s.dll - sol.exe - Пасьянс "Косынка"

info
MZ
PE
resources
strings
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	s.dll
size	60416 (0xec00)
md5	438efdf2b61b7fccef2f71460a4efe2e

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
0	0	1
64	9210	1
1	0	125
25	9210	17
69	9111	1
28	9178	20
61	9210	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x3b7d8480
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	7.0
SizeOfCode	0x5e00
SizeOfInitializedData	0x8a00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x5f85
BaseOfCode	0x1000
BaseOfData	0x7000
ImageBase	0x1000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	5.1
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x11000
SizeOfHeaders	0x400
CheckSum	0x115d0
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x5d2e	0x5e00	R-X CODE
.data	0x7000	0x38c	0x200	RW- IDATA
.rsrc	0x8000	0x9000	0x8800	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x62d8	0xb4
RESOURCE	0x8000	0x8778
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x1220	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0x258	0xa8
IAT	0x1000	0x208
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	3752	1252
ICON	#2	2216	1252
ICON	#3	1736	1252
ICON	#4	1384	1252
ICON	#5	9640	1252
ICON	#6	4264	1252
ICON	#7	2440	1252
ICON	#8	1128	1252
MENU	#1	384	1252
DIALOG	#101	488	1252
DIALOG	#102	296	1252
DIALOG	#103	776	1252
DIALOG	#999	1160	1252
STRING	#7	380	1252
STRING	#13	136	1252
STRING	#19	540	1252
STRING	#63	412	1252
STRING	#64	168	1252
STRING	#126	84	1252
STRING	#4095	232	1252
ACCELERATORS	HIDDENACCEL	16	1252
GROUP_ICON	#500	118	1252
VERSION	#1	880	1252
MANIFEST	#1	661	1252

id	lang	string
100	1049	Косынка
101	1049	Счет:
102	1049	Время:
103	1049	Количество сдаваемых карт
104	1049	Сдать заново?
105	1049	sol.chm
106	1049	Нажмите клавишу Esc или кнопку мыши для остановки...
107	1049	Премия:
108	1049	Эту программу для Microsoft разработал Уэс Черри
200	1049	Назад
201	1049	Параметры
202	1049	Точечный рисунок
203	1049	iCurrency
204	1049	sCurrency
205	1049	intl
300	1049	Недостаточно памяти
301	1049	Не удается загрузить программу справки Windows
302	1049	Не удается загрузить рисунок. Использовать зеленый фон?
303	1049	Недостаточно памяти для отображения карт при их перемещении. Установите флажок "Перетаскивание контура" с помощью команды Параметры.
1000	1049	Начало новой игры
1001	1049	Отмена последнего действия
1002	1049	Выбор новой рубашки для колоды
1003	1049	Смена параметров настройки
1004	1049	Выход из программы
1005	1049	Установка номера игры
1006	1049	Вывод числа карт в каждом столбце
1007	1049	Подтверждение сбоя
1008	1049	Не имею представления
1009	1049	Включить экранные эффекты
1010	1049	Принудительный выигрыш
2000	1049	Вывод сведений о программе
65506	1049	Вывод содержания встроенной справки
65507	1049	Поиск конкретного раздела справки
65508	1049	Сведения о пользовании справкой

module_name	hint	function_name
msvcrt.dll	237	_except_handler3
msvcrt.dll	214	_controlfp
msvcrt.dll	152	__set_app_type
msvcrt.dll	133	__p__fmode
msvcrt.dll	128	__p__commode
msvcrt.dll	182	_adjust_fdiv
msvcrt.dll	154	__setusermatherr
msvcrt.dll	314	_initterm
msvcrt.dll	109	__getmainargs
msvcrt.dll	168	_acmdln
msvcrt.dll	655	exit
msvcrt.dll	200	_cexit
msvcrt.dll	78	_XcptFilter
msvcrt.dll	246	_exit
msvcrt.dll	197	_c_exit
msvcrt.dll	748	rand
msvcrt.dll	790	time
msvcrt.dll	762	srand
ADVAPI32.dll	461	RegCreateKeyExW
ADVAPI32.dll	492	RegQueryValueExW
ADVAPI32.dll	481	RegOpenKeyExA
ADVAPI32.dll	491	RegQueryValueExA
ADVAPI32.dll	505	RegSetValueExW
ADVAPI32.dll	456	RegCloseKey
KERNEL32.dll	412	GetStartupInfoA
KERNEL32.dll	359	GetModuleHandleA
KERNEL32.dll	592	MulDiv
KERNEL32.dll	927	lstrlenW
KERNEL32.dll	568	LocalFree
KERNEL32.dll	564	LocalAlloc
KERNEL32.dll	254	GetCommandLineW
KERNEL32.dll	393	GetProcAddress
KERNEL32.dll	558	LoadLibraryA
GDI32.dll	570	SetTextColor
GDI32.dll	559	SetPixel
GDI32.dll	458	LineDDA
GDI32.dll	18	BitBlt
GDI32.dll	45	CreateCompatibleDC
GDI32.dll	421	GetStockObject
GDI32.dll	437	GetTextExtentPoint32W
GDI32.dll	62	CreateFontW
GDI32.dll	140	DeleteDC
GDI32.dll	589	TextOutW
GDI32.dll	495	PtVisible
GDI32.dll	535	SetBrushOrgEx
GDI32.dll	524	SelectObject
GDI32.dll	475	PatBlt
GDI32.dll	563	SetROP2
GDI32.dll	463	MoveToEx
GDI32.dll	459	LineTo
GDI32.dll	445	GetTextMetricsW
GDI32.dll	143	DeleteObject
GDI32.dll	80	CreateSolidBrush
GDI32.dll	363	GetDeviceCaps
GDI32.dll	44	CreateCompatibleBitmap
USER32.dll	598	SetFocus
USER32.dll	537	RegisterClassW
USER32.dll	74	CopyRect
USER32.dll	489	MoveWindow
USER32.dll	153	DestroyWindow
USER32.dll	346	GetSysColor
USER32.dll	200	EndPaint
USER32.dll	13	BeginPaint
USER32.dll	268	GetDC
USER32.dll	554	ReleaseDC
USER32.dll	403	InvalidateRect
USER32.dll	198	EndDialog
USER32.dll	270	GetDesktopWindow
USER32.dll	456	LoadStringA
USER32.dll	553	ReleaseCapture
USER32.dll	243	GetCapture
USER32.dll	580	SetCapture
USER32.dll	512	PostMessageW
USER32.dll	194	EnableMenuItem
USER32.dll	300	GetMenu
USER32.dll	143	DefWindowProcW
USER32.dll	654	ShowCursor
USER32.dll	513	PostQuitMessage
USER32.dll	434	KillTimer
USER32.dll	255	GetClientRect
USER32.dll	422	IsIconic
USER32.dll	436	LoadAcceleratorsW
USER32.dll	699	UpdateWindow
USER32.dll	658	ShowWindow
USER32.dll	634	SetTimer
USER32.dll	97	CreateWindowExW
USER32.dll	1	AdjustWindowRect
USER32.dll	536	RegisterClassExW
USER32.dll	446	LoadImageW
USER32.dll	444	LoadIconW
USER32.dll	552	RegisterWindowMessageW
USER32.dll	442	LoadCursorW
USER32.dll	162	DispatchMessageW
USER32.dll	682	TranslateMessage
USER32.dll	680	TranslateAcceleratorW
USER32.dll	318	GetMessageW
USER32.dll	405	InvertRect
USER32.dll	402	IntersectRect
USER32.dll	483	MessageBoxW
USER32.dll	457	LoadStringW
USER32.dll	591	SetCursorPos
USER32.dll	64	ClientToScreen
USER32.dll	289	GetKeyState
USER32.dll	523	PtInRect
USER32.dll	510	PeekMessageW
USER32.dll	490	MsgWaitForMultipleObjects
USER32.dll	191	DrawTextW
USER32.dll	723	WinHelpW
USER32.dll	56	CheckDlgButton
USER32.dll	419	IsDlgButtonChecked
USER32.dll	196	EnableWindow
USER32.dll	273	GetDlgItem
USER32.dll	59	CheckRadioButton
USER32.dll	159	DialogBoxParamW
USER32.dll	394	InflateRect
USER32.dll	233	FrameRect
CARDS.dll	3	cdtDrawExt
CARDS.dll	4	cdtInit
CARDS.dll	5	cdtTerm
CARDS.dll	2	cdtDraw
SHELL32.dll	148	ShellAboutW
COMCTL32.dll	76	InitCommonControlsEx

StringTable 041904B0

CompanyName	Корпорация Майкрософт
FileDescription	Пасьянс "Косынка"
FileVersion	5.1.2600.0 (xpclient.010817-1148)
InternalName	sol.exe
LegalCopyright	© Корпорация Майкрософт. Все права защищены.
OriginalFilename	sol.exe
ProductName	Операционная система Microsoft® Windows®
ProductVersion	5.1.2600.0

VS_FIXEDFILEINFO

FileVersion	5.1.2600.0
ProductVersion	5.1.2600.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	60416	EXE	08/17/2001 20:54:24	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x258

s.dll- sol.exe - Пасьянс "Косынка"

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 041904B0

VS_FIXEDFILEINFO

s.dll
- sol.exe - Пасьянс "Косынка"