filenamesol.exe
size56832 (0xde00)
md5373e7a863a1a345c60edb9e20ec32311
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
001
6492101
10125
25921017
6991111
28917820
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3b7d8480
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x5e00
SizeOfInitializedData0x7e00
SizeOfUninitializedData0
AddressOfEntryPoint0x5f85
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x10000
SizeOfHeaders0x400
CheckSum0x13c40
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x5d2e0x5e00R-X CODE
.data0x70000x38c0x200RW- IDATA
.rsrc0x80000x78800x7a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x62d80xb4
RESOURCE0x80000x7880
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x12200x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2580xa8
IAT0x10000x208
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
ICON#22960
ICON#337520
ICON#422160
ICON#513840
ICON#696400
ICON#742640
ICON#811280
MENU#13140
DIALOG#1014900
DIALOG#1022620
DIALOG#1036700
DIALOG#9999340
STRING#72920
STRING#131100
STRING#194800
STRING#633300
STRING#641620
STRING#126620
STRING#40952080
ACCELERATORSHIDDENACCEL160
GROUP_ICON#5001180
VERSION#18800
MANIFEST#16610
idlangstring
1001033Solitaire
1011033Score:
1021033Time:
1031033CardDraw
1041033Deal Again?
1051033sol.chm
1061033Press Esc or a mouse button to stop...
1071033Bonus:
1081033Developed for Microsoft by Wes Cherry
2001033Back
2011033Options
2021033Bitmap
2031033iCurrency
2041033sCurrency
2051033intl
3001033Out of memory
3011033Unable load Windows Help application
3021033Unable to load bitmap; do you want to use a green background?
3031033Insufficient memory to display card faces when cards move; select the Outline dragging box from the Options menu.
10001033Deal a new game
10011033Undo last action
10021033Choose new deck back
10031033Change Solitaire options
10041033Exit Solitaire
10051033Set game number
10061033Print # of cards in each col
10071033Assertion failure
10081033Heck, I don't know
10091033Configure Solitaire for screen shots
10101033Force a win
20001033About Solitaire
655061033Index of Solitaire help topics
655071033Search the Help Engine for a specific topic
655081033Help using help
module_namehintordfunction_name
msvcrt.dll237_except_handler3
msvcrt.dll214_controlfp
msvcrt.dll152__set_app_type
msvcrt.dll133__p__fmode
msvcrt.dll128__p__commode
msvcrt.dll182_adjust_fdiv
msvcrt.dll154__setusermatherr
msvcrt.dll314_initterm
msvcrt.dll109__getmainargs
msvcrt.dll168_acmdln
msvcrt.dll655exit
msvcrt.dll200_cexit
msvcrt.dll78_XcptFilter
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll748rand
msvcrt.dll790time
msvcrt.dll762srand
ADVAPI32.dll461RegCreateKeyExW
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll456RegCloseKey
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll592MulDiv
KERNEL32.dll927lstrlenW
KERNEL32.dll568LocalFree
KERNEL32.dll564LocalAlloc
KERNEL32.dll254GetCommandLineW
KERNEL32.dll393GetProcAddress
KERNEL32.dll558LoadLibraryA
GDI32.dll570SetTextColor
GDI32.dll559SetPixel
GDI32.dll458LineDDA
GDI32.dll18BitBlt
GDI32.dll45CreateCompatibleDC
GDI32.dll421GetStockObject
GDI32.dll437GetTextExtentPoint32W
GDI32.dll62CreateFontW
GDI32.dll140DeleteDC
GDI32.dll589TextOutW
GDI32.dll495PtVisible
GDI32.dll535SetBrushOrgEx
GDI32.dll524SelectObject
GDI32.dll475PatBlt
GDI32.dll563SetROP2
GDI32.dll463MoveToEx
GDI32.dll459LineTo
GDI32.dll445GetTextMetricsW
GDI32.dll143DeleteObject
GDI32.dll80CreateSolidBrush
GDI32.dll363GetDeviceCaps
GDI32.dll44CreateCompatibleBitmap
USER32.dll598SetFocus
USER32.dll537RegisterClassW
USER32.dll74CopyRect
USER32.dll489MoveWindow
USER32.dll153DestroyWindow
USER32.dll346GetSysColor
USER32.dll200EndPaint
USER32.dll13BeginPaint
USER32.dll268GetDC
USER32.dll554ReleaseDC
USER32.dll403InvalidateRect
USER32.dll198EndDialog
USER32.dll270GetDesktopWindow
USER32.dll456LoadStringA
USER32.dll553ReleaseCapture
USER32.dll243GetCapture
USER32.dll580SetCapture
USER32.dll512PostMessageW
USER32.dll194EnableMenuItem
USER32.dll300GetMenu
USER32.dll143DefWindowProcW
USER32.dll654ShowCursor
USER32.dll513PostQuitMessage
USER32.dll434KillTimer
USER32.dll255GetClientRect
USER32.dll422IsIconic
USER32.dll436LoadAcceleratorsW
USER32.dll699UpdateWindow
USER32.dll658ShowWindow
USER32.dll634SetTimer
USER32.dll97CreateWindowExW
USER32.dll1AdjustWindowRect
USER32.dll536RegisterClassExW
USER32.dll446LoadImageW
USER32.dll444LoadIconW
USER32.dll552RegisterWindowMessageW
USER32.dll442LoadCursorW
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll680TranslateAcceleratorW
USER32.dll318GetMessageW
USER32.dll405InvertRect
USER32.dll402IntersectRect
USER32.dll483MessageBoxW
USER32.dll457LoadStringW
USER32.dll591SetCursorPos
USER32.dll64ClientToScreen
USER32.dll289GetKeyState
USER32.dll523PtInRect
USER32.dll510PeekMessageW
USER32.dll490MsgWaitForMultipleObjects
USER32.dll191DrawTextW
USER32.dll723WinHelpW
USER32.dll56CheckDlgButton
USER32.dll419IsDlgButtonChecked
USER32.dll196EnableWindow
USER32.dll273GetDlgItem
USER32.dll59CheckRadioButton
USER32.dll159DialogBoxParamW
USER32.dll394InflateRect
USER32.dll233FrameRect
CARDS.dll3cdtDrawExt
CARDS.dll4cdtInit
CARDS.dll5cdtTerm
CARDS.dll2cdtDraw
SHELL32.dll148ShellAboutW
COMCTL32.dll76InitCommonControlsEx

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionSolitaire Game Applet
FileVersion5.1.2600.0 (xpclient.010817-1148)
InternalNamesol.exe
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamesol.exe
ProductNameMicrosoft® Windows® Operating System
ProductVersion5.1.2600.0

VS_FIXEDFILEINFO

FileVersion5.1.2600.0
ProductVersion5.1.2600.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
056832EXE08/17/2001 20:54:24#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x258