| filename | libstarusr.dll | |
|---|---|---|
| size | 22016 (0x5600) | |
| md5 | bd18f3891f82b8c1dcde697861595c11 | |
| type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xd8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
| Signature | PE |
| Machine | 0x14c |
| NumberOfSections | 4 |
| TimeDateStamp | 0x51a44844 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics | 0x2102 |
| Magic | 0x10b |
| LinkerVersion | 9.0 |
| SizeOfCode | 0x3a00 |
| SizeOfInitializedData | 0x1800 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0 |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x5000 |
| ImageBase | 0x10000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 5.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.0 |
| Reserved1 | 0 |
| SizeOfImage | 0x8000 |
| SizeOfHeaders | 0x400 |
| CheckSum | 0 |
| Subsystem | 2 |
| DllCharacteristics | 0x400 |
| SizeOfStackReserve | 0x100000 |
| SizeOfStackCommit | 0x1000 |
| SizeOfHeapReserve | 0x100000 |
| SizeOfHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 0x10 |
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x3990 | 0x3a00 | R-X CODE | |
| .rdata | 0x5000 | 0xeee | 0x1000 | R-- IDATA | |
| .data | 0x6000 | 0x3e0 | 0x400 | RW- IDATA | |
| .reloc | 0x7000 | 0x334 | 0x400 | R-- IDATA DISCARDABLE |
Data Directory
| type | va | size | |
|---|---|---|---|
| EXPORT | 0x5600 | 0x8ee | |
| IMPORT | 0x5358 | 0x50 | |
| RESOURCE | 0 | 0 | |
| EXCEPTION | 0 | 0 | |
| SECURITY | 0 | 0 | |
| BASERELOC | 0x7000 | 0x31c | |
| DEBUG | 0 | 0 | |
| ARCHITECTURE | 0 | 0 | |
| GLOBALPTR | 0 | 0 | |
| TLS | 0 | 0 | |
| LOAD_CONFIG | 0 | 0 | |
| Bound_IAT | 0 | 0 | |
| IAT | 0x5000 | 0x68 | |
| Delay_IAT | 0 | 0 | |
| CLR_Header | 0 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| libstar.dll | 3381 | CONSTANTS_mp_ISIDE_ALL | |
| libstar.dll | 3391 | CONSTANTS_mp_NSD_ALL | |
| libstar.dll | 9316 | SETCONSTROBJS_mp_FS | |
| libstar.dll | 5352 | FSETBOUNMDINTF | |
| libstar.dll | 3334 | CONNECTIVITY_mp_LFC | |
| libstar.dll | 4452 | DOMAIN_PROP_mp_WALL | |
| libstar.dll | 7153 | NEWHPC_DATA_mp_PARRUN | |
| libstar.dll | 5859 | GSUM2 | |
| libstar.dll | 6111 | IGSUM | |
| libstar.dll | 10598 | TIMEPARALLEL_mp_GLOBALMASTER | |
| libstar.dll | 4435 | DOMAIN_PROP_mp_REGI | |
| libstar.dll | 4437 | DOMAIN_PROP_mp_REGI_NO | |
| libstar.dll | 10354 | STQUIT | |
| libstar.dll | 11164 | WARNING | |
| libstar.dll | 10017 | STARMOD_E2P_mp_T | |
| libstar.dll | 6126 | INFODATA_mp_CHARINFO | |
| libstartempl.dll | 319 | USR001 | |
| libstartempl.dll | 321 | USRD02 | |
| libifcoremd.dll | 631 | for_write_seq_fmt | |
| libifcoremd.dll | 632 | for_write_seq_fmt_xmit | |
| libifcoremd.dll | 163 | for_allocate | |
| libifcoremd.dll | 297 | for_deallocate | |
| libifcoremd.dll | 633 | for_write_seq_lis |
| ord | entry_va | function_name | |
|---|---|---|---|
| 1 | 0x1000 | BCDEFF | |
| 2 | 0x1074 | BCDEFI | |
| 3 | 0x10e8 | BCDEFO | |
| 4 | 0x115c | BCDEFP | |
| 5 | 0x11d0 | BCDEFR | |
| 6 | 0x1244 | BCDEFS | |
| 7 | 0x12b8 | BCDEFT | |
| 8 | 0x132c | BCDEFW | |
| 9 | 0x13a0 | BCDEUC | |
| 10 | 0x1410 | BCDNRP | |
| 11 | 0x1484 | BCDNRS | |
| 12 | 0x14f8 | CAVNUC | |
| 13 | 0x156c | CAVPRO | |
| 14 | 0x15e0 | COALC | |
| 15 | 0x1654 | COALV | |
| 16 | 0x16c4 | COLLDT | |
| 17 | 0x1738 | COLLND | |
| 18 | 0x1ad4 | COMCP | |
| 19 | 0x17ac | COMDEN | |
| 20 | 0x1820 | CONDUC | |
| 21 | 0x1894 | CONDUL | |
| 22 | 0x1904 | CONVET | |
| 23 | 0x1978 | CONVTE | |
| 24 | 0x19ec | COTEET | |
| 25 | 0x1a64 | CPENUL | |
| 26 | 0x1b3c | CREEP | |
| 27 | 0x1bb0 | DAIRCS | |
| 28 | 0x1c18 | DCIUSER | |
| 29 | 0x1c8c | DENSIT | |
| 30 | 0x1d00 | DENUSR | |
| 31 | 0x1d80 | DIFFUS | |
| 32 | 0x1df4 | DIFUUL | |
| 33 | 0x1e64 | DRAVRG | |
| 34 | 0x1ed8 | DRHEAT | |
| 35 | 0x1f4c | DRMAST | |
| 36 | 0x1fc0 | DROBRK | |
| 37 | 0x2034 | DROICO | |
| 38 | 0x2038 | DROMOM | |
| 39 | 0x20b0 | DROPRO | |
| 40 | 0x2128 | DROWBC | |
| 41 | 0x219c | DTSTEP | |
| 42 | 0x2210 | ELASTICPROP | |
| 43 | 0x2284 | FDBRK | |
| 44 | 0x22f4 | FLUINJ | |
| 45 | 0x2368 | FSEVAP | |
| 46 | 0x23dc | FSTEN | |
| 47 | 0x244c | FULPRO | |
| 48 | 0x24c0 | GSCON1 | |
| 49 | 0x2534 | GSCON2 | |
| 50 | 0x25a8 | GSDIFF | |
| 51 | 0x261c | GSSOUR | |
| 52 | 0x2690 | GSTRAN | |
| 53 | 0x2704 | HARDENING | |
| 54 | 0x2778 | INITFI | |
| 55 | 0x27ec | LATHET | |
| 56 | 0x2860 | LQFBCD | |
| 57 | 0x28d4 | LQFINI | |
| 58 | 0x2948 | LQFPRO | |
| 59 | 0x29b8 | LQFRAD | |
| 60 | 0x2a28 | LQFSOR | |
| 61 | 0x2a9c | LQMAST | |
| 62 | 0x2b04 | LSCALE | |
| 63 | 0x2b78 | MODSWF | |
| 64 | 0x2bec | MOMRTS | |
| 65 | 0x2bf0 | NEWXYZ | |
| 66 | 0x2bf4 | NOXUSR | |
| 67 | 0x2c68 | PARUSR | |
| 68 | 0x2cdc | PORCON | |
| 69 | 0x2d50 | PORDIF | |
| 70 | 0x2dc4 | PORHT1 | |
| 71 | 0x2e40 | PORHT2 | |
| 72 | 0x2ed8 | PORKEP | |
| 73 | 0x2f4c | POROS1 | |
| 74 | 0x2fc0 | POROS2 | |
| 75 | 0x3034 | PORWAL | |
| 76 | 0x30b0 | POSDAT | |
| 77 | 0x3760 | RADDRP | |
| 78 | 0x3764 | RADMAT | |
| 79 | 0x3768 | RADPRO | |
| 80 | 0x37dc | RADREG | |
| 81 | 0x37e0 | RADWAL | |
| 82 | 0x3854 | RATUSR | |
| 83 | 0x38c8 | REACFN | |
| 84 | 0x393c | REACUL | |
| 85 | 0x39b0 | ROUGHW | |
| 86 | 0x3a24 | SATTEM | |
| 87 | 0x3a98 | SCADIF | |
| 88 | 0x3b08 | SCALFN | |
| 89 | 0x3b7c | SORENT | |
| 90 | 0x3bf0 | SORKEP | |
| 91 | 0x3c64 | SORMOM | |
| 92 | 0x3cdc | SORSCA | |
| 93 | 0x3d50 | SORUSR | |
| 94 | 0x3dd0 | SOSGAM | |
| 95 | 0x46a2 | SOURG | |
| 96 | 0x3e44 | SPECHT | |
| 97 | 0x3eb8 | SRCEGR | |
| 98 | 0x3ebc | THDIFF | |
| 99 | 0x3f30 | THERMALEXPAND | |
| 100 | 0x3fa4 | TWLUSR | |
| 101 | 0x4018 | UASI | |
| 102 | 0x401c | UBINIT | |
| 103 | 0x4090 | UCONCK | |
| 104 | 0x4094 | UEDRAG | |
| 105 | 0x4108 | UEHEAT | |
| 106 | 0x417c | UETURB | |
| 107 | 0x41f0 | UEVAR | |
| 108 | 0x41f4 | UEVENTS | |
| 109 | 0x4254 | UEWBHT | |
| 110 | 0x4258 | UEWSTR | |
| 111 | 0x42b0 | UFLSPD | |
| 112 | 0x42b4 | UIGNI | |
| 113 | 0x42b8 | UOMEGA | |
| 114 | 0x432c | UPARCP | |
| 115 | 0x43ac | UPARM | |
| 116 | 0x43b0 | UPLGQT | |
| 117 | 0x43b4 | UPOSTM | |
| 118 | 0x45a8 | USBRK | |
| 119 | 0x45ac | USCOAL | |
| 120 | 0x45b0 | USFREA | |
| 121 | 0x4624 | USOLAR | |
| 122 | 0x4698 | USPBRK | |
| 123 | 0x46a4 | USRPST | |
| 124 | 0x469c | USRSEM | |
| 125 | 0x46a0 | UTBVLG | |
| 126 | 0x46a8 | VARBLN | |
| 127 | 0x471c | VARPRT | |
| 128 | 0x4790 | VISCUL | |
| 129 | 0x4800 | VISMOL | |
| 130 | 0x4874 | VISTUR | |
| 131 | 0x48e8 | VRPRND |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
everything is OK
offset:( 0x )