filenamelibOpenglRender.dll
size322048 (0x4ea00)
md558592beb2e82aca3200860277f2c7c87
typePE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections9
TimeDateStamp0x5523b834
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x232e
Magic0x10b
LinkerVersion2.22
SizeOfCode0x3e800
SizeOfInitializedData0x4e600
SizeOfUninitializedData0x1a00
AddressOfEntryPoint0x1430
BaseOfCode0x1000
BaseOfData0x40000
ImageBase0x6fb40000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x56000
SizeOfHeaders0x400
CheckSum0x51d03
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x3e7e80x3e800R-X CODE IDATA
.data0x400000x4a880x4c00RW- IDATA
.rdata0x450000x74040x7600R-- IDATA
.bss0x4d0000x19840RW- UDATA
.edata0x4f0000x1750x200R-- IDATA
.idata0x500000xc080xe00RW- IDATA
.CRT0x510000x2c0x200RW- IDATA
.tls0x520000x200x200RW- IDATA
.reloc0x530000x277c0x2800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x4f0000x175
IMPORT0x500000xc08
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC0x530000x277c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x520000x18
LOAD_CONFIG00
Bound_IAT00
IAT0x502300x1cc
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x6fb920180x6fb9201c0x6fb8dc0c0x6fb9101800
module_namehintordfunction_name
KERNEL32.dll83CloseHandle
KERNEL32.dll102ConnectNamedPipe
KERNEL32.dll132CreateEventA
KERNEL32.dll139CreateFileA
KERNEL32.dll162CreateNamedPipeA
KERNEL32.dll173CreateSemaphoreA
KERNEL32.dll183CreateThread
KERNEL32.dll212DeleteCriticalSection
KERNEL32.dll239EnterCriticalSection
KERNEL32.dll356FreeLibrary
KERNEL32.dll452GetCurrentProcess
KERNEL32.dll453GetCurrentProcessId
KERNEL32.dll457GetCurrentThreadId
KERNEL32.dll515GetLastError
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll581GetProcAddress
KERNEL32.dll635GetSystemTimeAsFileTime
KERNEL32.dll663GetTickCount
KERNEL32.dll747InitializeCriticalSection
KERNEL32.dll775IsDBCSLeadByteEx
KERNEL32.dll806LeaveCriticalSection
KERNEL32.dll809LoadLibraryA
KERNEL32.dll812LoadLibraryW
KERNEL32.dll853MultiByteToWideChar
KERNEL32.dll915QueryPerformanceCounter
KERNEL32.dll916QueryPerformanceFrequency
KERNEL32.dll941ReadFile
KERNEL32.dll962ReleaseSemaphore
KERNEL32.dll979ResetEvent
KERNEL32.dll1053SetEvent
KERNEL32.dll1078SetLastError
KERNEL32.dll1127SetUnhandledExceptionFilter
KERNEL32.dll1140Sleep
KERNEL32.dll1154TerminateProcess
KERNEL32.dll1159TlsAlloc
KERNEL32.dll1160TlsFree
KERNEL32.dll1161TlsGetValue
KERNEL32.dll1162TlsSetValue
KERNEL32.dll1174UnhandledExceptionFilter
KERNEL32.dll1206VirtualProtect
KERNEL32.dll1209VirtualQuery
KERNEL32.dll1218WaitForSingleObject
KERNEL32.dll1224WaitNamedPipeA
KERNEL32.dll1242WideCharToMultiByte
KERNEL32.dll1262WriteFile
msvcrt.dll56__dllonexit
msvcrt.dll70__mb_cur_max
msvcrt.dll143_amsg_exit
msvcrt.dll209_errno
msvcrt.dll220_exit
msvcrt.dll305_initterm
msvcrt.dll309_iob
msvcrt.dll406_lock
msvcrt.dll563_onexit
msvcrt.dll632_snwprintf
msvcrt.dll752_unlock
msvcrt.dll846calloc
msvcrt.dll859fclose
msvcrt.dll862fflush
msvcrt.dll870fopen
msvcrt.dll874fputc
msvcrt.dll875fputs
msvcrt.dll879free
msvcrt.dll888fwprintf
msvcrt.dll890fwrite
msvcrt.dll895getenv
msvcrt.dll930localeconv
msvcrt.dll934malloc
msvcrt.dll941memcmp
msvcrt.dll942memcpy
msvcrt.dll943memmove
msvcrt.dll945memset
msvcrt.dll958raise
msvcrt.dll961realloc
msvcrt.dll968setlocale
msvcrt.dll973sprintf
msvcrt.dll981strchr
msvcrt.dll982strcmp
msvcrt.dll987strerror
msvcrt.dll990strlen
msvcrt.dll993strncmp
msvcrt.dll994strncpy
msvcrt.dll1000strstr
msvcrt.dll1090abort
msvcrt.dll1099atoi
msvcrt.dll1138wcscpy
msvcrt.dll1142wcslen
msvcrt.dll1207_write
msvcrt.dll1234_strdup
msvcrt.dll1296_close
USER32.dll91CreateWindowExA
USER32.dll135DefWindowProcA
USER32.dll443MessageBoxW
USER32.dll470PostMessageA
USER32.dll483RegisterClassA
USER32.dll590ShowWindow
WS2_32.dll132accept
WS2_32.dll133bind
WS2_32.dll134closesocket
WS2_32.dll135connect
WS2_32.dll147getsockname
WS2_32.dll149htonl
WS2_32.dll150htons
WS2_32.dll156listen
WS2_32.dll158ntohs
WS2_32.dll159recv
WS2_32.dll162send
WS2_32.dll164setsockopt
WS2_32.dll165shutdown
WS2_32.dll166socket
ordentry_vafunction_name
10x8840createOpenGLSubwindow@24
20x8890destroyOpenGLSubwindow@0
30x85c0getHardwareStrings@12
40x8370initLibrary@0
50x83e0initOpenGLRenderer@16
60x8910repaintOpenGLDisplay@0
70x88d0setOpenGLDisplayRotation@4
80x8580setPostCallback@8
90x8950setStreamMode@4
100x8620stopOpenGLRenderer@0
module_namelibOpenglRender.dll
flags0
timestamp2015-04-07 10:57:56
version0.0
ordinal_base1
nFunctions10
nNames10
Names(10)0x4f050
Functions(10)0x4f028
NameOrdinals(10)0x4f078
offsetsizetypecomment
0322048DLL04/07/2015 10:57:56#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x4dc0c