filenamelib3270.dll
size1202688 (0x125a00)
md526c3bb609ddac2a317aec40b845c7b85
typePE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x4ca1d388
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x230e
Magic0x10b
LinkerVersion2.56
SizeOfCode0xd0000
SizeOfInitializedData0x125600
SizeOfUninitializedData0xaa00
AddressOfEntryPoint0x1060
BaseOfCode0x1000
BaseOfData0xd1000
ImageBase0x702c0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x133000
SizeOfHeaders0x400
CheckSum0x1291c2
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xcfff80xd0000R-X CODE IDATA
.data0xd10000x456f00x45800RW- IDATA
.bss0x1170000xa9e00RW- UDATA
.edata0x1220000x9c00xa00R-- IDATA
.idata0x1230000x12140x1400RW- IDATA
.reloc0x1250000xde140xe000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x1220000x9c0
IMPORT0x1230000x1214
RESOURCE00
EXCEPTION00
SECURITY00
BASERELOC0x1250000xde14
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
ADVAPI32.DLL136DeregisterEventSource
ADVAPI32.DLL439RegisterEventSourceA
ADVAPI32.DLL449ReportEventA
GDI32.dll12BitBlt
GDI32.dll33CreateCompatibleBitmap
GDI32.dll34CreateCompatibleDC
GDI32.dll35CreateDCA
GDI32.dll70DeleteDC
GDI32.dll73DeleteObject
GDI32.dll119GetBitmapBits
GDI32.dll146GetDeviceCaps
GDI32.dll183GetObjectA
GDI32.dll279SelectObject
KERNEL32.dll1AddAtomA
KERNEL32.dll38CloseHandle
KERNEL32.dll64CreateEventA
KERNEL32.dll85CreateProcessA
KERNEL32.dll107DeleteCriticalSection
KERNEL32.dll126EnterCriticalSection
KERNEL32.dll176FindAtomA
KERNEL32.dll178FindClose
KERNEL32.dll182FindFirstFileA
KERNEL32.dll191FindNextFileA
KERNEL32.dll209FormatMessageA
KERNEL32.dll214FreeLibrary
KERNEL32.dll221GetAtomNameA
KERNEL32.dll284GetCurrentProcessId
KERNEL32.dll286GetCurrentThreadId
KERNEL32.dll306GetExitCodeProcess
KERNEL32.dll316GetFileType
KERNEL32.dll325GetLastError
KERNEL32.dll364GetProcAddress
KERNEL32.dll388GetStdHandle
KERNEL32.dll403GetSystemTimeAsFileTime
KERNEL32.dll423GetTickCount
KERNEL32.dll432GetVersion
KERNEL32.dll433GetVersionExA
KERNEL32.dll460GlobalMemoryStatus
KERNEL32.dll492InitializeCriticalSection
KERNEL32.dll497InterlockedExchange
KERNEL32.dll512IsDBCSLeadByteEx
KERNEL32.dll523LeaveCriticalSection
KERNEL32.dll524LoadLibraryA
KERNEL32.dll560MultiByteToWideChar
KERNEL32.dll597QueryPerformanceCounter
KERNEL32.dll638ResetEvent
KERNEL32.dll713SetLastError
KERNEL32.dll751Sleep
KERNEL32.dll759TerminateProcess
KERNEL32.dll808WaitForMultipleObjects
KERNEL32.dll814WideCharToMultiByte
msvcrt.dll_access
msvcrt.dll6_close
msvcrt.dll10_dup
msvcrt.dll23_fdopen
msvcrt.dll35_getch
msvcrt.dll38_getpid
msvcrt.dll56_mktemp
msvcrt.dll59_pclose
msvcrt.dll60_popen
msvcrt.dll62_putenv
msvcrt.dll78_stat
msvcrt.dll80_strdup
msvcrt.dll97_unlink
msvcrt.dll52__dllonexit
msvcrt.dll61__lc_codepage
msvcrt.dll65__mb_cur_max
msvcrt.dll137_assert
msvcrt.dll155_chsize
msvcrt.dll182_errno
msvcrt.dll266_iob
msvcrt.dll268_isctype
msvcrt.dll384_open
msvcrt.dll392_pctype
msvcrt.dll426_setmode
msvcrt.dll451_stricmp
msvcrt.dll455_strnicmp
msvcrt.dll490_vsnprintf
msvcrt.dll583abort
msvcrt.dll592atoi
msvcrt.dll601ctime
msvcrt.dll602difftime
msvcrt.dll604exit
msvcrt.dll607fclose
msvcrt.dll610fflush
msvcrt.dll611fgetc
msvcrt.dll613fgets
msvcrt.dll618fopen
msvcrt.dll619fprintf
msvcrt.dll620fputc
msvcrt.dll621fputs
msvcrt.dll624fread
msvcrt.dll625free
msvcrt.dll629fseek
msvcrt.dll631ftell
msvcrt.dll633fwrite
msvcrt.dll637getenv
msvcrt.dll641gmtime
msvcrt.dll670ldiv
msvcrt.dll671localeconv
msvcrt.dll672localtime
msvcrt.dll676malloc
msvcrt.dll680memchr
msvcrt.dll682memcpy
msvcrt.dll683memmove
msvcrt.dll684memset
msvcrt.dll685mktime
msvcrt.dll689printf
msvcrt.dll691putchar
msvcrt.dll692puts
msvcrt.dll695qsort
msvcrt.dll698realloc
msvcrt.dll701rewind
msvcrt.dll705setvbuf
msvcrt.dll706signal
msvcrt.dll709sprintf
msvcrt.dll712sscanf
msvcrt.dll713strcat
msvcrt.dll714strchr
msvcrt.dll715strcmp
msvcrt.dll717strcpy
msvcrt.dll719strerror
msvcrt.dll720strftime
msvcrt.dll721strlen
msvcrt.dll723strncmp
msvcrt.dll724strncpy
msvcrt.dll726strrchr
msvcrt.dll728strstr
msvcrt.dll730strtok
msvcrt.dll731strtol
msvcrt.dll732strtoul
msvcrt.dll739time
msvcrt.dll742tolower
msvcrt.dll743toupper
msvcrt.dll746ungetc
msvcrt.dll748vfprintf
msvcrt.dll751vsprintf
msvcrt.dll761wcslen
msvcrt.dll768wcsstr
USER32.dll249GetDesktopWindow
USER32.dll306GetProcessWindowStation
USER32.dll334GetUserObjectInformationW
USER32.dll431MessageBoxA
WS2_32.DLL3WSAAddressToStringA
WS2_32.DLL25WSAEventSelect
WS2_32.DLL81freeaddrinfo
WS2_32.DLL82getaddrinfo
WSOCK32.DLL26WSAGetLastError
WSOCK32.DLL30WSASetLastError
WSOCK32.DLL31WSAStartup
WSOCK32.DLL37closesocket
WSOCK32.DLL38connect
WSOCK32.DLL41gethostbyname
WSOCK32.DLL47getservbyname
WSOCK32.DLL49getsockname
WSOCK32.DLL52htons
WSOCK32.DLL53inet_addr
WSOCK32.DLL55inet_ntoa
WSOCK32.DLL56ioctlsocket
WSOCK32.DLL58ntohl
WSOCK32.DLL59ntohs
WSOCK32.DLL61recv
WSOCK32.DLL66select
WSOCK32.DLL67send
WSOCK32.DLL70setsockopt
WSOCK32.DLL71shutdown
WSOCK32.DLL72socket
ordentry_vafunction_name
10xd730BeginFileTransfer
20x18c0CallAndWait
30xe5d0CancelFileTransfer
40x1df60Error
50x26d10Get3270Socket
60xd720GetFileTransferState
70x173c0Input_String
80x18b0QueryCstate
90x1890Register3270IOCallbacks
100x1dee0Register3270ScreenCallbacks
110xd700RegisterFTCallbacks
120x18f0RunPendingEvents
130x29a20Set3270Log
140x26d80Toggled
150x1910Wait
160x1e050Warning
170x29aa0WriteLog
180x29b60WriteRCLog
190x16660action_Clear
200x162c0action_CursorDown
210x15440action_CursorLeft
220x15a70action_CursorRight
230x16210action_CursorUp
240x157c0action_Delete
250x16e30action_DeleteField
260x16cc0action_DeleteWord
270x16580action_Enter
280x15a10action_Erase
290x16b20action_EraseInput
300x15380action_FirstField
310x14e90action_NextField
320x14360action_PAKey
330x14210action_PFKey
340x14f70action_PreviousField
350x165c0action_SysReq
360x1e330console_window_append
370x1e310console_window_delete
380x1e2e0console_window_new
390x1e370console_window_wait_for_user_entry
400x1e270copy_device_buffer
410x83c0ctlr_erase
420xd6a0ctlr_get_cols
430xd690ctlr_get_rows
440x4e60ctlr_set_rows_cols
450x1d720cursor_get_addr
460x1d730cursor_set_addr
470x26e50do_toggle
480x17790emulate_input
490x5100find_field_attribute
500x5160find_field_length
510x10500get_3270_option_table
520x12460get_connected_lu
530x12480get_current_host
540x51e0get_field_attribute
550x27060get_toggle_by_name
560x27040get_toggle_name
570x11d20host_connect
580x122a0host_disconnect
590x121f0host_reconnect
600x169f0lib3270_EraseEOF
610x168a0lib3270_EraseEOL
620x15360lib3270_Reset
630x29d80lib3270_paste_string
640x10520new_3270_session
650x211c0popup_a_sockerr
660x1e110popup_an_error
670x1e140popup_system_error
680x1d9b0query_3270_terminal_status
690x1dea0query_counter
700x26cf0query_secure_connection
710x12400register_schange
720x26d30register_tchange
730x1d3c0screen_disp
740x1d300screen_read
750x1d6f0screen_resume
760x1d2e0screen_size
770x1cdb0screen_suspend
780x1e1a0set_device_buffer
790x26da0set_toggle
800x1df10show_3270_popup_dialog
810x1e1f0show_3270_test_pattern
820x1d7d0status_changed
830x1d790status_ctlr_done
840x1da50status_lu
850x1d810status_oerr
860x1d8f0status_reset
870x1d970status_reverse_mode
880x1dc50status_script
890x1dcb0status_timing
900x1d9c0status_twait
910x1da10status_typeahead
920x1dce0status_untiming
930x1dfe0update_toggle_actions
module_namelib3270.dll
flags0
timestamp2010-09-28 11:37:44
version0.0
ordinal_base1
nFunctions93
nNames93
Names(93)0x12219c
Functions(93)0x122028
NameOrdinals(93)0x122310
offsetsizetypecomment
01202688DLL09/28/2010 11:37:44#
15c115HTM#
ed5fc225HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK