mb_warband.exe - Mount&Blade: Warband

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	mb_warband.exe
size	2192896 (0x217600)
md5	62cd4ed0309b9613d7494409a2000d59

type	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x40
blocks_in_file	1
num_relocs	0
header_paragraphs	2
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0xa
overlay_number	0
reserved0	0xeba1f0e00000000
oem_id	0xb400
oem_info	0xcd09
reserved2	0x4c01b821
reserved3	0x695721cd
reserved4	0x2032336e
reserved5	0x4558452e
reserved6	0x240a0d2e
lfanew	0x40

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 57 69  |........!..L.!Wi|
00000010: 6e 33 32 20 2e 45 58 45  2e 0d 0a 24 40 00 00 00  |n32 .EXE...$@...|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4fba4acc
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x323
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x4a4400
SizeOfInitializedData	0x192e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x3c1e4ae
BaseOfCode	0x1000
BaseOfData	0x4a6000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x3c6d000
SizeOfHeaders	0x200
CheckSum	0
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x3e8480
SizeOfStackCommit	0x3e8480
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MPRESS v2.12 (MATCODE Software)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3c1d000	0x1c9e00	RWX CODE IDATA UDATA
.rdata	0x3c1e000	0x2000	0x1200	RWX CODE IDATA UDATA
.rsrc	0x3c20000	0x4c310	0x4c400	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3c1e000	0x4b0
RESOURCE	0x3c20000	0x4c310
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x3c1e1cc	0xb0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
SKINMAGIC	#175	45045	1252
BITMAP	#239	39642	1252
BITMAP	#240	39642	1252
BITMAP	#241	39642	1252
BITMAP	#242	39642	1252
BITMAP	#243	39642	1252
BITMAP	#244	39642	1252
BITMAP	#245	39642	1252
BITMAP	#246	39642	1252
BITMAP	#247	39642	1252
ICON	#1	10344	1252
ICON	#2	5864	1252
ICON	#3	2664	1252
ICON	#4	1640	1252
ICON	#5	744	1252
ICON	#6	296	1252
ICON	#7	19496	1252
ICON	#8	11432	1252
ICON	#9	5672	1252
ICON	#10	3752	1252
ICON	#11	2216	1252
ICON	#12	1384	1252
ICON	#13	67624	1252
ICON	#14	38056	1252
ICON	#15	16936	1252
ICON	#16	9640	1252
ICON	#17	4264	1252
ICON	#18	1128	1252
ICON	#19	51240	1252
ICON	#20	28840	1252
ICON	#21	12840	1252
ICON	#22	7336	1252
ICON	#23	3240	1252
ICON	#24	872	1252
MENU	#141	616	1252
MENU	#142	138	1252
DIALOG	#144	788	1252
DIALOG	#170	598	1252
DIALOG	#171	1082	1252
DIALOG	#177	254	1252
DIALOG	#192	4116	1252
DIALOG	#193	2056	1252
DIALOG	#197	556	1252
DIALOG	#222	176	1252
DIALOG	#223	508	1252
DIALOG	#224	340	1252
DIALOG	#225	184	1252
DIALOG	#228	846	1252
DIALOG	#229	1150	1252
DIALOG	#230	258	1252
DIALOG	#232	200	1252
DIALOG	#233	288	1252
DIALOG	#234	1032	1252
DIALOG	#1974	1472	1252
ACCELERATORS	#113	24	1252
GROUP_ICON	#206	342	1252
VERSION	#1	832	1252
MANIFEST	#1	346	1252

module_name	ord	function_name
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetProcAddress
WININET.dll		InternetOpenA
SHFOLDER.dll		SHGetFolderPathA
d3d9.dll		Direct3DCreate9
d3dx9_42.dll		D3DXMatrixInverse
DINPUT8.dll		DirectInput8Create
WINMM.dll		timeGetTime
NETAPI32.dll		Netbios
WS2_32.dll	116
CRYPT32.dll		CertCloseStore
fmodex.dll		FMOD_System_Create
USER32.dll		SetRect
GDI32.dll		BitBlt
ADVAPI32.dll		RegCloseKey
SHELL32.dll		ShellExecuteA
ole32.dll		CoInitialize
OLEAUT32.dll	9
SkinMagic.dll	3
WINHTTP.dll		WinHttpOpen
IMM32.dll		ImmGetContext
XINPUT1_3.dll	3
WSOCK32.dll	57

StringTable 040904b0

CompanyName	Taleworlds Entertainment
FileDescription	Mount&Blade: Warband
FileVersion	1, 0, 0, 0
InternalName	Mount&Blade: Warband
LegalCopyright	Copyright © 2008-2012 Taleworlds
OriginalFilename	mb_warband.exe
ProductName	Mount&Blade: Warband
ProductVersion	1, 0, 0, 0

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	2192896	EXE	05/21/2012 14:01:48	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x3b6bbdc

[?] can't find file_offset of VA 0x3b76bd4

[?] can't find file_offset of VA 0x3b806b0

[?] can't find file_offset of VA 0x3b8a18c

[?] can't find file_offset of VA 0x3b93c68

[?] can't find file_offset of VA 0x3b9d744

[?] can't find file_offset of VA 0x3ba7220

[?] can't find file_offset of VA 0x3bb0cfc

[?] can't find file_offset of VA 0x3bba7d8

[?] can't find file_offset of VA 0x3bc42b4

[?] can't find file_offset of VA 0x3c18ed0

[?] can't find file_offset of VA 0x3c19138

[?] can't find file_offset of VA 0x3c191c4

[?] can't find file_offset of VA 0x3c194d8

[?] can't find file_offset of VA 0x3c19730

[?] can't find file_offset of VA 0x3c19b6c

[?] can't find file_offset of VA 0x3c19c6c

[?] can't find file_offset of VA 0x3c1ac80

[?] can't find file_offset of VA 0x3c1b488

[?] can't find file_offset of VA 0x3c1b6b4

[?] can't find file_offset of VA 0x3c1b764

[?] can't find file_offset of VA 0x3c1b960

[?] can't find file_offset of VA 0x3c1bab4

[?] can't find file_offset of VA 0x3c1bb6c

[?] can't find file_offset of VA 0x3c1bebc

[?] can't find file_offset of VA 0x3c1c33c

[?] can't find file_offset of VA 0x3c1c440

[?] can't find file_offset of VA 0x3c1c508

[?] can't find file_offset of VA 0x3c1c628

[?] can't find file_offset of VA 0x3c1ca30

[?] can't find file_offset of VA 0x3c1cff0

mb_warband.exe-