api-ms-win-downlevel-user32-l1-1-0.dll - apisetstub

info
MZ
PE
resources
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	api-ms-win-downlevel-user32-l1-1-0.dll
size	4096 (0x1000)
md5	72723d3e4781badc62c3180c137e7b23

type	PE32+ executable (DLL) (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xc8

Rich Header

lib id	version	times used
184	30716	1
188	30716	2
183	30716	1
186	30716	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	3
TimeDateStamp	0x50f319b4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	10.10
SizeOfCode	0x600
SizeOfInitializedData	0x600
SizeOfUninitializedData	0
AddressOfEntryPoint	0
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.2
ImageVersion	6.2
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x4000
SizeOfHeaders	0x400
CheckSum	0xf92d
Subsystem	3
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x461	0x600	R-X CODE
.rsrc	0x2000	0x3f8	0x400	R-- IDATA
.reloc	0x3000	0x1a	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1060	0x401
IMPORT	0	0
RESOURCE	0x2000	0x3f8
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x3000	8
DEBUG	0x1000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	916	0

ord	entry_va	function_name
1	0x1196	CharLowerA
2	0x11b7	CharLowerBuffA
3	0x11dc	CharLowerBuffW
4	0x11fd	CharLowerW
5	0x1219	CharNextA
6	0x1236	CharNextExA
7	0x1253	CharNextW
8	0x126e	CharPrevA
9	0x128b	CharPrevExA
10	0x12a8	CharPrevW
11	0x12c4	CharUpperA
12	0x12e5	CharUpperBuffA
13	0x130a	CharUpperBuffW
14	0x132b	CharUpperW
15	0x134a	IsCharAlphaA
16	0x1372	IsCharAlphaNumericA
17	0x13a1	IsCharAlphaNumericW
18	0x13c9	IsCharAlphaW
19	0x13ea	IsCharLowerA
20	0x140b	IsCharLowerW
21	0x142c	IsCharUpperA
22	0x144d	IsCharUpperW

module_name	api-ms-win-downlevel-user32-l1-1-0.dll
flags	0
timestamp	2013-01-13 13:23:12
version	0.0
ordinal_base	1
nFunctions	22
nNames	22
Names(22)	0x10e0
Functions(22)	0x1088
NameOrdinals(22)	0x1138

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	ApiSet Stub DLL
FileVersion	6.2.9200.16492 (win8_gdr_oobssr.130113-0015)
InternalName	apisetstub
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	apisetstub
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.2.9200.16492

VS_FIXEDFILEINFO

FileVersion	6.2.9200.16492
ProductVersion	6.2.9200.16492
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

api-ms-win-downlevel-user32-l1-1-0.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

api-ms-win-downlevel-user32-l1-1-0.dll
-