filenameControlCAN.dll
size14848 (0x3a00)
md5df0a609727f6fc8f99283e84437b9a00
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
123507274
150204131
149307291
1313072910
132307296
147307295
1054
138307293
146307291
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5c8b6ea0
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion9.0
SizeOfCode0x1a00
SizeOfInitializedData0x1c00
SizeOfUninitializedData0
AddressOfEntryPoint0x23f4
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x8000
SizeOfHeaders0x400
CheckSum0xd860
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x19b10x1a00R-X CODE
.rdata0x30000xd090xe00R-- IDATA
.data0x40000x7a80x200RW- IDATA
.pdata0x50000x1980x200R-- IDATA
.rsrc0x60000x6d00x800R-- IDATA
.reloc0x70000x9a0x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x3b700x199
IMPORT0x36600x50
RESOURCE0x60000x6d0
EXCEPTION0x50000x198
SECURITY00
BASERELOC0x70000x30
DEBUG0x31e00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x1b0
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#17281252
MANIFEST#28541252
module_namehintordfunction_name
mfc90.dll1103
mfc90.dll776
mfc90.dll379
mfc90.dll266
mfc90.dll265
mfc90.dll1118
mfc90.dll1203
mfc90.dll778
MSVCR90.dll301_decode_pointer
MSVCR90.dll226_amsg_exit
MSVCR90.dll312_encoded_null
MSVCR90.dll90__CppXcptFilter
MSVCR90.dll131__crt_debugger_hook
MSVCR90.dll1268memset
MSVCR90.dll932_unlock
MSVCR90.dll133__dllonexit
MSVCR90.dll573_lock
MSVCR90.dll740_onexit
MSVCR90.dll1196free
MSVCR90.dll463_initterm_e
MSVCR90.dll462_initterm
MSVCR90.dll590_malloc_crt
MSVCR90.dll311_encode_pointer
MSVCR90.dll624_mbscmp
MSVCR90.dll557_itoa
MSVCR90.dll1153atoi
MSVCR90.dll1301sprintf
MSVCR90.dll678_mbsncpy
MSVCR90.dll698_mbsrchr
MSVCR90.dll89__C_specific_handler
MSVCR90.dll123__clean_type_info_names_internal
KERNEL32.dll919RtlVirtualUnwind
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll614GetTickCount
KERNEL32.dll846QueryPerformanceCounter
KERNEL32.dll905RtlCaptureContext
KERNEL32.dll912RtlLookupFunctionEntry
KERNEL32.dll1049SetUnhandledExceptionFilter
KERNEL32.dll1090UnhandledExceptionFilter
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll1073TerminateProcess
KERNEL32.dll1061Sleep
KERNEL32.dll500GetModuleFileNameA
KERNEL32.dll544GetProcAddress
KERNEL32.dll486GetLastError
KERNEL32.dll747LoadLibraryA
KERNEL32.dll540GetPrivateProfileStringA
KERNEL32.dll333FreeLibrary
KERNEL32.dll715IsDebuggerPresent
ordentry_vafunction_name
10x1cc0VCI_ClearBuffer
20x19d0VCI_CloseDevice
30x1c70VCI_GetReceiveNum
40x1b90VCI_GetReference
50x1a20VCI_InitCAN
60x1920VCI_OpenDevice
70x1a70VCI_ReadBoardInfo
80x1b30VCI_ReadCANStatus
90x1ac0VCI_ReadErrInfo
100x1e20VCI_Receive
110x1d60VCI_ResetCAN
120x1c00VCI_SetReference
130x1d10VCI_StartCAN
140x1db0VCI_Transmit
module_nameControlCAN.dll
flags0
timestamp2019-03-15 09:21:35
version0.0
ordinal_base1
nFunctions14
nNames14
Names(14)0x3bd0
Functions(14)0x3b98
NameOrdinals(14)0x3c08

StringTable 080403a8

CompanyName广州致远电子有限公司
FileDescription公司CAN设备操作统一接口动态库
FileVersion5.0.0.2
InternalNameControlCAN.dll
LegalCopyright广州致远电子有限公司。保留所有权利。
OriginalFilenameControlCAN.dll
ProductNameControlCAN.dll
ProductVersion5.0.0.2

VS_FIXEDFILEINFO

FileVersion5.0.0.2
ProductVersion5.0.0.2
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d09264BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK