filenamelibsndfile-1.dll
size1748992 (0x1ab000)
md5ab078f3f6241fddfd39637d7b9358834
typePE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections0xc
TimeDateStamp0
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x222e
Magic0x20b
LinkerVersion2.28
SizeOfCode0xecc00
SizeOfInitializedData0x1aac00
SizeOfUninitializedData0x3c00
AddressOfEntryPoint0x13d0
BaseOfCode0x1000
ImageBase0x70440000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x1b6000
SizeOfHeaders0x400
CheckSum0x1b2beb
Subsystem3
DllCharacteristics0x160
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Creative Audio file

Sections

namevavsizeraw sizeflags
.text0x10000xeca180xecc00R-X CODE IDATA
.data0xee0000xd480xe00RW- IDATA
.rdata0xef0000xaca000xaca00R-- IDATA
.pdata0x19c0000x58200x5a00R-- IDATA
.xdata0x1a20000x63640x6400R-- IDATA
.bss0x1a90000x3a600RW- UDATA
.edata0x1ad0000x5330x600R-- IDATA
.idata0x1ae0000x14580x1600RW- IDATA
.CRT0x1b00000x580x200RW- IDATA
.tls0x1b10000x680x200RW- IDATA
.rsrc0x1b20000x3d00x400RW- IDATA
.reloc0x1b30000x25300x2600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1ad0000x533
IMPORT0x1ae0000x1458
RESOURCE0x1b20000x3d0
EXCEPTION0x19c0000x5820
SECURITY00
BASERELOC0x1b30000x2530
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x1b10200x28
LOAD_CONFIG00
Bound_IAT00
IAT0x1ae5200x4d0
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x705f10000x705f10600x705ebbec0x705f003000
typenamesizecp
VERSION#18880
module_namehintordfunction_name
KERNEL32.dll86CloseHandle
KERNEL32.dll142CreateFileA
KERNEL32.dll149CreateFileW
KERNEL32.dll217DeleteCriticalSection
KERNEL32.dll250EnterCriticalSection
KERNEL32.dll357FlushFileBuffers
KERNEL32.dll363FormatMessageA
KERNEL32.dll368FreeLibrary
KERNEL32.dll449GetConsoleScreenBufferInfo
KERNEL32.dll463GetCurrentProcess
KERNEL32.dll464GetCurrentProcessId
KERNEL32.dll468GetCurrentThreadId
KERNEL32.dll513GetFileSize
KERNEL32.dll516GetFileType
KERNEL32.dll530GetLastError
KERNEL32.dll549GetModuleFileNameW
KERNEL32.dll550GetModuleHandleA
KERNEL32.dll553GetModuleHandleW
KERNEL32.dll600GetProcAddress
KERNEL32.dll631GetStdHandle
KERNEL32.dll652GetSystemTimeAsFileTime
KERNEL32.dll679GetTickCount
KERNEL32.dll684GetTimeZoneInformation
KERNEL32.dll763InitializeCriticalSection
KERNEL32.dll786IsDBCSLeadByteEx
KERNEL32.dll845LeaveCriticalSection
KERNEL32.dll848LoadLibraryA
KERNEL32.dll861LocalFree
KERNEL32.dll892MultiByteToWideChar
KERNEL32.dll959QueryPerformanceCounter
KERNEL32.dll985ReadFile
KERNEL32.dll1030RtlAddFunctionTable
KERNEL32.dll1031RtlCaptureContext
KERNEL32.dll1038RtlLookupFunctionEntry
KERNEL32.dll1045RtlVirtualUnwind
KERNEL32.dll1106SetEndOfFile
KERNEL32.dll1125SetFilePointer
KERNEL32.dll1188SetUnhandledExceptionFilter
KERNEL32.dll1201Sleep
KERNEL32.dll1215TerminateProcess
KERNEL32.dll1222TlsGetValue
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1265VirtualProtect
KERNEL32.dll1267VirtualQuery
KERNEL32.dll1299WideCharToMultiByte
KERNEL32.dll1318WriteConsoleW
KERNEL32.dll1319WriteFile
msvcrt.dll64___lc_codepage_func
msvcrt.dll79__dllonexit
msvcrt.dll80__doserrno
msvcrt.dll84__iob_func
msvcrt.dll92__mb_cur_max
msvcrt.dll94__pioinfo
msvcrt.dll99__setusermatherr
msvcrt.dll121_amsg_exit
msvcrt.dll146_chmod
msvcrt.dll187_errno
msvcrt.dll196_exit
msvcrt.dll207_filelengthi64
msvcrt.dll208_fileno
msvcrt.dll232_fstat64
msvcrt.dll250_get_osfhandle
msvcrt.dll269_gmtime64
msvcrt.dll282_initterm
msvcrt.dll384_lock
msvcrt.dll393_lseeki64
msvcrt.dll549_onexit
msvcrt.dll598_setmode
msvcrt.dll1163_snwprintf
msvcrt.dll635_stat64
msvcrt.dll654_strnicmp
msvcrt.dll689_time64
msvcrt.dll708_unlink
msvcrt.dll710_unlock
msvcrt.dll765_wchmod
msvcrt.dll825_wfopen
msvcrt.dll855_wrename
msvcrt.dll856_write
msvcrt.dll876_wstat64
msvcrt.dll892_wunlink
msvcrt.dll894_wutime64
msvcrt.dll898abort
msvcrt.dll900acos
msvcrt.dll905atan
msvcrt.dll915calloc
msvcrt.dll928exit
msvcrt.dll932fclose
msvcrt.dll933feof
msvcrt.dll934ferror
msvcrt.dll935fflush
msvcrt.dll937fgetpos
msvcrt.dll945fopen
msvcrt.dll947fprintf
msvcrt.dll949fputc
msvcrt.dll952fputws
msvcrt.dll953fread
msvcrt.dll954free
msvcrt.dll957frexp
msvcrt.dll960fseek
msvcrt.dll961fsetpos
msvcrt.dll964fwprintf
msvcrt.dll966fwrite
msvcrt.dll969getc
msvcrt.dll971getenv
msvcrt.dll984islower
msvcrt.dll985isprint
msvcrt.dll987isspace
msvcrt.dll988isupper
msvcrt.dll1002isxdigit
msvcrt.dll1006localeconv
msvcrt.dll1012malloc
msvcrt.dll1018memchr
msvcrt.dll1019memcmp
msvcrt.dll1020memcpy
msvcrt.dll1021memmove
msvcrt.dll1022memset
msvcrt.dll1029printf
msvcrt.dll1033puts
msvcrt.dll1036qsort
msvcrt.dll1038raise
msvcrt.dll1040realloc
msvcrt.dll1041remove
msvcrt.dll1042rename
msvcrt.dll1049setvbuf
msvcrt.dll1050signal
msvcrt.dll1061strcat
msvcrt.dll1063strchr
msvcrt.dll1064strcmp
msvcrt.dll1066strcpy
msvcrt.dll1069strerror
msvcrt.dll1071strlen
msvcrt.dll1072strncat
msvcrt.dll1074strncmp
msvcrt.dll1075strncpy
msvcrt.dll1078strrchr
msvcrt.dll1080strstr
msvcrt.dll1084strtol
msvcrt.dll1085strtoul
msvcrt.dll1099tolower
msvcrt.dll1100toupper
msvcrt.dll1103ungetc
msvcrt.dll1105vfprintf
msvcrt.dll1120wcscpy
msvcrt.dll1124wcslen
msvcrt.dll1128wcsncpy
msvcrt.dll1132wcsrchr
msvcrt.dll1199_utime
msvcrt.dll1215_strdup
msvcrt.dll1257_fileno
msvcrt.dll1281_access
USER32.dll497MessageBoxW
ordentry_vafunction_name
10x28a0sf_command
20x6b20sf_open
30x1c40sf_close
40x2590sf_seek
70x1dd0sf_error
80x1e40sf_perror
90x1ed0sf_error_str
100x1cf0sf_error_number
110x1f70sf_format_check
160x38f0sf_read_raw
170x3cb0sf_readf_short
180x4080sf_readf_int
190x4460sf_readf_float
200x4840sf_readf_double
210x3ac0sf_read_short
220x3e90sf_read_int
230x4270sf_read_float
240x4650sf_read_double
320x4a30sf_write_raw
330x4e50sf_writef_short
340x5250sf_writef_int
350x5650sf_writef_float
360x5a50sf_writef_double
370x4c40sf_write_short
380x5040sf_write_int
390x5440sf_write_float
400x5840sf_write_double
500x1d60sf_strerror
600x3720sf_get_string
610x3750sf_set_string
680x2580sf_version_string
700x6bf0sf_open_fd
710x4dd00sf_wchar_open
800x6cc0sf_open_virtual
900x1cd0sf_write_sync
1000x6e30sf_set_chunk
1010x7020sf_get_chunk_size
1020x7100sf_get_chunk_data
1030x6ef0sf_get_chunk_iterator
1040x6f80sf_next_chunk_iterator
1100x37f0sf_current_byterate
module_namelibsndfile-1.dll
flags0
timestamp2017-04-02 09:00:07
version0.0
ordinal_base1
nFunctions110
nNames41
Names(41)0x1ad1e0
Functions(110)0x1ad028
NameOrdinals(41)0x1ad284

StringTable 040904e4

FileDescriptionA library for reading and writing audio files.
FileVersion1.0.28.0
Full Version1.0.28
InternalNamelibsndfile
LegalCopyrightCopyright (C) 1999-2012, Licensed LGPL
OriginalFilenamelibsndfile-1.dll
ProductNamelibsndfile-1 DLL
ProductVersion1.0.28.0
LanguageLanguage Neutral

VS_FIXEDFILEINFO

FileVersion1.0.28.0
ProductVersion1.0.28.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d01743408BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x1abbec