filenamelua51.dll
size349184 (0x55400)
md5884f59aa60c3f5c6912c1d53c2e64c87
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
203655012
10100
221210053
2232100510
2242100513
225210052
001
2244062961
220406291
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x577ca16f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x4d600
SizeOfInitializedData0x7e00
SizeOfUninitializedData0
AddressOfEntryPoint0x4def2
BaseOfCode0x1000
BaseOfData0x4f000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x58000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x4d4700x4d600R-X CODE
.rdata0x4f0000x5e580x6000R-- IDATA
.data0x550000x5080x200RW- IDATA
.reloc0x560000x16b00x1800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x53a900xcac
IMPORT0x5473c0x3c
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC0x560000x16b0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x539b00x40
Bound_IAT00
IAT0x4f0000x198
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
MSVCR120.dll1723ldexp
MSVCR120.dll1662fputs
MSVCR120.dll329_CIcosh
MSVCR120.dll336_CIsinh
MSVCR120.dll339_CItanh
MSVCR120.dll1858strstr
MSVCR120.dll1792putchar
MSVCR120.dll1867strtoul
MSVCR120.dll1643fgets
MSVCR120.dll1566clearerr
MSVCR120.dll1659fprintf
MSVCR120.dll1671fscanf
MSVCR120.dll694_fseeki64
MSVCR120.dll702_ftelli64
MSVCR120.dll1681getc
MSVCR120.dll1088_pclose
MSVCR120.dll1092_popen
MSVCR120.dll1827setvbuf
MSVCR120.dll1880tmpfile
MSVCR120.dll1892ungetc
MSVCR120.dll1851strncmp
MSVCR120.dll1646floor
MSVCR120.dll1568clock
MSVCR120.dll1847strftime
MSVCR120.dll615_difftime64
MSVCR120.dll765_gmtime64
MSVCR120.dll914_localtime64
MSVCR120.dll1831sprintf
MSVCR120.dll1256_time64
MSVCR120.dll1805remove
MSVCR120.dll1809rename
MSVCR120.dll1882tmpnam
MSVCR120.dll1683getenv
MSVCR120.dll1874system
MSVCR120.dll1826setlocale
MSVCR120.dll1856strrchr
MSVCR120.dll1764memchr
MSVCR120.dll1855strpbrk
MSVCR120.dll631_except1
MSVCR120.dll592_crt_debugger_hook
MSVCR120.dll428__crtUnhandledException
MSVCR120.dll427__crtTerminateProcess
MSVCR120.dll367__CppXcptFilter
MSVCR120.dll535_amsg_exit
MSVCR120.dll1667free
MSVCR120.dll933_malloc_crt
MSVCR120.dll780_initterm
MSVCR120.dll781_initterm_e
MSVCR120.dll916_lock
MSVCR120.dll1284_unlock
MSVCR120.dll558_calloc_crt
MSVCR120.dll430__dllonexit
MSVCR120.dll1082_onexit
MSVCR120.dll396__clean_type_info_names_internal
MSVCR120.dll634_except_handler4_common
MSVCR120.dll1845strerror
MSVCR120.dll1839strchr
MSVCR120.dll1665fread
MSVCR120.dll1657fopen
MSVCR120.dll1634ferror
MSVCR120.dll1632feof
MSVCR120.dll1623fclose
MSVCR120.dll440__iob_func
MSVCR120.dll1876tanh
MSVCR120.dll1830sinh
MSVCR120.dll1848strlen
MSVCR120.dll1582cosh
MSVCR120.dll1661fputc
MSVCR120.dll1640fflush
MSVCR120.dll1678fwrite
MSVCR120.dll630_errno
MSVCR120.dll1852strncpy
MSVCR120.dll674_fmode
MSVCR120.dll1614exit
MSVCR120.dll1768memmove
MSVCR120.dll1770memset
MSVCR120.dll1079_mktime64
MSVCR120.dll1766memcpy
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll254DecodePointer
KERNEL32.dll289EncodePointer
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll612GetModuleHandleA
KERNEL32.dll610GetModuleFileNameA
KERNEL32.dll933LoadLibraryA
KERNEL32.dll409FormatMessageA
KERNEL32.dll669GetProcAddress
KERNEL32.dll613GetModuleHandleExA
KERNEL32.dll414FreeLibrary
KERNEL32.dll1441VirtualProtect
KERNEL32.dll1443VirtualQuery
KERNEL32.dll1438VirtualFree
KERNEL32.dll1435VirtualAlloc
KERNEL32.dll1291SetLastError
KERNEL32.dll592GetLastError
KERNEL32.dll275DisableThreadLibraryCalls
ordentry_vafunction_name
10x22420luaJIT_setmode
20x2a110luaJIT_version_2_0_4
30x42950luaL_addlstring
40x429c0luaL_addstring
50x429f0luaL_addvalue
60x23010luaL_argerror
70x42a70luaL_buffinit
80x61f0luaL_callmeta
90x6250luaL_checkany
100x6280luaL_checkinteger
110x6300luaL_checklstring
120x6380luaL_checknumber
130x63d0luaL_checkoption
140x64a0luaL_checkstack
150x64f0luaL_checktype
160x6560luaL_checkudata
170x23030luaL_error
180x42a90luaL_execresult
190x42b40luaL_fileresult
200x42be0luaL_findtable
210x65d0luaL_getmetafield
220x42cd0luaL_gsub
230x29910luaL_loadbuffer
240x299a0luaL_loadbufferx
250x29a30luaL_loadfile
260x29a50luaL_loadfilex
270x29c20luaL_loadstring
280x6640luaL_newmetatable
290x42e20luaL_newstate
300x42e50luaL_openlib
310x46b70luaL_openlibs
320x66f0luaL_optinteger
330x6760luaL_optlstring
340x6810luaL_optnumber
350x42fb0luaL_prepbuffer
360x42fe0luaL_pushresult
370x43020luaL_ref
380x430d0luaL_register
390x21800luaL_traceback
400x23050luaL_typerror
410x430f0luaL_unref
420x23070luaL_where
430x230c0lua_atpanic
440x6870lua_call
450x68a0lua_checkstack
460x3e0b0lua_close
470x68f0lua_concat
480x6990lua_cpcall
490x69d0lua_createtable
500x29c50lua_dump
510x6a40lua_equal
520x230e0lua_error
530x6af0lua_gc
540x6c00lua_getallocf
550x6c20lua_getfenv
560x6c90lua_getfield
570x22610lua_gethook
580x22620lua_gethookcount
590x22630lua_gethookmask
600x21a90lua_getinfo
610x21ab0lua_getlocal
620x6d40lua_getmetatable
630x21b50lua_getstack
640x6dc0lua_gettable
650x6e20lua_gettop
660x6e30lua_getupvalue
670x6e90lua_insert
680x6f00lua_iscfunction
690x6f30lua_isnumber
700x6f80lua_isstring
710x6fb0lua_isuserdata
720x6fe0lua_lessthan
730x29c90lua_load
740x29d20lua_loadx
750x3e150lua_newstate
760x7070lua_newthread
770x70c0lua_newuserdata
780x7140lua_next
790x7190lua_objlen
800x71f0lua_pcall
810x7270lua_pushboolean
820x72a0lua_pushcclosure
830x7330lua_pushfstring
840x7360lua_pushinteger
850x7390lua_pushlightuserdata
860x73c0lua_pushlstring
870x7410lua_pushnil
880x7430lua_pushnumber
890x7470lua_pushstring
900x74e0lua_pushthread
910x7520lua_pushvalue
920x7560lua_pushvfstring
930x7590lua_rawequal
940x75d0lua_rawget
950x7610lua_rawgeti
960x7670lua_rawset
970x76c0lua_rawseti
980x7740lua_remove
990x77a0lua_replace
1000x7890lua_resume
1010x7900lua_setallocf
1020x7920lua_setfenv
1030x79a0lua_setfield
1040x22650lua_sethook
1050x21ba0lua_setlocal
1060x7a50lua_setmetatable
1070x7b80lua_settable
1080x7bf0lua_settop
1090x7c70lua_setupvalue
1100x7cf0lua_status
1110x7d00lua_toboolean
1120x7d20lua_tocfunction
1130x7d50lua_tointeger
1140x7db0lua_tolstring
1150x7e30lua_tonumber
1160x7e80lua_topointer
1170x7ec0lua_tothread
1180x7ee0lua_touserdata
1190x7f10lua_type
1200x7f60lua_typename
1210x7f70lua_upvalueid
1220x7fa0lua_upvaluejoin
1230x7ff0lua_xmove
1240x8050lua_yield
1250x441c0luaopen_base
1260x44410luaopen_bit
1270x45050luaopen_debug
1280x46a80luaopen_ffi
1290x47a80luaopen_io
1300x48c10luaopen_jit
1310x49090luaopen_math
1320x49980luaopen_os
1330x4a440luaopen_package
1340x4ba90luaopen_string
1350x4d150luaopen_table
module_namelua51.dll
flags0
timestamp2016-07-06 06:13:03
version0.0
ordinal_base1
nFunctions135
nNames135
Names(135)0x53cd4
Functions(135)0x53ab8
NameOrdinals(135)0x53ef0
offsetsizetypecomment
0349184DLL07/06/2016 06:13:03#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK