anti-ngram.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	anti-ngram.exe
size	233472 (0x39000)
md5	01024fad35c0eff4753daaa40ac3fe51

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
126	50327	6
125	50727	2
123	50727	5
147	30729	2
1	0	129
109	50727	24
110	50727	35
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	5
TimeDateStamp	0x4f5946c6
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x23
Magic	0x20b
LinkerVersion	8.0
SizeOfCode	0x28e00
SizeOfInitializedData	0xfe00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x295b0
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x99b000
SizeOfHeaders	0x400
CheckSum	0x3f318
Subsystem	3
DllCharacteristics	0x8000
SizeOfStackReserve	0x4c4b40
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x28df0	0x28e00	R-X CODE
.rdata	0x2a000	0x9242	0x9400	R-- IDATA
.data	0x34000	0x962538	0x4200	RW- IDATA
.pdata	0x997000	0x240c	0x2600	R-- IDATA
.rsrc	0x99a000	0x1b0	0x200	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x323b8	0x50
RESOURCE	0x99a000	0x1b0
EXCEPTION	0x997000	0x240c
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x2a400	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2a000	0x3a8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	343	1252

module_name	hint	function_name
MSVCP80.dll	788	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
MSVCP80.dll	792	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(float) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
MSVCP80.dll	606	public: __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::~basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) __ptr64 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
MSVCP80.dll	692	public: class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > & __ptr64 __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::operator=(char const * __ptr64) __ptr64 ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z
MSVCP80.dll	380	public: __cdecl std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >(void) __ptr64 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
MSVCP80.dll	791	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned long) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
MSVCP80.dll	1506	public: static void __cdecl std::_String_base::_Xran(void) ?_Xran@_String_base@std@@SAXXZ
MSVCP80.dll	790	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(long) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
MSVCP80.dll	802	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(bool) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
MSVCP80.dll	801	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned __int64) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
MSVCP80.dll	793	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(double) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
MSVCP80.dll	789	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned int) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
MSVCP80.dll	1594	class std::basic_ostream<char, struct std::char_traits<char> > std::cerr ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
MSVCP80.dll	1958	class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::endl(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64) ?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
MSVCP80.dll	795	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64)) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
MSVCP80.dll	2934	public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
MSVCP80.dll	2937	public: __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const * __ptr64, __int64) __ptr64 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
MSVCP80.dll	2887	public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) __ptr64 ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
MSVCP80.dll	3047	bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP80.dll	1402	public: void __cdecl std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) __ptr64 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP80.dll	2084	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
MSVCP80.dll	1491	public: void __cdecl std::_Mutex::_Unlock(void) __ptr64 ?_Unlock@_Mutex@std@@QEAAXXZ
MSVCP80.dll	1365	public: void __cdecl std::_Mutex::_Lock(void) __ptr64 ?_Lock@_Mutex@std@@QEAAXXZ
MSVCR80.dll	1294	qsort
MSVCR80.dll	1201	fprintf
MSVCR80.dll	1235	isdigit
MSVCR80.dll	1279	memmove
MSVCR80.dll	1266	malloc
MSVCR80.dll	1281	memset
MSVCR80.dll	1343	strtod
MSVCR80.dll	1319	sscanf
MSVCR80.dll	1183	exp
MSVCR80.dll	1335	strncmp
MSVCR80.dll	1314	sprintf
MSVCR80.dll	1204	fputs
MSVCR80.dll	1284	perror
MSVCR80.dll	1188	ferror
MSVCR80.dll	1190	fgetc
MSVCR80.dll	1277	memcpy
MSVCR80.dll	1217	ftell
MSVCR80.dll	1215	fseek
MSVCR80.dll	1299	realloc
MSVCR80.dll	1291	puts
MSVCR80.dll	1287	printf
MSVCR80.dll	745	_mktime64
MSVCR80.dll	1199	fopen
MSVCR80.dll	1186	fclose
MSVCR80.dll	1329	strerror
MSVCR80.dll	322	_errno
MSVCR80.dll	1213	fscanf
MSVCR80.dll	1324	strcmp
MSVCR80.dll	763	_purecall
MSVCR80.dll	80	_HUGE
MSVCR80.dll	1167	atol
MSVCR80.dll	1340	strrchr
MSVCR80.dll	1165	atof
MSVCR80.dll	1361	tolower
MSVCR80.dll	1207	fread
MSVCR80.dll	1220	fwrite
MSVCR80.dll	67	void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR80.dll	89	__C_specific_handler
MSVCR80.dll	231	_amsg_exit
MSVCR80.dll	144	__getmainargs
MSVCR80.dll	85	_XcptFilter
MSVCR80.dll	331	_exit
MSVCR80.dll	254	_cexit
MSVCR80.dll	145	__initenv
MSVCR80.dll	471	_initterm
MSVCR80.dll	472	_initterm_e
MSVCR80.dll	270	_configthreadlocale
MSVCR80.dll	196	__setusermatherr
MSVCR80.dll	269	_commode
MSVCR80.dll	359	_fmode
MSVCR80.dll	316	_encode_pointer
MSVCR80.dll	193	__set_app_type
MSVCR80.dll	942	_unlock
MSVCR80.dll	133	__dllonexit
MSVCR80.dll	582	_lock
MSVCR80.dll	749	_onexit
MSVCR80.dll	306	_decode_pointer
MSVCR80.dll	56	public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64 ?_type_info_dtor_internal_method@type_info@@QEAAXXZ
MSVCR80.dll	131	__crt_debugger_hook
MSVCR80.dll	1323	strchr
MSVCR80.dll	1346	strtol
MSVCR80.dll	1241	isspace
MSVCR80.dll	1172	ceil
MSVCR80.dll	1262	log10
MSVCR80.dll	1209	free
MSVCR80.dll	1307	setlocale
MSVCR80.dll	1182	exit
MSVCR80.dll	17	void * __ptr64 __cdecl operator new(unsigned __int64) ??2@YAPEAX_K@Z
MSVCR80.dll	146	__iob_func
MSVCR80.dll	19	void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z
MSVCR80.dll	99	__CxxFrameHandler3
MSVCR80.dll	35	void __cdecl operator delete[](void * __ptr64) ??_V@YAXPEAX@Z
MSVCR80.dll	1192	fgets
MSVCR80.dll	863	_strdup
MSVCR80.dll	337	_fdopen
MSVCR80.dll	311	_dup
MSVCR80.dll	1297	rand
KERNEL32.dll	1230	TerminateProcess
KERNEL32.dll	454	GetCurrentProcess
KERNEL32.dll	1250	UnhandledExceptionFilter
KERNEL32.dll	1203	SetUnhandledExceptionFilter
KERNEL32.dll	770	IsDebuggerPresent
KERNEL32.dll	1062	RtlVirtualUnwind
KERNEL32.dll	1055	RtlLookupFunctionEntry
KERNEL32.dll	1048	RtlCaptureContext
KERNEL32.dll	937	QueryPerformanceCounter
KERNEL32.dll	666	GetTickCount
KERNEL32.dll	459	GetCurrentThreadId
KERNEL32.dll	455	GetCurrentProcessId
KERNEL32.dll	640	GetSystemTimeAsFileTime
KERNEL32.dll	1216	Sleep

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	227888	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK