filenameStar Wolves 2.exe
size4338688 (0x423400)
md562c62c6d0ec7c6a65ac672233dc7c181
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x190
blocks_in_file1
num_relocs0
header_paragraphs2
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss2
sp0x40
checksum0
ip0xe
cs0
reloc_table_offset0x40
overlay_number0
reserved00x6465654e00000000
oem_id0x5773
oem_info0x6e69
reserved20xd213233
reserved30xb40e240a
reserved40xba09
reserved50xb821cd1f
reserved60x21cd4c01
lfanew0x40

DOS stub

00000000: 4e 65 65 64 73 57 69 6e  33 32 21 0d 0a 24 0e b4  |NeedsWin32!..$..|
00000010: 09 ba 00 00 1f cd 21 b8  01 4c cd 21 40 00 00 00  |......!..L.!@...|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x484b4150
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x35c000
SizeOfInitializedData0xd0000
SizeOfUninitializedData0
AddressOfEntryPoint0x2e7430
BaseOfCode0x1000
BaseOfData0x35d000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x42d000
SizeOfHeaders0x200
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0

Sections

namevavsizeraw sizeflags
.text0x10000x35c0000x35c000R-X CODE
.data0x35d0000xcd0000xc5000RW- IDATA
.rsrc0x42a0000x12000x1200R-- IDATA
.idata0x42c0000x10000x1000R-- IDATA

