1ba0	deflateSetDictionary
22	0x1e00	deflateSetHeader
23	0x2000	deflateTune
24	0x1450	get_crc_table
25	0x4420	gzbuffer
26	0x4860	gzclearerr
27	0x3ff0	gzclose
28	0x5240	gzclose_r
29	0x5a30	gzclose_w
30	0x5210	gzdirect
31	0x43b0	gzdopen
32	0x47e0	gzeof
33	0x4810	gzerror
34	0x5900	gzflush
35	0x4f50	gzgetc
36	0x4fc0	gzgetc_
37	0x50d0	gzgets
38	0x47b0	gzoffset
39	0x4750	gzoffset64
40	0x4020	gzopen
41	0x4390	gzopen64
42	0x4400	gzopen_w
43	0x58e0	gzprintf
44	0x56f0	gzputc
45	0x57c0	gzputs
46	0x4960	gzread
47	0x4460	gzrewind
48	0x4690	gzseek
49	0x44b0	gzseek64
50	0x5970	gzsetparams
51	0x4720	gztell
52	0x46c0	gztell64
53	0x4fd0	gzungetc
54	0x5800	gzvprintf
55	0x52d0	gzwrite
56	0x7220	inflate
57	0x5bc0	inflateBack
58	0x6ad0	inflateBackEnd
59	0x5af0	inflateBackInit_
60	0x8e80	inflateCopy
61	0x8b70	inflateEnd
62	0x8bc0	inflateGetDictionary
63	0x8cc0	inflateGetHeader
64	0x70e0	inflateInit2_
65	0x71a0	inflateInit_
66	0x8ff0	inflateMark
67	0x71c0	inflatePrime
68	0x7030	inflateReset
69	0x7060	inflateReset2
70	0x6fb0	inflateResetKeep
71	0x8c30	inflateSetDictionary
72	0x8cf0	inflateSync
73	0x8e50	inflateSyncPoint
74	0x8fc0	inflateUndermine
75	0xaf50	uncompress
76	0xb020	zError
77	0xb010	zlibCompileFlags
78	0xb000	zlibVersion

module_name	zlib1.dll
flags	0
timestamp	2014-03-28 13:16:42
version	0.0
ordinal_base	1
nFunctions	78
nNames	78
Names(78)	0x100c0
Functions(78)	0xff88
NameOrdinals(78)	0x101f8

StringTable 040904E4

FileDescription	zlib data compression library
FileVersion	1.2.8
InternalName	zlib1.dll
LegalCopyright	(C) 1995-2013 Jean-loup Gailly & Mark Adler
OriginalFilename	zlib1.dll
ProductName	zlib
ProductVersion	1.2.8
Comments	For more information visit http://www.zlib.net/

VS_FIXEDFILEINFO

FileVersion	1.2.8.0
ProductVersion	1.2.8.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	81920	DLL	03/28/2014 13:16:42	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

zlib1.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

zlib1.dll
-