libltdl-3.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	libltdl-3.dll
size	470203 (0x72cbb)
md5	ffbaeae5c1c8f936332a01704963881b

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	9
TimeDateStamp	0x48ec4de6
PointerToSymbolTable	0x6ec00
NumberOfSymbols	0x2d2
SizeOfOptionalHeader	0xe0
Characteristics	0x2106
Magic	0x10b
LinkerVersion	2.56
SizeOfCode	0x4c00
SizeOfInitializedData	0x6400
SizeOfUninitializedData	0x200
AddressOfEntryPoint	0x1060
BaseOfCode	0x1000
BaseOfData	0x6000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x76000
SizeOfHeaders	0x400
CheckSum	0x77bd8
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x200000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x4ae4	0x4c00	R-X CODE IDATA
.data	0x6000	0xf0	0x200	RW- IDATA
.rdata	0x7000	0x5b0	0x600	R-- IDATA
.bss	0x8000	0x1a0	0	RW- UDATA
.edata	0x9000	0x39a	0x400	R-- IDATA
.idata	0xa000	0x478	0x600	RW- IDATA
.reloc	0xb000	0x528	0x600	R-- IDATA DISCARDABLE
.stab	0xc000	0x15024	0x15200	--- DISCARDABLE
.stabstr	0x22000	0x530a0	0x53200	--- DISCARDABLE

Data Directory

type	va	size
EXPORT	0x9000	0x39a
IMPORT	0xa000	0x478
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xb000	0x528
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
KERNEL32.dll	1	AddAtomA
KERNEL32.dll	176	FindAtomA
KERNEL32.dll	214	FreeLibrary
KERNEL32.dll	221	GetAtomNameA
KERNEL32.dll	308	GetFileAttributesA
KERNEL32.dll	325	GetLastError
KERNEL32.dll	335	GetModuleFileNameA
KERNEL32.dll	364	GetProcAddress
KERNEL32.dll	524	LoadLibraryA
msvcrt.dll		_access
msvcrt.dll	36	__dllonexit
msvcrt.dll	48	__mb_cur_max
msvcrt.dll	111	_assert
msvcrt.dll	152	_errno
msvcrt.dll	175	_findclose
msvcrt.dll	176	_findfirst
msvcrt.dll	179	_findnext
msvcrt.dll	198	_fullpath
msvcrt.dll	235	_isctype
msvcrt.dll	359	_pctype
msvcrt.dll	533	abort
msvcrt.dll	557	fclose
msvcrt.dll	560	fflush
msvcrt.dll	563	fgets
msvcrt.dll	568	fopen
msvcrt.dll	575	free
msvcrt.dll	587	getenv
msvcrt.dll	626	malloc
msvcrt.dll	632	memcpy
msvcrt.dll	633	memmove
msvcrt.dll	634	memset
msvcrt.dll	648	realloc
msvcrt.dll	659	sprintf
msvcrt.dll	663	strcat
msvcrt.dll	664	strchr
msvcrt.dll	665	strcmp
msvcrt.dll	667	strcpy
msvcrt.dll	671	strlen
msvcrt.dll	672	strncat
msvcrt.dll	674	strncpy
msvcrt.dll	676	strrchr

ord	entry_va	function_name
1	0x1330	lt_dladderror
2	0x3780	lt_dladdsearchdir
3	0x4d40	lt_dlcaller_get_data
4	0x4c20	lt_dlcaller_register
5	0x4c80	lt_dlcaller_set_data
6	0x2770	lt_dlclose
7	0x34d0	lt_dlerror
8	0x28e0	lt_dlexit
9	0x4bb0	lt_dlforeach
10	0x3170	lt_dlforeachfile
11	0x6000	lt_dlfree
12	0x4b50	lt_dlgetinfo
13	0x4a60	lt_dlgetsearchpath
14	0x4b90	lt_dlhandle_next
15	0x1c20	lt_dlinit
16	0x4850	lt_dlinsertsearchdir
17	0x4b00	lt_dlisresident
18	0x1b20	lt_dlloader_add
19	0x4fb0	lt_dlloader_data
20	0x4d90	lt_dlloader_find
21	0x4f20	lt_dlloader_name
22	0x1ad0	lt_dlloader_next
23	0x4df0	lt_dlloader_remove
24	0x4ab0	lt_dlmakeresident
25	0x6008	lt_dlmalloc
26	0x1260	lt_dlmutex_register
27	0x4620	lt_dlopen
28	0x4650	lt_dlopenext
29	0x18a0	lt_dlpreload
30	0x1d80	lt_dlpreload_default
31	0x6004	lt_dlrealloc
32	0x1430	lt_dlseterror
33	0x49a0	lt_dlsetsearchpath
34	0x3230	lt_dlsym

module_name	libltdl-3.dll
flags	0
timestamp	2008-10-08 06:06:30
version	0.0
ordinal_base	1
nFunctions	34
nNames	34
Names(34)	0x90b0
Functions(34)	0x9028
NameOrdinals(34)	0x9138

show previews

offset	size	type	comment
0	453632	DLL	10/08/2008 06:06:30	#
15c1	15	HTM		#
6ec00	16571	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK