filename | libstarusr.dll | |
---|---|---|
size | 22016 (0x5600) | |
md5 | 87f5b7d6eda6eddfbfa035651847530c | |
type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xd8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Signature | PE |
Machine | 0x14c |
NumberOfSections | 4 |
TimeDateStamp | 0x51a368fc |
PointerToSymbolTable | 0 |
NumberOfSymbols | 0 |
SizeOfOptionalHeader | 0xe0 |
Characteristics | 0x2102 |
Magic | 0x10b |
LinkerVersion | 9.0 |
SizeOfCode | 0x3a00 |
SizeOfInitializedData | 0x1800 |
SizeOfUninitializedData | 0 |
AddressOfEntryPoint | 0 |
BaseOfCode | 0x1000 |
BaseOfData | 0x5000 |
ImageBase | 0x10000000 |
SectionAlignment | 0x1000 |
FileAlignment | 0x200 |
OperatingSystemVersion | 5.0 |
ImageVersion | 0.0 |
SubsystemVersion | 5.0 |
Reserved1 | 0 |
SizeOfImage | 0x8000 |
SizeOfHeaders | 0x400 |
CheckSum | 0 |
Subsystem | 2 |
DllCharacteristics | 0x400 |
SizeOfStackReserve | 0x100000 |
SizeOfStackCommit | 0x1000 |
SizeOfHeapReserve | 0x100000 |
SizeOfHeapCommit | 0x1000 |
LoaderFlags | 0 |
NumberOfRvaAndSizes | 0x10 |
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x38e0 | 0x3a00 | R-X CODE | |
.rdata | 0x5000 | 0xebe | 0x1000 | R-- IDATA | |
.data | 0x6000 | 0x3e0 | 0x400 | RW- IDATA | |
.reloc | 0x7000 | 0x32c | 0x400 | R-- IDATA DISCARDABLE |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0x55d0 | 0x8ee | |
IMPORT | 0x5330 | 0x50 | |
RESOURCE | 0 | 0 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0x7000 | 0x314 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0x5000 | 0x68 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
libstar.dll | 3381 | CONSTANTS_mp_ISIDE_ALL | |
libstar.dll | 3391 | CONSTANTS_mp_NSD_ALL | |
libstar.dll | 9316 | SETCONSTROBJS_mp_FS | |
libstar.dll | 5352 | FSETBOUNMDINTF | |
libstar.dll | 3334 | CONNECTIVITY_mp_LFC | |
libstar.dll | 4452 | DOMAIN_PROP_mp_WALL | |
libstar.dll | 7153 | NEWHPC_DATA_mp_PARRUN | |
libstar.dll | 5859 | GSUM2 | |
libstar.dll | 6111 | IGSUM | |
libstar.dll | 10598 | TIMEPARALLEL_mp_GLOBALMASTER | |
libstar.dll | 4435 | DOMAIN_PROP_mp_REGI | |
libstar.dll | 4437 | DOMAIN_PROP_mp_REGI_NO | |
libstar.dll | 10354 | STQUIT | |
libstar.dll | 11164 | WARNING | |
libstar.dll | 10017 | STARMOD_E2P_mp_T | |
libstar.dll | 6126 | INFODATA_mp_CHARINFO | |
libstartempl.dll | 319 | USR001 | |
libstartempl.dll | 321 | USRD02 | |
libifcoremd.dll | 631 | for_write_seq_fmt | |
libifcoremd.dll | 632 | for_write_seq_fmt_xmit | |
libifcoremd.dll | 163 | for_allocate | |
libifcoremd.dll | 297 | for_deallocate | |
libifcoremd.dll | 633 | for_write_seq_lis |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x1000 | BCDEFF | |
2 | 0x1074 | BCDEFI | |
3 | 0x10e8 | BCDEFO | |
4 | 0x115c | BCDEFP | |
5 | 0x11d0 | BCDEFR | |
6 | 0x1244 | BCDEFS | |
7 | 0x12b8 | BCDEFT | |
8 | 0x132c | BCDEFW | |
9 | 0x13a0 | BCDEUC | |
10 | 0x1410 | BCDNRP | |
11 | 0x1484 | BCDNRS | |
12 | 0x14f8 | CAVNUC | |
13 | 0x156c | CAVPRO | |
14 | 0x15e0 | COALC | |
15 | 0x1654 | COALV | |
16 | 0x16c4 | COLLDT | |
17 | 0x1738 | COLLND | |
18 | 0x1ad4 | COMCP | |
19 | 0x17ac | COMDEN | |
20 | 0x1820 | CONDUC | |
21 | 0x1894 | CONDUL | |
22 | 0x1904 | CONVET | |
23 | 0x1978 | CONVTE | |
24 | 0x19ec | COTEET | |
25 | 0x1a64 | CPENUL | |
26 | 0x1b3c | CREEP | |
27 | 0x1bb0 | DAIRCS | |
28 | 0x1c18 | DCIUSER | |
29 | 0x1c8c | DENSIT | |
30 | 0x1d00 | DENUSR | |
31 | 0x1d80 | DIFFUS | |
32 | 0x1df4 | DIFUUL | |
33 | 0x1e64 | DRAVRG | |
34 | 0x1ed8 | DRHEAT | |
35 | 0x1f4c | DRMAST | |
36 | 0x1fc0 | DROBRK | |
37 | 0x2034 | DROICO | |
38 | 0x2038 | DROMOM | |
39 | 0x20b0 | DROPRO | |
40 | 0x2128 | DROWBC | |
41 | 0x219c | DTSTEP | |
42 | 0x2210 | ELASTICPROP | |
43 | 0x2284 | FDBRK | |
44 | 0x22f4 | FLUINJ | |
45 | 0x2368 | FSEVAP | |
46 | 0x23dc | FSTEN | |
47 | 0x244c | FULPRO | |
48 | 0x24c0 | GSCON1 | |
49 | 0x2534 | GSCON2 | |
50 | 0x25a8 | GSDIFF | |
51 | 0x261c | GSSOUR | |
52 | 0x2690 | GSTRAN | |
53 | 0x2704 | HARDENING | |
54 | 0x2778 | INITFI | |
55 | 0x27ec | LATHET | |
56 | 0x2860 | LQFBCD | |
57 | 0x28d4 | LQFINI | |
58 | 0x2948 | LQFPRO | |
59 | 0x29b8 | LQFRAD | |
60 | 0x2a28 | LQFSOR | |
61 | 0x2a9c | LQMAST | |
62 | 0x2b04 | LSCALE | |
63 | 0x2b78 | MODSWF | |
64 | 0x2bec | MOMRTS | |
65 | 0x2bf0 | NEWXYZ | |
66 | 0x2bf4 | NOXUSR | |
67 | 0x2c68 | PARUSR | |
68 | 0x2cdc | PORCON | |
69 | 0x2d50 | PORDIF | |
70 | 0x2dc4 | PORHT1 | |
71 | 0x2e40 | PORHT2 | |
72 | 0x2ed8 | PORKEP | |
73 | 0x2f4c | POROS1 | |
74 | 0x2fc0 | POROS2 | |
75 | 0x3034 | PORWAL | |
76 | 0x30b0 | POSDAT | |
77 | 0x36b0 | RADDRP | |
78 | 0x36b4 | RADMAT | |
79 | 0x36b8 | RADPRO | |
80 | 0x372c | RADREG | |
81 | 0x3730 | RADWAL | |
82 | 0x37a4 | RATUSR | |
83 | 0x3818 | REACFN | |
84 | 0x388c | REACUL | |
85 | 0x3900 | ROUGHW | |
86 | 0x3974 | SATTEM | |
87 | 0x39e8 | SCADIF | |
88 | 0x3a58 | SCALFN | |
89 | 0x3acc | SORENT | |
90 | 0x3b40 | SORKEP | |
91 | 0x3bb4 | SORMOM | |
92 | 0x3c2c | SORSCA | |
93 | 0x3ca0 | SORUSR | |
94 | 0x3d20 | SOSGAM | |
95 | 0x45f2 | SOURG | |
96 | 0x3d94 | SPECHT | |
97 | 0x3e08 | SRCEGR | |
98 | 0x3e0c | THDIFF | |
99 | 0x3e80 | THERMALEXPAND | |
100 | 0x3ef4 | TWLUSR | |
101 | 0x3f68 | UASI | |
102 | 0x3f6c | UBINIT | |
103 | 0x3fe0 | UCONCK | |
104 | 0x3fe4 | UEDRAG | |
105 | 0x4058 | UEHEAT | |
106 | 0x40cc | UETURB | |
107 | 0x4140 | UEVAR | |
108 | 0x4144 | UEVENTS | |
109 | 0x41a4 | UEWBHT | |
110 | 0x41a8 | UEWSTR | |
111 | 0x4200 | UFLSPD | |
112 | 0x4204 | UIGNI | |
113 | 0x4208 | UOMEGA | |
114 | 0x427c | UPARCP | |
115 | 0x42fc | UPARM | |
116 | 0x4300 | UPLGQT | |
117 | 0x4304 | UPOSTM | |
118 | 0x44f8 | USBRK | |
119 | 0x44fc | USCOAL | |
120 | 0x4500 | USFREA | |
121 | 0x4574 | USOLAR | |
122 | 0x45e8 | USPBRK | |
123 | 0x45f4 | USRPST | |
124 | 0x45ec | USRSEM | |
125 | 0x45f0 | UTBVLG | |
126 | 0x45f8 | VARBLN | |
127 | 0x466c | VARPRT | |
128 | 0x46e0 | VISCUL | |
129 | 0x4750 | VISMOL | |
130 | 0x47c4 | VISTUR | |
131 | 0x4838 | VRPRND |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK