iso22900.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	iso22900.dll
size	519168 (0x7ec00)
md5	ab6d7d0e7baabeaff665b39dfb5067ef

type	PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xa
TimeDateStamp	0x5692a64d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x230e
Magic	0x10b
LinkerVersion	2.22
SizeOfCode	0x6f400
SizeOfInitializedData	0x7e800
SizeOfUninitializedData	0x6e00
AddressOfEntryPoint	0x1060
BaseOfCode	0x1000
BaseOfData	0x71000
ImageBase	0x63280000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x8d000
SizeOfHeaders	0x400
CheckSum	0x8058f
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x6f31c	0x6f400	R-X CODE IDATA
.data	0x71000	0x250	0x400	RW- IDATA
.rdata	0x72000	0x80e0	0x8200	R-- IDATA
.eh_fram	0x7b000	0x14c4	0x1600	R-- IDATA
.bss	0x7d000	0x6cc0	0	RW- UDATA
.edata	0x84000	0x357	0x400	R-- IDATA
.idata	0x85000	0xc50	0xe00	RW- IDATA
.CRT	0x86000	0x18	0x200	RW- IDATA
.tls	0x87000	0x20	0x200	RW- IDATA
.reloc	0x88000	0x41e8	0x4200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x84000	0x357
IMPORT	0x85000	0xc50
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x88000	0x41e8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x87000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x85260	0x1d4
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x63307019	0x6330701c	0x63303194	0x63306004	0	0

module_name	hint	function_name
ADVAPI32.DLL	386	RegCloseKey
ADVAPI32.DLL	405	RegEnumValueW
ADVAPI32.DLL	415	RegOpenKeyW
ADVAPI32.DLL	418	RegQueryInfoKeyA
ADVAPI32.DLL	424	RegQueryValueExW
KERNEL32.dll	3	AddAtomA
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	154	CreateMutexA
KERNEL32.dll	169	CreateSemaphoreA
KERNEL32.dll	207	DeleteCriticalSection
KERNEL32.dll	236	EnterCriticalSection
KERNEL32.dll	298	FindAtomA
KERNEL32.dll	352	FreeLibrary
KERNEL32.dll	363	GetAtomNameA
KERNEL32.dll	451	GetCurrentThreadId
KERNEL32.dll	510	GetLastError
KERNEL32.dll	529	GetModuleHandleA
KERNEL32.dll	577	GetProcAddress
KERNEL32.dll	629	GetSystemTimeAsFileTime
KERNEL32.dll	734	InitializeCriticalSection
KERNEL32.dll	743	InterlockedDecrement
KERNEL32.dll	744	InterlockedExchange
KERNEL32.dll	747	InterlockedIncrement
KERNEL32.dll	763	IsDBCSLeadByteEx
KERNEL32.dll	814	LeaveCriticalSection
KERNEL32.dll	817	LoadLibraryA
KERNEL32.dll	820	LoadLibraryW
KERNEL32.dll	860	MultiByteToWideChar
KERNEL32.dll	892	OutputDebugStringA
KERNEL32.dll	974	ReleaseMutex
KERNEL32.dll	978	ReleaseSemaphore
KERNEL32.dll	1091	SetLastError
KERNEL32.dll	1152	Sleep
KERNEL32.dll	1171	TlsAlloc
KERNEL32.dll	1172	TlsFree
KERNEL32.dll	1173	TlsGetValue
KERNEL32.dll	1174	TlsSetValue
KERNEL32.dll	1213	VirtualProtect
KERNEL32.dll	1215	VirtualQuery
KERNEL32.dll	1223	WaitForSingleObject
KERNEL32.dll	1247	WideCharToMultiByte
msvcrt.dll	23	_fdopen
msvcrt.dll	64	_read
msvcrt.dll	109	_write
msvcrt.dll	52	__dllonexit
msvcrt.dll	65	__mb_cur_max
msvcrt.dll	182	_errno
msvcrt.dll	203	_filelengthi64
msvcrt.dll	224	_fstati64
msvcrt.dll	266	_iob
msvcrt.dll	317	_lseeki64
msvcrt.dll	502	_wcslwr
msvcrt.dll	583	abort
msvcrt.dll	586	asctime
msvcrt.dll	592	atoi
msvcrt.dll	595	calloc
msvcrt.dll	607	fclose
msvcrt.dll	610	fflush
msvcrt.dll	612	fgetpos
msvcrt.dll	618	fopen
msvcrt.dll	620	fputc
msvcrt.dll	621	fputs
msvcrt.dll	624	fread
msvcrt.dll	625	free
msvcrt.dll	630	fsetpos
msvcrt.dll	633	fwrite
msvcrt.dll	635	getc
msvcrt.dll	637	getenv
msvcrt.dll	639	getwc
msvcrt.dll	658	iswctype
msvcrt.dll	671	localeconv
msvcrt.dll	672	localtime
msvcrt.dll	676	malloc
msvcrt.dll	680	memchr
msvcrt.dll	681	memcmp
msvcrt.dll	682	memcpy
msvcrt.dll	683	memmove
msvcrt.dll	690	putc
msvcrt.dll	693	putwc
msvcrt.dll	698	realloc
msvcrt.dll	704	setlocale
msvcrt.dll	705	setvbuf
msvcrt.dll	709	sprintf
msvcrt.dll	714	strchr
msvcrt.dll	715	strcmp
msvcrt.dll	716	strcoll
msvcrt.dll	719	strerror
msvcrt.dll	720	strftime
msvcrt.dll	721	strlen
msvcrt.dll	729	strtod
msvcrt.dll	733	strxfrm
msvcrt.dll	739	time
msvcrt.dll	744	towlower
msvcrt.dll	745	towupper
msvcrt.dll	746	ungetc
msvcrt.dll	747	ungetwc
msvcrt.dll	748	vfprintf
msvcrt.dll	754	wcscat
msvcrt.dll	756	wcscmp
msvcrt.dll	757	wcscoll
msvcrt.dll	758	wcscpy
msvcrt.dll	760	wcsftime
msvcrt.dll	761	wcslen
msvcrt.dll	768	wcsstr
msvcrt.dll	771	wcstol
msvcrt.dll	774	wcsxfrm
setupapi.dll	199	SetupDiDestroyDeviceInfoList
setupapi.dll	202	SetupDiEnumDeviceInfo
setupapi.dll	218	SetupDiGetClassDevsW
setupapi.dll	236	SetupDiGetDeviceRegistryPropertyW
SHELL32.DLL	88	SHGetFolderPathA

ord	entry_va	function_name
1	0x40b4	PDUCancelComPrimitive
2	0x397c	PDUConnect
3	0x2e68	PDUConstruct
4	0x37a0	PDUCreateComLogicalLink
5	0x38a0	PDUDestroyComLogicalLink
6	0x42a8	PDUDestroyItem
7	0x2fd0	PDUDestruct
8	0x3a58	PDUDisconnect
9	0x3d54	PDUGetComParam
10	0x481c	PDUGetConflictingResources
11	0x41c4	PDUGetEventItem
12	0x3600	PDUGetLastError
13	0x46b8	PDUGetModuleIds
14	0x44d4	PDUGetObjectId
15	0x4760	PDUGetResourceIds
16	0x3700	PDUGetResourceStatus
17	0x34d4	PDUGetStatus
18	0x31bc	PDUGetTimestamp
19	0x48d8	PDUGetUniqueRespIdTable
20	0x33c8	PDUGetVersion
21	0x3270	PDUIoCtl
22	0x3b34	PDULockResource
23	0x3064	PDUModuleConnect
24	0x3110	PDUModuleDisconnect
25	0x43c4	PDURegisterEventCallback
26	0x3e6c	PDUSetComParam
27	0x49bc	PDUSetUniqueRespIdTable
28	0x3f50	PDUStartComPrimitive
29	0x3c44	PDUUnlockResource

module_name	iso22900.dll
flags	0
timestamp	2016-01-10 18:43:25
version	0.0
ordinal_base	1
nFunctions	29
nNames	29
Names(29)	0x8409c
Functions(29)	0x84028
NameOrdinals(29)	0x84110

show previews

offset	size	type	comment
0	519168	DLL	01/10/2016 18:43:25	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x83194