filenameLSHard.dll
size139776 (0x22200)
md5bbba41b209e2382b114a1e3ffa9ba6cd
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
1081686
109507276
123507272
131307291
1473072924
152201155
158303196
1703031911
171303198
1563031911
10468
1753031935
155303191
157303191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x4e11b8db
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2122
Magic0x10b
LinkerVersion10.0
SizeOfCode0x2a400
SizeOfInitializedData0x1e800
SizeOfUninitializedData0
AddressOfEntryPoint0x4d001
BaseOfCode0x1000
BaseOfData0x2c000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x50000
SizeOfHeaders0x400
CheckSum0x55f68
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

ASPack v2.12

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

namevavsizeraw sizeflags
.text0x10000x2b0000x12600RWX CODE IDATA
.rdata0x2c0000xa0000x9400RW- IDATA
.data0x360000x120000x2a00RW- IDATA
.rsrc0x480000x10000x200RW- IDATA
.reloc0x490000x40000x2000RW- IDATA DISCARDABLE
.aspack0x4d0000x20000x1800RWX CODE IDATA
.adata0x4f0000x10000RWX IDATA

Data Directory

typevasize
EXPORT0x339c00x1875
IMPORT0x4e0080x3d0
RESOURCE0x480000x39c
EXCEPTION00
SECURITY00
BASERELOC0x4dfb08
DEBUG0x2c7700x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
00x100000
typenamesizecp
MANIFEST#28331252
module_namehintordfunction_name
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleA
kernel32.dllLoadLibraryA
mfc100.dll4105
msvcr100.dll_initterm
user32.dllWaitForInputIdle
gdi32.dllCreateDIBSection
advapi32.dllRevertToSelf
shlwapi.dllSHGetValueA
ole32.dllCoInitialize
flsystem.dllint __cdecl FrameToSecond(int)

?FrameToSecond@@YAHH@Z

avsmath.dllpublic: class CAvsVec3f & __thiscall CAvsVec3f::operator*=(class CAvsVec3f const &)

??XCAvsVec3f@@QAEAAV0@ABV0@@Z

datacore.dllpublic: virtual int __thiscall CEfxPacket::GetKeyDatas(void *, int)

?GetKeyDatas@CEfxPacket@@UAEHPAXH@Z

lscommon.dllpublic: virtual __thiscall CFileEnum::~CFileEnum(void)

??1CFileEnum@@UAE@XZ

winmm.dlltimeKillEvent
ws2_32.dll18
msvfw32.dllICSendMessage
avifil32.dllAVIFileInit
setupapi.dllSetupDiGetDeviceRegistryPropertyA
ordentry_vafunction_name
10x49e0??0BOUND@@QAE@ABU0@@Z
20x4a60??0BOUND@@QAE@XZ
30x5870??0CEfxPacket@@QAE@ABV0@@Z
40x2120??0CFileEnum@@QAE@ABV0@@Z
50x4cf0??0CG_EFX@@QAE@ABU0@@Z
60x4c30??0CG_EFX@@QAE@XZ
70x53d0??0CG_INOUT@@QAE@ABU0@@Z
80x5300??0CG_INOUT@@QAE@XZ
90x4ec0??0CG_MOVE@@QAE@ABU0@@Z
100x4df0??0CG_MOVE@@QAE@XZ
110x2840??0CG_POS@@QAE@ABU0@@Z
120x4a60??0CG_POS@@QAE@XZ
130x5750??0CG_SCROLL@@QAE@ABU0@@Z
140x4a60??0CG_SCROLL@@QAE@XZ
150x50d0??0CG_SHOW@@QAE@ABU0@@Z
160x4f90??0CG_SHOW@@QAE@XZ
170x55b0??0CG_TEMPL@@QAE@ABU0@@Z
180x5480??0CG_TEMPL@@QAE@XZ
190x4710??0CInterpolate@@QAE@ABV0@@Z
200x1000??0CViewDC@@QAE@ABV0@@Z
210x17ef0??0CViewDC@@QAE@XZ
220x18ed0??0CViewTracker@@QAE@XZ
230x4b90??0ICGAppearFactory@@QAE@ABU0@@Z
240x4b80??0ICGAppearFactory@@QAE@XZ
250x4b20??0ICGDC@@QAE@ABU0@@Z
260x2070??0ICGDC@@QAE@XZ
270x4bc0??0ICGFace@@QAE@ABU0@@Z
280x4bb0??0ICGFace@@QAE@XZ
290x4ba0??0ICGFaceUP@@QAE@ABU0@@Z
300x23b0??0ICGFaceUP@@QAE@XZ
310x4b50??0ICGPrivateFactory@@QAE@ABU0@@Z
320x4b40??0ICGPrivateFactory@@QAE@XZ
330x4be0??0ICGRenderTool@@QAE@ABU0@@Z
340x4bd0??0ICGRenderTool@@QAE@XZ
350x4b70??0ICGSpecialFactory@@QAE@ABU0@@Z
360x4b60??0ICGSpecialFactory@@QAE@XZ
370x5800??0IPostilFactorys@@QAE@ABU0@@Z
380x57f0??0IPostilFactorys@@QAE@XZ
390x5470??0ITempCGFactory@@QAE@ABU0@@Z
400x5460??0ITempCGFactory@@QAE@XZ
410x4ac0??0LSSTATE@@QAE@XZ
420x5810??1CClips@@QAE@XZ
430x4c80??1CG_EFX@@QAE@XZ
440x5360??1CG_INOUT@@QAE@XZ
450x4e50??1CG_MOVE@@QAE@XZ
460x5020??1CG_SHOW@@QAE@XZ
470x5500??1CG_TEMPL@@QAE@XZ
480x17ee0??1CViewDC@@UAE@XZ
490x4a30??4BOUND@@QAEAAU0@ABU0@@Z
500x5940??4CEfxPacket@@QAEAAV0@ABV0@@Z
510x2180??4CFileEnum@@QAEAAV0@ABV0@@Z
520x4d70??4CG_EFX@@QAEAAU0@ABU0@@Z
530x4f50??4CG_INOUT@@QAEAAU0@ABU0@@Z
540x4f50??4CG_MOVE@@QAEAAU0@ABU0@@Z
550x4bf0??4CG_POS@@QAEAAU0@ABU0@@Z
560x57d0??4CG_SCROLL@@QAEAAU0@ABU0@@Z
570x5230??4CG_SHOW@@QAEAAU0@ABU0@@Z
580x10c0??4CG_SPE@@QAEAAU0@ABU0@@Z
590x56c0??4CG_TEMPL@@QAEAAU0@ABU0@@Z
600x4740??4CInterpolate@@QAEAAV0@ABV0@@Z
610x4b10??4CLCompoundWriter@@QAEAAV0@ABV0@@Z
620x4b10??4CMatterEnum@@QAEAAV0@ABV0@@Z
630x1020??4CViewDC@@QAEAAV0@ABV0@@Z
640x10a0??4CViewTracker@@QAEAAV0@ABV0@@Z
650x4a70??4FLNAME@@QAEAAV0@ABV0@@Z
660x4b30??4ICGAppearFactory@@QAEAAU0@ABU0@@Z
670x4b30??4ICGDC@@QAEAAU0@ABU0@@Z
680x4b30??4ICGFace@@QAEAAU0@ABU0@@Z
690x4b30??4ICGFaceUP@@QAEAAU0@ABU0@@Z
700x4b30??4ICGPrivateFactory@@QAEAAU0@ABU0@@Z
710x4b30??4ICGRenderTool@@QAEAAU0@ABU0@@Z
720x4b30??4ICGSpecialFactory@@QAEAAU0@ABU0@@Z
730x4b30??4IPostilFactorys@@QAEAAU0@ABU0@@Z
740x4b30??4ITempCGFactory@@QAEAAU0@ABU0@@Z
750x4b10??4LSSTATE@@QAEAAU0@ABU0@@Z
760x4650??5@YGAAVCArchive@@AAV0@AAVCAvsVec3f@@@Z
770x4570??6@YGAAVCArchive@@AAV0@AAVCAvsVec3f@@@Z
780x4a60??BFLNAME@@QAEPBDXZ
790x2dc34??_7CEfxPacket@@6B@
800x2ce60??_7CFileEnum@@6B@
810x2dab8??_7CInterpolate@@6B@
820x2ca40??_7CViewDC@@6B@
830x2db44??_7ICGAppearFactory@@6B@
840x2cccc??_7ICGDC@@6B@
850x2db74??_7ICGFace@@6B@
860x2ce6c??_7ICGFaceUP@@6B@
870x2dac4??_7ICGPrivateFactory@@6B@
880x2db98??_7ICGRenderTool@@6B@
890x2db08??_7ICGSpecialFactory@@6B@
900x2dc20??_7IPostilFactorys@@6B@
