filenameFREECELL.EXE
size49188 (0xc024)
md5c4366e03e9d7bad72259b4dc2fd9f366
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x2c376a22
PointerToSymbolTable0
NumberOfSymbols0x2bf
SizeOfOptionalHeader0xe0
Characteristics0x838e
Magic0x10b
LinkerVersion2.39
SizeOfCode0x5c00
SizeOfInitializedData0x5a00
SizeOfUninitializedData0x1000
AddressOfEntryPoint0x5b20
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x14a0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion1.0
ImageVersion0.0
SubsystemVersion3.10
Reserved10
SizeOfImage0x11000
SizeOfHeaders0x400
CheckSum0x1a098
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x100000x5c00R-X CODE
.bss0x700000x1000RW- UDATA
.rdata0x800000x200R-- IDATA
.data0x900000xa00RW- IDATA
.rsrc0xa00000x2400R-- IDATA
.CRT0xd00000x200RW- IDATA
.idata0xe00000xa00R-- IDATA
.reloc0xf00000x1e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xe0000x9b0
RESOURCE0xa0000x23b0
EXCEPTION00
SECURITY00
BASERELOC0xf0000x874
DEBUG0x80100x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#43080
BITMAPKINGBITMAP6160
BITMAPKINGLEFT6160
BITMAPKINGSMILE6160
ICON#13040
ICON#27440
ICON#37440
MENUFREEMENU3900
DIALOGGAMENUM2300
DIALOGMOVECOL2220
DIALOGSTATS3500
DIALOGYOULOSE3340
DIALOGYOUWIN2980
STRING#191920
STRING#204580
STRING#212840
ACCELERATORSFREEMENU720
GROUP_CURSORDOWNARROW200
GROUP_ICONFREECELLICON480
VERSION#18400
idlangstring
3011033FreeCell
3021033FreeCell Game #%u
3031033Out of memory. Close other applications and try again.
3041033Do you want to resign this game?
3061033won
3071033lost
3081033wins
3091033losses
3101033streak
3111033stype
3121033win
3131033loss
3141033messages
3151033That move is not allowed.
3161033That move requires moving %u cards. You only have enough free space to move %u.
3171033Cards Left: %u
3181033FreeCell
3191033by Jim Horne
3201033How to Play
3211033Commands
3221033Game Mode
3231033fast mode
3241033standard mode
3251033(C) Copyright Microsoft, 1992
3261033Are you sure you want to delete all statistics?
module_namehintordfunction_name
CARDS.dll3cdtDrawExt
CARDS.dll4cdtInit
CARDS.dll5cdtTerm
GDI32.dll9BitBlt
GDI32.dll15CombineRgn
GDI32.dll24CreateCompatibleBitmap
GDI32.dll25CreateCompatibleDC
GDI32.dll42CreateICA
GDI32.dll48CreatePen
GDI32.dll52CreateRectRgn
GDI32.dll57CreateSolidBrush
GDI32.dll59DeleteDC
GDI32.dll62DeleteObject
GDI32.dll160GetDeviceCaps
GDI32.dll193GetPixel
GDI32.dll201GetStockObject
GDI32.dll212GetTextExtentPointA
GDI32.dll230LineTo
GDI32.dll233MoveToEx
GDI32.dll239PatBlt
GDI32.dll275SelectObject
GDI32.dll281SetBkColor
GDI32.dll298SetPixel
GDI32.dll304SetRectRgn
GDI32.dll312SetTextColor
GDI32.dll324StretchBlt
GDI32.dll328TextOutA
KERNEL32.dll83ExitProcess
KERNEL32.dll137GetCommandLineA
KERNEL32.dll179GetEnvironmentStrings
KERNEL32.dll200GetModuleFileNameA
KERNEL32.dll202GetModuleHandleA
KERNEL32.dll214GetPrivateProfileIntA
KERNEL32.dll221GetProcessHeap
KERNEL32.dll230GetStartupInfoA
KERNEL32.dll258GetVersion
KERNEL32.dll383RtlUnwind
KERNEL32.dll466UnhandledExceptionFilter
KERNEL32.dll508WriteFile
KERNEL32.dll512WritePrivateProfileStringA
KERNEL32.dll189GetFileType
KERNEL32.dll232GetStdHandle
KERNEL32.dll233GetStringTypeW
KERNEL32.dll334MultiByteToWideChar
KERNEL32.dll541lstrlenA
KERNEL32.dll284HeapAlloc
KERNEL32.dll287HeapFree
KERNEL32.dll239GetSystemTime
KERNEL32.dll2147483647
SHELL32.dll46ShellAboutA
USER32.dll10BeginPaint
USER32.dll40CheckMenuItem
USER32.dll70CreateWindowExA
USER32.dll123DefWindowProcA
USER32.dll136DialogBoxParamA
USER32.dll139DispatchMessageA
USER32.dll155DrawMenuBar
USER32.dll160EnableMenuItem
USER32.dll164EndDialog
USER32.dll166EndPaint
USER32.dll188FlashWindow
USER32.dll206GetClientRect
USER32.dll216GetDC
USER32.dll221GetDlgItem
USER32.dll222GetDlgItemInt
USER32.dll242GetMenu
USER32.dll250GetMessageA
USER32.dll269GetSysColor
USER32.dll271GetSystemMetrics
USER32.dll281GetWindowDC
USER32.dll307InvalidateRect
USER32.dll324IsIconic
USER32.dll333KillTimer
USER32.dll334LoadAcceleratorsA
USER32.dll336LoadBitmapA
USER32.dll338LoadCursorA
USER32.dll342LoadIconA
USER32.dll350LoadStringA
USER32.dll366MessageBoxA
USER32.dll387PostMessageA
USER32.dll389PostQuitMessage
USER32.dll395RegisterClassA
USER32.dll406ReleaseCapture
USER32.dll407ReleaseDC
USER32.dll429SendMessageA
USER32.dll441SetCapture
USER32.dll449SetCursor
USER32.dll455SetDlgItemInt
USER32.dll482SetTimer
USER32.dll489SetWindowTextA
USER32.dll497ShowCursor
USER32.dll501ShowWindow
USER32.dll517TranslateAcceleratorA
USER32.dll520TranslateMessage
USER32.dll532UpdateWindow
USER32.dll547WinHelpA
USER32.dll578wsprintfA

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionEntertainment Pack FreeCell Game
FileVersion3.10
InternalNamefreecell
LegalCopyrightCopyright © Microsoft Corp. 1981-1993
OriginalFilenamefreecell
ProductNameMicrosoft® Windows NT(TM) Operating System
ProductVersion3.10

VS_FIXEDFILEINFO

FileVersion3.10.497.1
ProductVersion3.10.497.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
047616EXE07/04/1993 23:39:14#
15c115HTM#
ba001572BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK