wsock32.dll - Windows Socket 32-Bit DLL

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	wsock32.dll
size	16384 (0x4000)
md5	96dde4973f177c470caf5b24ffd4d1e9

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
205	65501	2
206	65501	13
1	0	25
203	65501	7
202	65501	1
215	65501	1
201	65501	1
204	65501	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x54504a16
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	11.0
SizeOfCode	0x2c00
SizeOfInitializedData	0x1000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x10c0
BaseOfCode	0x1000
BaseOfData	0x4000
ImageBase	0x52e80000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.3
ImageVersion	6.3
SubsystemVersion	6.3
Reserved1	0
SizeOfImage	0x8000
SizeOfHeaders	0x400
CheckSum	0xe540
Subsystem	3
DllCharacteristics	0x4140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2b54	0x2c00	R-X CODE
.data	0x4000	0x34c	0x400	RW- IDATA
.idata	0x5000	0x292	0x400	R-- IDATA
.rsrc	0x6000	0x518	0x600	R-- IDATA
.reloc	0x7000	0x140	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1d90	0x1d5d
IMPORT	0x5064	0x50
RESOURCE	0x6000	0x518
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x7000	0x140
DEBUG	0x3af0	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x1250	0x5c
Bound_IAT	0	0
IAT	0x5000	0x60
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MUI	#1	200	0
VERSION	#1	924	0

module_name	hint	ord	function_name
WS2_32.dll	74		WSARecvFrom
WS2_32.dll		7
WS2_32.dll		21
WS2_32.dll	72		WSARecv
msvcrt.dll	364		_except_handler4_common
msvcrt.dll	490		_initterm
msvcrt.dll	1279		malloc
msvcrt.dll	1223		free
msvcrt.dll	275		_amsg_exit
msvcrt.dll	113		_XcptFilter
KERNEL32.dll	1362		Sleep
KERNEL32.dll	1069		QueryPerformanceCounter
KERNEL32.dll	522		GetCurrentProcessId
KERNEL32.dll	526		GetCurrentThreadId
KERNEL32.dll	1377		TerminateProcess
KERNEL32.dll	521		GetCurrentProcess
KERNEL32.dll	1347		SetUnhandledExceptionFilter
KERNEL32.dll	1410		UnhandledExceptionFilter
KERNEL32.dll	754		GetTickCount
KERNEL32.dll	726		GetSystemTimeAsFileTime
KERNEL32.dll	1291		SetLastError

ord	entry_va	function_name
1	0x38ab	accept
2	0x38b9	bind
3	0x38c5	closesocket
4	0x38d8	connect
5	0x394b	getpeername
6	0x39b6	getsockname
7	0x1bc0	getsockopt
8	0x39c9	htonl
9	0x39d6	htons
10	0x39e3	inet_addr
11	0x3a09	inet_ntoa
12	0x3a1a	ioctlsocket
13	0x3a2d	listen
14	0x3a3b	ntohl
15	0x3a48	ntohs
16	0x1c40	recv
17	0x1cb0	recvfrom
18	0x3a93	select
19	0x3aa1	send
20	0x3aad	sendto
21	0x1d20	setsockopt
22	0x3acf	shutdown
23	0x3adf	socket
24	0x3646	MigrateWinsockConfiguration
51	0x38f9	gethostbyaddr
52	0x390e	gethostbyname
53	0x395e	getprotobyname
54	0x3974	getprotobynumber
55	0x398c	getservbyname
56	0x39a1	getservbyport
57	0x3923	gethostname
101	0x377d	WSAAsyncSelect
102	0x36cb	WSAAsyncGetHostByAddr
103	0x36e8	WSAAsyncGetHostByName
104	0x3723	WSAAsyncGetProtoByNumber
105	0x3705	WSAAsyncGetProtoByName
106	0x3760	WSAAsyncGetServByPort
107	0x3743	WSAAsyncGetServByName
108	0x3793	WSACancelAsyncRequest
109	0x381d	WSASetBlockingHook
110	0x3860	WSAUnhookBlockingHook
111	0x37df	WSAGetLastError
112	0x3837	WSASetLastError
113	0x37b0	WSACancelBlockingCall
114	0x37f6	WSAIsBlocking
115	0x384e	WSAStartup
116	0x37cd	WSACleanup
151	0x3897	__WSAFDIsSet
500	0x36c0	WEP
1000	0x387d	WSApSetPostRoutine
1100	0x39f4	inet_network
1101	0x3936	getnetbyname
1102	0x3a55	rcmd
1103	0x3a62	rexec
1104	0x3a70	rresvport
1105	0x3abb	sethostname
1106	0x38e7	dn_expand
1107	0x380b	WSARecvEx
1108	0x3a82	s_perror
1109	0x358e	GetAddressByNameA
1110	0x35a8	GetAddressByNameW
1111	0x3543	EnumProtocolsA
1112	0x355a	EnumProtocolsW
1113	0x3618	GetTypeByNameA
1114	0x362f	GetTypeByNameW
1115	0x35c2	GetNameByTypeA
1116	0x35d9	GetNameByTypeW
1117	0x3683	SetServiceA
1118	0x3697	SetServiceW
1119	0x35f0	GetServiceA
1120	0x3604	GetServiceW
1130	0x366a	NPLoadNameSpaces
1140	0x36ab	TransmitFile
1141	0x3532	AcceptEx
1142	0x3571	GetAcceptExSockaddrs

module_name	WSOCK32.dll
flags	0
timestamp	2014-10-29 01:59:50
version	0.0
ordinal_base	1
nFunctions	1142
nNames	75
Names(75)	0x2f90
Functions(1142)	0x1db8
NameOrdinals(75)	0x30bc

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Windows Socket 32-Bit DLL
FileVersion	6.3.9600.17415 (winblue_r4.141028-1500)
InternalName	wsock32.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	wsock32.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.3.9600.17415

VS_FIXEDFILEINFO

FileVersion	6.3.9600.17415
ProductVersion	6.3.9600.17415
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	16384	DLL	10/29/2014 01:59:50	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

wsock32.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

wsock32.dll
-