MiniA.exe

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	MiniA.exe
size	7148544 (0x6d1400)
md5	6b3dea61bdd7cf87376af1d4536189b9

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x150

DOS stub

00000000: 50 45 00 00 4c 01 07 00  40 c8 aa 54 00 00 00 00  |PE..L...@..T....|
00000010: 00 00 00 00 e0 00 22 01  0b 01 09 00 00 10 6b 00  |......".......k.|
00000020: 00 66 25 00 00 00 00 00  fd ad 34 00 00 10 00 00  |.f%.......4.....|
00000030: 00 20 6b 00 00 00 40 00  00 10 00 00 00 02 00 00  |. k...@.........|
00000040: 05 00 00 00 00 00 00 00  05 00 00 00 00 00 00 00  |................|
00000050: 00 80 15 01 00 04 00 00  bb 53 90 00 02 00 40 80  |.........S....@.|
00000060: 00 00 10 00 00 10 00 00  00 00 10 00 00 10 00 00  |................|
00000070: 00 00 00 00 10 00 00 00  b0 78 80 00 8f 04 00 00  |.........x......|
00000080: 00 70 15 01 f4 01 00 00  00 00 09 01 cc a8 05 00  |.p..............|
00000090: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000a0: 00 b0 0e 01 54 f3 04 00  50 74 6b 00 1c 00 00 00  |....T...Ptk.....|
000000b0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000c0: 50 79 7e 00 18 00 00 00  00 00 00 00 00 00 00 00  |Py~.............|
000000d0: 00 00 00 00 00 00 00 00  00 20 6b 00 c0 08 00 00  |......... k.....|
000000e0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000f0: 00 00 00 00 00 00 00 00  a8 91 48 00 00 00 00 00  |..........H.....|
00000100: 00 00 00 00 98 91 48 00  d0 b8 1e 05 8f 04 00 00  |......H.........|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xb
TimeDateStamp	0x54aac840
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x122
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x6b1000
SizeOfInitializedData	0x256600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x15d2e11
BaseOfCode	0x1000
BaseOfData	0x6b2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x1a91000
SizeOfHeaders	0x400
CheckSum	0x6d1a59
Subsystem	2
DllCharacteristics	0x8040
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PolyEnE 0.01+ by Lennart Hedlund

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x6b1000	0	R-X CODE
.rdata	0x6b2000	0x155e00	0	R-- IDATA
.data	0x808000	0x886d9c	0	RW- IDATA
.tls	0x108f000	0x200	0x200	RW- IDATA
.vmp1	0x1090000	0x5aa00	0	RWX CODE IDATA
.vmp0	0x10eb000	0x6be00	0	RWX CODE IDATA
.newimp	0x1157000	0x1000	0	RW- IDATA
.vmp2	0x1158000	0x265649	0	RWX CODE IDATA
.vmp3	0x13be000	0x676010	0x676200	RWX CODE IDATA
.reloc	0x1a35000	0xf0	0x200	R-- IDATA
.rsrc	0x1a36000	0x5a8c9	0x5aa00	R-- IDATA

Data Directory

type	va	size
EXPORT	0x19d70c0	0x48f
IMPORT	0x15d291c	0x208
RESOURCE	0x1a36000	0x5a8c9
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1a35000	0xf0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x19d70a4	0x1c
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x15cd000	0xe0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x148f000	0x148f008	0x148dc10	0x1dd70bc	0	0

show previews

type	name	size	cp
ICON	#1	1128	1252
ICON	#2	4264	1252
ICON	#3	9640	1252
ICON	#4	16936	1252
ICON	#5	67624	1252
ICON	#6	270376	1252
GROUP_ICON	#1005	90	1252
MANIFEST	#1	357	1252

module_name	ord	function_name
WINMM.dll		timeEndPeriod
WS2_32.dll	1
d3dx9_43.dll		D3DXMatrixInverse
d3d9.dll		D3DPERF_SetOptions
IPHLPAPI.DLL		GetAdaptersInfo
fmodex.dll		public: enum FMOD_RESULT __stdcall FMOD::System::setSoftwareFormat(int, enum FMOD_SOUND_FORMAT, int, int, enum FMOD_DSP_RESAMPLER) ?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z
fmod_event.dll		public: enum FMOD_RESULT __stdcall FMOD::EventSystem::getCategory(char const , class FMOD::EventCategory *) ?getCategory@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventCategory@2@@Z
fmod_event_net.dll		enum FMOD_RESULT __stdcall FMOD::NetEventSystem_Update(void) ?NetEventSystem_Update@FMOD@@YG?AW4FMOD_RESULT@@XZ
CRYPT32.dll		CertEnumCertificatesInStore
KERNEL32.dll		GetVersionExA
KERNEL32.dll		VirtualProtect
USER32.dll		UpdateWindow
GDI32.dll		GetDeviceCaps
ADVAPI32.dll		RegCreateKeyExA
SHELL32.dll		ShellExecuteA
VERSION.dll		GetFileVersionInfoA
PhysX3PROFILE_x86.dll		public: __thiscall physx::PxAggregateGeneratedInfo::PxAggregateGeneratedInfo(void) ??0PxAggregateGeneratedInfo@physx@@QAE@XZ
PhysX3CookingPROFILE_x86.dll		PxCreateCooking
PhysX3CommonPROFILE_x86.dll		public: bool __thiscall physx::shdfnd::MutexImpl::lock(void) ?lock@MutexImpl@shdfnd@physx@@QAE_NXZ
CrashRpt1301.dll	9
WININET.dll		InternetCloseHandle
DINPUT8.dll		DirectInput8Create
XINPUT1_3.dll	2
central.dll		PROGUARD
KERNEL32.dll		GetModuleFileNameW
KERNEL32.dll		GetModuleHandleA
KERNEL32.dll		LoadLibraryA
KERNEL32.dll		LocalAlloc
KERNEL32.dll		LocalFree
KERNEL32.dll		GetModuleFileNameA
KERNEL32.dll		ExitProcess

ord	entry_va	function_name
1	0x115c0	??0System@Scaleform@@QAE@ABUHeapDesc@MemoryHeap@1@PAVSysAllocBase@1@@Z
2	0x115a0	??0System@Scaleform@@QAE@PAVSysAllocBase@1@@Z
3	0x114f0	??1AcquireInterface@Scaleform@@UAE@XZ
4	0x114f0	??1DefaultAcquireInterface@Scaleform@@UAE@XZ
5	0x115e0	??1System@Scaleform@@QAE@XZ
6	0x11570	??_FEvent@Scaleform@@QAEXXZ
7	0x11560	??_FMutex@Scaleform@@QAEXXZ
8	0x11580	??_FSemaphore@Scaleform@@QAEXXZ
9	0x1105d0	??_FSysAllocPagedMalloc@Scaleform@@QAEXXZ
10	0x11450	??_FSysAllocStatic@Scaleform@@QAEXXZ
11	0x1105e0	??_FSysAllocWinAPI@Scaleform@@QAEXXZ
12	0x11640	??_FSystem@Scaleform@@QAEXXZ
13	0x11590	??_FThread@Scaleform@@QAEXXZ
14	0x11df0	?GetXScale@?$Matrix2x4@M@Render@Scaleform@@QBEMXZ
15	0x11e10	?GetYScale@?$Matrix2x4@M@Render@Scaleform@@QBEMXZ
16	0x11680	?Init@System@GFx@Scaleform@@SAXPAVSysAllocBase@3@@Z
17	0x115f0	?Init@System@Scaleform@@SAXPAVSysAllocBase@2@@Z
18	0x113710	?Prepend@?$Matrix2x4@M@Render@Scaleform@@QAEAAV123@ABV123@@Z
19	0x11db0	?SetIdentity@?$Matrix2x4@M@Render@Scaleform@@QAEXXZ
20	0x11e30	?SetIdentity@?$Matrix3x4@M@Render@Scaleform@@QAEXXZ
21	0x11e60	?SetIdentity@?$Matrix4x4@M@Render@Scaleform@@QAEXXZ

module_name	MiniA.exe
flags	0
timestamp	2015-01-05 17:21:32
version	0.0
ordinal_base	1
nFunctions	21
nNames	21
Names(21)	0x19d7166
Functions(21)	0x19d70e8
NameOrdinals(21)	0x19d713c

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	7142960	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x108dc10