910x2dbc4??_7ITempCGFactory@@6B@
920x18f60?Clear@CViewDC@@QAEXXZ
930x4980?ClearBound@BOUND@@QAEXXZ
940x4920?CubicEquationd@@YANNNNN@Z
950x48a0?CubicEquationd@@YAXNNNNAAN@Z
960x4900?CubicEquationdv@@YAXPAN0@Z
970x4840?CubicEquationf@@YAMMMMM@Z
980x47c0?CubicEquationf@@YAXMMMMAAM@Z
990x4820?CubicEquationfv@@YAXPAM0@Z
1000x18f00?DotRect@CViewDC@@QAEXPBUtagRECT@@@Z
1010x4550?ForceState@LSSTATE@@QAEXKH@Z
1020x1f400?GetAudioParam@@YA?AUAUDIOPARAMSET@@PAUIDataCore@@@Z
1030x26c20?GetColor@SAFERECT@@YAKXZ
1040x4a60?GetName@FLNAME@@QAEPBDXZ
1050x2830?GetState@LSSTATE@@QAEKXZ
1060x26c00?GetTCColor@@YAKXZ
1070x18a90?GetTrueRect@CViewTracker@@QBEXPAURECTF@@@Z
1080x26c30?GetValue@SAFERECT@@YA?AURECTF@@XZ
1090x17ec0?Invalidate@CViewDC@@QAEXXZ
1100x4ae0?InvertState@LSSTATE@@QAEXK@Z
1110x18ee0?IsCapture@CViewDC@@QAEHXZ
1120x26240LS_CleanUp
1130x1b690?LS_CreateHardCore@@YAPAUIHardCore@@PAUHHDINFO__@@P6AKPBDPAUHBITMAP__@@H@Z@Z
1140x18910?LS_GetHelHard@@YAPAUIHEL@@XZ
1150x18f80?LinkTo@CViewDC@@QAEHPAUIView@@@Z
1160x4af0?ModifyState@LSSTATE@@QAEXKK@Z
1170x254a0?NormalDrawCG@@YAXPAUEFXPARAM@@HHPAURECTF@@PAVCAvsMatrixL@@@Z
1180x22d90?NormalDrawCG@@YAXPAUEFXPARAM@@HHQAVCAvsVec2f@@PAVCAvsMatrixL@@@Z
1190x232b0?NormalDrawCG@@YAXPAUEFXPARAM@@KPAXIPAGI@Z
1200x227a0?NormalDrawCG_CalcMatrix@@YAXPAUEFXPARAM@@@Z
1210x188f0?SafeReleaseHard@@YAXXZ
1220x17ea0?SetCapture@CViewDC@@QAEXXZ
1230x26c10?SetColor@SAFERECT@@YAXK@Z
1240x4ad0?SetState@LSSTATE@@QAEXK@Z
1250x26bf0?SetTCColor@@YAXK@Z
1260x26c60?SetValue@SAFERECT@@YAXPAURECTF@@@Z
1270x1ab80?StartTool@@YAHPBDPAD0@Z
1280x22a90?SurfaceDim@@YA?AUtagSIZE@@PAUIDirect3DTexture9@@@Z
1290x237f0?TextureDim@@YA?AUtagSIZE@@PAUIDirect3DTexture9@@@Z
1300x1ab20?Tool1394Output@@YAHPAUIHardCore@@PBD1@Z
1310x1a280?Track@CViewTracker@@QAEHPAUIView@@VCPoint@@@Z
1320x49b0?Zero@BOUND@@QAEXXZ
1330x21db0?_ClearTarget@@YIXPAUIDirect3DDevice9@@HHKM@Z
1340x21c90?_ColorFill@@YAJPAUIDirect3DDevice9@@PAUIDirect3DTexture9@@PAUtagRECT@@K@Z
1350x22980?_DrawIndexedPrimitive@@YAJPAUIDirect3DDevice9@@W4_D3DPRIMITIVETYPE@@KPAXKPAGK@Z
1360x22880?_DrawPrimitive@@YAJPAUIDirect3DDevice9@@W4_D3DPRIMITIVETYPE@@KPAXK@Z
1370x21df0?_SetOP_EndStage@@YIXHPAUIDirect3DDevice9@@@Z
1380x21f70?_SetOP_ModulateCurrent@@YIXHPAUIDirect3DDevice9@@@Z
1390x21fe0?_SetOP_ModulateFactor@@YIXHPAUIDirect3DDevice9@@@Z
1400x21ee0?_SetOP_ModulateFactor@@YIXPAUIDirect3DDevice9@@@Z
1410x22050?_SetOP_SelectColorModulate2Alpha@@YIXPAUIDirect3DDevice9@@@Z
1420x22140?_SetOP_SelectColorModulateAlpha@@YIXPAUIDirect3DDevice9@@@Z
1430x21e90?_SetOP_SelectTexture@@YIXHPAUIDirect3DDevice9@@@Z
1440x21e20?_SetOP_SelectTexture@@YIXPAUIDirect3DDevice9@@@Z
1450x221f0?_SetTransform@@YIXPAUIDirect3DDevice9@@PAVCAvsMatrixL@@1@Z
1460x221d0?_SetTransform@@YIXPAUIDirect3DDevice9@@PAVCAvsMatrixL@@@Z
1470x21d40?_StencelMode@@YIXPAUIDirect3DDevice9@@HH@Z
1480x21cd0?_SurfaceBlt@@YAJPAUIUnknown@@PAUIDirect3DTexture9@@PAUtagRECT@@12@Z
1490x18dd0?gethardexp@@YAIXZ
1500x18ea0sethardexp_HCSX
module_nameLSHard.dll
flags0
timestamp2011-07-04 12:57:59
version0.0
ordinal_base1
nFunctions150
nNames150
Names(150)0x33c40
Functions(150)0x339e8
NameOrdinals(150)0x33e98
offsetsizetypecomment
0139776DLL07/04/2011 12:58:03#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x0