filename	beidcsp.dll
size	48128 (0xbc00)
md5	c49077a3a7fd801665c8d767722dcd72

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
125	50727	1
110	50727	2
109	50727	14
93	4035	4
123	50727	5
1	0	59
114	50727	1
122	50727	1
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x486e2ee4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0xc00
SizeOfInitializedData	0xac00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1567
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xf000
SizeOfHeaders	0x400
CheckSum	0x10213
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xa48	0xc00	R-X CODE
.rdata	0x2000	0xa9e	0xc00	R-- IDATA
.data	0x3000	0x9a18	0x9800	RW- IDATA
.rsrc	0xd000	0x4f0	0x600	R-- IDATA
.reloc	0xe000	0x1ee	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x2800	0x29e
IMPORT	0x224c	0x50
RESOURCE	0xd000	0x4f0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xe000	0x154
DEBUG	0x2110	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x2138	0x40
Bound_IAT	0	0
IAT	0x2000	0xf0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	764	1252
MANIFEST	#2	340	1252

module_name	hint	function_name
beidCSPLib.dll	17	eidmwHashData
beidCSPLib.dll	18	eidmwHashSessionKey
beidCSPLib.dll	12	eidmwGenRandom
beidCSPLib.dll	14	eidmwGetKeyParam
beidCSPLib.dll	21	eidmwSetHashParam
beidCSPLib.dll	23	eidmwSetProvParam
beidCSPLib.dll	5	eidmwDestroyHash
beidCSPLib.dll	8	eidmwDuplicateKey
beidCSPLib.dll	25	eidmwVerifySignature
beidCSPLib.dll	4	eidmwDeriveKey
beidCSPLib.dll	20	eidmwReleaseContext
beidCSPLib.dll	9	eidmwEncrypt
beidCSPLib.dll	1	eidmwAcquireContextW
beidCSPLib.dll	19	eidmwImportKey
beidCSPLib.dll	6	eidmwDestroyKey
beidCSPLib.dll	7	eidmwDuplicateHash
beidCSPLib.dll		eidmwAcquireContext
beidCSPLib.dll	16	eidmwGetUserKey
beidCSPLib.dll	3	eidmwDecrypt
beidCSPLib.dll	22	eidmwSetKeyParam
beidCSPLib.dll	10	eidmwExportKey
beidCSPLib.dll	11	eidmwGenKey
beidCSPLib.dll	13	eidmwGetHashParam
beidCSPLib.dll	24	eidmwSignHash
beidCSPLib.dll	15	eidmwGetProvParam
beidCSPLib.dll	2	eidmwCreateHash
MSVCR80.dll	642	_lock
MSVCR80.dll	153	__dllonexit
MSVCR80.dll	1011	_unlock
MSVCR80.dll	143	__clean_type_info_names_internal
MSVCR80.dll	339	_crt_debugger_hook
MSVCR80.dll	109	__CppXcptFilter
MSVCR80.dll	275	_adjust_fdiv
MSVCR80.dll	285	_amsg_exit
MSVCR80.dll	529	_initterm_e
MSVCR80.dll	808	_onexit
MSVCR80.dll	379	_except_handler4_common
MSVCR80.dll	370	_encode_pointer
MSVCR80.dll	659	_malloc_crt
MSVCR80.dll	1268	free
MSVCR80.dll	371	_encoded_null
MSVCR80.dll	360	_decode_pointer
MSVCR80.dll	528	_initterm
KERNEL32.dll	326	GetCurrentThreadId
KERNEL32.dll	479	GetTickCount
KERNEL32.dll	675	QueryPerformanceCounter
KERNEL32.dll	139	DisableThreadLibraryCalls
KERNEL32.dll	569	IsDebuggerPresent
KERNEL32.dll	842	SetUnhandledExceptionFilter
KERNEL32.dll	323	GetCurrentProcessId
KERNEL32.dll	322	GetCurrentProcess
KERNEL32.dll	862	TerminateProcess
KERNEL32.dll	550	InterlockedCompareExchange
KERNEL32.dll	854	Sleep
KERNEL32.dll	553	InterlockedExchange
KERNEL32.dll	458	GetSystemTimeAsFileTime
KERNEL32.dll	878	UnhandledExceptionFilter

ord	entry_va	function_name
1	0x1000	CPAcquireContext
2	0x1010	CPAcquireContextW
3	0x1050	CPCreateHash
4	0x1190	CPDecrypt
5	0x10f0	CPDeriveKey
6	0x10b0	CPDestroyHash
7	0x1140	CPDestroyKey
8	0x1060	CPDuplicateHash
9	0x1160	CPDuplicateKey
10	0x1180	CPEncrypt
11	0x1120	CPExportKey
12	0x10e0	CPGenKey
13	0x1170	CPGenRandom
14	0x10a0	CPGetHashParam
15	0x1110	CPGetKeyParam
16	0x1040	CPGetProvParam
17	0x10d0	CPGetUserKey
18	0x1070	CPHashData
19	0x1080	CPHashSessionKey
20	0x1130	CPImportKey
21	0x1020	CPReleaseContext
22	0x1090	CPSetHashParam
23	0x1100	CPSetKeyParam
24	0x1030	CPSetProvParam
25	0x10c0	CPSignHash
26	0x1150	CPVerifySignature

module_name	beidCSP.dll
flags	0
timestamp	2008-07-04 14:08:35
version	0.0
ordinal_base	1
nFunctions	26
nNames	26
Names(26)	0x2890
Functions(26)	0x2828
NameOrdinals(26)	0x28f8

StringTable 080904b0

FileDescription	beidCSP Dynamic Link Library
CompanyName	Belgium Government
FileVersion	3, 0, 1, 3251
InternalName	beidCSP
LegalCopyright	Copyright (C) 2007
OriginalFilename	beidCSP.dll
ProductName	Belgium eID MiddleWare
ProductVersion	3.0

VS_FIXEDFILEINFO

FileVersion	3.0.1.3251
ProductVersion	3.0.1.3251
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	48128	DLL	07/04/2008 14:08:36	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

beidcsp.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 080904b0

VS_FIXEDFILEINFO

beidcsp.dll
-