DevCalc-mod-data-expand-pe.exe

info
MZ
PE
resources
strings
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	DevCalc-mod-data-expand-pe.exe
size	73728 (0x12000)
md5	3a63e696de5b2ce0d17bf7dba7f9ed1f

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
19	8034	6
12	7291	2
14	7299	3
10	8168	11
4	8168	5
1	0	296
11	8168	15
6	1720	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x3ac8435e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x6000
SizeOfInitializedData	0xb000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x5f22
BaseOfCode	0x1000
BaseOfData	0x7000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x12000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x5b65	0x6000	R-X CODE
.rdata	0x7000	0x1f54	0x2000	R-- IDATA
.data	0x9000	0x3000	0x3000	RW- IDATA
.rsrc	0xc000	0x5120	0x6000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x8498	0x78
RESOURCE	0xc000	0x5120
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
METAFILE	#143	2678
METAFILE	#144	2470
METAFILE	#145	2494
METAFILE	#147	5416
ICON	#1	296
ICON	#2	744
ICON	#3	2216
DIALOG	#148	54
STRING	#1	62
STRING	#8	378
STRING	#9	710
STRING	#13	346
STRING	#14	546
STRING	#3605	260
ACCELERATORS	#128	144
GROUP_ICON	#128	48
VERSION	#1	844

id	lang	string
0	1033	ĭ
2	1033	˼ĭĭĆ,Ըª
112	1033
113	1033	㲸д
114	1033	д㬭ʩ㲸д㜰д㊈д㊈ǁ㜰ǁ㜰д⵭д⮬дⲌ͓⵭д♚дᾴд∦ǁ▩ǁ✻͓♚дᰣдᩢдᭃ͓ᰣдᕽдᎼдᒝ͓ᕽдာдഖдມʩာдঅддǁܓǁঅдĭĭǰ˼蜮\ĭĭĆ=Ը㭿˺㫛˺㬭ʩ㭿˺㜰˺㊈˺㊈㜰㜰˺⛢˺⃭˺⍟⑰⛢˺໲˺๏˺ມʩ໲˺ࡌ˺˺ҧҧªӊךࡌ˺ĭĭǰ˼餳fĭĭ
128	1033
129	1033	ڦҧ׼ҧݐՒڦ㲝ߟ㊈ߟ㊈խ㜰խ㜰ڦ㡩խ㷱խ㺀׼㲝ߟㄙߟ⠀ߟ⩲խ⺦խㄙߟ┡ߟṻߟᷬݐᵝߟߟխિխ୎׼௝խᅥխᇴ׼ኃխᚶխ៰ڦᤩխᵝխᷬ׼ṻխ┡խ⏧ڦ┡ߟĭĭǰ˼吜8ĭĭĆUԸ㷖ڦ㜰ڦ㦢д㲸д㺀׼㷖ڦ㜰ڦ㊈ڦ㊈д㜰д㜰ڦ⿟ڦ⤹ڦ⮬д⵭д⿟ڦ⏧ڦ៰ڦᩢдᰣдᷬ׼ᾴд♚д⏧ڦ៰ڦՒڦҧ׼ҧڦڦдঅд୎׼ഖдာдᇴ׼Ꮌдᕽд៰ڦĭĭǰ˼昤EĭĭĆXԸ㷱խ㡩խ㫛˺㭿˺㷱խ㜰խ㊈խ㊈˺㜰˺㜰խ⺦խ⩲խⲌ͓⺦խ┡խṻխ⃭˺⛢˺✻͓┡խᵝխᤩխᭃ͓ᵝխᚶխኃխᒝ͓ᚶխᅥխ௝խ๏˺໲˺ᅥխિխխ˺ࡌ˺િխĭĭǰ˼甦OĭĭĆTԸ
192	1033	ªª
193	1033	ª͓ǌªǌªª㌲ª㗛ª㗛ǌ㌲ǌ㌲ª⑪ǌ⎏ǌ⏿Ş⑪ǌׁǌӑǌՈŔׁǌĭĭǰ˼ĭĭĆ,Ըªª͓ª͓˭ª˭ªª㌲ª㗛ª㗛˭㌲˭㌲ª▃˭≩˭⏿Ş▃˭ۤ˭ΰ˭ՈŔۤ˭ĭĭǰ˼༅ ĭĭĆFԸªǌ͓ǌ͓ЎªЎªǌӑǌׁǌࠈЎКЎ͓͊ӑ
208	1033	͊ӑǌ⎏ǌ⑪ǌ◦͓┩Ў⅂Ў⎏ǌ㌲ǌ㗛ǌ㗛Ў㌲Ў㌲ǌ㬾Ў㬜Ў㬭Ͻ㬾ЎາЎຐЎມϽາЎĭĭǰ˼ℍĭĭĆaԸ ª˭͓˭͓԰ª԰ª˭ΰ˭ۤ˭फ԰Ծ԰͓͊ΰ˭≩˭▃˭◦͓␄԰‛԰≩˭㌲˭㗛˭㗛԰㌲԰㌲˭㱟԰㧻԰㬭Ͻ㱟԰ⴃ԰Ⱆ԰ⲌҺⴃ԰ᯟ԰᫏԰᭛ҧᯟ԰ᔝ԰ᐋ԰ᒓҧᔝ԰࿓԰൮԰ມϽ࿓԰ĭĭǰ˼㌒$ĭĭĆcԸ ªЎ͓Ўّ͓ªّªЎКЎࠈЎ੏ّ٣ّКЎຐЎາЎჴ్ّّຐЎ⅂Ў┩Ў⋟ّỴّ⅂Ў㌲Ў㗛Ў㗛ّ㌲ّ㌲Ў㬜Ў㬾Ў㴬׼㳖
57664	1033	ĭ
57666	1033	Ć'Ը㜰ǁ㊈ǁ㊈㜰㜰ǁ▩ǁ∦ǁ⏧▩ǁܓǁǁҧҧªՒܓǁĭĭǰ˼餳fĭĭĆ,Ը㜰㊈㊈㜰㜰⑰⍟⏧⑰ךӊՒךҧҧҧĭĭ

module_name	ord	function_name
KERNEL32.DLL		lstrcpynA
KERNEL32.DLL		GetStartupInfoA
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		FindResourceA
KERNEL32.DLL		LoadResource
KERNEL32.DLL		LockResource
GDI32.dll		GetEnhMetaFileBits
GDI32.dll		BitBlt
GDI32.dll		CreateCompatibleBitmap
GDI32.dll		CreateCompatibleDC
GDI32.dll		Escape
GDI32.dll		ExtTextOutA
GDI32.dll		TextOutA
GDI32.dll		RectVisible
GDI32.dll		PtVisible
GDI32.dll		RoundRect
GDI32.dll		SetEnhMetaFileBits
GDI32.dll		PlayEnhMetaFile
GDI32.dll		SetWinMetaFileBits
GDI32.dll		DeleteEnhMetaFile
GDI32.dll		CreateFontIndirectA
MFC42.DLL	5731
MFC42.DLL	5714
MFC42.DLL	4622
MFC42.DLL	3874
MFC42.DLL	1576
MFC42.DLL	858
MFC42.DLL	2818
MFC42.DLL	4160
MFC42.DLL	5805
MFC42.DLL	4710
MFC42.DLL	4234
MFC42.DLL	324
MFC42.DLL	3597
MFC42.DLL	4425
MFC42.DLL	5280
MFC42.DLL	1775
MFC42.DLL	6052
MFC42.DLL	4998
MFC42.DLL	4853
MFC42.DLL	4376
MFC42.DLL	5265
MFC42.DLL	2411
MFC42.DLL	2023
MFC42.DLL	4218
MFC42.DLL	2578
MFC42.DLL	4398
MFC42.DLL	5290
MFC42.DLL	3402
MFC42.DLL	3582
MFC42.DLL	6055
MFC42.DLL	4078
MFC42.DLL	1776
MFC42.DLL	4407
MFC42.DLL	5241
MFC42.DLL	2385
MFC42.DLL	5163
MFC42.DLL	6374
MFC42.DLL	4353
MFC42.DLL	3798
MFC42.DLL	4837
MFC42.DLL	4441
MFC42.DLL	2648
MFC42.DLL	2055
MFC42.DLL	6376
MFC42.DLL	3749
MFC42.DLL	5065
MFC42.DLL	1727
MFC42.DLL	5261
MFC42.DLL	2446
MFC42.DLL	2124
MFC42.DLL	5277
MFC42.DLL	2982
MFC42.DLL	3147
MFC42.DLL	3259
MFC42.DLL	4465
MFC42.DLL	3136
MFC42.DLL	3262
MFC42.DLL	2985
MFC42.DLL	3081
MFC42.DLL	2976
MFC42.DLL	3830
MFC42.DLL	3831
MFC42.DLL	3825
MFC42.DLL	3079
MFC42.DLL	4080
MFC42.DLL	4627
MFC42.DLL	4424
MFC42.DLL	3742
MFC42.DLL	4220
MFC42.DLL	2584
MFC42.DLL	3654
MFC42.DLL	3619
MFC42.DLL	809
MFC42.DLL	616
MFC42.DLL	818
MFC42.DLL	2080
MFC42.DLL	2639
MFC42.DLL	6442
MFC42.DLL	1233
MFC42.DLL	1168
MFC42.DLL	556
MFC42.DLL	567
MFC42.DLL	3626
MFC42.DLL	3663
MFC42.DLL	2414
MFC42.DLL	2438
MFC42.DLL	4299
MFC42.DLL	6215
MFC42.DLL	1641
MFC42.DLL	3873
MFC42.DLL	5981
MFC42.DLL	6197
MFC42.DLL	6378
MFC42.DLL	6380
MFC42.DLL	4275
MFC42.DLL	755
MFC42.DLL	2567
MFC42.DLL	2754
MFC42.DLL	470
MFC42.DLL	6453
MFC42.DLL	3870
MFC42.DLL	2379
MFC42.DLL	2759
MFC42.DLL	6270
MFC42.DLL	1644
MFC42.DLL	641
MFC42.DLL	2516
MFC42.DLL	361
MFC42.DLL	6199
MFC42.DLL	800
MFC42.DLL	955
MFC42.DLL	1640
MFC42.DLL	5757
MFC42.DLL	540
MFC42.DLL	6187
MFC42.DLL	640
MFC42.DLL	924
MFC42.DLL	922
MFC42.DLL	537
MFC42.DLL	2514
MFC42.DLL	4673
MFC42.DLL	4274
MFC42.DLL	6375
MFC42.DLL	4486
MFC42.DLL	2554
MFC42.DLL	2512
MFC42.DLL	6172
MFC42.DLL	3922
MFC42.DLL	1089
MFC42.DLL	5199
MFC42.DLL	2396
MFC42.DLL	3346
MFC42.DLL	5300
MFC42.DLL	5302
MFC42.DLL	4079
MFC42.DLL	4698
MFC42.DLL	5307
MFC42.DLL	5289
MFC42.DLL	5580
MFC42.DLL	5571
MFC42.DLL	3738
MFC42.DLL	561
MFC42.DLL	815
MFC42.DLL	2621
MFC42.DLL	2725
MFC42.DLL	1871
MFC42.DLL	6571
MFC42.DLL	2685
MFC42.DLL	2591
MFC42.DLL	6247
MFC42.DLL	2732
MFC42.DLL	6251
MFC42.DLL	5486
MFC42.DLL	5306
MFC42.DLL	2972
MFC42.DLL	5759
MFC42.DLL	6192
MFC42.DLL	323
MFC42.DLL	5785
MFC42.DLL	4331
MFC42.DLL	6190
MFC42.DLL	6021
MFC42.DLL	2860
MFC42.DLL	5873
MFC42.DLL	5789
MFC42.DLL	5794
MFC42.DLL	5678
MFC42.DLL	5736
MFC42.DLL	283
MFC42.DLL	5787
MFC42.DLL	6062
MFC42.DLL	5865
MFC42.DLL	406
MFC42.DLL	705
MFC42.DLL	2740
MFC42.DLL	5440
MFC42.DLL	2801
MFC42.DLL	6383
MFC42.DLL	5875
MFC42.DLL	3089
MFC42.DLL	2380
MFC42.DLL	5864
MFC42.DLL	3596
MFC42.DLL	5788
MFC42.DLL	472
MFC42.DLL	3797
MFC42.DLL	2864
MFC42.DLL	6186
MFC42.DLL	3571
MFC42.DLL	2971
MFC42.DLL	5756
MFC42.DLL	4330
MFC42.DLL	6189
MFC42.DLL	5579
MFC42.DLL	6061
MSVCRT.dll		_CIacos
MSVCRT.dll		_strdup
MSVCRT.dll		_makepath
MSVCRT.dll		_controlfp
MSVCRT.dll		_onexit
MSVCRT.dll		fwrite
MSVCRT.dll		_except_handler3
MSVCRT.dll		__set_app_type
MSVCRT.dll		__p__fmode
MSVCRT.dll		__p__commode
MSVCRT.dll		_adjust_fdiv
MSVCRT.dll		__setusermatherr
MSVCRT.dll		_initterm
MSVCRT.dll		__getmainargs
MSVCRT.dll		_acmdln
MSVCRT.dll		exit
MSVCRT.dll		_XcptFilter
MSVCRT.dll		_exit
MSVCRT.dll		__dllonexit
MSVCRT.dll		fopen
MSVCRT.dll		fread
MSVCRT.dll		fclose
MSVCRT.dll		sprintf
MSVCRT.dll		void __cdecl operator delete(void *) ??3@YAXPAX@Z
MSVCRT.dll		__CxxFrameHandler
MSVCRT.dll		void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
MSVCRT.dll		_splitpath
MSVCRT.dll		_itoa
MSVCRT.dll		_stricmp
MSVCRT.dll		_setmbcp
MSVCRT.dll		ceil
MSVCRT.dll		_CIcosh
MSVCRT.dll		_CIasin
MSVCRT.dll		_CIfmod
MSVCRT.dll		_CIpow
MSVCRT.dll		floor
MSVCRT.dll		_CItanh
MSVCRT.dll		atof
MSVCRT.dll		_CIsinh
MSVCRT.dll		strchr
MSVCRT.dll		isxdigit
MSVCRT.dll		tolower
MSVCRT.dll		_ftol
MSVCRT.dll		isdigit
MSVCRT.dll		sscanf
MSVCRT.dll		isalpha
USER32.dll		SetCapture
USER32.dll		ReleaseCapture
USER32.dll		PostMessageA
USER32.dll		CreatePopupMenu
USER32.dll		OffsetRect
USER32.dll		GrayStringA
USER32.dll		GetClientRect
USER32.dll		GetDesktopWindow
USER32.dll		ShowWindow
USER32.dll		MoveWindow
USER32.dll		GetDlgCtrlID
USER32.dll		TranslateAcceleratorA
USER32.dll		AppendMenuA
USER32.dll		SetMenuDefaultItem
USER32.dll		InvalidateRect
USER32.dll		PtInRect
USER32.dll		GetSysColor
USER32.dll		GetWindowRect
USER32.dll		UpdateWindow
USER32.dll		IsWindow
USER32.dll		GetSystemMetrics
USER32.dll		DestroyAcceleratorTable
USER32.dll		EnableWindow
USER32.dll		LoadIconA
USER32.dll		CopyRect
USER32.dll		LoadAcceleratorsA
USER32.dll		GetParent
USER32.dll		TabbedTextOutA
USER32.dll		DrawTextA
USER32.dll		SendMessageA

VS_FIXEDFILEINFO

dwSignature	0
FileVersion	0.0.0.0
ProductVersion	0.0.0.0
StrucVersion	0
FileFlagsMask	0
FileFlags	0
FileOS	0
FileType	0
FileSubtype	0

show previews

offset	size	type	comment
0	73728	EXE	04/02/2001 09:16:14	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(992) > stringtable size(62). truncated to 60

[!] string size(29508) > stringtable size(378). truncated to 376

[!] string size(2724) > stringtable size(710). truncated to 708

[!] string size(1702) > stringtable size(346). truncated to 344

[!] string size(1702) > stringtable size(546). truncated to 544

[!] string size(602) > stringtable size(260). truncated to 258

[!] refusing to read ICODIRENTRY beyond resource size

[?] invalid VS_VERSIONINFO child type "\x01\x00\t\x04\x00\x00"