filenamecalc.exe
size114688 (0x1c000)
md5e3fcb903305f8ee5551ea66f5c096737
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
6492105
28917811
001
10135
25921013
6991111
29917828
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3b7d8410
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x12800
SizeOfInitializedData0x9400
SizeOfUninitializedData0
AddressOfEntryPoint0x12475
BaseOfCode0x1000
BaseOfData0x14000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x1f000
SizeOfHeaders0x400
CheckSum0x2073c
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x126b00x12800R-X CODE
.data0x140000x101c0xa00RW- IDATA
.rsrc0x160000x89600x8a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x12b800x8c
RESOURCE0x160000x8560
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x12400x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2600x80
IAT0x10000x228
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17441252
ICON#22961252
ICON#337521252
ICON#422161252
ICON#513841252
ICON#696401252
ICON#742641252
ICON#811281252
MENU#1062401252
MENU#1074321252
MENU#1084641252
MENU#109321252
DIALOG#10129761252
DIALOG#10211641252
DIALOG#1033321252
DIALOG#1043121252
STRING#11121252
STRING#21201252
STRING#3881252
STRING#4801252
STRING#53001252
STRING#61281252
ACCELERATORS#1057601252
GROUP_ICONSC1181252
VERSION#19281252
MANIFEST#16671252
idlangstring
02052+/-
12052C
22052CE
32052Backspace
42052Sta
52052.
62052And
72052Or
82052Xor
92052Lsh
102052/
112052*
122052+
132052-
142052Mod
152052x^y
162052Int
172052Not
182052sin
192052cos
202052tan
212052ln
222052log
232052sqrt
242052x^2
252052x^3
262052n!
2720521/x
282052dms
292052%
302052F-E
312052pi
322052=
332052MC
342052MR
352052MS
362052M+
372052Exp
382052Ave
392052Sum
402052s
412052Dat
422052(
432052)
4420520
4520521
4620522
4720523
4820524
4920525
5020526
5120527
5220528
5320529
542052A
552052B
562052C
572052D
582052E
592052F
602052Hex
612052Dec
622052Oct
632052Bin
642052Qword
652052Dword
662052Word
672052字节
682052Degrees
692052Radians
702052Grads
712052除数不能为零。
722052函数输入无效。
732052函数结果未定义。
742052错误: 无穷大正数。
752052错误: 无穷大负数。
762052操作已取消。
772052计算器没有足够内存,无法继续。
782052要求的功能可能要花很长时间才能完成。 是否立即终止操作?
792052calc.hlp
802052打不开剪贴板。
812052没有足够内存存储数据。 请关闭部分程序，再试一次。
822052calc.chm
832052计算器
842052内存不够
module_namehintordfunction_name
SHELL32.dll148ShellAboutW
msvcrt.dll82__CxxFrameHandler
msvcrt.dll71_CxxThrowException
msvcrt.dll824wcstoul
msvcrt.dll794toupper
msvcrt.dll806wcschr
msvcrt.dll734memmove
msvcrt.dll812wcslen
msvcrt.dll559_wcsrev
msvcrt.dll197_c_exit
msvcrt.dll246_exit
msvcrt.dll78_XcptFilter
msvcrt.dll200_cexit
msvcrt.dll655exit
msvcrt.dll168_acmdln
msvcrt.dll109__getmainargs
msvcrt.dll314_initterm
msvcrt.dll154__setusermatherr
msvcrt.dll182_adjust_fdiv
msvcrt.dll128__p__commode
msvcrt.dll133__p__fmode
msvcrt.dll152__set_app_type
msvcrt.dll18void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll16public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll214_controlfp
msvcrt.dll237_except_handler3
msvcrt.dll52void __cdecl terminate(void)

?terminate@@YAXXZ

ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll456RegCloseKey
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll558LoadLibraryA
KERNEL32.dll393GetProcAddress
KERNEL32.dll472GlobalCompact
KERNEL32.dll471GlobalAlloc
KERNEL32.dll478GlobalFree
KERNEL32.dll485GlobalReAlloc
KERNEL32.dll915lstrcmpW
KERNEL32.dll809Sleep
KERNEL32.dll899WriteProfileStringW
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll486GlobalSize
KERNEL32.dll489GlobalUnlock
KERNEL32.dll71CreateEventW
KERNEL32.dll101CreateThread
KERNEL32.dll681ResetEvent
KERNEL32.dll924lstrcpynW
KERNEL32.dll748SetEvent
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll44CloseHandle
KERNEL32.dll912lstrcatW
KERNEL32.dll927lstrlenW
KERNEL32.dll571LocalReAlloc
KERNEL32.dll568LocalFree
KERNEL32.dll564LocalAlloc
KERNEL32.dll408GetProfileStringW
KERNEL32.dll482GlobalLock
KERNEL32.dll254GetCommandLineW
KERNEL32.dll921lstrcpyW
KERNEL32.dll404GetProfileIntW
GDI32.dll531SetBkColor
GDI32.dll570SetTextColor
GDI32.dll532SetBkMode
USER32.dll300GetMenu
USER32.dll594SetDlgItemInt
USER32.dll378GetWindowTextW
USER32.dll56CheckDlgButton
USER32.dll383HideCaret
USER32.dll28CallWindowProcW
USER32.dll191DrawTextW
USER32.dll723WinHelpW
USER32.dll513PostQuitMessage
USER32.dll272GetDlgCtrlID
USER32.dll561ScreenToClient
USER32.dll60ChildWindowFromPoint
USER32.dll143DefWindowProcW
USER32.dll415IsClipboardFormatAvailable
USER32.dll194EnableMenuItem
USER32.dll677TrackPopupMenuEx
USER32.dll270GetDesktopWindow
USER32.dll499OpenClipboard
USER32.dll257GetClipboardData
USER32.dll42CharNextA
USER32.dll66CloseClipboard
USER32.dll346GetSysColor
USER32.dll159DialogBoxParamW
USER32.dll198EndDialog
USER32.dll475MessageBeep
USER32.dll345GetSubMenu
USER32.dll59CheckRadioButton
USER32.dll647SetWindowTextW
USER32.dll598SetFocus
USER32.dll589SetCursor
USER32.dll44CharNextW
USER32.dll536RegisterClassExW
USER32.dll347GetSysColorBrush
USER32.dll442LoadCursorW
USER32.dll444LoadIconW
USER32.dll403InvalidateRect
USER32.dll699UpdateWindow
USER32.dll658ShowWindow
USER32.dll576SendMessageW
USER32.dll596SetDlgItemTextW
USER32.dll57CheckMenuItem
USER32.dll58CheckMenuRadioItem
USER32.dll643SetWindowPos
USER32.dll498OffsetRect
USER32.dll471MapWindowPoints
USER32.dll255GetClientRect
USER32.dll196EnableWindow
USER32.dll454LoadMenuW
USER32.dll641SetWindowLongW
USER32.dll367GetWindowLongW
USER32.dll86CreateDialogParamW
USER32.dll273GetDlgItem
USER32.dll151DestroyMenu
USER32.dll153DestroyWindow
USER32.dll605SetMenu
USER32.dll372GetWindowRect
USER32.dll666SystemParametersInfoW
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll680TranslateAcceleratorW
USER32.dll414IsChild
USER32.dll418IsDialogMessageW
USER32.dll318GetMessageW
USER32.dll436LoadAcceleratorsW
USER32.dll97CreateWindowExW
USER32.dll483MessageBoxW
USER32.dll457LoadStringW
USER32.dll615SetProcessDefaultLayout
USER32.dll327GetProcessDefaultLayout

StringTable 080404B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Calculator application file
FileVersion5.1.2600.0 (xpclient.010817-1148)
InternalNameCALC
LegalCopyright(C) Microsoft Corporation. All rights reserved.
OriginalFilenameCALC.EXE
ProductNameMicrosoft(R) Windows(R) Operating System
ProductVersion5.1.2600.0

VS_FIXEDFILEINFO

FileVersion5.1.2600.0
ProductVersion5.1.2600.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0114688EXE08/17/2001 20:52:32#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x260