vtk3231w.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	vtk3231w.dll
size	4608 (0x1200)
md5	ea33da967debed07f08405efee80513b

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x30070159
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	2.55
SizeOfCode	0x400
SizeOfInitializedData	0xa00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	1.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x7000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2d8	0x400	R-X CODE
.rdata	0x2000	0x1e	0x200	R-- IDATA
.data	0x3000	0xbc	0x200	RW- IDATA
.idata	0x4000	0x1bc	0x200	RW- IDATA
.edata	0x5000	0xd6	0x200	R-- IDATA
.reloc	0x6000	0x76	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x5000	0xd6
IMPORT	0x4000	0x1bc
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x6000	0x48
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
KERNEL32.dll	63	ThunkConnect32
KERNEL32.dll	235	GetModuleHandleA
KERNEL32.dll	43	SMapLS
KERNEL32.dll	17	FT_Exit12
KERNEL32.dll	52	SMapLS_IP_EBP_8
KERNEL32.dll	40	MapSL
KERNEL32.dll	259	GetProcAddress
KERNEL32.dll	62	SUnMapLS_IP_EBP_8
KERNEL32.dll	32	FT_Thunk
KERNEL32.dll	53	SUnMapLS
KERNEL32.dll	63	ThunkConnect32
KERNEL32.dll	235	GetModuleHandleA
KERNEL32.dll	43	SMapLS
KERNEL32.dll	17	FT_Exit12
KERNEL32.dll	52	SMapLS_IP_EBP_8
KERNEL32.dll	40	MapSL
KERNEL32.dll	259	GetProcAddress
KERNEL32.dll	62	SUnMapLS_IP_EBP_8
KERNEL32.dll	32	FT_Thunk
KERNEL32.dll	53	SUnMapLS
WOW32.dll	5	WOWGetVDMPointerUnfix
WOW32.dll	4	WOWGetVDMPointerFix

ord	entry_va	function_name
1	0x3058	stv_ThunkData32
2	0x1040	DLLapiCall16
3	0x105c	DLLTCaddr32To16
4	0x10e2	DLLTCaddr16To32
5	0x109f	release16BitAddress
6	0x1103	release32BitAddress

module_name	VTK3231W.dll
flags	0
timestamp	1995-07-14 23:44:24
version	0.0
ordinal_base	1
nFunctions	6
nNames	6
Names(6)	0x5040
Functions(6)	0x5028
NameOrdinals(6)	0x5058

show previews

offset	size	type	comment
0	4608	DLL	07/14/1995 23:44:25	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK