filenamewinmine.exe
size119808 (0x1d400)
md516a4fd569a3eb5cebeb3da99ef1d17e1
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
001
6492101
10104
25921017
6991111
28917817
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3b7d8475
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x3c00
SizeOfInitializedData0x19400
SizeOfUninitializedData0
AddressOfEntryPoint0x3e21
BaseOfCode0x1000
BaseOfData0x5000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x20000
SizeOfHeaders0x400
CheckSum0x273c4
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x3a560x3c00R-X CODE
.data0x50000xb980x200RW- IDATA
.rsrc0x60000x191600x19200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x415c0xb4
RESOURCE0x60000x18ed4
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x11d00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2480xa8
IAT0x10000x1b8
Delay_IAT00
CLR_Header00
typenamesizecp
WAVE#43213601252
WAVE#433379601252
WAVE#434257111252
BITMAP#41021521252
BITMAP#41110721252
BITMAP#42023121252
BITMAP#42111521252
BITMAP#43015441252
BITMAP#4315281252
ICON#17441252
ICON#23041252
ICON#337521252
ICON#422161252
ICON#513841252
ICON#696401252
ICON#742641252
ICON#811281252
MENU#5003841252
DIALOG#803681252
DIALOG#6001441252
DIALOG#7004521252
STRING#12841252
ACCELERATORS#501161252
GROUP_ICON#1001181252
VERSION#19281252
MANIFEST#16611252
idlangstring
12052扫雷
32052扫雷错误
42052无法配置计时器。请关闭一些应用程序后再试一次。
52052内存不足
62052错误: %d
72052%d 秒
82052匿名
92052已破初级记录。 请留尊姓大名。
102052已破中级记录。 请留尊姓大名。
112052已破高级记录。 请留尊姓大名。
122052扫雷
132052by Robert Donner and Curt Johnson
module_namehintordfunction_name
msvcrt.dll214_controlfp
msvcrt.dll152__set_app_type
msvcrt.dll133__p__fmode
msvcrt.dll237_except_handler3
msvcrt.dll182_adjust_fdiv
msvcrt.dll154__setusermatherr
msvcrt.dll314_initterm
msvcrt.dll109__getmainargs
msvcrt.dll168_acmdln
msvcrt.dll655exit
msvcrt.dll128__p__commode
msvcrt.dll200_cexit
msvcrt.dll78_XcptFilter
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll762srand
msvcrt.dll748rand
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll461RegCreateKeyExW
ADVAPI32.dll456RegCloseKey
KERNEL32.dll215FindResourceW
KERNEL32.dll616OutputDebugStringA
KERNEL32.dll577LockResource
KERNEL32.dll563LoadResource
KERNEL32.dll927lstrlenW
KERNEL32.dll384GetPrivateProfileIntW
KERNEL32.dll390GetPrivateProfileStringW
KERNEL32.dll446GetTickCount
KERNEL32.dll357GetModuleFileNameA
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll393GetProcAddress
KERNEL32.dll921lstrcpyW
KERNEL32.dll558LoadLibraryA
GDI32.dll563SetROP2
GDI32.dll394GetLayout
GDI32.dll550SetLayout
GDI32.dll363GetDeviceCaps
GDI32.dll143DeleteObject
GDI32.dll459LineTo
GDI32.dll71CreatePen
GDI32.dll45CreateCompatibleDC
GDI32.dll44CreateCompatibleBitmap
GDI32.dll524SelectObject
GDI32.dll542SetDIBitsToDevice
GDI32.dll140DeleteDC
GDI32.dll463MoveToEx
GDI32.dll559SetPixel
GDI32.dll18BitBlt
GDI32.dll421GetStockObject
USER32.dll444LoadIconW
USER32.dll270GetDesktopWindow
USER32.dll634SetTimer
USER32.dll483MessageBoxW
USER32.dll442LoadCursorW
USER32.dll57CheckMenuItem
USER32.dll605SetMenu
USER32.dll274GetDlgItemInt
USER32.dll537RegisterClassW
USER32.dll457LoadStringW
USER32.dll454LoadMenuW
USER32.dll553ReleaseCapture
USER32.dll510PeekMessageW
USER32.dll471MapWindowPoints
USER32.dll580SetCapture
USER32.dll523PtInRect
USER32.dll723WinHelpW
USER32.dll594SetDlgItemInt
USER32.dll198EndDialog
USER32.dll596SetDlgItemTextW
USER32.dll729wsprintfW
USER32.dll576SendMessageW
USER32.dll273GetDlgItem
USER32.dll276GetDlgItemTextW
USER32.dll349GetSystemMetrics
USER32.dll403InvalidateRect
USER32.dll620SetRect
USER32.dll489MoveWindow
USER32.dll310GetMenuItemRect
USER32.dll159DialogBoxParamW
USER32.dll143DefWindowProcW
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll512PostMessageW
USER32.dll658ShowWindow
USER32.dll513PostQuitMessage
USER32.dll434KillTimer
USER32.dll200EndPaint
USER32.dll13BeginPaint
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll680TranslateAcceleratorW
USER32.dll318GetMessageW
USER32.dll699UpdateWindow
USER32.dll97CreateWindowExW
USER32.dll436LoadAcceleratorsW
SHELL32.dll148ShellAboutW
WINMM.dll11PlaySoundW
COMCTL32.dll76InitCommonControlsEx

StringTable 080404B0

CompanyNameMicrosoft Corporation
FileDescriptionEntertainment Pack Minesweeper Game
FileVersion5.1.2600.0 (xpclient.010817-1148)
InternalNamewinmine
LegalCopyright(C) Microsoft Corporation. All rights reserved.
OriginalFilenameWINMINE.EXE
ProductNameMicrosoft(R) Windows(R) Operating System
ProductVersion5.1.2600.0

VS_FIXEDFILEINFO

FileVersion5.1.2600.0
ProductVersion5.1.2600.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0119808EXE08/17/2001 20:54:13#
15c115HTM#
47ec1352WAV#
4d3c37952WAV#
e18425703WAV#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x248