MirrorsEdge.exe - Mirror's Edge™

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	MirrorsEdge.exe
size	6703104 (0x664800)
md5	c3092d62ef90c56e2bdf35709444dcff

type	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x40
blocks_in_file	1
num_relocs	0
header_paragraphs	2
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0xa
overlay_number	0
reserved0	0xeba1f0e00000000
oem_id	0xb400
oem_info	0xcd09
reserved2	0x4c01b821
reserved3	0x695721cd
reserved4	0x2032336e
reserved5	0x4558452e
reserved6	0x240a0d2e
lfanew	0x40

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 57 69  |........!..L.!Wi|
00000010: 6e 33 32 20 2e 45 58 45  2e 0d 0a 24 40 00 00 00  |n32 .EXE...$@...|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4965fff1
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x322
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x168a000
SizeOfInitializedData	0x894000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1d2b91e
BaseOfCode	0x1000
BaseOfData	0x168b000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1dc2000
SizeOfHeaders	0x200
CheckSum	0
Subsystem	2
DllCharacteristics	0x100
SizeOfStackReserve	0x300000
SizeOfStackCommit	0x300000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MPRESS v2.12 (MATCODE Software)

Sections

name	va	vsize	raw size	flags
.ANON1	0x1000	0x1d2a000	0x5ce600	RWX CODE IDATA UDATA
.ANON2	0x1d2b000	0x2000	0x1600	RWX CODE IDATA UDATA
.ANON3	0x1d2d000	0x94830	0x94a00	RW- IDATA

Data Directory

type	va	size
EXPORT	0x1d2b000	0x50
IMPORT	0x1d2b050	0x8d0
RESOURCE	0x1d2d000	0x94830
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1d2b35c	0x130
Delay_IAT	0x1b2e864	0x80
CLR_Header	0	0

show previews

type	name	size
CURSOR	#11	308
CURSOR	#12	308
CURSOR	#13	308
CURSOR	#14	308
BITMAP	WXBITMAP_STD_COLOURS	108
ICON	#1	270376
ICON	#2	16936
ICON	#3	9640
ICON	#4	4264
ICON	#5	1128
ICON	#6	270376
ICON	#7	16936
ICON	#8	9640
ICON	#9	4264
ICON	#10	1128
DIALOG	#101	300
DIALOG	#102	344
RCDATA	#1010	1229
GROUP_CURSOR	WXCURSOR_CROSS	20
GROUP_CURSOR	#104	20
GROUP_CURSOR	#105	20
GROUP_CURSOR	#106	20
GROUP_ICON	#113	76
GROUP_ICON	#117	76
VERSION	#1	812
MANIFEST	#1	1094

module_name	ord	function_name
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetProcAddress
wxmsw28u_core_vc_custom.dll		public: virtual __thiscall wxDC::~wxDC(void) ??1wxDC@@UAE@XZ
wxmsw28u_xrc_vc_custom.dll		public: static class wxXmlResource * __cdecl wxXmlResource::Get(void) ?Get@wxXmlResource@@SAPAV1@XZ
wxmsw28u_vc_custom.dll		void __cdecl wxBell(void) ?wxBell@@YAXXZ
dbghelp.dll		StackWalk64
USER32.dll		GetDC
ole32.dll		CoInitialize
ILPointCloudLib.dll		ILCreateCloud
MSVCP80.dll		_FInf
MSVCR80.dll		_j1
faultrep.DLL		ReportFault
IMM32.dll		ImmGetContext
POWRPROF.dll		CallNtPowerInformation
WINMM.dll		waveInOpen
libresample.dll		resample_open
PhysXExtensions.dll		NxCreateExtension
CRYPT32.dll		CryptProtectData
iphlpapi.dll		GetAdaptersInfo
vorbis.dll		vorbis_analysis
vorbisenc.dll		vorbis_encode_init_vbr
vorbisfile.dll		ov_info
ogg.dll		ogg_page_eos
WSOCK32.dll	18
wxmsw28u_aui_vc_custom.dll		public: virtual __thiscall wxAuiManager::~wxAuiManager(void) ??1wxAuiManager@@UAE@XZ
wxmsw28u_html_vc_custom.dll		public: virtual __thiscall wxHtmlWindow::~wxHtmlWindow(void) ??1wxHtmlWindow@@UAE@XZ
wxmsw28u_adv_vc_custom.dll		public: virtual __thiscall wxGrid::~wxGrid(void) ??1wxGrid@@UAE@XZ
d3dx10_35.dll		D3DXMatrixInverse
d3d9.dll		Direct3DCreate9
DINPUT8.dll		DirectInput8Create
XINPUT1_3.dll	3
binkw32.dll		_BinkWait@4
WS2_32.dll	22
NETAPI32.dll		Netbios
GDI32.dll		TextOutW
ADVAPI32.dll		RegCloseKey
SHELL32.dll		ShellExecuteW
OLEAUT32.dll	2
d3dx9_35.dll		D3DXCleanMesh

ord	entry_va	function_name
1	0x1c553c4	SecuROM

module_name	TdGame-ShippingPC.exe
flags	0
timestamp	2009-01-08 13:30:25
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x1d2b042
Functions(1)	0x1d2b028
NameOrdinals(1)	0x1d2b04e

StringTable 000004b0

CompanyName	EA Digital Illusions CE AB
FileDescription	Mirror's Edge™
FileVersion	1.0.1.0
LegalCopyright	Copyright © 2009 EA Digital Illusions CE AB.
LegalTrademarks	Mirror's Edge™
OriginalFilename	MirrorsEdge.exe
ProductName	Mirror's Edge
ProductVersion	1.0.1.0

VS_FIXEDFILEINFO

FileVersion	1.0.1.0
ProductVersion	1.0.1.0
StrucVersion	0x10000
FileFlagsMask	0x17
FileFlags	0
FileOS	4
FileType	0
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	6697520	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x1d29800

[?] can't find file_offset of VA 0x1d29950

[?] can't find file_offset of VA 0x1d29aa0

[?] can't find file_offset of VA 0x1d29bf0

[?] can't find file_offset of VA 0x1d29790

[?] can't find file_offset of VA 0x1c95610

[?] can't find file_offset of VA 0x1c95740

[?] can't find file_offset of VA 0x1d2a070

[?] can't find file_offset of VA 0x1d29d28

[?] can't find file_offset of VA 0x1d29a88

[?] can't find file_offset of VA 0x1d29bd8

[?] can't find file_offset of VA 0x1d29938

[?] can't find file_offset of VA 0x1b2e864

MirrorsEdge.exe-