filenamefreecell.exe
size55296 (0xd800)
md54d9b5e540158bf8e9b1bcac1aedd8c60
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
001
6492101
10119
25921017
6991111
28917818
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3b7d8476
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x5200
SizeOfInitializedData0x9400
SizeOfUninitializedData0
AddressOfEntryPoint0x5438
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0x1c45f
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x517a0x5200R-X CODE
.data0x70000x138c0x200RW- IDATA
.rsrc0x90000x7f100x8000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x57800xb4
RESOURCE0x90000x7f10
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x12100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT0x2500xa8
IAT0x10000x1f4
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#93080
BITMAPKINGBITMAP6160
BITMAPKINGLEFT6160
BITMAPKINGSMILE6160
ICON#13040
ICON#27440
ICON#337520
ICON#422160
ICON#513840
ICON#696400
ICON#742640
ICON#811280
MENUFREEMENU4300
DIALOGGAMENUM2620
DIALOGMOVECOL2500
DIALOGSTATS2460
DIALOGYOULOSE3580
DIALOGYOUWIN3260
DIALOG#5054320
STRING#191060
STRING#207520
STRING#212040
ACCELERATORSFREEMENU640
GROUP_CURSORDOWNARROW200
GROUP_ICON#6011180
VERSION#19120
MANIFEST#16590
idlangstring
3011033FreeCell
3021033by Jim Horne
3031033FreeCell Game #%d
3041033Out of memory. Close other applications and try again.
3051033Do you want to resign this game?
3061033That move is not allowed.
3071033That move requires moving %u cards.You only have enough free space to move %u.
3081033Cards Left: %u
3091033Are you sure you want to delete all statistics?
31010331 win
31110331 loss
3121033%u wins
3131033%u losses
3141033How to Play
3151033Commands
3161033streak
3171033stype
3181033FreeCell
3191033This session %u%% won: %u lost: %u%
3201033Total %u%% won: %u lost: %u%
3211033Streaks wins: %u losses: %u% current: %s
module_namehintordfunction_name
msvcrt.dll237_except_handler3
msvcrt.dll214_controlfp
msvcrt.dll152__set_app_type
msvcrt.dll133__p__fmode
msvcrt.dll128__p__commode
msvcrt.dll182_adjust_fdiv
msvcrt.dll154__setusermatherr
msvcrt.dll314_initterm
msvcrt.dll109__getmainargs
msvcrt.dll168_acmdln
msvcrt.dll655exit
msvcrt.dll200_cexit
msvcrt.dll78_XcptFilter
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll697isdigit
msvcrt.dll790time
msvcrt.dll762srand
msvcrt.dll748rand
ADVAPI32.dll505RegSetValueExW
ADVAPI32.dll474RegFlushKey
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll466RegDeleteValueW
ADVAPI32.dll492RegQueryValueExW
ADVAPI32.dll462RegCreateKeyW
ADVAPI32.dll456RegCloseKey
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll927lstrlenW
KERNEL32.dll357GetModuleFileNameA
KERNEL32.dll924lstrcpynW
KERNEL32.dll384GetPrivateProfileIntW
KERNEL32.dll393GetProcAddress
KERNEL32.dll558LoadLibraryA
GDI32.dll583StretchBlt
GDI32.dll18BitBlt
GDI32.dll531SetBkColor
GDI32.dll564SetRectRgn
GDI32.dll437GetTextExtentPoint32W
GDI32.dll570SetTextColor
GDI32.dll589TextOutW
GDI32.dll559SetPixel
GDI32.dll75CreateRectRgn
GDI32.dll412GetPixel
GDI32.dll445GetTextMetricsW
GDI32.dll363GetDeviceCaps
GDI32.dll33CombineRgn
GDI32.dll71CreatePen
GDI32.dll80CreateSolidBrush
GDI32.dll143DeleteObject
GDI32.dll45CreateCompatibleDC
GDI32.dll44CreateCompatibleBitmap
GDI32.dll524SelectObject
GDI32.dll475PatBlt
GDI32.dll61CreateFontIndirectW
GDI32.dll140DeleteDC
GDI32.dll459LineTo
GDI32.dll463MoveToEx
GDI32.dll421GetStockObject
GDI32.dll66CreateICW
USER32.dll589SetCursor
USER32.dll442LoadCursorW
USER32.dll13BeginPaint
USER32.dll654ShowCursor
USER32.dll231FlashWindow
USER32.dll634SetTimer
USER32.dll200EndPaint
USER32.dll434KillTimer
USER32.dll438LoadBitmapW
USER32.dll699UpdateWindow
USER32.dll658ShowWindow
USER32.dll97CreateWindowExW
USER32.dll457LoadStringW
USER32.dll349GetSystemMetrics
USER32.dll666SystemParametersInfoW
USER32.dll513PostQuitMessage
USER32.dll483MessageBoxW
USER32.dll475MessageBeep
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll143DefWindowProcW
USER32.dll270GetDesktopWindow
USER32.dll159DialogBoxParamW
USER32.dll194EnableMenuItem
USER32.dll300GetMenu
USER32.dll403InvalidateRect
USER32.dll576SendMessageW
USER32.dll512PostMessageW
USER32.dll580SetCapture
USER32.dll553ReleaseCapture
USER32.dll184DrawMenuBar
USER32.dll537RegisterClassW
USER32.dll444LoadIconW
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll680TranslateAcceleratorW
USER32.dll318GetMessageW
USER32.dll436LoadAcceleratorsW
USER32.dll198EndDialog
USER32.dll273GetDlgItem
USER32.dll643SetWindowPos
USER32.dll372GetWindowRect
USER32.dll255GetClientRect
USER32.dll723WinHelpW
USER32.dll594SetDlgItemInt
USER32.dll274GetDlgItemInt
USER32.dll647SetWindowTextW
USER32.dll729wsprintfW
USER32.dll346GetSysColor
USER32.dll364GetWindowDC
USER32.dll422IsIconic
CARDS.dll5cdtTerm
CARDS.dll4cdtInit
CARDS.dll3cdtDrawExt
SHELL32.dll148ShellAboutW
COMCTL32.dll76InitCommonControlsEx

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionEntertainment Pack FreeCell Game
FileVersion5.1.2600.0 (xpclient.010817-1148)
InternalNamefreecell
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamefreecell
ProductNameMicrosoft® Windows® Operating System
ProductVersion5.1.2600.0

VS_FIXEDFILEINFO

FileVersion5.1.2600.0
ProductVersion5.1.2600.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
055296EXE08/17/2001 20:54:14#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x250