filenameTutorialVMM.x64.vmm
size94208 (0x17000)
md5f776591a7d12b980893828f9a998bb11
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
123507276
150204131
149307291
1313072913
147307297
10150
1323072921
146307291
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x54920f67
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion9.0
SizeOfCode0xd400
SizeOfInitializedData0x9800
SizeOfUninitializedData0
AddressOfEntryPoint0xd870
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x1c000
SizeOfHeaders0x400
CheckSum0x2696f
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000xd2080xd400R-X CODE
.rdata0xf0000x30120x3200R-- IDATA
.data0x130000x17b80x1000RW- IDATA
.pdata0x150000x9d80xa00R-- IDATA
.rsrc0x160000x47340x4800R-- IDATA
.reloc0x1b0000x2ee0x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x11ee00x132
IMPORT0x114180x8c
RESOURCE0x160000x4734
EXCEPTION0x150000x9d8
SECURITY00
BASERELOC0x1b0000x208
DEBUG0xf5200x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xf0000x4e0
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#600813261252
BITMAP#601013781252
BITMAP#601113781252
BITMAP#601214261252
BITMAP#601314261252
BITMAP#601414261252
BITMAP#601514261252
BITMAP#601613061252
BITMAP#601914261252
BITMAP#602014261252
BITMAP#602214021252
STRING#14781252
VERSION#17361252
MANIFEST#28601252
idlangstring
11033Error
21033Load Spindle: Bar Feed requires a tool
31033Load Spindle: Bar Pull requires a tool
41033Move Tool: requires a tool
51033Unload Spindle: Part Gripper requires a tool
61033Part Shift: Bar Feed requires a tool
71033Part Shift: Bar Pull requires a tool
module_namehintordfunction_name
Virtual.exe1844gc_SetProcessCustomDataField
Virtual.exe1729gc_SetCustomTileBitmap
Virtual.exe1727gc_SetCustomOpEventCallBack
Virtual.exe320gc_ClearCustomTileBitmap
Virtual.exe318gc_ClearCustomOpEventCallBack
Virtual.exe1041gc_GetProcessCustomDataField
Virtual.exe1634gc_RedrawTile
Virtual.exe1414gc_GetWPPartOffset
Virtual.exe941gc_GetOpInfoI
Virtual.exe1789gc_SetOpCustomDataField
Virtual.exe1588gc_PathAddLine
Virtual.exe1350gc_GetTileStatus
Virtual.exe1366gc_GetToolInfoI
Virtual.exe2194gci_GetAppHWND
Virtual.exe995gc_GetPartInfoI
Virtual.exe994gc_GetPartInfoD
Virtual.exe1423gc_GetWPStockBox
Virtual.exe1796gc_SetOpInfoI
Virtual.exe1795gc_SetOpInfoD
Virtual.exe1428gc_GetWPZXCS
Virtual.exe1546gc_MatchCS
Virtual.exe1596gc_PathCreate
Virtual.exe926gc_GetOpCustomDataField
Virtual.exe1585gc_PathAddCustom
Virtual.exe1590gc_PathAddPartMove
Virtual.exe1036gc_GetProcInfoI
mfc90.dll5701
mfc90.dll2065
mfc90.dll2110
mfc90.dll4429
mfc90.dll6407
mfc90.dll3892
mfc90.dll6409
mfc90.dll4112
mfc90.dll4136
mfc90.dll771
mfc90.dll5500
mfc90.dll2303
mfc90.dll1067
mfc90.dll1066
mfc90.dll6383
mfc90.dll776
mfc90.dll680
mfc90.dll5443
mfc90.dll441
mfc90.dll2016
mfc90.dll2978
mfc90.dll6423
mfc90.dll440
mfc90.dll3897
mfc90.dll5220
mfc90.dll6348
mfc90.dll5499
mfc90.dll3923
mfc90.dll1966
mfc90.dll3002
mfc90.dll5344
mfc90.dll5346
mfc90.dll4041
mfc90.dll4677
mfc90.dll5350
mfc90.dll5333
mfc90.dll5684
mfc90.dll2602
mfc90.dll2797
mfc90.dll2904
mfc90.dll4410
mfc90.dll2780
mfc90.dll2907
mfc90.dll2605
mfc90.dll2711
mfc90.dll2598
mfc90.dll3809
mfc90.dll3810
mfc90.dll3800
mfc90.dll2709
mfc90.dll4042
mfc90.dll4586
mfc90.dll4363
mfc90.dll3418
mfc90.dll577
mfc90.dll3774
mfc90.dll1103
mfc90.dll316
mfc90.dll4133
mfc90.dll888
mfc90.dll589
mfc90.dll320
mfc90.dll265
mfc90.dll1060
mfc90.dll266
mfc90.dll778
mfc90.dll1023
mfc90.dll592
mfc90.dll1239
mfc90.dll1963
mfc90.dll1205
mfc90.dll1203
mfc90.dll1229
mfc90.dll1146
mfc90.dll1195
mfc90.dll379
mfc90.dll1118
mfc90.dll1238
mfc90.dll1236
mfc90.dll1111
mfc90.dll1052
mfc90.dll321
mfc90.dll779
mfc90.dll380
MSVCR90.dll56public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

MSVCR90.dll123__clean_type_info_names_internal
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll90__CppXcptFilter
MSVCR90.dll226_amsg_exit
MSVCR90.dll312_encoded_null
MSVCR90.dll1196free
MSVCR90.dll463_initterm_e
MSVCR90.dll462_initterm
MSVCR90.dll590_malloc_crt
MSVCR90.dll301_decode_pointer
MSVCR90.dll740_onexit
MSVCR90.dll573_lock
MSVCR90.dll311_encode_pointer
MSVCR90.dll133__dllonexit
MSVCR90.dll932_unlock
MSVCR90.dll1301sprintf
MSVCR90.dll89__C_specific_handler
MSVCR90.dll99__CxxFrameHandler3
MSVCR90.dll131__crt_debugger_hook
KERNEL32.dll614GetTickCount
KERNEL32.dll905RtlCaptureContext
KERNEL32.dll846QueryPerformanceCounter
KERNEL32.dll430GetCurrentThreadId
KERNEL32.dll427GetCurrentProcessId
KERNEL32.dll591GetSystemTimeAsFileTime
KERNEL32.dll919RtlVirtualUnwind
KERNEL32.dll715IsDebuggerPresent
KERNEL32.dll1049SetUnhandledExceptionFilter
KERNEL32.dll1090UnhandledExceptionFilter
KERNEL32.dll426GetCurrentProcess
KERNEL32.dll1073TerminateProcess
KERNEL32.dll1061Sleep
KERNEL32.dll755LocalAlloc
KERNEL32.dll759LocalFree
KERNEL32.dll1207lstrcpyA
KERNEL32.dll912RtlLookupFunctionEntry
USER32.dll468LoadBitmapA
USER32.dll508MessageBoxA
OLEAUT32.dll6
ordentry_vafunction_name
10xc690AllocateVDataItems
20xc5d0CopyVMMStateData
30xc570CreateVMMStateData
40xc6d0DeallocateVDataItems
50xc650DisposeVMMStateData
60xa730DllCanUnloadNow
70xa6b0DllGetClassObject
80xa780DllRegisterServer
90xa7d0InitVMM
module_nameTutorialVMM.x64.vmm
flags0
timestamp2014-12-17 23:19:03
version0.0
ordinal_base1
nFunctions9
nNames9
Names(9)0x11f2c
Functions(9)0x11f08
NameOrdinals(9)0x11f50

StringTable 040904b0

CompanyNameGibbs and Associates
FileDescriptionTUTORIALVMM DLL
FileVersion1, 1, 0, 6
InternalNameTUTORIALVMM
LegalCopyrightCopyright (c) 2014
OriginalFilenameTUTORIALVMM.DLL
ProductNameGibbsCAM
ProductVersion10.7.19.0

VS_FIXEDFILEINFO

FileVersion1.1.0.6
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d088624BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK