filenameTudos & Todos Gamehack - CheatEngine_dump.dll
size2719744 (0x298000)
md5173b9b722c385c60bcdd81a4a083ac79
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections9
TimeDateStamp0x2a425e19
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0xa18e
Magic0x10b
LinkerVersion2.25
SizeOfCode0x1adc00
SizeOfInitializedData0xe6e00
SizeOfUninitializedData0
AddressOfEntryPoint0x29a001
BaseOfCode0x1000
BaseOfData0x1af000
ImageBase0x2220000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x29d000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics1
SizeOfStackReserve0
SizeOfStackCommit0
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

ASPack v2.12

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

namevavsizeraw sizeflags
CODE0x10000x1ae0000x1adc00RWX CODE IDATA
DATA0x1af0000x60000x5e00RW- IDATA
BSS0x1b50000x20000x1c00RW- IDATA
.idata0x1b70000x30000x2e00RW- IDATA
.edata0x1ba0000x10000x200RW- IDATA SHARED
.reloc0x1bb0000x210000x20800RW- IDATA SHARED
.rsrc0x1dc0000xbe0000xbd400RW- IDATA SHARED
.shugoz0x29a0000x20000x1a00RWX CODE IDATA
.adata0x29c0000x10000RWX IDATA

Data Directory

typevasize
EXPORT0x1ba0000x6e
IMPORT0x29b0080x31c
RESOURCE0x1dc0000xbd800
EXCEPTION00
SECURITY00
BASERELOC0x29afb08
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
00x100000
typenamesizecp
AVI#150240640
AVI#15166560
AVI#15266560
AVI#160281600
AVI#161174080
AVI#162174080
AVI#163158720
AVI#164158720
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
BITMAPBBABORT4640
BITMAPBBALL4840
BITMAPBBCANCEL4640
BITMAPBBCLOSE4640
BITMAPBBHELP4640
BITMAPBBIGNORE4640
BITMAPBBNO4640
BITMAPBBOK4640
BITMAPBBRETRY4640
BITMAPBBYES4640
BITMAPPREVIEWGLYPH2320
BITMAPSPINDOWN1520
BITMAPSPINUP1520
ICON#17440
DIALOGDLGTEMPLATE820
STRING#40708280
STRING#407113720
STRING#407210360
STRING#407314240
STRING#407410680
STRING#40759640
STRING#40764160
STRING#407713400
STRING#40786520
STRING#40795160
STRING#40802680
STRING#40817920
STRING#40828320
STRING#40832840
STRING#40842320
STRING#40854400
STRING#40867960
STRING#408710400
STRING#40889640
STRING#40899040
STRING#409011520
STRING#40912400
STRING#40922160
STRING#40936280
STRING#40949920
STRING#40959040
STRING#40967560
RCDATADVCLAL160
RCDATAPACKAGEINFO29560
RCDATATABOUT119240
RCDATATADDFORM34220
RCDATATADVANCEDOPTIONS39200
RCDATATCHANGEOFFSET9490
RCDATATCOMMENTS5890
RCDATATDARKLIGHT4EVER515280
RCDATATFINDWINDOW14480
RCDATATFORMADDRESSCHANGE23880
RCDATATFORMDEBUGSTRINGS6220
RCDATATFORMDIFFERENTBITSIZE14430
RCDATATFORMFINDCODEINFILE28410
RCDATATFORMFOUNDCODELISTEXTRA38850
RCDATATFORMHOTKEY7030
RCDATATFORMMEMORYREGIONS15330
RCDATATFORMPOINTERORPOINTEE7020
RCDATATFORMSCANNING11130
RCDATATFORMSETTINGS136930
RCDATATFOUNDCODEDIALOG19570
RCDATATFRAMEMEMORYBROWSER22000
RCDATATFRMADDTOCODELIST8600
RCDATATFRMAPIHOOKTEMPLATESETTINGS12720
RCDATATFRMAUTOINJECT19290
RCDATATFRMBREAKPOINTLIST5530
RCDATATFRMBREAKTHREAD7850
RCDATATFRMCAPTUREDTIMERS11670
RCDATATFRMCHANGEDADDRESSES7810
RCDATATFRMCHANGEVALUE2630
RCDATATFRMCODECAVESCANNER20160
RCDATATFRMCONFIGUNRANDOMIZER7420
RCDATATFRMCREATEDPROCESSLIST6290
RCDATATFRMDIRECTX206590
RCDATATFRMDISASSEMBLYSCAN7720
RCDATATFRMDISSECTCODE20960
RCDATATFRMDISSECTWINDOW12140
RCDATATFRMDRIVERLIST8240
RCDATATFRMENUMERATEDLLS13960
RCDATATFRMEXCLUDEHIDE16550
RCDATATFRMFILLMEMORY9460
RCDATATFRMFINDSTATICS21080
RCDATATFRMHEAPS9900
RCDATATFRMHOTKEYCONFIG25820
RCDATATFRMINJECTEDPOINTERSCANORNOT6740
RCDATATFRMLOADMEMORY8820
RCDATATFRMMEMORYMODIFIER64160
RCDATATFRMMEMORYTRAINERADDENTRY23730
RCDATATFRMMEMORYTRAINERADDENTRY219200
RCDATATFRMMEMORYTRAINERPREVIEW15430
RCDATATFRMMODIFYREGISTERS38440
RCDATATFRMMODULESAFETY11700
RCDATATFRMPASTETABLEENTRY10950
RCDATATFRMPATCHEDIT10350
RCDATATFRMPATCHERMAKER7770
RCDATATFRMPATCHERMAKER224850
RCDATATFRMPATCHERMAKER318270
RCDATATFRMPOINTERSCANNER29390
RCDATATFRMPOINTERSCANNERSETTINGS31610
RCDATATFRMPROCESSINFO15900
RCDATATFRMPROCESSWATCHER10380
RCDATATFRMPROCESSWATCHEREXTRA3900
RCDATATFRMSAVEDISASSEMBLY12070
RCDATATFRMSAVEMEMORYREGION14940
RCDATATFRMSERVICEDESCRIPTORTABLES15880
RCDATATFRMSTACKTRACE6040
RCDATATFRMSTRUCTURES24480
RCDATATFRMSTRUCTURESADDELEMENT10530
RCDATATFRMSYMBOLHANDLER9980
RCDATATFRMTHREADLIST7130
RCDATATFRMTHREADLISTEX5670
RCDATATFRMTRACER51450
RCDATATFRMTRAINERDESIGNCONTROLS155970
RCDATATFRMTRAINERDESIGNER7450
RCDATATFRMTRAINERDESIGNOBJECTVIEW13250
RCDATATHOTKEYFORM11310
RCDATATINPUTBOXTOP7450
RCDATATMEMORYBROWSER145570
RCDATATPROCESSWINDOW22700
RCDATATSTANDALONE13230
RCDATATSTANDALONEEXAMPLEFORM2980
RCDATATTLG8310
RCDATATTOOLBARFORM2930
RCDATATTYPEFORM23970
RCDATATVALUECHANGEFORM10230
RCDATATZNJHSOGUHS3547590
GROUP_CURSOR#32761200
GROUP_CURSOR#32762200
GROUP_CURSOR#32763200
GROUP_CURSOR#32764200
GROUP_CURSOR#32765200
GROUP_CURSOR#32766200
GROUP_CURSOR#32767200
GROUP_ICONMAINICON200
VERSION#16200
MANIFEST#17520
idlangstring
651040Find out what addresses this code reads from
651050Find out what addresses this code writes to
651060Error when trying to restore this code!
651070The memory at this address isn't what it should be! Continue?
651080The memory at this address couldn't be written
651090Select the executable of the Direct-3D game
651100Select the executable of the OpenGL game
651110Enabling the process watcher will prevent the unloader from working
651120Close
651200will hide all windows
651210will bring the foreground window back
651220will bring all windows back
651230Don't even bother. Cheat Engine uses the main thread to receive messages when the scan is done, freeze it and CE will crash!
651240To use this option the debugger must be attached to the game
651250Failure to set the speed
651260This address is not readable
651270The memory at this address is'nt what it should be! Continue?
651280This byte is already part of another opcode already present in the list
651290At least one of these bytes is already in the list
651300This address is already in the list
651310Cheat Engine code:
651320What name do you want to give this code?
651330Change of
651340Code :
651350Find out what addresses this code accesses
651360Show as hexadecimal value
651370Freeze the address in this list
651380Freeze all addresses in this list
651390Unfreeze all addresses in this list
651400Unfreeze the address in this list
651410Delete this address
651420Recalculate address
651430Recalculate selected addresses
651440Recalculate all addresses
651450Remove from group
651460Enable cheat
651470Disable cheat
651480Find out what writes to this pointer
651490Find what reads from the address pointed at by this pointer
651500Do you really want to go back to the results of the previous scan?
651510will hide the foreground window
651520Do you want to add a '0'-terminator at the end?
651530The number of bytes you typed is not the same as the previous ammount. Continue?
651540Value
651550Change this value to:
651560Change these values to:
651570Delete this address?
651580Delete these addresses?
651590Also delete the group this address is a member of?
651600Also delete the groups of the addresses you selected?
651610The selected address is a pointer. Are you sure? (the base pointer will get the address)
651620There are more pointers selected. Do you want to change them as well?
651630You have selected one or more pointers. Do you want to change them as well?
651640Are you sure you want to delete all addresses?
651650One or more addresses where already in the list
651660Set a hotkey
651670Show as decimal value
651680Search for text
651690Search for this array
651700This will close the current process. Are you sure you want to do this?
651710Error
651720Do you want to start a new scan?
651730Keep the current address list/code list?
651740Info about this table:
651750Physical Memory
651760Please fill in something!
651770First select a process
651780You can't do a Next Scan with the current selected way of scanning!
651790Click here to go to the Cheat Engine homepage
651800Description
651810Change the description to:
651820The text you entered isn't the same size as the original. Continue?
651830Not the same size!
651840Value between...
651850Changed value
651860Unchanged value
651870Unknown initial value
651880Same as first scan
651890Too long
651900This is a invalid memory region file. I'll assume this file has no header data
651910The following opcodes accessed the selected address
651920The following opcodes read from the selected address
651930The following opcodes changed the selected address
651940Allow negative changes
651950Allow positive changes
651960Don't allow any change
651970You haven't saved your last changes yet. Save Now?
651980Text:
651990Value:
652000Start
652010Stop
652020OK
652030BUG!
652040Assembler
652050New Scan
652060First Scan
652070No description
652080Exact
652090Exact Value
652100Bigger than...
652110Smaller than...
652120Increased value
652130Increased value by ...
652140Decreased value
652150Decreased value by ...
652160Failed to set object at index %d
652170MultiLine must be True when TabPosition is tpLeft or tpRight
652180Invalid index
652190Unable to insert an item
652200Invalid owner
652210%d is an invalid PageIndex value. PageIndex must be between 0 and %d
652220This control requires version 4.70 or greater of COMCTL32.DLL
652230There is a unknown component in the trainer! compnr=
652240The icon has been corrupted
652250The file patcher can't be loaded by Cheat Engine!
652260This is not a trainer made by Cheat Engine (If it is a trainer at all!)
652270This version of Cheat Engine doesn't know how to read this trainer! Trainerversion=
652280This trainer is protected from being opened by CE. Now go away!!!
652290Scan
652300Stop
652310Stopping...
652320Info Text
652330Menu Background
652340Menu Text
652350None
652360Scroll Bar
6523703D Dark Shadow
6523803D Light
652390Window Background
652400Window Frame
652410Window Text
652420No help keyword specified.
652430Failed to clear tab control
652440Failed to delete tab at index %d
652450Failed to retrieve tab at index %d
652460Failed to get object at index %d
652470Failed to set tab "%s" at index %d
652480Active Caption
652490Application Workspace
652500Background
652510Button Face
652520Button Highlight
652530Button Shadow
652540Button Text
652550Caption Text
652560Default
652570Gray Text
652580Highlight Background
652590Highlight Text
652600Inactive Border
652610Inactive Caption
652620Inactive Caption Text
652630Info Background
652640Purple
652650Teal
652660Gray
652670Silver
652680Red
652690Lime
652700Yellow
652710Blue
652720Fuchsia
652730Aqua
652740White
652750Money Green
652760Sky Blue
652770Cream
652780Medium Gray
652790Active Border
652800Key "%s" not found
652810goColMoving is not a supported option
652820Key may not contain equals sign ("=")
652830Separator
652840Error setting %s.Count
652850Listbox (%s) style must be virtual in order to set Count
652860No OnGetItem event handler assigned
652870Unable to find a Table of Contents
652880No help found for %s
652890No context-sensitive help installed
652900No topic-based help system installed
652910Black
652920Maroon
652930Green
652940Olive
652950Navy
652960Invalid clipboard format
652970Clipboard does not support Icons
652980Cannot open clipboard
652990Text exceeds memo capacity
653000Menu '%s' is already being used by another form
653010Picture:
653020(%dx%d)
653030Preview
653040Docked control must have a name
653050Error removing control from dock tree
653060- Dock zone not found
653070- Dock zone has no control
653080Multiselect mode must be on for this feature
653090Key
653100Value
653110A key with the name of "%s" already exists
653120PgDn
653130End
653140Home
653150Left
653160Up
653170Right
653180Down
653190Ins
653200Del
653210Shift+
653220Ctrl+
653230Alt+
653240(None)
653250Value must be between %d and %d
653260All
653270Unable to insert a line
653280&No
653290OK
653300Cancel
653310&Help
653320&Abort
653330&Retry
653340&Ignore
653350&All
653360N&o to All
653370Yes to &All
653380BkSp
653390Tab
653400Esc
653410Enter
653420Space
653430PgUp
653440&Ignore
653450&Retry
653460Abort
653470&All
653480Cannot drag a form
653490Metafiles
653500Enhanced Metafiles
653510Icons
653520Bitmaps
653530Invalid input value
653540Invalid input value. Use escape key to abandon changes
653550Warning
653560Error
653570Information
653580Confirm
653590&Yes
653600Cannot make a visible window modal
653610Scrollbar property out of range
653620%s property out of range
653630Menu index out of range
653640Menu inserted twice
653650Sub-menu is not in menu
653660Not enough timers available
653670GroupIndex cannot be less than a previous menu item's GroupIndex
653680Cannot create form. No MDI forms are currently active
653690A control cannot have itself as its parent
653700OK
653710Cancel
653720&Yes
653730&No
653740&Help
653750&Close
653760Unknown picture file extension (.%s)
653770Unsupported clipboard format
653780Out of system resources
653790Canvas does not allow drawing
653800Invalid image size
653810Invalid ImageList
653820Unable to Replace Image
653830Invalid ImageList Index
653840Failed to read ImageList data from stream
653850Failed to write ImageList data to stream
653860Error creating window device context
653870Error creating window class
653880Cannot focus a disabled or invisible window
653890Control '%s' has no parent window
653900Cannot hide an MDI Child Form
653910Cannot change Visible in OnShow or OnHide
653920Resource %s not found
653930%s.Seek not implemented
653940Operation not allowed on sorted list
653950Too many rows or columns deleted
653960%s not in a class registration group
653970Property %s does not exist
653980Stream write error
653990Thread creation error: %s
654000Thread Error: %s (%d)
654010Tab position incompatible with current tab style
654020Tab style incompatible with current tab position
654030Bitmap image is not valid
654040Icon image is not valid
654050Metafile is not valid
654060Invalid image
654070Cannot change the size of an icon
654080Grid index out of range
654090Invalid stream format
654100''%s'' is not a valid component name
654110Invalid property value
654120Invalid property path
654130Invalid property value
654140Invalid data type for '%s'
654150List capacity out of bounds (%d)
654160List count out of bounds (%d)
654170List index out of bounds (%d)
654180Out of memory while expanding memory stream
654190Error reading %s%s%s: %s
654200Stream read error
654210Property is read-only
654220Failed to get data for '%s'
654230Failed to set data for '%s'
654240Unable to create directory
654250Ancestor for '%s' not found
654260Cannot assign a %s to a %s
654270Bits index out of range
654280Can't write to a read-only resource stream
654290CheckSynchronize called from thread $%x, which is NOT the main thread
654300Class %s not found
654310A class named %s already exists
654320List does not allow duplicates ($0%x)
654330A component named %s already exists
654340String list does not allow duplicates
654350Cannot create file "%s". %s
654360Fixed column count must be less than column count
654370Fixed row count must be less than row count
654380Cannot open file "%s". %s
654390Grid too large for operation
654400November
654410December
654420Sun
654430Mon
654440Tue
654450Wed
654460Thu
654470Fri
654480Sat
654490Sunday
654500Monday
654510Tuesday
654520Wednesday
654530Thursday
654540Friday
654550Saturday
654560Jul
654570Aug
654580Sep
654590Oct
654600Nov
654610Dec
654620January
654630February
654640March
654650April
654660May
654670June
654680July
654690August
654700September
654710October
654720Unexpected variant error
654730External exception %x
654740Assertion failed
654750Interface not supported
654760Exception in safecall method
654770%s (%s, line %d)
654780Abstract Error
654790Access violation at address %p in module '%s'. %s of address %p
654800System Error. Code: %d. %s
654810A call to an OS function failed
654820Jan
654830Feb
654840Mar
654850Apr
654860May
654870Jun
654880Variant method calls not supported
654890Read
654900Write
654910Error creating variant or safe array
654920Variant or safe array index out of bounds
654930Variant or safe array is locked
654940Invalid variant type conversion
654950Invalid variant operation
654960Invalid NULL variant operation
654970Invalid variant operation (%s%.8x) %s
654980Could not convert variant of type (%s) into type (%s)
654990Overflow while converting variant of type (%s) into type (%s)
655000Variant overflow
655010Invalid argument
655020Invalid variant type
655030Operation not supported
655040Integer overflow
655050Invalid floating point operation
655060Floating point division by zero
655070Floating point overflow
655080Floating point underflow
655090Invalid pointer operation
655100Invalid class typecast
655110Access violation at address %p. %s of address %p
655120Access violation
655130Stack overflow
655140Control-C hit
655150Privileged instruction
655160Exception %s in module %s at %p. %s%s
655170Application Error
655180Format '%s' invalid or incompatible with argument
655190No argument for format '%s'
655200'%s' is not a valid integer value
655210'%s' is not a valid floating point value
655220'%s' is not a valid boolean value
655230Invalid argument to time encode
655240Invalid argument to date encode
655250Out of memory
655260I/O error %d
655270File not found
655280Invalid filename
655290Too many open files
655300File access denied
655310Read beyond end of file
655320Disk full
655330Invalid numeric input
655340Division by zero
655350Range check error
module_namehintordfunction_name
ordentry_vafunction_name
10x105b4ckeyHook
20x105b84DelHook
30x105b58SetHook
module_namecheatengine.dll
flags0
timestamp0
version0.0
ordinal_base1
nFunctions3
nNames3
Names(3)0x1ba034
Functions(3)0x1ba028
NameOrdinals(3)0x1ba040

StringTable 040904E4

CompanyName
FileDescription
FileVersion0.0.0.120
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
ProductName
ProductVersion
Comments

VS_FIXEDFILEINFO

FileVersion0.0.0.120
ProductVersion0.0.0.120
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
02719744DLL06/19/1992 22:22:17#
15c115HTM#
1dbc3c23684AVI#
1e1a3c6172AVI#
1e343c6270AVI#
1e4e3c28108AVI#
1ebc3c17074AVI#
1f003c17374AVI#
1f443c15398AVI#
1f823c15702AVI#
2041a99846BMP(47 x 68)#
207f1e374BMP(32 x 16)#
208164714BMP(14 x 15)#
20d739726BMP(16 x 14)#
20da85714BMP(14 x 15)#
20ddf09846BMP(47 x 68)#
210581374BMP(32 x 16)#
2107d2374BMP(32 x 16)#
21248d1350BMP(16 x 17)#
224992726BMP(16 x 14)#
224cf3714BMP(14 x 15)#
2295de726BMP(16 x 14)#
229bb0374BMP(32 x 16)#
229db4374BMP(32 x 16)#
23e9f4162BMP(13 x 25)#
24014f2118BMP(50 x 20)#
240d71334BMP(21 x 18)#
240f25334BMP(21 x 18)#
2410d9334BMP(19 x 18)#
2466f621814BMP(144 x 144)#
24bc7b21814BMP(144 x 144)#
25120021814BMP(144 x 144)#
25678421814BMP(144 x 144)#
25bd0821814BMP(144 x 144)#
26128c21814BMP(144 x 144)#
26681021814BMP(144 x 144)#
26bd9421814BMP(144 x 144)#
27131821814BMP(144 x 144)#
27689c21814BMP(144 x 144)#
27be2021814BMP(144 x 144)#
2813a421814BMP(144 x 144)#
28692921814BMP(144 x 144)#
28cfe31302BMP(16 x 14)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] can't find file_offset of VA 0x0