filenameLibKombilo.dll
size1259008 (0x133600)
md5a53196db3ea82e9a67e316788b1b61b9
typePE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x4f6ddfb3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x230e
Magic0x10b
LinkerVersion2.56
SizeOfCode0x11b200
SizeOfInitializedData0x133200
SizeOfUninitializedData0x6e00
AddressOfEntryPoint0x10c0
BaseOfCode0x1000
BaseOfData0x11d000
ImageBase0x68c40000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x13e000
SizeOfHeaders0x400
CheckSum0x139dad
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x11b1f00x11b200R-X CODE IDATA
.data0x11d0000x2600x400RW- IDATA
.rdata0x11e0000xee200xf000R-- IDATA
.bss0x12d0000x6c900RW- UDATA
.edata0x1340000x41a0x600R-- IDATA
.idata0x1350000xc680xe00RW- IDATA
.reloc0x1360000x77e00x7800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1340000x41a
IMPORT0x1350000xc68
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC0x1360000x77e0
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
KERNEL32.dll1AddAtomA
KERNEL32.dll11AreFileApisANSI
KERNEL32.dll38CloseHandle
KERNEL32.dll68CreateFileA
KERNEL32.dll71CreateFileW
KERNEL32.dll88CreateSemaphoreA
KERNEL32.dll107DeleteCriticalSection
KERNEL32.dll109DeleteFileA
KERNEL32.dll110DeleteFileW
KERNEL32.dll126EnterCriticalSection
KERNEL32.dll176FindAtomA
KERNEL32.dll204FlushFileBuffers
KERNEL32.dll214FreeLibrary
KERNEL32.dll221GetAtomNameA
KERNEL32.dll286GetCurrentThreadId
KERNEL32.dll308GetFileAttributesA
KERNEL32.dll311GetFileAttributesW
KERNEL32.dll313GetFileSize
KERNEL32.dll319GetFullPathNameA
KERNEL32.dll320GetFullPathNameW
KERNEL32.dll325GetLastError
KERNEL32.dll337GetModuleHandleA
KERNEL32.dll364GetProcAddress
KERNEL32.dll401GetSystemTime
KERNEL32.dll403GetSystemTimeAsFileTime
KERNEL32.dll414GetTempPathA
KERNEL32.dll415GetTempPathW
KERNEL32.dll433GetVersionExA
KERNEL32.dll492InitializeCriticalSection
KERNEL32.dll496InterlockedDecrement
KERNEL32.dll497InterlockedExchange
KERNEL32.dll500InterlockedIncrement
KERNEL32.dll512IsDBCSLeadByteEx
KERNEL32.dll523LeaveCriticalSection
KERNEL32.dll524LoadLibraryA
KERNEL32.dll527LoadLibraryW
KERNEL32.dll541LockFile
KERNEL32.dll542LockFileEx
KERNEL32.dll560MultiByteToWideChar
KERNEL32.dll616ReadFile
KERNEL32.dll630ReleaseSemaphore
KERNEL32.dll694SetEndOfFile
KERNEL32.dll703SetFilePointer
KERNEL32.dll713SetLastError
KERNEL32.dll751Sleep
KERNEL32.dll763TlsAlloc
KERNEL32.dll764TlsFree
KERNEL32.dll765TlsGetValue
KERNEL32.dll766TlsSetValue
KERNEL32.dll774UnlockFile
KERNEL32.dll798VirtualProtect
KERNEL32.dll801VirtualQuery
KERNEL32.dll810WaitForSingleObject
KERNEL32.dll814WideCharToMultiByte
KERNEL32.dll827WriteFile
msvcrt.dll23_fdopen
msvcrt.dll64_read
msvcrt.dll109_write
msvcrt.dll52__dllonexit
msvcrt.dll61__lc_codepage
msvcrt.dll65__mb_cur_max
msvcrt.dll137_assert
msvcrt.dll139_atoi64
msvcrt.dll182_errno
msvcrt.dll203_filelengthi64
msvcrt.dll266_iob
msvcrt.dll268_isctype
msvcrt.dll317_lseeki64
msvcrt.dll392_pctype
msvcrt.dll583abort
msvcrt.dll592atoi
msvcrt.dll607fclose
msvcrt.dll610fflush
msvcrt.dll612fgetpos
msvcrt.dll618fopen
msvcrt.dll620fputc
msvcrt.dll624fread
msvcrt.dll625free
msvcrt.dll630fsetpos
msvcrt.dll633fwrite
msvcrt.dll635getc
msvcrt.dll637getenv
msvcrt.dll639getwc
msvcrt.dll658iswctype
msvcrt.dll671localeconv
msvcrt.dll672localtime
msvcrt.dll676malloc
msvcrt.dll680memchr
msvcrt.dll681memcmp
msvcrt.dll682memcpy
msvcrt.dll683memmove
msvcrt.dll689printf
msvcrt.dll690putc
msvcrt.dll693putwc
msvcrt.dll698realloc
msvcrt.dll704setlocale
msvcrt.dll705setvbuf
msvcrt.dll709sprintf
msvcrt.dll713strcat
msvcrt.dll715strcmp
msvcrt.dll716strcoll
msvcrt.dll717strcpy
msvcrt.dll719strerror
msvcrt.dll720strftime
msvcrt.dll721strlen
msvcrt.dll724strncpy
msvcrt.dll733strxfrm
msvcrt.dll742tolower
msvcrt.dll743toupper
msvcrt.dll744towlower
msvcrt.dll745towupper
msvcrt.dll746ungetc
msvcrt.dll747ungetwc
msvcrt.dll757wcscoll
msvcrt.dll760wcsftime
msvcrt.dll761wcslen
msvcrt.dll774wcsxfrm
ordentry_vafunction_name
10xa1850DeleteGameList@4
20xa1a88DeletePattern@4
30xa2730DeleteProcessOptions@4
40xa18e8DeleteSearchOptions@4
50xa20f0GameListCurrentEntryAsString@16
60xa16d0GameListFinalizeProcessing@4
70xa1160GameListGISearch@8
80xa2218GameListGetCurrentProperty@20
90xa1f94GameListGetSGF@16
100xa25fcGameListGetSignature@12
110xa0fa0GameListNumHits@20
120xa1e6cGameListPlEntry@16
130xa0f14GameListPlSize@8
140xa15b0GameListProcess@28
150xa151cGameListProcessResults@12
160xa10d8GameListReset@4
170xa2434GameListResetFormat@12
180xa1488GameListSearch@12
190xa122cGameListSigSearch@12
200xa104cGameListSize@8
210xa178cGameListStartProcessing@8
220xa12f4GameListlookupContinuation@44
230xa13e0GameListlookupLabel@16
240xa2814NewGameList@24
250xa1c5cNewPattern@24
260xa1b20NewPatternAnchored@36
270xa19d0NewProcessOptions@4
280xa1900NewSearchOptions@16
290xa0e98ProcessOptionsGet@16
300xa1d44ProcessOptionsSet@16
310xa0db8SearchOptionsGet@12
320xa0e24SearchOptionsSet@12
module_nameLibKombilo.dll
flags0
timestamp2012-03-24 14:52:34
version0.0
ordinal_base1
nFunctions32
nNames32
Names(32)0x1340a8
Functions(32)0x134028
NameOrdinals(32)0x134128
offsetsizetypecomment
01259008DLL03/24/2012 14:52:35#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK