lsunpa32.dll - UNPACK-Lib Win32

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	lsunpa32.dll
size	33280 (0x8200)
md5	d64d624fe270f6f49cb7ad9d54d149fa

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x80cf2537
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0xa18e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x9e00
SizeOfInitializedData	0x3e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0xb0001
BaseOfCode	0x10000
BaseOfData	0x20000
ImageBase	0x400000
SectionAlignment	0x10000
FileAlignment	0x200
OperatingSystemVersion	1.0
ImageVersion	0.0
SubsystemVersion	3.10
Reserved1	0
SizeOfImage	0xd0000
SizeOfHeaders	0xfe00
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASPack v2.11c

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
CODE	0x10000	0x10000	0x4c00	RW- IDATA
DATA	0x20000	0x50000	0xa00	RW- IDATA
.idata	0x70000	0x10000	0x400	RW- IDATA
.edata	0x80000	0x10000	0x200	RW- IDATA
.reloc	0x90000	0x10000	0xa00	RW- IDATA
.rsrc	0xa0000	0x10000	0x200	RW- IDATA
.asp943	0xb0000	0x10000	0x1600	RW- IDATA
.data	0xc0000	0x10000	0	RW- IDATA

Data Directory

type	va	size
EXPORT	0x80000	0x13b
IMPORT	0xb1248	0x5c
RESOURCE	0xa0000	0x400
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xb10f0	8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

show previews

type	name	size	cp
VERSION	#1	728	0

module_name	hint	ord	function_name
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleA
kernel32.dll			LoadLibraryA
user32.dll			wsprintfA

ord	entry_va	function_name
1	0x1735c	LSP_U_VERSION
2	0x1811c	LSP_UNPACK
3	0x18d18	LSP_GETNEXTITEM
4	0x177f0	LSP_FILEEXISTS
5	0x179ec	LSP_RESETDLL
6	0x17470	LSP_UINIT_MP
7	0x17570	LSP_U_FILERENAME
8	0x175a4	LSP_U_SETMSG
9	0x193ac	LSP_COMBINE
10	0x1753c	LSP_DECRYPTKEY
11	0x19054	LSP_NEXTLOOP

module_name	lsunpa32.dll
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	11
nNames	11
Names(11)	0x80054
Functions(11)	0x80028
NameOrdinals(11)	0x80080

StringTable 040904E4

CompanyName	Linder Software - www.lindersoftware.com - Fax:+1-954-252-3910
FileDescription	UNPACK-Lib Win32
FileVersion	2.00
InternalName	LSPack
LegalCopyright	Copyright © 1995-98 Linder Software
OriginalFilename	LSUNPA32.DLL

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	0x10004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	33280	DLL	06/25/2038 06:12:07	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x0

lsunpa32.dll- UNPACK-Lib Win32