ShtrihTemplate.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	ShtrihTemplate.dll
size	734000 (0xb3330)
md5	532a7920cda0c2f180a3dfdb71e5dbc1

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0x11
TimeDateStamp	0x30000
PointerToSymbolTable	0x80c00
NumberOfSymbols	0xec6
SizeOfOptionalHeader	0xe0
Characteristics	0x2106
Magic	0x10b
LinkerVersion	2.24
SizeOfCode	0x8000
SizeOfInitializedData	0x11e00
SizeOfUninitializedData	0x400
AddressOfEntryPoint	0x1420
BaseOfCode	0x1000
BaseOfData	0x9000
ImageBase	0x64240000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x8b000
SizeOfHeaders	0x600
CheckSum	0xbaad5
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x8000	0x8000	R-X CODE IDATA
.data	0x9000	0x24	0x200	RW- IDATA
.rdata	0xa000	0x1130	0x1200	R-- IDATA
/4	0xc000	0x7148	0x7200	R-- IDATA
.bss	0x14000	0x3e4	0	RW- UDATA
.edata	0x15000	0xa6	0x200	R-- IDATA
.idata	0x16000	0x8fc	0xa00	RW- IDATA
.CRT	0x17000	0x2c	0x200	RW- IDATA
.tls	0x18000	0x20	0x200	RW- IDATA
.reloc	0x19000	0x608	0x800	R-- IDATA DISCARDABLE
/14	0x1a000	0xe50	0x1000	R-- IDATA DISCARDABLE
/29	0x1b000	0x61bcf	0x61c00	R-- IDATA DISCARDABLE
/41	0x7d000	0x3ac0	0x3c00	R-- IDATA DISCARDABLE
/55	0x81000	0x4799	0x4800	R-- IDATA DISCARDABLE
/67	0x86000	0x38	0x200	R-- IDATA DISCARDABLE
/80	0x87000	0x2732	0x2800	R-- IDATA DISCARDABLE
/91	0x8a000	0xd58	0xe00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x15000	0xa6
IMPORT	0x16000	0x8fc
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x19000	0x608
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x18004	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1617c	0x118
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x64258000	0x6425801c	0x64254030	0x64257018	0	0

module_name	hint	function_name
libgcc_s_dw2-1.dll	14	_Unwind_Resume
libgcc_s_dw2-1.dll	36	__deregister_frame_info
libgcc_s_dw2-1.dll	105	__register_frame_info
KERNEL32.dll	212	DeleteCriticalSection
KERNEL32.dll	239	EnterCriticalSection
KERNEL32.dll	356	FreeLibrary
KERNEL32.dll	452	GetCurrentProcess
KERNEL32.dll	453	GetCurrentProcessId
KERNEL32.dll	457	GetCurrentThreadId
KERNEL32.dll	515	GetLastError
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	635	GetSystemTimeAsFileTime
KERNEL32.dll	663	GetTickCount
KERNEL32.dll	747	InitializeCriticalSection
KERNEL32.dll	806	LeaveCriticalSection
KERNEL32.dll	809	LoadLibraryA
KERNEL32.dll	915	QueryPerformanceCounter
KERNEL32.dll	1127	SetUnhandledExceptionFilter
KERNEL32.dll	1140	Sleep
KERNEL32.dll	1154	TerminateProcess
KERNEL32.dll	1161	TlsGetValue
KERNEL32.dll	1174	UnhandledExceptionFilter
KERNEL32.dll	1206	VirtualProtect
KERNEL32.dll	1209	VirtualQuery
msvcrt.dll	55	__dllonexit
msvcrt.dll	144	_amsg_exit
msvcrt.dll	349	_initterm
msvcrt.dll	353	_iob
msvcrt.dll	458	_lock
msvcrt.dll	625	_onexit
msvcrt.dll	838	_unlock
msvcrt.dll	1013	_wsetlocale
msvcrt.dll	1054	abort
msvcrt.dll	1067	calloc
msvcrt.dll	1101	free
msvcrt.dll	1112	fwrite
msvcrt.dll	1159	malloc
msvcrt.dll	1162	mbstowcs
msvcrt.dll	1167	memcpy
msvcrt.dll	1170	memset
msvcrt.dll	1215	strlen
msvcrt.dll	1218	strncmp
msvcrt.dll	1251	vfprintf
msvcrt.dll	1274	wcslen
msvcrt.dll	1290	wcstombs
libstdc++-6.dll	448	_ZNKSbIwSt11char_traitsIwESaIwEE5c_strEv
libstdc++-6.dll	463	_ZNKSbIwSt11char_traitsIwESaIwEE7compareEPKw
libstdc++-6.dll	1024	_ZNKSt9type_infoeqERKS_
libstdc++-6.dll	1131	_ZNSbIwSt11char_traitsIwESaIwEEC1ERKS2_
libstdc++-6.dll	1153	_ZNSbIwSt11char_traitsIwESaIwEED1Ev
libstdc++-6.dll	3154	_ZSt17__throw_bad_allocv
libstdc++-6.dll	3172	_ZSt20__throw_length_errorPKc
libstdc++-6.dll	3173	_ZSt20__throw_out_of_rangePKc
libstdc++-6.dll	3806	_ZTVN10__cxxabiv117__class_type_infoE
libstdc++-6.dll	3811	_ZTVN10__cxxabiv120__si_class_type_infoE
libstdc++-6.dll	3812	_ZTVN10__cxxabiv121__vmi_class_type_infoE
libstdc++-6.dll	4004	_ZdaPv
libstdc++-6.dll	4006	_ZdlPv
libstdc++-6.dll	4008	_Znaj
libstdc++-6.dll	4010	_Znwj
libstdc++-6.dll	4018	__cxa_begin_catch
libstdc++-6.dll	4024	__cxa_end_catch
libstdc++-6.dll	4033	__cxa_pure_virtual
libstdc++-6.dll	4034	__cxa_rethrow
libstdc++-6.dll	4052	__gxx_personality_v0

ord	entry_va	function_name
1	0x16b3	DestroyObject
2	0x16f7	GetClassNames
3	0x165f	GetClassObject
4	0x1729	SetPlatformCapabilities

module_name	ShtrihTemplate.dll
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	4
nNames	4
Names(4)	0x15038
Functions(4)	0x15028
NameOrdinals(4)	0x15048

show previews

offset	size	type	comment
0	527360	DLL	01/03/1970 06:36:48	#
15c1	15	HTM		#
80c00	206640	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x14030