filename | intl.dll | |
---|---|---|
size | 152489 (0x253a9) | |
md5 | eb2d4c4d4a527bc88a69a16cc99afcf5 | |
type | PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x80 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0x6a31f019 | 0x6a31f01c | 0x6a31b320 | 0x6a31e004 | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
ADVAPI32.DLL | 386 | RegCloseKey | |
ADVAPI32.DLL | 413 | RegOpenKeyExA | |
ADVAPI32.DLL | 423 | RegQueryValueExA | |
KERNEL32.dll | 82 | CloseHandle | |
KERNEL32.dll | 129 | CreateEventA | |
KERNEL32.dll | 207 | DeleteCriticalSection | |
KERNEL32.dll | 236 | EnterCriticalSection | |
KERNEL32.dll | 249 | EnumResourceLanguagesA | |
KERNEL32.dll | 352 | FreeLibrary | |
KERNEL32.dll | 358 | GetACP | |
KERNEL32.dll | 369 | GetCPInfoExA | |
KERNEL32.dll | 451 | GetCurrentThreadId | |
KERNEL32.dll | 510 | GetLastError | |
KERNEL32.dll | 512 | GetLocaleInfoA | |
KERNEL32.dll | 527 | GetModuleFileNameA | |
KERNEL32.dll | 529 | GetModuleHandleA | |
KERNEL32.dll | 577 | GetProcAddress | |
KERNEL32.dll | 619 | GetSystemDirectoryA | |
KERNEL32.dll | 648 | GetThreadLocale | |
KERNEL32.dll | 734 | InitializeCriticalSection | |
KERNEL32.dll | 743 | InterlockedDecrement | |
KERNEL32.dll | 744 | InterlockedExchange | |
KERNEL32.dll | 747 | InterlockedIncrement | |
KERNEL32.dll | 763 | IsDBCSLeadByteEx | |
KERNEL32.dll | 774 | IsValidCodePage | |
KERNEL32.dll | 814 | LeaveCriticalSection | |
KERNEL32.dll | 817 | LoadLibraryA | |
KERNEL32.dll | 860 | MultiByteToWideChar | |
KERNEL32.dll | 1065 | SetEvent | |
KERNEL32.dll | 1152 | Sleep | |
KERNEL32.dll | 1173 | TlsGetValue | |
KERNEL32.dll | 1213 | VirtualProtect | |
KERNEL32.dll | 1215 | VirtualQuery | |
KERNEL32.dll | 1223 | WaitForSingleObject | |
KERNEL32.dll | 1247 | WideCharToMultiByte | |
msvcrt.dll | 6 | _close | |
msvcrt.dll | 32 | _fstat | |
msvcrt.dll | 37 | _getcwd | |
msvcrt.dll | 58 | _open | |
msvcrt.dll | 64 | _read | |
msvcrt.dll | 80 | _strdup | |
msvcrt.dll | 52 | __dllonexit | |
msvcrt.dll | 61 | __lc_codepage | |
msvcrt.dll | 65 | __mb_cur_max | |
msvcrt.dll | 182 | _errno | |
msvcrt.dll | 266 | _iob | |
msvcrt.dll | 268 | _isctype | |
msvcrt.dll | 392 | _pctype | |
msvcrt.dll | 451 | _stricmp | |
msvcrt.dll | 455 | _strnicmp | |
msvcrt.dll | 490 | _vsnprintf | |
msvcrt.dll | 491 | _vsnwprintf | |
msvcrt.dll | 538 | _winmajor | |
msvcrt.dll | 583 | abort | |
msvcrt.dll | 592 | atoi | |
msvcrt.dll | 594 | bsearch | |
msvcrt.dll | 595 | calloc | |
msvcrt.dll | 607 | fclose | |
msvcrt.dll | 610 | fflush | |
msvcrt.dll | 613 | fgets | |
msvcrt.dll | 618 | fopen | |
msvcrt.dll | 620 | fputc | |
msvcrt.dll | 622 | fputwc | |
msvcrt.dll | 625 | free | |
msvcrt.dll | 633 | fwrite | |
msvcrt.dll | 637 | getenv | |
msvcrt.dll | 671 | localeconv | |
msvcrt.dll | 676 | malloc | |
msvcrt.dll | 682 | memcpy | |
msvcrt.dll | 683 | memmove | |
msvcrt.dll | 690 | putc | |
msvcrt.dll | 695 | qsort | |
msvcrt.dll | 698 | realloc | |
msvcrt.dll | 704 | setlocale | |
msvcrt.dll | 709 | sprintf | |
msvcrt.dll | 714 | strchr | |
msvcrt.dll | 715 | strcmp | |
msvcrt.dll | 717 | strcpy | |
msvcrt.dll | 718 | strcspn | |
msvcrt.dll | 721 | strlen | |
msvcrt.dll | 723 | strncmp | |
msvcrt.dll | 724 | strncpy | |
msvcrt.dll | 728 | strstr | |
msvcrt.dll | 732 | strtoul | |
msvcrt.dll | 742 | tolower | |
msvcrt.dll | 748 | vfprintf | |
msvcrt.dll | 749 | vfwprintf | |
msvcrt.dll | 751 | vsprintf | |
msvcrt.dll | 755 | wcschr | |
msvcrt.dll | 761 | wcslen |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x3168 | _nl_expand_alias | |
2 | 0x1bd60 | _nl_msg_cat_cntr | |
3 | 0xb3b4 | bind_textdomain_codeset | |
4 | 0xb3a8 | bindtextdomain | |
5 | 0xb36c | dcgettext | |
6 | 0xb390 | dcngettext | |
7 | 0xb360 | dgettext | |
8 | 0xb384 | dngettext | |
9 | 0xb354 | gettext | |
10 | 0x1628 | libintl_bind_textdomain_codeset | |
11 | 0x1610 | libintl_bindtextdomain | |
12 | 0x1640 | libintl_dcgettext | |
13 | 0x4d14 | libintl_dcngettext | |
14 | 0x167c | libintl_dgettext | |
15 | 0x4d4c | libintl_dngettext | |
16 | 0x92a8 | libintl_fprintf | |
17 | 0x16a0 | libintl_gettext | |
18 | 0x4d7c | libintl_ngettext | |
19 | 0x92f4 | libintl_printf | |
20 | 0x6004 | libintl_set_relocation_prefix | |
21 | 0xb1ec | libintl_setlocale | |
22 | 0x9474 | libintl_snprintf | |
23 | 0x93a4 | libintl_sprintf | |
24 | 0x3274 | libintl_textdomain | |
25 | 0x91f8 | libintl_vfprintf | |
26 | 0x92cc | libintl_vprintf | |
27 | 0x93c8 | libintl_vsnprintf | |
28 | 0x9310 | libintl_vsprintf | |
29 | 0xb378 | ngettext | |
30 | 0xb39c | textdomain |
StringTable 04090000
Comments | This library is free software; you can redistribute it and/or modify it under the terms of the GNU Library General Public License. You should have received a copy of the GNU Library General Public License along with this library; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA |
CompanyName | Free Software Foundation |
FileDescription | LGPLed libintl for Windows NT/2000/XP/Vista/7 and Windows 95/98/ME |
FileVersion | 0.18.1 |
InternalName | intl.dll |
LegalCopyright | Copyright (C) 1995-2010 |
LegalTrademarks | |
OriginalFilename | intl.dll |
ProductName | libintl: accessing NLS message catalogs |
ProductVersion | 0.18.1 |
VS_FIXEDFILEINFO
FileVersion | 0.18.1.0 |
ProductVersion | 0.18.1.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x10004 |
FileType | 2 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] can't find file_offset of VA 0x1b320