filenamematerialsystem_dx11.dll
size2801664 (0x2ac000)
md5f3ede000a6c3b2eb156e7749a37f2bae
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
152201154
1584021920
173303191
156212024
17040219160
156402198
131307291
132307291
147307299
10193
17140219192
155402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections8
TimeDateStamp0x5421b4ab
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion10.0
SizeOfCode0x176200
SizeOfInitializedData0x264c00
SizeOfUninitializedData0
AddressOfEntryPoint0x139b20
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x3e0000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
.text0x10000x17614e0x176200R-X CODE
.rdata0x1780000x3f14a0x3f200R-- IDATA
.data0x1b80000x207f300xd8e00RW- IDATA
.pdata0x3c00000x14dcc0x14e00R-- IDATA
.tls0x3d50000x190x200RW- IDATA
text0x3d60000x15050x1600--X IDATA
data0x3d80000x1d240x1e00R-- IDATA
.reloc0x3da0000x55c20x5600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1b70f00x5a
IMPORT0x1b59b40xdc
RESOURCE00
EXCEPTION0x3c00000x14dcc
SECURITY00
BASERELOC0x3da0000x30c8
DEBUG0x179c000x1c
ARCHITECTURE00
GLOBALPTR00
TLS0x1969e00x28
LOAD_CONFIG00
Bound_IAT00
IAT0x1780000x658
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1803d50000x1803d50180x1803b9a800x180179b6800
module_namehintordfunction_name
SHELL32.dll191SHGetFolderPathA
SHELL32.dll286ShellExecuteA
USER32.dll772TranslateMessage
USER32.dll567PeekMessageW
USER32.dll228EnumDisplayDevicesA
USER32.dll530MessageBoxA
USER32.dll617ReleaseDC
USER32.dll544MsgWaitForMultipleObjects
USER32.dll769TranslateAcceleratorA
USER32.dll175DispatchMessageW
USER32.dll469IsIconic
USER32.dll291GetDC
USER32.dll278GetClientRect
GDI32.dll48CreateCompatibleDC
GDI32.dll308ExtEscape
GDI32.dll49CreateDCA
GDI32.dll47CreateCompatibleBitmap
GDI32.dll631SelectObject
GDI32.dll674SetStretchBltMode
GDI32.dll691StretchBlt
GDI32.dll458GetDIBits
GDI32.dll227DeleteDC
GDI32.dll230DeleteObject
GFSDK_TXAA.win64.dll4TxaaResolveDX
GFSDK_TXAA.win64.dll2TxaaOpenDX
GFSDK_TXAA.win64.dllTxaaCloseDX
GFSDK_SSAO.win64.dllGFSDK_SSAO_CreateContext_D3D11
d3d11.dll4D3D11CreateDevice
D3DCOMPILER_43.dll13D3DReflect
D3DCOMPILER_43.dll10D3DGetInputSignatureBlob
tier0.dll197GetCPUInformation
tier0.dll227LoggingSystem_PopLoggingState
tier0.dll228LoggingSystem_PushLoggingState
tier0.dll230LoggingSystem_RegisterLoggingListener
tier0.dll237LoggingSystem_SetLoggingResponsePolicy
tier0.dll293ReleaseThreadHandle
tier0.dll184CreateSimpleThread
tier0.dll158public: bool __cdecl CThreadEvent::Wait(unsigned int) __ptr64

?Wait@CThreadEvent@@QEAA_NI@Z

tier0.dll120public: bool __cdecl CThreadEvent::Reset(void) __ptr64

?Reset@CThreadEvent@@QEAA_NXZ

tier0.dll123public: bool __cdecl CThreadEvent::Set(void) __ptr64

?Set@CThreadEvent@@QEAA_NXZ

tier0.dll226LoggingSystem_LogDirect
tier0.dll12public: __cdecl CThreadEvent::CThreadEvent(bool) __ptr64

??0CThreadEvent@@QEAA@_N@Z

tier0.dll320ThreadSetDebugName
tier0.dll329WriteMiniDump
tier0.dll207GetThreadedLoadLibraryFunc
tier0.dll131public: void __cdecl CThreadSpinRWLock::SpinLockForRead(void) __ptr64

?SpinLockForRead@CThreadSpinRWLock@@QEAAXXZ

tier0.dll132public: void __cdecl CThreadSpinRWLock::SpinLockForWrite(void) __ptr64

?SpinLockForWrite@CThreadSpinRWLock@@QEAAXXZ

tier0.dll229LoggingSystem_RegisterLoggingChannel
tier0.dll31public: __cdecl CThreadMutex::~CThreadMutex(void) __ptr64

??1CThreadMutex@@QEAA@XZ

tier0.dll317ThreadInMainThread
tier0.dll322ThreadSleep
tier0.dll214LoggingSystem_AddTagToCurrentChannel
tier0.dll265Plat_IsInRenderToolMode
tier0.dll245Plat_DebugString
tier0.dll192Error
tier0.dll266Plat_IsInToolMode
tier0.dll248Plat_FloatTime
tier0.dll180CommandLine
tier0.dll347g_pMemAllocSingleton
tier0.dll183CreateGlobalMemAlloc
tier0.dll246Plat_ExitProcess
tier0.dll314StackToolsNotify_LoadedLibrary
tier0.dll239MemFreeScratch
tier0.dll238MemAllocScratch
tier0.dll15public: __cdecl CThreadMutex::CThreadMutex(void) __ptr64

??0CThreadMutex@@QEAA@XZ

tier0.dll34public: __cdecl CThreadSyncObject::~CThreadSyncObject(void) __ptr64

??1CThreadSyncObject@@QEAA@XZ

tier0.dll264Plat_IsInDebugSession
vstdlib.dll34KeyValuesSystem
vstdlib.dll73WT_ParallelProcess
vstdlib.dll88WT_WaitAsyncCall
vstdlib.dll55WT_AsyncCall
vstdlib.dll62WT_EndWaitingForWork
vstdlib.dll56WT_BeginWaitingForWork
vstdlib.dll60WT_DoStuff
vstdlib.dll70WT_IsInitialized
vstdlib.dll66WT_GetWakeEventForThread
vstdlib.dll81WT_SetThreadType
vstdlib.dll91g_pThreadPool
vstdlib.dll48V_UnicodeToUTF8
vstdlib.dll46V_UTF8ToUnicode
KERNEL32.dll1114SetCurrentDirectoryA
KERNEL32.dll482GetEnvironmentVariableA
KERNEL32.dll593GetProcessHeap
KERNEL32.dll782IsValidLocale
KERNEL32.dll723HeapAlloc
KERNEL32.dll727HeapFree
KERNEL32.dll1121SetEndOfFile
KERNEL32.dll678GetUserDefaultUILanguage
KERNEL32.dll274EnumSystemLocalesA
KERNEL32.dll522GetLocaleInfoA
KERNEL32.dll100CompareStringW
KERNEL32.dll474GetDriveTypeW
KERNEL32.dll838LocalAlloc
KERNEL32.dll675GetUserDefaultLCID
KERNEL32.dll136CreateFileA
KERNEL32.dll1331WriteConsoleW
KERNEL32.dll1140SetFilePointer
KERNEL32.dll1172SetStdHandle
KERNEL32.dll1115SetCurrentDirectoryW
KERNEL32.dll453GetCurrentDirectoryW
KERNEL32.dll624GetStringTypeW
KERNEL32.dll815LCMapStringW
KERNEL32.dll963ReadFile
KERNEL32.dll833LoadLibraryW
KERNEL32.dll1083SetConsoleCtrlHandler
KERNEL32.dll294FatalAppExitA
KERNEL32.dll349FlushFileBuffers
KERNEL32.dll640GetSystemTimeAsFileTime
KERNEL32.dll666GetTickCount
KERNEL32.dll937QueryPerformanceCounter
KERNEL32.dll481GetEnvironmentStringsW
KERNEL32.dll359FreeEnvironmentStringsW
KERNEL32.dll537GetModuleFileNameA
KERNEL32.dll780IsValidCodePage
KERNEL32.dll574GetOEMCP
KERNEL32.dll366GetACP
KERNEL32.dll376GetCPInfo
KERNEL32.dll434GetConsoleMode
KERNEL32.dll416GetConsoleCP
KERNEL32.dll454GetCurrentProcess
KERNEL32.dll1230TerminateProcess
KERNEL32.dll1048RtlCaptureContext
KERNEL32.dll1055RtlLookupFunctionEntry
KERNEL32.dll1062RtlVirtualUnwind
KERNEL32.dll770IsDebuggerPresent
KERNEL32.dll1203SetUnhandledExceptionFilter
KERNEL32.dll1250UnhandledExceptionFilter
KERNEL32.dll618GetStartupInfoW
KERNEL32.dll506GetFileType
KERNEL32.dll1148SetHandleCount
KERNEL32.dll344FlsAlloc
KERNEL32.dll345FlsFree
KERNEL32.dll346FlsGetValue
KERNEL32.dll948RaiseException
KERNEL32.dll1061RtlUnwindEx
KERNEL32.dll524GetLocaleInfoW
KERNEL32.dll619GetStdHandle
KERNEL32.dll1332WriteFile
KERNEL32.dll712GlobalMemoryStatusEx
KERNEL32.dll747InitializeCriticalSectionAndSpinCount
KERNEL32.dll210DeleteCriticalSection
KERNEL32.dll242EnterCriticalSection
KERNEL32.dll827LeaveCriticalSection
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll683GetVersionExA
KERNEL32.dll1216Sleep
KERNEL32.dll1287WaitForMultipleObjectsEx
KERNEL32.dll1190SetThreadPriority
KERNEL32.dll458GetCurrentThread
KERNEL32.dll1288WaitForSingleObject
KERNEL32.dll746InitializeCriticalSection
KERNEL32.dll360FreeLibrary
KERNEL32.dll588GetProcAddress
KERNEL32.dll539GetModuleHandleA
KERNEL32.dll842LocalFree
KERNEL32.dll542GetModuleHandleW
KERNEL32.dll1152SetLastError
KERNEL32.dll832LoadLibraryExW
KERNEL32.dll520GetLastError
KERNEL32.dll168CreateProcessW
KERNEL32.dll452GetCurrentDirectoryA
KERNEL32.dll164CreateProcessA
KERNEL32.dll631GetSystemDirectoryW
KERNEL32.dll514GetFullPathNameW
KERNEL32.dll1271VerifyVersionInfoW
KERNEL32.dll1267VerSetConditionMask
KERNEL32.dll538GetModuleFileNameW
KERNEL32.dll82CloseHandle
KERNEL32.dll143CreateFileW
KERNEL32.dll1364lstrcmpA
KERNEL32.dll908OutputDebugStringW
KERNEL32.dll830LoadLibraryA
KERNEL32.dll831LoadLibraryExA
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll137CreateFileMappingA
KERNEL32.dll890OpenFileMappingA
KERNEL32.dll873MultiByteToWideChar
KERNEL32.dll1312WideCharToMultiByte
KERNEL32.dll1272VirtualAlloc
KERNEL32.dll634GetSystemInfo
KERNEL32.dll1275VirtualFree
KERNEL32.dll751InitializeSListHead
KERNEL32.dll755InterlockedPushEntrySList
KERNEL32.dll754InterlockedPopEntrySList
KERNEL32.dll753InterlockedFlushSList
KERNEL32.dll203DecodePointer
KERNEL32.dll238EncodePointer
KERNEL32.dll1057RtlPcToFileHeader
KERNEL32.dll347FlsSetValue
KERNEL32.dll396GetCommandLineA
KERNEL32.dll287ExitProcess
KERNEL32.dll1124SetEnvironmentVariableA
KERNEL32.dll511GetFullPathNameA
ordentry_vafunction_name
10x104380CreateInterface
module_namematerialsystem_dx11.dll
flags0
timestamp2014-09-23 17:58:03
version0.0
ordinal_base1
nFunctions1
nNames1
Names(1)0x1b711c
Functions(1)0x1b7118
NameOrdinals(1)0x1b7120
offsetsizetypecomment
15c115HTM#
15d02796080BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x3b9a80