filenamewcbthelper.dll
size4608 (0x1200)
md55b7bb68b86167906b4bfd3ba903553bc
typePE32 executable (DLL) (Windows CE) ARM, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
8930772
4896153
4996151
8920643
1014
110507272
122507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x1c0
NumberOfSections5
TimeDateStamp0x462dec39
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion8.0
SizeOfCode0x400
SizeOfInitializedData0xa00
SizeOfUninitializedData0
AddressOfEntryPoint0x1140
BaseOfCode0x1000
BaseOfData0x2000
ImageBase0x100000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.10
Reserved10
SizeOfImage0x6000
SizeOfHeaders0x400
CheckSum0
Subsystem9
DllCharacteristics0
SizeOfStackReserve0x10000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x3780x400R-X CODE
.rdata0x20000x35e0x400R-- IDATA
.data0x30000x9c0x200RW- IDATA
.pdata0x40000x580x200R-- IDATA
.reloc0x50000xc20x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x23000x5e
IMPORT0x212c0x3c
RESOURCE00
EXCEPTION0x40000x58
SECURITY00
BASERELOC0x50000xa4
DEBUG0x20000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x3c
Delay_IAT00
CLR_Header00
module_namehintordfunction_name
COREDLL.dll1094
COREDLL.dll1095
COREDLL.dll1018
COREDLL.dll36
BtSdkCE30.dll284public: virtual void __cdecl CBtIf::OnInquiryComplete(int, short)

?OnInquiryComplete@CBtIf@@UAAXHF@Z

BtSdkCE30.dll26public: virtual __cdecl CBtIf::~CBtIf(void)

??1CBtIf@@UAA@XZ

BtSdkCE30.dll275public: virtual void __cdecl CBtIf::OnDiscoveryComplete(void)

?OnDiscoveryComplete@CBtIf@@UAAXXZ

BtSdkCE30.dll402void __cdecl WIDCOMMSDK_ShutDown(void)

?WIDCOMMSDK_ShutDown@@YAXXZ

BtSdkCE30.dll2public: __cdecl CBtIf::CBtIf(void)

??0CBtIf@@QAA@XZ

BtSdkCE30.dll255public: virtual void __cdecl CBtIf::OnAudioConnected(unsigned short)

?OnAudioConnected@CBtIf@@UAAXG@Z

BtSdkCE30.dll260public: virtual void __cdecl CBtIf::OnAudioDisconnect(unsigned short)

?OnAudioDisconnect@CBtIf@@UAAXG@Z

BtSdkCE30.dll295public: virtual void __cdecl CBtIf::OnStackStatusChange(enum CBtIf::STACK_STATUS)

?OnStackStatusChange@CBtIf@@UAAXW4STACK_STATUS@1@@Z

BtSdkCE30.dll274public: virtual void __cdecl CBtIf::OnDeviceResponded(unsigned char * const, unsigned char * const, unsigned char * const, int)

?OnDeviceResponded@CBtIf@@UAAXQAE00H@Z

ordentry_vafunction_name
10x10acTurnOffBT
20x1020TurnOnBT
module_namewcbthelper.dll
flags0
timestamp2007-04-24 11:38:33
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x2330
Functions(2)0x2328
NameOrdinals(2)0x2338
offsetsizetypecomment
04608DLL04/24/2007 11:38:33#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK