SegaPCReloaded.exe - Launcher and configurator for Korama's Sega PC patches

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	SegaPCReloaded.exe
size	1142784 (0x117000)
md5	a55f7dd5c6b276c9a95c768e0e359e24

type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x551f1b27
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818f
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x107000
SizeOfInitializedData	0x11000
SizeOfUninitializedData	0x279000
AddressOfEntryPoint	0x380420
BaseOfCode	0x27a000
BaseOfData	0x381000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x392000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

UPX v0.89.6 - v1.02 / v1.05 - v1.22

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
UPX0	0x1000	0x279000	0	RWX UDATA
UPX1	0x27a000	0x107000	0x106800	RWX IDATA
.rsrc	0x381000	0x11000	0x10400	RW- IDATA

Data Directory

type	va	size
EXPORT	0x1e3000	0x65
IMPORT	0x39114c	0x24c
RESOURCE	0x381000	0x1014c
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x3805d0	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0x1e2000	0x922
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x7805e8	0x780624	0x5d3c14	0	0	0

show previews

type	name	size	cp
CURSOR	#1	308	1252
CURSOR	#2	308	1252
CURSOR	#3	308	1252
CURSOR	#4	308	1252
CURSOR	#5	308	1252
CURSOR	#6	308	1252
CURSOR	#7	308	1252
BITMAP	BBABORT	464	1252
BITMAP	BBALL	484	1252
BITMAP	BBCANCEL	464	1252
BITMAP	BBCLOSE	464	1252
BITMAP	BBHELP	464	1252
BITMAP	BBIGNORE	464	1252
BITMAP	BBNO	464	1252
BITMAP	BBOK	464	1252
BITMAP	BBRETRY	464	1252
BITMAP	BBYES	464	1252
ICON	#1	43751	1252
ICON	#2	9640	1252
ICON	#3	4264	1252
ICON	#4	2440	1252
ICON	#5	1128	1252
STRING	#4074	80	1252
STRING	#4075	1744	1252
STRING	#4076	1204	1252
STRING	#4077	636	1252
STRING	#4078	1044	1252
STRING	#4079	552	1252
STRING	#4080	204	1252
STRING	#4081	236	1252
STRING	#4082	884	1252
STRING	#4083	1004	1252
STRING	#4084	1228	1252
STRING	#4085	640	1252
STRING	#4086	1056	1252
STRING	#4087	1056	1252
STRING	#4088	884	1252
STRING	#4089	1028	1252
STRING	#4090	644	1252
STRING	#4091	188	1252
STRING	#4092	256	1252
STRING	#4093	824	1252
STRING	#4094	1008	1252
STRING	#4095	784	1252
STRING	#4096	820	1252
RCDATA	MYDLL	1107456	1252
RCDATA	TFRMMAIN	283173	1252
RCDATA	TFRMTRACKS	1115	1252
GROUP_CURSOR	#32761	20	1252
GROUP_CURSOR	#32762	20	1252
GROUP_CURSOR	#32763	20	1252
GROUP_CURSOR	#32764	20	1252
GROUP_CURSOR	#32765	20	1252
GROUP_CURSOR	#32766	20	1252
GROUP_CURSOR	#32767	20	1252
GROUP_ICON	MAINICON	76	1252
VERSION	#1	592	1252
MANIFEST	#1	714	1252

module_name	hint	ord	function_name
KERNEL32.DLL			LoadLibraryA
KERNEL32.DLL			GetProcAddress
KERNEL32.DLL			VirtualProtect
KERNEL32.DLL			VirtualAlloc
KERNEL32.DLL			VirtualFree
KERNEL32.DLL			ExitProcess
advapi32.dll			FreeSid
comctl32.dll			ImageList_Add
gdi32.dll			Pie
ole32.dll			CoInitialize
oleaut32.dll			VariantCopy
shell32.dll			ShellExecuteW
user32.dll			GetDC
version.dll			VerQueryValueW

StringTable 040904E4

CompanyName	Korama
FileDescription	Launcher and configurator for Korama's Sega PC patches
FileVersion	1.0.0.24
LegalCopyright	© 2015 by S.O.
ProductVersion	1.0.0.0

VS_FIXEDFILEINFO

FileVersion	1.0.0.24
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	1142784	EXE	04/03/2015 22:58:47	#
15c1	15	HTM		#
1078a0	43751	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x213c9c

[?] can't find file_offset of VA 0x213dd0

[?] can't find file_offset of VA 0x213f04

[?] can't find file_offset of VA 0x214038

[?] can't find file_offset of VA 0x21416c

[?] can't find file_offset of VA 0x2142a0

[?] can't find file_offset of VA 0x2143d4

[?] can't find file_offset of VA 0x214508

[?] can't find file_offset of VA 0x2146d8

[?] can't find file_offset of VA 0x2148bc

[?] can't find file_offset of VA 0x214a8c

[?] can't find file_offset of VA 0x214c5c

[?] can't find file_offset of VA 0x214e2c

[?] can't find file_offset of VA 0x214ffc

[?] can't find file_offset of VA 0x2151cc

[?] can't find file_offset of VA 0x21539c

[?] can't find file_offset of VA 0x21556c

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x224664

[?] can't find file_offset of VA 0x2246b4

[?] can't find file_offset of VA 0x224d84

[?] can't find file_offset of VA 0x225238

[?] can't find file_offset of VA 0x2254b4

[?] can't find file_offset of VA 0x2258c8

[?] can't find file_offset of VA 0x225af0

[?] can't find file_offset of VA 0x225bbc

[?] can't find file_offset of VA 0x225ca8

[?] can't find file_offset of VA 0x22601c

[?] can't find file_offset of VA 0x226408

[?] can't find file_offset of VA 0x2268d4

[?] can't find file_offset of VA 0x226b54

[?] can't find file_offset of VA 0x226f74

[?] can't find file_offset of VA 0x227394

[?] can't find file_offset of VA 0x227708

[?] can't find file_offset of VA 0x227b0c

[?] can't find file_offset of VA 0x227d90

[?] can't find file_offset of VA 0x227e4c

[?] can't find file_offset of VA 0x227f4c

[?] can't find file_offset of VA 0x228284

[?] can't find file_offset of VA 0x228674

[?] can't find file_offset of VA 0x228984

[?] can't find file_offset of VA 0x228cb8

[!] refusing to read CURDIRENTRY beyond resource size

[?] can't find file_offset of VA 0x1d3c14

[?] can't find file_offset of VA 0x1e3000

[?] can't find file_offset of VA 0x1e2000