filenamezopflipng-x64.exe
size368128 (0x59e00)
md5e6513ed0de750b4d657b6264c81938f7
typePE32+ executable (console) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072914
259337314
2603373110
2613373128
257337317
257331362
1093
260338119
261338114
255338111
258338111

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections8
TimeDateStamp0x6680a239
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.40
SizeOfCode0x45000
SizeOfInitializedData0x15200
SizeOfUninitializedData0
AddressOfEntryPoint0x1ce4
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x60000
SizeOfHeaders0x400
CheckSum0
Subsystem3
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x44e630x45000R-X CODE
.rdata0x460000xe2d10xe400R-- IDATA
.data0x550000x11090xa00RW- IDATA
.pdata0x570000x312c0x3200R-- IDATA
.idata0x5b0000x1c600x1e00R-- IDATA
.00cfg0x5d0000x1750x200R-- IDATA
.rsrc0x5e0000x4590x600R-- IDATA
.reloc0x5f0000x2f90x400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x5b7300xf0
RESOURCE0x5e0000x459
EXCEPTION0x570000x2ba4
SECURITY00
BASERELOC0x5f0000x6c
DEBUG0x4dd400x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x4dbc00x140
Bound_IAT00
IAT0x5b0000x730
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#14060
module_namehintordfunction_name
MSVCP140.dll1121public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::put(char) __ptr64

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

MSVCP140.dll255public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) __ptr64

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

MSVCP140.dll692class std::basic_ostream<char, struct std::char_traits<char> > std::cout

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

MSVCP140.dll262public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64)) __ptr64

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

MSVCP140.dll580public: void __cdecl std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) __ptr64

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

MSVCP140.dll1332public: char __cdecl std::basic_ios<char, struct std::char_traits<char> >::widen(char)const __ptr64

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

MSVCP140.dll865public: char __cdecl std::basic_ios<char, struct std::char_traits<char> >::fill(void)const __ptr64

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ

MSVCP140.dll1159public: class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64 __cdecl std::basic_ios<char, struct std::char_traits<char> >::rdbuf(void)const __ptr64

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

MSVCP140.dll1290public: class std::basic_ostream<char, struct std::char_traits<char> > * __ptr64 __cdecl std::basic_ios<char, struct std::char_traits<char> >::tie(void)const __ptr64

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

MSVCP140.dll1221public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) __ptr64

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

MSVCP140.dll1249public: __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const * __ptr64, __int64) __ptr64

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

MSVCP140.dll1246public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

MSVCP140.dll1341public: __int64 __cdecl std::ios_base::width(__int64) __ptr64

?width@ios_base@std@@QEAA_J_J@Z

MSVCP140.dll1342public: __int64 __cdecl std::ios_base::width(void)const __ptr64

?width@ios_base@std@@QEBA_JXZ

MSVCP140.dll871public: int __cdecl std::ios_base::flags(void)const __ptr64

?flags@ios_base@std@@QEBAHXZ

MSVCP140.dll965public: bool __cdecl std::ios_base::good(void)const __ptr64

?good@ios_base@std@@QEBA_NXZ

MSVCP140.dll1310bool __cdecl std::uncaught_exception(void)

?uncaught_exception@std@@YA_NXZ

MSVCP140.dll655void __cdecl std::_Xout_of_range(char const * __ptr64)

?_Xout_of_range@std@@YAXPEBD@Z

MSVCP140.dll872public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

MSVCP140.dll654void __cdecl std::_Xlength_error(char const * __ptr64)

?_Xlength_error@std@@YAXPEBD@Z

VCRUNTIME140.dll37__std_type_info_destroy_list
VCRUNTIME140.dll62memset
VCRUNTIME140.dll33__std_exception_copy
VCRUNTIME140.dll34__std_exception_destroy
VCRUNTIME140.dll1_CxxThrowException
VCRUNTIME140.dll28__current_exception_context
VCRUNTIME140.dll58memchr
VCRUNTIME140.dll59memcmp
VCRUNTIME140.dll27__current_exception
VCRUNTIME140.dll8__C_specific_handler
VCRUNTIME140.dll35__std_terminate
VCRUNTIME140.dll60memcpy
VCRUNTIME140.dll61memmove
VCRUNTIME140_1.dll__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0.dll22_cexit
api-ms-win-crt-runtime-l1-1-0.dll21_c_exit
api-ms-win-crt-runtime-l1-1-0.dll61_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll4__p___argc
api-ms-win-crt-runtime-l1-1-0.dll85exit
api-ms-win-crt-runtime-l1-1-0.dll64_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll103terminate
api-ms-win-crt-runtime-l1-1-0.dll63_seh_filter_dll
api-ms-win-crt-runtime-l1-1-0.dll52_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll60_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll34_execute_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll30_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll29_crt_at_quick_exit
api-ms-win-crt-runtime-l1-1-0.dll66_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll35_exit
api-ms-win-crt-runtime-l1-1-0.dll24_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll55_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll5__p___argv
api-ms-win-crt-runtime-l1-1-0.dll57_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll54_initterm
api-ms-win-crt-runtime-l1-1-0.dll40_get_initial_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll51_initialize_narrow_environment
api-ms-win-crt-convert-l1-1-0.dll80atoi
api-ms-win-crt-stdio-l1-1-0.dll3__stdio_common_vfprintf
api-ms-win-crt-stdio-l1-1-0.dll1__p__commode
api-ms-win-crt-stdio-l1-1-0.dll__acrt_iob_func
api-ms-win-crt-stdio-l1-1-0.dll84_set_fmode
api-ms-win-crt-stdio-l1-1-0.dll138fwrite
api-ms-win-crt-stdio-l1-1-0.dll131fread
api-ms-win-crt-stdio-l1-1-0.dll125fopen
api-ms-win-crt-stdio-l1-1-0.dll140getchar
api-ms-win-crt-stdio-l1-1-0.dll137ftell
api-ms-win-crt-stdio-l1-1-0.dll135fseek
api-ms-win-crt-stdio-l1-1-0.dll116fclose
api-ms-win-crt-heap-l1-1-0.dll24free
api-ms-win-crt-heap-l1-1-0.dll26realloc
api-ms-win-crt-heap-l1-1-0.dll25malloc
api-ms-win-crt-heap-l1-1-0.dll8_callnewh
api-ms-win-crt-heap-l1-1-0.dll22_set_new_mode
api-ms-win-crt-math-l1-1-0.dll9__setusermatherr
api-ms-win-crt-math-l1-1-0.dll218log
api-ms-win-crt-utility-l1-1-0.dll25qsort
api-ms-win-crt-locale-l1-1-0.dll8_configthreadlocale
KERNEL32.dll1281RtlCaptureContext
KERNEL32.dll1289RtlLookupFunctionEntry
KERNEL32.dll1296RtlVirtualUnwind
KERNEL32.dll1523UnhandledExceptionFilter
KERNEL32.dll1456SetUnhandledExceptionFilter
KERNEL32.dll571GetCurrentProcess
KERNEL32.dll1488TerminateProcess
KERNEL32.dll946IsProcessorFeaturePresent
KERNEL32.dll1147QueryPerformanceCounter
KERNEL32.dll572GetCurrentProcessId
KERNEL32.dll576GetCurrentThreadId
KERNEL32.dll788GetSystemTimeAsFileTime
KERNEL32.dll916InitializeSListHead
KERNEL32.dll938IsDebuggerPresent
KERNEL32.dll763GetStartupInfoW
KERNEL32.dll671GetModuleHandleW
offsetsizetypecomment
15c115HTM#
15d0362544BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK