CirclePuzzles_2011_11

info
MZ
PE
resources
exports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	CirclePuzzles_2011_11_04.exe
size	940073 (0xe5829)
md5	76ca7f6de4507542f785e3f154a0d428

type	MS-DOS executable PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x454b
blocks_in_file	0x4e52
num_relocs	0x4c45
header_paragraphs	0x3233
min_extra_paragraphs	0x442e
max_extra_paragraphs	0x4c4c
ss	0
sp	0x4550
checksum	0
ip	0x14c
cs	3
reloc_table_offset	0xb0be
overlay_number	0x4011
reserved0	0x7ceb3476ff50ad00
oem_id	0x148
oem_info	0x103
reserved2	0x6f4c010b
reserved3	0x694c6461
reserved4	0x72617262
reserved5	0x4179
reserved6	0x1018
lfanew	0x10

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4011b0be
PointerToSymbolTable	0xff50ad00
NumberOfSymbols	0x7ceb3476
SizeOfOptionalHeader	0x148
Characteristics	0x103
Magic	0x10b
LinkerVersion	76.111
SizeOfCode	0x694c6461
SizeOfInitializedData	0x72617262
SizeOfUninitializedData	0x4179
AddressOfEntryPoint	0x1018
BaseOfCode	0x10
BaseOfData	0xf000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.57
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x51000
SizeOfHeaders	0x200
CheckSum	0
Subsystem	2
DllCharacteristics	0x8500
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0xa

Packer / Compiler

Upack v0.36 (Dwing)

Sections

name	va	vsize	raw size	flags
PS��	0x1000	0x3d000	0x1f0	RWX CODE IDATA
@�D	0x3e000	0x12000	0xa0c8	RWX CODE IDATA
��C�@	0x50000	0x1000	0x1f0	RWX CODE IDATA

Data Directory

type	va	size
EXPORT	0x47f0d	0x28
IMPORT	0x501ee	0x14
RESOURCE	0x3e000	0x1cd0
EXCEPTION	0xad3876ff	0xbe3e8b50
SECURITY	0x4500f0	0xf359276a
BASERELOC	0x476ffa5	0x8bffc883
DEBUG	0x1cebabdf	0
ARCHITECTURE	0x50746547	0x41636f72
GLOBALPTR	0x65726464	0x7373
TLS	0	0

show previews

type	name	size
BITMAP	#101	2998
ICON	#1	296
ICON	#2	1384
ICON	#3	744
ICON	#4	2216
DIALOG	ASKNEXTVOL	646
DIALOG	GETPASSWORD1	314
DIALOG	LICENSEDLG	236
DIALOG	RENAMEDLG	302
DIALOG	REPLACEFILEDLG	824
DIALOG	STARTDLG	594
STRING	#7	556
STRING	#8	974
STRING	#9	530
STRING	#10	776
STRING	#11	380
STRING	#12	102
GROUP_ICON	#100	62
MANIFEST	#1	1464

ord	entry_va	function_name

module_name
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	0
nNames	0
Names(0)	0x47f35
Functions(0)	0x47f35
NameOrdinals(0)	0x47f35

show previews

offset	size	type	comment
15c1	15	HTM		#
a2c8	898401	JAR		#

Scanning the drive for archives:
1 file, 940073 bytes (919 KiB)


--
Type = zip
Offset = 41672
Physical Size = 898401

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2011-11-04 10:59:14 D....            0            0  CirclePuzzles_2011_11_04
2011-08-24 17:01:06 ....A        13985        13934  CirclePuzzles_2011_11_04/Bermuda.gif
2011-08-24 17:39:42 ....A         7996         2166  CirclePuzzles_2011_11_04/Bermuda.htm
2011-06-15 22:43:20 ....A        38300        37961  CirclePuzzles_2011_11_04/BMDmfPlay.jar
2011-08-22 00:01:16 ....A        12565        12461  CirclePuzzles_2011_11_04/CircleCubes.gif
2011-08-24 17:19:22 ....A        11444         2774  CirclePuzzles_2011_11_04/CircleCubes.htm
2011-01-30 21:33:04 ....A        33566        33172  CirclePuzzles_2011_11_04/CircleCubes.jar
2011-08-24 17:05:30 ....A        15448        15364  CirclePuzzles_2011_11_04/CircleDayanGem.gif
2011-08-24 22:26:08 ....A         8206         2445  CirclePuzzles_2011_11_04/CircleDayanGem.htm
2011-08-14 20:48:24 ....A        37528        37201  CirclePuzzles_2011_11_04/CircleDayanGem.jar
2011-02-27 17:15:52 ....A        17361        17250  CirclePuzzles_2011_11_04/CircleDodecahedra.gif
2011-08-24 17:21:38 ....A         9399         2669  CirclePuzzles_2011_11_04/CircleDodecahedra.htm
2011-01-30 21:35:42 ....A        41785        41439  CirclePuzzles_2011_11_04/CircleDodecahedra.jar
2011-08-21 23:13:50 ....A        11824        11762  CirclePuzzles_2011_11_04/CircleOctahedra.gif
2011-08-25 11:56:10 ....A         8968         2569  CirclePuzzles_2011_11_04/CircleOctahedra.htm
2011-08-21 16:57:06 ....A        37340        36946  CirclePuzzles_2011_11_04/CircleOctahedra.jar
2011-07-21 19:50:24 ....A        11968        11929  CirclePuzzles_2011_11_04/CircleTetrahedra.gif
2011-08-24 22:14:48 ....A         6831         2166  CirclePuzzles_2011_11_04/CircleTetrahedra.htm
2011-07-23 21:36:04 ....A        33981        33617  CirclePuzzles_2011_11_04/CircleTetrahedra.jar
2011-07-20 13:35:06 ....A       119391        96777  CirclePuzzles_2011_11_04/crazytetrahedron.jpg
2011-08-12 16:53:08 ....A         8169         2629  CirclePuzzles_2011_11_04/DBSMZM.htm
2011-08-14 20:48:24 ....A        37528        37201  CirclePuzzles_2011_11_04/DBSMZMPlay.jar
2011-02-27 17:16:20 ....A        16233        16093  CirclePuzzles_2011_11_04/DoubleCircle.gif
2011-08-24 17:20:08 ....A         9470         2630  CirclePuzzles_2011_11_04/DoubleCircle.htm
2011-02-11 21:16:20 ....A        57104        56811  CirclePuzzles_2011_11_04/DoubleCircle.jar
2011-08-24 17:09:22 ....A         2290          804  CirclePuzzles_2011_11_04/index.htm
2011-08-25 11:57:48 ....A         6797         2771  CirclePuzzles_2011_11_04/intro.txt
2011-01-30 18:53:36 ....A       133428       133453  CirclePuzzles_2011_11_04/notations.PNG
2011-01-30 20:04:18 ....A        49062        47702  CirclePuzzles_2011_11_04/screenshot1.png
2011-01-30 20:04:44 ....A        84449        83721  CirclePuzzles_2011_11_04/screenshot2.png
2011-01-30 20:04:32 ....A        95745        95092  CirclePuzzles_2011_11_04/screenshot3.png
------------------- ----- ------------ ------------  ------------------------
2011-11-04 10:59:14             978161       893509  30 files, 1 folders

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] unusual size of IMAGE_OPTIONAL_HEADER = 328 (must be 224)

[?] 104 spare bytes after IMAGE_OPTIONAL_HEADER

[?] invalid DOS stub size -205600

[?] can't find file_offset of VA 0x39720

[?] can't find file_offset of VA 0x3abc8

[?] can't find file_offset of VA 0x3a998

[?] can't find file_offset of VA 0x3aad8

[?] can't find file_offset of VA 0x3a868

[?] can't find file_offset of VA 0x3a530

[?] can't find file_offset of VA 0x3a2d8

[?] can't find file_offset of VA 0x3b408

[?] can't find file_offset of VA 0x3b638

[?] can't find file_offset of VA 0x3ba08

[?] can't find file_offset of VA 0x3bc20

[?] can't find file_offset of VA 0x3bf28

[?] can't find file_offset of VA 0x3c0a8

[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=4584, TimeDateStamp=0, ForwarderChain=0, Name=0, FirstThunk=131078, module_name=nil, original_first_thunk=nil, first_thunk=nil>

[?] invalid DOS stub size -205600

[?] can't find file_offset of VA 0xad3876ff

[?] can't find file_offset of VA 0x476ffa5

[?] can't find file_offset of VA 0x1cebabdf

[?] can't find file_offset of VA 0x50746547

[?] can't find file_offset of VA 0x65726464

CirclePuzzles_2011_11_04.exe

MZ Header

PE Header

Packer / Compiler

Sections

Data Directory