romloader_usb.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	romloader_usb.dll
size	690747 (0xa8a3b)
md5	dd42281ac84485050feb5a1ef173810b

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0x11
TimeDateStamp	0x56d575c9
PointerToSymbolTable	0x87e00
NumberOfSymbols	0x11e3
SizeOfOptionalHeader	0xe0
Characteristics	0x2106
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x55a00
SizeOfInitializedData	0x71a00
SizeOfUninitializedData	0x4600
AddressOfEntryPoint	0x1410
BaseOfCode	0x1000
BaseOfData	0x57000
ImageBase	0x69540000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x98000
SizeOfHeaders	0x600
CheckSum	0xb88e8
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x55914	0x55a00	R-X CODE IDATA
.data	0x57000	0x5e2c	0x6000	RW- IDATA
.rdata	0x5d000	0x10470	0x10600	R-- IDATA
.bss	0x6e000	0x4484	0	RW- UDATA
.edata	0x73000	0x5a	0x200	R-- IDATA
.idata	0x74000	0x1128	0x1200	RW- IDATA
.CRT	0x76000	0x2c	0x200	RW- IDATA
.tls	0x77000	0x20	0x200	RW- IDATA
.reloc	0x78000	0x4008	0x4200	R-- IDATA DISCARDABLE
/4	0x7d000	0x318	0x400	R-- IDATA DISCARDABLE
/19	0x7e000	0xcb5c	0xcc00	R-- IDATA DISCARDABLE
/31	0x8b000	0x233b	0x2400	R-- IDATA DISCARDABLE
/45	0x8e000	0x21df	0x2200	R-- IDATA DISCARDABLE
/57	0x91000	0x1114	0x1200	R-- IDATA DISCARDABLE
/70	0x93000	0x168	0x200	R-- IDATA DISCARDABLE
/81	0x94000	0x2ace	0x2c00	R-- IDATA DISCARDABLE
/92	0x97000	0x6f8	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x73000	0x5a
IMPORT	0x74000	0x1128
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x78000	0x4008
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x77004	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x742d4	0x270
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x695b7000	0x695b701c	0x695aebcc	0x695b6018	0	0

module_name	hint	function_name
KERNEL32.dll	67	CancelIo
KERNEL32.dll	83	CloseHandle
KERNEL32.dll	132	CreateEventA
KERNEL32.dll	139	CreateFileA
KERNEL32.dll	158	CreateMutexA
KERNEL32.dll	173	CreateSemaphoreA
KERNEL32.dll	176	CreateSemaphoreW
KERNEL32.dll	212	DeleteCriticalSection
KERNEL32.dll	224	DeviceIoControl
KERNEL32.dll	234	DuplicateHandle
KERNEL32.dll	239	EnterCriticalSection
KERNEL32.dll	351	FormatMessageA
KERNEL32.dll	452	GetCurrentProcess
KERNEL32.dll	453	GetCurrentProcessId
KERNEL32.dll	457	GetCurrentThreadId
KERNEL32.dll	515	GetLastError
KERNEL32.dll	532	GetModuleFileNameW
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	568	GetOverlappedResult
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	582	GetProcessAffinityMask
KERNEL32.dll	633	GetSystemTime
KERNEL32.dll	635	GetSystemTimeAsFileTime
KERNEL32.dll	663	GetTickCount
KERNEL32.dll	667	GetTimeZoneInformation
KERNEL32.dll	678	GetVersionExA
KERNEL32.dll	747	InitializeCriticalSection
KERNEL32.dll	806	LeaveCriticalSection
KERNEL32.dll	809	LoadLibraryA
KERNEL32.dll	915	QueryPerformanceCounter
KERNEL32.dll	916	QueryPerformanceFrequency
KERNEL32.dll	941	ReadFile
KERNEL32.dll	958	ReleaseMutex
KERNEL32.dll	962	ReleaseSemaphore
KERNEL32.dll	979	ResetEvent
KERNEL32.dll	1053	SetEvent
KERNEL32.dll	1078	SetLastError
KERNEL32.dll	1108	SetThreadAffinityMask
KERNEL32.dll	1127	SetUnhandledExceptionFilter
KERNEL32.dll	1140	Sleep
KERNEL32.dll	1143	SleepEx
KERNEL32.dll	1151	SystemTimeToFileTime
KERNEL32.dll	1154	TerminateProcess
KERNEL32.dll	1155	TerminateThread
KERNEL32.dll	1159	TlsAlloc
KERNEL32.dll	1160	TlsFree
KERNEL32.dll	1161	TlsGetValue
KERNEL32.dll	1162	TlsSetValue
KERNEL32.dll	1174	UnhandledExceptionFilter
KERNEL32.dll	1192	VerSetConditionMask
KERNEL32.dll	1195	VerifyVersionInfoA
KERNEL32.dll	1206	VirtualProtect
KERNEL32.dll	1209	VirtualQuery
KERNEL32.dll	1216	WaitForMultipleObjects
KERNEL32.dll	1218	WaitForSingleObject
KERNEL32.dll	1262	WriteFile
msvcrt.dll	55	__dllonexit
msvcrt.dll	142	_amsg_exit
msvcrt.dll	155	_beginthreadex
msvcrt.dll	208	_errno
msvcrt.dll	219	_exit
msvcrt.dll	303	_initterm
msvcrt.dll	307	_iob
msvcrt.dll	404	_lock
msvcrt.dll	561	_onexit
msvcrt.dll	619	_snprintf
msvcrt.dll	629	_snwprintf
msvcrt.dll	668	_vsnprintf
msvcrt.dll	793	calloc
msvcrt.dll	819	fprintf
msvcrt.dll	821	fputc
msvcrt.dll	822	fputs
msvcrt.dll	826	free
msvcrt.dll	835	fwprintf
msvcrt.dll	837	fwrite
msvcrt.dll	842	getenv
msvcrt.dll	881	malloc
msvcrt.dll	888	memcmp
msvcrt.dll	889	memcpy
msvcrt.dll	890	memmove
msvcrt.dll	892	memset
msvcrt.dll	896	printf
msvcrt.dll	899	putchar
msvcrt.dll	900	puts
msvcrt.dll	905	raise
msvcrt.dll	907	realloc
msvcrt.dll	919	sprintf
msvcrt.dll	922	sscanf
msvcrt.dll	927	strcmp
msvcrt.dll	929	strcpy
msvcrt.dll	934	strlen
msvcrt.dll	937	strncmp
msvcrt.dll	938	strncpy
msvcrt.dll	945	strtok
msvcrt.dll	956	_stricmp
msvcrt.dll	1003	_unlock
msvcrt.dll	1084	abort
msvcrt.dll	1093	atoi
msvcrt.dll	1108	toupper
msvcrt.dll	1113	vfprintf
msvcrt.dll	1131	wcscpy
msvcrt.dll	1200	_write
msvcrt.dll	1227	_strdup
USER32.dll	443	MessageBoxW
lua5.1.dll	14	luaL_error
lua5.1.dll	20	luaL_loadstring
lua5.1.dll	30	luaL_ref
lua5.1.dll	33	luaL_unref
lua5.1.dll	34	luaL_where
lua5.1.dll	36	lua_call
lua5.1.dll	37	lua_checkstack
lua5.1.dll	39	lua_concat
lua5.1.dll	41	lua_createtable
lua5.1.dll	44	lua_error
lua5.1.dll	48	lua_getfield
lua5.1.dll	54	lua_getmetatable
lua5.1.dll	56	lua_gettable
lua5.1.dll	57	lua_gettop
lua5.1.dll	59	lua_insert
lua5.1.dll	60	lua_iscfunction
lua5.1.dll	61	lua_isnumber
lua5.1.dll	62	lua_isstring
lua5.1.dll	63	lua_isuserdata
lua5.1.dll	68	lua_newuserdata
lua5.1.dll	69	lua_next
lua5.1.dll	70	lua_objlen
lua5.1.dll	71	lua_pcall
lua5.1.dll	72	lua_pushboolean
lua5.1.dll	73	lua_pushcclosure
lua5.1.dll	74	lua_pushfstring
lua5.1.dll	76	lua_pushlightuserdata
lua5.1.dll	77	lua_pushlstring
lua5.1.dll	78	lua_pushnil
lua5.1.dll	79	lua_pushnumber
lua5.1.dll	80	lua_pushstring
lua5.1.dll	82	lua_pushvalue
lua5.1.dll	83	lua_pushvfstring
lua5.1.dll	85	lua_rawget
lua5.1.dll	86	lua_rawgeti
lua5.1.dll	87	lua_rawset
lua5.1.dll	88	lua_rawseti
lua5.1.dll	89	lua_remove
lua5.1.dll	90	lua_replace
lua5.1.dll	98	lua_setmetatable
lua5.1.dll	100	lua_settop
lua5.1.dll	103	lua_toboolean
lua5.1.dll	104	lua_tocfunction
lua5.1.dll	106	lua_tolstring
lua5.1.dll	107	lua_tonumber
lua5.1.dll	110	lua_touserdata
lua5.1.dll	111	lua_type
lua5.1.dll	112	lua_typename

ord	entry_va	function_name
1	0x13825	luaopen_romloader_usb

module_name	romloader_usb.dll
flags	0
timestamp	2016-03-01 10:58:17
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x7302c
Functions(1)	0x73028
NameOrdinals(1)	0x73030

show previews

offset	size	type	comment
0	556544	DLL	03/01/2016 10:58:17	#
15c1	15	HTM		#
87e00	134203	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x6ebcc