revemu.dll

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	revemu.dll
size	2470912 (0x25b400)
md5	8ecf90016ad2a7b7d94a3bac42d6835f

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, PECompact2 compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
152	20115	18
158	40219	69
147	30729	19
1	0	263
171	40219	89
170	40219	653
0	0	56
175	40219	208
155	40219	1
154	40219	1
157	40219	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x53dd79e6
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0x352c00
SizeOfInitializedData	0x3a8400
SizeOfUninitializedData	0
AddressOfEntryPoint	0x97b60
BaseOfCode	0x1000
BaseOfData	0x354000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x2382000
SizeOfHeaders	0x400
CheckSum	0x26b1ce
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PeCompact 2.xx (BitSum Technologies / v2.0)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x237e000	0x259200	RWX CODE
.rsrc	0x237f000	0x2000	0x1c00	RWX CODE
.reloc	0x2381000	0x200	0x200	RW- IDATA

Data Directory

type	va	size
EXPORT	0x237f212	0x612
IMPORT	0x237fc24	0x25d
RESOURCE	0x237f000	0x20a
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x2381000	0x18
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BIN	#102	200	1252
MANIFEST	#2	346	1252

module_name	ord	function_name
kernel32.dll		LoadLibraryA
kernel32.dll		GetProcAddress
kernel32.dll		VirtualAlloc
kernel32.dll		VirtualFree
SHLWAPI.dll		StrStrIA
WS2_32.dll	55
PSAPI.DLL		GetProcessImageFileNameW
USER32.dll		ReleaseDC
GDI32.dll		CreateCompatibleDC
WINHTTP.dll		WinHttpQueryDataAvailable
ADVAPI32.dll		RegisterEventSourceA
OLEAUT32.dll	24

ord	entry_va	function_name
1	0x6e20	AudioSinkList
2	0x6e20	CreateAudioDevice
3	0x481a0	CreateInterface
4	0x6e20	ServiceAudio
5	0x6e20	SetAudioMixFragmentMilliseconds
6	0xd040	Steam_BConnected
7	0x40380	Steam_BGetCallback
8	0xd040	Steam_BLoggedOn
9	0xd040	Steam_BReleaseSteamPipe
10	0x341320	Steam_ConnectToGlobalUser
11	0x341320	Steam_CreateGlobalUser
12	0x341320	Steam_CreateLocalUser
13	0x341320	Steam_CreateSteamPipe
14	0x40420	Steam_FreeLastCallback
15	0xd040	Steam_GSBLoggedOn
16	0xd040	Steam_GSBSecure
17	0x11c0	Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
18	0xc5d0	Steam_GSGetSteamID
19	0x1b73a0	Steam_GSLogOff
20	0x1b73a0	Steam_GSLogOn
21	0x11c0	Steam_GSRemoveUserConnect
22	0x11c0	Steam_GSSendSteam2UserConnect
23	0x11c0	Steam_GSSendSteam3UserConnect
24	0x11c0	Steam_GSSendUserDisconnect
25	0x11c0	Steam_GSSendUserStatusResponse
26	0x11c0	Steam_GSSetServerType
27	0x1b73a0	Steam_GSSetSpawnCount
28	0x11c0	Steam_GSUpdateStatus
29	0xd040	Steam_GetAPICallResult
30	0x6e20	Steam_GetGSHandle
31	0x6e20	Steam_InitiateGameConnection
32	0x1b73a0	Steam_LogOff
33	0x1b73a0	Steam_LogOn
34	0x1b73a0	Steam_ReleaseUser
35	0x1b73a0	Steam_SetLocalIPBinding
36	0x1b73a0	Steam_TerminateGameConnection
37	0x40380	Rev_Steam_BGetCallback
101	0x699e0	Rev_BGetPlayerInfoBySteamID
102	0x69a30	Rev_BGetPlayerInfoByUserID

module_name
flags	0
timestamp	2014-08-02 23:52:20
version	0.0
ordinal_base	1
nFunctions	102
nNames	39
Names(39)	0x237f288
Functions(102)	0x237f324
NameOrdinals(39)	0x237f23a

show previews

offset	size	type	comment
0	2470912	DLL	08/02/2014 23:53:10	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x2336000

[?] can't find file_offset of VA 0x4ba98a