filenamebattlegrounds_x1.exe
size2813952 (0x2af000)
md5974f4d4404bb94451a9c27ae5c673243
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
12729110
11879710
108797151
2988301
37875510
10280
19904923
1087992
118799303
14729933
0017
617351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections7
TimeDateStamp0x3cf57142
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x253000
SizeOfInitializedData0x15d000
SizeOfUninitializedData0
AddressOfEntryPoint0x236601
BaseOfCode0x1000
BaseOfData0x254000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x3b1000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v4.x

Sections

namevavsizeraw sizeflags
.text0x10000x246d750x247000R-X CODE
THIS_COD0x2480000xb9b90xc000R-X CODE
.rdata0x2540000x346aa0x35000R-- IDATA
.data0x2890000x11aa2c0x19000RW- IDATA
THIS_DAT0x3a40000xbc0x1000RW- IDATA
Inf32Dat0x3a50000xad900xb000RW- IDATA
.rsrc0x3b00000xef80x1000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x286fe00x12c
RESOURCE0x3b00000xef8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x2540000x440
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#122160
ICON#22960
GROUP_ICONAPPICON340
VERSION#19760
module_namehintordfunction_name
VERSION.dllGetFileVersionInfoA
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dll10VerQueryValueA
MSVFW32.dll30ICInfo
MSVFW32.dll42MCIWndCreateA
WIN32.dll149timeBeginPeriod
WIN32.dll150timeEndPeriod
WIN32.dll153timeGetTime
WIN32.dll48mciGetErrorStringA
WIN32.dll115mixerSetControlDetails
WIN32.dll112mixerGetNumDevs
WIN32.dll114mixerOpen
WIN32.dll110mixerGetLineInfoA
WIN32.dll108mixerGetLineControlsA
WIN32.dll103mixerGetControlDetailsA
WIN32.dll102mixerClose
WIN32.dll52mciSendCommandA
KERNEL32.dll797_hread
KERNEL32.dll423GlobalLock
KERNEL32.dll426GlobalReAlloc
KERNEL32.dll498LockResource
KERNEL32.dll799_lclose
KERNEL32.dll484LoadResource
KERNEL32.dll178FindResourceA
KERNEL32.dll314GetModuleHandleA
KERNEL32.dll522OpenFile
KERNEL32.dll412GlobalAlloc
KERNEL32.dll803_lread
KERNEL32.dll801_llseek
KERNEL32.dll468IsDBCSLeadByte
KERNEL32.dll668SetLastError
KERNEL32.dll36CompareStringA
KERNEL32.dll586ReleaseSemaphore
KERNEL32.dll692SetThreadPriority
KERNEL32.dll675SetPriorityClass
KERNEL32.dll328GetPriorityClass
KERNEL32.dll386GetThreadPriority
KERNEL32.dll159FindClose
KERNEL32.dll430GlobalUnlock
KERNEL32.dll422GlobalHandle
KERNEL32.dll267GetCurrentThread
KERNEL32.dll163FindFirstFileA
KERNEL32.dll66CreateMutexA
KERNEL32.dll172FindNextFileA
KERNEL32.dll207GetCPInfo
KERNEL32.dll380GetTempFileNameA
KERNEL32.dll382GetTempPathA
KERNEL32.dll753VirtualFree
KERNEL32.dll293GetFileSize
KERNEL32.dll661SetFilePointer
KERNEL32.dll573ReadFile
KERNEL32.dll782WriteFile
KERNEL32.dll288GetFileAttributesA
KERNEL32.dll48CreateDirectoryA
KERNEL32.dll275GetDiskFreeSpaceA
KERNEL32.dll339GetProcAddress
KERNEL32.dll399GetVersionExA
KERNEL32.dll652SetEndOfFile
KERNEL32.dll770WinExec
KERNEL32.dll731UnhandledExceptionFilter
KERNEL32.dll193FreeEnvironmentStringsA
KERNEL32.dll419GlobalFree
KERNEL32.dll536OutputDebugStringA
KERNEL32.dll92DeleteFileA
KERNEL32.dll269GetDateFormatA
KERNEL32.dll391GetTimeFormatA
KERNEL32.dll74CreateSemaphoreA
KERNEL32.dll265GetCurrentProcess
KERNEL32.dll301GetLastError
KERNEL32.dll194FreeEnvironmentStringsW
KERNEL32.dll281GetEnvironmentStrings
KERNEL32.dll283GetEnvironmentStringsW
KERNEL32.dll696SetUnhandledExceptionFilter
KERNEL32.dll464IsBadReadPtr
KERNEL32.dll461IsBadCodePtr
KERNEL32.dll37CompareStringW
KERNEL32.dll585ReleaseMutex
KERNEL32.dll401GetVolumeInformationA
KERNEL32.dll195FreeLibrary
KERNEL32.dll501MapViewOfFile
KERNEL32.dll513MulDiv
KERNEL32.dll296GetFileType
KERNEL32.dll153FileTimeToSystemTime
KERNEL32.dll30CloseHandle
KERNEL32.dll263GetCurrentDirectoryA
KERNEL32.dll479LoadLibraryA
KERNEL32.dll424GlobalMemoryStatus
KERNEL32.dll279GetDriveTypeA
KERNEL32.dll312GetModuleFileNameA
KERNEL32.dll308GetLogicalDrives
KERNEL32.dll445HeapReAlloc
KERNEL32.dll438HeapCreate
KERNEL32.dll750VirtualAlloc
KERNEL32.dll664SetHandleCount
KERNEL32.dll467IsBadWritePtr
KERNEL32.dll769WideCharToMultiByte
KERNEL32.dll446HeapSize
KERNEL32.dll360GetStdHandle
KERNEL32.dll715TerminateProcess
KERNEL32.dll56CreateFileMappingA
KERNEL32.dll201GetACP
KERNEL32.dll326GetOEMCP
KERNEL32.dll440HeapDestroy
KERNEL32.dll514MultiByteToWideChar
KERNEL32.dll361GetStringTypeA
KERNEL32.dll364GetStringTypeW
KERNEL32.dll680SetStdHandle
KERNEL32.dll476LCMapStringA
KERNEL32.dll477LCMapStringW
KERNEL32.dll55CreateFileA
KERNEL32.dll734UnmapViewOfFile
KERNEL32.dll765WaitForSingleObject
KERNEL32.dll185FlushFileBuffers
KERNEL32.dll303GetLocalTime
KERNEL32.dll372GetSystemTime
KERNEL32.dll393GetTimeZoneInformation
KERNEL32.dll436HeapAlloc
KERNEL32.dll442HeapFree
KERNEL32.dll599RtlUnwind
KERNEL32.dll152FileTimeToLocalFileTime
KERNEL32.dll297GetFullPathNameA
KERNEL32.dll653SetEnvironmentVariableA
KERNEL32.dll358GetStartupInfoA
KERNEL32.dll218GetCommandLineA
KERNEL32.dll398GetVersion
KERNEL32.dll140ExitProcess
KERNEL32.dll560RaiseException
KERNEL32.dll284GetEnvironmentVariableA
USER32.dll275GetKeyNameTextA
USER32.dll442MapVirtualKeyA
USER32.dll282GetKeyboardState
USER32.dll691wsprintfA
USER32.dll258GetDesktopWindow
USER32.dll267GetForegroundWindow
USER32.dll685WinHelpA
USER32.dll605SetWindowLongA
USER32.dll231GetCapture
USER32.dll518ReleaseCapture
USER32.dll223GetActiveWindow
USER32.dll409KillTimer
USER32.dll485PostQuitMessage
USER32.dll277GetKeyState
USER32.dll266GetFocus
USER32.dll483PostMessageA
USER32.dll545SetCapture
USER32.dll134DefWindowProcA
USER32.dll382InvalidateRect
USER32.dll312GetParent
USER32.dll354GetWindowTextA
USER32.dll255GetCursorPos
USER32.dll526ScreenToClient
USER32.dll214FillRect
USER32.dll672ValidateRect
USER32.dll403IsWindow
USER32.dll177DrawTextA
USER32.dll564SetForegroundWindow
USER32.dll284GetLastActivePopup
USER32.dll14BringWindowToTop
USER32.dll329GetSystemMetrics
USER32.dll90CreateWindowExA
USER32.dll352GetWindowRect
USER32.dll243GetClientRect
USER32.dll608SetWindowPos
USER32.dll358GetWindowThreadProcessId
USER32.dll394IsClipboardFormatAvailable
USER32.dll662UpdateWindow
USER32.dll418LoadIconA
USER32.dll502RegisterClassA
USER32.dll151DispatchMessageA
USER32.dll647TranslateMessage
USER32.dll301GetMessageA
USER32.dll481PeekMessageA
USER32.dll144DestroyWindow
USER32.dll215FindWindowA
USER32.dll536SendMessageA
USER32.dll47CharUpperA
USER32.dll630SystemParametersInfoA
USER32.dll623ShowWindow
USER32.dll563SetFocus
USER32.dll554SetCursor
USER32.dll548SetClassLongA
USER32.dll599SetTimer
USER32.dll414LoadCursorA
USER32.dll472OpenClipboard
USER32.dll245GetClipboardData
USER32.dll61CloseClipboard
USER32.dll232GetCaretBlinkTime
USER32.dll178DrawTextExA
USER32.dll22CallWindowProcA
USER32.dll462MoveWindow
USER32.dll450MessageBeep
USER32.dll346GetWindowLongA
USER32.dll592SetSysColors
USER32.dll326GetSysColor
USER32.dll451MessageBoxA
USER32.dll431LoadStringA
USER32.dll585SetRect
USER32.dll59ClientToScreen
USER32.dll556SetCursorPos
USER32.dll230GetAsyncKeyState
USER32.dll336GetUpdateRect
USER32.dll400IsIconic
USER32.dll519ReleaseDC
USER32.dll256GetDC
USER32.dll611SetWindowTextA
GDI32.dll84DeleteObject
GDI32.dll382GetTextMetricsA
GDI32.dll462SelectObject
GDI32.dll56CreateFontIndirectA
GDI32.dll359GetStockObject
GDI32.dll435RealizePalette
GDI32.dll463SelectPalette
GDI32.dll81DeleteDC
GDI32.dll63CreateICA
GDI32.dll67CreatePalette
GDI32.dll343GetObjectA
GDI32.dll342GetNearestPaletteIndex
GDI32.dll348GetPaletteEntries
GDI32.dll447ResizePalette
GDI32.dll363GetSystemPaletteEntries
GDI32.dll494SetPaletteEntries
GDI32.dll506SetTextColor
GDI32.dll469SetBkMode
GDI32.dll460SelectClipRgn
GDI32.dll73CreateRectRgn
GDI32.dll374GetTextExtentPoint32A
GDI32.dll524TextOutA
GDI32.dll397LineTo
GDI32.dll401MoveToEx
GDI32.dll504SetTextAlign
GDI32.dll69CreatePen
GDI32.dll301GetDeviceCaps
GDI32.dll468SetBkColor
SHELL32.dll135ShellExecuteA
DPLAYX.dll4
DPLAYX.dll2
DPLAYX.dll1
DSOUND.dll1
DDRAW.dll6DirectDrawCreate
IMM32.dll1ImmAssociateContext
IMM32.dll96ImmSetOpenStatus
IMM32.dll31ImmGetContext
IMM32.dll49ImmGetOpenStatus
IMM32.dll80ImmReleaseContext
IMM32.dll35ImmGetDefaultIMEWnd
IMM32.dll72ImmNotifyIME
ADVAPI32.dll434RegSetValueExA
ADVAPI32.dll423RegQueryValueExA
ADVAPI32.dll392RegCreateKeyExA
ADVAPI32.dll388RegCloseKey
ole32.dll89CoUninitialize
ole32.dll14CoCreateGuid
ole32.dll15CoCreateInstance
ole32.dll49CoInitialize
WSOCK32.dll115
WSOCK32.dll52
WSOCK32.dll116
WSOCK32.dll57

StringTable 040904b0

CompanyNameLucasArts Entertainment Company LLC
FileDescriptionStar Wars Galactic Battlegrounds: Clone Campaigns
FileVersion1.1
InternalNameBattlegrounds_x1
LegalCopyrightCopyright © 2002 LucasArts Entertainment Company LLC
OriginalFilenameBattlegrounds_x1.exe
ProductNameStar Wars Galactic Battlegrounds: Clone Campaigns
ProductVersion1.1

VS_FIXEDFILEINFO

FileVersion1.1.0.0
ProductVersion1.1.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
02813952EXE05/30/2002 00:24:34#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK