29EA7A7A.dll - warpack.dll

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	29EA7A7A.dll
size	894976 (0xda800)
md5	d1a1ba9879b1ad7f766b4a2c0a0b3c38

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, PECompact2 compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x5ca764f9
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0xa1ae
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x2cfa00
SizeOfInitializedData	0x71200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x361622
BaseOfCode	0x1000
BaseOfData	0x2d1000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x364000
SizeOfHeaders	0x400
CheckSum	0xdd2de
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x1000
SizeOfStackCommit	0x100000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PeCompact 2.xx (BitSum Technologies / v2.0)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x35f000	0xd7a00	RWX CODE
.rsrc	0x360000	0x3000	0x2800	RWX CODE
.reloc	0x363000	0x200	0x200	RW- IDATA

Data Directory

type	va	size
EXPORT	0x360f60	0x8d
IMPORT	0x361334	0x362
RESOURCE	0x360000	0xf58
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x363000	0x18
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0x2ff000	0xa62
CLR_Header	0	0

show previews

type	name	size
VCLSTYLE	CARBONWOT	51404
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	308
STRING	#4058	548
STRING	#4059	3588
STRING	#4060	2880
STRING	#4061	2788
STRING	#4062	2220
STRING	#4063	1944
STRING	#4064	696
STRING	#4065	1352
STRING	#4066	956
STRING	#4067	1100
STRING	#4068	836
STRING	#4069	1056
STRING	#4070	1000
STRING	#4071	904
STRING	#4072	868
STRING	#4073	748
STRING	#4074	1144
STRING	#4075	784
STRING	#4076	1032
STRING	#4077	216
STRING	#4078	208
STRING	#4079	756
STRING	#4080	992
STRING	#4081	920
STRING	#4082	1204
STRING	#4083	640
STRING	#4084	1056
STRING	#4085	1748
STRING	#4086	1148
STRING	#4087	844
STRING	#4088	812
STRING	#4089	1080
STRING	#4090	380
STRING	#4091	204
STRING	#4092	464
STRING	#4093	988
STRING	#4094	960
STRING	#4095	788
STRING	#4096	772
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	3540
RCDATA	PLATFORMTARGETS	2
RCDATA	TMAINFORM	16052
GROUP_CURSOR	CAT_DRAG_COPY	20
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
VERSION	#1	648

module_name	hint	ord	function_name
kernel32.dll			LoadLibraryA
kernel32.dll			GetProcAddress
kernel32.dll			VirtualAlloc
kernel32.dll			VirtualFree
oleaut32.dll			SysFreeString
advapi32.dll			RegQueryValueExW
user32.dll			CharNextW
gdi32.dll			UnrealizeObject
version.dll			VerQueryValueW
netapi32.dll			NetWkstaGetInfo
ole32.dll			OleUninitialize
comctl32.dll			InitializeFlatSB
msvcrt.dll			memset
shell32.dll			Shell_NotifyIconW
winspool.drv			OpenPrinterW
wsock32.dll			WSACleanup

ord	entry_va	function_name
1	0x2e3c60	dbkFCallWrapperAddr
2	0xf5c0	__dbk_fcall_wrapper
3	0x62164	TMethodImplementationIntercept

module_name
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	3
nNames	3
Names(3)	0x360f8e
Functions(3)	0x360f9a
NameOrdinals(3)	0x360f88

StringTable 040904E4

CompanyName	Warpack
FileVersion	0.9.0.14
InternalName	warpack.dll
LegalCopyright	Warpack
LegalTrademarks	Warpack
OriginalFilename	warpack.dll
ProductName	Warpack
ProductVersion	1.0.0.0

VS_FIXEDFILEINFO

FileVersion	0.9.0.14
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	894976	DLL	04/05/2019 14:23:53	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x342000

[?] can't find file_offset of VA 0x34e8d0

[?] can't find file_offset of VA 0x34ea08

[?] can't find file_offset of VA 0x34eb40

[?] can't find file_offset of VA 0x34ec78

[?] can't find file_offset of VA 0x34edb0

[?] can't find file_offset of VA 0x34eee8

[?] can't find file_offset of VA 0x34f020

[?] can't find file_offset of VA 0x34f158

[?] can't find file_offset of VA 0x34f290

[?] can't find file_offset of VA 0x34f4b8

[?] can't find file_offset of VA 0x3502c0

[?] can't find file_offset of VA 0x350e00

[?] can't find file_offset of VA 0x3518e8

[?] can't find file_offset of VA 0x352198

[?] can't find file_offset of VA 0x352930

[?] can't find file_offset of VA 0x352be8

[?] can't find file_offset of VA 0x353130

[?] can't find file_offset of VA 0x3534f0

[?] can't find file_offset of VA 0x353940

[?] can't find file_offset of VA 0x353c88

[?] can't find file_offset of VA 0x3540a8

[?] can't find file_offset of VA 0x354490

[?] can't find file_offset of VA 0x354818

[?] can't find file_offset of VA 0x354b80

[?] can't find file_offset of VA 0x354e70

[?] can't find file_offset of VA 0x3552e8

[?] can't find file_offset of VA 0x3555f8

[?] can't find file_offset of VA 0x355a00

[?] can't find file_offset of VA 0x355ad8

[?] can't find file_offset of VA 0x355ba8

[?] can't find file_offset of VA 0x355ea0

[?] can't find file_offset of VA 0x356280

[?] can't find file_offset of VA 0x356618

[?] can't find file_offset of VA 0x356ad0

[?] can't find file_offset of VA 0x356d50

[?] can't find file_offset of VA 0x357170

[?] can't find file_offset of VA 0x357848

[?] can't find file_offset of VA 0x357cc8

[?] can't find file_offset of VA 0x358018

[?] can't find file_offset of VA 0x358348

[?] can't find file_offset of VA 0x358780

[?] can't find file_offset of VA 0x358900

[?] can't find file_offset of VA 0x3589d0

[?] can't find file_offset of VA 0x358ba0

[?] can't find file_offset of VA 0x358f80

[?] can't find file_offset of VA 0x359340

[?] can't find file_offset of VA 0x359658

[?] can't find file_offset of VA 0x359960

[?] can't find file_offset of VA 0x359970

[?] can't find file_offset of VA 0x35a748

[?] can't find file_offset of VA 0x35a750

[?] can't find file_offset of VA 0x35e608

[?] can't find file_offset of VA 0x35e620

[?] can't find file_offset of VA 0x35e638

[?] can't find file_offset of VA 0x35e650

[?] can't find file_offset of VA 0x35e668

[?] can't find file_offset of VA 0x35e680

[?] can't find file_offset of VA 0x35e698

[?] can't find file_offset of VA 0x35e6b0

[?] can't find file_offset of VA 0x300046

[?] can't find file_offset of VA 0x2ff000

29EA7A7A.dll- warpack.dll