filenamecalc.exe
size816128 (0xc7400)
md5f28a6788920165fa30fa4e05dc6b2651
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
2076550147
205655019
10382
2036550131
2066550125
2116550195
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x545043ea
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x5e400
SizeOfInitializedData0x68c00
SizeOfUninitializedData0
AddressOfEntryPoint0x16360
BaseOfCode0x1000
BaseOfData0x5c000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion6.3
Reserved10
SizeOfImage0xcc000
SizeOfHeaders0x400
CheckSum0xc928a
Subsystem2
DllCharacteristics0xc140
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x5e2190x5e400R-X CODE
.data0x600000x414c0x4200RW- IDATA
.idata0x650000x24660x2600R-- IDATA
.didat0x6800080x200RW- IDATA
.rsrc0x690000x5d1200x5d200R-- IDATA
.reloc0xc70000x4e140x5000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x655cc0x140
RESOURCE0x690000x5d120
EXCEPTION00
SECURITY00
BASERELOC0xc70000x4e14
DEBUG0x5f1bc0x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x10000x5c
Bound_IAT00
IAT0x650000x5c8
Delay_IAT0x5f1380x40
CLR_Header00
typenamesizecp
IMAGE#15746570
IMAGE#16540690
IMAGE#17042150
IMAGE#17546560
IMAGE#18049180
IMAGE#20429950
IMAGE#20830400
IMAGE#21232560
IMAGE#21633800
IMAGE#21737490
IMAGE#21837740
IMAGE#300044270
IMAGE#301541260
IMAGE#304547060
IMAGE#305149550
IMAGE#306041890
IMAGE#310230970
IMAGE#310330230
IMAGE#310429650
IMAGE#310529210
IMAGE#310634960
IMAGE#310736530
IMAGE#310838270
IMAGE#320154540
IMAGE#320243720
IMAGE#320331050
IMAGE#320445610
IMAGE#320531210
IMAGE#320648770
IMAGE#320733960
IMAGE#320852010
IMAGE#320937920
IMAGE#321039690
IMAGE#321140030
IMAGE#321448560
IMAGE#321555920
IMAGE#321645290
IMAGE#321755120
IMAGE#321845950
IMAGE#322032320
IMAGE#322130560
IMAGE#322230120
IMAGE#322338710
IMAGE#322441170
IMAGE#322542460
IMAGE#322829570
IMAGE#330168550
IMAGE#330245230
IMAGE#330331280
IMAGE#330447180
IMAGE#330532220
IMAGE#330651590
IMAGE#330735780
IMAGE#330855600
IMAGE#330938300
IMAGE#331041640
IMAGE#331142040
IMAGE#331451780
IMAGE#331562090
IMAGE#331649320
IMAGE#331765950
IMAGE#331849810
IMAGE#332033490
IMAGE#332131680
IMAGE#332230660
IMAGE#332342430
IMAGE#332445860
IMAGE#332547660
IMAGE#332829930
MUI#12720
WEVT_TEMPLATE#147500
ICON#126640
ICON#216400
ICON#37440
ICON#44880
ICON#52960
ICON#656720
ICON#737520
ICON#822160
ICON#917360
ICON#1013840
ICON#11275690
ICON#12169360
ICON#1396400
ICON#1442640
ICON#1524400
ICON#1611280
GROUP_ICON#2342300
VERSION#18960
MANIFEST#111670
module_namehintordfunction_name
SHELL32.dll165
SHELL32.dll303ShellAboutW
SHELL32.dll244SHGetSpecialFolderPathW
SHLWAPI.dll225
gdiplus.dll122GdipCreatePen1
gdiplus.dll148GdipDeletePen
gdiplus.dll289GdipGetImageGraphicsContext
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll536GdipSetInterpolationMode
gdiplus.dll585GdipSetSmoothingMode
gdiplus.dll548GdipSetPageUnit
gdiplus.dll188GdipDrawLineI
gdiplus.dll155GdipDrawArcI
gdiplus.dll229GdipFillRectangleI
gdiplus.dll152GdipDisposeImage
gdiplus.dll80GdipCreateBitmapFromScan0
gdiplus.dll95GdipCreateHBITMAPFromBitmap
gdiplus.dll91GdipCreateFromHDC
gdiplus.dll184GdipDrawImageRectI
gdiplus.dll77GdipCreateBitmapFromHBITMAP
gdiplus.dll49GdipCloneBitmapAreaI
gdiplus.dll130GdipCreateSolidFill
gdiplus.dll237GdipFree
gdiplus.dll628GdiplusShutdown
gdiplus.dll629GdiplusStartup
gdiplus.dll54GdipCloneImage
gdiplus.dll33GdipAlloc
gdiplus.dll138GdipDeleteBrush
ADVAPI32.dll627RegEnumKeyExW
ADVAPI32.dll645RegOpenKeyExW
ADVAPI32.dll630RegEnumValueW
ADVAPI32.dll634RegGetValueW
ADVAPI32.dll616RegDeleteKeyW
ADVAPI32.dll652RegQueryInfoKeyW
ADVAPI32.dll658RegQueryValueExW
ADVAPI32.dll674RegSetValueExW
ADVAPI32.dll290EventUnregister
ADVAPI32.dll288EventRegister
ADVAPI32.dll596RegCloseKey
ADVAPI32.dll605RegCreateKeyExW
ADVAPI32.dll291EventWrite
OLEAUT32.dll7
OLEAUT32.dll150
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll6
OLEAUT32.dll2
UxTheme.dll73IsThemeActive
ole32.dll127CoUninitialize
ole32.dll79CoInitialize
ole32.dll26CoCreateInstance
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll83ImageList_Create
COMCTL32.dll77ImageList_Add
COMCTL32.dll413
COMCTL32.dll410
COMCTL32.dll380
COMCTL32.dll392
ntdll.dll1516WinSqmAddToStreamEx
ntdll.dll1515WinSqmAddToStream
KERNEL32.dll520GetCurrentProcess
KERNEL32.dll1343SetUnhandledExceptionFilter
KERNEL32.dll1406UnhandledExceptionFilter
KERNEL32.dll1014OutputDebugStringA
KERNEL32.dll700GetStartupInfoA
KERNEL32.dll1542lstrlenA
KERNEL32.dll1373TerminateProcess
KERNEL32.dll611GetModuleHandleA
KERNEL32.dll1066QueryPerformanceCounter
KERNEL32.dll521GetCurrentProcessId
KERNEL32.dll525GetCurrentThreadId
KERNEL32.dll725GetSystemTimeAsFileTime
KERNEL32.dll753GetTickCount
KERNEL32.dll1481WideCharToMultiByte
KERNEL32.dll615GetModuleHandleW
KERNEL32.dll1361SizeofResource
KERNEL32.dll957LockResource
KERNEL32.dll610GetModuleFileNameW
KERNEL32.dll392FindResourceExW
KERNEL32.dll724GetSystemTime
KERNEL32.dll1451WaitForSingleObject
KERNEL32.dll182CreateEventW
KERNEL32.dll232CreateThread
KERNEL32.dll1186ResetEvent
KERNEL32.dll1264SetEvent
KERNEL32.dll127CloseHandle
KERNEL32.dll806GlobalSize
KERNEL32.dll802GlobalLock
KERNEL32.dll809GlobalUnlock
KERNEL32.dll791GlobalAlloc
KERNEL32.dll1535lstrcmpW
KERNEL32.dll976MulDiv
KERNEL32.dll795GlobalFindAtomW
KERNEL32.dll393FindResourceW
KERNEL32.dll592GetLastError
KERNEL32.dll977MultiByteToWideChar
KERNEL32.dll593GetLocalTime
KERNEL32.dll531GetDateFormatW
KERNEL32.dll596GetLocaleInfoW
KERNEL32.dll1511WritePrivateProfileStringW
KERNEL32.dll666GetPrivateProfileStringW
KERNEL32.dll1538lstrcmpiW
KERNEL32.dll936LoadLibraryW
KERNEL32.dll669GetProcAddress
KERNEL32.dll595GetLocaleInfoEx
KERNEL32.dll414FreeLibrary
KERNEL32.dll946LocalFree
KERNEL32.dll942LocalAlloc
KERNEL32.dll949LocalReAlloc
KERNEL32.dll695GetProfileStringW
KERNEL32.dll1547lstrlenW
KERNEL32.dll147CompareStringW
KERNEL32.dll1150RegisterApplicationRecoveryCallback
KERNEL32.dll26ApplicationRecoveryInProgress
KERNEL32.dll1362Sleep
KERNEL32.dll25ApplicationRecoveryFinished
KERNEL32.dll1151RegisterApplicationRestart
KERNEL32.dll737GetTempFileNameW
KERNEL32.dll1373SystemTimeToFileTime
KERNEL32.dll143CompareFileTime
KERNEL32.dll565GetFileAttributesW
KERNEL32.dll349FileTimeToSystemTime
KERNEL32.dll194CreateFileW
KERNEL32.dll266DeleteFileW
KERNEL32.dll929LeaveCriticalSection
KERNEL32.dll260DeleteCriticalSection
KERNEL32.dll1288SetLastError
KERNEL32.dll613GetModuleHandleExW
KERNEL32.dll292EnterCriticalSection
KERNEL32.dll838InitializeCriticalSection
KERNEL32.dll1085RaiseException
KERNEL32.dll673GetProcessHeap
KERNEL32.dll823HeapSize
KERNEL32.dll818HeapFree
KERNEL32.dll258DelayLoadFailureHook
KERNEL32.dll1188ResolveDelayLoadedAPI
KERNEL32.dll821HeapReAlloc
KERNEL32.dll814HeapAlloc
KERNEL32.dll939LoadResource
KERNEL32.dll817HeapDestroy
USER32.dll606OpenClipboard
USER32.dll296GetClipboardData
USER32.dll495InvalidateRect
USER32.dll75CloseClipboard
USER32.dll223EmptyClipboard
USER32.dll710SetClipboardData
USER32.dll625PostQuitMessage
USER32.dll161DefWindowProcW
USER32.dll539LoadAcceleratorsW
USER32.dll490InsertMenuItemW
USER32.dll649RegisterClassExW
USER32.dll782SetWindowPlacement
USER32.dll725SetForegroundWindow
USER32.dll371GetMessageW
USER32.dll829TranslateAcceleratorW
USER32.dll368GetMessageExtraInfo
USER32.dll831TranslateMessage
USER32.dll181DispatchMessageW
USER32.dll339GetKeyState
USER32.dll510IsDialogMessageW
USER32.dll291GetClassNameW
USER32.dll308GetDC
USER32.dll677ReleaseDC
USER32.dll426GetSystemMetrics
USER32.dll236EnumChildWindows
USER32.dll214DrawTextW
USER32.dll754SetPropW
USER32.dll815SystemParametersInfoW
USER32.dll67CheckRadioButton
USER32.dll855UpdateWindow
USER32.dll691SendDlgItemMessageW
USER32.dll511IsDlgButtonChecked
USER32.dll595MoveWindow
USER32.dll720SetDlgItemInt
USER32.dll317GetDlgItemInt
USER32.dll261FillRect
USER32.dll376GetNextDlgTabItem
USER32.dll594MonitorFromWindow
USER32.dll373GetMonitorInfoW
USER32.dll605OffsetRect
USER32.dll256EqualRect
USER32.dll593MonitorFromRect
USER32.dll292GetClassWord
USER32.dll238EnumDesktopWindows
USER32.dll243EnumDisplayMonitors
USER32.dll494IntersectRect
USER32.dll87CopyRect
USER32.dll322GetFocus
USER32.dll401GetProcessDefaultLayout
USER32.dll110CreatePopupMenu
USER32.dll825TrackPopupMenu
USER32.dll507IsClipboardFormatAvailable
USER32.dll47CharNextA
USER32.dll530IsWindowEnabled
USER32.dll624PostMessageW
USER32.dll466GetWindowTextW
USER32.dll465GetWindowTextLengthW
USER32.dll228EnableWindow
USER32.dll453GetWindowLongW
USER32.dll781SetWindowLongW
USER32.dll788SetWindowTextW
USER32.dll458GetWindowPlacement
USER32.dll63CheckMenuItem
USER32.dll423GetSysColor
USER32.dll708SetClassLongW
USER32.dll289GetClassLongW
USER32.dll207DrawMenuBar
USER32.dll741SetMenuItemInfoW
USER32.dll10AppendMenuW
USER32.dll560LoadStringW
USER32.dll422GetSubMenu
USER32.dll679RemoveMenu
USER32.dll64CheckMenuRadioItem
USER32.dll724SetFocus
USER32.dll577MapWindowPoints
USER32.dll224EnableMenuItem
USER32.dll378GetParent
USER32.dll353GetMenu
USER32.dll293GetClientRect
USER32.dll113CreateWindowExW
USER32.dll173DestroyWindow
USER32.dll178DialogBoxParamW
USER32.dll231EndDialog
USER32.dll783SetWindowPos
USER32.dll316GetDlgItem
USER32.dll459GetWindowRect
USER32.dll700SendMessageW
USER32.dll581MessageBeep
USER32.dll545LoadCursorW
USER32.dll713SetCursor
USER32.dll549LoadImageW
USER32.dll840UnregisterClassA
USER32.dll102CreateDialogParamW
USER32.dll364GetMenuState
USER32.dll800ShowWindow
RPCRT4.dll513RpcStringFreeW
RPCRT4.dll531UuidToStringW
RPCRT4.dll522UuidCreate
WINMM.dll148timeGetTime
GDI32.dll54CreateDIBSection
GDI32.dll569GetStockObject
GDI32.dll732SetBkColor
GDI32.dll733SetBkMode
GDI32.dll75CreatePatternBrush
GDI32.dll271DeleteObject
GDI32.dll268DeleteDC
GDI32.dll342EqualRgn
GDI32.dll34CombineRgn
GDI32.dll766SetRectRgn
GDI32.dll81CreateRectRgnIndirect
GDI32.dll80CreateRectRgn
GDI32.dll568GetRgnBox
GDI32.dll48CreateCompatibleBitmap
GDI32.dll610LineTo
GDI32.dll624MoveToEx
GDI32.dll347ExtCreatePen
GDI32.dll553GetObjectW
GDI32.dll586GetTextExtentPoint32W
GDI32.dll594GetTextMetricsW
GDI32.dll86CreateSolidBrush
GDI32.dll772SetTextColor
GDI32.dll503GetDeviceCaps
GDI32.dll49CreateCompatibleDC
GDI32.dll65CreateFontIndirectW
GDI32.dll725SelectObject
GDI32.dll589GetTextExtentPointW
msvcrt.dll1365time
msvcrt.dll1198difftime
msvcrt.dll1293memmove
msvcrt.dll1295memset
msvcrt.dll292_callnewh
msvcrt.dll102_CxxThrowException
msvcrt.dll123__CxxFrameHandler3
msvcrt.dll1319setlocale
msvcrt.dll224__pctype_func
msvcrt.dll145___lc_handle_func
msvcrt.dll143___lc_codepage_func
msvcrt.dll146___mb_cur_max_func
msvcrt.dll361_errno
msvcrt.dll194__mb_cur_max
msvcrt.dll155__crtGetStringTypeW
msvcrt.dll157__crtLCMapStringW
msvcrt.dll1255isspace
msvcrt.dll1370tolower
msvcrt.dll1175abort
msvcrt.dll1246isalnum
msvcrt.dll113_XcptFilter
msvcrt.dll203__p__commode
msvcrt.dll275_amsg_exit
msvcrt.dll163__getmainargs
msvcrt.dll228__set_app_type
msvcrt.dll373_exit
msvcrt.dll294_cexit
msvcrt.dll1247isalpha
msvcrt.dll521_ismbblead
msvcrt.dll230__setusermatherr
msvcrt.dll490_initterm
msvcrt.dll249_acmdln
msvcrt.dll17public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll610_lock
msvcrt.dll966_unlock
msvcrt.dll159__dllonexit
msvcrt.dll779_onexit
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll237__uncaught_exception
msvcrt.dll364_except_handler4_common
msvcrt.dll313_controlfp
msvcrt.dll1249isdigit
msvcrt.dll1270isxdigit
msvcrt.dll1371toupper
msvcrt.dll796_purecall
msvcrt.dll1279malloc
msvcrt.dll12public: __thiscall exception::exception(void)

??0exception@@QAE@XZ

msvcrt.dll1294memmove_s
msvcrt.dll9public: __thiscall exception::exception(char const * const &)

??0exception@@QAE@ABQBD@Z

msvcrt.dll16public: virtual __thiscall exception::~exception(void)

??1exception@@UAE@XZ

msvcrt.dll57public: virtual char const * __thiscall exception::what(void)const

?what@exception@@UBEPBDXZ

msvcrt.dll1292memcpy_s
msvcrt.dll11public: __thiscall exception::exception(class exception const &)

??0exception@@QAE@ABV0@@Z

msvcrt.dll1223free
msvcrt.dll1420wcstoul
msvcrt.dll1337strcspn
msvcrt.dll425_ftol2_sse
msvcrt.dll424_ftol2
msvcrt.dll1289memchr
msvcrt.dll919_strtoui64
msvcrt.dll916_strtoi64
msvcrt.dll1055_wcsrev
msvcrt.dll1332strchr
msvcrt.dll1325sprintf_s
msvcrt.dll1163_wtoi64
msvcrt.dll489_i64tow_s
msvcrt.dll1034_wcsdup
msvcrt.dll1274localeconv
msvcrt.dll14public: virtual __thiscall bad_cast::~bad_cast(void)

??1bad_cast@@UAE@XZ

msvcrt.dll5public: __thiscall bad_cast::bad_cast(class bad_cast const &)

??0bad_cast@@QAE@ABV0@@Z

msvcrt.dll1258iswalpha
msvcrt.dll1262iswdigit
msvcrt.dll1045_wcslwr_s
msvcrt.dll1049_wcsnicmp
msvcrt.dll1404wcsncmp
msvcrt.dll585_itow_s
msvcrt.dll1190calloc
msvcrt.dll1394wcschr
msvcrt.dll1039_wcsicmp
msvcrt.dll582_itoa
msvcrt.dll1162_wtoi
msvcrt.dll1006_vsnwprintf
msvcrt.dll1393wcscat_s
msvcrt.dll1398wcscpy_s
msvcrt.dll1417wcstol
msvcrt.dll1287mbstowcs_s
msvcrt.dll208__p__fmode
msvcrt.dll1200exit
msvcrt.dll1291memcpy

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Calculator
FileVersion6.3.9600.17415 (winblue_r4.141028-1500)
InternalNameCALC
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameCALC.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.3.9600.17415

VS_FIXEDFILEINFO

FileVersion6.3.9600.17415
ProductVersion6.3.9600.17415
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0816128EXE10/29/2014 01:33:30#
15c115HTM#
6cb6027569PNG(256 x 256)#
7be684657PNG(750 x 400)#
7d0a05454PNG(938 x 500)#
7e5f06855PNG(1125 x 600)#
800b84069PNG(190 x 50)#
810a04372PNG(238 x 63)#
821b84523PNG(285 x 75)#
833682995PNG(190 x 50)#
83f203105PNG(238 x 63)#
84b483128PNG(285 x 75)#
857804215PNG(385 x 50)#
867f84561PNG(482 x 63)#
879d04718PNG(578 x 75)#
88c403040PNG(385 x 50)#
898203121PNG(482 x 63)#
8a4583222PNG(578 x 75)#
8b0f04656PNG(190 x 151)#
8c3204877PNG(238 x 188)#
8d6305159PNG(285 x 227)#
8ea583256PNG(190 x 151)#
8f7103396PNG(238 x 188)#
904583578PNG(285 x 227)#
912584918PNG(385 x 151)#
925905201PNG(482 x 188)#
939e85560PNG(578 x 227)#
94fa03380PNG(385 x 151)#
95cd83792PNG(482 x 188)#
96ba83830PNG(578 x 227)#
97aa03749PNG(68 x 16)#
989483969PNG(88 x 21)#
998d04164PNG(104 x 25)#
9a9183774PNG(68 x 16)#
9b7d84003PNG(88 x 21)#
9c7804204PNG(104 x 25)#
9d7f04427PNG(136 x 27)#
9e9404856PNG(172 x 34)#
9fc385178PNG(204 x 41)#
a10784955PNG(292 x 27)#
a23d85592PNG(364 x 34)#
a39b06209PNG(440 x 41)#
a51f84189PNG(136 x 27)#
a62584595PNG(172 x 34)#
a74504981PNG(204 x 41)#
a87c84706PNG(136 x 59)#
a9a305512PNG(172 x 73)#
aafb86595PNG(204 x 89)#
ac9804126PNG(136 x 27)#
ad9a04529PNG(172 x 34)#
aeb584932PNG(204 x 41)#
afea03097PNG(385 x 62)#
b0ac03232PNG(481 x 77)#
b17603349PNG(578 x 93)#
b24783023PNG(73 x 91)#
b30483056PNG(92 x 113)#
b3c383168PNG(110 x 137)#
b48982965PNG(190 x 27)#
b54303012PNG(238 x 33)#
b5ff83066PNG(285 x 41)#
b6bf83496PNG(296 x 242)#
b79a03871PNG(454 x 303)#
b88c04243PNG(545 x 363)#
b99583653PNG(296 x 308)#
ba7a04117PNG(454 x 385)#
bb7b84586PNG(545 x 461)#
bc9a83827PNG(363 x 342)#
bd8a04246PNG(454 x 428)#
be9384766PNG(545 x 513)#
bfbd82921PNG(34 x 27)#
c07482957PNG(43 x 33)#
c12d82993PNG(51 x 41)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER