MasterFX.dll

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	MasterFX.dll
size	321024 (0x4e600)
md5	0858406fdcceaa3c5fdf89ff278327c1

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
147	30729	12
257	26131	4
199	41118	1
259	26131	2
261	26131	15
260	26131	9
257	25711	5
1	0	63
261	26730	8
260	26730	1
261	26430	1
256	26430	1
255	26430	1
258	26430	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5bca210d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	14.14
SizeOfCode	0x31e00
SizeOfInitializedData	0x1ce00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x3238c
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x53000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x31c84	0x31e00	R-X CODE
.rdata	0x33000	0xf172	0xf200	R-- IDATA
.data	0x43000	0x7290	0x6a00	RW- IDATA
.pdata	0x4b000	0x57d8	0x5800	R-- IDATA
.rsrc	0x51000	0x1e0	0x200	R-- IDATA
.reloc	0x52000	0xd34	0xe00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x419f0	0x48
IMPORT	0x41a38	0xb4
RESOURCE	0x51000	0x1e0
EXCEPTION	0x4b000	0x57d8
SECURITY	0	0
BASERELOC	0x52000	0xd34
DEBUG	0x40b90	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x40bf0	0x100
Bound_IAT	0	0
IAT	0x33000	0x1d0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#2	381	0

module_name	hint	function_name
OPENGL32.dll	81	glEnd
OPENGL32.dll	10	glBegin
OPENGL32.dll	124	glGetString
OPENGL32.dll	355	wglGetProcAddress
OPENGL32.dll	319	glVertex2f
OPENGL32.dll	11	glBindTexture
OPENGL32.dll	351	wglGetCurrentDC
KERNEL32.dll	871	InitializeSListHead
KERNEL32.dll	1234	RtlLookupFunctionEntry
KERNEL32.dll	1241	RtlVirtualUnwind
KERNEL32.dll	1460	UnhandledExceptionFilter
KERNEL32.dll	1395	SetUnhandledExceptionFilter
KERNEL32.dll	539	GetCurrentProcess
KERNEL32.dll	1426	TerminateProcess
KERNEL32.dll	900	IsProcessorFeaturePresent
KERNEL32.dll	893	IsDebuggerPresent
KERNEL32.dll	540	GetCurrentProcessId
KERNEL32.dll	748	GetSystemTimeAsFileTime
KERNEL32.dll	1097	QueryPerformanceCounter
KERNEL32.dll	1227	RtlCaptureContext
KERNEL32.dll	544	GetCurrentThreadId
MSVCP140.dll	654	void __cdecl std::_Xlength_error(char const * __ptr64) ?_Xlength_error@std@@YAXPEBD@Z
VCRUNTIME140.dll	8	__C_specific_handler
VCRUNTIME140.dll	33	__std_exception_copy
VCRUNTIME140.dll	34	__std_exception_destroy
VCRUNTIME140.dll	1	_CxxThrowException
VCRUNTIME140.dll	62	memset
VCRUNTIME140.dll	37	__std_type_info_destroy_list
VCRUNTIME140.dll	14	__CxxFrameHandler3
VCRUNTIME140.dll	60	memcpy
VCRUNTIME140.dll	61	memmove
api-ms-win-crt-heap-l1-1-0.dll	26	realloc
api-ms-win-crt-heap-l1-1-0.dll	24	free
api-ms-win-crt-heap-l1-1-0.dll	25	malloc
api-ms-win-crt-heap-l1-1-0.dll	8	_callnewh
api-ms-win-crt-stdio-l1-1-0.dll		__acrt_iob_func
api-ms-win-crt-stdio-l1-1-0.dll	3	__stdio_common_vfprintf
api-ms-win-crt-stdio-l1-1-0.dll	13	__stdio_common_vsprintf
api-ms-win-crt-runtime-l1-1-0.dll	52	_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	22	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	51	_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll	55	_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll	60	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	24	_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll	57	_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll	30	_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	34	_execute_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	63	_seh_filter_dll
api-ms-win-crt-runtime-l1-1-0.dll	54	_initterm
api-ms-win-crt-string-l1-1-0.dll	41	_strdup

ord	entry_va	function_name
1	0x1190	plugMain

module_name	MasterFX.dll
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x41a1c
Functions(1)	0x41a18
NameOrdinals(1)	0x41a20

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	315440	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK