filenamezopflipng-x86.exe
size295936 (0x48400)
md58afa5cb0123ad9245bf76c37848c613c
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072914
259337313
2603373112
2613373127
257337315
257331362
1091
260338119
261338114
255338111
258338111

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x6680a1bc
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion14.40
SizeOfCode0x3ae00
SizeOfInitializedData0xd600
SizeOfUninitializedData0
AddressOfEntryPoint0x1069
BaseOfCode0x1000
BaseOfData0x3c000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x4d000
SizeOfHeaders0x400
CheckSum0
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x3acd30x3ae00R-X CODE
.rdata0x3c0000x947c0x9600R-- IDATA
.data0x460000xd9c0xa00RW- IDATA
.idata0x470000x14590x1600R-- IDATA
.00cfg0x490000x10e0x200R-- IDATA
.rsrc0x4a0000x4590x600R-- IDATA
.reloc0x4b0000x12190x1400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x473600xdc
RESOURCE0x4a0000x459
EXCEPTION00
SECURITY00
BASERELOC0x4b0000xf18
DEBUG0x438d80x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x437f00x40
Bound_IAT00
IAT0x470000x360
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#14060
module_namehintordfunction_name
MSVCP140.dll580public: void __thiscall std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void)

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

MSVCP140.dll262public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > &))

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

MSVCP140.dll1332public: char __thiscall std::basic_ios<char, struct std::char_traits<char> >::widen(char)const

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

MSVCP140.dll1121public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::put(char)

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z

MSVCP140.dll872public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::flush(void)

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

MSVCP140.dll692class std::basic_ostream<char, struct std::char_traits<char> > std::cout

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

MSVCP140.dll865public: char __thiscall std::basic_ios<char, struct std::char_traits<char> >::fill(void)const

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ

MSVCP140.dll1159public: class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::rdbuf(void)const

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

MSVCP140.dll1290public: class std::basic_ostream<char, struct std::char_traits<char> > * __thiscall std::basic_ios<char, struct std::char_traits<char> >::tie(void)const

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

MSVCP140.dll1221public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool)

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

MSVCP140.dll1249public: __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const *, __int64)

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

MSVCP140.dll1246public: int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char)

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

MSVCP140.dll1341public: __int64 __thiscall std::ios_base::width(__int64)

?width@ios_base@std@@QAE_J_J@Z

MSVCP140.dll1342public: __int64 __thiscall std::ios_base::width(void)const

?width@ios_base@std@@QBE_JXZ

MSVCP140.dll871public: int __thiscall std::ios_base::flags(void)const

?flags@ios_base@std@@QBEHXZ

MSVCP140.dll965public: bool __thiscall std::ios_base::good(void)const

?good@ios_base@std@@QBE_NXZ

MSVCP140.dll1310bool __cdecl std::uncaught_exception(void)

?uncaught_exception@std@@YA_NXZ

MSVCP140.dll655void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP140.dll255public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int)

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z

MSVCP140.dll654void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

VCRUNTIME140.dll72memset
VCRUNTIME140.dll37__std_type_info_destroy_list
VCRUNTIME140.dll33__std_exception_copy
VCRUNTIME140.dll34__std_exception_destroy
VCRUNTIME140.dll1_CxxThrowException
VCRUNTIME140.dll16__CxxFrameHandler3
VCRUNTIME140.dll68memchr
VCRUNTIME140.dll70memcpy
VCRUNTIME140.dll71memmove
VCRUNTIME140.dll29__current_exception_context
VCRUNTIME140.dll53_except_handler4_common
VCRUNTIME140.dll28__current_exception
VCRUNTIME140.dll35__std_terminate
api-ms-win-crt-runtime-l1-1-0.dll5__p___argc
api-ms-win-crt-runtime-l1-1-0.dll6__p___argv
api-ms-win-crt-runtime-l1-1-0.dll23_cexit
api-ms-win-crt-runtime-l1-1-0.dll22_c_exit
api-ms-win-crt-runtime-l1-1-0.dll37_exit
api-ms-win-crt-runtime-l1-1-0.dll57_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll56_initterm
api-ms-win-crt-runtime-l1-1-0.dll59_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll42_get_initial_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll106terminate
api-ms-win-crt-runtime-l1-1-0.dll65_seh_filter_dll
api-ms-win-crt-runtime-l1-1-0.dll54_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll62_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll36_execute_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll31_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll30_crt_at_quick_exit
api-ms-win-crt-runtime-l1-1-0.dll29_controlfp_s
api-ms-win-crt-runtime-l1-1-0.dll88exit
api-ms-win-crt-runtime-l1-1-0.dll63_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll66_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll25_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll53_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll68_set_app_type
api-ms-win-crt-convert-l1-1-0.dll80atoi
api-ms-win-crt-stdio-l1-1-0.dll__acrt_iob_func
api-ms-win-crt-stdio-l1-1-0.dll1__p__commode
api-ms-win-crt-stdio-l1-1-0.dll140getchar
api-ms-win-crt-stdio-l1-1-0.dll138fwrite
api-ms-win-crt-stdio-l1-1-0.dll131fread
api-ms-win-crt-stdio-l1-1-0.dll3__stdio_common_vfprintf
api-ms-win-crt-stdio-l1-1-0.dll84_set_fmode
api-ms-win-crt-stdio-l1-1-0.dll137ftell
api-ms-win-crt-stdio-l1-1-0.dll135fseek
api-ms-win-crt-stdio-l1-1-0.dll125fopen
api-ms-win-crt-stdio-l1-1-0.dll116fclose
api-ms-win-crt-heap-l1-1-0.dll8_callnewh
api-ms-win-crt-heap-l1-1-0.dll25malloc
api-ms-win-crt-heap-l1-1-0.dll22_set_new_mode
api-ms-win-crt-heap-l1-1-0.dll26realloc
api-ms-win-crt-heap-l1-1-0.dll24free
api-ms-win-crt-math-l1-1-0.dll46__setusermatherr
api-ms-win-crt-math-l1-1-0.dll64_except1
api-ms-win-crt-math-l1-1-0.dll104_libm_sse2_log_precise
api-ms-win-crt-utility-l1-1-0.dll25qsort
api-ms-win-crt-locale-l1-1-0.dll8_configthreadlocale
KERNEL32.dll943IsProcessorFeaturePresent
KERNEL32.dll1506UnhandledExceptionFilter
KERNEL32.dll1440SetUnhandledExceptionFilter
KERNEL32.dll565GetCurrentProcess
KERNEL32.dll1472TerminateProcess
KERNEL32.dll1144QueryPerformanceCounter
KERNEL32.dll566GetCurrentProcessId
KERNEL32.dll570GetCurrentThreadId
KERNEL32.dll781GetSystemTimeAsFileTime
KERNEL32.dll907InitializeSListHead
KERNEL32.dll935IsDebuggerPresent
KERNEL32.dll756GetStartupInfoW
KERNEL32.dll665GetModuleHandleW
offsetsizetypecomment
0295936EXE06/30/2024 00:07:24#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK