filenameOVRDisplayRT32.dll
size77824 (0x13000)
md55d8b1df931342955569dccf2595a07d5
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
223210052
2242100511
225210054
221210054
206655011
207655011
2036550111
1084
229311018
220311011
219210051
15101
222311011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5580ff0c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion12.0
SizeOfCode0xd200
SizeOfInitializedData0x5e00
SizeOfUninitializedData0
AddressOfEntryPoint0xd35d
BaseOfCode0x1000
BaseOfData0xf000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x17000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xd1d40xd200R-X CODE
.rdata0xf0000x32cc0x3400R-- IDATA
.data0x130000xaf00x800RW- IDATA
.rsrc0x140000xa380xc00R-- IDATA
.reloc0x150000x10640x1200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x119a00x163
IMPORT0x11b040xa0
RESOURCE0x140000xa38
EXCEPTION00
SECURITY00
BASERELOC0x150000x1064
DEBUG0xf1a00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x109880x40
Bound_IAT00
IAT0xf0000x14c
Delay_IAT00
CLR_Header00
typenamesizecp
WEVT_TEMPLATE#18020
RCDATA#1180
MESSAGETABLE#11480
VERSION#18280
MANIFEST#23810
module_namehintordfunction_name
dbghelp.dll20ImageDirectoryEntryToData
d3d11.dll4D3D11CreateDevice
KERNEL32.dll930LeaveCriticalSection
KERNEL32.dll840InitializeCriticalSectionAndSpinCount
KERNEL32.dll669GetProcAddress
KERNEL32.dll1441VirtualProtect
KERNEL32.dll933LoadLibraryA
KERNEL32.dll1443VirtualQuery
KERNEL32.dll717GetSystemDirectoryW
KERNEL32.dll293EnterCriticalSection
KERNEL32.dll1017OutputDebugStringA
KERNEL32.dll1018OutputDebugStringW
KERNEL32.dll726GetSystemTimeAsFileTime
KERNEL32.dll526GetCurrentThreadId
KERNEL32.dll522GetCurrentProcessId
KERNEL32.dll1069QueryPerformanceCounter
KERNEL32.dll877IsProcessorFeaturePresent
KERNEL32.dll871IsDebuggerPresent
KERNEL32.dll835InitOnceExecuteOnce
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll289EncodePointer
KERNEL32.dll936LoadLibraryW
KERNEL32.dll254DecodePointer
USER32.dll645RedrawWindow
USER32.dll725SetForegroundWindow
USER32.dll855UpdateWindow
USER32.dll800ShowWindow
USER32.dll113CreateWindowExW
ADVAPI32.dll291EventWrite
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll657RegQueryValueExA
ADVAPI32.dll290EventUnregister
ADVAPI32.dll288EventRegister
ADVAPI32.dll644RegOpenKeyExA
MSVCP120.dll716void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP120.dll713void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP120.dll709char const * __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAPBDH@Z

MSVCP120.dll688char const * __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPBDH@Z

MSVCP120.dll717void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCR120.dll344_CxxThrowException
MSVCR120.dll372__CxxFrameHandler3
MSVCR120.dll114void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR120.dll112void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR120.dll1770memset
MSVCR120.dll1755malloc
MSVCR120.dll1667free
MSVCR120.dll1097_purecall
MSVCR120.dll1767memcpy_s
MSVCR120.dll1534calloc
MSVCR120.dll1832sprintf_s
MSVCR120.dll1863strtok_s
MSVCR120.dll1858strstr
MSVCR120.dll1202_stricmp
MSVCR120.dll1907vsprintf_s
MSVCR120.dll1910vswprintf_s
MSVCR120.dll1325_vsnprintf_s
MSVCR120.dll1871swprintf_s
MSVCR120.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120.dll916_lock
MSVCR120.dll1284_unlock
MSVCR120.dll558_calloc_crt
MSVCR120.dll430__dllonexit
MSVCR120.dll1082_onexit
MSVCR120.dll367__CppXcptFilter
MSVCR120.dll535_amsg_exit
MSVCR120.dll933_malloc_crt
MSVCR120.dll780_initterm
MSVCR120.dll781_initterm_e
MSVCR120.dll592_crt_debugger_hook
MSVCR120.dll428__crtUnhandledException
MSVCR120.dll427__crtTerminateProcess
MSVCR120.dll309void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120.dll634_except_handler4_common
MSVCR120.dll396__clean_type_info_names_internal
MSVCR120.dll1766memcpy
MSVCR120.dll1768memmove
ordentry_vafunction_name
10xcc30OVRGetRTFilterVersion
20xcb90OVRIsCreatingBackBuffer
30xcc20OVRShouldVSync
40xcab0PreloadLibraryRT
50xc830CreateDXGIFactory1
60xc970CreateDXGIFactory2
70xc6f0CreateDXGIFactory
80xc540Direct3DCreate9
90xc570Direct3DCreate9Ex
100xcdd0DllCanUnloadNow
110xcd10DllMain
module_nameRTFilter.dll
flags0
timestamp2015-06-17 05:00:59
version0.0
ordinal_base1
nFunctions11
nNames11
Names(11)0x119f4
Functions(11)0x119c8
NameOrdinals(11)0x11a20

StringTable 000004b0

CompanyNameOculus VR, LLC
FileDescriptionOculus Display Driver
FileVersion1.2.6.0
InternalNameOVRRTDisplay.dll
LegalCopyrightCopyright 2014 Oculus VR, LLC All Rights reserved.
OriginalFilenameOVRRTDisplay.dll
ProductNameOculus Display Driver
ProductVersion1.2.6.0

VS_FIXEDFILEINFO

FileVersion1.2.6.0
ProductVersion1.2.6.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType3
FileSubtype4
offsetsizetypecomment
077824DLL06/17/2015 05:01:00#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK