VBS2.exe - VBS2 - VBS2 2.02

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	VBS2.exe
size	18399232 (0x118c000)
md5	a77e453db2e8fac3980bd0066b9fe3f9

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x120

Rich Header

lib id	version	times used
147	30729	4
25	9210	2
123	50727	6
126	50327	16
125	50727	57
95	4035	2
147	21022	2
96	3077	1
95	3077	39
93	4035	29
1	0	494
109	50727	310
110	50727	522
122	50727	1
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	7
TimeDateStamp	0x50afbef9
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x122
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0xa10000
SizeOfInitializedData	0x5c3000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xfd4280
BaseOfCode	0x1000
BaseOfData	0xa11000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x11e2000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x800000
SizeOfStackCommit	0x100000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

HASP HL Protection v1.X (Aladdin)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xa0f789	0xa10000	R-X CODE
.rdata	0xa11000	0x18eb42	0x18f000	R-- IDATA
.data	0xba0000	0xb0238	0x5b000	RW- IDATA
.tls	0xc51000	2	0x1000	RW- IDATA
.rsrc	0xc52000	0x2ba8b0	0x2bb000	R-- IDATA
.reloc	0xf0d000	0xc65a6	0xc7000	RW- IDATA DISCARDABLE
.protect	0xfd4000	0x20ded5	0x20e000	RWX CODE

Data Directory

type	va	size
EXPORT	0xb9f920	0x222
IMPORT	0x11e18d0	0x605
RESOURCE	0xc52000	0x2ba8b0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xfd5000	0x78
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xb5d4e8	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0xb9cac4	0x80
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x1051000	0x1051001	0x104e1e4	0xe2c8b4	0	0

show previews

type	name	size
ICON	#1	270376
ICON	#2	67624
ICON	#3	38056
ICON	#4	16936
ICON	#5	9640
ICON	#6	4264
ICON	#7	1128
ICON	#8	270376
ICON	#9	67624
ICON	#10	38056
ICON	#11	16936
ICON	#12	9640
ICON	#13	4264
ICON	#14	1128
ICON	#15	270376
ICON	#16	67624
ICON	#17	38056
ICON	#18	16936
ICON	#19	9640
ICON	#20	4264
ICON	#21	1128
ICON	#22	270376
ICON	#23	67624
ICON	#24	38056
ICON	#25	16936
ICON	#26	9640
ICON	#27	4264
ICON	#28	1128
ICON	#29	270376
ICON	#30	67624
ICON	#31	38056
ICON	#32	16936
ICON	#33	9640
ICON	#34	4264
ICON	#35	1128
ICON	#36	270376
ICON	#37	67624
ICON	#38	38056
ICON	#39	16936
ICON	#40	9640
ICON	#41	4264
ICON	#42	1128
ICON	#43	270376
ICON	#44	67624
ICON	#45	38056
ICON	#46	16936
ICON	#47	9640
ICON	#48	4264
ICON	#49	1128
DIALOG	#101	120
DIALOG	#104	334
GROUP_ICON	APPICON	104
GROUP_ICON	APPICON+1	104
GROUP_ICON	APPICON+2	104
GROUP_ICON	APPICON+3	104
GROUP_ICON	APPICON+4	104
GROUP_ICON	APPICON+5	104
GROUP_ICON	APPICON+6	104
VERSION	#1	788

module_name	hint	ord	function_name
KERNEL32.dll	365		GetTickCount
KERNEL32.dll	185		GetACP
KERNEL32.dll	305		GetOEMCP
KERNEL32.dll	247		GetCurrentProcess
KERNEL32.dll	248		GetCurrentProcessId
KERNEL32.dll	249		GetCurrentThread
KERNEL32.dll	282		GetLastError
KERNEL32.dll	343		GetSystemDefaultLCID
KERNEL32.dll	372		GetVersion
KERNEL32.dll	671		TerminateThread
KERNEL32.dll	662		Sleep
KERNEL32.dll	250		GetCurrentThreadId
KERNEL32.dll	718		WaitForSingleObject
KERNEL32.dll	662		Sleep
KERNEL32.dll	27		CloseHandle
KERNEL32.dll	351		GetSystemTimeAsFileTime
KERNEL32.dll	426		InitializeCriticalSection
KERNEL32.dll	102		EnterCriticalSection
KERNEL32.dll	85		DeleteCriticalSection
KERNEL32.dll	437		IsBadReadPtr
KERNEL32.dll	449		LeaveCriticalSection
KERNEL32.dll	250		GetCurrentThreadId
KERNEL32.dll	248		GetCurrentProcessId
KERNEL32.dll	409		HeapAlloc
KERNEL32.dll	320		GetProcessHeap
KERNEL32.dll	415		HeapFree
KERNEL32.dll	92		DeviceIoControl
KERNEL32.dll	460		LocalFree
KERNEL32.dll	52		CreateFileA
KERNEL32.dll	456		LocalAlloc
KERNEL32.dll	429		InterlockedDecrement
KERNEL32.dll	428		InterlockedCompareExchange
KERNEL32.dll	63		CreateMutexA
KERNEL32.dll	549		ReleaseMutex
KERNEL32.dll	175		FormatMessageA
KERNEL32.dll	282		GetLastError
KERNEL32.dll	375		GetVolumeInformationA
KERNEL32.dll	265		GetEnvironmentVariableA
KERNEL32.dll	268		GetExitCodeThread
KERNEL32.dll	318		GetProcAddress
KERNEL32.dll	450		LoadLibraryA
KERNEL32.dll	677		TlsSetValue
KERNEL32.dll	676		TlsGetValue
KERNEL32.dll	674		TlsAlloc
KERNEL32.dll	667		SystemTimeToFileTime
KERNEL32.dll	349		GetSystemTime
KERNEL32.dll	138		FileTimeToSystemTime
KERNEL32.dll	247		GetCurrentProcess
KERNEL32.dll	675		TlsFree
KERNEL32.dll	294		GetModuleHandleA
KERNEL32.dll	536		ReadFile
KERNEL32.dll	735		WriteFile
KERNEL32.dll	274		GetFileSize
KERNEL32.dll	144		FindClose
KERNEL32.dll	283		GetLocalTime
KERNEL32.dll	612		SetErrorMode
KERNEL32.dll	148		FindFirstFileA
KERNEL32.dll	157		FindNextFileA
KERNEL32.dll	292		GetModuleFileNameA
KERNEL32.dll	432		InterlockedIncrement
KERNEL32.dll	418		HeapReAlloc
KERNEL32.dll	563		SearchPathA
KERNEL32.dll	71		CreateSemaphoreA
KERNEL32.dll	497		OpenSemaphoreA
KERNEL32.dll	550		ReleaseSemaphore
KERNEL32.dll	74		CreateThread
KERNEL32.dll	671		TerminateThread
KERNEL32.dll	180		FreeLibrary
KERNEL32.dll	372		GetVersion
MSVCRT.dll	704		strncmp
SETUPAPI.dll	112		SetupDiEnumDeviceInfo
ADVAPI32.dll	215		GetUserNameA
COMCTL32.dll	67		InitCommonControlsEx
USER32.dll	399		IsWindow
USER32.dll	618		ShowWindow
USER32.dll	237		GetClassNameA
USER32.dll	354		GetWindowThreadProcessId
USER32.dll	338		GetWindow
USER32.dll	603		SetWindowPos
USER32.dll	258		GetDlgItem
USER32.dll	657		UpdateWindow
USER32.dll	607		SetWindowTextW
USER32.dll	353		GetWindowTextW
USER32.dll	240		GetClientRect
USER32.dll	348		GetWindowRect
USER32.dll	532		SendMessageA
USER32.dll	132		DefWindowProcA
USER32.dll	255		GetDesktopWindow
USER32.dll	451		MessageBoxW
USER32.dll	208		EnumWindows
USER32.dll	342		GetWindowLongA
USER32.dll	600		SetWindowLongA
KERNEL32.dll	294		GetModuleHandleA
KERNEL32.dll	318		GetProcAddress
USER32.dll	446		MessageBoxA
DDRAW.dll	12		DirectDrawEnumerateExA
WINMM.dll	179		waveInStart
AVIFIL32.dll	19		AVIFileRelease
LIBEAY32.dll		339
KERNEL32.dll	484		GetUserDefaultLangID
USER32.dll	222		EnumWindows
GDI32.dll	55		CreateEnhMetaFileA
ADVAPI32.dll	516		RegSetValueExA
SHELL32.dll	175		SHGetFolderPathA
ole32.dll	60		CoInitializeEx
OLEAUT32.dll		2
DINPUT8.dll			DirectInput8Create
WS2_32.dll		1
DSOUND.dll		6
X3DAudio1_6.dll	1		X3DAudioInitialize
SETUPAPI.dll	285		SetupDiDestroyDeviceInfoList
HID.DLL	2		HidD_GetAttributes
XINPUT1_3.dll		2
PhysXLoader.dll	8		NxGetUtilLib
d3d9.dll	9		Direct3DCreate9
d3dx9_41.dll	13		D3DXCompileShader

ord	entry_va	function_name
1	0x544f91	?CDPCreateClient@@YAXV?$RStringCT@D@@H0@Z
2	0x52907b	?CDPCreateDisplayIPAddress@@YAXPAVControlsContainer@@@Z
3	0x57aafb	?CDPCreateDisplaySingleMission@@YAXPAVControlsContainer@@@Z
4	0x529276	?CDPCreateEditor@@YAXPAVControlsContainer@@_N1@Z
5	0x5655d4	?CDPCreateOutro@@YA_NPAVDisplay@@W4EndMode@@@Z
6	0x555967	?CDPCreateServer@@YAXXZ
7	0x9f9c4	?CDPInitServer@@YAPAVNetTranspServer@@V?$RStringCT@D@@0HHABVParamEntry@@@Z
8	0x57190e	?CDPPlayAward@@YAXPAVDisplay@@V?$RStringCT@D@@ABVParamEntry@@@Z

module_name	VBS2.exe
flags	0
timestamp	2012-11-23 18:22:46
version	0.0
ordinal_base	1
nFunctions	8
nNames	8
Names(8)	0xb9f968
Functions(8)	0xb9f948
NameOrdinals(8)	0xb9f988

StringTable 040904b0

CompanyName	Bohemia Interactive Simulations
FileDescription	VBS2 2.02
FileVersion	2, 02, 0, 99374
InternalName	VBS2
LegalCopyright	Copyright © BISim 1996-2011
LegalTrademarks
OriginalFilename	VBS2
ProductName	VBS2 2.02
ProductVersion	2, 02, 0, 99374

VS_FIXEDFILEINFO

FileVersion	2.2.99.374
ProductVersion	2.2.99.374
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	18393648	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0xc4e1e4

VBS2.exe- VBS2 - VBS2 2.02

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

VBS2.exe
- VBS2 - VBS2 2.02