filenamecalc.exe
size88064 (0x15800)
md5c8282f363bbb099507863a77f8b89065
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
149307291
1313072949
1323072914
110403102
1094031010
123403102
126507271
2572741213
10203
2652911128
255291111
15101
258291111

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5f5cfae7
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.27
SizeOfCode0xd600
SizeOfInitializedData0x8c00
SizeOfUninitializedData0
AddressOfEntryPoint0x1180
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x1a000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig4

Sections

namevavsizeraw sizeflags
.text0x10000xd5d20xd600R-X CODE
.rdata0xf0000x2ea80x3000R-- IDATA
.data0x120000x1b300xe00RW- IDATA
.pdata0x140000xbb80xc00R-- IDATA
.rsrc0x150000x30600x3200R-- IDATA
.reloc0x190000x1c0x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x10f180xa0
RESOURCE0x150000x3060
EXCEPTION0x140000xbb8
SECURITY00
BASERELOC0x190000x1c
DEBUG0xfc300x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xf0000x4e8
Delay_IAT0x10ea40x40
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
MENU#1063200
MENU#1075100
MENU#1085240
MENU#109400
DIALOG#10127280
DIALOG#10210600
DIALOG#1033080
DIALOG#1045000
STRING#11120
STRING#21200
STRING#3880
STRING#4800
STRING#57220
STRING#63140
ACCELERATORS#1057680
GROUP_ICON#1340
MANIFEST#119750
idlangstring
01033+/-
11033C
21033CE
31033Backspace
41033Sta
51033.
61033And
71033Or
81033Xor
91033Lsh
101033/
111033*
121033+
131033-
141033Mod
151033x^y
161033Int
171033Not
181033sin
191033cos
201033tan
211033ln
221033log
231033sqrt
241033x^2
251033x^3
261033n!
2710331/x
281033dms
291033%
301033F-E
311033pi
321033=
331033MC
341033MR
351033MS
361033M+
371033Exp
381033Ave
391033Sum
401033s
411033Dat
421033(
431033)
4410330
4510331
4610332
4710333
4810334
4910335
5010336
5110337
5210338
5310339
541033A
551033B
561033C
571033D
581033E
591033F
601033Hex
611033Dec
621033Oct
631033Bin
641033Qword
651033Dword
661033Word
671033Byte
681033Degrees
691033Radians
701033Grads
711033Cannot divide by zero.
721033Invalid input for function.
731033Result of function is undefined.
741033Error: Positive Infinity.
751033Error: Negative Infinity.
761033Operation was canceled.
771033Calc does not have enough memory to continue.
781033The requested function may take a very long time to complete. Do you want to abort the operation now?
791033calc.hlp
801033Cannot open Clipboard.
811033There is not enough memory for data. Close one or more programs, and then try again.
821033calc.chm
831033Calculator
841033Not Enough Memory
module_namehintordfunction_name
KERNEL32.dll839GlobalSize
KERNEL32.dll835GlobalLock
KERNEL32.dll842GlobalUnlock
KERNEL32.dll1605lstrcmpW
KERNEL32.dll825GlobalCompact
KERNEL32.dll1470UnhandledExceptionFilter
KERNEL32.dll543GetCurrentProcess
KERNEL32.dll1436TerminateProcess
KERNEL32.dll244CreateThread
KERNEL32.dll1236RtlCaptureContext
KERNEL32.dll1243RtlLookupFunctionEntry
KERNEL32.dll1250RtlVirtualUnwind
KERNEL32.dll729GetStartupInfoW
KERNEL32.dll1421Sleep
KERNEL32.dll1501VirtualProtect
KERNEL32.dll136CloseHandle
KERNEL32.dll1317SetEvent
KERNEL32.dll193CreateEventW
KERNEL32.dll1512WaitForSingleObject
KERNEL32.dll1602lstrcatW
KERNEL32.dll1617lstrlenW
KERNEL32.dll695GetProcAddress
KERNEL32.dll479GetCommandLineW
KERNEL32.dll1227ResetEvent
KERNEL32.dll1127RaiseException
KERNEL32.dll838GlobalReAlloc
KERNEL32.dll1611lstrcpyW
KERNEL32.dll722GetProfileStringW
KERNEL32.dll831GlobalFree
KERNEL32.dll824GlobalAlloc
KERNEL32.dll1405SetUnhandledExceptionFilter
USER32.dll496GetWindowRect
USER32.dll68CheckMenuRadioItem
USER32.dll612LoadMenuW
USER32.dll106CreateDialogParamW
USER32.dll393GetMessageW
USER32.dll808SetCursor
USER32.dll823SetFocus
USER32.dll450GetSubMenu
USER32.dll644MessageBeep
USER32.dll71CheckRadioButton
USER32.dll186DialogBoxParamW
USER32.dll242EndDialog
USER32.dll792SendMessageW
USER32.dll310GetClipboardData
USER32.dll79CloseClipboard
USER32.dll669OpenClipboard
USER32.dll896SetWindowTextW
USER32.dll764ReleaseDC
USER32.dll73ChildWindowFromPoint
USER32.dll212DrawFrameControl
USER32.dll452GetSysColorBrush
USER32.dll688PostQuitMessage
USER32.dll375GetMenu
USER32.dll558IsClipboardFormatAvailable
USER32.dll935TrackPopupMenuEx
USER32.dll480GetWindowDC
USER32.dll991WinHelpW
USER32.dll451GetSysColor
USER32.dll279FrameRect
USER32.dll933TrackMouseEvent
USER32.dll218DrawStateW
USER32.dll331GetDlgCtrlID
USER32.dll875SetTimer
USER32.dll488GetWindowLongPtrW
USER32.dll801SetClassLongPtrW
USER32.dll777ScreenToClient
USER32.dll272FillRect
USER32.dll888SetWindowLongPtrW
USER32.dll247EnumChildWindows
USER32.dll522InflateRect
USER32.dll33CallWindowProcW
USER32.dll167DefWindowProcW
USER32.dll66CheckDlgButton
USER32.dll503GetWindowTextW
USER32.dll818SetDlgItemInt
USER32.dll592KillTimer
USER32.dll891SetWindowPos
USER32.dll652MessageBoxW
USER32.dll118CreateWindowExW
USER32.dll594LoadAcceleratorsW
USER32.dll615LoadStringW
USER32.dll908ShowWindow
USER32.dll668OffsetRect
USER32.dll189DispatchMessageW
USER32.dll561IsDialogMessageW
USER32.dll557IsChild
USER32.dll820SetDlgItemTextW
USER32.dll735RegisterClassW
USER32.dll640MapWindowPoints
USER32.dll836SetMenu
USER32.dll239EnableWindow
USER32.dll546InvalidateRect
USER32.dll966UpdateWindow
USER32.dll233EnableMenuItem
USER32.dll332GetDlgItem
USER32.dll307GetClientRect
USER32.dll67CheckMenuItem
USER32.dll600LoadCursorW
USER32.dll602LoadIconW
USER32.dll940TranslateMessage
USER32.dll938TranslateAcceleratorW
USER32.dll178DestroyMenu
USER32.dll181DestroyWindow
GDI32.dll876SetBkMode
GDI32.dll882SetDCBrushColor
GDI32.dll915SetTextColor
GDI32.dll719GetTextExtentPoint32W
GDI32.dll553GdiGradientFill
GDI32.dll702GetStockObject
GDI32.dll464ExcludeClipRect
ADVAPI32.dll665RegQueryValueExW
ADVAPI32.dll603RegCloseKey
ADVAPI32.dll612RegCreateKeyExW
ADVAPI32.dll681RegSetValueExW
ADVAPI32.dll652RegOpenKeyExW
msvcrt.dll473_wcmdln
msvcrt.dll108__wgetmainargs
msvcrt.dll244_initterm
msvcrt.dll98__setusermatherr
msvcrt.dll142_commode
msvcrt.dll198_fmode
msvcrt.dll96__set_app_type
msvcrt.dll588exit
msvcrt.dll45void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll1152memcpy
msvcrt.dll1154memmove
msvcrt.dll76_CxxThrowException
msvcrt.dll130_cexit
msvcrt.dll175_exit
msvcrt.dll127_c_exit
msvcrt.dll55__C_specific_handler
msvcrt.dll17public: virtual __cdecl type_info::~type_info(void) __ptr64

??1type_info@@UEAA@XZ

msvcrt.dll19void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

msvcrt.dll57__CxxFrameHandler
msvcrt.dll286_loaddll
msvcrt.dll751wcschr
msvcrt.dll408_snwprintf
msvcrt.dll484_wcsrev
msvcrt.dll739toupper
msvcrt.dll54_XcptFilter
COMCTL32.dll17
UxTheme.dll71IsAppThemed
UxTheme.dll17DrawThemeParentBackground
UxTheme.dll74IsThemeBackgroundPartiallyTransparent
UxTheme.dll9CloseThemeData
UxTheme.dll13DrawThemeBackground
UxTheme.dll77OpenThemeData
UxTheme.dll37GetThemeBackgroundContentRect
UxTheme.dll73IsThemeActive
offsetsizetypecomment
15c115HTM#
15d082480BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK