filenameDDRAW.DLL
size159744 (0x27000)
md55c164e46e267b6d3d97be684de4e148d
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x31acd545
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion3.10
SizeOfCode0x21c00
SizeOfInitializedData0x5200
SizeOfUninitializedData0
AddressOfEntryPoint0x1200
BaseOfCode0x1000
BaseOfData0x23000
ImageBase0xbaaa0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x2a000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x21aee0x21c00R-X CODE
.rdata0x230000x6570x800R-- IDATA SHARED
.data0x240000xd340xc00RW- IDATA SHARED
.idata0x250000xe6a0x1000RW- IDATA SHARED
.edata0x260000x25f0x400R-- IDATA
.rsrc0x270000x60c0x800R-- IDATA SHARED
.reloc0x280000x1eba0x2000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x260000x25f
IMPORT0x250000x78
RESOURCE0x270000x60c
EXCEPTION00
SECURITY00
BASERELOC0x280000x1b10
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x252dc0x250
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#75540
VERSION#18320
idlangstring
1001033Microsoft DirectDraw
1011033You must be running in 256 color mode or higher. You can change the color depth from the control panel display icon.
1021033Your display driver is not Windows95 compatible. DirectDraw only supports Windows95 compatible drivers.
1031033Primary Display Driver
module_namehintordfunction_name
KERNEL32.dll448OpenMutexA
KERNEL32.dll432MapViewOfFile
KERNEL32.dll61CreateFileMappingA
KERNEL32.dll73CreateProcessA
KERNEL32.dll443OpenEventA
KERNEL32.dll492ReleaseMutex
KERNEL32.dll139FT_Thunk
KERNEL32.dll131FT_Exit4
KERNEL32.dll126FT_Exit20
KERNEL32.dll502SMapLS
KERNEL32.dll512SUnMapLS
KERNEL32.dll266GetPriorityClass
KERNEL32.dll619UnmapViewOfFile
KERNEL32.dll211GetCurrentProcess
KERNEL32.dll513SUnMapLS_IP_EBP_12
KERNEL32.dll504SMapLS_IP_EBP_16
KERNEL32.dll514SUnMapLS_IP_EBP_16
KERNEL32.dll430MapSL
KERNEL32.dll601ThunkConnect32
KERNEL32.dll364HeapAlloc
KERNEL32.dll368HeapFree
KERNEL32.dll370HeapReAlloc
KERNEL32.dll366HeapCreate
KERNEL32.dll93DeviceIoControl
KERNEL32.dll570SetPriorityClass
KERNEL32.dll214GetCurrentThreadId
KERNEL32.dll553SetErrorMode
KERNEL32.dll80CreateThread
KERNEL32.dll231GetExitCodeThread
KERNEL32.dll429MapLS
KERNEL32.dll387IsBadReadPtr
KERNEL32.dll683lstrcmpiA
KERNEL32.dll511SMapLS_IP_EBP_8
KERNEL32.dll37CloseHandle
KERNEL32.dll613UnMapLS
KERNEL32.dll380InterlockedExchange
KERNEL32.dll454OpenVxDHandle
KERNEL32.dll402LoadLibraryA
KERNEL32.dll501RtlZeroMemory
KERNEL32.dll60CreateFileA
KERNEL32.dll98
KERNEL32.dll277GetProcAddress
KERNEL32.dll97
KERNEL32.dll384IsBadCodePtr
KERNEL32.dll176FreeLibrary
KERNEL32.dll390IsBadWritePtr
KERNEL32.dll212GetCurrentProcessId
KERNEL32.dll686lstrcpyA
KERNEL32.dll431MapSLFix
KERNEL32.dll57CreateEventA
KERNEL32.dll94DisableThreadLibraryCalls
KERNEL32.dll93
KERNEL32.dll521SUnMapLS_IP_EBP_8
KERNEL32.dll503SMapLS_IP_EBP_12
KERNEL32.dll401LeaveCriticalSection
KERNEL32.dll309GetSystemInfo
KERNEL32.dll245GetLastError
KERNEL32.dll412LocalFree
KERNEL32.dll408LocalAlloc
KERNEL32.dll100EnterCriticalSection
KERNEL32.dll636WaitForSingleObject
KERNEL32.dll554SetEvent
KERNEL32.dll422MakeCriticalSectionGlobal
KERNEL32.dll491ReinitializeCriticalSection
KERNEL32.dll500RtlUnwind
GDI32.dll254ResizePalette
GDI32.dll112GdiSetBatchLimit
GDI32.dll174GetObjectType
GDI32.dll263SelectPalette
GDI32.dll289SetObjectOwner
GDI32.dll246RealizePalette
GDI32.dll257SaveDC
GDI32.dll255RestoreDC
GDI32.dll53CreatePalette
GDI32.dll9BitBlt
GDI32.dll274SetDIBColorTable
GDI32.dll313StretchDIBits
GDI32.dll262SelectObject
GDI32.dll31CreateCompatibleDC
GDI32.dll190GetSystemPaletteEntries
GDI32.dll226PatBlt
GDI32.dll99ExtTextOutA
GDI32.dll36CreateDIBSection
GDI32.dll297SetStretchBltMode
GDI32.dll290SetPaletteEntries
GDI32.dll312StretchBlt
GDI32.dll30CreateCompatibleBitmap
GDI32.dll141GetDIBits
GDI32.dll186GetRegionData
GDI32.dll298SetSystemPaletteUse
GDI32.dll32CreateDCA
GDI32.dll70DeleteObject
GDI32.dll96ExtEscape
GDI32.dll142GetDeviceCaps
GDI32.dll67DeleteDC
GDI32.dll268SetBkColor
USER32.dll22ChangeDisplaySettingsA
USER32.dll321GetWindowThreadProcessId
USER32.dll526SetWindowLongA
USER32.dll465SendMessageA
USER32.dll431PostMessageA
USER32.dll356IsIconic
USER32.dll595wsprintfA
USER32.dll250GetKeyState
USER32.dll17CallWindowProcA
USER32.dll438RedrawWindow
USER32.dll183EnumDisplaySettingsA
USER32.dll364KillTimer
USER32.dll297GetSystemMetrics
USER32.dll593keybd_event
USER32.dll125DefWindowProcA
USER32.dll206GetAsyncKeyState
USER32.dll337IntersectRect
USER32.dll231GetDCEx
USER32.dll241GetForegroundWindow
USER32.dll542ShowWindow
USER32.dll363IsZoomed
USER32.dll520SetTimer
USER32.dll232GetDesktopWindow
USER32.dll308GetWindow
USER32.dll362IsWindowVisible
USER32.dll360IsWindowEnabled
USER32.dll568UnionRect
USER32.dll312GetWindowLongA
USER32.dll492SetForegroundWindow
USER32.dll359IsWindow
USER32.dll529SetWindowPos
USER32.dll549SystemParametersInfoA
USER32.dll400MessageBoxIndirectA
USER32.dll383LoadStringA
USER32.dll230GetDC
USER32.dll453ReleaseDC
USER32.dll53ClientToScreen
USER32.dll193EqualRect
USER32.dll219GetClientRect
USER32.dll418OffsetRect
USER32.dll510SetRect
USER32.dll459ScreenToClient
ADVAPI32.dll150RegCloseKey
ADVAPI32.dll172RegOpenKeyA
ADVAPI32.dll161RegEnumKeyA
ADVAPI32.dll181RegQueryValueExA
WINMM.dll137timeGetTime
ordentry_vafunction_name
10x18cc0DDHAL32_VidMemAlloc
20x18d20DDHAL32_VidMemFree
30x15c90DDInternalLock
40x15cb0DDInternalUnlock
50x94b0DSoundHelp
60x29d0DirectDrawCreate
70x15a70DirectDrawCreateClipper
80x3320DirectDrawEnumerateA
90x34f0DirectDrawEnumerateW
100x17460DllCanUnloadNow
110x17280DllGetClassObject
120x15cd0InternalLock
130x16330InternalUnlock
140x17630VidMemAlloc
150x178b0VidMemAmountFree
160x175b0VidMemFini
170x17740VidMemFree
180x174e0VidMemInit
190x178f0VidMemLargestFree
200x244b8thk1632_ThunkData32
210x24454thk3216_ThunkData32
module_nameDDRAW.dll
flags0
timestamp1996-05-29 22:52:53
version0.0
ordinal_base1
nFunctions21
nNames21
Names(21)0x2607c
Functions(21)0x26028
NameOrdinals(21)0x260d0

StringTable 040904E4

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft DirectDraw
FileVersion4.03.00.1096
InternalNameddraw.dll
LegalCopyrightCopyright © Microsoft Corp. 1994-1996
OriginalFilenameddraw.dll
ProductNameMicrosoft® DirectX for Windows® 95
ProductVersion4.03.00.1096

VS_FIXEDFILEINFO

FileVersion4.3.0.1096
ProductVersion4.3.0.1096
StrucVersion0x10000
FileFlagsMask0x30003f
FileFlags0
FileOS0x10004
FileType2
FileSubtype0
offsetsizetypecomment
0159744DLL05/29/1996 22:52:53#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK