mswsock.dll - Microsoft Windows Sockets 2.0 Service Provider

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	mswsock.dll
size	326144 (0x4fa00)
md5	1d5185a4c7e6695431ae4b55c3d7d333

type	PE32+ executable (DLL) (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
149	30729	1
1	0	241
147	30729	47
131	30729	11
146	30729	1
142	30729	88
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x4ce7c83d
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	9.0
SizeOfCode	0x41c00
SizeOfInitializedData	0xde00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1054
BaseOfCode	0x1000
ImageBase	0x7ff734a0000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x55000
SizeOfHeaders	0x800
CheckSum	0x54c55
Subsystem	3
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2e6d0	0x2e800	R-X CODE
SANONTCP	0x30000	0x13365	0x13400	R-X CODE
.rdata	0x44000	0x8390	0x8400	R-- IDATA
.data	0x4d000	0x2370	0x1c00	RW- IDATA
.pdata	0x50000	0x2d9c	0x2e00	R-- IDATA
.rsrc	0x53000	0x548	0x600	R-- IDATA
.reloc	0x54000	0x170	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x44c08	0x2f5
IMPORT	0x46b50	0x1cc
RESOURCE	0x53000	0x548
EXCEPTION	0x50000	0x2d9c
SECURITY	0	0
BASERELOC	0x54000	0x170
DEBUG	0x2f670	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0x308	0x364
IAT	0x44000	0x708
Delay_IAT	0x469c0	0x60
CLR_Header	0	0

show previews

type	name	size	cp
MUI	#1	200	0
VERSION	#1	972	0

module_name	hint	ord	function_name
msvcrt.dll	755		_strnicmp
msvcrt.dll	850		_vsnprintf
msvcrt.dll	1140		malloc
msvcrt.dll	1152		memcpy
msvcrt.dll	1156		memset
msvcrt.dll	83		__C_specific_handler
msvcrt.dll	160		_amsg_exit
msvcrt.dll	364		_initterm
msvcrt.dll	82		_XcptFilter
msvcrt.dll	1286		wcstol
msvcrt.dll	367		_iob
msvcrt.dll	1075		fprintf
msvcrt.dll	856		_vsnwprintf
msvcrt.dll	899		_wcsnicmp
msvcrt.dll	1270		wcslen
msvcrt.dll	1208		strlen
msvcrt.dll	1066		fgets
msvcrt.dll	1073		fopen
msvcrt.dll	1060		fclose
msvcrt.dll	1178		rewind
msvcrt.dll	889		_wcsicmp
msvcrt.dll	1038		atoi
msvcrt.dll	1108		isdigit
msvcrt.dll	1263		wcschr
msvcrt.dll	745		_stricmp
msvcrt.dll	1154		memmove
msvcrt.dll	1223		strtoul
msvcrt.dll	1082		free
msvcrt.dll	1262		wcscat_s
msvcrt.dll	1275		wcsncpy_s
msvcrt.dll	1151		memcmp
ntdll.dll	931		RtlInitUnicodeString
ntdll.dll	635		RtlCaptureContext
ntdll.dll	1026		RtlLookupFunctionEntry
ntdll.dll	1265		RtlVirtualUnwind
ntdll.dll	693		RtlCreateHeap
ntdll.dll	756		RtlDestroyHeap
ntdll.dll	841		RtlFreeAnsiString
ntdll.dll	922		RtlInitAnsiString
ntdll.dll	618		RtlAnsiStringToUnicodeString
ntdll.dll	1223		RtlUnicodeStringToAnsiString
ntdll.dll	396		NtQueryInformationFile
ntdll.dll	392		NtQueryEvent
ntdll.dll	1329		ShipAssert
ntdll.dll	500		NtSetInformationThread
ntdll.dll	320		NtLoadDriver
ntdll.dll	609		RtlAdjustPrivilege
ntdll.dll	920		RtlImpersonateSelf
ntdll.dll	1096		RtlRaiseStatus
ntdll.dll	262		NtDelayExecution
ntdll.dll	735		RtlDeleteCriticalSection
ntdll.dll	209		NtCancelIoFile
ntdll.dll	428		NtQuerySystemTime
ntdll.dll	230		NtCreateFile
ntdll.dll	497		NtSetInformationObject
ntdll.dll	231		NtCreateIoCompletion
ntdll.dll	554		NtWaitForMultipleObjects
ntdll.dll	613		RtlAllocateHeap
ntdll.dll	434		NtQueueApcThread
ntdll.dll	178		NtAlertThread
ntdll.dll	556		NtWaitForSingleObject
ntdll.dll	438		NtReadFile
ntdll.dll	488		NtSetEvent
ntdll.dll	1045		RtlNtStatusToDosError
ntdll.dll	213		NtClearEvent
ntdll.dll	888		RtlGetNtProductType
ntdll.dll	271		NtDeviceIoControlFile
ntdll.dll	1087		RtlQueryRegistryValues
ntdll.dll	1105		RtlRegisterSecureMemoryCacheCallback
ntdll.dll	848		RtlFreeUnicodeString
ntdll.dll	1194		RtlStringFromGUID
ntdll.dll	494		NtSetInformationFile
ntdll.dll	228		NtCreateEvent
ntdll.dll	506		NtSetIoCompletion
ntdll.dll	452		NtRemoveIoCompletion
ntdll.dll	843		RtlFreeHeap
ntdll.dll	983		RtlIpv6StringToAddressW
ntdll.dll	975		RtlIpv4StringToAddressW
ntdll.dll	976		RtlIpv6AddressToStringA
ntdll.dll	930		RtlInitString
ntdll.dll	431		NtQueryValueKey
ntdll.dll	1404		WinSqmIsOptedIn
ntdll.dll	939		RtlInitializeCriticalSectionAndSpinCount
ntdll.dll	214		NtClose
ntdll.dll	347		NtOpenKey
user32.dll	7		IsWindow
RPCRT4.dll	520		UuidFromStringW
RPCRT4.dll	524		UuidToStringW
RPCRT4.dll	515		UuidCreate
RPCRT4.dll	506		RpcStringFreeW
WS2_32.dll		14
WS2_32.dll	54		WSAIoctl
WS2_32.dll	41		WSAEnumProtocolsW
WS2_32.dll		55
WS2_32.dll		56
WS2_32.dll	121		WSCWriteProviderOrder32
WS2_32.dll	91		WSCDeinstallProvider
WS2_32.dll	109		WSCInstallProvider64_32
WS2_32.dll	117		WSCUpdateProvider32
WS2_32.dll	92		WSCDeinstallProvider32
WS2_32.dll	116		WSCUpdateProvider
WS2_32.dll	120		WSCWriteProviderOrder
WS2_32.dll	98		WSCEnumProtocols32
WS2_32.dll		9
WS2_32.dll		11
WS2_32.dll		57
WS2_32.dll	68		WSARecv
WS2_32.dll	131		WahDestroyHandleContextTable
WS2_32.dll		114
WS2_32.dll	128		WahCreateHandleContextTable
WS2_32.dll	142		WahReferenceContextByHandle
WS2_32.dll		3
WS2_32.dll	83		WSASocketW
WS2_32.dll		115
WS2_32.dll		111
WS2_32.dll	67		WSAProviderConfigChange
WS2_32.dll		15
WS2_32.dll		12
WS2_32.dll	143		WahRemoveHandleContext
WS2_32.dll	102		WSCGetProviderPath
WS2_32.dll	97		WSCEnumProtocols
WS2_32.dll	135		WahInsertHandleContext
WS2_32.dll	156		getnameinfo
WS2_32.dll	134		WahEnumerateHandleContexts
WS2_32.dll		112
WS2_32.dll	103		WSCGetProviderPath32
WS2_32.dll		116
API-MS-Win-Core-Debug-L1-1-0.dll	2		OutputDebugStringA
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	6		UnhandledExceptionFilter
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	1		GetLastError
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	5		SetUnhandledExceptionFilter
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	4		SetLastError
API-MS-Win-Core-Handle-L1-1-0.dll	1		DuplicateHandle
API-MS-Win-Core-Handle-L1-1-0.dll			CloseHandle
API-MS-Win-Core-IO-L1-1-0.dll	3		GetOverlappedResult
API-MS-Win-Core-IO-L1-1-0.dll	1		CreateIoCompletionPort
API-MS-Win-Core-IO-L1-1-0.dll	6		PostQueuedCompletionStatus
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	12		GetProcAddress
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	4		FreeLibraryAndExitThread
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	9		GetModuleHandleExA
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	7		GetModuleFileNameW
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	14		LoadLibraryExW
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	13		LoadLibraryExA
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	3		FreeLibrary
API-MS-Win-Core-Localization-L1-1-0.dll	33		LCMapStringW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	30		RegQueryValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll			RegCloseKey
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	24		RegOpenKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	29		RegQueryValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	11		RegEnumKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	4		RegDeleteKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	2		RegCreateKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	37		RegSetValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	36		RegSetValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	25		RegOpenKeyExW
API-MS-Win-Core-Memory-L1-1-0.dll	7		VirtualAlloc
API-MS-Win-Core-Memory-L1-1-0.dll	9		VirtualFree
API-MS-Win-Core-Misc-L1-1-0.dll	10		LocalAlloc
API-MS-Win-Core-Misc-L1-1-0.dll	19		Sleep
API-MS-Win-Core-Misc-L1-1-0.dll	33		lstrlenW
API-MS-Win-Core-Misc-L1-1-0.dll	24		lstrcmpW
API-MS-Win-Core-Misc-L1-1-0.dll	4		FormatMessageW
API-MS-Win-Core-Misc-L1-1-0.dll	11		LocalFree
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll	1		ExpandEnvironmentStringsW
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll	11		GetEnvironmentVariableA
API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll			ExpandEnvironmentStringsA
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	36		SetThreadPriority
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	46		TlsGetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	12		GetCurrentThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	5		CreateThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	47		TlsSetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	11		GetCurrentProcessId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	10		GetCurrentProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	43		TerminateThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	32		ResumeThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	44		TlsAlloc
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	45		TlsFree
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	13		GetCurrentThreadId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	42		TerminateProcess
API-MS-Win-Core-Profile-L1-1-0.dll			QueryPerformanceCounter
API-MS-Win-Core-String-L1-1-0.dll	7		WideCharToMultiByte
API-MS-Win-Core-String-L1-1-0.dll	2		CompareStringW
API-MS-Win-Core-String-L1-1-0.dll	6		MultiByteToWideChar
API-MS-Win-Core-Synch-L1-1-0.dll	3		CreateEventA
API-MS-Win-Core-Synch-L1-1-0.dll	41		WaitForSingleObjectEx
API-MS-Win-Core-Synch-L1-1-0.dll	32		SetEvent
API-MS-Win-Core-Synch-L1-1-0.dll	15		InitializeCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	13		DeleteCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	26		ReleaseMutex
API-MS-Win-Core-Synch-L1-1-0.dll	39		WaitForMultipleObjectsEx
API-MS-Win-Core-Synch-L1-1-0.dll	6		CreateEventW
API-MS-Win-Core-Synch-L1-1-0.dll	23		OpenProcess
API-MS-Win-Core-Synch-L1-1-0.dll	16		InitializeCriticalSectionAndSpinCount
API-MS-Win-Core-Synch-L1-1-0.dll	35		SleepEx
API-MS-Win-Core-Synch-L1-1-0.dll	21		OpenEventW
API-MS-Win-Core-Synch-L1-1-0.dll	40		WaitForSingleObject
API-MS-Win-Core-Synch-L1-1-0.dll	14		EnterCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	19		LeaveCriticalSection
API-MS-Win-Core-SysInfo-L1-1-0.dll	8		GetSystemInfo
API-MS-Win-Core-SysInfo-L1-1-0.dll	14		GetTickCount
API-MS-Win-Core-SysInfo-L1-1-0.dll	11		GetSystemTimeAsFileTime
API-MS-Win-Core-DelayLoad-L1-1-0.dll			DelayLoadFailureHook
KERNELBASE.dll	57		CompareStringA

ord	entry_va	function_name
1	0x1a2a0	AcceptEx
2	0x29f10	EnumProtocolsA
3	0x29390	EnumProtocolsW
4	0x1a1d0	GetAcceptExSockaddrs
5	0x29ce0	GetAddressByNameA
6	0x29bd0	GetAddressByNameW
7	0x23d70	GetNameByTypeA
8	0x21490	GetNameByTypeW
9	0x23ad0	GetServiceA
10	0x23a90	GetServiceW
11	0x21790	GetTypeByNameA
12	0x1e1c0	GetTypeByNameW
13	0x257f0	MigrateWinsockConfiguration
14	0x26860	NPLoadNameSpaces
15	0x26810	NSPStartup
16	0x263f0	SetServiceA
17	0x263c0	SetServiceW
18	0x269d0	StartWsdpService
19	0x1fbe0	StopWsdpService
20	0x1a430	TransmitFile
21	0x1d3f0	WSARecvEx
22	0x9160	WSPStartup
23	0x1af80	dn_expand
24	0x1c420	getnetbyname
25	0x16580	inet_network
26	0x1c460	rcmd
27	0x1c460	rexec
28	0x1c460	rresvport
29	0x17820	s_perror
30	0x1c440	sethostname

module_name	MSWSOCK.dll
flags	0
timestamp	2010-11-20 09:22:30
version	0.0
ordinal_base	1
nFunctions	30
nNames	30
Names(30)	0x44ca8
Functions(30)	0x44c30
NameOrdinals(30)	0x44d20

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Microsoft Windows Sockets 2.0 Service Provider
FileVersion	6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalName	mswsock.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	mswsock.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion	6.1.7601.17514
ProductVersion	6.1.7601.17514
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	320560	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x308

mswsock.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

mswsock.dll
-