SR2D.dll

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	SR2D.dll
size	15360 (0x3c00)
md5	ced59e3de71a4fd25e9bfeebc03433f4

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
149	30729	2
131	30729	4
123	50727	3
1	0	5
132	30729	5
146	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4ca86b22
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x3200
SizeOfInitializedData	0x600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x29c0
BaseOfCode	0x1000
BaseOfData	0x5000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x8000
SizeOfHeaders	0x400
CheckSum	0x11b02
Subsystem	2
DllCharacteristics	0x400
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x306f	0x3200	R-X CODE
.data	0x5000	0x338	0x200	RW- IDATA
.rsrc	0x6000	0x1b4	0x200	R-- IDATA
.reloc	0x7000	0x84	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x3c70	0x3ff
IMPORT	0x3ba4	0x28
RESOURCE	0x6000	0x1b4
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x7000	0x58
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1000	0x18
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#2	346	1252

module_name	hint	function_name
KERNEL32.dll	425	GetCurrentProcess
KERNEL32.dll	1086	UnhandledExceptionFilter
KERNEL32.dll	1045	SetUnhandledExceptionFilter
KERNEL32.dll	721	IsDebuggerPresent
KERNEL32.dll	1069	TerminateProcess

ord	entry_va	function_name
1	0x1d50	ADD_2D
2	0x1cf0	ADD_
3	0x1e00	ALPHA_B
4	0x1db0	ALPHA_T
5	0x2a00	ARGB_
6	0x2020	BLEND
7	0x2a30	CLEAR_C
8	0x29d0	COPY_MEMORY
9	0x1b40	DPBM_
10	0x1330	DPBM_POINT
11	0x3040	DRAW_ROT
12	0x2cd0	DRAW_ROT_AA
13	0x1870	EBM_
14	0x1930	EBM_EX
15	0x2a20	EXP2N
16	0x3420	FLIP_X
17	0x3330	FLIP_XY
18	0x31f0	FLIP_X_ROT_CCW
19	0x33b0	FLIP_Y
20	0x3170	FLIP_Y_ROT_CCW
21	0x2650	MASK_ADD
22	0x25a0	MASK_ADD_2D
23	0x2300	MASK_ALPHA_B
24	0x27a0	MASK_ALPHA_T
25	0x20b0	MASK_BLEND
26	0x2a70	MASK_CLEAR_C
27	0x1a50	MASK_DPBM
28	0x1020	MASK_DPBM_POINT
29	0x14b0	MASK_EBM
30	0x1630	MASK_EBM_EX
31	0x2c60	MASK_INTERSECT
32	0x21a0	MASK_MAX
33	0x2250	MASK_MIN
34	0x24d0	MASK_MOD
35	0x2400	MASK_MOD_2X
36	0x2840	MASK_MOVE_BIT
37	0x2910	MASK_MOVE_BYTE
38	0x2700	MASK_PAINT
39	0x2b80	MASK_V_MUL_ADD
40	0x1e90	MAX_
41	0x1ef0	MIN_
42	0x1c10	MOD_2X
43	0x1c80	MOD_
44	0x1fb0	MOVE_BIT
45	0x1f50	MOVE_BYTE
46	0x1bd0	PAINT
47	0x34a0	RESIZE
48	0x32d0	ROT_CCW
49	0x3250	ROT_CW
50	0x2af0	V_MUL_ADD

module_name	sr2d.dll
flags	0
timestamp	2010-10-03 11:38:10
version	0.0
ordinal_base	1
nFunctions	50
nNames	50
Names(50)	0x3d60
Functions(50)	0x3c98
NameOrdinals(50)	0x3e28

show previews

offset	size	type	comment
0	15360	DLL	10/03/2010 11:38:10	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK