filenameCASIO570MS.exe
size10389704 (0x9e88c8)
md5101e363922c5b07c32d567fd8812624b
typePE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x463c18c6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.0
SizeOfCode0x13600
SizeOfInitializedData0x2d000
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0x15000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x49000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Rar SFX Archive

Sections

namevavsizeraw sizeflags
.text0x10000x140000x13600R-X CODE
.data0x150000x70000xa00RW- IDATA
.idata0x1c0000x10000x1000R-- IDATA
.rsrc0x1d0000x2b5040x2b600R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1c0000xfd1
RESOURCE0x1d0000x2b504
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
BITMAP#101846001252
ICON#1676241252
ICON#296401252
ICON#342641252
ICON#424401252
ICON#511281252
DIALOGASKNEXTVOL6421252
DIALOGGETPASSWORD13141252
DIALOGLICENSEDLG2321252
DIALOGRENAMEDLG3021252
DIALOGREPLACEFILEDLG8241252
DIALOGSTARTDLG5461252
STRING#75561252
STRING#89461252
STRING#95301252
STRING#106381252
RCDATADVCLAL161252
GROUP_ICON#100761252
MANIFEST#18311252
idlangstring
1001049Select destination folder
1011049Extracting %s
1021049Skipping %s
1031049Unexpected end of archive
1041049The file "%s" header is corrupt
1051049The archive comment header is corrupt
1061049The archive comment is corrupt
1071049Not enough memory
1081049Unknown method in %s
1091049Cannot open %s
1101049Cannot create %s
1111049Cannot create folder %s
1121049CRC failed in the encrypted file %s (wrong password ?)
1131049CRC failed in %s
1141049Packed data CRC failed in %s
1151049Wrong password for %s
1161049Write error in the file %s. Probably the disk is full
1171049Read error in the file %s
1181049File close error
1191049The required volume is absent
1201049The archive is either in unknown format or damaged
1211049Extracting from %s
1231049Next volume
1241049The archive header is corrupt
1251049Close
1261049Error
1271049Errors encountered while performing the operation Look at the information window for more details
1281049bytes
1291049modified on
1301049folder is not accessible
1311049Some files could not be created. Please close all applications, reboot Windows and restart this installation
1321049Some installation files are corrupt. Please download a fresh copy and retry the installation
1331049All files
1501049<ul><li>Press <b>Install</b> button to start extraction.</li><br><br>
1511049<li>Use <b>Browse</b> button to select the destination
1521049folder from the folders tree. It can be also entered
1531049manually.</lI><br><br>
1541049<lI>If the destination folder does not exist, it will be
1551049created automatically before extraction.</lI></ul>
module_namehintordfunction_name
ADVAPI32.DLLAdjustTokenPrivileges
ADVAPI32.DLLLookupPrivilegeValueA
ADVAPI32.DLLOpenProcessToken
ADVAPI32.DLLRegCloseKey
ADVAPI32.DLLRegCreateKeyExA
ADVAPI32.DLLRegOpenKeyExA
ADVAPI32.DLLRegQueryValueExA
ADVAPI32.DLLRegSetValueExA
ADVAPI32.DLLSetFileSecurityA
ADVAPI32.DLLSetFileSecurityW
KERNEL32.DLLCloseHandle
KERNEL32.DLLCompareStringA
KERNEL32.DLLCreateDirectoryA
KERNEL32.DLLCreateDirectoryW
KERNEL32.DLLCreateFileA
KERNEL32.DLLCreateFileW
KERNEL32.DLLDeleteFileA
KERNEL32.DLLDeleteFileW
KERNEL32.DLLDosDateTimeToFileTime
KERNEL32.DLLExitProcess
KERNEL32.DLLExpandEnvironmentStringsA
KERNEL32.DLLFileTimeToLocalFileTime
KERNEL32.DLLFileTimeToSystemTime
KERNEL32.DLLFindClose
KERNEL32.DLLFindFirstFileA
KERNEL32.DLLFindFirstFileW
KERNEL32.DLLFindNextFileA
KERNEL32.DLLFindNextFileW
KERNEL32.DLLFindResourceA
KERNEL32.DLLFreeLibrary
KERNEL32.DLLGetCPInfo
KERNEL32.DLLGetCommandLineA
KERNEL32.DLLGetCurrentDirectoryA
KERNEL32.DLLGetCurrentProcess
KERNEL32.DLLGetDateFormatA
KERNEL32.DLLGetFileAttributesA
KERNEL32.DLLGetFileAttributesW
KERNEL32.DLLGetFileType
KERNEL32.DLLGetFullPathNameA
KERNEL32.DLLGetLastError
KERNEL32.DLLGetLocaleInfoA
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetNumberFormatA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLGetProcessHeap
KERNEL32.DLLGetStdHandle
KERNEL32.DLLGetTempPathA
KERNEL32.DLLGetTickCount
KERNEL32.DLLGetTimeFormatA
KERNEL32.DLLGetVersionExA
KERNEL32.DLLGlobalAlloc
KERNEL32.DLLHeapAlloc
KERNEL32.DLLHeapFree
KERNEL32.DLLHeapReAlloc
KERNEL32.DLLIsDBCSLeadByte
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLLocalFileTimeToFileTime
KERNEL32.DLLMoveFileA
KERNEL32.DLLMoveFileExA
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLReadFile
KERNEL32.DLLSetCurrentDirectoryA
KERNEL32.DLLSetEndOfFile
KERNEL32.DLLSetEnvironmentVariableA
KERNEL32.DLLSetFileAttributesA
KERNEL32.DLLSetFileAttributesW
KERNEL32.DLLSetFilePointer
KERNEL32.DLLSetFileTime
KERNEL32.DLLSetLastError
KERNEL32.DLLSleep
KERNEL32.DLLSystemTimeToFileTime
KERNEL32.DLLWaitForSingleObject
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLWriteFile
KERNEL32.DLLlstrcmpiA
KERNEL32.DLLlstrlenA
COMCTL32.DLL17
COMDLG32.DLLCommDlgExtendedError
COMDLG32.DLLGetOpenFileNameA
COMDLG32.DLLGetSaveFileNameA
GDI32.DLLDeleteObject
SHELL32.DLLSHBrowseForFolderA
SHELL32.DLLSHChangeNotify
SHELL32.DLLSHFileOperationA
SHELL32.DLLSHGetFileInfoA
SHELL32.DLLSHGetMalloc
SHELL32.DLLSHGetSpecialFolderLocation
SHELL32.DLLShellExecuteExA
SHELL32.DLLSHGetPathFromIDListA
USER32.DLLCharToOemA
USER32.DLLCharToOemBuffA
USER32.DLLCharUpperA
USER32.DLLCopyRect
USER32.DLLCreateWindowExA
USER32.DLLDefWindowProcA
USER32.DLLDestroyIcon
USER32.DLLDestroyWindow
USER32.DLLDialogBoxParamA
USER32.DLLDispatchMessageA
USER32.DLLEnableWindow
USER32.DLLEndDialog
USER32.DLLFindWindowExA
USER32.DLLGetClassNameA
USER32.DLLGetClientRect
USER32.DLLGetDlgItem
USER32.DLLGetDlgItemTextA
USER32.DLLGetMessageA
USER32.DLLGetParent
USER32.DLLGetSysColor
USER32.DLLGetSystemMetrics
USER32.DLLGetWindow
USER32.DLLGetWindowLongA
USER32.DLLGetWindowRect
USER32.DLLGetWindowTextA
USER32.DLLIsWindow
USER32.DLLIsWindowVisible
USER32.DLLLoadBitmapA
USER32.DLLLoadCursorA
USER32.DLLLoadIconA
USER32.DLLLoadStringA
USER32.DLLMapWindowPoints
USER32.DLLMessageBoxA
USER32.DLLOemToCharA
USER32.DLLOemToCharBuffA
USER32.DLLPeekMessageA
USER32.DLLPostMessageA
USER32.DLLRegisterClassExA
USER32.DLLSendDlgItemMessageA
USER32.DLLSendMessageA
USER32.DLLSetDlgItemTextA
USER32.DLLSetFocus
USER32.DLLSetMenu
USER32.DLLSetWindowLongA
USER32.DLLSetWindowPos
USER32.DLLSetWindowTextA
USER32.DLLShowWindow
USER32.DLLTranslateMessage
USER32.DLLUpdateWindow
USER32.DLLWaitForInputIdle
USER32.DLLwsprintfA
USER32.DLLwvsprintfA
OLE32.DLLCLSIDFromString
OLE32.DLLCoCreateInstance
OLE32.DLLCreateStreamOnHGlobal
OLE32.DLLOleInitialize
OLE32.DLLOleUninitialize
offsetsizetypecomment
0265216EXE05/05/2007 05:40:22#
15c115HTM#
40c0010124488RAR#
Scanning the drive for archives:
1 file, 10389704 bytes (10147 KiB)


--
Type = Rar
Offset = 265216
Physical Size = 10124488
Solid = -
Blocks = 81
Multivolume = -
Volumes = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2009-08-02 22:32:54 ....A      2822144       998648  CASIO 570MS.rsm
2004-08-04 08:07:00 .R..A      1712128       767820  gdiplus.dll
2009-08-02 22:42:52 ....A        23614         1851  mdeploy.registry
2005-09-23 07:28:52 ....A       270848       124958  mscoree.dll
2006-12-01 22:54:32 ....A       479232        97421  msvcm80.dll
2006-12-01 22:54:34 ....A       548864        99934  msvcp80.dll
2006-12-01 22:54:32 ....A       626688       240684  MSVCR80.dll
2001-11-21 13:13:36 ....A         6178         1136  ndphlpr.vxd
2007-01-22 14:28:12 ....A       172032        63809  rsdeploy.dll
2009-08-02 22:42:52 ....A       110592        14098  ViewLog.exe
2009-07-23 23:39:46 ....A       278528        47434  ViewLog.rsm
2009-04-02 22:59:22 ....A        68608        24366  v2.0.50727/assembly/GAC_32/CustomMarshalers/2.0.0.0__B03F5F7F11D50A3A/CustomMarshalers.dll
2009-08-02 22:42:44 ....A          427          276  v2.0.50727/assembly/GAC_32/CustomMarshalers/2.0.0.0__B03F5F7F11D50A3A/Microsoft.VC80.CRT.manifest
2009-04-02 22:59:20 ....A        10752         4334  v2.0.50727/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
2009-04-02 23:00:14 ....A         5632         2029  v2.0.50727/assembly/GAC_MSIL/Microsoft.VisualC/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualC.dll
2009-04-02 23:00:04 ....A      3018752       855935  v2.0.50727/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
2009-04-02 23:00:02 ....A       389120       121932  v2.0.50727/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
2009-04-02 22:59:58 ....A       716800       230937  v2.0.50727/assembly/GAC_MSIL/System.Data.SqlXml/2.0.0.0__b77a5c561934e089/System.Data.SqlXml.dll
2009-04-02 22:59:14 ....A       884736       197143  v2.0.50727/assembly/GAC_MSIL/System.Deployment/2.0.0.0__b03f5f7f11d50a3a/System.Deployment.dll
2009-04-02 23:00:06 ....A       700416       167617  v2.0.50727/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
2009-04-02 23:00:00 ....A       131072        43152  v2.0.50727/assembly/GAC_MSIL/System.Runtime.Serialization.Formatters.Soap/2.0.0.0__b03f5f7f11d50a3a/System.Runtime.Serialization.Formatters.Soap.dll
2009-04-02 22:59:20 ....A       258048        79876  v2.0.50727/assembly/GAC_MSIL/System.Security/2.0.0.0__b03f5f7f11d50a3a/System.Security.dll
2009-08-02 22:42:44 ....A          427          276  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/Microsoft.VC80.CRT.manifest
2009-04-02 22:59:34 ....A      5316608      1351520  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
2009-04-02 22:59:36 ....A      2035712       557276  v2.0.50727/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
2005-09-23 07:28:56 ....A        66728        18108  v2.0.50727/big5.nlp
2005-09-23 07:28:56 ....A        82172        39490  v2.0.50727/bopomofo.nlp
2005-09-23 07:28:48 ....A        19852         2238  v2.0.50727/CONFIG/machine.config
2005-09-23 07:28:58 ....A        17920         7658  v2.0.50727/Culture.dll
2009-08-02 22:42:52 ....A           52           52  v2.0.50727/fusion.localgac
2005-09-23 07:28:56 ....A       116756        18551  v2.0.50727/ksc.nlp
2009-08-02 22:42:44 ....A          427          276  v2.0.50727/Microsoft.VC80.CRT.manifest
2005-09-23 07:28:56 ....A       326144       185467  v2.0.50727/mscorjit.dll
2005-09-23 07:28:56 ....A      4308992      1233917  v2.0.50727/mscorlib.dll
2005-09-23 07:28:56 ....A       102400        46794  v2.0.50727/mscorpe.dll
2005-09-23 07:29:00 ....A       330752        39068  v2.0.50727/mscorrc.dll
2005-09-23 07:28:56 ....A        67072        30852  v2.0.50727/mscorsec.dll
2005-09-23 07:28:50 ....A         9216         3709  v2.0.50727/mscorsn.dll
2005-09-23 07:28:50 ....A      5615616      2151805  v2.0.50727/mscorwks.dll
2005-09-23 07:28:56 ....A        59342        29273  v2.0.50727/normidna.nlp
2005-09-23 07:28:56 ....A        42918        16102  v2.0.50727/normnfc.nlp
2005-09-23 07:28:56 ....A        36644        11432  v2.0.50727/normnfd.nlp
2005-09-23 07:28:56 ....A        63176        32172  v2.0.50727/normnfkc.nlp
2005-09-23 07:28:56 ....A        57150        27254  v2.0.50727/normnfkd.nlp
2005-09-23 07:28:56 ....A        78336        34046  v2.0.50727/perfcounter.dll
2005-09-23 07:28:56 ....A        83748        10309  v2.0.50727/prc.nlp
2005-09-23 07:28:56 ....A        83748        40110  v2.0.50727/prcp.nlp
2005-09-23 07:28:56 ....A       262148        10319  v2.0.50727/sortkey.nlp
2005-09-23 07:28:56 ....A        20320         6425  v2.0.50727/sorttbls.nlp
2005-09-23 07:28:56 ....A        28288        10821  v2.0.50727/xjis.nlp
2005-09-23 07:28:56 ....A          474          272  v2.0.50727/XPThemes.manifest
2009-08-02 22:42:48 ....A       106496        16978  CASIO 570MS.exe
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_32/CustomMarshalers/2.0.0.0__B03F5F7F11D50A3A
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Microsoft.VisualC/8.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Data.SqlXml/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Deployment/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Runtime.Serialization.Formatters.Soap/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Security/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:27 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:27 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_32/CustomMarshalers
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Accessibility
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Microsoft.VisualC
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Configuration
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Data.SqlXml
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Deployment
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Drawing
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Runtime.Serialization.Formatters.Soap
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Security
2009-07-23 23:51:27 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms
2009-07-23 23:51:26 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Xml
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_32
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly
2009-07-23 23:51:26 D....            0            0  v2.0.50727/CONFIG
2009-07-23 23:51:26 D....            0            0  v2.0.50727
------------------- ----- ------------ ------------  ------------------------
2009-08-02 22:42:52           32574845     10117960  52 files, 29 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK