filenamecalc.exe
size798720 (0xc3000)
md5c1902a14d15064279b8f440322262109
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
2076550147
205655019
10382
2036550131
2066550125
2116550195
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x521585a3
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x5ae00
SizeOfInitializedData0x67e00
SizeOfUninitializedData0
AddressOfEntryPoint0x1b8d4
BaseOfCode0x1000
BaseOfData0x59000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion6.3
Reserved10
SizeOfImage0xc7000
SizeOfHeaders0x400
CheckSum0xcc37f
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x5ade90x5ae00R-X CODE
.data0x5c0000x417c0x4200RW- IDATA
.idata0x610000x24620x2600R-- IDATA
.rsrc0x640000x5d1280x5d200R-- IDATA
.reloc0xc20000x42380x4400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x615c80x140
RESOURCE0x640000x5d128
EXCEPTION00
SECURITY00
BASERELOC0xc20000x4238
DEBUG0x5bd8c0x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x47180x5c
Bound_IAT00
IAT0x610000x5c8
Delay_IAT0x5bd080x40
CLR_Header00
typenamesizecp
IMAGE#15746570
IMAGE#16540690
IMAGE#17042150
IMAGE#17546560
IMAGE#18049180
IMAGE#20429950
IMAGE#20830400
IMAGE#21232560
IMAGE#21633800
IMAGE#21737490
IMAGE#21837740
IMAGE#300044270
IMAGE#301541260
IMAGE#304547060
IMAGE#305149550
IMAGE#306041890
IMAGE#310230970
IMAGE#310330230
IMAGE#310429650
IMAGE#310529210
IMAGE#310634960
IMAGE#310736530
IMAGE#310838270
IMAGE#320154540
IMAGE#320243720
IMAGE#320331050
IMAGE#320445610
IMAGE#320531210
IMAGE#320648770
IMAGE#320733960
IMAGE#320852010
IMAGE#320937920
IMAGE#321039690
IMAGE#321140030
IMAGE#321448560
IMAGE#321555920
IMAGE#321645290
IMAGE#321755120
IMAGE#321845950
IMAGE#322032320
IMAGE#322130560
IMAGE#322230120
IMAGE#322338710
IMAGE#322441170
IMAGE#322542460
IMAGE#322829570
IMAGE#330168550
IMAGE#330245230
IMAGE#330331280
IMAGE#330447180
IMAGE#330532220
IMAGE#330651590
IMAGE#330735780
IMAGE#330855600
IMAGE#330938300
IMAGE#331041640
IMAGE#331142040
IMAGE#331451780
IMAGE#331562090
IMAGE#331649320
IMAGE#331765950
IMAGE#331849810
IMAGE#332033490
IMAGE#332131680
IMAGE#332230660
IMAGE#332342430
IMAGE#332445860
IMAGE#332547660
IMAGE#332829930
MUI#12720
WEVT_TEMPLATE#147500
ICON#126640
ICON#216400
ICON#37440
ICON#44880
ICON#52960
ICON#656720
ICON#737520
ICON#822160
ICON#917360
ICON#1013840
ICON#11275690
ICON#12169360
ICON#1396400
ICON#1442640
ICON#1524400
ICON#1611280
GROUP_ICON#2342300
VERSION#19000
MANIFEST#111670
module_namehintordfunction_name
SHELL32.dll165
SHELL32.dll303ShellAboutW
SHELL32.dll244SHGetSpecialFolderPathW
SHLWAPI.dll225
gdiplus.dll122GdipCreatePen1
gdiplus.dll148GdipDeletePen
gdiplus.dll289GdipGetImageGraphicsContext
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll585GdipSetSmoothingMode
gdiplus.dll548GdipSetPageUnit
gdiplus.dll188GdipDrawLineI
gdiplus.dll155GdipDrawArcI
gdiplus.dll229GdipFillRectangleI
gdiplus.dll152GdipDisposeImage
gdiplus.dll80GdipCreateBitmapFromScan0
gdiplus.dll95GdipCreateHBITMAPFromBitmap
gdiplus.dll91GdipCreateFromHDC
gdiplus.dll184GdipDrawImageRectI
gdiplus.dll77GdipCreateBitmapFromHBITMAP
gdiplus.dll49GdipCloneBitmapAreaI
gdiplus.dll130GdipCreateSolidFill
gdiplus.dll237GdipFree
gdiplus.dll628GdiplusShutdown
gdiplus.dll629GdiplusStartup
gdiplus.dll54GdipCloneImage
gdiplus.dll33GdipAlloc
gdiplus.dll138GdipDeleteBrush
ADVAPI32.dll627RegEnumKeyExW
ADVAPI32.dll645RegOpenKeyExW
ADVAPI32.dll630RegEnumValueW
ADVAPI32.dll634RegGetValueW
ADVAPI32.dll616RegDeleteKeyW
ADVAPI32.dll652RegQueryInfoKeyW
ADVAPI32.dll658RegQueryValueExW
ADVAPI32.dll674RegSetValueExW
ADVAPI32.dll290EventUnregister
ADVAPI32.dll288EventRegister
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll605RegCreateKeyExW
ADVAPI32.dll291EventWrite
OLEAUT32.dll7
OLEAUT32.dll150
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll6
OLEAUT32.dll2
UxTheme.dll73IsThemeActive
ole32.dll127CoUninitialize
ole32.dll79CoInitialize
ole32.dll26CoCreateInstance
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll83ImageList_Create
COMCTL32.dll77ImageList_Add
COMCTL32.dll413
COMCTL32.dll410
COMCTL32.dll380
COMCTL32.dll392
ntdll.dll1512WinSqmAddToStreamEx
ntdll.dll1511WinSqmAddToStream
KERNEL32.dll520GetCurrentProcess
KERNEL32.dll1341SetUnhandledExceptionFilter
KERNEL32.dll1404UnhandledExceptionFilter
KERNEL32.dll1014OutputDebugStringA
KERNEL32.dll700GetStartupInfoA
KERNEL32.dll1540lstrlenA
KERNEL32.dll1371TerminateProcess
KERNEL32.dll611GetModuleHandleA
KERNEL32.dll1066QueryPerformanceCounter
KERNEL32.dll521GetCurrentProcessId
KERNEL32.dll525GetCurrentThreadId
KERNEL32.dll725GetSystemTimeAsFileTime
KERNEL32.dll753GetTickCount
KERNEL32.dll1479WideCharToMultiByte
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll1359SizeofResource
KERNEL32.dll957LockResource
KERNEL32.dll610GetModuleFileNameW
KERNEL32.dll392FindResourceExW
KERNEL32.dll724GetSystemTime
KERNEL32.dll1449WaitForSingleObject
KERNEL32.dll182CreateEventW
KERNEL32.dll232CreateThread
KERNEL32.dll1185ResetEvent
KERNEL32.dll1263SetEvent
KERNEL32.dll127CloseHandle
KERNEL32.dll806GlobalSize
KERNEL32.dll802GlobalLock
KERNEL32.dll809GlobalUnlock
KERNEL32.dll791GlobalAlloc
KERNEL32.dll1533lstrcmpW
KERNEL32.dll976MulDiv
KERNEL32.dll795GlobalFindAtomW
KERNEL32.dll393FindResourceW
KERNEL32.dll592GetLastError
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll593GetLocalTime
KERNEL32.dll531GetDateFormatW
KERNEL32.dll596GetLocaleInfoW
KERNEL32.dll1509WritePrivateProfileStringW
KERNEL32.dll666GetPrivateProfileStringW
KERNEL32.dll1536lstrcmpiW
KERNEL32.dll936LoadLibraryW
KERNEL32.dll669GetProcAddress
KERNEL32.dll595GetLocaleInfoEx
KERNEL32.dll414FreeLibrary
KERNEL32.dll946LocalFree
KERNEL32.dll942LocalAlloc
KERNEL32.dll949LocalReAlloc
KERNEL32.dll695GetProfileStringW
KERNEL32.dll1545lstrlenW
KERNEL32.dll147CompareStringW
KERNEL32.dll1149RegisterApplicationRecoveryCallback
KERNEL32.dll26ApplicationRecoveryInProgress
KERNEL32.dll1360Sleep
KERNEL32.dll25ApplicationRecoveryFinished
KERNEL32.dll1150RegisterApplicationRestart
KERNEL32.dll737GetTempFileNameW
KERNEL32.dll1371SystemTimeToFileTime
KERNEL32.dll143CompareFileTime
KERNEL32.dll565GetFileAttributesW
KERNEL32.dll349FileTimeToSystemTime
KERNEL32.dll194CreateFileW
KERNEL32.dll266DeleteFileW
KERNEL32.dll929LeaveCriticalSection
KERNEL32.dll260DeleteCriticalSection
KERNEL32.dll1287SetLastError
KERNEL32.dll613GetModuleHandleExW
KERNEL32.dll292EnterCriticalSection
KERNEL32.dll838InitializeCriticalSection
KERNEL32.dll1084RaiseException
KERNEL32.dll673GetProcessHeap
KERNEL32.dll823HeapSize
KERNEL32.dll818HeapFree
KERNEL32.dll258DelayLoadFailureHook
KERNEL32.dll1187ResolveDelayLoadedAPI
KERNEL32.dll821HeapReAlloc
KERNEL32.dll814HeapAlloc
KERNEL32.dll939LoadResource
KERNEL32.dll817HeapDestroy
USER32.dll606OpenClipboard
USER32.dll296GetClipboardData
USER32.dll495InvalidateRect
USER32.dll75CloseClipboard
USER32.dll223EmptyClipboard
USER32.dll710SetClipboardData
USER32.dll625PostQuitMessage
USER32.dll161DefWindowProcW
USER32.dll539LoadAcceleratorsW
USER32.dll490InsertMenuItemW
USER32.dll649RegisterClassExW
USER32.dll782SetWindowPlacement
USER32.dll725SetForegroundWindow
USER32.dll371GetMessageW
USER32.dll829TranslateAcceleratorW
USER32.dll368GetMessageExtraInfo
USER32.dll831TranslateMessage
USER32.dll181DispatchMessageW
USER32.dll339GetKeyState
USER32.dll510IsDialogMessageW
USER32.dll291GetClassNameW
USER32.dll308GetDC
USER32.dll677ReleaseDC
USER32.dll426GetSystemMetrics
USER32.dll236EnumChildWindows
USER32.dll214DrawTextW
USER32.dll754SetPropW
USER32.dll815SystemParametersInfoW
USER32.dll67CheckRadioButton
USER32.dll855UpdateWindow
USER32.dll691SendDlgItemMessageW
USER32.dll511IsDlgButtonChecked
USER32.dll595MoveWindow
USER32.dll720SetDlgItemInt
USER32.dll317GetDlgItemInt
USER32.dll261FillRect
USER32.dll376GetNextDlgTabItem
USER32.dll594MonitorFromWindow
USER32.dll373GetMonitorInfoW
USER32.dll605OffsetRect
USER32.dll256EqualRect
USER32.dll593MonitorFromRect
USER32.dll292GetClassWord
USER32.dll238EnumDesktopWindows
USER32.dll243EnumDisplayMonitors
USER32.dll494IntersectRect
USER32.dll87CopyRect
USER32.dll322GetFocus
USER32.dll401GetProcessDefaultLayout
USER32.dll110CreatePopupMenu
USER32.dll825TrackPopupMenu
USER32.dll507IsClipboardFormatAvailable
USER32.dll47CharNextA
USER32.dll530IsWindowEnabled
USER32.dll624PostMessageW
USER32.dll466GetWindowTextW
USER32.dll465GetWindowTextLengthW
USER32.dll228EnableWindow
USER32.dll453GetWindowLongW
USER32.dll781SetWindowLongW
USER32.dll788SetWindowTextW
USER32.dll458GetWindowPlacement
USER32.dll63CheckMenuItem
USER32.dll423GetSysColor
USER32.dll708SetClassLongW
USER32.dll289GetClassLongW
USER32.dll207DrawMenuBar
USER32.dll741SetMenuItemInfoW
USER32.dll10AppendMenuW
USER32.dll560LoadStringW
USER32.dll422GetSubMenu
USER32.dll679RemoveMenu
USER32.dll64CheckMenuRadioItem
USER32.dll724SetFocus
USER32.dll577MapWindowPoints
USER32.dll224EnableMenuItem
USER32.dll378GetParent
USER32.dll353GetMenu
USER32.dll293GetClientRect
USER32.dll113CreateWindowExW
USER32.dll173DestroyWindow
USER32.dll178DialogBoxParamW
USER32.dll231EndDialog
USER32.dll783SetWindowPos
USER32.dll316GetDlgItem
USER32.dll459GetWindowRect
USER32.dll700SendMessageW
USER32.dll581MessageBeep
USER32.dll545LoadCursorW
USER32.dll713SetCursor
USER32.dll549LoadImageW
USER32.dll840UnregisterClassA
USER32.dll102CreateDialogParamW
USER32.dll364GetMenuState
USER32.dll800ShowWindow
RPCRT4.dll513RpcStringFreeW
RPCRT4.dll531UuidToStringW
RPCRT4.dll522UuidCreate
WINMM.dll148timeGetTime
GDI32.dll54CreateDIBSection
GDI32.dll568GetStockObject
GDI32.dll731SetBkColor
GDI32.dll732SetBkMode
GDI32.dll75CreatePatternBrush
GDI32.dll270DeleteObject
GDI32.dll267DeleteDC
GDI32.dll341EqualRgn
GDI32.dll34CombineRgn
GDI32.dll765SetRectRgn
GDI32.dll81CreateRectRgnIndirect
GDI32.dll80CreateRectRgn
GDI32.dll567GetRgnBox
GDI32.dll48CreateCompatibleBitmap
GDI32.dll609LineTo
GDI32.dll623MoveToEx
GDI32.dll346ExtCreatePen
GDI32.dll552GetObjectW
GDI32.dll585GetTextExtentPoint32W
GDI32.dll593GetTextMetricsW
GDI32.dll86CreateSolidBrush
GDI32.dll771SetTextColor
GDI32.dll502GetDeviceCaps
GDI32.dll49CreateCompatibleDC
GDI32.dll65CreateFontIndirectW
GDI32.dll724SelectObject
GDI32.dll588GetTextExtentPointW
msvcrt.dll1365time
msvcrt.dll1198difftime
msvcrt.dll1293memmove
msvcrt.dll1295memset
msvcrt.dll292_callnewh
msvcrt.dll102_CxxThrowException
msvcrt.dll123__CxxFrameHandler3
msvcrt.dll1319setlocale
msvcrt.dll224__pctype_func
msvcrt.dll145___lc_handle_func
msvcrt.dll143___lc_codepage_func
msvcrt.dll146___mb_cur_max_func
msvcrt.dll361_errno
msvcrt.dll194__mb_cur_max
msvcrt.dll155__crtGetStringTypeW
msvcrt.dll157__crtLCMapStringW
msvcrt.dll1255isspace
msvcrt.dll1370tolower
msvcrt.dll1175abort
msvcrt.dll1246isalnum
msvcrt.dll113_XcptFilter
msvcrt.dll203__p__commode
msvcrt.dll275_amsg_exit
msvcrt.dll163__getmainargs
msvcrt.dll228__set_app_type
msvcrt.dll373_exit
msvcrt.dll294_cexit
msvcrt.dll1247isalpha
msvcrt.dll521_ismbblead
msvcrt.dll230__setusermatherr
msvcrt.dll490_initterm
msvcrt.dll249_acmdln
msvcrt.dll17public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll610_lock
msvcrt.dll966_unlock
msvcrt.dll159__dllonexit
msvcrt.dll779_onexit
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll237__uncaught_exception
msvcrt.dll364_except_handler4_common
msvcrt.dll313_controlfp
msvcrt.dll1249isdigit
msvcrt.dll1270isxdigit
msvcrt.dll1371toupper
msvcrt.dll796_purecall
msvcrt.dll1279malloc
msvcrt.dll12public: __thiscall exception::exception(void)

??0exception@@QAE@XZ

msvcrt.dll1294memmove_s
msvcrt.dll9public: __thiscall exception::exception(char const * const &)

??0exception@@QAE@ABQBD@Z

msvcrt.dll16public: virtual __thiscall exception::~exception(void)

??1exception@@UAE@XZ

msvcrt.dll57public: virtual char const * __thiscall exception::what(void)const

?what@exception@@UBEPBDXZ

msvcrt.dll1292memcpy_s
msvcrt.dll11public: __thiscall exception::exception(class exception const &)

??0exception@@QAE@ABV0@@Z

msvcrt.dll1223free
msvcrt.dll1420wcstoul
msvcrt.dll1337strcspn
msvcrt.dll425_ftol2_sse
msvcrt.dll424_ftol2
msvcrt.dll1289memchr
msvcrt.dll919_strtoui64
msvcrt.dll916_strtoi64
msvcrt.dll1055_wcsrev
msvcrt.dll1332strchr
msvcrt.dll1325sprintf_s
msvcrt.dll1163_wtoi64
msvcrt.dll489_i64tow_s
msvcrt.dll1034_wcsdup
msvcrt.dll1274localeconv
msvcrt.dll14public: virtual __thiscall bad_cast::~bad_cast(void)

??1bad_cast@@UAE@XZ

msvcrt.dll5public: __thiscall bad_cast::bad_cast(class bad_cast const &)

??0bad_cast@@QAE@ABV0@@Z

msvcrt.dll1258iswalpha
msvcrt.dll1262iswdigit
msvcrt.dll1045_wcslwr_s
msvcrt.dll1049_wcsnicmp
msvcrt.dll1404wcsncmp
msvcrt.dll585_itow_s
msvcrt.dll1190calloc
msvcrt.dll1394wcschr
msvcrt.dll1039_wcsicmp
msvcrt.dll582_itoa
msvcrt.dll1162_wtoi
msvcrt.dll1006_vsnwprintf
msvcrt.dll1393wcscat_s
msvcrt.dll1398wcscpy_s
msvcrt.dll1417wcstol
msvcrt.dll1287mbstowcs_s
msvcrt.dll208__p__fmode
msvcrt.dll1200exit
msvcrt.dll1291memcpy

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Calculator
FileVersion6.3.9600.16384 (winblue_rtm.130821-1623)
InternalNameCALC
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameCALC.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.3.9600.16384

VS_FIXEDFILEINFO

FileVersion6.3.9600.16384
ProductVersion6.3.9600.16384
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0798720EXE08/22/2013 03:29:39#
15c115HTM#
6936027569PNG(256 x 256)#
786684657PNG(750 x 400)#
798a05454PNG(938 x 500)#
7adf06855PNG(1125 x 600)#
7c8b84069PNG(190 x 50)#
7d8a04372PNG(238 x 63)#
7e9b84523PNG(285 x 75)#
7fb682995PNG(190 x 50)#
807203105PNG(238 x 63)#
813483128PNG(285 x 75)#
81f804215PNG(385 x 50)#
82ff84561PNG(482 x 63)#
841d04718PNG(578 x 75)#
854403040PNG(385 x 50)#
860203121PNG(482 x 63)#
86c583222PNG(578 x 75)#
878f04656PNG(190 x 151)#
88b204877PNG(238 x 188)#
89e305159PNG(285 x 227)#
8b2583256PNG(190 x 151)#
8bf103396PNG(238 x 188)#
8cc583578PNG(285 x 227)#
8da584918PNG(385 x 151)#
8ed905201PNG(482 x 188)#
901e85560PNG(578 x 227)#
917a03380PNG(385 x 151)#
924d83792PNG(482 x 188)#
933a83830PNG(578 x 227)#
942a03749PNG(68 x 16)#
951483969PNG(88 x 21)#
960d04164PNG(104 x 25)#
971183774PNG(68 x 16)#
97fd84003PNG(88 x 21)#
98f804204PNG(104 x 25)#
99ff04427PNG(136 x 27)#
9b1404856PNG(172 x 34)#
9c4385178PNG(204 x 41)#
9d8784955PNG(292 x 27)#
9ebd85592PNG(364 x 34)#
a01b06209PNG(440 x 41)#
a19f84189PNG(136 x 27)#
a2a584595PNG(172 x 34)#
a3c504981PNG(204 x 41)#
a4fc84706PNG(136 x 59)#
a62305512PNG(172 x 73)#
a77b86595PNG(204 x 89)#
a91804126PNG(136 x 27)#
aa1a04529PNG(172 x 34)#
ab3584932PNG(204 x 41)#
ac6a03097PNG(385 x 62)#
ad2c03232PNG(481 x 77)#
adf603349PNG(578 x 93)#
aec783023PNG(73 x 91)#
af8483056PNG(92 x 113)#
b04383168PNG(110 x 137)#
b10982965PNG(190 x 27)#
b1c303012PNG(238 x 33)#
b27f83066PNG(285 x 41)#
b33f83496PNG(296 x 242)#
b41a03871PNG(454 x 303)#
b50c04243PNG(545 x 363)#
b61583653PNG(296 x 308)#
b6fa04117PNG(454 x 385)#
b7fb84586PNG(545 x 461)#
b91a83827PNG(363 x 342)#
ba0a04246PNG(454 x 428)#
bb1384766PNG(545 x 513)#
bc3d82921PNG(34 x 27)#
bcf482957PNG(43 x 33)#
bdad82993PNG(51 x 41)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER