DefaultPack.EXE 3247468 59904.dll - zlib1.dll - zlib data compression library

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	DefaultPack.EXE 3247468 59904.dll
size	59904 (0xea00)
md5	80e41408f6d641dc1c0f5353a0cc8125

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
19	8034	2
1	0	22
4	8047	3
10	8047	5
14	7299	1
99	3077	13
15	3077	1
18	8444	1
92	3077	1
94	3052	1
90	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x42de1dda
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x9400
SizeOfInitializedData	0x5200
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa146
BaseOfCode	0x1000
BaseOfData	0xb000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x13000
SizeOfHeaders	0x400
CheckSum	0xf587
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x923f	0x9400	R-X CODE
.rdata	0xb000	0x464d	0x4800	R-- IDATA
.data	0x10000	0x74	0x200	RW- IDATA
.rsrc	0x11000	0x398	0x400	R-- IDATA
.reloc	0x12000	0x368	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xf1f0	0x45d
IMPORT	0xf064	0x3c
RESOURCE	0x11000	0x398
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x12000	0x2b0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xb000	0x58
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	824	0

module_name	hint	function_name
MSVCRT.dll	606	free
MSVCRT.dll	657	malloc
MSVCRT.dll	700	strerror
MSVCRT.dll	591	fflush
MSVCRT.dll	200	_errno
MSVCRT.dll	599	fopen
MSVCRT.dll	605	fread
MSVCRT.dll	600	fprintf
MSVCRT.dll	481	_vsnprintf
MSVCRT.dll	690	sprintf
MSVCRT.dll	612	ftell
MSVCRT.dll	610	fseek
MSVCRT.dll	588	fclose
MSVCRT.dll	578	clearerr
MSVCRT.dll	215	_fdopen
MSVCRT.dll	271	_initterm
MSVCRT.dll	157	_adjust_fdiv
MSVCRT.dll	614	fwrite
MSVCRT.dll	601	fputc
KERNEL32.dll	93	DisableThreadLibraryCalls

ord	entry_va	function_name
1	0x1000	adler32
2	0x1310	compress
3	0x1250	compress2
4	0x1330	compressBound
5	0x1360	crc32
6	0x1c70	deflate
7	0x1b80	deflateBound
8	0x2580	deflateCopy
9	0x24b0	deflateEnd
10	0x1690	deflateInit2_
11	0x1660	deflateInit_
12	0x1aa0	deflateParams
13	0x1a60	deflatePrime
14	0x19e0	deflateReset
15	0x18d0	deflateSetDictionary
16	0x1350	get_crc_table
17	0x4510	gzclearerr
18	0x43a0	gzclose
19	0x3730	gzdopen
20	0x4300	gzeof
21	0x43f0	gzerror
22	0x40a0	gzflush
23	0x3d10	gzgetc
24	0x3d90	gzgets
25	0x3710	gzopen
26	0x3ee0	gzprintf
27	0x3f60	gzputc
28	0x3f90	gzputs
29	0x3a60	gzread
30	0x4280	gzrewind
31	0x40e0	gzseek
32	0x3770	gzsetparams
33	0x42e0	gztell
34	0x3d40	gzungetc
35	0x3df0	gzwrite
36	0x57a0	inflate
37	0x4620	inflateBack
38	0x54d0	inflateBackEnd
39	0x4540	inflateBackInit_
40	0x7040	inflateCopy
41	0x6d80	inflateEnd
42	0x5570	inflateInit2_
43	0x5640	inflateInit_
44	0x5510	inflateReset
45	0x6dd0	inflateSetDictionary
46	0x6f10	inflateSync
47	0x7010	inflateSyncPoint
48	0x9080	uncompress
49	0x91a0	zError
50	0x9190	zlibCompileFlags
51	0x9180	zlibVersion

module_name	zlib1.dll
flags	0
timestamp	2005-07-20 09:48:09
version	0.0
ordinal_base	1
nFunctions	51
nNames	51
Names(51)	0xf2e4
Functions(51)	0xf218
NameOrdinals(51)	0xf3b0

StringTable 040904E4

FileDescription	zlib data compression library
FileVersion	1.2.3
InternalName	zlib1.dll
LegalCopyright	(C) 1995-2004 Jean-loup Gailly & Mark Adler
OriginalFilename	zlib1.dll
ProductName	zlib
ProductVersion	1.2.3
Comments	DLL support by Alessandro Iacopetti & Gilles Vollant

VS_FIXEDFILEINFO

FileVersion	1.2.3.0
ProductVersion	1.2.3.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x10004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	59904	DLL	07/20/2005 09:48:10	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

DefaultPack.EXE 3247468 59904.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

DefaultPack.EXE 3247468 59904.dll
-