filenameNonEuclidean.exe
size643584 (0x9d200)
md59d50971500cd45add421e93d5fac1d64
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
2602461021
2592461018
26124610162
259241238
2612412357
2602412336
224406291
257246109
10158
2652421520
255242101
258242151

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections8
TimeDateStamp0x5b7237f3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.0
SizeOfCode0x5ea00
SizeOfInitializedData0x45c00
SizeOfUninitializedData0
AddressOfEntryPoint0x39da4
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0xaa000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x5e9580x5ea00R-X CODE
.rdata0x600000x335f60x33600R-- IDATA
.data0x940000xb8640x4200RW- IDATA
.pdata0xa00000x46200x4800R-- IDATA
.gfids0xa50000x2240x400R-- IDATA
.tls0xa600090x200RW- IDATA
.rsrc0xa70000x1e00x200R-- IDATA
.reloc0xa80000x1a9c0x1c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x9275c0x64
RESOURCE0xa70000x1e0
EXCEPTION0xa00000x4620
SECURITY00
BASERELOC0xa80000x1a9c
DEBUG0x8a8000x70
ARCHITECTURE00
GLOBALPTR00
TLS0x8a9080x28
LOAD_CONFIG0x8a8700x94
Bound_IAT00
IAT0x600000x470
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1400a60000x1400a60080x14009e8940x14006051800x300000
typenamesizecp
MANIFEST#13810
module_namehintordfunction_name
OPENGL32.dll355wglGetProcAddress
OPENGL32.dll351wglGetCurrentDC
OPENGL32.dll124glGetString
OPENGL32.dll111glGetIntegerv
OPENGL32.dll67glDepthFunc
OPENGL32.dll16glClear
OPENGL32.dll79glEnable
OPENGL32.dll63glCullFace
OPENGL32.dll68glDepthMask
OPENGL32.dll55glColorMask
OPENGL32.dll345wglCreateContext
OPENGL32.dll18glClearColor
OPENGL32.dll347wglDeleteContext
OPENGL32.dll356wglMakeCurrent
OPENGL32.dll11glBindTexture
OPENGL32.dll105glGenTextures
OPENGL32.dll311glTexParameteri
OPENGL32.dll308glTexImage2D
OPENGL32.dll72glDrawArrays
OPENGL32.dll342glViewport
KERNEL32.dll428FreeEnvironmentStringsW
KERNEL32.dll568GetEnvironmentStringsW
KERNEL32.dll473GetCommandLineW
KERNEL32.dll472GetCommandLineA
KERNEL32.dll663GetOEMCP
KERNEL32.dll901IsValidCodePage
KERNEL32.dll396FindNextFileA
KERNEL32.dll380FindFirstFileExA
KERNEL32.dll375FindClose
KERNEL32.dll692GetProcessHeap
KERNEL32.dll1314SetFilePointerEx
KERNEL32.dll628GetModuleHandleA
KERNEL32.dll1092QueryPerformanceFrequency
KERNEL32.dll1091QueryPerformanceCounter
KERNEL32.dll1129ReadFile
KERNEL32.dll341EnumSystemLocalesW
KERNEL32.dll787GetUserDefaultLCID
KERNEL32.dll903IsValidLocale
KERNEL32.dll1352SetStdHandle
KERNEL32.dll510GetConsoleMode
KERNEL32.dll492GetConsoleCP
KERNEL32.dll417FlushFileBuffers
KERNEL32.dll1039OutputDebugStringW
KERNEL32.dll436GetACP
KERNEL32.dll1556WriteFile
KERNEL32.dll352ExitProcess
KERNEL32.dll842HeapFree
KERNEL32.dll845HeapReAlloc
KERNEL32.dll838HeapAlloc
KERNEL32.dll1555WriteConsoleW
KERNEL32.dll630GetModuleHandleExW
KERNEL32.dll627GetModuleFileNameW
KERNEL32.dll626GetModuleFileNameA
KERNEL32.dll591GetFileType
KERNEL32.dll722GetStdHandle
KERNEL32.dll955LoadLibraryExW
KERNEL32.dll429FreeLibrary
KERNEL32.dll608GetLastError
KERNEL32.dll1233RtlUnwindEx
KERNEL32.dll1113RaiseException
KERNEL32.dll1127ReadConsoleW
KERNEL32.dll201CreateFileW
KERNEL32.dll847HeapSize
KERNEL32.dll1437TlsFree
KERNEL32.dll1229RtlPcToFileHeader
KERNEL32.dll867InitializeSListHead
KERNEL32.dll542GetCurrentThreadId
KERNEL32.dll538GetCurrentProcessId
KERNEL32.dll1536WideCharToMultiByte
KERNEL32.dll306EnterCriticalSection
KERNEL32.dll949LeaveCriticalSection
KERNEL32.dll270DeleteCriticalSection
KERNEL32.dll302EncodePointer
KERNEL32.dll263DecodePointer
KERNEL32.dll997MultiByteToWideChar
KERNEL32.dll1328SetLastError
KERNEL32.dll863InitializeCriticalSectionAndSpinCount
KERNEL32.dll189CreateEventW
KERNEL32.dll1436TlsAlloc
KERNEL32.dll1438TlsGetValue
KERNEL32.dll1439TlsSetValue
KERNEL32.dll1295SetEndOfFile
KERNEL32.dll745GetSystemTimeAsFileTime
KERNEL32.dll631GetModuleHandleW
KERNEL32.dll686GetProcAddress
KERNEL32.dll937LCMapStringW
KERNEL32.dll612GetLocaleInfoW
KERNEL32.dll727GetStringTypeW
KERNEL32.dll451GetCPInfo
KERNEL32.dll133CloseHandle
KERNEL32.dll1301SetEvent
KERNEL32.dll1212ResetEvent
KERNEL32.dll1495WaitForSingleObjectEx
KERNEL32.dll1220RtlCaptureContext
KERNEL32.dll1227RtlLookupFunctionEntry
KERNEL32.dll1234RtlVirtualUnwind
KERNEL32.dll1452UnhandledExceptionFilter
KERNEL32.dll1388SetUnhandledExceptionFilter
KERNEL32.dll537GetCurrentProcess
KERNEL32.dll1418TerminateProcess
KERNEL32.dll896IsProcessorFeaturePresent
KERNEL32.dll889IsDebuggerPresent
KERNEL32.dll720GetStartupInfoW
USER32.dll677PostQuitMessage
USER32.dll828SetProcessDPIAware
USER32.dll864SetWindowLongPtrA
USER32.dll471GetWindowLongPtrA
USER32.dll635MessageBoxExA
USER32.dll807SetForegroundWindow
USER32.dll880ShowCursor
USER32.dll794SetCursorPos
USER32.dll750ReleaseDC
USER32.dll16BeginPaint
USER32.dll239EndPaint
USER32.dll671PeekMessageA
USER32.dll580LoadIconA
USER32.dll76ClipCursor
USER32.dll917TranslateMessage
USER32.dll737RegisterRawInputDevices
USER32.dll806SetFocus
USER32.dll114CreateWindowExA
USER32.dll163DefWindowProcA
USER32.dll424GetRawInputData
USER32.dll863SetWindowLongA
USER32.dll885ShowWindow
USER32.dll441GetSystemMetrics
USER32.dll675PostMessageA
USER32.dll868SetWindowPos
USER32.dll317GetDC
USER32.dll177DestroyWindow
USER32.dll576LoadCursorA
USER32.dll479GetWindowRect
USER32.dll184DispatchMessageA
USER32.dll719RegisterClassExA
GDI32.dll25ChoosePixelFormat
GDI32.dll886SwapBuffers
GDI32.dll859SetPixelFormat
GDI32.dll346DescribePixelFormat
offsetsizetypecomment
15c115HTM#
15d0638000BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x9e894