Toolbox.dll

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	Toolbox.dll
size	14848 (0x3a00)
md5	d128954f8d1b73e867fae01f62aebf39

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
147	30729	4
259	23013	1
261	23013	20
260	23013	11
257	23013	5
203	65501	2
1	0	44
265	23026	1
256	23026	1
255	23026	1
258	23026	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x57b33dba
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	14.0
SizeOfCode	0x1e00
SizeOfInitializedData	0x1c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x20b2
BaseOfCode	0x1000
BaseOfData	0x3000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x7000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1c70	0x1e00	R-X CODE
.rdata	0x3000	0xe6e	0x1000	R-- IDATA
.data	0x4000	0x408	0x200	RW- IDATA
.rsrc	0x5000	0x1e0	0x200	R-- IDATA
.reloc	0x6000	0x274	0x400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x38a0	0xb3
IMPORT	0x3954	0x78
RESOURCE	0x5000	0x1e0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x6000	0x274
DEBUG	0x31a0	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x31d8	0x40
Bound_IAT	0	0
IAT	0x3000	0xb4
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#2	381	0

module_name	hint	function_name
MSVCP140.dll	651	void __cdecl std::_Xbad_alloc(void) ?_Xbad_alloc@std@@YAXXZ
MSVCP140.dll	654	void __cdecl std::_Xlength_error(char const *) ?_Xlength_error@std@@YAXPBD@Z
MSVCP140.dll	655	void __cdecl std::_Xout_of_range(char const *) ?_Xout_of_range@std@@YAXPBD@Z
VCRUNTIME140.dll	53	_except_handler4_common
VCRUNTIME140.dll	1	_CxxThrowException
VCRUNTIME140.dll	34	__std_exception_destroy
VCRUNTIME140.dll	33	__std_exception_copy
VCRUNTIME140.dll	37	__std_type_info_destroy_list
VCRUNTIME140.dll	70	memcpy
VCRUNTIME140.dll	40	__telemetry_main_invoke_trigger
VCRUNTIME140.dll	71	memmove
VCRUNTIME140.dll	72	memset
VCRUNTIME140.dll	41	__telemetry_main_return_trigger
VCRUNTIME140.dll	16	__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0.dll	31	_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	36	_execute_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	62	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	65	_seh_filter_dll
api-ms-win-crt-runtime-l1-1-0.dll	57	_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll	56	_initterm
api-ms-win-crt-runtime-l1-1-0.dll	23	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	106	terminate
api-ms-win-crt-runtime-l1-1-0.dll	53	_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll	59	_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll	54	_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0.dll	25	malloc
api-ms-win-crt-heap-l1-1-0.dll	24	free
api-ms-win-crt-heap-l1-1-0.dll	8	_callnewh
KERNEL32.dll	1347	SetUnhandledExceptionFilter
KERNEL32.dll	521	GetCurrentProcess
KERNEL32.dll	1377	TerminateProcess
KERNEL32.dll	877	IsProcessorFeaturePresent
KERNEL32.dll	1069	QueryPerformanceCounter
KERNEL32.dll	522	GetCurrentProcessId
KERNEL32.dll	526	GetCurrentThreadId
KERNEL32.dll	726	GetSystemTimeAsFileTime
KERNEL32.dll	275	DisableThreadLibraryCalls
KERNEL32.dll	843	InitializeSListHead
KERNEL32.dll	871	IsDebuggerPresent
KERNEL32.dll	1410	UnhandledExceptionFilter

ord	entry_va	function_name
1	0x1340	?Calculate@Calculator@Math@@QAENV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
2	0x13c0	Calculate

module_name	Toolbox.dll
flags	0
timestamp	2016-08-16 16:22:18
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0x38d0
Functions(2)	0x38c8
NameOrdinals(2)	0x38d8

show previews

offset	size	type	comment
0	14848	DLL	08/16/2016 16:22:18	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK