filenameOVRDisplayRT64.dll
size95232 (0x17400)
md56b7ce9dfd5448bba893f4fbb2682718a
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x118

Rich Header

lib idversiontimes used
199411181
223208061
2242080612
225208064
221208064
206655011
207655011
2036550111
1086
229311018
220311011
219210051
15101
222311011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5580ff1e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion12.0
SizeOfCode0xf800
SizeOfInitializedData0x8000
SizeOfUninitializedData0
AddressOfEntryPoint0xf630
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x1b000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xf7310xf800R-X CODE
.rdata0x110000x4ed40x5000R-- IDATA
.data0x160000x11980xa00RW- IDATA
.pdata0x180000xde00xe00R-- IDATA
.rsrc0x190000xa380xc00R-- IDATA
.reloc0x1a0000x2f80x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x154100x163
IMPORT0x155740xa0
RESOURCE0x190000xa38
EXCEPTION0x180000xde0
SECURITY00
BASERELOC0x1a0000x2f8
DEBUG0x113400x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x133c00x70
Bound_IAT00
IAT0x110000x2a0
Delay_IAT00
CLR_Header00
typenamesizecp
WEVT_TEMPLATE#18020
RCDATA#1180
MESSAGETABLE#11480
VERSION#18280
MANIFEST#23810
module_namehintordfunction_name
dbghelp.dll20ImageDirectoryEntryToData
d3d11.dll4D3D11CreateDevice
KERNEL32.dll933LeaveCriticalSection
KERNEL32.dll849InitializeCriticalSectionAndSpinCount
KERNEL32.dll676GetProcAddress
KERNEL32.dll1457VirtualProtect
KERNEL32.dll936LoadLibraryA
KERNEL32.dll1459VirtualQuery
KERNEL32.dll724GetSystemDirectoryW
KERNEL32.dll297EnterCriticalSection
KERNEL32.dll1020OutputDebugStringA
KERNEL32.dll1021OutputDebugStringW
KERNEL32.dll733GetSystemTimeAsFileTime
KERNEL32.dll532GetCurrentThreadId
KERNEL32.dll528GetCurrentProcessId
KERNEL32.dll1072QueryPerformanceCounter
KERNEL32.dll880IsProcessorFeaturePresent
KERNEL32.dll874IsDebuggerPresent
KERNEL32.dll844InitOnceExecuteOnce
KERNEL32.dll621GetModuleHandleW
KERNEL32.dll293EncodePointer
KERNEL32.dll939LoadLibraryW
KERNEL32.dll255DecodePointer
USER32.dll649RedrawWindow
USER32.dll731SetForegroundWindow
USER32.dll863UpdateWindow
USER32.dll808ShowWindow
USER32.dll113CreateWindowExW
ADVAPI32.dll291EventWrite
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll657RegQueryValueExA
ADVAPI32.dll290EventUnregister
ADVAPI32.dll288EventRegister
ADVAPI32.dll644RegOpenKeyExA
MSVCP120.dll716void __cdecl std::_Xlength_error(char const * __ptr64)

?_Xlength_error@std@@YAXPEBD@Z

MSVCP120.dll713void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP120.dll709char const * __ptr64 __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAPEBDH@Z

MSVCP120.dll688char const * __ptr64 __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPEBDH@Z

MSVCP120.dll717void __cdecl std::_Xout_of_range(char const * __ptr64)

?_Xout_of_range@std@@YAXPEBD@Z

MSVCR120.dll325_CxxThrowException
MSVCR120.dll354__CxxFrameHandler3
MSVCR120.dll114void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

MSVCR120.dll112void * __ptr64 __cdecl operator new(unsigned __int64)

??2@YAPEAX_K@Z

MSVCR120.dll1719memmove
MSVCR120.dll1721memset
MSVCR120.dll1616free
MSVCR120.dll1038_purecall
MSVCR120.dll1718memcpy_s
MSVCR120.dll1477calloc
MSVCR120.dll1788sprintf_s
MSVCR120.dll1820strtok_s
MSVCR120.dll1815strstr
MSVCR120.dll1141_stricmp
MSVCR120.dll1866vsprintf_s
MSVCR120.dll1869vswprintf_s
MSVCR120.dll1264_vsnprintf_s
MSVCR120.dll1828swprintf_s
MSVCR120.dll859_lock
MSVCR120.dll1223_unlock
MSVCR120.dll521_calloc_crt
MSVCR120.dll415__dllonexit
MSVCR120.dll348__C_specific_handler
MSVCR120.dll1026_onexit
MSVCR120.dll349__CppXcptFilter
MSVCR120.dll498_amsg_exit
MSVCR120.dll876_malloc_crt
MSVCR120.dll737_initterm
MSVCR120.dll738_initterm_e
MSVCR120.dll413__crt_debugger_hook
MSVCR120.dll412__crtUnhandledException
MSVCR120.dll411__crtTerminateProcess
MSVCR120.dll382__crtCapturePreviousContext
MSVCR120.dll307void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120.dll283public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR120.dll379__clean_type_info_names_internal
MSVCR120.dll1717memcpy
MSVCR120.dll1706malloc
ordentry_vafunction_name
10xed70OVRGetRTFilterVersion
20xecc0OVRIsCreatingBackBuffer
30xed60OVRShouldVSync
40xeb90PreloadLibraryRT
50xe770CreateDXGIFactory
60xe8d0CreateDXGIFactory1
70xea30CreateDXGIFactory2
80xe5a0Direct3DCreate9
90xe5d0Direct3DCreate9Ex
100xef50DllCanUnloadNow
110xee40DllMain
module_nameRTFilter.dll
flags0
timestamp2015-06-17 05:01:17
version0.0
ordinal_base1
nFunctions11
nNames11
Names(11)0x15464
Functions(11)0x15438
NameOrdinals(11)0x15490

StringTable 000004b0

CompanyNameOculus VR, LLC
FileDescriptionOculus Display Driver
FileVersion1.2.6.0
InternalNameOVRRTDisplay.dll
LegalCopyrightCopyright 2014 Oculus VR, LLC All Rights reserved.
OriginalFilenameOVRRTDisplay.dll
ProductNameOculus Display Driver
ProductVersion1.2.6.0

VS_FIXEDFILEINFO

FileVersion1.2.6.0
ProductVersion1.2.6.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType3
FileSubtype4
offsetsizetypecomment
15c115HTM#
15d089648BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK