Game.exe - TODO: <File description>

info
MZ
PE
resources
strings
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	Game.exe
size	113152 (0x1ba00)
md5	f6225cbf0b4ef420e823247d7d6ee04c

type	PE32+ executable (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
147	30729	10
257	26706	2
261	26706	19
260	26706	10
259	26706	2
257	26715	5
1	0	67
265	27027	3
259	27027	1
256	27027	1
255	27027	1
151	0	1
258	27027	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5d2dc150
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.16
SizeOfCode	0x1200
SizeOfInitializedData	0x1aa00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x162c
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x21000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig4

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1158	0x1200	R-X CODE
.rdata	0x3000	0x1274	0x1400	R-- IDATA
.data	0x5000	0x7f8	0x200	RW- IDATA
.pdata	0x6000	0x1a4	0x200	R-- IDATA
.rsrc	0x7000	0x189d8	0x18a00	R-- IDATA
.reloc	0x20000	0x28	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x3970	0xfc
IMPORT	0x3a6c	0xb4
RESOURCE	0x7000	0x189d8
EXCEPTION	0x6000	0x1a4
SECURITY	0	0
BASERELOC	0x20000	0x28
DEBUG	0x3320	0x70
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x3490	0x28
LOAD_CONFIG	0x3390	0x100
Bound_IAT	0	0
IAT	0x3000	0x218
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x140003850	0x140003851	0x140005040	0x140003268	0	0x100000

show previews

type	name	size
ICON	#1	4442
ICON	#2	3752
ICON	#3	2216
ICON	#4	1384
ICON	#5	2315
ICON	#6	16936
ICON	#7	9640
ICON	#8	4264
ICON	#9	1128
ICON	#10	4442
ICON	#11	3752
ICON	#12	2216
ICON	#13	1384
ICON	#14	2315
ICON	#15	16936
ICON	#16	9640
ICON	#17	4264
ICON	#18	1128
ICON	#19	744
ICON	#20	296
ICON	#21	744
ICON	#22	296
ICON	#23	2216
ICON	#24	296
MENU	#109	74
DIALOG	#103	328
STRING	#7	48
ACCELERATORS	#109	16
GROUP_ICON	#107	132
GROUP_ICON	#108	132
GROUP_ICON	#129	20
GROUP_ICON	#130	20
GROUP_ICON	#131	20
GROUP_ICON	#132	20
GROUP_ICON	#133	20
GROUP_ICON	#134	20
VERSION	#1	752
MANIFEST	#1	381

id	lang	string
103	1033	Game
109	1033	GAME

module_name	hint	function_name
KERNEL32.dll	898	IsDebuggerPresent
KERNEL32.dll	727	GetStartupInfoW
KERNEL32.dll	876	InitializeSListHead
KERNEL32.dll	752	GetSystemTimeAsFileTime
KERNEL32.dll	546	GetCurrentThreadId
KERNEL32.dll	542	GetCurrentProcessId
KERNEL32.dll	1104	QueryPerformanceCounter
KERNEL32.dll	905	IsProcessorFeaturePresent
KERNEL32.dll	1434	TerminateProcess
KERNEL32.dll	541	GetCurrentProcess
KERNEL32.dll	1403	SetUnhandledExceptionFilter
KERNEL32.dll	1468	UnhandledExceptionFilter
KERNEL32.dll	1249	RtlVirtualUnwind
KERNEL32.dll	1242	RtlLookupFunctionEntry
KERNEL32.dll	1235	RtlCaptureContext
KERNEL32.dll	638	GetModuleHandleW
USER32.dll	118	CreateWindowExW
USER32.dll	650	MessageBoxW
USER32.dll	181	DestroyWindow
USER32.dll	167	DefWindowProcW
USER32.dll	393	GetMessageW
USER32.dll	186	DialogBoxParamW
USER32.dll	686	PostQuitMessage
USER32.dll	598	LoadCursorW
USER32.dll	600	LoadIconW
USER32.dll	936	TranslateMessage
USER32.dll	934	TranslateAcceleratorW
USER32.dll	189	DispatchMessageW
USER32.dll	904	ShowWindow
USER32.dll	613	LoadStringW
USER32.dll	592	LoadAcceleratorsW
USER32.dll	17	BeginPaint
USER32.dll	244	EndPaint
USER32.dll	962	UpdateWindow
USER32.dll	242	EndDialog
USER32.dll	731	RegisterClassExW
VCRUNTIME140.dll	8	__C_specific_handler
VCRUNTIME140.dll	62	memset
api-ms-win-crt-runtime-l1-1-0.dll	30	_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	53	_initialize_wide_environment
api-ms-win-crt-runtime-l1-1-0.dll	60	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	52	_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	25	_configure_wide_argv
api-ms-win-crt-runtime-l1-1-0.dll	85	exit
api-ms-win-crt-runtime-l1-1-0.dll	103	terminate
api-ms-win-crt-runtime-l1-1-0.dll	66	_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll	64	_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll	47	_get_wide_winmain_command_line
api-ms-win-crt-runtime-l1-1-0.dll	61	_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll	21	_c_exit
api-ms-win-crt-runtime-l1-1-0.dll	22	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	54	_initterm
api-ms-win-crt-runtime-l1-1-0.dll	35	_exit
api-ms-win-crt-runtime-l1-1-0.dll	55	_initterm_e
api-ms-win-crt-math-l1-1-0.dll	9	__setusermatherr
api-ms-win-crt-stdio-l1-1-0.dll	84	_set_fmode
api-ms-win-crt-stdio-l1-1-0.dll	1	__p__commode
api-ms-win-crt-locale-l1-1-0.dll	8	_configthreadlocale
api-ms-win-crt-heap-l1-1-0.dll	22	_set_new_mode

ord	entry_va	function_name
1	0x1360	??0CMyClass@@QEAA@XZ
2	0x1380	??4CMyClass@@QEAAAEAV0@$$QEAV0@@Z
3	0x1370	??4CMyClass@@QEAAAEAV0@AEBV0@@Z
4	0x1350	?Geta@CMyClass@@QEAAHH@Z
5	0x1350	?Getb@CMyClass@@QEAAJXZ
6	0x1340	Storm

module_name	Game.exe
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	6
nNames	6
Names(6)	0x39b0
Functions(6)	0x3998
NameOrdinals(6)	0x39c8

StringTable 040904b0

CompanyName	TODO: <Company name>
FileDescription	TODO: <File description>
FileVersion	1.0.0.1
InternalName	Game.exe
LegalCopyright	Copyright (C) 2016
OriginalFilename	Game.exe
ProductName	TODO: <Product name>
ProductVersion	1.0.0.1

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
35f0	4442	PNG	(256 x 256)	#
6408	2315	PNG	(256 x 256)	#
ea80	4442	PNG	(256 x 256)	#
11898	2315	PNG	(256 x 256)	#
121a3	39005	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

Game.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

Game.exe
-