mgwz.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	mgwz.dll
size	65024 (0xfe00)
md5	a2ce1b5018da9e47384a5c1cdedb6226

type	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x4532dc6a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x230e
Magic	0x10b
LinkerVersion	2.56
SizeOfCode	0xa400
SizeOfInitializedData	0x5600
SizeOfUninitializedData	0x200
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0xc000
ImageBase	0x64b00000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x16000
SizeOfHeaders	0x400
CheckSum	0x1367f
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xa250	0xa400	R-X CODE
.data	0xc000	0x50	0x200	RW- IDATA
.rdata	0xd000	0x42e0	0x4400	R-- IDATA
.bss	0x12000	0x60	0	RW- UDATA
.edata	0x13000	0x63d	0x800	R-- IDATA
.idata	0x14000	0x28c	0x400	RW- IDATA
.reloc	0x15000	0x2c0	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x13000	0x63d
IMPORT	0x14000	0x28c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x15000	0x2c0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
msvcrt.dll	23	_fdopen
msvcrt.dll	36	__dllonexit
msvcrt.dll	152	_errno
msvcrt.dll	445	_vsnprintf
msvcrt.dll	547	clearerr
msvcrt.dll	557	fclose
msvcrt.dll	560	fflush
msvcrt.dll	568	fopen
msvcrt.dll	569	fprintf
msvcrt.dll	570	fputc
msvcrt.dll	574	fread
msvcrt.dll	575	free
msvcrt.dll	579	fseek
msvcrt.dll	581	ftell
msvcrt.dll	583	fwrite
msvcrt.dll	626	malloc
msvcrt.dll	632	memcpy
msvcrt.dll	634	memset
msvcrt.dll	659	sprintf
msvcrt.dll	663	strcat
msvcrt.dll	667	strcpy
msvcrt.dll	669	strerror
msvcrt.dll	671	strlen

ord	entry_va	function_name
1	0xf210	_dist_code
2	0xf110	_length_code
3	0x6380	_tr_align
4	0x6cd0	_tr_flush_block
5	0x55b0	_tr_init
6	0x6b90	_tr_stored_block
7	0x7260	_tr_tally
8	0x11c0	adler32
9	0x1410	adler32_combine
10	0x1590	compress
11	0x14d0	compress2
12	0x15d0	compressBound
13	0x1600	crc32
14	0x1910	crc32_combine
15	0x3370	deflate
16	0x3260	deflateBound
17	0x4390	deflateCopy
18	0x2f30	deflateEnd
19	0x4050	deflateInit2_
20	0x4340	deflateInit_
21	0x3db0	deflateParams
22	0x31e0	deflatePrime
23	0x3ec0	deflateReset
24	0x3050	deflateSetDictionary
25	0x31b0	deflateSetHeader
26	0x3220	deflateTune
27	0xf050	deflate_copyright
28	0x15f0	get_crc_table
29	0x2e30	gzclearerr
30	0x2c90	gzclose
31	0x2c20	gzdirect
32	0x2140	gzdopen
33	0x2bf0	gzeof
34	0x2cf0	gzerror
35	0x28e0	gzflush
36	0x24f0	gzgetc
37	0x2590	gzgets
38	0x2190	gzopen
39	0x26f0	gzprintf
40	0x2760	gzputc
41	0x27a0	gzputs
42	0x2210	gzread
43	0x2920	gzrewind
44	0x29c0	gzseek
45	0x19d0	gzsetparams
46	0x2bc0	gztell
47	0x2530	gzungetc
48	0x2610	gzwrite
49	0x77c0	inflate
50	0x9680	inflateBack
51	0xa4e0	inflateBackEnd
52	0x9570	inflateBackInit_
53	0x9400	inflateCopy
54	0x9080	inflateEnd
55	0x91f0	inflateGetHeader
56	0x7520	inflateInit2_
57	0x7620	inflateInit_
58	0x74a0	inflatePrime
59	0x7400	inflateReset
60	0x90e0	inflateSetDictionary
61	0x92c0	inflateSync
62	0x93d0	inflateSyncPoint
63	0x11150	inflate_copyright
64	0xaae0	inflate_fast
65	0xa530	inflate_table
66	0x2e70	uncompress
67	0x73a0	zError
68	0xfc10	z_errmsg
69	0x73c0	zcalloc
70	0x73e0	zcfree
71	0x7390	zlibCompileFlags
72	0x7380	zlibVersion

module_name	mgwz.dll
flags	0
timestamp	2006-10-16 01:12:07
version	0.0
ordinal_base	1
nFunctions	72
nNames	72
Names(72)	0x13148
Functions(72)	0x13028
NameOrdinals(72)	0x13268

show previews

offset	size	type	comment
0	65024	DLL	10/16/2006 01:12:10	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK