WinSCard.dll - Microsoft Smart Card API

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	WinSCard.dll
size	134656 (0x20e00)
md5	9419abf3163b6f0e3ad3dd2b381c879f

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
149	30729	2
1	0	218
147	30729	35
146	30729	1
132	30729	20
131	30729	18
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4ce7ba48
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x1e000
SizeOfInitializedData	0x2800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1310
BaseOfCode	0x1000
BaseOfData	0x1f000
ImageBase	0x410a0000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x23000
SizeOfHeaders	0x600
CheckSum	0x2bcb4
Subsystem	3
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1dee9	0x1e000	R-X CODE
.data	0x1f000	0x5e4	0x600	RW- IDATA
.rsrc	0x20000	0x520	0x600	R-- IDATA
.reloc	0x21000	0x1a78	0x1c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1598	0x83d
IMPORT	0x1ded4	0x168
RESOURCE	0x20000	0x520
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x21000	0x1a78
DEBUG	0x1ee88	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x42c0	0x40
Bound_IAT	0x288	0x2cc
IAT	0x1000	0x248
Delay_IAT	0x1db84	0xe0
CLR_Header	0	0

show previews

type	name	size	cp
MUI	#1	200	0
VERSION	#1	936	0

module_name	hint	function_name
msvcrt.dll	20	void __cdecl operator delete(void *) ??3@YAXPAX@Z
msvcrt.dll	43	void __cdecl operator delete[](void *) ??_V@YAXPAX@Z
msvcrt.dll	41	void * __cdecl operator new[](unsigned int) ??_U@YAPAXI@Z
msvcrt.dll	1262	memset
msvcrt.dll	1258	memcpy
msvcrt.dll	99	_CxxThrowException
msvcrt.dll	974	_vsnwprintf
msvcrt.dll	18	void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
msvcrt.dll	1007	_wcsicmp
msvcrt.dll	926	_ultow
msvcrt.dll	1375	wcspbrk
msvcrt.dll	968	_vsnprintf
msvcrt.dll	1017	_wcsnicmp
msvcrt.dll	106	_XcptFilter
msvcrt.dll	1246	malloc
msvcrt.dll	1190	free
msvcrt.dll	469	_initterm
msvcrt.dll	257	_amsg_exit
msvcrt.dll	17	public: virtual __thiscall type_info::~type_info(void) ??1type_info@@UAE@XZ
msvcrt.dll	345	_except_handler4_common
msvcrt.dll	115	__CxxFrameHandler3
ntdll.dll	730	RtlDeleteCriticalSection
ntdll.dll	79	EtwTraceMessage
ntdll.dll	755	RtlDllShutdownInProgress
ntdll.dll	931	RtlInitializeCriticalSection
ntdll.dll	270	NtDeviceIoControlFile
ntdll.dll	1044	RtlNtStatusToDosError
ntdll.dll	228	NtCreateFile
ntdll.dll	924	RtlInitUnicodeString
ntdll.dll	65	EtwGetTraceEnableFlags
ntdll.dll	66	EtwGetTraceEnableLevel
ntdll.dll	67	EtwGetTraceLoggerHandle
ntdll.dll	74	EtwRegisterTraceGuidsW
ntdll.dll	81	EtwUnregisterTraceGuids
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	6	UnhandledExceptionFilter
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	5	SetUnhandledExceptionFilter
API-MS-Win-Core-ErrorHandling-L1-1-0.dll	1	GetLastError
API-MS-Win-Core-Handle-L1-1-0.dll		CloseHandle
API-MS-Win-Core-Heap-L1-1-0.dll		GetProcessHeap
API-MS-Win-Core-Heap-L1-1-0.dll	6	HeapFree
API-MS-Win-Core-Heap-L1-1-0.dll	4	HeapCreate
API-MS-Win-Core-Heap-L1-1-0.dll	5	HeapDestroy
API-MS-Win-Core-Heap-L1-1-0.dll	2	HeapAlloc
API-MS-Win-Core-Interlocked-L1-1-0.dll	4	InterlockedExchange
API-MS-Win-Core-Interlocked-L1-1-0.dll	1	InterlockedCompareExchange
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	13	LoadLibraryExA
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	3	FreeLibrary
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	7	GetModuleFileNameW
API-MS-Win-Core-LibraryLoader-L1-1-0.dll	12	GetProcAddress
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	37	RegSetValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll		RegCloseKey
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	8	RegDeleteValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	2	RegCreateKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	25	RegOpenKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	13	RegEnumValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	30	RegQueryValueExW
API-MS-Win-Core-Misc-L1-1-0.dll	33	lstrlenW
API-MS-Win-Core-Misc-L1-1-0.dll	24	lstrcmpW
API-MS-Win-Core-Misc-L1-1-0.dll	19	Sleep
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	26	OpenProcessToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	10	GetCurrentProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	28	OpenThreadToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	39	SetThreadToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	11	GetCurrentProcessId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	13	GetCurrentThreadId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	42	TerminateProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	12	GetCurrentThread
API-MS-Win-Core-Profile-L1-1-0.dll		QueryPerformanceCounter
API-MS-Win-Core-Synch-L1-1-0.dll	30	ResetEvent
API-MS-Win-Core-Synch-L1-1-0.dll	19	LeaveCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	16	InitializeCriticalSectionAndSpinCount
API-MS-Win-Core-Synch-L1-1-0.dll	32	SetEvent
API-MS-Win-Core-Synch-L1-1-0.dll	21	OpenEventW
API-MS-Win-Core-Synch-L1-1-0.dll	6	CreateEventW
API-MS-Win-Core-Synch-L1-1-0.dll	40	WaitForSingleObject
API-MS-Win-Core-Synch-L1-1-0.dll	13	DeleteCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	15	InitializeCriticalSection
API-MS-Win-Core-Synch-L1-1-0.dll	14	EnterCriticalSection
API-MS-Win-Core-SysInfo-L1-1-0.dll	11	GetSystemTimeAsFileTime
API-MS-Win-Core-SysInfo-L1-1-0.dll	14	GetTickCount
API-MS-Win-Core-ThreadPool-L1-1-0.dll	8	CloseThreadpoolWait
API-MS-Win-Core-ThreadPool-L1-1-0.dll	14	CreateThreadpoolWait
API-MS-Win-Core-ThreadPool-L1-1-0.dll	33	SetThreadpoolWait
API-MS-Win-Core-ThreadPool-L1-1-0.dll	11	CreateThreadpoolCleanupGroup
API-MS-Win-Core-ThreadPool-L1-1-0.dll	5	CloseThreadpoolCleanupGroupMembers
API-MS-Win-Core-ThreadPool-L1-1-0.dll	4	CloseThreadpoolCleanupGroup
API-MS-Win-Security-Base-L1-1-0.dll	7	AddAccessAllowedAce
API-MS-Win-Security-Base-L1-1-0.dll	41	GetAce
API-MS-Win-Security-Base-L1-1-0.dll	63	InitializeAcl
API-MS-Win-Security-Base-L1-1-0.dll	13	AddAce
API-MS-Win-Security-Base-L1-1-0.dll	42	GetAclInformation
API-MS-Win-Security-Base-L1-1-0.dll	70	IsValidSid
API-MS-Win-Security-Base-L1-1-0.dll	56	GetSidSubAuthority
API-MS-Win-Security-Base-L1-1-0.dll	65	InitializeSid
API-MS-Win-Security-Base-L1-1-0.dll	55	GetSidLengthRequired
API-MS-Win-Security-Base-L1-1-0.dll	91	SetSecurityDescriptorDacl
API-MS-Win-Security-Base-L1-1-0.dll	45	GetLengthSid
API-MS-Win-Security-Base-L1-1-0.dll	64	InitializeSecurityDescriptor
API-MS-Win-Security-Base-L1-1-0.dll	83	RevertToSelf
API-MS-Win-Security-Base-L1-1-0.dll	58	GetTokenInformation
RPCRT4.dll	149	NdrClientCall2
RPCRT4.dll	348	RpcBindingCreateW
RPCRT4.dll	345	RpcBindingBind
RPCRT4.dll	244	NdrMesTypeFree2
RPCRT4.dll	241	NdrMesTypeDecode2
RPCRT4.dll	243	NdrMesTypeEncode2
RPCRT4.dll	122	MesEncodeDynBufferHandleCreate
RPCRT4.dll	120	MesDecodeBufferHandleCreate
RPCRT4.dll	125	MesHandleFree
RPCRT4.dll	483	RpcSsDestroyClientContext
RPCRT4.dll	349	RpcBindingFree
RPCRT4.dll	507	UuidCreate
RPCRT4.dll	516	UuidToStringW
RPCRT4.dll	498	RpcStringFreeW
KERNEL32.dll	721	HeapReAlloc
KERNEL32.dll	1267	WaitForMultipleObjects
KERNEL32.dll	205	DelayLoadFailureHook
KERNEL32.dll	869	MultiByteToWideChar
KERNEL32.dll	359	GetACP
KERNEL32.dll	1293	WideCharToMultiByte
KERNEL32.dll	1353	lstrlenA
KERNEL32.dll	1345	lstrcmpiW
KERNEL32.dll	533	GetModuleHandleW
KERNEL32.dll	972	RegEnumKeyExW
KERNEL32.dll	284	ExpandEnvironmentStringsW
KERNEL32.dll	965	RegDeleteKeyExW
KERNEL32.dll	1134	SetLastError
KERNEL32.dll	750	InterlockedIncrement
KERNEL32.dll	746	InterlockedDecrement

ord	entry_va	function_name
1	0x7da2	ClassInstall32
2	0x7c89	SCardAccessNewReaderEvent
3	0x7c9d	SCardReleaseAllEvents
4	0x7c93	SCardReleaseNewReaderEvent
5	0x290b	SCardAccessStartedEvent
6	0xa8a7	SCardAddReaderToGroupA
7	0xc40f	SCardAddReaderToGroupW
8	0x8d9a	SCardBeginTransaction
9	0x8c60	SCardCancel
10	0xaf5c	SCardConnectA
11	0xcac1	SCardConnectW
12	0x9168	SCardControl
13	0x86d8	SCardDisconnect
14	0x8e27	SCardEndTransaction
15	0x459f	SCardEstablishContext
16	0xac42	SCardForgetCardTypeA
17	0xc7aa	SCardForgetCardTypeW
18	0xa7be	SCardForgetReaderA
19	0xa5bd	SCardForgetReaderGroupA
20	0xc125	SCardForgetReaderGroupW
21	0xc326	SCardForgetReaderW
22	0x8830	SCardFreeMemory
23	0x9251	SCardGetAttrib
24	0xa3f7	SCardGetCardTypeProviderNameA
25	0xbf5f	SCardGetCardTypeProviderNameW
26	0xa2f2	SCardGetProviderIdA
27	0xbe5a	SCardGetProviderIdW
28	0xade3	SCardGetStatusChangeA
29	0xc94b	SCardGetStatusChangeW
30	0x90d8	SCardGetTransmitCount
31	0xaad7	SCardIntroduceCardTypeA
32	0xc63f	SCardIntroduceCardTypeW
33	0xa6a6	SCardIntroduceReaderA
34	0xa4d4	SCardIntroduceReaderGroupA
35	0xc03c	SCardIntroduceReaderGroupW
36	0xc20e	SCardIntroduceReaderW
37	0x877a	SCardIsValidContext
38	0xa115	SCardListCardsA
39	0xbc7c	SCardListCardsW
40	0xa1e3	SCardListInterfacesA
41	0xbd4b	SCardListInterfacesW
42	0x9ec4	SCardListReaderGroupsA
43	0xba2b	SCardListReaderGroupsW
44	0x9fcc	SCardListReadersA
45	0xbb33	SCardListReadersW
46	0xb41c	SCardLocateCardsA
47	0xacd7	SCardLocateCardsByATRA
48	0xc83f	SCardLocateCardsByATRW
49	0xcf85	SCardLocateCardsW
50	0x9c63	SCardReadCacheA
51	0xb7f0	SCardReadCacheW
52	0x8cea	SCardReconnect
53	0x85d3	SCardReleaseContext
54	0x21f0	SCardReleaseStartedEvent
55	0xa9bf	SCardRemoveReaderFromGroupA
56	0xc527	SCardRemoveReaderFromGroupW
57	0x963a	SCardSetAttrib
58	0xab7e	SCardSetCardTypeProviderNameA
59	0xc6e6	SCardSetCardTypeProviderNameW
60	0x8eb7	SCardState
61	0xb142	SCardStatusA
62	0xcca7	SCardStatusW
63	0x8fd9	SCardTransmit
64	0x9c3c	SCardWriteCacheA
65	0xb7c9	SCardWriteCacheW
66	0x1574	g_rgSCardRawPci
67	0x2028	g_rgSCardT0Pci
68	0x2030	g_rgSCardT1Pci

module_name	WinSCard.dll
flags	0
timestamp	2010-11-20 09:24:54
version	0.0
ordinal_base	1
nFunctions	68
nNames	68
Names(68)	0x16d0
Functions(68)	0x15c0
NameOrdinals(68)	0x17e0

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Microsoft Smart Card API
FileVersion	6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalName	winscard.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	winscard.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion	6.1.7601.17514
ProductVersion	6.1.7601.17514
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	134656	DLL	11/20/2010 12:08:40	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x288

WinSCard.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

WinSCard.dll
-