XtDll.dll - XtOS Userspace Library

info
MZ
PE
resources
exports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	XtDll.dll
size	6144 (0x1800)
md5	6c6a13f96bb6dac872d0fd1dfe657e2f

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xc0

Rich Header

lib id	version	times used
260	24215	2
256	24215	1
255	24210	1
258	24215	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5c64ef0f
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x800
SizeOfInitializedData	0xc00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x30020000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x6000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x540
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x682	0x800	R-X CODE
.rdata	0x2000	0x318	0x400	R-- IDATA
.data	0x3000	4	0x200	RW- IDATA
.rsrc	0x4000	0x348	0x400	R-- IDATA
.reloc	0x5000	0x18	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x20b0	0x160
IMPORT	0	0
RESOURCE	0x4000	0x348
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x5000	0x18
DEBUG	0x2050	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	740	0

ord	entry_va	function_name
1	0x1020	isalnum
2	0x1070	isalpha
3	0x10c0	isdigit
4	0x1100	islower
5	0x1140	isupper
6	0x1180	itoa
7	0x1210	itoan
8	0x12c0	memcpy
9	0x1310	memset
10	0x1350	memset16
11	0x13a0	memset32
12	0x13f0	memset64
13	0x1440	strcmp
14	0x14c0	strlen
15	0x1500	strncmp
16	0x1600	strupr
17	0x1650	toupper

module_name	XtDll.dll
flags	0
timestamp	2019-02-14 04:31:11
version	0.0
ordinal_base	1
nFunctions	17
nNames	17
Names(17)	0x211c
Functions(17)	0x20d8
NameOrdinals(17)	0x2160

StringTable 040904b0

CompanyName	Dorper
FileDescription	XtOS Userspace Library
FileVersion	0.0.0.1
InternalName	XtDll.dll
LegalCopyright	Copyright (C) 2019 Carver Harrison
OriginalFilename	XtDll.dll
ProductName	XtOS Userspace
ProductVersion	0.0.0.1

VS_FIXEDFILEINFO

FileVersion	0.0.0.1
ProductVersion	0.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	6144	DLL	02/14/2019 04:31:11	#
15c1	15	HTM		#

Scanning the drive for archives:
1 file, 6144 bytes (6 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

XtDll.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

XtDll.dll
-