filenameMISE.exe
size1007616 (0xf6000)
md5ceadc3c616aec6acd41223d8963861af
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

DOS stub

00000000: 56 4c 56 00 01 00 00 00  00 c0 14 00 a9 bf 57 4a  |VLV...........WJ|
00000010: 19 7e ae 32 0c 6d e6 13  2f b2 5f a8 00 1c 3f da  |.~.2.m../._...?.|
00000020: b3 2b 54 38 cf 24 dc 27  17 e4 30 34 f3 45 c5 65  |.+T8.$.'..04.E.e|
00000030: ee a6 0c 49 1e d3 2d cc  5f ea 94 17 fb e1 50 3c  |...I..-._.....P<|
00000040: fd b5 60 41 ba d3 eb 78  e7 2a 3c 16 c4 cf 97 19  |..`A...x.*<.....|
00000050: 54 04 15 96 02 70 bd 8d  75 7c 68 ca 9e 86 bd 03  |T....p..u|h.....|
00000060: 69 74 2b e5 12 38 d2 74  ca 02 27 34 83 1e d0 1d  |it+..8.t..'4....|
00000070: 61 e9 be 3e 39 63 31 dc  6b f8 63 e3 65 73 73 49  |a..>9c1.k.c.essI|
00000080: 75 52 d0 b9 90 4f d5 f8  83 18 18 e4 92 18 f5 25  |uR...O.........%|
00000090: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0: 00 00 00 00 00 00 00 00                           |........        |

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4a54812f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0xd9000
SizeOfInitializedData0x1c000
SizeOfUninitializedData0
AddressOfEntryPoint0xd5078
BaseOfCode0x1000
BaseOfData0xda000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1cc000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000xd8cf70xd9000R-X CODE
.rdata0xda0000x144040x15000R-- IDATA
.data0xef0000xd703c0x2000RW- IDATA
.rsrc0x1c70000x475c0x5000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xed22c0xf0
RESOURCE0x1c70000x475c
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0xdaea00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xed0580x40
Bound_IAT00
IAT0xda0000x324
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#1169361252
GROUP_ICON#102201252
VERSION#16661252
MANIFEST#13401252
module_namehintordfunction_name
X3DAudio1_6.dllX3DAudioCalculate
X3DAudio1_6.dll1X3DAudioInitialize
XINPUT1_3.dll2
XINPUT1_3.dll4
KERNEL32.dll417GetProcessAffinityMask
KERNEL32.dll475GetThreadPriority
KERNEL32.dll406GetPrivateProfileIntA
KERNEL32.dll937WritePrivateProfileStringA
KERNEL32.dll412GetPrivateProfileStringA
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll75CreateDirectoryA
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll83CreateFileA
KERNEL32.dll52CloseHandle
KERNEL32.dll355GetFileSize
KERNEL32.dll693ReadFile
KERNEL32.dll854Sleep
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll479GetTickCount
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll484GetUserDefaultLangID
KERNEL32.dll325GetCurrentThread
KERNEL32.dll831SetThreadAffinityMask
KERNEL32.dll836SetThreadPriority
KERNEL32.dll719ResetEvent
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll79CreateEventA
KERNEL32.dll855SleepEx
KERNEL32.dll913WaitForSingleObjectEx
KERNEL32.dll111CreateThread
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll862TerminateProcess
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll857SwitchToFiber
KERNEL32.dll64ConvertFiberToThread
KERNEL32.dll65ConvertThreadToFiber
KERNEL32.dll130DeleteFiber
KERNEL32.dll81CreateFiber
KERNEL32.dll453GetSystemInfo
KERNEL32.dll517GlobalMemoryStatusEx
KERNEL32.dll904VirtualQuery
KERNEL32.dll899VirtualFree
KERNEL32.dll897VirtualAlloc
KERNEL32.dll706ReleaseMutex
KERNEL32.dll96CreateMutexA
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll147DuplicateHandle
KERNEL32.dll790SetEvent
KERNEL32.dll707ReleaseSemaphore
KERNEL32.dll369GetLastError
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll784SetEndOfFile
KERNEL32.dll795SetFilePointer
KERNEL32.dll932WriteFile
KERNEL32.dll870TlsSetValue
KERNEL32.dll869TlsGetValue
KERNEL32.dll868TlsFree
KERNEL32.dll867TlsAlloc
KERNEL32.dll679RaiseException
KERNEL32.dll550InterlockedCompareExchange
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll554InterlockedExchangeAdd
KERNEL32.dll553InterlockedExchange
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll676QueryPerformanceFrequency
KERNEL32.dll107CreateSemaphoreA
USER32.dll153DestroyWindow
USER32.dll654ShowCursor
USER32.dll270GetDesktopWindow
USER32.dll372GetWindowRect
USER32.dll255GetClientRect
USER32.dll643SetWindowPos
USER32.dll470MapVirtualKeyA
USER32.dll479MessageBoxA
USER32.dll422IsIconic
USER32.dll516PostQuitMessage
USER32.dll26CallNextHookEx
USER32.dll691UnregisterClassA
USER32.dll589SetCursor
USER32.dll700UpdateWindow
USER32.dll658ShowWindow
USER32.dll96CreateWindowExA
USER32.dll535RegisterClassExA
USER32.dll442LoadCursorA
USER32.dll446LoadIconA
USER32.dll242GetAsyncKeyState
USER32.dll142DefWindowProcA
USER32.dll161DispatchMessageA
USER32.dll682TranslateMessage
USER32.dll512PeekMessageA
USER32.dll289GetKeyState
USER32.dll366GetWindowLongA
USER32.dll650SetWindowsHookExA
USER32.dll686UnhookWindowsHookEx
USER32.dll278GetFocus
USER32.dll2AdjustWindowRectEx
ADVAPI32.dll503RegQueryValueExA
ADVAPI32.dll492RegOpenKeyExA
ADVAPI32.dll459RegCloseKey
SHELL32.dll175SHGetFolderPathA
ole32.dll16CoCreateInstance
ole32.dll60CoInitializeEx
d3d9.dll9Direct3DCreate9
d3dx9_41.dll48D3DXCreateEffect
MSVCP80.dll852public: __thiscall std::locale::id::operator unsigned int(void)

??Bid@locale@std@@QAEIXZ

MSVCP80.dll1219public: class std::locale::facet const * __thiscall std::locale::_Getfacet(unsigned int)const

?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z

MSVCP80.dll1268public: void __thiscall std::locale::facet::_Incref(void)

?_Incref@facet@locale@std@@QAEXXZ

MSVCP80.dll658public: __thiscall std::_Lockit::~_Lockit(void)

??1_Lockit@std@@QAE@XZ

MSVCP80.dll1442public: void __thiscall std::locale::facet::_Register(void)

?_Register@facet@locale@std@@QAEXXZ

MSVCP80.dll1180public: static unsigned int __cdecl std::ctype<char>::_Getcat(class std::locale::facet const * *)

?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z

MSVCP80.dll2211public: static class std::locale::id std::ctype<char>::id

?id@?$ctype@D@std@@2V0locale@2@A

MSVCP80.dll1589public: static class std::locale const & __cdecl std::locale::classic(void)

?classic@locale@std@@SAABV12@XZ

MSVCP80.dll3015public: char const * __thiscall std::ctype<char>::tolower(char *, char const *)const

?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z

MSVCP80.dll539public: __thiscall std::_Lockit::_Lockit(int)

??0_Lockit@std@@QAE@H@Z

MSVCR80.dll983_time64
MSVCR80.dll1268free
MSVCR80.dll946_strnicmp
MSVCR80.dll936_stricmp
MSVCR80.dll1386strncmp
MSVCR80.dll1323malloc
MSVCR80.dll277_aligned_free
MSVCR80.dll278_aligned_malloc
MSVCR80.dll534_invalid_parameter_noinfo
MSVCR80.dll1221abort
MSVCR80.dll259_access
MSVCR80.dll1393strstr
MSVCR80.dll1342printf
MSVCR80.dll1244exit
MSVCR80.dll1231atoi
MSVCR80.dll82_CIlog
MSVCR80.dll1009_unlink
MSVCR80.dll1336memmove
MSVCR80.dll164__iob_func
MSVCR80.dll1260fprintf
MSVCR80.dll1011_unlock
MSVCR80.dll1300isspace
MSVCR80.dll370_encode_pointer
MSVCR80.dll642_lock
MSVCR80.dll808_onexit
MSVCR80.dll360_decode_pointer
MSVCR80.dll1047_vsnprintf
MSVCR80.dll285_amsg_exit
MSVCR80.dll162__getmainargs
MSVCR80.dll308_cexit
MSVCR80.dll388_exit
MSVCR80.dll105_XcptFilter
MSVCR80.dll561_ismbblead
MSVCR80.dll261_acmdln
MSVCR80.dll528_initterm
MSVCR80.dll529_initterm_e
MSVCR80.dll324_configthreadlocale
MSVCR80.dll235__setusermatherr
MSVCR80.dll275_adjust_fdiv
MSVCR80.dll206__p__commode
MSVCR80.dll210__p__fmode
MSVCR80.dll232__set_app_type
MSVCR80.dll44public: char const * __thiscall type_info::_name_internal_method(struct __type_info_node *)const

?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z

MSVCR80.dll379_except_handler4_common
MSVCR80.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR80.dll535_invoke_watson
MSVCR80.dll327_controlfp_s
MSVCR80.dll54public: void __thiscall type_info::_type_info_dtor_internal_method(void)

?_type_info_dtor_internal_method@type_info@@QAEXXZ

MSVCR80.dll339_crt_debugger_hook
MSVCR80.dll1352rand
MSVCR80.dll640_localtime64
MSVCR80.dll825_purecall
MSVCR80.dll1337memmove_s
MSVCR80.dll1387strncpy
MSVCR80.dll1422vsprintf
MSVCR80.dll1370sscanf
MSVCR80.dll153__dllonexit
MSVCR80.dll887_snprintf
MSVCR80.dll1266fread
MSVCR80.dll1394strtod
MSVCR80.dll1338memset
MSVCR80.dll1334memcpy
MSVCR80.dll84_CIpow
MSVCR80.dll378_except_handler3
MSVCR80.dll78_CIcos
MSVCR80.dll77_CIatan2
MSVCR80.dll85_CIsin
MSVCR80.dll881_setjmp3
MSVCR80.dll1366sprintf
MSVCR80.dll1322longjmp

StringTable 040904b0

CompanyNameLucasfilm
ConfigurationRetail
FileDescriptionMonkey Island 1
FileVersion0708.C417756.A384207
InternalNameMonkey1
OriginalNameMonkey1
PlatformWindows
ProductNameMonkey1
ProductVersion0708.C417756.A384207

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType7
FileSubtype0
offsetsizetypecomment
01007616EXE07/08/2009 11:21:19#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] invalid VS_VERSIONINFO child type "bly xm"