filenames.dll
size60416 (0xec00)
md5438efdf2b61b7fccef2f71460a4efe2e
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
001
6492101
10125
25921017
6991111
28917820
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3b7d8480
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x5e00
SizeOfInitializedData0x8a00
SizeOfUninitializedData0
AddressOfEntryPoint0x5f85
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0x115d0
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x5d2e0x5e00R-X CODE
.data0x70000x38c0x200RW- IDATA
.rsrc0x80000x90000x8800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x62d80xb4
RESOURCE0x80000x8778
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x12200x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2580xa8
IAT0x10000x208
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#137521252
ICON#222161252
ICON#317361252
ICON#413841252
ICON#596401252
ICON#642641252
ICON#724401252
ICON#811281252
MENU#13841252
DIALOG#1014881252
DIALOG#1022961252
DIALOG#1037761252
DIALOG#99911601252
STRING#73801252
STRING#131361252
STRING#195401252
STRING#634121252
STRING#641681252
STRING#126841252
STRING#40952321252
ACCELERATORSHIDDENACCEL161252
GROUP_ICON#5001181252
VERSION#18801252
MANIFEST#16611252
idlangstring
1001049Косынка
1011049Счет:
1021049Время:
1031049Количество сдаваемых карт
1041049Сдать заново?
1051049sol.chm
1061049Нажмите клавишу Esc или кнопку мыши для остановки...
1071049Премия:
1081049Эту программу для Microsoft разработал Уэс Черри
2001049Назад
2011049Параметры
2021049Точечный рисунок
2031049iCurrency
2041049sCurrency
2051049intl
3001049Недостаточно памяти
3011049Не удается загрузить программу справки Windows
3021049Не удается загрузить рисунок. Использовать зеленый фон?
3031049Недостаточно памяти для отображения карт при их перемещении. Установите флажок "Перетаскивание контура" с помощью команды Параметры.
10001049Начало новой игры
10011049Отмена последнего действия
10021049Выбор новой рубашки для колоды
10031049Смена параметров настройки
10041049Выход из программы
10051049Установка номера игры
10061049Вывод числа карт в каждом столбце
10071049Подтверждение сбоя
10081049Не имею представления
10091049Включить экранные эффекты
10101049Принудительный выигрыш
20001049Вывод сведений о программе
655061049Вывод содержания встроенной справки
655071049Поиск конкретного раздела справки
655081049Сведения о пользовании справкой
module_namehintordfunction_name
msvcrt.dll237_except_handler3
msvcrt.dll214_controlfp
msvcrt.dll152__set_app_type
msvcrt.dll133__p__fmode
msvcrt.dll128__p__commode
msvcrt.dll182_adjust_fdiv
msvcrt.dll154__setusermatherr
msvcrt.dll314_initterm
msvcrt.dll109__getmainargs
msvcrt.dll168_acmdln
msvcrt.dll655exit
msvcrt.dll200_cexit
msvcrt.dll78_XcptFilter
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll748rand
msvcrt.dll790time
msvcrt.dll762srand
ADVAPI32.dll461RegCreateKeyExW
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll456RegCloseKey
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll592MulDiv
KERNEL32.dll927lstrlenW
KERNEL32.dll568LocalFree
KERNEL32.dll564LocalAlloc
KERNEL32.dll254GetCommandLineW
KERNEL32.dll393GetProcAddress
KERNEL32.dll558LoadLibraryA
GDI32.dll570SetTextColor
GDI32.dll559SetPixel
GDI32.dll458LineDDA
GDI32.dll18BitBlt
GDI32.dll45CreateCompatibleDC
GDI32.dll421GetStockObject
GDI32.dll437GetTextExtentPoint32W
GDI32.dll62CreateFontW
GDI32.dll140DeleteDC
GDI32.dll589TextOutW
GDI32.dll495PtVisible
GDI32.dll535SetBrushOrgEx
GDI32.dll524SelectObject
GDI32.dll475PatBlt
GDI32.dll563SetROP2
GDI32.dll463MoveToEx
GDI32.dll459LineTo
GDI32.dll445GetTextMetricsW
GDI32.dll143DeleteObject
GDI32.dll80CreateSolidBrush
GDI32.dll363GetDeviceCaps
GDI32.dll44CreateCompatibleBitmap
USER32.dll598SetFocus
USER32.dll537RegisterClassW
USER32.dll74CopyRect
USER32.dll489MoveWindow
USER32.dll153DestroyWindow
USER32.dll346GetSysColor
USER32.dll200EndPaint
USER32.dll13BeginPaint
USER32.dll268GetDC
USER32.dll554ReleaseDC
USER32.dll403InvalidateRect
USER32.dll198EndDialog
USER32.dll270GetDesktopWindow
USER32.dll456LoadStringA
USER32.dll553ReleaseCapture
USER32.dll243GetCapture
USER32.dll580SetCapture
USER32.dll512PostMessageW
USER32.dll194EnableMenuItem
USER32.dll300GetMenu
USER32.dll143DefWindowProcW
USER32.dll654ShowCursor
USER32.dll513PostQuitMessage
USER32.dll434KillTimer
USER32.dll255GetClientRect
USER32.dll422IsIconic
USER32.dll436LoadAcceleratorsW
USER32.dll699UpdateWindow
USER32.dll658ShowWindow
USER32.dll634SetTimer
USER32.dll97CreateWindowExW
USER32.dll1AdjustWindowRect
USER32.dll536RegisterClassExW
USER32.dll446LoadImageW
USER32.dll444LoadIconW
USER32.dll552RegisterWindowMessageW
USER32.dll442LoadCursorW
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll680TranslateAcceleratorW
USER32.dll318GetMessageW
USER32.dll405InvertRect
USER32.dll402IntersectRect
USER32.dll483MessageBoxW
USER32.dll457LoadStringW
USER32.dll591SetCursorPos
USER32.dll64ClientToScreen
USER32.dll289GetKeyState
USER32.dll523PtInRect
USER32.dll510PeekMessageW
USER32.dll490MsgWaitForMultipleObjects
USER32.dll191DrawTextW
USER32.dll723WinHelpW
USER32.dll56CheckDlgButton
USER32.dll419IsDlgButtonChecked
USER32.dll196EnableWindow
USER32.dll273GetDlgItem
USER32.dll59CheckRadioButton
USER32.dll159DialogBoxParamW
USER32.dll394InflateRect
USER32.dll233FrameRect
CARDS.dll3cdtDrawExt
CARDS.dll4cdtInit
CARDS.dll5cdtTerm
CARDS.dll2cdtDraw
SHELL32.dll148ShellAboutW
COMCTL32.dll76InitCommonControlsEx

StringTable 041904B0

CompanyNameКорпорация Майкрософт
FileDescriptionПасьянс "Косынка"
FileVersion5.1.2600.0 (xpclient.010817-1148)
InternalNamesol.exe
LegalCopyright© Корпорация Майкрософт. Все права защищены.
OriginalFilenamesol.exe
ProductNameОперационная система Microsoft® Windows®
ProductVersion5.1.2600.0

VS_FIXEDFILEINFO

FileVersion5.1.2600.0
ProductVersion5.1.2600.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
060416EXE08/17/2001 20:54:24#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x258