CASIO570MS.exe

info
MZ
PE
resources
strings
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	CASIO570MS.exe
size	10389704 (0x9e88c8)
md5	101e363922c5b07c32d567fd8812624b

type	PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x463c18c6
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	5.0
SizeOfCode	0x13600
SizeOfInitializedData	0x2d000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x15000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x49000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Rar SFX Archive

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x14000	0x13600	R-X CODE
.data	0x15000	0x7000	0xa00	RW- IDATA
.idata	0x1c000	0x1000	0x1000	R-- IDATA
.rsrc	0x1d000	0x2b504	0x2b600	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1c000	0xfd1
RESOURCE	0x1d000	0x2b504
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BITMAP	#101	84600	1252
ICON	#1	67624	1252
ICON	#2	9640	1252
ICON	#3	4264	1252
ICON	#4	2440	1252
ICON	#5	1128	1252
DIALOG	ASKNEXTVOL	642	1252
DIALOG	GETPASSWORD1	314	1252
DIALOG	LICENSEDLG	232	1252
DIALOG	RENAMEDLG	302	1252
DIALOG	REPLACEFILEDLG	824	1252
DIALOG	STARTDLG	546	1252
STRING	#7	556	1252
STRING	#8	946	1252
STRING	#9	530	1252
STRING	#10	638	1252
RCDATA	DVCLAL	16	1252
GROUP_ICON	#100	76	1252
MANIFEST	#1	831	1252

id	lang	string
100	1049	Select destination folder
101	1049	Extracting %s
102	1049	Skipping %s
103	1049	Unexpected end of archive
104	1049	The file "%s" header is corrupt
105	1049	The archive comment header is corrupt
106	1049	The archive comment is corrupt
107	1049	Not enough memory
108	1049	Unknown method in %s
109	1049	Cannot open %s
110	1049	Cannot create %s
111	1049	Cannot create folder %s
112	1049	CRC failed in the encrypted file %s (wrong password ?)
113	1049	CRC failed in %s
114	1049	Packed data CRC failed in %s
115	1049	Wrong password for %s
116	1049	Write error in the file %s. Probably the disk is full
117	1049	Read error in the file %s
118	1049	File close error
119	1049	The required volume is absent
120	1049	The archive is either in unknown format or damaged
121	1049	Extracting from %s
123	1049	Next volume
124	1049	The archive header is corrupt
125	1049	Close
126	1049	Error
127	1049	Errors encountered while performing the operation Look at the information window for more details
128	1049	bytes
129	1049	modified on
130	1049	folder is not accessible
131	1049	Some files could not be created. Please close all applications, reboot Windows and restart this installation
132	1049	Some installation files are corrupt. Please download a fresh copy and retry the installation
133	1049	All files
150	1049	<ul><li>Press <b>Install</b> button to start extraction.</li><br><br>
151	1049	<li>Use <b>Browse</b> button to select the destination
152	1049	folder from the folders tree. It can be also entered
153	1049	manually.</lI><br><br>
154	1049	<lI>If the destination folder does not exist, it will be
155	1049	created automatically before extraction.</lI></ul>

module_name	ord	function_name
ADVAPI32.DLL		AdjustTokenPrivileges
ADVAPI32.DLL		LookupPrivilegeValueA
ADVAPI32.DLL		OpenProcessToken
ADVAPI32.DLL		RegCloseKey
ADVAPI32.DLL		RegCreateKeyExA
ADVAPI32.DLL		RegOpenKeyExA
ADVAPI32.DLL		RegQueryValueExA
ADVAPI32.DLL		RegSetValueExA
ADVAPI32.DLL		SetFileSecurityA
ADVAPI32.DLL		SetFileSecurityW
KERNEL32.DLL		CloseHandle
KERNEL32.DLL		CompareStringA
KERNEL32.DLL		CreateDirectoryA
KERNEL32.DLL		CreateDirectoryW
KERNEL32.DLL		CreateFileA
KERNEL32.DLL		CreateFileW
KERNEL32.DLL		DeleteFileA
KERNEL32.DLL		DeleteFileW
KERNEL32.DLL		DosDateTimeToFileTime
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		ExpandEnvironmentStringsA
KERNEL32.DLL		FileTimeToLocalFileTime
KERNEL32.DLL		FileTimeToSystemTime
KERNEL32.DLL		FindClose
KERNEL32.DLL		FindFirstFileA
KERNEL32.DLL		FindFirstFileW
KERNEL32.DLL		FindNextFileA
KERNEL32.DLL		FindNextFileW
KERNEL32.DLL		FindResourceA
KERNEL32.DLL		FreeLibrary
KERNEL32.DLL		GetCPInfo
KERNEL32.DLL		GetCommandLineA
KERNEL32.DLL		GetCurrentDirectoryA
KERNEL32.DLL		GetCurrentProcess
KERNEL32.DLL		GetDateFormatA
KERNEL32.DLL		GetFileAttributesA
KERNEL32.DLL		GetFileAttributesW
KERNEL32.DLL		GetFileType
KERNEL32.DLL		GetFullPathNameA
KERNEL32.DLL		GetLastError
KERNEL32.DLL		GetLocaleInfoA
KERNEL32.DLL		GetModuleFileNameA
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetNumberFormatA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		GetProcessHeap
KERNEL32.DLL		GetStdHandle
KERNEL32.DLL		GetTempPathA
KERNEL32.DLL		GetTickCount
KERNEL32.DLL		GetTimeFormatA
KERNEL32.DLL		GetVersionExA
KERNEL32.DLL		GlobalAlloc
KERNEL32.DLL		HeapAlloc
KERNEL32.DLL		HeapFree
KERNEL32.DLL		HeapReAlloc
KERNEL32.DLL		IsDBCSLeadByte
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		LocalFileTimeToFileTime
KERNEL32.DLL		MoveFileA
KERNEL32.DLL		MoveFileExA
KERNEL32.DLL		MultiByteToWideChar
KERNEL32.DLL		ReadFile
KERNEL32.DLL		SetCurrentDirectoryA
KERNEL32.DLL		SetEndOfFile
KERNEL32.DLL		SetEnvironmentVariableA
KERNEL32.DLL		SetFileAttributesA
KERNEL32.DLL		SetFileAttributesW
KERNEL32.DLL		SetFilePointer
KERNEL32.DLL		SetFileTime
KERNEL32.DLL		SetLastError
KERNEL32.DLL		Sleep
KERNEL32.DLL		SystemTimeToFileTime
KERNEL32.DLL		WaitForSingleObject
KERNEL32.DLL		WideCharToMultiByte
KERNEL32.DLL		WriteFile
KERNEL32.DLL		lstrcmpiA
KERNEL32.DLL		lstrlenA
COMCTL32.DLL	17
COMDLG32.DLL		CommDlgExtendedError
COMDLG32.DLL		GetOpenFileNameA
COMDLG32.DLL		GetSaveFileNameA
GDI32.DLL		DeleteObject
SHELL32.DLL		SHBrowseForFolderA
SHELL32.DLL		SHChangeNotify
SHELL32.DLL		SHFileOperationA
SHELL32.DLL		SHGetFileInfoA
SHELL32.DLL		SHGetMalloc
SHELL32.DLL		SHGetSpecialFolderLocation
SHELL32.DLL		ShellExecuteExA
SHELL32.DLL		SHGetPathFromIDListA
USER32.DLL		CharToOemA
USER32.DLL		CharToOemBuffA
USER32.DLL		CharUpperA
USER32.DLL		CopyRect
USER32.DLL		CreateWindowExA
USER32.DLL		DefWindowProcA
USER32.DLL		DestroyIcon
USER32.DLL		DestroyWindow
USER32.DLL		DialogBoxParamA
USER32.DLL		DispatchMessageA
USER32.DLL		EnableWindow
USER32.DLL		EndDialog
USER32.DLL		FindWindowExA
USER32.DLL		GetClassNameA
USER32.DLL		GetClientRect
USER32.DLL		GetDlgItem
USER32.DLL		GetDlgItemTextA
USER32.DLL		GetMessageA
USER32.DLL		GetParent
USER32.DLL		GetSysColor
USER32.DLL		GetSystemMetrics
USER32.DLL		GetWindow
USER32.DLL		GetWindowLongA
USER32.DLL		GetWindowRect
USER32.DLL		GetWindowTextA
USER32.DLL		IsWindow
USER32.DLL		IsWindowVisible
USER32.DLL		LoadBitmapA
USER32.DLL		LoadCursorA
USER32.DLL		LoadIconA
USER32.DLL		LoadStringA
USER32.DLL		MapWindowPoints
USER32.DLL		MessageBoxA
USER32.DLL		OemToCharA
USER32.DLL		OemToCharBuffA
USER32.DLL		PeekMessageA
USER32.DLL		PostMessageA
USER32.DLL		RegisterClassExA
USER32.DLL		SendDlgItemMessageA
USER32.DLL		SendMessageA
USER32.DLL		SetDlgItemTextA
USER32.DLL		SetFocus
USER32.DLL		SetMenu
USER32.DLL		SetWindowLongA
USER32.DLL		SetWindowPos
USER32.DLL		SetWindowTextA
USER32.DLL		ShowWindow
USER32.DLL		TranslateMessage
USER32.DLL		UpdateWindow
USER32.DLL		WaitForInputIdle
USER32.DLL		wsprintfA
USER32.DLL		wvsprintfA
OLE32.DLL		CLSIDFromString
OLE32.DLL		CoCreateInstance
OLE32.DLL		CreateStreamOnHGlobal
OLE32.DLL		OleInitialize
OLE32.DLL		OleUninitialize

show previews

offset	size	type	comment
0	265216	EXE	05/05/2007 05:40:22	#
15c1	15	HTM		#
40c00	10124488	RAR		#

Scanning the drive for archives:
1 file, 10389704 bytes (10147 KiB)


--
Type = Rar
Offset = 265216
Physical Size = 10124488
Solid = -
Blocks = 81
Multivolume = -
Volumes = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2009-08-02 22:32:54 ....A      2822144       998648  CASIO 570MS.rsm
2004-08-04 08:07:00 .R..A      1712128       767820  gdiplus.dll
2009-08-02 22:42:52 ....A        23614         1851  mdeploy.registry
2005-09-23 07:28:52 ....A       270848       124958  mscoree.dll
2006-12-01 22:54:32 ....A       479232        97421  msvcm80.dll
2006-12-01 22:54:34 ....A       548864        99934  msvcp80.dll
2006-12-01 22:54:32 ....A       626688       240684  MSVCR80.dll
2001-11-21 13:13:36 ....A         6178         1136  ndphlpr.vxd
2007-01-22 14:28:12 ....A       172032        63809  rsdeploy.dll
2009-08-02 22:42:52 ....A       110592        14098  ViewLog.exe
2009-07-23 23:39:46 ....A       278528        47434  ViewLog.rsm
2009-04-02 22:59:22 ....A        68608        24366  v2.0.50727/assembly/GAC_32/CustomMarshalers/2.0.0.0__B03F5F7F11D50A3A/CustomMarshalers.dll
2009-08-02 22:42:44 ....A          427          276  v2.0.50727/assembly/GAC_32/CustomMarshalers/2.0.0.0__B03F5F7F11D50A3A/Microsoft.VC80.CRT.manifest
2009-04-02 22:59:20 ....A        10752         4334  v2.0.50727/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
2009-04-02 23:00:14 ....A         5632         2029  v2.0.50727/assembly/GAC_MSIL/Microsoft.VisualC/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualC.dll
2009-04-02 23:00:04 ....A      3018752       855935  v2.0.50727/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
2009-04-02 23:00:02 ....A       389120       121932  v2.0.50727/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
2009-04-02 22:59:58 ....A       716800       230937  v2.0.50727/assembly/GAC_MSIL/System.Data.SqlXml/2.0.0.0__b77a5c561934e089/System.Data.SqlXml.dll
2009-04-02 22:59:14 ....A       884736       197143  v2.0.50727/assembly/GAC_MSIL/System.Deployment/2.0.0.0__b03f5f7f11d50a3a/System.Deployment.dll
2009-04-02 23:00:06 ....A       700416       167617  v2.0.50727/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
2009-04-02 23:00:00 ....A       131072        43152  v2.0.50727/assembly/GAC_MSIL/System.Runtime.Serialization.Formatters.Soap/2.0.0.0__b03f5f7f11d50a3a/System.Runtime.Serialization.Formatters.Soap.dll
2009-04-02 22:59:20 ....A       258048        79876  v2.0.50727/assembly/GAC_MSIL/System.Security/2.0.0.0__b03f5f7f11d50a3a/System.Security.dll
2009-08-02 22:42:44 ....A          427          276  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/Microsoft.VC80.CRT.manifest
2009-04-02 22:59:34 ....A      5316608      1351520  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
2009-04-02 22:59:36 ....A      2035712       557276  v2.0.50727/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
2005-09-23 07:28:56 ....A        66728        18108  v2.0.50727/big5.nlp
2005-09-23 07:28:56 ....A        82172        39490  v2.0.50727/bopomofo.nlp
2005-09-23 07:28:48 ....A        19852         2238  v2.0.50727/CONFIG/machine.config
2005-09-23 07:28:58 ....A        17920         7658  v2.0.50727/Culture.dll
2009-08-02 22:42:52 ....A           52           52  v2.0.50727/fusion.localgac
2005-09-23 07:28:56 ....A       116756        18551  v2.0.50727/ksc.nlp
2009-08-02 22:42:44 ....A          427          276  v2.0.50727/Microsoft.VC80.CRT.manifest
2005-09-23 07:28:56 ....A       326144       185467  v2.0.50727/mscorjit.dll
2005-09-23 07:28:56 ....A      4308992      1233917  v2.0.50727/mscorlib.dll
2005-09-23 07:28:56 ....A       102400        46794  v2.0.50727/mscorpe.dll
2005-09-23 07:29:00 ....A       330752        39068  v2.0.50727/mscorrc.dll
2005-09-23 07:28:56 ....A        67072        30852  v2.0.50727/mscorsec.dll
2005-09-23 07:28:50 ....A         9216         3709  v2.0.50727/mscorsn.dll
2005-09-23 07:28:50 ....A      5615616      2151805  v2.0.50727/mscorwks.dll
2005-09-23 07:28:56 ....A        59342        29273  v2.0.50727/normidna.nlp
2005-09-23 07:28:56 ....A        42918        16102  v2.0.50727/normnfc.nlp
2005-09-23 07:28:56 ....A        36644        11432  v2.0.50727/normnfd.nlp
2005-09-23 07:28:56 ....A        63176        32172  v2.0.50727/normnfkc.nlp
2005-09-23 07:28:56 ....A        57150        27254  v2.0.50727/normnfkd.nlp
2005-09-23 07:28:56 ....A        78336        34046  v2.0.50727/perfcounter.dll
2005-09-23 07:28:56 ....A        83748        10309  v2.0.50727/prc.nlp
2005-09-23 07:28:56 ....A        83748        40110  v2.0.50727/prcp.nlp
2005-09-23 07:28:56 ....A       262148        10319  v2.0.50727/sortkey.nlp
2005-09-23 07:28:56 ....A        20320         6425  v2.0.50727/sorttbls.nlp
2005-09-23 07:28:56 ....A        28288        10821  v2.0.50727/xjis.nlp
2005-09-23 07:28:56 ....A          474          272  v2.0.50727/XPThemes.manifest
2009-08-02 22:42:48 ....A       106496        16978  CASIO 570MS.exe
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_32/CustomMarshalers/2.0.0.0__B03F5F7F11D50A3A
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Microsoft.VisualC/8.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Data.SqlXml/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Deployment/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Runtime.Serialization.Formatters.Soap/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Security/2.0.0.0__b03f5f7f11d50a3a
2009-07-23 23:51:27 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:27 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_32/CustomMarshalers
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Accessibility
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL/Microsoft.VisualC
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Configuration
2009-07-23 23:51:29 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Data.SqlXml
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Deployment
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Drawing
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Runtime.Serialization.Formatters.Soap
2009-07-23 23:51:28 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Security
2009-07-23 23:51:27 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Windows.Forms
2009-07-23 23:51:26 D....            0            0  v2.0.50727/assembly/GAC_MSIL/System.Xml
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_32
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly/GAC_MSIL
2009-07-23 23:51:30 D....            0            0  v2.0.50727/assembly
2009-07-23 23:51:26 D....            0            0  v2.0.50727/CONFIG
2009-07-23 23:51:26 D....            0            0  v2.0.50727
------------------- ----- ------------ ------------  ------------------------
2009-08-02 22:42:52           32574845     10117960  52 files, 29 folders

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK