filenameWBTRV32.DLL
size68096 (0x10a00)
md5ad8b99a1bb4ba3f8a91dad5a9b8f44da
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x3301fd8f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x210e
Magic0x10b
LinkerVersion2.55
SizeOfCode0xce00
SizeOfInitializedData0x3800
SizeOfUninitializedData0x2000
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0xe000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x17000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xccb40xce00R-X CODE
.bss0xe0000x20000RW- UDATA
.rdata0x100000xc90x200R-- IDATA
.data0x110000x13fc0x1400RW- IDATA
.idata0x130000x86a0xa00RW- IDATA
.edata0x140000x1060x200R-- IDATA
.rsrc0x150000x5940x600R-- IDATA
.reloc0x160000xe080x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x140000x106
IMPORT0x130000x86a
RESOURCE0x150000x594
EXCEPTION00
SECURITY00
BASERELOC0x160000xc6c
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#119580
STRING#1201080
STRING#7712120
VERSION#17920
idlangstring
19001033Target Engine
19051033Local
19061033Requester
19071033Load Retries
19081033Load Retries
123201033Microkernel Database Engine
123211033Microkernel Interface
123221033Version %d.%d Beta1
123231033Copyright (c) 1982-1995
module_namehintordfunction_name
KERNEL32.dll257GetProcAddress
KERNEL32.dll307GetVersionExA
KERNEL32.dll346InitializeCriticalSection
KERNEL32.dll561WaitForSingleObject
KERNEL32.dll487SetEvent
KERNEL32.dll18CallNamedPipeA
KERNEL32.dll227GetLastError
KERNEL32.dll347InterlockedDecrement
KERNEL32.dll349InterlockedIncrement
KERNEL32.dll523Sleep
KERNEL32.dll394OpenEventA
KERNEL32.dll52CreateMutexA
KERNEL32.dll315GlobalAlloc
KERNEL32.dll322GlobalFree
KERNEL32.dll45CreateFileA
KERNEL32.dll399OpenMutexA
KERNEL32.dll215GetExitCodeProcess
KERNEL32.dll57CreateProcessA
KERNEL32.dll385MapViewOfFile
KERNEL32.dll397OpenFileMappingA
KERNEL32.dll540UnmapViewOfFile
KERNEL32.dll479SetCurrentDirectoryA
KERNEL32.dll196GetCurrentDirectoryA
KERNEL32.dll233GetLogicalDrives
KERNEL32.dll165GetComputerNameA
KERNEL32.dll608lstrcpyA
KERNEL32.dll599lstrcatA
KERNEL32.dll199GetCurrentProcessId
KERNEL32.dll365LoadLibraryA
KERNEL32.dll223GetFullPathNameA
KERNEL32.dll328GlobalReAlloc
KERNEL32.dll364LeaveCriticalSection
KERNEL32.dll436ReleaseSemaphore
KERNEL32.dll210GetEnvironmentStrings
KERNEL32.dll161GetCommandLineA
KERNEL32.dll306GetVersion
KERNEL32.dll228GetLocalTime
KERNEL32.dll100ExitProcess
KERNEL32.dll550VirtualFree
KERNEL32.dll548VirtualAlloc
KERNEL32.dll235GetModuleFileNameA
KERNEL32.dll148GetACP
KERNEL32.dll248GetOEMCP
KERNEL32.dll154GetCPInfo
KERNEL32.dll275GetStdHandle
KERNEL32.dll222GetFileType
KERNEL32.dll273GetStartupInfoA
KERNEL32.dll578WriteFile
KERNEL32.dll302GetTimeZoneInformation
KERNEL32.dll492SetFilePointer
KERNEL32.dll565WideCharToMultiByte
KERNEL32.dll506SetStdHandle
KERNEL32.dll133FlushFileBuffers
KERNEL32.dll237GetModuleHandleA
KERNEL32.dll392MultiByteToWideChar
KERNEL32.dll484SetEnvironmentVariableA
KERNEL32.dll435ReleaseMutex
KERNEL32.dll143FreeLibrary
KERNEL32.dll81EnterCriticalSection
KERNEL32.dll201GetCurrentThreadId
KERNEL32.dll70DeleteCriticalSection
KERNEL32.dll23CloseHandle
KERNEL32.dll614lstrlenA
KERNEL32.dll208GetDriveTypeA
KERNEL32.dll60CreateSemaphoreA
USER32.dll374LoadStringA
USER32.dll40CharUpperA
MPR.dll38WNetGetUserA
ADVAPI32.dll84GetUserNameA
ADVAPI32.dll91InitializeSecurityDescriptor
ADVAPI32.dll179RegCloseKey
ADVAPI32.dll202RegOpenKeyExA
ADVAPI32.dll183RegCreateKeyExA
ADVAPI32.dll236SetSecurityDescriptorDacl
ADVAPI32.dll208RegQueryValueExA
ADVAPI32.dll219RegSetValueExA
ordentry_vafunction_name
10x14aeBTRCALL
20x1523BTRCALLID
30x2260WBRQSHELLINIT
40x2c50WBSHELLINIT
50x2c35WBTRVINIT
60x182dWBTRVSTOP
70x186dWBTRVIDSTOP
80x39e2BTRCALLBACK
90x9150DBUGetInfo
100x9538DBUSetInfo
module_namewbtrv32.dll
flags0
timestamp1997-02-12 17:27:36
version0.0
ordinal_base1
nFunctions10
nNames10
Names(10)0x14050
Functions(10)0x14028
NameOrdinals(10)0x14078

StringTable 040904E4

CompanyNamePervasive Software Inc.
FileDescriptionMicrokernel Interface DLL
FileVersion6.15.440
InternalNameWBTRV32
LegalCopyrightCopyright Pervasive Software Inc. 1995-1996
ProductNamePervasive Software Communications Module
ProductVersion6.15.440

VS_FIXEDFILEINFO

FileVersion3.0.0.0
ProductVersion6.15.440.0
StrucVersion0x10000
FileFlagsMask0x2f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
068096DLL02/12/1997 17:27:43#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK