filenamedup2patcher.dll
size223232 (0x36800)
md5956af58c96e32b416efba7c374bef0fe
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
4288032
1884446
156303192
1057
19807893
1583031916
155303191
154303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4fa173ee
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x9a00
SizeOfInitializedData0x2ca00
SizeOfUninitializedData0
AddressOfEntryPoint0x20d0
BaseOfCode0x1000
BaseOfData0xb000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x4f000
SizeOfHeaders0x400
CheckSum0x151e7
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

dUP 2.x Patcher (www.diablo2oo2.cjb.net)

Sections

namevavsizeraw sizeflags
.text0x10000x984a0x9a00RWX CODE
.rdata0xb0000x10120x1200R-- IDATA
.data0xd0000x157b80xa00RW- IDATA
.rsrc0x230000x2a3f40x2a400RWX IDATA
.reloc0x4e0000x95a0xa00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xbe700x1a2
IMPORT0xb2500x8c
RESOURCE0x230000x2a3f4
EXCEPTION00
SECURITY00
BASERELOC0x4e0000x848
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xb0000x244
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#503081252
BITMAPBTN_ABOUT_DOWN16401252
BITMAPBTN_ABOUT_OK_DOWN10001252
BITMAPBTN_ABOUT_OK_OVER10001252
BITMAPBTN_ABOUT_OK_UP10001252
BITMAPBTN_ABOUT_OVER16401252
BITMAPBTN_ABOUT_UP16401252
BITMAPBTN_EXIT_DOWN6321252
BITMAPBTN_EXIT_OVER6321252
BITMAPBTN_EXIT_UP6321252
BITMAPBTN_PATCH_DOWN16401252
BITMAPBTN_PATCH_OVER16401252
BITMAPBTN_PATCH_UP16401252
BITMAPBTN_REGP_OK_DOWN42641252
BITMAPBTN_REGP_OK_OVER42641252
BITMAPBTN_REGP_OK_UP42641252
BITMAP_BACK778641252
ICON#196401252
DIALOG#17801252
DIALOG#22241252
DIALOG#32001252
STRING#15601252
STRING#28321252
STRING#36841252
STRING#41961252
RCDATA#13681252
RCDATA#21441252
RCDATA#3417741252
RCDATA#497331252
GROUP_CURSOR#2201252
GROUP_ICON#500201252
idlangstring
00---START PATCHING---
10---PATCHING DONE---
20[OFFSET PATCH]
30[SEARCH & REPLACE PATCH]
40[REGISTRY PATCH]
50[EXPORT FILE]
60[TEXT PATCH]
70[GET REGISTRY VALUE]
80Inline Patch : Failed
90Inline Patch : OK
100Nothing patched!
110File patched!
120...done!
130Backup File:
140Copy to clipboard
150<-Back to releaseinfo
160Can not find the file. Search the file?
170File is in use -> using rename method
180Can not access the file. Maybe it's in use... Please close the file before patching! Try to access the file again now?
190Loading File:
200Can not open file!
210File Exist Check : OK
220No PE Signature found!
230Inline patch already applied
240unicode text detected
250MD5 Check : OK
260MD5 Check : Failed
270[FILE CHECK]
280ERROR
290OK
300CRC32 Check : OK
310[REGISTRY CHECK]
320Filesize Check : Failed
330Filesize Check : OK
340Filesize Check : skipped
350CRC32 Check : Failed
360CRC32 Check : skipped
370Byte not found! File is already patched!
380Can't find pattern! Trying next one...
410File already exist. Overwrite?
420overwriting existing file
430File Export : Failed
440setting file attributes
450executing file
460deleting file
470File Export : OK
480Signature Check : OK
490Signature Check : Failed
500Write Access : OK
510Write Access: Failed
module_namehintordfunction_name
user32.dll584ShowWindow
user32.dll573SetWindowTextA
user32.dll572SetWindowRgn
user32.dll571SetWindowPos
user32.dll601TrackPopupMenu
user32.dll562SetTimer
user32.dll534SetFocus
user32.dll531SetDlgItemTextA
user32.dll521SetClassLongA
user32.dll618UpdateWindow
user32.dll568SetWindowLongA
user32.dll518SetCapture
user32.dll509SendMessageA
user32.dll493ReleaseCapture
user32.dll481RegisterClassExA
user32.dll479RedrawWindow
user32.dll475PtInRect
user32.dll455OffsetRect
user32.dll433MessageBoxA
user32.dll418LoadStringA
user32.dll408LoadIconA
user32.dll404LoadCursorA
user32.dll402LoadBitmapA
user32.dll387IsDlgButtonChecked
user32.dll372InvalidateRect
user32.dll371IntersectRect
user32.dll343GetWindowRect
user32.dll338GetWindowLongA
user32.dll323GetSystemMetrics
user32.dll58CloseClipboard
user32.dll175EmptyClipboard
user32.dll456OpenClipboard
user32.dll524SetClipboardData
user32.dll233GetClientRect
user32.dll446MoveWindow
user32.dll320GetSysColor
user32.dll301GetParent
user32.dll265GetKeyState
user32.dll252GetDlgItemTextA
user32.dll250GetDlgItem
user32.dll249GetDlgCtrlID
user32.dll245GetDC
user32.dll244GetCursorPos
user32.dll221GetCapture
user32.dll216GetActiveWindow
user32.dll180EndDialog
user32.dll178EnableWindow
user32.dll170DrawTextA
user32.dll144DialogBoxParamA
user32.dll131DefWindowProcA
user32.dll86CreateWindowExA
user32.dll85CreatePopupMenu
user32.dll50CheckDlgButton
user32.dll21CallWindowProcA
user32.dll6AppendMenuA
kernel32.dll177FindFirstFileA
kernel32.dll362GetStdHandle
kernel32.dll761WriteFile
kernel32.dll199FlushFileBuffers
kernel32.dll39CompareStringA
kernel32.dll53CreateDirectoryA
kernel32.dll421GlobalAlloc
kernel32.dll432GlobalLock
kernel32.dll439GlobalUnlock
kernel32.dll173FindClose
kernel32.dll796lstrlenW
kernel32.dll795lstrlenA
kernel32.dll791lstrcpyA
kernel32.dll789lstrcmpiA
kernel32.dll787lstrcmpA
kernel32.dll785lstrcatA
kernel32.dll750WideCharToMultiByte
kernel32.dll746WaitForSingleObject
kernel32.dll733VirtualFree
kernel32.dll731VirtualAlloc
kernel32.dll721UnmapViewOfFile
kernel32.dll35CloseHandle
kernel32.dll46CopyFileA
kernel32.dll61CreateFileA
kernel32.dll62CreateFileMappingA
kernel32.dll79CreateProcessA
kernel32.dll86CreateThread
kernel32.dll105DeleteFileA
kernel32.dll157ExpandEnvironmentStringsA
kernel32.dll192FindResourceA
kernel32.dll209FreeLibrary
kernel32.dll230GetCommandLineA
kernel32.dll254GetCurrentDirectoryA
kernel32.dll279GetFileAttributesA
kernel32.dll284GetFileSize
kernel32.dll286GetFileTime
kernel32.dll306GetModuleFileNameA
kernel32.dll308GetModuleHandleA
kernel32.dll339GetProcAddress
kernel32.dll372GetSystemInfo
kernel32.dll388GetTempPathA
kernel32.dll406GetVersionExA
kernel32.dll490LoadLibraryA
kernel32.dll495LoadResource
kernel32.dll512MapViewOfFile
kernel32.dll516MoveFileA
kernel32.dll523MultiByteToWideChar
kernel32.dll600RtlMoveMemory
kernel32.dll602RtlZeroMemory
kernel32.dll632SetCurrentDirectoryA
kernel32.dll638SetEndOfFile
kernel32.dll639SetEnvironmentVariableA
kernel32.dll645SetFileAttributesA
kernel32.dll647SetFilePointer
kernel32.dll651SetFileTime
kernel32.dll696SizeofResource
kernel32.dll697Sleep
shell32.dll217ShellExecuteA
shell32.dll218ShellExecuteExA
gdi32.dll12BitBlt
gdi32.dll33CreateCompatibleBitmap
gdi32.dll34CreateCompatibleDC
gdi32.dll39CreateDIBSection
gdi32.dll47CreateFontIndirectA
gdi32.dll69CreateSolidBrush
gdi32.dll103ExtCreateRegion
gdi32.dll221GetStockObject
gdi32.dll235GetTextExtentPointA
gdi32.dll3AddFontResourceA
gdi32.dll362TextOutA
gdi32.dll345SetTextColor
gdi32.dll309SetBkMode
gdi32.dll308SetBkColor
gdi32.dll302SelectObject
gdi32.dll294RoundRect
gdi32.dll286RemoveFontResourceA
advapi32.dll487RegSetValueExA
advapi32.dll448RegDeleteValueA
advapi32.dll443RegCreateKeyExA
advapi32.dll464RegOpenKeyExA
advapi32.dll474RegQueryValueExA
advapi32.dll439RegCloseKey
comdlg32.dll10GetOpenFileNameA
comdlg32.dll12GetSaveFileNameA
ordentry_vafunction_name
10x22b0AddMsg
20x28ccCloseFileMapping
30x29b6CloseFileMapping_readonly
40x20ffGetPatcherWindowHandle
50x2110GetPluginDataMemory
60x6fa0GetRegDword
70x6f00GetRegString
80x2453LoadFileMapping
90xa6f0Reg_Delete_Value
100x6740SearchAndReplace
110xa740SetRegDword
120xa7a0SetRegString
130x20f9load_patcher
140x6d4cwrite_disk_file
module_namedup2patcher.dll
flags0
timestamp2012-05-02 17:50:38
version0.0
ordinal_base1
nFunctions14
nNames14
Names(14)0xbed0
Functions(14)0xbe98
NameOrdinals(14)0xbf08
offsetsizetypecomment
0223232DLL05/02/2012 17:50:38#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK