claro_boleto2-via.01.cpl3.vir

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	claro_boleto2-via.01.cpl3.vir
size	367104 (0x59a00)
md5	e012d0abd11f2379503ba327c8350934

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xa
TimeDateStamp	0x52d6def2
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0xa18e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x55000
SizeOfInitializedData	0x3ca00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x99000
BaseOfCode	0x99000
BaseOfData	0x99080
ImageBase	0x2ee0000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0xf3000
SizeOfHeaders	0x400
CheckSum	0x5c2b1
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PKLITE32 v1.1

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x504ec	0	RWX CODE
.itext	0x52000	0x898	0	RWX CODE
.data	0x53000	0x42c8	0	RW- IDATA
.bss	0x58000	0x5078	0	RW-
.idata	0x5e000	0x16f0	0x1800	RW- IDATA
.edata	0x60000	0x47	0x200	R-- IDATA
.delete	0x61000	0x74bc	0x200	R-- IDATA DISCARDABLE
.rsrc	0x69000	0x2f200	0x2800	RW- IDATA
.pklstb	0x99000	0x58e00	0x55000	RWX CODE DISCARDABLE
.relo2	0xf2000	0x3c	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x60000	0x47
IMPORT	0x5e000	0x16f0
RESOURCE	0x69000	0x2f200
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xf2000	0x3c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x5e4ac	0x394
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
STRING	#4087	416
STRING	#4088	880
STRING	#4089	908
STRING	#4090	940
STRING	#4091	208
STRING	#4092	184
STRING	#4093	628
STRING	#4094	1112
STRING	#4095	872
STRING	#4096	692
RCDATA	A01	570
RCDATA	CHARTABLE	33512
RCDATA	DVCLAL	16
RCDATA	IMAGE	139618
RCDATA	PACKAGEINFO	340
RCDATA	TAA	1859
MANIFEST	#1	752
#32	#1	8130

module_name	hint	ord	function_name
oleaut32.dll			SysFreeString
oleaut32.dll			SysReAllocStringLen
oleaut32.dll			SysAllocStringLen
advapi32.dll			RegQueryValueExW
advapi32.dll			RegOpenKeyExW
advapi32.dll			RegCloseKey
user32.dll			LoadStringW
user32.dll			MessageBoxA
user32.dll			CharNextW
kernel32.dll			lstrcmpiA
kernel32.dll			LoadLibraryA
kernel32.dll			LocalFree
kernel32.dll			LocalAlloc
kernel32.dll			GetACP
kernel32.dll			Sleep
kernel32.dll			VirtualFree
kernel32.dll			VirtualAlloc
kernel32.dll			GetSystemInfo
kernel32.dll			GetTickCount
kernel32.dll			QueryPerformanceCounter
kernel32.dll			GetVersion
kernel32.dll			GetCurrentThreadId
kernel32.dll			VirtualQuery
kernel32.dll			WideCharToMultiByte
kernel32.dll			MultiByteToWideChar
kernel32.dll			lstrlenW
kernel32.dll			lstrcpynW
kernel32.dll			LoadLibraryExW
kernel32.dll			IsValidLocale
kernel32.dll			GetSystemDefaultUILanguage
kernel32.dll			GetStartupInfoA
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleW
kernel32.dll			GetModuleFileNameW
kernel32.dll			GetUserDefaultUILanguage
kernel32.dll			GetLocaleInfoW
kernel32.dll			GetLastError
kernel32.dll			GetCommandLineW
kernel32.dll			FreeLibrary
kernel32.dll			FindFirstFileW
kernel32.dll			FindClose
kernel32.dll			ExitProcess
kernel32.dll			CompareStringW
kernel32.dll			WriteFile
kernel32.dll			UnhandledExceptionFilter
kernel32.dll			RtlUnwind
kernel32.dll			RaiseException
kernel32.dll			GetStdHandle
kernel32.dll			DeleteCriticalSection
kernel32.dll			LeaveCriticalSection
kernel32.dll			EnterCriticalSection
kernel32.dll			InitializeCriticalSection
kernel32.dll			CloseHandle
kernel32.dll			TlsSetValue
kernel32.dll			TlsGetValue
kernel32.dll			TlsFree
kernel32.dll			TlsAlloc
kernel32.dll			LocalFree
kernel32.dll			LocalAlloc
user32.dll			ReleaseDC
user32.dll			MessageBoxW
user32.dll			LoadStringW
user32.dll			LoadIconW
user32.dll			GetSystemMetrics
user32.dll			GetSysColor
user32.dll			GetIconInfo
user32.dll			GetDC
user32.dll			FrameRect
user32.dll			FillRect
user32.dll			DrawTextExW
user32.dll			DrawIconEx
user32.dll			DrawFocusRect
user32.dll			DestroyIcon
user32.dll			CreateIcon
user32.dll			CopyIcon
user32.dll			CharUpperBuffW
user32.dll			CharNextW
msimg32.dll			AlphaBlend
gdi32.dll			UnrealizeObject
gdi32.dll			StretchBlt
gdi32.dll			SetTextColor
gdi32.dll			SetStretchBltMode
gdi32.dll			SetROP2
gdi32.dll			SetPixel
gdi32.dll			SetDIBits
gdi32.dll			SetDIBColorTable
gdi32.dll			SetBrushOrgEx
gdi32.dll			SetBkMode
gdi32.dll			SetBkColor
gdi32.dll			SelectPalette
gdi32.dll			SelectObject
gdi32.dll			RoundRect
gdi32.dll			Rectangle
gdi32.dll			RealizePalette
gdi32.dll			Polyline
gdi32.dll			Polygon
gdi32.dll			PolyBezierTo
gdi32.dll			PolyBezier
gdi32.dll			Pie
gdi32.dll			PatBlt
gdi32.dll			MoveToEx
gdi32.dll			MaskBlt
gdi32.dll			LineTo
gdi32.dll			GetWindowOrgEx
gdi32.dll			GetTextMetricsW
gdi32.dll			GetTextExtentPoint32W
gdi32.dll			GetSystemPaletteEntries
gdi32.dll			GetStockObject
gdi32.dll			GetPixel
gdi32.dll			GetPaletteEntries
gdi32.dll			GetObjectW
gdi32.dll			GetDeviceCaps
gdi32.dll			GetDIBits
gdi32.dll			GetDIBColorTable
gdi32.dll			GetCurrentPositionEx
gdi32.dll			GetClipBox
gdi32.dll			GetBrushOrgEx
gdi32.dll			GetBitmapBits
gdi32.dll			ExtTextOutW
gdi32.dll			ExtFloodFill
gdi32.dll			Ellipse
gdi32.dll			DeleteObject
gdi32.dll			DeleteDC
gdi32.dll			CreatePenIndirect
gdi32.dll			CreatePalette
gdi32.dll			CreateHalftonePalette
gdi32.dll			CreateFontIndirectW
gdi32.dll			CreateDIBitmap
gdi32.dll			CreateDIBSection
gdi32.dll			CreateCompatibleDC
gdi32.dll			CreateCompatibleBitmap
gdi32.dll			CreateBrushIndirect
gdi32.dll			CreateBitmap
gdi32.dll			Chord
gdi32.dll			BitBlt
gdi32.dll			Arc
kernel32.dll			WriteFile
kernel32.dll			WideCharToMultiByte
kernel32.dll			WaitForSingleObject
kernel32.dll			VirtualQueryEx
kernel32.dll			VirtualQuery
kernel32.dll			VirtualFree
kernel32.dll			SizeofResource
kernel32.dll			SignalObjectAndWait
kernel32.dll			SetFilePointer
kernel32.dll			SetEvent
kernel32.dll			SetEndOfFile
kernel32.dll			ResetEvent
kernel32.dll			ReadFile
kernel32.dll			MultiByteToWideChar
kernel32.dll			MulDiv
kernel32.dll			MoveFileExW
kernel32.dll			LockResource
kernel32.dll			LoadResource
kernel32.dll			LoadLibraryW
kernel32.dll			LeaveCriticalSection
kernel32.dll			InitializeCriticalSection
kernel32.dll			GetVersionExW
kernel32.dll			GetThreadLocale
kernel32.dll			GetStdHandle
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleW
kernel32.dll			GetModuleFileNameW
kernel32.dll			GetLocaleInfoW
kernel32.dll			GetLocalTime
kernel32.dll			GetLastError
kernel32.dll			GetFullPathNameW
kernel32.dll			GetFileAttributesW
kernel32.dll			GetEnvironmentVariableW
kernel32.dll			GetDiskFreeSpaceW
kernel32.dll			GetDateFormatW
kernel32.dll			GetCurrentThreadId
kernel32.dll			GetCurrentProcess
kernel32.dll			GetCPInfo
kernel32.dll			FreeResource
kernel32.dll			InterlockedExchange
kernel32.dll			InterlockedCompareExchange
kernel32.dll			FreeLibrary
kernel32.dll			FormatMessageW
kernel32.dll			FindResourceW
kernel32.dll			EnumCalendarInfoW
kernel32.dll			EnterCriticalSection
kernel32.dll			DeleteFileW
kernel32.dll			DeleteCriticalSection
kernel32.dll			CreateFileW
kernel32.dll			CreateEventW
kernel32.dll			CreateDirectoryW
kernel32.dll			CompareStringW
kernel32.dll			CloseHandle
advapi32.dll			RegUnLoadKeyW
advapi32.dll			RegSetValueExW
advapi32.dll			RegSaveKeyW
advapi32.dll			RegRestoreKeyW
advapi32.dll			RegReplaceKeyW
advapi32.dll			RegQueryValueExW
advapi32.dll			RegQueryInfoKeyW
advapi32.dll			RegOpenKeyExW
advapi32.dll			RegLoadKeyW
advapi32.dll			RegFlushKey
advapi32.dll			RegEnumValueW
advapi32.dll			RegEnumKeyExW
advapi32.dll			RegDeleteValueW
advapi32.dll			RegDeleteKeyW
advapi32.dll			RegCreateKeyExW
advapi32.dll			RegConnectRegistryW
advapi32.dll			RegCloseKey
kernel32.dll			Sleep
oleaut32.dll			SafeArrayPtrOfIndex
oleaut32.dll			SafeArrayGetUBound
oleaut32.dll			SafeArrayGetLBound
oleaut32.dll			SafeArrayCreate
oleaut32.dll			VariantChangeType
oleaut32.dll			VariantCopy
oleaut32.dll			VariantClear
oleaut32.dll			VariantInit
shell32.dll			ShellExecuteExW

ord	entry_va	function_name
1	0x49868	CPlApplet

module_name	Loader.cpl
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x6002c
Functions(1)	0x60028
NameOrdinals(1)	0x60030

show previews

offset	size	type	comment
0	367104	DLL	01/15/2014 19:18:10	#
15c1	15	HTM		#
23a0	8130	JPG		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x6b87c

[?] can't find file_offset of VA 0x6bbec

[?] can't find file_offset of VA 0x6bf78

[?] can't find file_offset of VA 0x6c324

[?] can't find file_offset of VA 0x6c3f4

[?] can't find file_offset of VA 0x6c4ac

[?] can't find file_offset of VA 0x6c720

[?] can't find file_offset of VA 0x6cb78

[?] can't find file_offset of VA 0x6cee0

[?] can't find file_offset of VA 0x6d194

[?] can't find file_offset of VA 0x6d3d0

[?] can't find file_offset of VA 0x756b8

[?] can't find file_offset of VA 0x756c8

[?] can't find file_offset of VA 0x9782c

[?] can't find file_offset of VA 0x97980