filenameqtsamxvdd.dll
size41472 (0xa200)
md52bd690b2a01ced34b8883ad35bb65c3d
typePE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
6492101
1095
25921013
6392101
6991111
1089662
2891787
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x40b74b29
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion7.0
SizeOfCode0x7e00
SizeOfInitializedData0x3e00
SizeOfUninitializedData0
AddressOfEntryPoint0x2646
BaseOfCode0x1000
BaseOfData0x9000
ImageBase0x2000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.10
Reserved10
SizeOfImage0xe000
SizeOfHeaders0x400
CheckSum0x100f2
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x7da60x7e00R-X CODE
.data0x90000x1f5c0x200RW- IDATA
.rsrc0xb0000x10d00x1200R-- IDATA
.reloc0xd0000xb180xc00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x89b00x3f6
IMPORT0x83540x8c
RESOURCE0xb0000x10d0
EXCEPTION00
SECURITY00
BASERELOC0xd0000xa6c
DEBUG0x11900x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x190
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#129380
VERSION#112000
idlangstring
11033PC Link Card VDDInstallMemoryHook Failed: The memory area noted below may be in use. Use the QTS PC Link Configuration application to change the selected memory address.
21033Error -- Problem with PC Link card interface driver. Please check to make sure the sst_drvr.sys driver has access to the configured port and memory addresses. See User's Guide for details.
31033Initialization of the virtual PC Link interface for RSLinx failed. Make sure that the RSLinx CIP mode is correctly set.
41033Load of the RsLinx DLL (dtl32.dll) failed. Are you sure you have RSLinx installed?
51033Could not read virtual memory address from registry. Make sure SST Driver is installed and run the QTS PC Link Card Configuration applet from the control panel.
61033Could not read virtual port address from registry. Make sure SST Driver is installed and run the QTS PC Link Card Configuration applet from the control panel.
71033PC Link Card VDDInstallIOHook Failed: The port address may be in use. Use the QTS PC Link Configuration application to change the selected memory address.
81033Could not read the memory size from the registry. Make sure SST Driver is installed and run the QTS PC Link Card Configuration applet from the control panel.
91033Could not read the bus type from the registry. Make sure SST Driver is installed and run the QTS PC Link Card Configuration applet from the control panel.
141033Unknown Device Error: The choices are PC Link card or Com Port; check your AMX software configuration settings.
module_namehintordfunction_name
msvcrt.dll676free
msvcrt.dll727malloc
msvcrt.dll760sprintf
KERNEL32.dll616OutputDebugStringA
KERNEL32.dll809Sleep
KERNEL32.dll568LocalFree
KERNEL32.dll224FormatMessageA
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll44CloseHandle
KERNEL32.dll346GetLastError
KERNEL32.dll127DeviceIoControl
KERNEL32.dll70CreateEventA
KERNEL32.dll381GetOverlappedResult
KERNEL32.dll456GetVersionExA
KERNEL32.dll74CreateFileA
KERNEL32.dll886WriteFile
KERNEL32.dll229FreeLibrary
KERNEL32.dll393GetProcAddress
KERNEL32.dll558LoadLibraryA
KERNEL32.dll681ResetEvent
KERNEL32.dll471GlobalAlloc
KERNEL32.dll389GetPrivateProfileStringA
KERNEL32.dll478GlobalFree
ntvdm.exe79getCH
ntvdm.exe84getDH
ntvdm.exe74getBH
ntvdm.exe85getDI
ntvdm.exe71getAH
ntvdm.exe76getBP
ntvdm.exe77getBX
ntvdm.exe88getDX
ntvdm.exe82getCX
ntvdm.exe73getAX
ntvdm.exe72getAL
ntvdm.exe137setDX
ntvdm.exe122setAX
ntvdm.exe123setBH
ntvdm.exe133setDH
ntvdm.exe128setCH
ntvdm.exe120setAH
ntvdm.exe124setBL
ntvdm.exe135setDL
ntvdm.exe129setCL
ntvdm.exe121setAL
ntvdm.exe134setDI
ntvdm.exe157setSI
ntvdm.exe125setBP
ntvdm.exe126setBX
ntvdm.exe131setCX
ntvdm.exe78getCF
ntvdm.exe75getBL
ntvdm.exe86getDL
ntvdm.exe80getCL
ntvdm.exe83getDF
ntvdm.exe97getES
ntvdm.exe87getDS
ntvdm.exe112getZF
ntvdm.exe110getSP
ntvdm.exe111getSS
ntvdm.exe158setSP
ntvdm.exe160setZF
ntvdm.exe156setSF
ntvdm.exe154setOF
ntvdm.exe29VDDInstallIOHook
ntvdm.exe30VDDInstallMemoryHook
ntvdm.exe31VDDInstallUserHook
ntvdm.exe23VDDDeInstallIOHook
ntvdm.exe24VDDDeInstallMemoryHook
ntvdm.exe27VDDFreeMem
ntvdm.exe25VDDDeInstallUserHook
ntvdm.exe43VdmMapFlat
ntvdm.exe103getIP
ntvdm.exe81getCS
ntvdm.exe152setIP
ntvdm.exe40VDDTerminateVDM
ntvdm.exe127setCF
ntvdm.exe109getSI
USER32.dll728wsprintfA
USER32.dll456LoadStringA
USER32.dll476MessageBoxA
ADVAPI32.dll469RegEnumKeyExA
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll456RegCloseKey
WS2_32.dll19
WS2_32.dll111
WS2_32.dll16
WS2_32.dll116
WS2_32.dll3
WS2_32.dll4
WS2_32.dll23
WS2_32.dll9
WS2_32.dll11
WS2_32.dll115
ordentry_vafunction_name
10x397c_AddCmdAND@32
20x3dbd_AddCmdEXTRACT@24
30x4045_AddCmdInpM@24
40x3e96_AddCmdInpP@24
50x3b30_AddCmdNOT@24
60x3a56_AddCmdOR@32
70x3f6b_AddCmdOutM@32
80x38a2_AddCmdOutP@32
90x3ce3_AddCmdRECORD@32
100x3c09_AddCmdXOR@32
110x4317_CancelWaitForInt@8
120x37cf_CreateNewCommand@16
130x43cf_EnumCardNames@12
140x411e_ExecuteCmd@28
150x458f_GetCardInfo@12
160x4620_InitializeDevice@12
170x361c_MapMemory@20
180x46d0_OpenSSTDevice@8
190x48f8_PBM_inmem@20
200x494c_PBM_outmem@20
210x481b_PFB_inmem@20
220x486c_PFB_outmem@20
230x36f7_UnmapMemory@12
240x1d28VDDDispatch
250x1d20VDDInit
260x423e_WaitForInt@28
270x2faf_inmemb@12
280x31ca_inmeml@12
290x30bc_inmemw@12
300x49dc_inpcicfg@16
310x2c7b_inprtb@12
320x2e9e_inprtl@12
330x2d8c_inprtw@12
340x32d7_outmemb@16
350x3505_outmeml@16
360x33ee_outmemw@16
370x4a90_outpcicfg@20
380x292a_outprtb@16
390x2b60_outprtl@16
400x2a45_outprtw@16
module_nameVDD.dll
flags0
timestamp2004-05-28 14:22:32
version0.0
ordinal_base1
nFunctions40
nNames40
Names(40)0x8a78
Functions(40)0x89d8
NameOrdinals(40)0x8b18

StringTable 040904b0

CommentsRSLinx Virtual PC Link Card Version
CompanyNameQuest Technical Solutions
FileDescriptionPC Link VDD For Automax Software
FileVersion3.1.0.5
InternalNameqtsamxvdd.vdd
LegalCopyrightCopyright (C) 2001-2003 Quest Technical Solutions
LegalTrademarks
OriginalFilenameqtsamxvdd.vdd
PrivateBuild
ProductNameQTS-AMX-VDD
ProductVersion3.1.0.5
SpecialBuildCommand Central - PC-LINK sleep delay, SST PCI card support, AN-X-DCSNet support

VS_FIXEDFILEINFO

FileVersion3.1.0.5
ProductVersion3.1.0.5
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0x20
FileOS0x40004
FileType3
FileSubtype6
offsetsizetypecomment
041472DLL05/28/2004 14:22:33#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK