filenameMicrosoft.DirectX.dll
size223232 (0x36800)
md50c453970e89db1c1eb9de087e6eab5ba
typePE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
1884446
2593512
1540353
9340359
1032
9540354
9240351
9433101
96403533
9040351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x40eeb48f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.10
SizeOfCode0x31400
SizeOfInitializedData0x6a00
SizeOfUninitializedData0
AddressOfEntryPoint0x1b392
BaseOfCode0x1000
BaseOfData0x33000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x3b000
SizeOfHeaders0x400
CheckSum0x42835
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x313ee0x31400R-X CODE
.data0x330000x349c0x1c00RW- IDATA
.rsrc0x370000x4180x600R-- IDATA
.reloc0x380000x2d060x2e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x323b00x3e
IMPORT0x321280x64
RESOURCE0x370000x418
EXCEPTION00
SECURITY00
BASERELOC0x380000x125c
DEBUG0x10700x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x64
Delay_IAT00
CLR_Header0x108c0x48
typenamesizecp
VERSION#19520
module_namehintordfunction_name
KERNEL32.dll445GetSystemTimeAsFileTime
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll465GetTickCount
KERNEL32.dll657QueryPerformanceCounter
KERNEL32.dll360GetLastError
KERNEL32.dll787SetLastError
KERNEL32.dll316GetCurrentProcessId
KERNEL32.dll635OutputDebugStringA
KERNEL32.dll556IsProcessorFeaturePresent
KERNEL32.dll137DisableThreadLibraryCalls
mscoree.dll89_CorDllMain
msvcrt.dll280_ftol
msvcrt.dll17void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll265_finite
msvcrt.dll82__CxxFrameHandler
msvcrt.dll55_CIacos
msvcrt.dll733memcmp
msvcrt.dll18void __cdecl operator delete(void *)

??3@YAXPAX@Z

ADVAPI32.dll493RegQueryValueExA
ADVAPI32.dll482RegOpenKeyA
ADVAPI32.dll458RegCloseKey
ordentry_vafunction_name
module_nameMicrosoft.DirectX.dll
flags0
timestamp2004-07-09 15:03:47
version0.0
ordinal_base1
nFunctions0
nNames0
Names(0)0x323d8
Functions(0)0x323d8
NameOrdinals(0)0x323d8

StringTable 040904E4

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft Managed DirectX Helper Classes
FileVersion5.04.00.2904
InternalNameMicrosoft.DirectX.dll
LegalCopyrightCopyright © Microsoft Corporation. All rights reserved.
OriginalFilenameMicrosoft.DirectX.dll
ProductNameMicrosoft® DirectX for Windows®
ProductVersion5.04.00.2904

VS_FIXEDFILEINFO

FileVersion5.4.0.2904
ProductVersion5.4.0.2904
StrucVersion0x10000
FileFlagsMask0x30003f
FileFlags0
FileOS0x10001
FileType2
FileSubtype0
offsetsizetypecomment
0223232DLL07/09/2004 15:06:55#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK