filenamehell.EXE
size3174400 (0x307000)
md51630e7adea088e5433be1362e80b66ba
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: a5 c1 13 d9 e1 a0 7d 8a  e1 a0 7d 8a e1 a0 7d 8a  |......}...}...}.|
00000050: 2b 83 5a 8a e0 a0 7d 8a  1b 84 3d 8a f9 a0 7d 8a  |+.Z...}...=...}.|
00000060: 1b 84 61 8a 90 a0 7d 8a  1b 84 64 8a e7 a0 7d 8a  |..a...}...d...}.|
00000070: 1b 84 60 8a 5d a0 7d 8a  1b 83 64 8a ee a0 7d 8a  |..`.].}...d...}.|
00000080: e1 a0 7c 8a 52 a0 7d 8a  1b 84 51 8a ec a0 7d 8a  |..|.R.}...Q...}.|
00000090: 1b 84 38 8a e0 a0 7d 8a  1b 84 40 8a e0 a0 7d 8a  |..8...}...@...}.|
000000a0: 52 69 63 68 e1 a0 7d 8a  63 91 3f 50 63 91 3f 50  |Rich..}.c.?Pc.?P|
000000b0: 00 00 00 00 00 00 00 00                           |........        |

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xc
TimeDateStamp0x3e6f4855
PointerToSymbolTable0x43652354
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion83.82
SizeOfCode0x11000
SizeOfInitializedData0x105000
SizeOfUninitializedData0
AddressOfEntryPoint0x877db
BaseOfCode0x203000
BaseOfData0x223000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x348000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

namevavsizeraw sizeflags
.text0x10000xe30000xe2b3cR-X CODE
.rdata0xe40000x216840x21684RW- IDATA
.data0x1060000x219b40x16e1cRW- IDATA
.cms_t0x1280000x330000x31614RWX CODE
.cms_d0x15b0000x837920x83792RW- IDATA
.idata0x1df0000x6ab80x19f4RW- IDATA
.reloc0x1e60000x1c2b00x1c2b0R-- IDATA DISCARDABLE
.artbl0x2030000x200000x10178R-X CODE
.lox50x2230000x100000x5cdcRW- IDATA
.reloc10x2330000x100000xe98R-- IDATA DISCARDABLE
.pdata0x2430000x1000000xf7a80RW- IDATA
.rsrc0x3430000x50000x48ccR-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1044580xf0
RESOURCE0x3430000x48d0
EXCEPTION00
SECURITY00
BASERELOC0x2330000xe98
DEBUG0xe42a00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
CURSOR#83080
CURSOR#93080
CURSOR#103080
CURSOR#113080
CURSOR#123080
CURSOR#133080
CURSOR#143080
ICON#1532400
ICON#162960
ICON#1713840
ICON#187440
ICON#1922160
ICON#2032400
GROUP_CURSOR#115200
GROUP_CURSOR#119200
GROUP_CURSOR#120200
GROUP_CURSOR#121200
GROUP_CURSOR#123200
GROUP_CURSOR#124200
GROUP_CURSOR#125200
GROUP_CURSOR#127200
GROUP_CURSOR#138200
GROUP_CURSOR#139200
GROUP_CURSOR#140200
GROUP_CURSOR#141200
GROUP_CURSOR#142200
GROUP_CURSOR#147200
GROUP_ICON#126200
GROUP_ICON#133760
VERSION#17880
module_namehintordfunction_name
SHFOLDER.dllSHGetFolderPathA
KERNEL32.dll415GetStringTypeA
KERNEL32.dll418GetStringTypeW
KERNEL32.dll780SetStdHandle
KERNEL32.dll219FlushFileBuffers
KERNEL32.dll349GetLocaleInfoA
KERNEL32.dll526IsBadCodePtr
KERNEL32.dll529IsBadReadPtr
KERNEL32.dll489GlobalUnlock
KERNEL32.dll471GlobalAlloc
KERNEL32.dll482GlobalLock
KERNEL32.dll593MultiByteToWideChar
KERNEL32.dll446GetTickCount
KERNEL32.dll66CreateDirectoryA
KERNEL32.dll639QueryPerformanceFrequency
KERNEL32.dll638QueryPerformanceCounter
KERNEL32.dll380GetOEMCP
KERNEL32.dll231FreeResource
KERNEL32.dll577LockResource
KERNEL32.dll563LoadResource
KERNEL32.dll212FindResourceA
KERNEL32.dll44CloseHandle
KERNEL32.dll229FreeLibrary
KERNEL32.dll393GetProcAddress
KERNEL32.dll558LoadLibraryA
KERNEL32.dll456GetVersionExA
KERNEL32.dll873WideCharToMultiByte
KERNEL32.dll927lstrlenW
KERNEL32.dll346GetLastError
KERNEL32.dll97CreateSemaphoreA
KERNEL32.dll616OutputDebugStringA
KERNEL32.dll357GetModuleFileNameA
KERNEL32.dll483GlobalMemoryStatus
KERNEL32.dll861VirtualQuery
KERNEL32.dll424GetSystemInfo
KERNEL32.dll886WriteFile
KERNEL32.dll74CreateFileA
KERNEL32.dll753SetFilePointer
KERNEL32.dll656ReadFile
KERNEL32.dll333GetFileSize
KERNEL32.dll455GetVersion
KERNEL32.dll303GetCurrentProcess
KERNEL32.dll926lstrlenA
KERNEL32.dll856VirtualFree
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll70CreateEventA
KERNEL32.dll853VirtualAlloc
KERNEL32.dll101CreateThread
KERNEL32.dll514InitializeCriticalSection
KERNEL32.dll118DeleteCriticalSection
KERNEL32.dll139EnterCriticalSection
KERNEL32.dll557LeaveCriticalSection
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll253GetCommandLineA
KERNEL32.dll643RaiseException
KERNEL32.dll689RtlUnwind
KERNEL32.dll171ExitProcess
KERNEL32.dll495HeapAlloc
KERNEL32.dll501HeapFree
KERNEL32.dll505HeapReAlloc
KERNEL32.dll817TerminateProcess
KERNEL32.dll507HeapSize
KERNEL32.dll414GetStdHandle
KERNEL32.dll834UnhandledExceptionFilter
KERNEL32.dll227FreeEnvironmentStringsA
KERNEL32.dll319GetEnvironmentStrings
KERNEL32.dll228FreeEnvironmentStringsW
KERNEL32.dll321GetEnvironmentStringsW
KERNEL32.dll762SetHandleCount
KERNEL32.dll336GetFileType
KERNEL32.dll823TlsFree
KERNEL32.dll766SetLastError
KERNEL32.dll306GetCurrentThreadId
KERNEL32.dll825TlsSetValue
KERNEL32.dll824TlsGetValue
KERNEL32.dll822TlsAlloc
KERNEL32.dll499HeapDestroy
KERNEL32.dll497HeapCreate
KERNEL32.dll797SetUnhandledExceptionFilter
KERNEL32.dll304GetCurrentProcessId
KERNEL32.dll428GetSystemTimeAsFileTime
KERNEL32.dll50CompareStringA
KERNEL32.dll241GetCPInfo
KERNEL32.dll51CompareStringW
KERNEL32.dll859VirtualProtect
KERNEL32.dll544LCMapStringA
KERNEL32.dll545LCMapStringW
KERNEL32.dll532IsBadWritePtr
KERNEL32.dll235GetACP
USER32.dll66CloseClipboard
USER32.dll513PostQuitMessage
USER32.dll476MessageBoxA
USER32.dll193EmptyClipboard
USER32.dll499OpenClipboard
USER32.dll646SetWindowTextA
USER32.dll586SetClipboardData
USER32.dll647SetWindowTextW
USER32.dll161DispatchMessageA
USER32.dll509PeekMessageA
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll510PeekMessageW
USER32.dll720WaitMessage
USER32.dll96CreateWindowExA
USER32.dll658ShowWindow
USER32.dll97CreateWindowExW
USER32.dll142DefWindowProcA
USER32.dll143DefWindowProcW
USER32.dll728wsprintfA
USER32.dll534RegisterClassA
USER32.dll439LoadCursorA
USER32.dll537RegisterClassW
USER32.dll442LoadCursorW
USER32.dll277GetDoubleClickTime
USER32.dll654ShowCursor
USER32.dll471MapWindowPoints
USER32.dll267GetCursorPos
USER32.dll583SetClassLongA
USER32.dll445LoadImageA
USER32.dll26CallNextHookEx
USER32.dll242GetAsyncKeyState
USER32.dll686UnhookWindowsHookEx
USER32.dll650SetWindowsHookExA
USER32.dll589SetCursor
USER32.dll591SetCursorPos
USER32.dll255GetClientRect
USER32.dll640SetWindowLongA
USER32.dll641SetWindowLongW
USER32.dll1AdjustWindowRect
USER32.dll620SetRect
USER32.dll643SetWindowPos
USER32.dll599SetForegroundWindow
USER32.dll349GetSystemMetrics
USER32.dll709ValidateRect
Loader.dllclass core::ref<struct GameLoader, struct GameLoader> __cdecl createGameLoader(class core::in<struct GameFileSystem>, class core::in<struct LoadingScreen>)

?createGameLoader@@YA?AV?$ref@UGameLoader@@U1@@core@@V?$in@UGameFileSystem@@@2@V?$in@ULoadingScreen@@@2@@Z

Loader.dll1class core::ref<struct MsgList, struct MsgList> __cdecl createMsgList(void)

?createMsgList@@YA?AV?$ref@UMsgList@@U1@@core@@XZ

SFXEngine.dll1class core::ref<struct SFXEngine, struct SFXEngine> __cdecl createSFXEngine(void *, class core::in<struct GameFileSystem>)

?createSFXEngine@@YA?AV?$ref@USFXEngine@@U1@@core@@PAXV?$in@UGameFileSystem@@@2@@Z

GFXEngine.dllclass core::ref<struct FontMgr, struct FontMgr> __cdecl createFontMgr(class core::in<struct GameFileSystem>)

?createFontMgr@@YA?AV?$ref@UFontMgr@@U1@@core@@V?$in@UGameFileSystem@@@2@@Z

GFXEngine.dll4class core::ref<struct LoadingScreen, struct LoadingScreen> __cdecl createLoadingScreen(class core::in<struct video::Context>, class core::in<struct GameFileSystem>, class core::in<struct FontMgr>)

?createLoadingScreen@@YA?AV?$ref@ULoadingScreen@@U1@@core@@V?$in@UContext@video@@@2@V?$in@UGameFileSystem@@@2@V?$in@UFontMgr@@@2@@Z

GFXEngine.dll1class core::ref<struct GFXEngine, struct GFXEngine> __cdecl createGFXEngine(class core::in<struct video::Context>, class core::in<struct GameFileSystem>, class video::AbsRectangle const &, class core::in<struct SFXEngine>, class core::in<struct FontMgr>, class core::in<struct StringMgr>)

?createGFXEngine@@YA?AV?$ref@UGFXEngine@@U1@@core@@V?$in@UContext@video@@@2@V?$in@UGameFileSystem@@@2@ABVAbsRectangle@video@@V?$in@USFXEngine@@@2@V?$in@UFontMgr@@@2@V?$in@UStringMgr@@@2@@Z

GFXEngine.dll3class core::ref<struct gui::InGameGUI, struct gui::InGameGUI> __cdecl createInGameGUI(class core::in<struct gui::GUIEngine>)

?createInGameGUI@@YA?AV?$ref@UInGameGUI@gui@@U12@@core@@V?$in@UGUIEngine@gui@@@2@@Z

GFXEngine.dll2class core::ref<struct gui::GUIEngine, struct gui::GUIEngine> __cdecl createGUIEngine(class core::in<struct video::Context>, class core::in<struct GameFileSystem>, class core::in<struct FontMgr>, class core::in<struct SFXEngine>)

?createGUIEngine@@YA?AV?$ref@UGUIEngine@gui@@U12@@core@@V?$in@UContext@video@@@2@V?$in@UGameFileSystem@@@2@V?$in@UFontMgr@@@2@V?$in@USFXEngine@@@2@@Z

GFXEngine.dll5class core::ref<struct gui::MainMenuGUI, struct gui::MainMenuGUI> __cdecl createMainMenuGUI(class core::in<struct gui::GUIEngine>, enum gui::EMainMenuGameStateType, class core::in<struct core::String>, class core::in<struct UserData>, struct ApplicationVersionInfo)

?createMainMenuGUI@@YA?AV?$ref@UMainMenuGUI@gui@@U12@@core@@V?$in@UGUIEngine@gui@@@2@W4EMainMenuGameStateType@gui@@V?$in@UString@core@@@2@V?$in@UUserData@@@2@UApplicationVersionInfo@@@Z

WINMM.dll163timeGetTime
AVIFIL32.dll14AVIFileInit
AVIFIL32.dll16AVIFileOpenA
AVIFIL32.dll6AVIFileCreateStreamA
AVIFIL32.dll28AVISaveOptions
AVIFIL32.dll29AVISaveOptionsFree
AVIFIL32.dll22AVIMakeCompressedStream
AVIFIL32.dll54AVIStreamSetFormat
AVIFIL32.dll52AVIStreamRelease
AVIFIL32.dll19AVIFileRelease
AVIFIL32.dll9AVIFileExit
AVIFIL32.dll57AVIStreamWrite
MSVFW32.dll2

StringTable 0c0704b0

CompanyNameJoWooD Studio Vienna
FileDescriptiongame Application
FileVersion1, 0, 0, 78
InternalNamegame
LegalCopyrightCopyright (C) 2002 JoWooD Software Productions AG
OriginalFilenamegame.exe
ProductNameBöse Nachbarn
ProductVersion0, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion1.0.0.78
ProductVersion0.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
03172556EXE03/12/2003 14:46:45#
15c115HTM#
14fe389GIF(220 x 59)#
1a3ba49GIF(220 x 59)#
1a4a2c1358GIF(165 x 75)#
1a4f8c902GIF(101 x 52)#
1a53241138GIF(65 x 35)#
3068cc1844BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 3174400 bytes (3100 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[!] non-zero dos stub after rich_hdr: "c\x91?Pc\x91?P\x00\x00\x00\x00\x00\x00\x00\x00"