fake_ml_sockets (gamehack).dll

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	fake_ml_sockets (gamehack).dll
size	178688 (0x2ba00)
md5	61cd0d77ba141aaffc8eab583473c02f

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
261	29118	25
260	29118	10
259	29118	1
257	29118	4
257	26715	6
123	50727	3
1	0	119
261	29304	6
256	29304	1
255	29304	1
258	29304	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x5f6f3fbb
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	14.28
SizeOfCode	0x21c00
SizeOfInitializedData	0x9e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1b54
BaseOfCode	0x1000
BaseOfData	0x23000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x31000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x100
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x21a6e	0x21c00	R-X CODE
.rdata	0x23000	0x680f	0x6a00	R-- IDATA
.data	0x2a000	0x7c0	0x400	RW- IDATA
.idata	0x2b000	0x10ea	0x1200	R-- IDATA
.00cfg	0x2d000	0x109	0x200	R-- IDATA
.rsrc	0x2e000	0x43c	0x600	R-- IDATA
.reloc	0x2f000	0x10a1	0x1200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x29640	0x1cf
IMPORT	0x2b334	0x8c
RESOURCE	0x2e000	0x43c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x2f000	0xe24
DEBUG	0x27648	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x27680	0x40
Bound_IAT	0	0
IAT	0x2b000	0x334
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#2	381	0

module_name	hint	ord	function_name
lua5.1.dll	54		lua_getfield
lua5.1.dll	74		lua_newuserdata
lua5.1.dll	108		lua_toboolean
lua5.1.dll	84		lua_pushnil
lua5.1.dll	86		lua_pushstring
lua5.1.dll	62		lua_gettable
lua5.1.dll	77		lua_pcall
lua5.1.dll	82		lua_pushlightuserdata
lua5.1.dll	85		lua_pushnumber
lua5.1.dll	115		lua_touserdata
lua5.1.dll	111		lua_tolstring
lua5.1.dll	112		lua_tonumber
lua5.1.dll	78		lua_pushboolean
lua5.1.dll	116		lua_type
WS2_32.dll		116
WS2_32.dll		115
WS2_32.dll		111
WS2_32.dll		52
WS2_32.dll		23
WS2_32.dll		22
WS2_32.dll		19
WS2_32.dll		18
WS2_32.dll		16
WS2_32.dll		11
WS2_32.dll		9
WS2_32.dll		10
WS2_32.dll		4
WS2_32.dll		3
KERNEL32.dll	686		GetProcAddress
KERNEL32.dll	427		FreeLibrary
KERNEL32.dll	1486		VirtualQuery
KERNEL32.dll	692		GetProcessHeap
KERNEL32.dll	841		HeapFree
KERNEL32.dll	837		HeapAlloc
KERNEL32.dll	609		GetLastError
KERNEL32.dll	867		InitializeSListHead
KERNEL32.dll	286		DisableThreadLibraryCalls
KERNEL32.dll	745		GetSystemTimeAsFileTime
KERNEL32.dll	1101		QueryPerformanceCounter
KERNEL32.dll	1534		WideCharToMultiByte
KERNEL32.dll	1007		MultiByteToWideChar
KERNEL32.dll	1122		RaiseException
KERNEL32.dll	632		GetModuleHandleW
KERNEL32.dll	720		GetStartupInfoW
KERNEL32.dll	895		IsDebuggerPresent
KERNEL32.dll	902		IsProcessorFeaturePresent
KERNEL32.dll	1420		TerminateProcess
KERNEL32.dll	1389		SetUnhandledExceptionFilter
KERNEL32.dll	1453		UnhandledExceptionFilter
KERNEL32.dll	629		GetModuleHandleA
KERNEL32.dll	1364		SetThreadContext
KERNEL32.dll	21		AllocConsole
KERNEL32.dll	759		GetThreadContext
KERNEL32.dll	932		K32GetModuleInformation
KERNEL32.dll	1437		Thread32Next
KERNEL32.dll	1229		ResumeThread
KERNEL32.dll	1436		Thread32First
KERNEL32.dll	252		CreateToolhelp32Snapshot
KERNEL32.dll	134		CloseHandle
KERNEL32.dll	19		AddVectoredExceptionHandler
KERNEL32.dll	1215		RemoveVectoredExceptionHandler
KERNEL32.dll	1495		WaitForSingleObject
KERNEL32.dll	1405		Sleep
KERNEL32.dll	535		GetCurrentProcess
KERNEL32.dll	536		GetCurrentProcessId
KERNEL32.dll	243		CreateThread
KERNEL32.dll	540		GetCurrentThreadId
KERNEL32.dll	1044		OpenThread
KERNEL32.dll	1413		SuspendThread
MSVCP140D.dll	165		public: __thiscall std::_Lockit::~_Lockit(void) ??1_Lockit@std@@QAE@XZ
MSVCP140D.dll	662		void __cdecl std::_Xlength_error(char const *) ?_Xlength_error@std@@YAXPBD@Z
MSVCP140D.dll	109		public: __thiscall std::_Lockit::_Lockit(int) ??0_Lockit@std@@QAE@H@Z
VCRUNTIME140D.dll	1		_CxxThrowException
VCRUNTIME140D.dll	16		__CxxFrameHandler3
VCRUNTIME140D.dll	29		__current_exception_context
VCRUNTIME140D.dll	53		_except_handler4_common
VCRUNTIME140D.dll	37		__std_type_info_destroy_list
VCRUNTIME140D.dll	46		__vcrt_GetModuleFileNameW
VCRUNTIME140D.dll	47		__vcrt_GetModuleHandleW
VCRUNTIME140D.dll	49		__vcrt_LoadLibraryExW
VCRUNTIME140D.dll	28		__current_exception
VCRUNTIME140D.dll	70		memcpy
VCRUNTIME140D.dll	71		memmove
VCRUNTIME140D.dll	72		memset
VCRUNTIME140D.dll	33		__std_exception_copy
VCRUNTIME140D.dll	34		__std_exception_destroy
ucrtbased.dll	202		_cexit
ucrtbased.dll	232		_crt_atexit
ucrtbased.dll	409		_initterm
ucrtbased.dll	410		_initterm_e
ucrtbased.dll	322		_free_dbg
ucrtbased.dll	1382		terminate
ucrtbased.dll	1353		strcpy_s
ucrtbased.dll	1349		strcat_s
ucrtbased.dll	142		__stdio_common_vsprintf_s
ucrtbased.dll	969		_wmakepath_s
ucrtbased.dll	997		_wsplitpath_s
ucrtbased.dll	1407		wcscpy_s
ucrtbased.dll	411		_invalid_parameter
ucrtbased.dll	268		_execute_onexit_table
ucrtbased.dll	738		_register_onexit_function
ucrtbased.dll	407		_initialize_onexit_table
ucrtbased.dll	406		_initialize_narrow_environment
ucrtbased.dll	220		_configure_narrow_argv
ucrtbased.dll	750		_seh_filter_dll
ucrtbased.dll	231		_crt_at_quick_exit
ucrtbased.dll	1273		malloc
ucrtbased.dll	199		_callnewh
ucrtbased.dll	1352		strcpy
ucrtbased.dll	1350		strcmp
ucrtbased.dll	879		_wassert
ucrtbased.dll	1362		strncpy
ucrtbased.dll	1358		strlen
ucrtbased.dll	1348		strcat
ucrtbased.dll	20		_CrtDbgReport
ucrtbased.dll	130		__stdio_common_vfprintf
ucrtbased.dll	1192		freopen
ucrtbased.dll	69		__acrt_iob_func
ucrtbased.dll	21		_CrtDbgReportW

ord	entry_va	function_name
1	0x1b81	DoPulse
2	0x1587	InitModule
3	0x19fb	RegisterFunctions
4	0x1307	ResourceStopped
5	0x10b9	ShutdownModule

module_name	ml_sockets.dll
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	5
nNames	5
Names(5)	0x2967c
Functions(5)	0x29668
NameOrdinals(5)	0x29690

show previews

offset	size	type	comment
0	178688	DLL	09/26/2020 13:18:51	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK