eqmain.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	eqmain.dll
size	954368 (0xe9000)
md5	520bb116e53f7baf28d9c403dc095786

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
105	2067	5
15	3077	28
93	2067	2
95	3077	189
25	9210	2
28	9178	2
29	9178	1
93	2179	9
1	0	180
96	3077	124
92	3077	1
90	3077	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x43615ce3
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0xb7000
SizeOfInitializedData	0x23d000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x9b655
BaseOfCode	0x1000
BaseOfData	0xb8000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2f5000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xb60ba	0xb7000	R-X CODE
.rdata	0xb8000	0x19f6d	0x1a000	R-- IDATA
.data	0xd2000	0x212b7c	0x7000	RW- IDATA
.reloc	0x2e5000	0xf81a	0x10000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xd1f10	0x5d
IMPORT	0xd1174	0x8c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x2e5000	0x9f98
DEBUG	0xb82a0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xb8000	0x2a0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
WS2_32.dll		116
WS2_32.dll		115
WS2_32.dll		6
WS2_32.dll		20
WS2_32.dll		17
WS2_32.dll		15
WS2_32.dll		111
WS2_32.dll		3
WS2_32.dll		23
WS2_32.dll		10
WS2_32.dll		21
WS2_32.dll		7
WS2_32.dll		9
WS2_32.dll		8
WS2_32.dll		11
WS2_32.dll		2
WS2_32.dll		57
WS2_32.dll		52
WS2_32.dll		12
DINPUT8.dll			DirectInput8Create
KERNEL32.dll	77		CreateFileA
KERNEL32.dll	839		Sleep
KERNEL32.dll	903		WideCharToMultiByte
KERNEL32.dll	469		GetTickCount
KERNEL32.dll	537		InitializeCriticalSection
KERNEL32.dll	122		DeleteCriticalSection
KERNEL32.dll	143		EnterCriticalSection
KERNEL32.dll	583		LeaveCriticalSection
KERNEL32.dll	52		CompareStringA
KERNEL32.dll	864		UnhandledExceptionFilter
KERNEL32.dll	335		GetEnvironmentStringsW
KERNEL32.dll	238		FreeEnvironmentStringsW
KERNEL32.dll	333		GetEnvironmentStrings
KERNEL32.dll	237		FreeEnvironmentStringsA
KERNEL32.dll	431		GetStartupInfoA
KERNEL32.dll	350		GetFileType
KERNEL32.dll	433		GetStdHandle
KERNEL32.dll	46		CloseHandle
KERNEL32.dll	556		IsBadWritePtr
KERNEL32.dll	883		VirtualAlloc
KERNEL32.dll	886		VirtualFree
KERNEL32.dll	520		HeapCreate
KERNEL32.dll	522		HeapDestroy
KERNEL32.dll	571		LCMapStringW
KERNEL32.dll	570		LCMapStringA
KERNEL32.dll	472		GetTimeZoneInformation
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	315		GetCurrentProcessId
KERNEL32.dll	663		QueryPerformanceCounter
KERNEL32.dll	437		GetStringTypeW
KERNEL32.dll	434		GetStringTypeA
KERNEL32.dll	565		IsValidCodePage
KERNEL32.dll	567		IsValidLocale
KERNEL32.dll	165		EnumSystemLocalesA
KERNEL32.dll	364		GetLocaleInfoA
KERNEL32.dll	473		GetUserDefaultLCID
KERNEL32.dll	252		GetCPInfo
KERNEL32.dll	827		SetUnhandledExceptionFilter
KERNEL32.dll	479		GetVersionExA
KERNEL32.dll	342		GetFileAttributesA
KERNEL32.dll	780		SetFileAttributesA
KERNEL32.dll	338		GetExitCodeProcess
KERNEL32.dll	96		CreateProcessA
KERNEL32.dll	361		GetLastError
KERNEL32.dll	404		GetPrivateProfileStringA
KERNEL32.dll	921		WritePrivateProfileStringA
KERNEL32.dll	53		CompareStringW
KERNEL32.dll	889		VirtualProtect
KERNEL32.dll	791		SetHandleCount
KERNEL32.dll	470		GetTimeFormatA
KERNEL32.dll	530		HeapSize
KERNEL32.dll	854		TlsGetValue
KERNEL32.dll	855		TlsSetValue
KERNEL32.dll	853		TlsFree
KERNEL32.dll	365		GetLocaleInfoW
KERNEL32.dll	771		SetEndOfFile
KERNEL32.dll	774		SetEnvironmentVariableA
KERNEL32.dll	543		InterlockedExchange
KERNEL32.dll	810		SetStdHandle
KERNEL32.dll	395		GetOEMCP
KERNEL32.dll	245		GetACP
KERNEL32.dll	550		IsBadCodePtr
KERNEL32.dll	553		IsBadReadPtr
KERNEL32.dll	891		VirtualQuery
KERNEL32.dll	618		MulDiv
KERNEL32.dll	478		GetVersion
KERNEL32.dll	619		MultiByteToWideChar
KERNEL32.dll	916		WriteFile
KERNEL32.dll	681		ReadFile
KERNEL32.dll	188		FileTimeToSystemTime
KERNEL32.dll	187		FileTimeToLocalFileTime
KERNEL32.dll	398		GetPrivateProfileIntA
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	312		GetCurrentDirectoryA
KERNEL32.dll	782		SetFilePointer
KERNEL32.dll	229		FlushFileBuffers
KERNEL32.dll	714		RtlUnwind
KERNEL32.dll	667		RaiseException
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	375		GetModuleHandleA
KERNEL32.dll	847		TerminateProcess
KERNEL32.dll	314		GetCurrentProcess
KERNEL32.dll	448		GetSystemTimeAsFileTime
KERNEL32.dll	528		HeapReAlloc
KERNEL32.dll	518		HeapAlloc
KERNEL32.dll	524		HeapFree
KERNEL32.dll	318		GetCurrentThreadId
KERNEL32.dll	264		GetCommandLineA
KERNEL32.dll	197		FindClose
KERNEL32.dll	331		GetDriveTypeA
KERNEL32.dll	201		FindFirstFileA
KERNEL32.dll	353		GetFullPathNameA
KERNEL32.dll	319		GetDateFormatA
KERNEL32.dll	852		TlsAlloc
KERNEL32.dll	795		SetLastError
KERNEL32.dll	443		GetSystemInfo
USER32.dll	442		LoadCursorFromFileA
USER32.dll	290		GetKeyboardLayout
USER32.dll	469		MapVirtualKeyA
USER32.dll	671		ToAscii
USER32.dll	582		SetCaretPos
USER32.dll	598		SetFocus
USER32.dll	591		SetCursorPos
USER32.dll	589		SetCursor
USER32.dll	654		ShowCursor
USER32.dll	267		GetCursorPos
USER32.dll	279		GetForegroundWindow
USER32.dll	561		ScreenToClient
USER32.dll	599		SetForegroundWindow
USER32.dll	579		SetActiveWindow
USER32.dll	511		PeekMessageA
USER32.dll	682		TranslateMessage
USER32.dll	161		DispatchMessageA
USER32.dll	643		SetWindowPos
USER32.dll	441		LoadCursorA
USER32.dll	366		GetWindowLongA
USER32.dll	640		SetWindowLongA
USER32.dll	13		BeginPaint
USER32.dll	200		EndPaint
USER32.dll	515		PostQuitMessage
USER32.dll	142		DefWindowProcA
USER32.dll	158		DialogBoxParamA
USER32.dll	198		EndDialog
USER32.dll	478		MessageBoxA
USER32.dll	153		DestroyWindow
USER32.dll	727		wsprintfW
USER32.dll	1		AdjustWindowRect
USER32.dll	255		GetClientRect
USER32.dll	372		GetWindowRect
ADVAPI32.dll	457		RegCloseKey
ADVAPI32.dll	482		RegOpenKeyExA
ADVAPI32.dll	492		RegQueryValueExA
IMM32.dll	21		ImmAssociateContext
IMM32.dll	115		ImmSetCompositionWindow
IMM32.dll	94		ImmNotifyIME
IMM32.dll	102		ImmReleaseContext
IMM32.dll	72		ImmGetProperty
IMM32.dll	51		ImmGetCompositionStringW
IMM32.dll	71		ImmGetOpenStatus
IMM32.dll	53		ImmGetContext
IMM32.dll	56		ImmGetConversionStatus

ord	entry_va	function_name
1	0x67b0	new_dll_main
2	0x6b00	dll_main

module_name	eqmain.dll
flags	0
timestamp	2005-10-27 23:04:01
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0xd1f40
Functions(2)	0xd1f38
NameOrdinals(2)	0xd1f48

show previews

offset	size	type	comment
0	954368	DLL	10/27/2005 23:04:03	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK