openEMS.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	openEMS.exe
size	16896 (0x4200)
md5	420c54020cd4f22f5e215754d1c6e404

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
147	30729	10
261	30034	24
260	30034	10
259	30034	3
257	30034	6
257	27412	2
257	30147	3
1	0	80
261	30147	1
258	30147	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x65353a3e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.29
SizeOfCode	0x1800
SizeOfInitializedData	0x2600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1aac
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x9000
SizeOfHeaders	0x400
CheckSum	0x4e6c
Subsystem	3
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1664	0x1800	R-X CODE
.rdata	0x3000	0x1b08	0x1c00	R-- IDATA
.data	0x5000	0x6e8	0x200	RW- IDATA
.pdata	0x6000	0x270	0x400	R-- IDATA
.rsrc	0x7000	0x1b4	0x200	R-- IDATA
.reloc	0x8000	0x54	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3e04	0xdc
RESOURCE	0x7000	0x1b4
EXCEPTION	0x6000	0x270
SECURITY	0	0
BASERELOC	0x8000	0x54
DEBUG	0x3450	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x3470	0x138
Bound_IAT	0	0
IAT	0x3000	0x2a8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MANIFEST	#1	346	1252

module_name	hint	function_name
openEMS.dll	3	public: virtual __cdecl openEMS::~openEMS(void) __ptr64 ??1openEMS@@UEAA@XZ
openEMS.dll	62	class Global g_settings ?g_settings@@3VGlobal@@A
openEMS.dll	63	public: bool __cdecl Global::parseCommandLineArgument(char const * __ptr64) __ptr64 ?parseCommandLineArgument@Global@@QEAA_NPEBD@Z
openEMS.dll	61	public: static void __cdecl openEMS::WelcomeScreen(void) ?WelcomeScreen@openEMS@@SAXXZ
openEMS.dll	28	public: virtual void __cdecl openEMS::RunFDTD(void) __ptr64 ?RunFDTD@openEMS@@UEAAXXZ
openEMS.dll	56	public: virtual int __cdecl openEMS::SetupFDTD(void) __ptr64 ?SetupFDTD@openEMS@@UEAAHXZ
openEMS.dll	24	public: bool __cdecl openEMS::ParseFDTDSetup(class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> >) __ptr64 ?ParseFDTDSetup@openEMS@@QEAA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
openEMS.dll	66	public: static void __cdecl openEMS::showUsage(void) ?showUsage@openEMS@@SAXXZ
openEMS.dll	64	public: virtual bool __cdecl openEMS::parseCommandLineArgument(char const * __ptr64) __ptr64 ?parseCommandLineArgument@openEMS@@UEAA_NPEBD@Z
openEMS.dll	2	public: __cdecl openEMS::openEMS(void) __ptr64 ??0openEMS@@QEAA@XZ
MSVCP140.dll	580	public: void __cdecl std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) __ptr64 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP140.dll	262	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64)) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
MSVCP140.dll	1121	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::put(char) __ptr64 ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
MSVCP140.dll	872	public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
MSVCP140.dll	692	class std::basic_ostream<char, struct std::char_traits<char> > std::cout ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
MSVCP140.dll	674	class std::basic_ostream<char, struct std::char_traits<char> > std::cerr ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
MSVCP140.dll	1249	public: __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const * __ptr64, __int64) __ptr64 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
MSVCP140.dll	1246	public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
MSVCP140.dll	1310	bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP140.dll	654	void __cdecl std::_Xlength_error(char const * __ptr64) ?_Xlength_error@std@@YAXPEBD@Z
MSVCP140.dll	1332	public: char __cdecl std::basic_ios<char, struct std::char_traits<char> >::widen(char)const __ptr64 ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
MSVCP140.dll	1221	public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) __ptr64 ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
VCRUNTIME140.dll	60	memcpy
VCRUNTIME140.dll	8	__C_specific_handler
VCRUNTIME140.dll	27	__current_exception
VCRUNTIME140.dll	28	__current_exception_context
VCRUNTIME140.dll	62	memset
VCRUNTIME140.dll	61	memmove
VCRUNTIME140.dll	1	_CxxThrowException
VCRUNTIME140.dll	34	__std_exception_destroy
VCRUNTIME140.dll	33	__std_exception_copy
VCRUNTIME140.dll	35	__std_terminate
VCRUNTIME140_1.dll		__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0.dll	5	__p___argv
api-ms-win-crt-runtime-l1-1-0.dll	22	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	21	_c_exit
api-ms-win-crt-runtime-l1-1-0.dll	61	_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll	64	_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll	35	_exit
api-ms-win-crt-runtime-l1-1-0.dll	55	_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll	54	_initterm
api-ms-win-crt-runtime-l1-1-0.dll	52	_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	60	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	30	_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	103	terminate
api-ms-win-crt-runtime-l1-1-0.dll	40	_get_initial_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll	66	_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll	4	__p___argc
api-ms-win-crt-runtime-l1-1-0.dll	85	exit
api-ms-win-crt-runtime-l1-1-0.dll	24	_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll	57	_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll	51	_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0.dll	22	_set_new_mode
api-ms-win-crt-heap-l1-1-0.dll	24	free
api-ms-win-crt-heap-l1-1-0.dll	8	_callnewh
api-ms-win-crt-heap-l1-1-0.dll	25	malloc
api-ms-win-crt-math-l1-1-0.dll	9	__setusermatherr
api-ms-win-crt-stdio-l1-1-0.dll	1	__p__commode
api-ms-win-crt-stdio-l1-1-0.dll	84	_set_fmode
api-ms-win-crt-locale-l1-1-0.dll	8	_configthreadlocale
KERNEL32.dll	1244	RtlLookupFunctionEntry
KERNEL32.dll	641	GetModuleHandleW
KERNEL32.dll	901	IsDebuggerPresent
KERNEL32.dll	879	InitializeSListHead
KERNEL32.dll	755	GetSystemTimeAsFileTime
KERNEL32.dll	549	GetCurrentThreadId
KERNEL32.dll	545	GetCurrentProcessId
KERNEL32.dll	1106	QueryPerformanceCounter
KERNEL32.dll	908	IsProcessorFeaturePresent
KERNEL32.dll	1438	TerminateProcess
KERNEL32.dll	1237	RtlCaptureContext
KERNEL32.dll	1251	RtlVirtualUnwind
KERNEL32.dll	1472	UnhandledExceptionFilter
KERNEL32.dll	1407	SetUnhandledExceptionFilter
KERNEL32.dll	544	GetCurrentProcess

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	11312	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK