mw2_dummy.dll

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	mw2_dummy.dll
size	1876480 (0x1ca200)
md5	cc77fe112ff862fca691f649a6edabc8

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
259	30795	31
261	30795	197
260	30795	101
260	30034	17
259	30034	10
261	30034	109
253	28518	1
257	30795	21
1	0	259
265	30153	50
259	30153	1
255	30153	1
258	30153	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x656fb329
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	14.29
SizeOfCode	0xdb200
SizeOfInitializedData	0xf2800
SizeOfUninitializedData	0
AddressOfEntryPoint	0xa1dec
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x1d3000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xdb07c	0xdb200	R-X CODE
.rdata	0xdd000	0x8d54c	0x8d600	R-- IDATA
.data	0x16b000	0x5b788	0x57c00	RW- IDATA
.pdata	0x1c7000	0x75f0	0x7600	R-- IDATA
_RDATA	0x1cf000	0xf4	0x200	R-- IDATA
.rsrc	0x1d0000	0xf8	0x200	R-- IDATA
.reloc	0x1d1000	0x1fd8	0x2000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x169270	0x78
RESOURCE	0x1d0000	0xf8
EXCEPTION	0x1c7000	0x75f0
SECURITY	0	0
BASERELOC	0x1d1000	0x1fd8
DEBUG	0x154ec0	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x155080	0x28
LOAD_CONFIG	0x154f00	0x138
Bound_IAT	0	0
IAT	0xdd000	0x5a0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x180157bc8	0x180157bd0	0x1801c43b4	0x1800dd990	0	0x300000

show previews

type	name	size	cp
MANIFEST	#2	145	0

module_name	hint	ord	function_name
XINPUT1_4.dll		2
KERNEL32.dll	658		GetModuleHandleA
KERNEL32.dll	148		CloseHandle
KERNEL32.dll	1407		SetStdHandle
KERNEL32.dll	717		GetProcAddress
KERNEL32.dll	203		CreateEventA
KERNEL32.dll	1543		VirtualQuery
KERNEL32.dll	996		LoadLibraryA
KERNEL32.dll	1137		QueryPerformanceFrequency
KERNEL32.dll	1136		QueryPerformanceCounter
KERNEL32.dll	852		GlobalAlloc
KERNEL32.dll	859		GlobalFree
KERNEL32.dll	863		GlobalLock
KERNEL32.dll	870		GlobalUnlock
KERNEL32.dll	1541		VirtualProtect
KERNEL32.dll	562		GetCurrentProcess
KERNEL32.dll	967		K32GetModuleInformation
KERNEL32.dll	1042		MultiByteToWideChar
KERNEL32.dll	1538		VirtualFree
KERNEL32.dll	1535		VirtualAlloc
KERNEL32.dll	772		GetSystemInfo
KERNEL32.dll	878		HeapCreate
KERNEL32.dll	880		HeapFree
KERNEL32.dll	1493		Thread32Next
KERNEL32.dll	1492		Thread32First
KERNEL32.dll	567		GetCurrentThreadId
KERNEL32.dll	1469		SuspendThread
KERNEL32.dll	1267		ResumeThread
KERNEL32.dll	268		CreateToolhelp32Snapshot
KERNEL32.dll	1460		Sleep
KERNEL32.dll	883		HeapReAlloc
KERNEL32.dll	876		HeapAlloc
KERNEL32.dll	794		GetThreadContext
KERNEL32.dll	563		GetCurrentProcessId
KERNEL32.dll	661		GetModuleHandleW
KERNEL32.dll	442		FlushInstructionCache
KERNEL32.dll	1417		SetThreadContext
KERNEL32.dll	1077		OpenThread
KERNEL32.dll	1081		OutputDebugStringA
KERNEL32.dll	903		InitializeCriticalSectionEx
KERNEL32.dll	854		GlobalDeleteAtom
KERNEL32.dll	637		GetLastError
KERNEL32.dll	1159		RaiseException
KERNEL32.dll	284		DecodePointer
KERNEL32.dll	291		DeleteCriticalSection
KERNEL32.dll	1610		WriteConsoleW
KERNEL32.dll	855		GlobalFindAtomA
KERNEL32.dll	218		CreateFileW
KERNEL32.dll	1070		OpenProcess
KERNEL32.dll	1103		Process32Next
KERNEL32.dll	403		FindFirstFileA
KERNEL32.dll	420		FindNextFileA
KERNEL32.dll	1616		WritePrivateProfileStringA
KERNEL32.dll	707		GetPrivateProfileIntA
KERNEL32.dll	713		GetPrivateProfileStringA
KERNEL32.dll	1179		ReadProcessMemory
KERNEL32.dll	885		HeapSize
KERNEL32.dll	724		GetProcessHeap
KERNEL32.dll	452		FreeEnvironmentStringsW
KERNEL32.dll	595		GetEnvironmentStringsW
KERNEL32.dll	497		GetCommandLineW
KERNEL32.dll	496		GetCommandLineA
KERNEL32.dll	694		GetOEMCP
KERNEL32.dll	460		GetACP
KERNEL32.dll	942		IsValidCodePage
KERNEL32.dll	296		DeleteFileW
KERNEL32.dll	441		FlushFileBuffers
KERNEL32.dll	1173		ReadConsoleW
KERNEL32.dll	616		GetFileSizeEx
KERNEL32.dll	534		GetConsoleMode
KERNEL32.dll	538		GetConsoleOutputCP
KERNEL32.dll	1611		WriteFile
KERNEL32.dll	755		GetStdHandle
KERNEL32.dll	365		EnumSystemLocalesW
KERNEL32.dll	825		GetUserDefaultLCID
KERNEL32.dll	944		IsValidLocale
KERNEL32.dll	641		GetLocaleInfoW
KERNEL32.dll	980		LCMapStringW
KERNEL32.dll	657		GetModuleFileNameW
KERNEL32.dll	376		ExitProcess
KERNEL32.dll	660		GetModuleHandleExW
KERNEL32.dll	1552		WaitForSingleObject
KERNEL32.dll	1101		Process32First
KERNEL32.dll	813		GetTickCount64
KERNEL32.dll	196		CreateDirectoryA
KERNEL32.dll	1365		SetFilePointerEx
KERNEL32.dll	448		FormatMessageA
KERNEL32.dll	1010		LocalFree
KERNEL32.dll	399		FindClose
KERNEL32.dll	405		FindFirstFileExW
KERNEL32.dll	422		FindNextFileW
KERNEL32.dll	606		GetFileAttributesExW
KERNEL32.dll	1346		SetEndOfFile
KERNEL32.dll	1282		RtlUnwind
KERNEL32.dll	36		AreFileApisANSI
KERNEL32.dll	612		GetFileInformationByHandleEx
KERNEL32.dll	1591		WideCharToMultiByte
KERNEL32.dll	907		InitializeSRWLock
KERNEL32.dll	1240		ReleaseSRWLockExclusive
KERNEL32.dll			AcquireSRWLockExclusive
KERNEL32.dll	329		EnterCriticalSection
KERNEL32.dll	992		LeaveCriticalSection
KERNEL32.dll	1503		TryEnterCriticalSection
KERNEL32.dll	1553		WaitForSingleObjectEx
KERNEL32.dll	1279		RtlPcToFileHeader
KERNEL32.dll	1380		SetLastError
KERNEL32.dll	998		LoadLibraryExW
KERNEL32.dll	936		IsProcessorFeaturePresent
KERNEL32.dll	760		GetStringTypeW
KERNEL32.dll	436		FlsAlloc
KERNEL32.dll	438		FlsGetValue
KERNEL32.dll	439		FlsSetValue
KERNEL32.dll	437		FlsFree
KERNEL32.dll	778		GetSystemTimeAsFileTime
KERNEL32.dll	325		EncodePointer
KERNEL32.dll	979		LCMapStringEx
KERNEL32.dll	475		GetCPInfo
KERNEL32.dll	902		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1352		SetEvent
KERNEL32.dll	1260		ResetEvent
KERNEL32.dll	206		CreateEventW
KERNEL32.dll	1269		RtlCaptureContext
KERNEL32.dll	1277		RtlLookupFunctionEntry
KERNEL32.dll	1284		RtlVirtualUnwind
KERNEL32.dll	1510		UnhandledExceptionFilter
KERNEL32.dll	1444		SetUnhandledExceptionFilter
KERNEL32.dll	1476		TerminateProcess
KERNEL32.dll	906		InitializeSListHead
KERNEL32.dll	928		IsDebuggerPresent
KERNEL32.dll	753		GetStartupInfoW
KERNEL32.dll	1082		OutputDebugStringW
KERNEL32.dll	1283		RtlUnwindEx
KERNEL32.dll	910		InterlockedFlushSList
KERNEL32.dll	1494		TlsAlloc
KERNEL32.dll	1496		TlsGetValue
KERNEL32.dll	1497		TlsSetValue
KERNEL32.dll	1495		TlsFree
KERNEL32.dll	453		FreeLibrary
KERNEL32.dll	1176		ReadFile
KERNEL32.dll	618		GetFileType
USER32.dll	346		GetForegroundWindow
USER32.dll	289		GetAsyncKeyState
USER32.dll	506		GetWindowThreadProcessId
USER32.dll	32		CallWindowProcA
USER32.dll	266		EnumWindows
USER32.dll	894		SetWindowLongPtrA
USER32.dll	274		FindWindowExA
USER32.dll	790		SendMessageA
USER32.dll	273		FindWindowA
USER32.dll	181		DestroyWindow
USER32.dll	166		DefWindowProcA
USER32.dll	117		CreateWindowExA
USER32.dll	964		UnregisterClassA
USER32.dll	734		RegisterClassExA
USER32.dll	362		GetKeyState
USER32.dll	598		LoadCursorA
USER32.dll	780		ScreenToClient
USER32.dll	293		GetCapture
USER32.dll	77		ClientToScreen
USER32.dll	559		IsChild
USER32.dll	800		SetCapture
USER32.dll	812		SetCursor
USER32.dll	307		GetClientRect
USER32.dll	766		ReleaseCapture
USER32.dll	814		SetCursorPos
USER32.dll	322		GetCursorPos
USER32.dll	668		OpenClipboard
USER32.dll	79		CloseClipboard
USER32.dll	232		EmptyClipboard
USER32.dll	310		GetClipboardData
USER32.dll	808		SetClipboardData
d3d12.dll	14		D3D12SerializeRootSignature
IMM32.dll	107		ImmReleaseContext
IMM32.dll	119		ImmSetCompositionWindow
IMM32.dll	59		ImmGetContext

show previews

offset	size	type	comment
15c1	15	HTM		#
16b0f0	80318	WAV		#
17eaae	309074	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x1c43b4