Data Directory

typevasize
EXPORT0x4069800xab
IMPORT0x42c0000x104
RESOURCE0x42a0000x1160
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x35d0000x348
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#142640
GROUP_ICON#101200
module_namehintordfunction_name
advapi32.dllOpenProcessToken
advapi32.dllGetUserNameA
dinput8.dllDirectInput8Create
dsound.dllDirectSoundCreate8
gdi32.dllSelectObject
gdi32.dllSetTextColor
gdi32.dllSetBkColor
gdi32.dllSetTextAlign
gdi32.dllSetMapMode
gdi32.dllCreateFontA
gdi32.dllDeleteObject
gdi32.dllDeleteDC
gdi32.dllCreateDIBSection
gdi32.dllCreateCompatibleDC
gdi32.dllExtTextOutA
gdi32.dllGetDeviceCaps
gdi32.dllGetStockObject
gdi32.dllGetTextExtentPoint32A
kernel32.dllSetHandleCount
kernel32.dllGetSystemInfo
kernel32.dllVirtualProtect
kernel32.dllGetStringTypeW
kernel32.dllGetStringTypeA
kernel32.dllIsValidCodePage
kernel32.dllIsValidLocale
kernel32.dllEnumSystemLocalesA
kernel32.dllGetLocaleInfoA
kernel32.dllGetStdHandle
kernel32.dllSetStdHandle
kernel32.dllSetEndOfFile
kernel32.dllHeapDestroy
kernel32.dllGetUserDefaultLCID
kernel32.dllGetCurrentProcessId
kernel32.dllSleep
kernel32.dllMulDiv
kernel32.dllOutputDebugStringA
kernel32.dllQueryPerformanceCounter
kernel32.dllQueryPerformanceFrequency
kernel32.dllDeleteFileA
kernel32.dllCreateDirectoryA
kernel32.dllFindClose
kernel32.dllFindNextFileA
kernel32.dllFindFirstFileA
kernel32.dllRemoveDirectoryA
kernel32.dllInitializeCriticalSection
kernel32.dllDeleteCriticalSection
kernel32.dllEnterCriticalSection
kernel32.dllLeaveCriticalSection
kernel32.dllMultiByteToWideChar
kernel32.dllWideCharToMultiByte
kernel32.dllTerminateThread
kernel32.dllWaitForSingleObject
kernel32.dllCreateThread
kernel32.dllSetFileAttributesA
kernel32.dllGetFileAttributesA
kernel32.dllGetModuleFileNameA
kernel32.dllVirtualQuery
kernel32.dllVirtualFree
kernel32.dllCloseHandle
kernel32.dllReadFile
kernel32.dllVirtualAlloc
kernel32.dllGetFileSize
kernel32.dllCreateFileA
kernel32.dllGetCurrentThread
kernel32.dllGetCurrentProcess
kernel32.dllHeapCreate
kernel32.dllOutputDebugStringW
kernel32.dllFormatMessageA
kernel32.dllGetLastError
kernel32.dllGetVolumeInformationA
kernel32.dllSetErrorMode
kernel32.dllGetDriveTypeA
kernel32.dllGetCurrentThreadId
kernel32.dllGetCurrentDirectoryA
kernel32.dllFreeLibrary
kernel32.dllGetProcAddress
kernel32.dllLoadLibraryA
kernel32.dllSetFilePointer
kernel32.dllWriteFile
kernel32.dllFlushFileBuffers
kernel32.dllCreateMutexA
kernel32.dllReleaseMutex
kernel32.dllSystemTimeToTzSpecificLocalTime
kernel32.dllGetTimeZoneInformation
kernel32.dllFileTimeToSystemTime
kernel32.dllGetFileTime
kernel32.dllSearchPathA
kernel32.dllTlsFree
kernel32.dllSetLastError
kernel32.dllTlsAlloc
kernel32.dllFatalAppExitA
kernel32.dllGetCPInfo
kernel32.dllLCMapStringW
kernel32.dllLCMapStringA
kernel32.dllMoveFileA
kernel32.dllHeapAlloc
kernel32.dllHeapReAlloc
kernel32.dllGetVersionExA
kernel32.dllGetCommandLineA
kernel32.dllGetStartupInfoA
kernel32.dllGetLocalTime
kernel32.dllHeapFree
kernel32.dllTerminateProcess
kernel32.dllGetModuleHandleA
kernel32.dllGetFileType
kernel32.dllGetSystemTimeAsFileTime
kernel32.dllGetDateFormatA
kernel32.dllGetTimeFormatA
kernel32.dllExitProcess
kernel32.dllRaiseException
kernel32.dllRtlUnwind
kernel32.dllInterlockedExchange
kernel32.dllInterlockedIncrement
kernel32.dllInterlockedDecrement
kernel32.dllTlsGetValue
kernel32.dllHeapSize
kernel32.dllSetUnhandledExceptionFilter
kernel32.dllIsBadWritePtr
kernel32.dllUnhandledExceptionFilter
kernel32.dllFreeEnvironmentStringsA
kernel32.dllGetEnvironmentStrings
kernel32.dllFreeEnvironmentStringsW
kernel32.dllGetEnvironmentStringsW
kernel32.dllCompareStringA
kernel32.dllCompareStringW
kernel32.dllIsBadReadPtr
kernel32.dllIsBadCodePtr
kernel32.dllSetConsoleCtrlHandler
kernel32.dllGetACP
kernel32.dllGetOEMCP
kernel32.dllGetExitCodeProcess
kernel32.dllCreateProcessA
kernel32.dllSetEnvironmentVariableA
kernel32.dllGetTickCount
kernel32.dllGetLocaleInfoW
kernel32.dllTlsSetValue
user32.dllMessageBoxW
user32.dllLoadIconA
user32.dllLoadCursorA
user32.dllRegisterClassA
user32.dllPostQuitMessage
user32.dllPeekMessageA
user32.dllGetMessageA
user32.dllTranslateMessage
user32.dllDispatchMessageA
user32.dllDefWindowProcA
user32.dllGetWindowRect
user32.dllMoveWindow
user32.dllSetRect
user32.dllMessageBoxA
user32.dllwsprintfA
user32.dllScreenToClient
user32.dllGetKeyboardState
user32.dllToAscii
user32.dllGetMessageExtraInfo
user32.dllSendInput
user32.dllGetKeyState
user32.dllClientToScreen
user32.dllSetCursorPos
user32.dllShowCursor
user32.dllCreateWindowExA
user32.dllShowWindow
user32.dllUpdateWindow
user32.dllDestroyWindow
user32.dllSystemParametersInfoA
user32.dllGetSystemMetrics
user32.dllSetWindowPos
winmm.dlltimeGetTime
binkw32.dll_BinkCopyToBuffer@28
binkw32.dll_BinkDoFrame@4
binkw32.dll_BinkNextFrame@4
binkw32.dll_BinkOpenDirectSound@4
binkw32.dll_BinkSetSoundSystem@8
binkw32.dll_BinkOpen@8
binkw32.dll_BinkClose@4
binkw32.dll_BinkSetVolume@12
binkw32.dll_BinkGoto@12
binkw32.dll_BinkPause@8
binkw32.dll_BinkWait@4
d3d9.dllDirect3DCreate9
d3dx9_28.dllD3DXQuaternionRotationMatrix
d3dx9_28.dllD3DXMatrixRotationQuaternion
d3dx9_28.dllD3DXGetImageInfoFromFileA
d3dx9_28.dllD3DXCreateTextureFromFileInMemoryEx
d3dx9_28.dllD3DXCreateTexture
d3dx9_28.dllD3DXSaveTextureToFileA
dbghelp.dllSymFromAddr
dbghelp.dllStackWalk
dbghelp.dllSymFunctionTableAccess
dbghelp.dllSymGetModuleBase
dbghelp.dllSymGetLineFromAddr
dbghelp.dllSymSetOptions
dbghelp.dllSymInitialize
ole32.dllCoInitialize
ole32.dllCoUninitialize
zlib1.dllcompress2
ordentry_vafunction_name
50x1f4a90?DecodeBuffer@CipherClerk@@AAEXPADII@Z
80xc1260?PreMainLoop@Game@@SAKK@Z
module_nameFinal Protected Release (RUSSIAN).exe
flags0
timestamp2008-06-08 02:17:52
version0.0
ordinal_base5
nFunctions4
nNames2
Names(2)0x4069bc
Functions(4)0x4069a8
NameOrdinals(2)0x4069b8
offsetsizetypecomment
15c115HTM#
15d04333104BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK