LASBLO.EXE

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	LASBLO.EXE
size	1291264 (0x13b400)
md5	99798f52802610bdb56cf13a249aa372

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x333034a7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	4.0
SizeOfCode	0x138000
SizeOfInitializedData	0
SizeOfUninitializedData	0x1000
AddressOfEntryPoint	0x106c
BaseOfCode	0x1000
BaseOfData	0x139000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	1.5
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x140000
SizeOfHeaders	0x400
CheckSum	0x13d3c1
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig4

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x138000	0x137400	R-X CODE
.bss	0x139000	0x1000	0	RW- UDATA
.rsrc	0x13a000	0x3000	0x2200	R-- IDATA
.idata	0x13d000	0x1000	0x200	R-- IDATA
.reloc	0x13e000	0x2000	0x1800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x13d000	0x28
RESOURCE	0x13a000	0x2158
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x13e000	0x1648
DEBUG	0	0
ARCHITECTURE	0x1382bc	0x10
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0x240	0x1c
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
TYPELIB	#2	6204	1200
_IID_BLACK	#1	20	1200
_IID_LOGIC	#1	20	1200
_IID_MESSAGE3	#1	20	1200
_IID_OPTIONS	#1	20	1200
_IID_TOPTEN	#1	20	1200
_IID_VISUAL	#1	20	1200
ICON	#30001	744	1200
GROUP_ICON	#1	20	1200
VERSION	#1	548	1200

module_name	hint	ord	function_name
VB40032.DLL		616
VB40032.DLL		618
VB40032.DLL		631
VB40032.DLL		645
VB40032.DLL		670
VB40032.DLL		100
VB40032.DLL		187
VB40032.DLL		186
VB40032.DLL		199
VB40032.DLL		516
VB40032.DLL		525
VB40032.DLL		531
VB40032.DLL		594
VB40032.DLL		593
VB40032.DLL		595
VB40032.DLL		598
VB40032.DLL		608

StringTable 040904B0

CompanyName	hoffm
ProductName	Laser Blocks 95
FileVersion	1.05.0002
ProductVersion	1.05.0002
InternalName	lasblo
OriginalFilename	lasblo.exe

VS_FIXEDFILEINFO

FileVersion	1.5.0.2
ProductVersion	1.5.0.2
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	1291264	EXE	03/19/1997 18:47:03	#
15c1	15	HTM		#
6fd5	2678	BMP	(40 x 40)	#
7a75	1878	BMP	(40 x 40)	#
83e7	308278	BMP	(640 x 480)	#
53f20	1478	BMP	(20 x 20)	#
54524	1478	BMP	(20 x 20)	#
54b27	1478	BMP	(20 x 20)	#
5512c	1478	BMP	(20 x 20)	#
55730	1478	BMP	(20 x 20)	#
55d36	1478	BMP	(20 x 20)	#
5633b	1478	BMP	(20 x 20)	#
5693f	1478	BMP	(20 x 20)	#
56f42	1478	BMP	(20 x 20)	#
578ae	41078	BMP	(200 x 200)	#
61968	41078	BMP	(200 x 200)	#
6ba1b	1086	BMP	(4 x 2)	#
6d2fd	1086	BMP	(4 x 2)	#
6d766	1094	BMP	(2 x 4)	#
6dbd4	1478	BMP	(20 x 20)	#
6e1c1	1478	BMP	(20 x 20)	#
6e7ae	1478	BMP	(20 x 20)	#
6ed9d	1478	BMP	(20 x 20)	#
6f38b	1478	BMP	(20 x 20)	#
6f979	1478	BMP	(20 x 20)	#
6ff66	1478	BMP	(20 x 20)	#
70552	1478	BMP	(20 x 20)	#
70b3e	1478	BMP	(20 x 20)	#
7112b	2678	BMP	(40 x 40)	#
71bc8	2678	BMP	(40 x 40)	#
72666	2678	BMP	(40 x 40)	#
73104	2678	BMP	(40 x 40)	#
73ba1	2678	BMP	(40 x 40)	#
7463e	2678	BMP	(40 x 40)	#
750db	2678	BMP	(40 x 40)	#
75b78	2678	BMP	(40 x 40)	#
76615	2678	BMP	(40 x 40)	#
770b2	2678	BMP	(40 x 40)	#
77b4f	2678	BMP	(40 x 40)	#
785ee	3730	BMP	(51 x 51)	#
79600	3730	BMP	(49 x 51)	#
7a60e	1878	BMP	(40 x 40)	#
7ad89	1958	BMP	(40 x 40)	#
7b553	1598	BMP	(40 x 40)	#
7bbb5	1958	BMP	(40 x 40)	#
7c37f	1598	BMP	(40 x 40)	#
7c9e1	1318	BMP	(40 x 40)	#
7cf2b	2038	BMP	(40 x 40)	#
7d745	1618	BMP	(40 x 40)	#
7ddbb	1618	BMP	(40 x 40)	#
7e431	1618	BMP	(40 x 40)	#
7eaa7	1618	BMP	(40 x 40)	#
7f123	1086	BMP	(4 x 2)	#
7f58b	1094	BMP	(2 x 4)	#
7f9fb	128278	BMP	(297 x 424)	#
9ef38	128278	BMP	(297 x 424)	#
be477	128278	BMP	(297 x 424)	#
dd9b6	128278	BMP	(297 x 424)	#
fcef7	128278	BMP	(297 x 424)	#
11c436	3478	BMP	(45 x 50)	#
11d34d	3478	BMP	(45 x 50)	#
11e261	3730	BMP	(51 x 51)	#
11f272	3730	BMP	(49 x 51)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x240