filenameOLEPRO32.DLL
size114960 (0x1c110)
md552d36ae89a6e6c5fef146a85073b4684
typePE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x33557af6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x230a
Magic0x10b
LinkerVersion3.0
SizeOfCode0x15200
SizeOfInitializedData0x2cc00
SizeOfUninitializedData0
AddressOfEntryPoint0xe500
BaseOfCode0x1000
BaseOfData0x17000
ImageBase0x5f300000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x20000
SizeOfHeaders0x400
CheckSum0x24a10
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C v2.0

Sections

namevavsizeraw sizeflags
.text0x10000x151d10x15200R-X CODE
.data0x170000x2ec40x1c00RW- IDATA
.rsrc0x1a0000x37100x3800R-- IDATA
.reloc0x1e0000x14fa0x1600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x160500x181
IMPORT0x1517a0x8c
RESOURCE0x1a0000x3710
EXCEPTION00
SECURITY00
BASERELOC0x1e0000x1088
DEBUG0x12e00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x2d4
Delay_IAT00
CLR_Header00
typenamesizecp
TYPELIB#1124430
VERSION#114760
module_namehintordfunction_name
KERNEL32.dll235GetModuleHandleA
KERNEL32.dll68DeleteCriticalSection
KERNEL32.dll356InitializeCriticalSection
KERNEL32.dll318GlobalAddAtomA
KERNEL32.dll322GlobalDeleteAtom
KERNEL32.dll333GlobalReAlloc
KERNEL32.dll330GlobalHandle
KERNEL32.dll334GlobalSize
KERNEL32.dll320GlobalAlloc
KERNEL32.dll331GlobalLock
KERNEL32.dll337GlobalUnlock
KERNEL32.dll327GlobalFree
KERNEL32.dll126FindResourceA
KERNEL32.dll381LoadResource
KERNEL32.dll395LockResource
KERNEL32.dll141FreeLibrary
KERNEL32.dll402MulDiv
KERNEL32.dll578WideCharToMultiByte
KERNEL32.dll225GetLastError
KERNEL32.dll403MultiByteToWideChar
KERNEL32.dll282GetStringTypeW
KERNEL32.dll259GetProcAddress
KERNEL32.dll279GetStringTypeA
KERNEL32.dll374LCMapStringW
KERNEL32.dll359InterlockedIncrement
KERNEL32.dll311GetVersion
KERNEL32.dll345HeapFree
KERNEL32.dll376LoadLibraryA
KERNEL32.dll368IsDBCSLeadByte
KERNEL32.dll339HeapAlloc
KERNEL32.dll591WriteFile
KERNEL32.dll210GetEnvironmentStringsW
KERNEL32.dll140FreeEnvironmentStringsW
KERNEL32.dll208GetEnvironmentStrings
KERNEL32.dll139FreeEnvironmentStringsA
KERNEL32.dll246GetOEMCP
KERNEL32.dll146GetACP
KERNEL32.dll152GetCPInfo
KERNEL32.dll233GetModuleFileNameA
KERNEL32.dll276GetStartupInfoA
KERNEL32.dll278GetStdHandle
KERNEL32.dll220GetFileType
KERNEL32.dll506SetHandleCount
KERNEL32.dll343HeapDestroy
KERNEL32.dll341HeapCreate
KERNEL32.dll545TlsGetValue
KERNEL32.dll509SetLastError
KERNEL32.dll544TlsFree
KERNEL32.dll543TlsAlloc
KERNEL32.dll546TlsSetValue
KERNEL32.dll199GetCurrentThreadId
KERNEL32.dll98ExitProcess
KERNEL32.dll455RtlUnwind
KERNEL32.dll159GetCommandLineA
KERNEL32.dll22CloseHandle
KERNEL32.dll357InterlockedDecrement
KERNEL32.dll375LeaveCriticalSection
KERNEL32.dll504SetFilePointer
KERNEL32.dll518SetStdHandle
KERNEL32.dll79EnterCriticalSection
KERNEL32.dll131FlushFileBuffers
KERNEL32.dll430RaiseException
KERNEL32.dll373LCMapStringA
USER32.dll132DestroyIcon
USER32.dll304GetWindowLongA
USER32.dll516SetWindowLongA
USER32.dll288GetSysColor
USER32.dll59CopyIcon
USER32.dll134DestroyWindow
USER32.dll481SetFocus
USER32.dll348IsWindow
USER32.dll171EnableWindow
USER32.dll463SetActiveWindow
USER32.dll205GetActiveWindow
USER32.dll421PostQuitMessage
USER32.dll454SendMessageA
USER32.dll140DispatchMessageA
USER32.dll556TranslateMessage
USER32.dll269GetMessageA
USER32.dll277GetParent
USER32.dll240GetFocus
USER32.dll392MessageBoxA
USER32.dll375LoadStringA
USER32.dll26CharLowerA
USER32.dll30CharNextA
USER32.dll309GetWindowTextA
USER32.dll235GetDlgItem
USER32.dll249GetKeyState
USER32.dll441ReleaseDC
USER32.dll233GetDialogBaseUnits
USER32.dll230GetDC
USER32.dll220GetClientRect
USER32.dll295GetTopWindow
USER32.dll579WinHelpA
USER32.dll585wsprintfA
USER32.dll291GetSystemMetrics
USER32.dll74CreateIcon
USER32.dll66CreateCursor
USER32.dll158DrawIcon
USER32.dll242GetIconInfo
USER32.dll60CopyImage
GDI32.dll367StretchBlt
GDI32.dll357SetViewportExtEx
GDI32.dll358SetViewportOrgEx
GDI32.dll160GetBitmapBits
GDI32.dll332SetEnhMetaFileBits
GDI32.dll195GetEnhMetaFileHeader
GDI32.dll340SetMetaFileBitsEx
GDI32.dll25CreateBitmap
GDI32.dll277PatBlt
GDI32.dll69DeleteMetaFile
GDI32.dll68DeleteEnhMetaFile
GDI32.dll251GetTextExtentPointA
GDI32.dll227GetPaletteEntries
GDI32.dll44CreateFontIndirectA
GDI32.dll70DeleteObject
GDI32.dll253GetTextFaceA
GDI32.dll254GetTextFaceW
GDI32.dll255GetTextMetricsA
GDI32.dll256GetTextMetricsW
GDI32.dll316SelectObject
GDI32.dll81EnumFontFamiliesA
GDI32.dll188GetDeviceCaps
GDI32.dll222GetObjectA
GDI32.dll161GetBitmapDimensionEx
GDI32.dll368StretchDIBits
GDI32.dll187GetDIBits
GDI32.dll297RealizePalette
GDI32.dll47CreateHalftonePalette
GDI32.dll37CreateDIBitmap
GDI32.dll36CreateDIBSection
GDI32.dll92Escape
GDI32.dll320SetBitmapBits
GDI32.dll329SetDIBits
GDI32.dll283PlayMetaFileRecord
GDI32.dll53CreatePalette
GDI32.dll192GetEnhMetaFileBits
GDI32.dll216GetMetaFileBitsEx
GDI32.dll31CreateCompatibleDC
GDI32.dll10BitBlt
GDI32.dll67DeleteDC
GDI32.dll30CreateCompatibleBitmap
GDI32.dll317SelectPalette
GDI32.dll351SetStretchBltMode
GDI32.dll309SaveDC
GDI32.dll264IntersectClipRect
GDI32.dll262GetWindowOrgEx
GDI32.dll274OffsetViewportOrgEx
GDI32.dll280PlayEnhMetaFile
GDI32.dll89EnumMetaFile
GDI32.dll307RestoreDC
GDI32.dll362SetWindowOrgEx
GDI32.dll322SetBkColor
GDI32.dll355SetTextColor
GDI32.dll338SetMapMode
GDI32.dll361SetWindowExtEx
GDI32.dll260GetWinMetaFileBits
GDI32.dll183GetCurrentObject
GDI32.dll238GetStockObject
ole32.dll19CoGetMalloc
ole32.dll151StringFromGUID2
ole32.dll143StgCreateDocfile
ole32.dll139ReleaseStgMedium
ole32.dll6CoCreateInstance
ADVAPI32.dll211RegFlushKey
ADVAPI32.dll224RegQueryValueA
ADVAPI32.dll235RegSetValueA
ADVAPI32.dll197RegCreateKeyA
ADVAPI32.dll216RegOpenKeyA
ADVAPI32.dll194RegCloseKey
OLEAUT32.dll161
OLEAUT32.dll2
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll12
ordentry_vafunction_name
2480xe1a0OleIconToCursor
2490xe190OleCreatePropertyFrameIndirect
2500xe150OleCreatePropertyFrame
2510xe120OleLoadPicture
2520xe100OleCreatePictureIndirect
2530xe0e0OleCreateFontIndirect
2540xe0c0OleTranslateColor
2550xe250DllCanUnloadNow
2560xe270DllGetClassObject
2570xe2b0DllRegisterServer
2580xe2d0DllUnregisterServer
module_nameOLEPRO32.DLL
flags0
timestamp1997-04-17 01:20:50
version0.0
ordinal_base248
nFunctions11
nNames11
Names(11)0x160a4
Functions(11)0x16078
NameOrdinals(11)0x160d0

StringTable 040904E4

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft (R) OLE Property Support DLL
FileVersion5.0.4118
InternalNameOLEPRO32.DLL
LegalCopyrightCopyright © Microsoft Corp. 1993-1996.
LegalTrademarksMicrosoft® is a registered trademark of Microsoft Corporation. Windows NT(TM) and Windows 95(TM) are trademarks of Microsoft Corporation.
ProductNameMicrosoft OLE 2.20 for Windows NT(TM) and Windows 95(TM) Operating Systems
ProductVersion2.20
CommentsMicrosoft OLE 2.20 for Windows NT(TM) and Windows 95(TM) Operating Systems
OriginalFilenameOLEPRO32.DLL
OLESelfRegister

VS_FIXEDFILEINFO

FileVersion5.0.4118.1
ProductVersion2.20.4118.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0114688DLL04/17/1997 01:20:54#
15c115HTM#
1c000272BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK