libarchive-2.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	libarchive-2.dll
size	396919 (0x60e77)
md5	bf7bba97c518efa8f2a36078b47c5b98

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0x10
TimeDateStamp	0x4bc0f487
PointerToSymbolTable	0x4d600
NumberOfSymbols	0xc5d
SizeOfOptionalHeader	0xe0
Characteristics	0x2106
Magic	0x10b
LinkerVersion	2.56
SizeOfCode	0x3e000
SizeOfInitializedData	0x49600
SizeOfUninitializedData	0x1c00
AddressOfEntryPoint	0x10c0
BaseOfCode	0x1000
BaseOfData	0x3f000
ImageBase	0x68a80000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x5a000
SizeOfHeaders	0x400
CheckSum	0x6f2c9
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3de38	0x3e000	R-X CODE IDATA
.data	0x3f000	0x20	0x200	RW- IDATA
.rdata	0x40000	0x64c0	0x6600	R-- IDATA
/4	0x47000	0xe4	0x200	R-- IDATA
.bss	0x48000	0x1bc8	0	RW- UDATA
.edata	0x4a000	0x22fd	0x2400	R-- IDATA
.idata	0x4d000	0x109c	0x1200	RW- IDATA
.reloc	0x4f000	0x15dc	0x1600	R-- IDATA DISCARDABLE
/14	0x51000	0xa0	0x200	R-- DISCARDABLE
/29	0x52000	0xb4	0x200	R-- DISCARDABLE
/45	0x53000	0x162e	0x1800	R-- DISCARDABLE
/57	0x55000	0x62d	0x800	R-- DISCARDABLE
/71	0x56000	0x4a1	0x600	R-- DISCARDABLE
/83	0x57000	0xe0	0x200	R-- DISCARDABLE
/96	0x58000	0xc03	0xe00	R-- DISCARDABLE
/107	0x59000	0x1a0	0x200	R-- DISCARDABLE

Data Directory

type	va	size
EXPORT	0x4a000	0x22fd
IMPORT	0x4d000	0x109c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x4f000	0x15dc
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
libexpat-1.dll	21	XML_Parse
libexpat-1.dll	23	XML_ParserCreate
libexpat-1.dll	26	XML_ParserFree
libexpat-1.dll	32	XML_SetCharacterDataHandler
libexpat-1.dll	38	XML_SetElementHandler
libexpat-1.dll	60	XML_SetUserData
liblzma-1.dll		lzma_alone_decoder
liblzma-1.dll	1	lzma_alone_encoder
liblzma-1.dll	17	lzma_code
liblzma-1.dll	24	lzma_end
liblzma-1.dll	58	lzma_lzma_preset
liblzma-1.dll	61	lzma_memusage
liblzma-1.dll	77	lzma_stream_decoder
liblzma-1.dll	78	lzma_stream_encoder
ADVAPI32.DLL	93	CryptAcquireContextA
ADVAPI32.DLL	96	CryptCreateHash
ADVAPI32.DLL	99	CryptDestroyHash
ADVAPI32.DLL	113	CryptGetHashParam
ADVAPI32.DLL	117	CryptHashData
ADVAPI32.DLL	120	CryptReleaseContext
libbz2-2.dll	2	BZ2_bzCompress
libbz2-2.dll	3	BZ2_bzCompressEnd
libbz2-2.dll	4	BZ2_bzCompressInit
libbz2-2.dll	5	BZ2_bzDecompress
libbz2-2.dll	6	BZ2_bzDecompressEnd
libbz2-2.dll	7	BZ2_bzDecompressInit
KERNEL32.dll	38	CloseHandle
KERNEL32.dll	60	CreateDirectoryA
KERNEL32.dll	63	CreateDirectoryW
KERNEL32.dll	68	CreateFileA
KERNEL32.dll	71	CreateFileW
KERNEL32.dll	84	CreatePipe
KERNEL32.dll	85	CreateProcessA
KERNEL32.dll	107	DeleteCriticalSection
KERNEL32.dll	123	DuplicateHandle
KERNEL32.dll	126	EnterCriticalSection
KERNEL32.dll	283	GetCurrentProcess
KERNEL32.dll	306	GetExitCodeProcess
KERNEL32.dll	308	GetFileAttributesA
KERNEL32.dll	311	GetFileAttributesW
KERNEL32.dll	312	GetFileInformationByHandle
KERNEL32.dll	316	GetFileType
KERNEL32.dll	320	GetFullPathNameW
KERNEL32.dll	325	GetLastError
KERNEL32.dll	337	GetModuleHandleA
KERNEL32.dll	341	GetNamedPipeHandleStateA
KERNEL32.dll	364	GetProcAddress
KERNEL32.dll	492	InitializeCriticalSection
KERNEL32.dll	497	InterlockedExchange
KERNEL32.dll	512	IsDBCSLeadByteEx
KERNEL32.dll	523	LeaveCriticalSection
KERNEL32.dll	524	LoadLibraryA
KERNEL32.dll	560	MultiByteToWideChar
KERNEL32.dll	571	OpenProcess
KERNEL32.dll	582	PeekNamedPipe
KERNEL32.dll	616	ReadFile
KERNEL32.dll	688	SetCurrentDirectoryA
KERNEL32.dll	689	SetCurrentDirectoryW
KERNEL32.dll	694	SetEndOfFile
KERNEL32.dll	701	SetFileAttributesA
KERNEL32.dll	702	SetFileAttributesW
KERNEL32.dll	704	SetFilePointerEx
KERNEL32.dll	707	SetFileTime
KERNEL32.dll	718	SetNamedPipeHandleState
KERNEL32.dll	751	Sleep
KERNEL32.dll	798	VirtualProtect
KERNEL32.dll	801	VirtualQuery
KERNEL32.dll	810	WaitForSingleObject
KERNEL32.dll	814	WideCharToMultiByte
KERNEL32.dll	827	WriteFile
msvcrt.dll	52	__dllonexit
msvcrt.dll	61	__lc_codepage
msvcrt.dll	65	__mb_cur_max
msvcrt.dll	155	_chsize
msvcrt.dll	157	_close
msvcrt.dll	182	_errno
msvcrt.dll	233	_get_osfhandle
msvcrt.dll	266	_iob
msvcrt.dll	268	_isctype
msvcrt.dll	384	_open
msvcrt.dll	385	_open_osfhandle
msvcrt.dll	392	_pctype
msvcrt.dll	405	_rmdir
msvcrt.dll	426	_setmode
msvcrt.dll	449	_strdup
msvcrt.dll	480	_umask
msvcrt.dll	483	_unlink
msvcrt.dll	544	_wopen
msvcrt.dll	552	_wrmdir
msvcrt.dll	577	_wunlink
msvcrt.dll	583	abort
msvcrt.dll	595	calloc
msvcrt.dll	604	exit
msvcrt.dll	610	fflush
msvcrt.dll	620	fputc
msvcrt.dll	624	fread
msvcrt.dll	625	free
msvcrt.dll	629	fseek
msvcrt.dll	633	fwrite
msvcrt.dll	637	getenv
msvcrt.dll	671	localeconv
msvcrt.dll	672	localtime
msvcrt.dll	676	malloc
msvcrt.dll	679	mbtowc
msvcrt.dll	680	memchr
msvcrt.dll	681	memcmp
msvcrt.dll	682	memcpy
msvcrt.dll	683	memmove
msvcrt.dll	684	memset
msvcrt.dll	685	mktime
msvcrt.dll	698	realloc
msvcrt.dll	713	strcat
msvcrt.dll	714	strchr
msvcrt.dll	715	strcmp
msvcrt.dll	717	strcpy
msvcrt.dll	718	strcspn
msvcrt.dll	721	strlen
msvcrt.dll	723	strncmp
msvcrt.dll	724	strncpy
msvcrt.dll	726	strrchr
msvcrt.dll	727	strspn
msvcrt.dll	728	strstr
msvcrt.dll	739	time
msvcrt.dll	743	toupper
msvcrt.dll	748	vfprintf
msvcrt.dll	754	wcscat
msvcrt.dll	758	wcscpy
msvcrt.dll	761	wcslen
msvcrt.dll	762	wcsncat
msvcrt.dll	764	wcsncpy
msvcrt.dll	766	wcsrchr
USER32.dll	630	WaitForInputIdle
libz-1.dll	4	crc32
libz-1.dll	5	deflate
libz-1.dll	8	deflateEnd
libz-1.dll	9	deflateInit2_
libz-1.dll	35	inflate
libz-1.dll	40	inflateEnd
libz-1.dll	41	inflateInit2_
libz-1.dll	42	inflateInit_
libz-1.dll	43	inflateReset

ord	entry_va	function_name
1	0x34d0	__archive_entry_acl_parse_w
2	0x25f10	archive_api_feature
3	0x25f20	archive_api_version
4	0x26010	archive_clear_error
5	0x25fd0	archive_compression
6	0x25fe0	archive_compression_name
7	0x26310	archive_copy_error
8	0x1dc0	archive_entry_acl_add_entry
9	0x4a70	archive_entry_acl_add_entry_w
10	0x3360	archive_entry_acl_clear
11	0x1af0	archive_entry_acl_count
12	0x4780	archive_entry_acl_next
13	0x1b30	archive_entry_acl_reset
14	0x29c0	archive_entry_acl_text_w
15	0x1490	archive_entry_atime
16	0x14b0	archive_entry_atime_is_set
17	0x14a0	archive_entry_atime_nsec
18	0x14d0	archive_entry_birthtime
19	0x14f0	archive_entry_birthtime_is_set
20	0x14e0	archive_entry_birthtime_nsec
21	0x40a0	archive_entry_clear
22	0x2220	archive_entry_clone
23	0x36fe0	archive_entry_copy_bhfi
24	0x4e50	archive_entry_copy_fflags_text
25	0x42d0	archive_entry_copy_fflags_text_w
26	0x5090	archive_entry_copy_gname
27	0x3400	archive_entry_copy_gname_w
28	0x5660	archive_entry_copy_hardlink
29	0x2d70	archive_entry_copy_hardlink_w
30	0x5700	archive_entry_copy_link
31	0x4cd0	archive_entry_copy_link_w
32	0x55d0	archive_entry_copy_pathname
33	0x49a0	archive_entry_copy_pathname_w
34	0x52e0	archive_entry_copy_sourcepath
35	0x5900	archive_entry_copy_stat
36	0x5530	archive_entry_copy_symlink
37	0x46a0	archive_entry_copy_symlink_w
38	0x5120	archive_entry_copy_uname
39	0x3fd0	archive_entry_copy_uname_w
40	0x1510	archive_entry_ctime
41	0x1520	archive_entry_ctime_is_set
42	0x1540	archive_entry_ctime_nsec
43	0x1550	archive_entry_dev
44	0x1580	archive_entry_devmajor
45	0x15a0	archive_entry_devminor
46	0x15d0	archive_entry_fflags
47	0x30d0	archive_entry_fflags_text
48	0x15c0	archive_entry_filetype
49	0x42b0	archive_entry_free
50	0x15f0	archive_entry_gid
51	0x3030	archive_entry_gname
52	0x1d20	archive_entry_gname_w
53	0x4540	archive_entry_hardlink
54	0x1cf0	archive_entry_hardlink_w
55	0x1600	archive_entry_ino
56	0x1610	archive_entry_ino64
57	0x5d70	archive_entry_linkify
58	0x5f90	archive_entry_linkresolver_free
59	0x5b40	archive_entry_linkresolver_new
60	0x59e0	archive_entry_linkresolver_set_strategy
61	0x1620	archive_entry_mode
62	0x1630	archive_entry_mtime
63	0x1650	archive_entry_mtime_is_set
64	0x1640	archive_entry_mtime_nsec
65	0x1b90	archive_entry_new
66	0x1670	archive_entry_nlink
67	0x2f90	archive_entry_pathname
68	0x1cd0	archive_entry_pathname_w
69	0x1680	archive_entry_rdev
70	0x16b0	archive_entry_rdevmajor
71	0x16d0	archive_entry_rdevminor
72	0x17c0	archive_entry_set_atime
73	0x1820	archive_entry_set_birthtime
74	0x1880	archive_entry_set_ctime
75	0x18e0	archive_entry_set_dev
76	0x1900	archive_entry_set_devmajor
77	0x1920	archive_entry_set_devminor
78	0x3f60	archive_entry_set_fflags
79	0x1730	archive_entry_set_filetype
80	0x1760	archive_entry_set_gid
81	0x54a0	archive_entry_set_gname
82	0x5400	archive_entry_set_hardlink
83	0x1780	archive_entry_set_ino
84	0x17a0	archive_entry_set_ino64
85	0x5800	archive_entry_set_link
86	0x1940	archive_entry_set_mode
87	0x1960	archive_entry_set_mtime
88	0x19c0	archive_entry_set_nlink
89	0x5370	archive_entry_set_pathname
90	0x19e0	archive_entry_set_perm
91	0x1a10	archive_entry_set_rdev
92	0x1a30	archive_entry_set_rdevmajor
93	0x1a50	archive_entry_set_rdevminor
94	0x1a70	archive_entry_set_size
95	0x5240	archive_entry_set_symlink
96	0x1ad0	archive_entry_set_uid
97	0x51b0	archive_entry_set_uname
98	0x16f0	archive_entry_size
99	0x1700	archive_entry_size_is_set
100	0x2ef0	archive_entry_sourcepath
101	0x6050	archive_entry_stat
102	0x6120	archive_entry_strmode
103	0x45f0	archive_entry_symlink
104	0x1ca0	archive_entry_symlink_w
105	0x1720	archive_entry_uid
106	0x2e50	archive_entry_uname
107	0x1c80	archive_entry_uname_w
108	0x17f0	archive_entry_unset_atime
109	0x1850	archive_entry_unset_birthtime
110	0x18b0	archive_entry_unset_ctime
111	0x1990	archive_entry_unset_mtime
112	0x1aa0	archive_entry_unset_size
113	0x2170	archive_entry_update_gname_utf8
114	0x2130	archive_entry_update_hardlink_utf8
115	0x2100	archive_entry_update_link_utf8
116	0x20e0	archive_entry_update_pathname_utf8
117	0x20a0	archive_entry_update_symlink_utf8
118	0x2080	archive_entry_update_uname_utf8
119	0x63c0	archive_entry_xattr_add_entry
120	0x6450	archive_entry_xattr_clear
121	0x6310	archive_entry_xattr_count
122	0x6350	archive_entry_xattr_next
123	0x6330	archive_entry_xattr_reset
124	0x25f70	archive_errno
125	0x25f80	archive_error_string
126	0x25fa0	archive_file_count
127	0x25fb0	archive_format
128	0x25fc0	archive_format_name
129	0x25ff0	archive_position_compressed
130	0x26000	archive_position_uncompressed
131	0x263c0	archive_read_close
132	0x6dc0	archive_read_data
133	0x6c00	archive_read_data_block
134	0x6f30	archive_read_data_into_buffer
135	0x8280	archive_read_data_into_fd
136	0x6ca0	archive_read_data_skip
137	0x8620	archive_read_disk_entry_from_file
138	0x83b0	archive_read_disk_gname
139	0x84a0	archive_read_disk_new
140	0x85c0	archive_read_disk_set_gname_lookup
141	0x8750	archive_read_disk_set_standard_lookup
142	0x8460	archive_read_disk_set_symlink_hybrid
143	0x8420	archive_read_disk_set_symlink_logical
144	0x8440	archive_read_disk_set_symlink_physical
145	0x8560	archive_read_disk_set_uname_lookup
146	0x83e0	archive_read_disk_uname
147	0x8a20	archive_read_extract
148	0x88a0	archive_read_extract2
149	0x8830	archive_read_extract_set_progress_callback
150	0x6d70	archive_read_extract_set_skip_file
151	0x26400	archive_read_finish
152	0x6d30	archive_read_header_position
153	0x7dd0	archive_read_new
154	0x75e0	archive_read_next_header
155	0x7180	archive_read_next_header2
156	0x7a10	archive_read_open
157	0x7620	archive_read_open2
158	0x8d80	archive_read_open_FILE
159	0x8ac0	archive_read_open_fd
160	0x9130	archive_read_open_file
161	0x8f70	archive_read_open_filename
162	0x9460	archive_read_open_memory
163	0x93e0	archive_read_open_memory2
164	0x7a50	archive_read_set_filter_options
165	0x7bc0	archive_read_set_format_options
166	0x7d60	archive_read_set_options
167	0x94b0	archive_read_support_compression_all
168	0x9520	archive_read_support_compression_bzip2
169	0x9980	archive_read_support_compression_compress
170	0xa200	archive_read_support_compression_gzip
171	0xc1f0	archive_read_support_compression_lzma
172	0xa770	archive_read_support_compression_none
173	0xac80	archive_read_support_compression_program
174	0xabc0	archive_read_support_compression_program_signature
175	0xaea0	archive_read_support_compression_rpm
176	0xb3a0	archive_read_support_compression_uu
177	0xc250	archive_read_support_compression_xz
178	0xc890	archive_read_support_format_all
179	0xc8f0	archive_read_support_format_ar
180	0xe2d0	archive_read_support_format_cpio
181	0xf950	archive_read_support_format_empty
182	0x168d0	archive_read_support_format_gnutar
183	0xfae0	archive_read_support_format_iso9660
184	0x13fb0	archive_read_support_format_mtree
185	0x16180	archive_read_support_format_raw
186	0x16810	archive_read_support_format_tar
187	0x1e140	archive_read_support_format_xar
188	0x23a60	archive_read_support_format_zip
189	0x26350	archive_set_error
190	0x25f60	archive_version
191	0x25f30	archive_version_number
192	0x25f40	archive_version_stamp
193	0x25f50	archive_version_string
194	0x263a0	archive_write_close
195	0x26460	archive_write_data
196	0x26480	archive_write_data_block
197	0x26de0	archive_write_disk_new
198	0x26f00	archive_write_disk_set_group_lookup
199	0x26da0	archive_write_disk_set_options
200	0x26f50	archive_write_disk_set_skip_file
201	0x290a0	archive_write_disk_set_standard_lookup
202	0x26eb0	archive_write_disk_set_user_lookup
203	0x263e0	archive_write_finish
204	0x26440	archive_write_finish_entry
205	0x264f0	archive_write_get_bytes_in_last_block
206	0x26570	archive_write_get_bytes_per_block
207	0x26420	archive_write_header
208	0x26b80	archive_write_new
209	0x26700	archive_write_open
210	0x29550	archive_write_open_FILE
211	0x29330	archive_write_open_fd
212	0x29700	archive_write_open_file
213	0x29640	archive_write_open_filename
214	0x298d0	archive_write_open_memory
215	0x26530	archive_write_set_bytes_in_last_block
216	0x265b0	archive_write_set_bytes_per_block
217	0x29a30	archive_write_set_compression_bzip2
218	0x2a0a0	archive_write_set_compression_compress
219	0x2a9e0	archive_write_set_compression_gzip
220	0x2bde0	archive_write_set_compression_lzma
221	0x2b2d0	archive_write_set_compression_none
222	0x2b6e0	archive_write_set_compression_program
223	0x2bd30	archive_write_set_compression_xz
224	0x26800	archive_write_set_compressor_options
225	0x2c480	archive_write_set_format
226	0x2c9c0	archive_write_set_format_ar_bsd
227	0x2c5c0	archive_write_set_format_ar_svr4
228	0x2dc90	archive_write_set_format_by_name
229	0x2de00	archive_write_set_format_cpio
230	0x2e840	archive_write_set_format_cpio_newc
231	0x2f090	archive_write_set_format_mtree
232	0x269a0	archive_write_set_format_options
233	0x312e0	archive_write_set_format_pax
234	0x313a0	archive_write_set_format_pax_restricted
235	0x33a20	archive_write_set_format_shar
236	0x33ae0	archive_write_set_format_shar_dump
237	0x34920	archive_write_set_format_ustar
238	0x36070	archive_write_set_format_zip
239	0x26b10	archive_write_set_options
240	0x264a0	archive_write_set_skip_file

module_name	libarchive-2.dll
flags	0
timestamp	2010-04-10 21:58:31
version	0.0
ordinal_base	1
nFunctions	240
nNames	240
Names(240)	0x4a3e8
Functions(240)	0x4a028
NameOrdinals(240)	0x4a7a8

show previews

offset	size	type	comment
0	316928	DLL	04/10/2010 21:58:31	#
15c1	15	HTM		#
4d600	79991	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK