filenamectl3d32.dll
size27136 (0x6a00)
md52da48f2c163ab854a7d1041f1209db8f
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x4a5bda48
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2106
Magic0x10b
LinkerVersion2.55
SizeOfCode0x3c00
SizeOfInitializedData0x2600
SizeOfUninitializedData0x5400
AddressOfEntryPoint0x4710
BaseOfCode0x1000
BaseOfData0x5000
ImageBase0x50e0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion2.31
SubsystemVersion4.0
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0xf3a5
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x1fa0
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x3b880x3c00R-X CODE
.bss0x50000x53a80RW- UDATA
.rdata0xb0000x1800x200R-- IDATA
.data0xc0000x25d0x400RW- IDATA
.idata0xd0000x8aa0xa00R-- IDATA
.edata0xe0000x2cd0x400R-- IDATA
.rsrc0xf0000x9600xa00RW- IDATA
.reloc0x100000x6580x800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0xe0000x2cd
IMPORT0xd0000x8aa
RESOURCE0xf0000x960
EXCEPTION00
SECURITY00
BASERELOC0x100000x5ec
DEBUG0xb0000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2b80x54
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#2656715080
VERSION#17320
module_namehintordfunction_name
KERNEL32.dll327GlobalFree
KERNEL32.dll235GetModuleHandleA
KERNEL32.dll259GetProcAddress
KERNEL32.dll322GlobalDeleteAtom
KERNEL32.dll535SizeofResource
KERNEL32.dll129FindResourceW
KERNEL32.dll356InitializeCriticalSection
KERNEL32.dll618lstrcmpW
KERNEL32.dll234GetModuleFileNameW
KERNEL32.dll212GetEnvironmentVariableW
KERNEL32.dll311GetVersion
KERNEL32.dll319GlobalAddAtomW
KERNEL32.dll286GetSystemDirectoryW
KERNEL32.dll317GetWindowsDirectoryW
KERNEL32.dll375LeaveCriticalSection
KERNEL32.dll272GetProfileStringW
KERNEL32.dll79EnterCriticalSection
KERNEL32.dll320GlobalAlloc
KERNEL32.dll381LoadResource
KERNEL32.dll621lstrcmpiW
KERNEL32.dll199GetCurrentThreadId
KERNEL32.dll630lstrlenW
USER32.dll441ReleaseDC
USER32.dll407OffsetRect
USER32.dll321InflateRect
USER32.dll277GetParent
USER32.dll301GetWindow
USER32.dll349IsWindowEnabled
USER32.dll345IsIconic
USER32.dll126DefWindowProcW
USER32.dll120DefDlgProcW
USER32.dll214GetClassInfoW
USER32.dll291GetSystemMetrics
USER32.dll230GetDC
USER32.dll35CharPrevW
USER32.dll392MessageBoxA
USER32.dll288GetSysColor
USER32.dll328InvalidateRect
USER32.dll447ScreenToClient
USER32.dll571ValidateRect
USER32.dll155DrawFocusRect
USER32.dll327IntersectRect
USER32.dll240GetFocus
USER32.dll166DrawTextW
USER32.dll32CharNextW
USER32.dll51ClientToScreen
USER32.dll312GetWindowTextW
USER32.dll195ExcludeUpdateRgn
USER32.dll175EndPaint
USER32.dll9BeginPaint
USER32.dll529ShowCaret
USER32.dll387MapWindowPoints
USER32.dll317HideCaret
USER32.dll311GetWindowTextLengthW
USER32.dll220GetClientRect
USER32.dll18CallWindowProcW
USER32.dll444RemovePropW
USER32.dll527SetWindowsHookExW
USER32.dll16CallNextHookEx
USER32.dll558UnhookWindowsHookEx
USER32.dll305GetWindowLongW
USER32.dll459SendMessageW
USER32.dll350IsWindowUnicode
USER32.dll218GetClassNameW
USER32.dll516SetWindowLongA
USER32.dll517SetWindowLongW
USER32.dll498SetPropW
USER32.dll281GetPropW
USER32.dll307GetWindowRect
USER32.dll303GetWindowDC
GDI32.dll37CreateDIBitmap
GDI32.dll277PatBlt
GDI32.dll322SetBkColor
GDI32.dll70DeleteObject
GDI32.dll264IntersectClipRect
GDI32.dll252GetTextExtentPointW
GDI32.dll100ExtTextOutW
GDI32.dll316SelectObject
GDI32.dll188GetDeviceCaps
GDI32.dll355SetTextColor
GDI32.dll67DeleteDC
GDI32.dll10BitBlt
GDI32.dll64CreateSolidBrush
GDI32.dll323SetBkMode
GDI32.dll31CreateCompatibleDC
ordentry_vafunction_name
10x1940Ctl3dGetVer
20x1b40Ctl3dSubclassDlg
30x1960Ctl3dSubclassCtl
40x1d40Ctl3dCtlColor
50x1950Ctl3dEnabled
60x1de0Ctl3dColorChange
70x38f0BtnWndProc3d
80x4060EditWndProc3d
90x42c0ListWndProc3d
100x42f0ComboWndProc3d
110x45c0StaticWndProc3d
120x1600Ctl3dRegister
130x1650Ctl3dUnregister
160x1710Ctl3dAutoSubclass
170x26f0Ctl3dDlgProc
180x1d50Ctl3dCtlColorEx
190x1930Ctl3dSetStyle
200x1e10Ctl3dDlgFramePaint
210x1cd0Ctl3dSubclassDlgEx
220x20e0Ctl3dWinIniChange
230x1860Ctl3dIsAutoSubclass
240x1890Ctl3dUnAutoSubclass
250x1aa0Ctl3dSubclassCtlEx
260x1990Ctl3dUnsubclassCtl
270x1720Ctl3dAutoSubclassEx
module_nameCTL3D32.dll
flags0
timestamp1995-07-14 01:46:24
version0.0
ordinal_base1
nFunctions27
nNames25
Names(25)0xe094
Functions(27)0xe028
NameOrdinals(25)0xe0f8

StringTable 040904E4

CompanyNameMicrosoft Corporation
FileDescriptionCtl3D 3D Windows Controls
FileVersion2.31.000
InternalNameCTL3D32
LegalCopyrightCopyright © Microsoft Corp. 1992-1995
ProductName3D Windows Controls
ProductVersion2,31,0,0

VS_FIXEDFILEINFO

FileVersion2.31.0.0
ProductVersion2.31.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0xa
FileOS0x10001
FileType2
FileSubtype0
offsetsizetypecomment
026112DLL07/14/2009 01:07:20#
15c115HTM#
66001024BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x2b8