filenameBattlefrontII.exe
size4357632 (0x427e00)
md5bd9f9ca3b311877308e8c26e155ab7e6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x158

Rich Header

lib idversiontimes used
199411188
2232100516
2242100520
225210055
221210054
221406294
1089661
9330772
4990441
171303191
1473072918
156212022
123507273
10356
22540629264
2244062913
126507271
131307299
22940629501
220406291
219210051
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x59ede353
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x369600
SizeOfInitializedData0x1875800
SizeOfUninitializedData0
AddressOfEntryPoint0x352c3e
BaseOfCode0x1000
BaseOfData0x36b000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x1be4000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x400000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x36950b0x369600R-X CODE
.rdata0x36b0000x726a80x72800R-- IDATA
.data0x3de0000x17ce3c80x17000RW- IDATA
_RDATA0x1bad0000x7e00x800R-- IDATA
.rsrc0x1bae0000x1e00x200R-- IDATA
.reloc0x1baf0000x3412c0x34200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x3db0500x921
IMPORT0x3db9740x154
RESOURCE0x1bae0000x1e0
EXCEPTION00
SECURITY00
BASERELOC0x1baf0000x3412c
DEBUG0x36cab00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3b29a00x40
Bound_IAT00
IAT0x36b0000x5ac
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#13810
module_namehintordfunction_name
d3d9.dll9Direct3DCreate9
d3dx9_43.dll241D3DXQuaternionNormalize
d3dx9_43.dll317D3DXVec3TransformNormal
d3dx9_43.dll310D3DXVec3Normalize
d3dx9_43.dll7D3DXCheckTextureRequirements
d3dx9_43.dll326D3DXVec4Transform
d3dx9_43.dll214D3DXMatrixRotationY
d3dx9_43.dll315D3DXVec3TransformCoord
d3dx9_43.dll217D3DXMatrixScaling
d3dx9_43.dll211D3DXMatrixRotationAxis
d3dx9_43.dll212D3DXMatrixRotationQuaternion
d3dx9_43.dll216D3DXMatrixRotationZ
d3dx9_43.dll195D3DXMatrixInverse
d3dx9_43.dll213D3DXMatrixRotationX
d3dx9_43.dll198D3DXMatrixMultiply
WS2_32.dll14
WS2_32.dll12
WS2_32.dll57
WS2_32.dll19
WS2_32.dll3
WS2_32.dll23
WS2_32.dll2
WS2_32.dll52
WS2_32.dll111
WS2_32.dll21
WS2_32.dll15
WS2_32.dll10
WS2_32.dll4
WS2_32.dll115
WS2_32.dll17
WS2_32.dll20
WS2_32.dll9
Galaxy.dll9public: static void __cdecl galaxy::api::GalaxyFactory::ResetInstance(void)

?ResetInstance@GalaxyFactory@api@galaxy@@SAXXZ

Galaxy.dll7public: static class galaxy::api::IErrorManager * __cdecl galaxy::api::GalaxyFactory::GetErrorManager(void)

?GetErrorManager@GalaxyFactory@api@galaxy@@SAPAVIErrorManager@23@XZ

Galaxy.dll8public: static class galaxy::api::IGalaxy * __cdecl galaxy::api::GalaxyFactory::GetInstance(void)

?GetInstance@GalaxyFactory@api@galaxy@@SAPAVIGalaxy@23@XZ

Galaxy.dll6public: static class galaxy::api::IGalaxy * __cdecl galaxy::api::GalaxyFactory::CreateInstance(void)

?CreateInstance@GalaxyFactory@api@galaxy@@SAPAVIGalaxy@23@XZ

steam_api.dll779SteamAPI_RegisterCallResult
steam_api.dll776SteamAPI_Init
steam_api.dll802SteamInternal_CreateInterface
steam_api.dll110SteamAPI_GetHSteamPipe
steam_api.dll782SteamAPI_RestartAppIfNecessary
steam_api.dll787SteamAPI_Shutdown
steam_api.dll788SteamAPI_UnregisterCallResult
steam_api.dll801SteamInternal_ContextInit
steam_api.dll783SteamAPI_RunCallbacks
steam_api.dll111SteamAPI_GetHSteamUser
KERNEL32.dll496GetFileSize
KERNEL32.dll960ReadFile
KERNEL32.dll1126SetFilePointer
KERNEL32.dll460GetDiskFreeSpaceA
KERNEL32.dll1022ReleaseSemaphore
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll171CreateSemaphoreA
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll234EncodePointer
KERNEL32.dll452GetCurrentThread
KERNEL32.dll1202Sleep
KERNEL32.dll1177SetThreadPriority
KERNEL32.dll306FindFirstFileA
KERNEL32.dll302FindClose
KERNEL32.dll654GetThreadPriority
KERNEL32.dll211DeleteFileA
KERNEL32.dll515GetLocalTime
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll936QueryPerformanceFrequency
KERNEL32.dll659GetTickCount
KERNEL32.dll905OutputDebugStringA
KERNEL32.dll136CreateFileA
KERNEL32.dll1205SleepEx
KERNEL32.dll1317WriteFile
KERNEL32.dll124CreateDirectoryA
KERNEL32.dll82CloseHandle
KERNEL32.dll514GetLastError
KERNEL32.dll155CreateMutexA
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll354FreeLibrary
KERNEL32.dll828LoadLibraryA
KERNEL32.dll748InterlockedExchange
KERNEL32.dll533GetModuleHandleA
KERNEL32.dll1139SetLastError
KERNEL32.dll668GetUserDefaultLangID
KERNEL32.dll675GetVersionExA
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll1351lstrcpyA
KERNEL32.dll1358lstrlenW
KERNEL32.dll202DecodePointer
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll581GetProcAddress
KERNEL32.dll181CreateThread
USER32.dll714SetWindowTextA
USER32.dll295GetDlgItem
USER32.dll218EndDialog
USER32.dll171DialogBoxParamA
USER32.dll208DrawTextW
USER32.dll288GetCursorPos
USER32.dll650SetCursorPos
USER32.dll747SystemParametersInfoA
USER32.dll517MapVirtualKeyA
USER32.dll755ToUnicode
USER32.dll753ToAscii
USER32.dll322GetKeyboardState
USER32.dll317GetKeyState
USER32.dll300GetFocus
USER32.dll411GetWindowPlacement
USER32.dll710SetWindowPos
USER32.dll166DestroyWindow
USER32.dll648SetCursor
USER32.dll567PostQuitMessage
USER32.dll492LoadIconA
USER32.dll276GetClientRect
USER32.dll631SendMessageA
USER32.dll764TranslateMessage
USER32.dll331GetMenu
USER32.dll686SetRect
USER32.dll109CreateWindowExA
USER32.dll562PeekMessageA
USER32.dll155DefWindowProcA
USER32.dll291GetDesktopWindow
USER32.dll174DispatchMessageA
USER32.dll2AdjustWindowRect
USER32.dll164DestroyMenu
USER32.dll247FindWindowA
USER32.dll488LoadCursorA
USER32.dll587RegisterClassA
USER32.dll735ShowWindow
USER32.dll565PostMessageA
USER32.dll301GetForegroundWindow
USER32.dll246FillRect
USER32.dll205DrawTextA
USER32.dll289GetDC
USER32.dll613ReleaseDC
GDI32.dll696TextOutA
GDI32.dll697TextOutW
GDI32.dll570MoveToEx
GDI32.dll373GdiFlush
GDI32.dll507GetObjectA
GDI32.dll53CreateDIBSection
GDI32.dll525GetStockObject
GDI32.dll638SetBkColor
GDI32.dll639SetBkMode
GDI32.dll566LineTo
GDI32.dll230DeleteObject
GDI32.dll227DeleteDC
GDI32.dll61CreateFontIndirectA
GDI32.dll48CreateCompatibleDC
GDI32.dll460GetDeviceGammaRamp
GDI32.dll654SetICMMode
GDI32.dll631SelectObject
GDI32.dll660SetMapMode
GDI32.dll678SetTextColor
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll568RegCreateKeyExA
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll560RegCloseKey
MSVCP120.dll713void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP120.dll717void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP120.dll716void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP120.dll1565_Xtime_get_ticks
MSVCP120.dll1535_Thrd_sleep
MSVCP120.dll1564_Xtime_diff_to_millis2
MSVCP120.dll1568xtime_get
MSVCP120.dll709char const * __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAPBDH@Z

MSVCP120.dll688char const * __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPBDH@Z

MSVCR120.dll558_calloc_crt
MSVCR120.dll1284_unlock
MSVCR120.dll916_lock
MSVCR120.dll111public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR120.dll1350_wassert
MSVCR120.dll1614exit
MSVCR120.dll1073_mkdir
MSVCR120.dll542_atoi64
MSVCR120.dll372__CxxFrameHandler3
MSVCR120.dll1841strcoll
MSVCR120.dll1147_setjmp3
MSVCR120.dll1748longjmp
MSVCR120.dll1844strcspn
MSVCR120.dll1859strtod
MSVCR120.dll1867strtoul
MSVCR120.dll1855strpbrk
MSVCR120.dll1764memchr
MSVCR120.dll1698iscntrl
MSVCR120.dll1695isalnum
MSVCR120.dll1704ispunct
MSVCR120.dll1721isxdigit
MSVCR120.dll1702islower
MSVCR120.dll1706isupper
MSVCR120.dll1646floor
MSVCR120.dll1559ceil
MSVCR120.dll908_libm_sse2_tan_precise
MSVCR120.dll907_libm_sse2_sqrt_precise
MSVCR120.dll430__dllonexit
MSVCR120.dll1082_onexit
MSVCR120.dll309void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR120.dll363_XcptFilter
MSVCR120.dll413__crtGetShowWindowMode
MSVCR120.dll535_amsg_exit
MSVCR120.dll438__getmainargs
MSVCR120.dll498__set_app_type
MSVCR120.dll559_cexit
MSVCR120.dll817_ismbblead
MSVCR120.dll576_configthreadlocale
MSVCR120.dll500__setusermatherr
MSVCR120.dll781_initterm_e
MSVCR120.dll780_initterm
MSVCR120.dll526_acmdln
MSVCR120.dll674_fmode
MSVCR120.dll575_commode
MSVCR120.dll592_crt_debugger_hook
MSVCR120.dll427__crtTerminateProcess
MSVCR120.dll631_except1
MSVCR120.dll634_except_handler4_common
MSVCR120.dll425__crtSetUnhandledExceptionFilter
MSVCR120.dll788_invoke_watson
MSVCR120.dll579_controlfp_s
MSVCR120.dll1202_stricmp
MSVCR120.dll1206_strlwr
MSVCR120.dll1212_strnicmp
MSVCR120.dll1395_wcsupr
MSVCR120.dll1236_strupr
MSVCR120.dll1361_wcsicmp
MSVCR120.dll1198_strdup
MSVCR120.dll344_CxxThrowException
MSVCR120.dll633_except_handler3
MSVCR120.dll428__crtUnhandledException
MSVCR120.dll1856strrchr
MSVCR120.dll1839strchr
MSVCR120.dll1153_snprintf
MSVCR120.dll1852strncpy
MSVCR120.dll1436_wmakepath
MSVCR120.dll1421_wfindfirst64i32
MSVCR120.dll1438_wmkdir
MSVCR120.dll1426_wfopen
MSVCR120.dll630_errno
MSVCR120.dll1451_wremove
MSVCR120.dll662_findclose
MSVCR120.dll1665fread
MSVCR120.dll1470_wsplitpath
MSVCR120.dll1425_wfindnext64i32
MSVCR120.dll1678fwrite
MSVCR120.dll1431_wfullpath
MSVCR120.dll1623fclose
MSVCR120.dll1831sprintf
MSVCR120.dll1097_purecall
MSVCR120.dll1835sscanf
MSVCR120.dll1519atoi
MSVCR120.dll1796qsort
MSVCR120.dll1765memcmp
MSVCR120.dll1518atof
MSVCR120.dll1851strncmp
MSVCR120.dll1520atol
MSVCR120.dll670_findnext64i32
MSVCR120.dll931_makepath
MSVCR120.dll709_fullpath
MSVCR120.dll666_findfirst64i32
MSVCR120.dll1862strtok
MSVCR120.dll1321_vsnprintf
MSVCR120.dll1768memmove
MSVCR120.dll318void __cdecl Concurrency::wait(unsigned int)

?wait@Concurrency@@YAXI@Z

MSVCR120.dll206public: static unsigned int __cdecl Concurrency::details::_CurrentScheduler::_Id(void)

?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ

MSVCR120.dll1640fflush
MSVCR120.dll643_exit
MSVCR120.dll1657fopen
MSVCR120.dll1659fprintf
MSVCR120.dll1196_strdate
MSVCR120.dll1221_strtime
MSVCR120.dll1667free
MSVCR120.dll1755malloc
MSVCR120.dll1256_time64
MSVCR120.dll1799rand
MSVCR120.dll1522bsearch
MSVCR120.dll1834srand
MSVCR120.dll1847strftime
MSVCR120.dll914_localtime64
MSVCR120.dll1705isspace
MSVCR120.dll1884tolower
MSVCR120.dll1885toupper
MSVCR120.dll1849strncat
MSVCR120.dll1696isalpha
MSVCR120.dll1699isdigit
MSVCR120.dll1858strstr
MSVCR120.dll1643fgets
MSVCR120.dll1661fputc
MSVCR120.dll1805remove
MSVCR120.dll1675ftell
MSVCR120.dll1673fseek
MSVCR120.dll323public: virtual char const * __thiscall std::exception::what(void)const

?what@exception@std@@UBEPBDXZ

MSVCR120.dll106public: virtual __thiscall std::exception::~exception(void)

??1exception@std@@UAE@XZ

MSVCR120.dll45public: __thiscall std::exception::exception(void)

??0exception@std@@QAE@XZ

MSVCR120.dll44public: __thiscall std::exception::exception(class std::exception const &)

??0exception@std@@QAE@ABV01@@Z

MSVCR120.dll1809rename
MSVCR120.dll274int __cdecl _open(char const *, int, int)

?_open@@YAHPBDHH@Z

MSVCR120.dll925_lseek
MSVCR120.dll1453_write
MSVCR120.dll1651fmaxf
MSVCR120.dll573_close
MSVCR120.dll1770memset
MSVCR120.dll1766memcpy
MSVCR120.dll1703isprint
MSVCR120.dll440__iob_func
MSVCR120.dll1632feof
MSVCR120.dll1634ferror
MSVCR120.dll1681getc
MSVCR120.dll1892ungetc
MSVCR120.dll1845strerror
MSVCR120.dll1662fputs
MSVCR120.dll1670frexp
MSVCR120.dll1723ldexp
MSVCR120.dll327_CIatan2
MSVCR120.dll331_CIfmod
MSVCR120.dll898_libm_sse2_acos_precise
MSVCR120.dll899_libm_sse2_asin_precise
MSVCR120.dll900_libm_sse2_atan_precise
MSVCR120.dll901_libm_sse2_cos_precise
MSVCR120.dll902_libm_sse2_exp_precise
MSVCR120.dll903_libm_sse2_log10_precise
MSVCR120.dll904_libm_sse2_log_precise
MSVCR120.dll905_libm_sse2_pow_precise
MSVCR120.dll906_libm_sse2_sin_precise
DSOUND.dll11
DSOUND.dll9
DSOUND.dll7
DSOUND.dll1
DSOUND.dll12
DSOUND.dll2
DINPUT8.dllDirectInput8Create
binkw32.dll24_BinkDoFrame@4
binkw32.dll39_BinkNextFrame@4
binkw32.dll64_BinkWait@4
binkw32.dll15_BinkClose@4
binkw32.dll19_BinkCopyToBuffer@28
binkw32.dll62_BinkSetVolume@12
binkw32.dll51_BinkSetIO@4
binkw32.dll52_BinkSetIOSize@4
binkw32.dll59_BinkSetSoundSystem@8
binkw32.dll41_BinkOpenDirectSound@4
binkw32.dll23_BinkDX9SurfaceType@4
binkw32.dll53_BinkSetMemory@8
binkw32.dll25_BinkGetError@0
binkw32.dll40_BinkOpen@8
WINMM.dll148timeGetTime
ole32.dll62CoInitialize
ole32.dll108CoUninitialize
ole32.dll16CoCreateInstance
ordentry_vafunction_name
10x1d7de0??$Allocate@VGalaxyAuthListener@gf@@AAH@gf@@YAPAVGalaxyAuthListener@0@AAH@Z
20x12ffa0??$Allocate@VGalaxyFriendListListener@?A0x706288b3@@@gf@@YAPAVGalaxyFriendListListener@?A0x706288b3@@XZ
30x130040??$Allocate@VGalaxyGameJoinRequestedListener@?A0x706288b3@@@gf@@YAPAVGalaxyGameJoinRequestedListener@?A0x706288b3@@XZ
40x1d7e80??$Allocate@VGalaxyLobbyCreatedListener@gf@@@gf@@YAPAVGalaxyLobbyCreatedListener@0@XZ
50x1d81a0??$Allocate@VGalaxyLobbyDataListener@gf@@@gf@@YAPAVGalaxyLobbyDataListener@0@XZ
60x1d8060??$Allocate@VGalaxyLobbyEnteredListener@gf@@@gf@@YAPAVGalaxyLobbyEnteredListener@0@XZ
70x1d7f20??$Allocate@VGalaxyLobbyLeftListener@gf@@@gf@@YAPAVGalaxyLobbyLeftListener@0@XZ
80x1d8100??$Allocate@VGalaxyLobbyListListener@gf@@@gf@@YAPAVGalaxyLobbyListListener@0@XZ
90x1d7fc0??$Allocate@VGalaxyLobbyMemberStateListener@gf@@@gf@@YAPAVGalaxyLobbyMemberStateListener@0@XZ
100x1d8240??$Allocate@VGalaxyLobbyOwnerChangeListener@gf@@@gf@@YAPAVGalaxyLobbyOwnerChangeListener@0@XZ
110x11c70??0SteamAuthProvider@gf@@QAE@XZ
120x11c90??4SteamAuthProvider@gf@@QAEAAV01@ABV01@@Z
130x12efa0?FromString@utils@gf@@YAHPBDH@Z
140x12efd0?FromString@utils@gf@@YAIPBDI@Z
150x12ef10?FromString@utils@gf@@YA_NPBD_N@Z
160x12eb80?GetEncryptedAppTicket@SteamAuthProvider@gf@@QAEHPADH@Z
170x12ed50?GetPersonaName@SteamAuthProvider@gf@@QAEPBDXZ
180x12eaf0?Init@SteamAuthProvider@gf@@QAE_NIAA_N@Z
190x11c80?IsInitialized@SteamAuthProvider@gf@@QAE_NXZ
200x12eb70?Shutdown@SteamAuthProvider@gf@@QAEXXZ
210x12eed0?ToString@utils@gf@@YAPBDH@Z
220x12eef0?ToString@utils@gf@@YAPBDI@Z
230x12eeb0?ToString@utils@gf@@YAPBD_N@Z
240x12eab0?_sap@gf@@YAPAVSteamAuthProvider@1@XZ
250x12edb0?checkError@gf@@YA_NXZ
260x12f210?connectionStringByIndex@friends@gf@@YAPBDI@Z
270x12ee40?deinitialize@gf@@YAXXZ
280x12f090?friendByIndex@friends@gf@@YA?AVGalaxyID@api@galaxy@@I@Z
290x12f060?friendCount@friends@gf@@YAIXZ
300x12f0e0?friendNameByIndex@friends@gf@@YAPBDI@Z
310x12f130?getAndResetDirty@friends@gf@@YA_NXZ
320x12edd0?initialize@gf@@YA_NXZ
330x12f140?isFriend@friends@gf@@YA_NABVGalaxyID@api@galaxy@@@Z
340x12eda0?isInitialized@gf@@YA_NXZ
350x12f1a0?isJoinableByIndex@friends@gf@@YA_NI@Z
360x12f050?reset@friends@gf@@YAXXZ
370x12f000?start@friends@gf@@YA_NXZ
380x12f040?stop@friends@gf@@YAXXZ
module_nameBattlefrontII.exe
flags0
timestamp2017-10-23 12:39:54
version0.0
ordinal_base1
nFunctions38
nNames38
Names(38)0x3db110
Functions(38)0x3db078
NameOrdinals(38)0x3db1a8
offsetsizetypecomment
15c115HTM#
15d04352048BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK