filenamelibrfc32.dll
size3743744 (0x392000)
md50dc5598cbdba8ef60c3950c42c08e0c6
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
123507272
126503276
1255072712
9540352
93403523
10393
1105072739
10950727193
122507271
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x45952313
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2902
Magic0x10b
LinkerVersion8.0
SizeOfCode0x125000
SizeOfInitializedData0x26c000
SizeOfUninitializedData0
AddressOfEntryPoint0x10bd10
BaseOfCode0x1000
BaseOfData0x126000
ImageBase0x60690000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x407000
SizeOfHeaders0x1000
CheckSum0x394021
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x1242d50x125000R-X CODE
.rdata0x1260000x1f8ec30x1f9000R-- IDATA
.data0x31f0000xb9e040x45000RW- IDATA
.tls0x3d900090x1000RW- IDATA
.rsrc0x3da0000x7fa80x8000R-- IDATA
.reloc0x3e20000x244240x25000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x31dc300x1293
IMPORT0x31c5880xf0
RESOURCE0x3da0000x7fa8
EXCEPTION00
SECURITY00
BASERELOC0x3e20000x18dd4
DEBUG0x1265400x1c
ARCHITECTURE00
GLOBALPTR00
TLS0x31a2b00x18
LOAD_CONFIG0x31a2680x40
Bound_IAT00
IAT0x1260000x4d8
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x60a690000x60a690080x60a547d40x607b653000
typenamesizecp
TYPELIB#1308601252
STRING#11981252
VERSION#19601252
MANIFEST#23381252
idlangstring
10SAPrfcITab Class
20SAPrfcStructureDesc Class
30SAPrfcStructureView Class
40SAPrfcDataConvert
module_namehintordfunction_name
KERNEL32.dll553InterlockedExchange
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll412GetPrivateProfileStringA
KERNEL32.dll972lstrlenA
KERNEL32.dll963lstrcmpiA
KERNEL32.dll474GetThreadLocale
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll253GetACP
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll595LoadLibraryExA
KERNEL32.dll227FindResourceA
KERNEL32.dll966lstrcpyA
KERNEL32.dll853SizeofResource
KERNEL32.dll567IsDBCSLeadByte
KERNEL32.dll679RaiseException
KERNEL32.dll973lstrlenW
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll932WriteFile
KERNEL32.dll102CreateProcessA
KERNEL32.dll107CreateSemaphoreA
KERNEL32.dll52CloseHandle
KERNEL32.dll84CreateFileMappingA
KERNEL32.dll722ResumeThread
KERNEL32.dll910WaitForMultipleObjects
KERNEL32.dll616MapViewOfFile
KERNEL32.dll912WaitForSingleObject
KERNEL32.dll881UnmapViewOfFile
KERNEL32.dll101CreatePipe
KERNEL32.dll904VirtualQuery
KERNEL32.dll640OpenFileMappingA
KERNEL32.dll617MapViewOfFileEx
KERNEL32.dll902VirtualProtect
KERNEL32.dll897VirtualAlloc
KERNEL32.dll899VirtualFree
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll419GetProcessHeap
KERNEL32.dll528HeapAlloc
KERNEL32.dll534HeapFree
KERNEL32.dll441GetStdHandle
KERNEL32.dll823SetStdHandle
KERNEL32.dll693ReadFile
KERNEL32.dll369GetLastError
KERNEL32.dll489GetVersionExA
KERNEL32.dll854Sleep
KERNEL32.dll499GetWindowsDirectoryA
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll599LoadResource
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll479GetTickCount
KERNEL32.dll139DisableThreadLibraryCalls
KERNEL32.dll550InterlockedCompareExchange
KERNEL32.dll831SetThreadAffinityMask
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll676QueryPerformanceFrequency
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll273GetCommandLineW
KERNEL32.dll511GlobalFree
KERNEL32.dll449GetSystemDirectoryA
KERNEL32.dll371GetLocalTime
KERNEL32.dll789SetErrorMode
KERNEL32.dll471GetThreadContext
KERNEL32.dll488GetVersion
KERNEL32.dll185ExitProcess
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll600LocalAlloc
KERNEL32.dll696ReadProcessMemory
KERNEL32.dll855SleepEx
KERNEL32.dll482GetTimeZoneInformation
KERNEL32.dll344GetEnvironmentVariableA
KERNEL32.dll862TerminateProcess
KERNEL32.dll453GetSystemInfo
KERNEL32.dll276GetComputerNameA
KERNEL32.dll869TlsGetValue
KERNEL32.dll870TlsSetValue
KERNEL32.dll868TlsFree
KERNEL32.dll867TlsAlloc
KERNEL32.dll347GetExitCodeThread
KERNEL32.dll147DuplicateHandle
KERNEL32.dll805SetHandleInformation
KERNEL32.dll594LoadLibraryA
KERNEL32.dll416GetProcAddress
KERNEL32.dll248FreeLibrary
KERNEL32.dll243FormatMessageA
KERNEL32.dll604LocalFree
KERNEL32.dll325GetCurrentThread
KERNEL32.dll326GetCurrentThreadId
ADVAPI32.dll292GetUserNameA
ADVAPI32.dll478RegEnumKeyExA
ADVAPI32.dll472RegDeleteValueA
ADVAPI32.dll497RegQueryInfoKeyA
ADVAPI32.dll327LookupAccountNameA
ADVAPI32.dll428OpenProcessToken
ADVAPI32.dll282GetTokenInformation
ADVAPI32.dll329LookupAccountSidA
ADVAPI32.dll320IsValidSid
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll516RegSetValueExA
ADVAPI32.dll468RegDeleteKeyA
ADVAPI32.dll465RegCreateKeyExA
ADVAPI32.dll503RegQueryValueExA
ADVAPI32.dll492RegOpenKeyExA
ADVAPI32.dll247GetLengthSid
USER32.dll691UnregisterClassA
USER32.dll52CharUpperA
USER32.dll42CharNextA
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dllGetFileVersionInfoA
MSVCR80.dll1224atof
MSVCR80.dll1354setlocale
MSVCR80.dll1333perror
MSVCR80.dll365_encode_pointer
MSVCR80.dll653_malloc_crt
MSVCR80.dll366_encoded_null
MSVCR80.dll355_decode_pointer
MSVCR80.dll522_initterm
MSVCR80.dll523_initterm_e
MSVCR80.dll280_amsg_exit
MSVCR80.dll273_adjust_fdiv
MSVCR80.dll107__CppXcptFilter
MSVCR80.dll1005_unlock
MSVCR80.dll151__dllonexit
MSVCR80.dll636_lock
MSVCR80.dll802_onexit
MSVCR80.dll374_except_handler4_common
MSVCR80.dll173__lconv_init
MSVCR80.dll141__clean_type_info_names_internal
MSVCR80.dll334_crt_debugger_hook
MSVCR80.dll65void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR80.dll52public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR80.dll1094_wcsnset
MSVCR80.dll867_set_invalid_parameter_handler
MSVCR80.dll1362srand
MSVCR80.dll407_finite
MSVCR80.dll1256fputc
MSVCR80.dll1293isspace
MSVCR80.dll1453wctomb
MSVCR80.dll1366strcat_s
MSVCR80.dll1360sprintf_s
MSVCR80.dll1391strtoul
MSVCR80.dll1381strncpy_s
MSVCR80.dll1371strcpy_s
MSVCR80.dll134___mb_cur_max_func
MSVCR80.dll1317mblen
MSVCR80.dll397_fileno
MSVCR80.dll799_mktime64
MSVCR80.dll494_getpid
MSVCR80.dll441_ftime64
MSVCR80.dll909_splitpath
MSVCR80.dll1377strncat
MSVCR80.dll1345rand
MSVCR80.dll368_endthreadex
MSVCR80.dll295_beginthreadex
MSVCR80.dll341_ctime64
MSVCR80.dll1385strspn
MSVCR80.dll1041_vsnprintf
MSVCR80.dll1272fwrite
MSVCR80.dll465_get_osfhandle
MSVCR80.dll1388strtok
MSVCR80.dll1045_vsnprintf_s
MSVCR80.dll435_fstat64i32
MSVCR80.dll1285isalpha
MSVCR80.dll1384strrchr
MSVCR80.dll1322mbstowcs
MSVCR80.dll1448wcstombs
MSVCR80.dll930_stricmp
MSVCR80.dll1350rewind
MSVCR80.dll1265fscanf
MSVCR80.dll1294isupper
MSVCR80.dll510_heapchk
MSVCR80.dll485_getcwd
MSVCR80.dll1288isgraph
MSVCR80.dll1348remove
MSVCR80.dll1409vfprintf
MSVCR80.dll1226atol
MSVCR80.dll1337putc
MSVCR80.dll1375strftime
MSVCR80.dll1003_unlink
MSVCR80.dll1349rename
MSVCR80.dll507_gmtime64
MSVCR80.dll1379strncmp
MSVCR80.dll15void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR80.dll819_purecall
MSVCR80.dll116__CxxFrameHandler3
MSVCR80.dll16void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR80.dll1347realloc
MSVCR80.dll1261free
MSVCR80.dll1380strncpy
MSVCR80.dll1291isprint
MSVCR80.dll1359sprintf
MSVCR80.dll30void * __cdecl operator new[](unsigned int)

??_U@YAPAXI@Z

MSVCR80.dll831_recalloc
MSVCR80.dll833_resetstkoflw
MSVCR80.dll1328memcpy_s
MSVCR80.dll31void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR80.dll1331memset
MSVCR80.dll1415vsprintf
MSVCR80.dll1327memcpy
MSVCR80.dll1367strchr
MSVCR80.dll1386strstr
MSVCR80.dll1215abort
MSVCR80.dll1225atoi
MSVCR80.dll1277getenv
MSVCR80.dll1247fgets
MSVCR80.dll1241fclose
MSVCR80.dll1252fopen
MSVCR80.dll1329memmove
MSVCR80.dll1390strtol
MSVCR80.dll1404toupper
MSVCR80.dll1373strerror
MSVCR80.dll371_errno
MSVCR80.dll1325memchr
MSVCR80.dll1244fflush
MSVCR80.dll1254fprintf
MSVCR80.dll1316malloc
MSVCR80.dll1269ftell
MSVCR80.dll1267fseek
MSVCR80.dll634_localtime64
MSVCR80.dll977_time64
MSVCR80.dll1230calloc
MSVCR80.dll1257fputs
MSVCR80.dll1218asctime
MSVCR80.dll822_putenv
MSVCR80.dll1403tolower
MSVCR80.dll1363sscanf
MSVCR80.dll357_difftime64
MSVCR80.dll1342qsort
MSVCR80.dll1227bsearch
MSVCR80.dll1383strpbrk
MSVCR80.dll1335printf
MSVCR80.dll1284isalnum
MSVCR80.dll162__iob_func
MSVCR80.dll91_CxxThrowException
MSVCR80.dll926_strdup
ole32.dll102CoTaskMemRealloc
ole32.dll101CoTaskMemFree
ole32.dll16CoCreateInstance
ole32.dll100CoTaskMemAlloc
ole32.dll15CoCreateGuid
ole32.dll14CoCreateFreeThreadedMarshaler
WS2_32.dll16
WS2_32.dll20
WS2_32.dll7
WS2_32.dll19
WS2_32.dll1
WS2_32.dll21
WS2_32.dll40WSAIoctl
WS2_32.dll13
WS2_32.dll2
WS2_32.dll65WSASocketA
WS2_32.dll23
WS2_32.dll116
WS2_32.dll57
WS2_32.dll10
WS2_32.dll112
WS2_32.dll15
WS2_32.dll56
WS2_32.dll51
WS2_32.dll9
WS2_32.dll55
WS2_32.dll8
WS2_32.dll12
WS2_32.dll52
WS2_32.dll111
WS2_32.dll11
WS2_32.dll18
WS2_32.dll21WSADuplicateSocketA
WS2_32.dll4
WS2_32.dll6
WS2_32.dll26WSAEnumProtocolsA
WS2_32.dll5
WS2_32.dll3
WS2_32.dll57WSASend
WS2_32.dll115
iphlpapi.dll28GetAdaptersInfo
SHELL32.dll7CommandLineToArgvW
SHELL32.dll263ShellExecuteA
dbghelp.dll76SymInitialize
dbghelp.dll51SymGetLineFromAddr64
dbghelp.dll61SymGetModuleInfo64
dbghelp.dll67SymGetSymFromAddr64
dbghelp.dll26StackWalk64
dbghelp.dll64SymGetOptions
dbghelp.dll88SymSetOptions
dbghelp.dll28SymCleanup
dbghelp.dll47SymFunctionTableAccess64
dbghelp.dll59SymGetModuleBase64
OLEAUT32.dll2
OLEAUT32.dll3
OLEAUT32.dll6
OLEAUT32.dll277
ordentry_vafunction_name
10x26960ItAppLine
20x269b0ItAppendRow
30x256d0ItCopyRow
40x25660ItCpyLine
50x25560ItCreate
60x25d30ItDelLine
70x25cd0ItDelete
80x25d80ItDeleteRow
90x25890ItFill
100x25dd0ItFree
110x25610ItGetLine
120x25840ItGupLine
130x26870ItInsLine
140x268d0ItInsertRow
150x258e0ItLeng
160x25920ItLengthRow
170x25750ItPutLine
180x25960ItRegTable
190x257c0ItUpdateRow
200x25990ItUserData
210x575c0RemObjGetObject
220x58440RemObjInstallDriver
230x58970RemObjRegisterObject
240x57590RemObjReleaseObject
250x3c480RfcAbort
260xb240RfcAccept
270xb7b0RfcAcceptExt
280x240e0RfcAcceptWithChannel
290x3b390RfcAddExportParam
300x3b3d0RfcAddImportParam
310x3b500RfcAddTable
320x1f6c0RfcAlignFunctionInterface
330x3b1d0RfcAllocParamSpace
340x3c140RfcAllocString
350x126b0RfcAllowStartProgram
360xd8d0RfcAttachContext
370x3c4e0RfcCall
380x3d4a0RfcCallEx
390x3d0a0RfcCallExt
400x3d8c0RfcCallReceive
410x3dce0RfcCallReceiveEx
420x3d960RfcCallReceiveExt
430x8c80RfcCallReceiveTimed
440x3d2d0RfcCancel
450x72d0RfcCancelRegisterServer
460x3d3b0RfcCharConversion
470x7150RfcCheckRegisterServer
480xff40RfcCheckTransID
490x192c0RfcCheckVersionsOfUsedLibs
500x322a0RfcCleanupContext
510x3c430RfcClose
520x12e90RfcConfirmTransID
530x51a0RfcConnArgv3
540x5490RfcConnArgv
550x9d60RfcConnect
560xd040RfcConvertBcdToChar
570xd010RfcConvertCharToBcd
580x11eab0RfcCreateItabObj
590x11450RfcCreateLocalTransID
600xfdb0RfcCreateTransID
610x7ee0RfcCreateUuid
620x3b410RfcDefineImportParam
630xd9f0RfcDetachContext
640xf950RfcDispatch
650x21750RfcDsrInit
660x3c9f0RfcDynamicGetData
670xfbf0RfcEnvironment
680x34410RfcExceptionInfo
690x3b850RfcExecProgram
700x478b0RfcExidToRfcType
710x54e0RfcFileArgv
720x3b280RfcFreeParamSpace
730x3c190RfcFreeString
740x19320RfcGetAllLibVersions
750xd940RfcGetAttachedContext
760xe0d0RfcGetAttributes
770x127b0RfcGetCallInfo
780x1add0RfcGetClientId
790x1ae70RfcGetClientIdEx
800xd7f0RfcGetCodePagesInfo
810x3cae0RfcGetData
820x3d150RfcGetDataExt
830x22660RfcGetDomainFingerprintHex
840x58470RfcGetDriverCallBack
850x1ac90RfcGetEnqueueKey
860x1ed50RfcGetFunctionInfoAsTable
870x3b470RfcGetImportParam
880x3b0a0RfcGetLongName
890x3b020RfcGetLongNameEx
900x12a30RfcGetLuwInfo
910x3d5c0RfcGetMetaDaten4GUI
920x3c920RfcGetName
930x3c850RfcGetNameEx
940x19290RfcGetPatchLevel
950x202b0RfcGetStructureInfoAsTable
960x20850RfcGetStructureInfoFlat
970x3b590RfcGetTableHandle
980x19d00RfcGetTicket
990xfd00RfcGetTransID
1000x21c10RfcGetUserSidHex
1010x19280RfcGetVersion
1020x7c40RfcGuiCheck
1030xa830RfcGuiPrepare
1040x7d10RfcGuiReturn
1050x125a0RfcGuiStart
1060x11550RfcGuidToTid
1070x3b640RfcHealthCheck
1080x5780RfcIndirectCall
1090xa150RfcIndirectCallEx
1100xa200RfcIndirectCallExExt
1110x5f40RfcIndirectCallExt
1120x9450RfcInit
1130x84e0RfcInstallExternalLogonHandler
1140xf580RfcInstallFunction
1150xf530RfcInstallFunctionExt
1160xd5d0RfcInstallStructure2
1170xd4c0RfcInstallStructure
1180x101b0RfcInstallTransactionControl2
1190x10180RfcInstallTransactionControl
1200xd700RfcInstallUnicodeStructure
1210xd160RfcIoCtl
1220x3d1d0RfcIsValidHandle
1230x7e70RfcIsoLangToSap
1240x3a640RfcLastError
1250x3a710RfcLastErrorEx
1260x5090RfcListen
1270x1e080RfcNormalizeTabOrFldName
1280xb0d0RfcOpen
1290xb9f0RfcOpenEx
1300xbaa0RfcOpenExt
1310xbbd0RfcOpenExtV3
1320xf500RfcPlayback
1330x5f90RfcQueueInsert
1340x3ced0RfcRaise
1350x3cf10RfcRaiseErrorMessage
1360x3ccd0RfcRaiseTables
1370x3c5f0RfcReceive
1380x3da50RfcReceiveEx
1390x3d0e0RfcReceiveExt
1400x6d30RfcRegisterPasswordChanger
1410x1ed20RfcReleaseStructInfo
1420xe0a0RfcResetTraceDir
1430x48930RfcResizeBlob
1440x3c1c0RfcResizeXString
1450x7e90RfcSapLangToIso
1460x3cc10RfcSendData
1470x3d190RfcSendDataExt
1480xe580RfcSendSystemInfo
1490x7eb0RfcSetBasisTraceFile
1500x7ed0RfcSetBasisTraceLevel
1510x3c250RfcSetClientIdEx
1520xbe50RfcSetCodePage
1530x1ad10RfcSetEnqueueKey
1540x8c60RfcSetLeakTrace
1550x8df0RfcSetMaxCpicConn
1560xd0a0RfcSetParameter
1570xfc30RfcSetSystemCodePage
1580x1ab10RfcSetSystemTimeout
1590xd080RfcSetTrace
1600x6cf0RfcSncAclKeyToName
1610x6950RfcSncMode
1620x6cb0RfcSncNameToAclKey
1630x6b70RfcSncPartnerAclKey
1640x6a40RfcSncPartnerName
1650x7f10RfcStatistic
1660x216b0RfcStructureToFile
1670x216d0RfcStructureToFileByName
1680x115f0RfcTidToGuid
1690x7a70RfcTxAbort
1700x78a0RfcTxCommit
1710x7700RfcTxPrepareToCommit
1720x7560RfcTxStart
1730x351b0RfcTypeToString
1740xf710RfcUninstallFunction
1750x8e70RfcUseSideInfo
1760x6870RfcWaitForRequest
1770x1db50SAPIsClose
1780x1dbd0SAPIsCreate
1790x1d930SAPIsRead
1800x1da40SAPIsSeek
1810x1d9f0SAPIsTell
1820x1d9b0SAPIsWrite
module_nameLIBRFC32.dll
flags0
timestamp2006-12-28 22:18:03
version0.0
ordinal_base1
nFunctions182
nNames182
Names(182)0x31df30
Functions(182)0x31dc58
NameOrdinals(182)0x31e208

StringTable 000004b0

CompanyNameSAP AG
FileDescriptionRemote Function Call
FileVersion7100, 0, 0, 5288
InternalNameRFC
OriginalFilenamelibrfc32.dll
LegalCopyrightCopyright (c) SAP AG 1993 - 2006
ProductNameSAP R/3
ProductVersion7100.0.0
BuildThu Dec 28 23:17:46 2006
Change880476
Depot$Id: //bas/710_REL/src/krn/rfc/librfc32.rc#1 $

VS_FIXEDFILEINFO

FileVersion7100.0.0.5288
ProductVersion7100.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
03743744DLL12/29/2006 14:15:47#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x3c47d4