OxygenNotIncluded.exe

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	OxygenNotIncluded.exe
size	648704 (0x9e600)
md5	339a6e4617c0d41cf8f2e8c4fd087bd8

type	PE32+ executable (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
241	40116	4
243	40116	120
242	40116	13
259	24123	7
261	24123	28
260	24123	18
257	24218	3
239	40116	2
1	0	86
261	24218	2
256	24218	1
255	24210	1
258	24218	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x5c0a4b75
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.0
SizeOfCode	0x9800
SizeOfInitializedData	0x95c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x125c
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0xa4000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x97d0	0x9800	R-X CODE
.rdata	0xb000	0x86fe	0x8800	R-- IDATA
.data	0x14000	0x1ba0	0xa00	RW- IDATA
.pdata	0x16000	0xba0	0xc00	R-- IDATA
.gfids	0x17000	0xa0	0x200	R-- IDATA
.rsrc	0x18000	0x8a0e0	0x8a200	R-- IDATA
.reloc	0xa3000	0x614	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x12f30	0x88
IMPORT	0x12fb8	0x3c
RESOURCE	0x18000	0x8a0e0
EXCEPTION	0x16000	0xba0
SECURITY	0	0
BASERELOC	0xa3000	0x614
DEBUG	0x12110	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x12170	0x94
Bound_IAT	0	0
IAT	0xb000	0x220
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	1128
ICON	#2	2440
ICON	#3	4264
ICON	#4	9640
ICON	#5	16936
ICON	#6	38056
ICON	#7	67624
ICON	#8	152104
ICON	#9	270376
GROUP_ICON	#103	132
VERSION	#1	456
MANIFEST	#1	1621

module_name	hint	function_name
UnityPlayer.dll		UnityMain
KERNEL32.dll	828	HeapAlloc
KERNEL32.dll	1103	RaiseException
KERNEL32.dll	1081	QueryPerformanceCounter
KERNEL32.dll	529	GetCurrentProcessId
KERNEL32.dll	533	GetCurrentThreadId
KERNEL32.dll	736	GetSystemTimeAsFileTime
KERNEL32.dll	857	InitializeSListHead
KERNEL32.dll	1210	RtlCaptureContext
KERNEL32.dll	1217	RtlLookupFunctionEntry
KERNEL32.dll	1224	RtlVirtualUnwind
KERNEL32.dll	879	IsDebuggerPresent
KERNEL32.dll	1441	UnhandledExceptionFilter
KERNEL32.dll	1377	SetUnhandledExceptionFilter
KERNEL32.dll	711	GetStartupInfoW
KERNEL32.dll	886	IsProcessorFeaturePresent
KERNEL32.dll	622	GetModuleHandleW
KERNEL32.dll	1223	RtlUnwindEx
KERNEL32.dll	599	GetLastError
KERNEL32.dll	1318	SetLastError
KERNEL32.dll	297	EnterCriticalSection
KERNEL32.dll	939	LeaveCriticalSection
KERNEL32.dll	261	DeleteCriticalSection
KERNEL32.dll	853	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1425	TlsAlloc
KERNEL32.dll	1427	TlsGetValue
KERNEL32.dll	1428	TlsSetValue
KERNEL32.dll	1426	TlsFree
KERNEL32.dll	420	FreeLibrary
KERNEL32.dll	677	GetProcAddress
KERNEL32.dll	945	LoadLibraryExW
KERNEL32.dll	713	GetStdHandle
KERNEL32.dll	1539	WriteFile
KERNEL32.dll	618	GetModuleFileNameW
KERNEL32.dll	987	MultiByteToWideChar
KERNEL32.dll	1519	WideCharToMultiByte
KERNEL32.dll	528	GetCurrentProcess
KERNEL32.dll	343	ExitProcess
KERNEL32.dll	1407	TerminateProcess
KERNEL32.dll	621	GetModuleHandleExW
KERNEL32.dll	427	GetACP
KERNEL32.dll	832	HeapFree
KERNEL32.dll	124	CloseHandle
KERNEL32.dll	366	FindClose
KERNEL32.dll	372	FindFirstFileExW
KERNEL32.dll	389	FindNextFileW
KERNEL32.dll	891	IsValidCodePage
KERNEL32.dll	654	GetOEMCP
KERNEL32.dll	442	GetCPInfo
KERNEL32.dll	463	GetCommandLineA
KERNEL32.dll	464	GetCommandLineW
KERNEL32.dll	559	GetEnvironmentStringsW
KERNEL32.dll	419	FreeEnvironmentStringsW
KERNEL32.dll	927	LCMapStringW
KERNEL32.dll	1342	SetStdHandle
KERNEL32.dll	582	GetFileType
KERNEL32.dll	718	GetStringTypeW
KERNEL32.dll	683	GetProcessHeap
KERNEL32.dll	837	HeapSize
KERNEL32.dll	835	HeapReAlloc
KERNEL32.dll	408	FlushFileBuffers
KERNEL32.dll	483	GetConsoleCP
KERNEL32.dll	501	GetConsoleMode
KERNEL32.dll	1304	SetFilePointerEx
KERNEL32.dll	1538	WriteConsoleW
KERNEL32.dll	192	CreateFileW

ord	entry_va	function_name
1	0x14004	AmdPowerXpressRequestHighPerformance
2	0x14000	NvOptimusEnablement

module_name	WindowsPlayer.exe
flags	0
timestamp	2018-12-07 10:29:09
version	0.0
ordinal_base	1
nFunctions	2
nNames	2
Names(2)	0x12f60
Functions(2)	0x12f58
NameOrdinals(2)	0x12f68

StringTable 040904b0

FileVersion	2018.2.20.13562854
ProductVersion	2018.2.20.13562854
Unity Version	2018.2.20f1_cef3e6c0c622

VS_FIXEDFILEINFO

FileVersion	2018.2.20.62438
ProductVersion	2018.2.20.62438
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	0
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	643120	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK