GbtWPBTService.exe - GbtWPBTS.exe - GIGABYTE WPBT Service

info
MZ
PE
resources
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	GbtWPBTService.exe
size	480256 (0x75400)
md5	372309fbdd120583455fd5c63c4b6386

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
259	25711	5
261	25711	150
259	26131	8
261	26131	36
260	26131	21
260	25711	14
257	25711	13
1	0	116
265	26433	9
255	26433	1
151	0	1
258	26433	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5c8b75e6
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.14
SizeOfCode	0x16600
SizeOfInitializedData	0x5fc00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2c6c
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x7a000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	3
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x16500	0x16600	R-X CODE
.rdata	0x18000	0xb7fc	0xb800	R-- IDATA
.data	0x24000	0x1dc8	0xc00	RW- IDATA
.pdata	0x26000	0x1560	0x1600	R-- IDATA
.rsrc	0x28000	0x50780	0x50800	R-- IDATA
.reloc	0x79000	0x680	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x22c14	0x8c
RESOURCE	0x28000	0x50780
EXCEPTION	0x26000	0x1560
SECURITY	0	0
BASERELOC	0x79000	0x680
DEBUG	0x20b30	0x70
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x20ba0	0x100
Bound_IAT	0	0
IAT	0x18000	0x370
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ZIP	#102	328151
VERSION	#1	824
MANIFEST	#1	381

module_name	hint	ord	function_name
SHLWAPI.dll	73		PathFileExistsW
SETUPAPI.dll	370		SetupDiGetDeviceRegistryPropertyW
SETUPAPI.dll	320		SetupDiEnumDeviceInfo
SETUPAPI.dll	340		SetupDiGetClassDevsW
KERNEL32.dll	634		GetModuleHandleW
KERNEL32.dll	185		CreateDirectoryW
KERNEL32.dll	630		GetModuleFileNameW
KERNEL32.dll	761		GetTempPathW
KERNEL32.dll	410		FindResourceW
KERNEL32.dll	1108		QueueUserWorkItem
KERNEL32.dll	190		CreateEventW
KERNEL32.dll	1411		Sleep
KERNEL32.dll	1308		SetEvent
KERNEL32.dll	965		LoadResource
KERNEL32.dll	134		CloseHandle
KERNEL32.dll	611		GetLastError
KERNEL32.dll	202		CreateFileW
KERNEL32.dll	1561		WriteFile
KERNEL32.dll	1410		SizeofResource
KERNEL32.dll	419		FlushFileBuffers
KERNEL32.dll	494		GetConsoleCP
KERNEL32.dll	512		GetConsoleMode
KERNEL32.dll	851		HeapSize
KERNEL32.dll	849		HeapReAlloc
KERNEL32.dll	1321		SetFilePointerEx
KERNEL32.dll	1502		WaitForSingleObject
KERNEL32.dll	1236		RtlPcToFileHeader
KERNEL32.dll	695		GetProcessHeap
KERNEL32.dll	730		GetStringTypeW
KERNEL32.dll	1359		SetStdHandle
KERNEL32.dll	1306		SetEnvironmentVariableW
KERNEL32.dll	430		FreeEnvironmentStringsW
KERNEL32.dll	570		GetEnvironmentStringsW
KERNEL32.dll	1541		WideCharToMultiByte
KERNEL32.dll	1227		RtlCaptureContext
KERNEL32.dll	1234		RtlLookupFunctionEntry
KERNEL32.dll	1241		RtlVirtualUnwind
KERNEL32.dll	1460		UnhandledExceptionFilter
KERNEL32.dll	1395		SetUnhandledExceptionFilter
KERNEL32.dll	539		GetCurrentProcess
KERNEL32.dll	1426		TerminateProcess
KERNEL32.dll	900		IsProcessorFeaturePresent
KERNEL32.dll	1097		QueryPerformanceCounter
KERNEL32.dll	540		GetCurrentProcessId
KERNEL32.dll	544		GetCurrentThreadId
KERNEL32.dll	748		GetSystemTimeAsFileTime
KERNEL32.dll	871		InitializeSListHead
KERNEL32.dll	893		IsDebuggerPresent
KERNEL32.dll	723		GetStartupInfoW
KERNEL32.dll	1240		RtlUnwindEx
KERNEL32.dll	1560		WriteConsoleW
KERNEL32.dll	1119		RaiseException
KERNEL32.dll	1335		SetLastError
KERNEL32.dll	303		EncodePointer
KERNEL32.dll	307		EnterCriticalSection
KERNEL32.dll	955		LeaveCriticalSection
KERNEL32.dll	271		DeleteCriticalSection
KERNEL32.dll	867		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1444		TlsAlloc
KERNEL32.dll	1446		TlsGetValue
KERNEL32.dll	1447		TlsSetValue
KERNEL32.dll	1445		TlsFree
KERNEL32.dll	431		FreeLibrary
KERNEL32.dll	689		GetProcAddress
KERNEL32.dll	961		LoadLibraryExW
KERNEL32.dll	725		GetStdHandle
KERNEL32.dll	354		ExitProcess
KERNEL32.dll	633		GetModuleHandleExW
KERNEL32.dll	474		GetCommandLineA
KERNEL32.dll	475		GetCommandLineW
KERNEL32.dll	846		HeapFree
KERNEL32.dll	575		GetExitCodeProcess
KERNEL32.dll	228		CreateProcessW
KERNEL32.dll	581		GetFileAttributesExW
KERNEL32.dll	842		HeapAlloc
KERNEL32.dll	154		CompareStringW
KERNEL32.dll	943		LCMapStringW
KERNEL32.dll	593		GetFileType
KERNEL32.dll	377		FindClose
KERNEL32.dll	383		FindFirstFileExW
KERNEL32.dll	400		FindNextFileW
KERNEL32.dll	905		IsValidCodePage
KERNEL32.dll	438		GetACP
KERNEL32.dll	666		GetOEMCP
KERNEL32.dll	453		GetCPInfo
KERNEL32.dll	1003		MultiByteToWideChar
ADVAPI32.dll	145		CreateServiceW
ADVAPI32.dll	592		QueryServiceStatus
ADVAPI32.dll	101		CloseServiceHandle
ADVAPI32.dll	535		OpenSCManagerW
ADVAPI32.dll	236		DeleteService
ADVAPI32.dll	106		ControlService
ADVAPI32.dll	537		OpenServiceW
ADVAPI32.dll	237		DeregisterEventSource
ADVAPI32.dll	754		SetServiceStatus
ADVAPI32.dll	691		RegisterServiceCtrlHandlerW
ADVAPI32.dll	762		StartServiceCtrlDispatcherW
ADVAPI32.dll	686		RegisterEventSourceW
ADVAPI32.dll	704		ReportEventW
ole32.dll	96		CoInitialize
ole32.dll	144		CoUninitialize
ole32.dll	43		CoCreateInstance
OLEAUT32.dll		2
OLEAUT32.dll		6

StringTable 040904b0

CompanyName	GIGA-BYTE TECHNOLOGY CO., LTD.
FileDescription	GIGABYTE WPBT Service
FileVersion	1.0.0.1
InternalName	GbtWPBTS.exe
LegalCopyright	Copyright (C) 2019 GIGA-BYTE TECHNOLOGY CO., LTD.
OriginalFilename	GbtWPBTS.exe
ProductName	GIGABYTE WPBT
ProductVersion	1.0.0.1

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
24828	328151	ZIP		#
749ff	2561	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 480256 bytes (469 KiB)


--
Type = PE
Physical Size = 480256
CPU = x64
64-bit = +
Characteristics = Executable LargeAddress
Created = 2019-03-15 09:52:38
Headers Size = 1024
Checksum = 0
Name = GbtWPBTS.exe
Image Size = 499712
Section Alignment = 4096
File Alignment = 512
Code Size = 91648
Initialized Data Size = 392192
Uninitialized Data Size = 0
Linker Version = 14.14
OS Version = 6.0
Image Version = 0.0
Subsystem Version = 6.0
Subsystem = Windows CUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware 0x20
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 5368709120
Comment = FileVersion: 1.0.0.1
ProductVersion: 1.0.0.1
CompanyName: GIGA-BYTE TECHNOLOGY CO., LTD.
FileDescription: GIGABYTE WPBT Service
InternalName: GbtWPBTS.exe
LegalCopyright: Copyright (C) 2019 GIGA-BYTE TECHNOLOGY CO., LTD.
OriginalFilename: GbtWPBTS.exe
ProductName: GIGABYTE WPBT
----
Path = .rsrc/ZIP/102
Size = 328151
Packed Size = 328151
--
Path = .rsrc/ZIP/102
Type = zip
Physical Size = 328151

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2019-03-14 08:29:44 D....            0            0  LanDriver
2018-11-21 17:32:22 ....A        15580         6513  LanDriver/e1d65x64.cat
2018-11-21 17:32:22 ....A         3130         1021  LanDriver/e1d65x64.din
2018-11-21 17:32:22 ....A       172604        16089  LanDriver/e1d65x64.inf
2018-11-21 17:32:22 ....A       568768       277854  LanDriver/e1d65x64.sys
2018-11-21 17:32:22 ....A        89024        25460  LanDriver/e1dmsg.dll
2019-03-14 07:33:57 ....A          146          130  LanDriver/Install.cmd
------------------- ----- ------------ ------------  ------------------------
2019-03-14 08:29:44             849252       327067  6 files, 1 folders

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

GbtWPBTService.exe- GbtWPBTS.exe - GIGABYTE WPBT Service

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

GbtWPBTService.exe
- GbtWPBTS.exe - GIGABYTE WPBT Service