a0e2[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

a0e2.rar
Size

98.5MB
MD5

d3c961198c8ce6458e2c93af0629d1df
SHA1

d3cfad48b1f25a03a322afbcd8111626ca7c01e8
SHA256

003d88fc6c8178810e5b7e366f48afcf121e260c6e867ab7718116ca7c24cf8b
SHA512

08cf69fced53aa1352340bd4ad1bdc3ea99add12919d65ebbf15d0231afdb34d868d10958cfb0c1edebe62feb3fd46fc7817e5050c539ccd6f497eb5030f5aeb
SSDEEP

3145728:SzfwD30izc7mOudE1Rszxwm7uNOK0FATk5Rh8HJ6SLO:64D3qmdIRszxVuUSTkbmHJ6Si

Score

3^/10

Malware Config

Signatures

Unsigned PE 15 IoCs

Checks for missing Authenticode signature.

resource
unpack001/A0E2/DPLAY61A.EXE
unpack001/A0E2/Data/closedpw.exe
unpack001/A0E2/EBUEula.dll
unpack001/A0E2/EMPIRES2.ICD
unpack001/A0E2/HA312W32.DLL
unpack001/A0E2/SETUPENU.DLL
unpack001/A0E2/SETUPREG.EXE
unpack001/A0E2/SHW32.DLL
unpack001/A0E2/UNINSTAL.EXE
unpack001/A0E2/clcd32.dll
unpack001/A0E2/clokspl.exe
unpack001/A0E2/dplayerx.dll
unpack001/A0E2/drvmgt.dll
unpack001/A0E2/empires2.exe
unpack001/A0E2/language.dll

Files

a0e2.rar
.rar
A0E2/00000c0a.016
A0E2/00000c0a.256
A0E2/AI/AI.txt
A0E2/CLUF.RTF
.rtf
A0E2/Campaign/cam1.cpn
A0E2/Campaign/cam2.cpn
A0E2/Campaign/cam3.cpn
A0E2/Campaign/cam4.cpn
A0E2/Campaign/cam8.cpn
A0E2/DPLAY61A.EXE
.exe windows x86

b83464d8132ecd9f810820e192566e15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
CloseHandle
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDiskFreeSpaceA
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetCommandLineA
CreateDirectoryA
GlobalFree
FormatMessageA
IsDBCSLeadByte

gdi32

GetDeviceCaps

user32

EndDialog
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
EnableWindow
GetDlgItemTextA
SendMessageA
DispatchMessageA
LoadStringA
PeekMessageA
MessageBoxA
CharPrevA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
MsgWaitForMultipleObjects

comctl32

ord17

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 430KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A0E2/Data/BlkEdge.Dat
A0E2/Data/FilterMaps.dat
A0E2/Data/LoQMaps.dat
A0E2/Data/Load/Load.txt
A0E2/Data/PatternMasks.dat
A0E2/Data/STemplet.dat
A0E2/Data/TileEdge.Dat
A0E2/Data/blendomatic.dat
A0E2/Data/closedpw.exe
.exe windows x86

3443450a10d6d557144798ae521a009f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
GetWindowTextA
DefWindowProcA
SetTimer
KillTimer
PostQuitMessage
FindWindowA
GetWindowThreadProcessId
EnumWindows
SendMessageA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetModuleFileNameA
UnhandledExceptionFilter
ReadFile
SetEndOfFile
SetFilePointer
LoadLibraryA
GetProcAddress
CreateFileA
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapAlloc
WriteFile
VirtualFree
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetStdHandle
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 943B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/Data/empires2.dat
A0E2/Data/gamedata.drs
A0E2/Data/graphics.drs
A0E2/Data/interfac.drs
A0E2/Data/lightMaps.dat
A0E2/Data/list.cr
A0E2/Data/shadow.col
A0E2/Data/sounds.drs
A0E2/Data/terrain.drs
A0E2/Data/view_icm.dat
A0E2/EBUEula.dll
.dll windows x86

910e2783f4515ac83620aa7b692fa60a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
ReadFile
SetFilePointer
GetProcAddress
lstrcatA
LoadLibraryA
CreateFileA
CloseHandle
lstrlenA
VirtualFree
GetCurrentThreadId
GetCurrentProcess
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
TlsSetValue
GetCPInfo
GetACP
InterlockedDecrement
GetStringTypeW
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
lstrcpyA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
GetModuleHandleA
TerminateProcess
GetFileType
GetStdHandle
InterlockedIncrement
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
MultiByteToWideChar
GetStringTypeA
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile

user32

GetDlgItem
LoadStringA
ShowWindow
SendMessageA
SetFocus
DialogBoxParamA
SetWindowTextA
EnableWindow
EndDialog
PostMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
DestroyWindow
GetWindowTextA
GetDesktopWindow
CreateDialogParamA
LoadCursorA
SetCursor

gdi32

DeleteDC
StartPage
StartDocA
GetDeviceCaps
SetMapMode
EndPage
EndDoc

comdlg32

PrintDlgA

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

Exports

Exports

EBUEula

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/EMPIRES2.ICD
.exe windows x86

b7ae0f51879a8b877f1b3713d076b107

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

msvfw32

ICInfo
MCIWndCreateA

winmm

mixerGetNumDevs
mixerGetLineControlsA
mixerGetLineInfoA
timeEndPeriod
timeGetTime
mciSendCommandA
mixerOpen
mixerSetControlDetails
timeBeginPeriod
mixerGetControlDetailsA
mciGetErrorStringA
mixerClose

gdi32

GetDeviceCaps
SelectObject
CreateFontIndirectA
GetStockObject
RealizePalette
SelectPalette
DeleteDC
CreateICA
CreatePalette
GetObjectA
GetPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
GetSystemPaletteEntries
SelectClipRgn
ResizePalette
SetBkMode
TextOutA
SetTextColor
GetTextExtentPoint32A
SetBkColor
CreateRectRgn
MoveToEx
SetTextAlign
LineTo
DeleteObject
CreatePen
GetTextMetricsA

dplayx

ord4
ord2
ord1

dsound

ord1

ddraw

DirectDrawCreate

imm32

ImmAssociateContext
ImmGetContext
ImmGetOpenStatus
ImmSetOpenStatus
ImmNotifyIME
ImmGetDefaultIMEWnd
ImmReleaseContext

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

ole32

CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize

wsock32

gethostname
WSAStartup
gethostbyname
WSACleanup

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

THIS_COD
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

THIS_DAT
Size: 4KB - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Inf32Dat
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A0E2/HA312W32.DLL
.dll windows x86

9297fea69b3d6d0bc8d4d9a7f396de78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
MapViewOfFileEx
UnmapViewOfFile
MapViewOfFile
IsBadCodePtr
OpenMutexA
GetSystemInfo
OpenProcess
GetCurrentProcess
VirtualQueryEx
OpenFileMappingA
WaitForMultipleObjects
SetThreadPriority
CreateRemoteThread
ReadProcessMemory
InterlockedIncrement
GetCurrentProcessId
CreateMutexA
GetCurrentThreadId
CreateEventA
SetEvent
GetVersion
Sleep
GetLastError
UnhandledExceptionFilter
ExitProcess
_lclose
_lread
_llseek
_lopen
GetModuleHandleA
GetProcAddress
LoadLibraryA
OpenFile
InterlockedDecrement
lstrcmpA
ResetEvent
GetModuleFileNameA
DuplicateHandle
GetExitCodeThread
GlobalMemoryStatus
TlsSetValue
TlsAlloc
OutputDebugStringA
TlsGetValue
TerminateProcess
GetExitCodeProcess
GetThreadPriority
CreateProcessA
VirtualProtect
WriteProcessMemory
HeapReAlloc
HeapFree
LoadLibraryExA
LoadLibraryExW
FreeLibrary
ExitThread
GetProcessHeaps
HeapWalk
HeapUnlock
LocalHandle
HeapLock
HeapSize
RaiseException
HeapDestroy
SetLastError
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
GetTickCount
RtlUnwind
ResumeThread
CreateThread
DeleteFileA
GetEnvironmentStrings
GetCommandLineA
TlsFree
WideCharToMultiByte
LeaveCriticalSection
WriteFile
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
SetEndOfFile
VirtualQuery
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
GetProcessHeap
HeapAlloc
VirtualFree
VirtualAlloc
VirtualLock
LoadLibraryW
GetModuleHandleW
GetCurrentThread
MultiByteToWideChar

user32

WaitForInputIdle
UnhookWindowsHookEx
PostQuitMessage
DialogBoxParamA
SetWindowsHookExA
MessageBeep
WinHelpA
IsDlgButtonChecked
GetPropA
SetForegroundWindow
GetWindowRect
GetDesktopWindow
ShowWindow
GetDlgItem
SetWindowTextA
SetPropA
DeleteMenu
SendDlgItemMessageA
GetSystemMenu
RemovePropA
CallNextHookEx
CheckDlgButton
SetFocus
IsWindowEnabled
EnumThreadWindows
GetFocus
GetWindowLongA
IsWindowVisible
GetParent
GetWindow
SendMessageTimeoutA
SendMessageCallbackA
RegisterClassA
LoadStringA
ReleaseDC
GetDC
DispatchMessageA
TranslateMessage
IsDialogMessageA
TranslateMDISysAccel
TranslateAcceleratorA
GetMessageA
UnregisterClassA
GetClassInfoA
SetScrollRange
SetScrollPos
GetSysColor
CreateWindowExA
DefWindowProcA
PeekMessageA
FindWindowA
GetForegroundWindow
GetWindowThreadProcessId
PostMessageA
IsWindow
GetClassNameA
GetLastActivePopup
EndDialog
SendMessageA
RegisterWindowMessageA
SendNotifyMessageA
MessageBoxA
EnableWindow

gdi32

CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetBkMode
GetNearestColor
SetTextColor
GetObjectA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Exports

Exports

MemAlloc
MemAllocFS
MemAllocPtr
MemCheckPtr
MemDefaultErrorHandler
MemErrorUnwind
MemFix
MemFree
MemFreeFS
MemFreePtr
MemHandle
MemIsMoveable
MemLock
MemLockCount
MemPoolAttachShared
MemPoolCheck
MemPoolCount
MemPoolFirst
MemPoolFree
MemPoolInfo
MemPoolInit
MemPoolInitFS
MemPoolInitNamedShared
MemPoolInitNamedSharedEx
MemPoolInitRegion
MemPoolLock
MemPoolNext
MemPoolPreAllocate
MemPoolPreAllocateHandles
MemPoolSetBlockSizeFS
MemPoolSetCeiling
MemPoolSetFloor
MemPoolSetPageSize
MemPoolSetSmallBlockSize
MemPoolShrink
MemPoolSize
MemPoolUnlock
MemPoolWalk
MemReAlloc
MemReAllocPtr
MemRegisterTask
MemSetErrorHandler
MemSize
MemSizePtr
MemSizeRequested
MemUnfix
MemUnlock
MemUnregisterTask
MemVersion
__dbgMemSizePtr1@16
_dbgMemAlloc
_dbgMemAllocFS
_dbgMemAllocPtr
_dbgMemAllocPtr1
_dbgMemBreakpoint
_dbgMemCheckAll
_dbgMemCheckPtr
_dbgMemFix
_dbgMemFree
_dbgMemFreeDeferred
_dbgMemFreeFS
_dbgMemFreePtr
_dbgMemFreePtr1
_dbgMemHandle
_dbgMemIsMoveable
_dbgMemLock
_dbgMemLockCount
_dbgMemPoolAttachShared
_dbgMemPoolCheck
_dbgMemPoolCount
_dbgMemPoolDeferFreeing
_dbgMemPoolFirst
_dbgMemPoolFree
_dbgMemPoolFreeDeferred
_dbgMemPoolInfo
_dbgMemPoolInit
_dbgMemPoolInitFS
_dbgMemPoolInitNamedShared
_dbgMemPoolInitNamedSharedEx
_dbgMemPoolInitRegion
_dbgMemPoolLock
_dbgMemPoolNext
_dbgMemPoolPreAllocate
_dbgMemPoolPreAllocateHandles
_dbgMemPoolSetBlockSizeFS
_dbgMemPoolSetCeiling
_dbgMemPoolSetCheckFrequency
_dbgMemPoolSetDeferQueueLen
_dbgMemPoolSetFloor
_dbgMemPoolSetName
_dbgMemPoolSetPageSize
_dbgMemPoolSetSmallBlockSize
_dbgMemPoolShrink
_dbgMemPoolSize
_dbgMemPoolUnlock
_dbgMemPoolWalk
_dbgMemProtectPtr
_dbgMemPtrInfo
_dbgMemReAlloc
_dbgMemReAllocPtr
_dbgMemReAllocPtr1
_dbgMemReference
_dbgMemRegisterTask
_dbgMemReportLeakage
_dbgMemSettingsInfo
_dbgMemSize
_dbgMemSizePtr
_dbgMemSizeRequested
_dbgMemTotalCount
_dbgMemTotalSize
_dbgMemUnfix
_dbgMemUnlock
_dbgMemUnregisterTask
_dbg_MemCheckPtr
_dbg_MemPoolInfo
_shiMemFreePtr
_shi_AfxAllocMemoryDebug1@16
_shi_AfxFreeMemoryDebug1@8
_shi_AfxIsMemoryBlock@12
_shi_AfxSetAllocHook@4
_shi_AfxSetAllocStop@4
_shi_AfxStop@0
_shi_MemSizePtr@4
_shi_autodeskModules@8
_shi_breakpoint
_shi_dbgGuardFill
_shi_dbgGuardSize
_shi_dbgMemCheckAll
_shi_dbgMemPoolCheck
_shi_dbgMemReportLeakage
_shi_deleteFileLineStdcall@12
_shi_deleteLoc
_shi_deletePage
_shi_deletePtrStdcall@8
_shi_enterCriticalSection
_shi_findBlock
_shi_freeErrorInfo
_shi_getDebuggeeName
_shi_getDefaultsPath
_shi_heapAgentReg
_shi_heapAgentUnreg
_shi_initPageVariable
_shi_leaveCriticalSection
_shi_sysAlloc
_shi_sysFree
_shi_sysSize
cli_MemCheckPtr
cli_MemFree
cli_MemFreePtr
cli_MemHandle
cli_MemLockCount
cli_MemPoolCheck
cli_MemPoolCount
cli_MemPoolFirst
cli_MemPoolInfo
cli_MemPoolNext
cli_MemPoolSize
cli_MemPoolWalk
cli_MemSize
cli_MemSizePtr
cli_dbgMemCheckAll
cli_dbgMemDeferFreeing
cli_dbgMemFormatAPI
cli_dbgMemFormatCall
cli_dbgMemFormatErrorInfo
cli_dbgMemFreeDeferred
cli_dbgMemPoolDeferFreeing
cli_dbgMemPoolFreeDeferred
cli_dbgMemPoolInfo
cli_dbgMemPoolSetCheckFrequency
cli_dbgMemPoolSetDeferQueueLen
cli_dbgMemProtectPtr
cli_dbgMemPtrInfo
cli_dbgMemReallocMoves
cli_dbgMemReportWrongTaskRef
cli_dbgMemSetCallstackChains
cli_dbgMemSetCheckFrequency
cli_dbgMemSetCheckpoint
cli_dbgMemSetDefaultErrorOutput
cli_dbgMemSetDeferQueueLen
cli_dbgMemSetDeferSizeThreshold
cli_dbgMemSetFreeFill
cli_dbgMemSetGuardFill
cli_dbgMemSetGuardSize
cli_dbgMemSetInUseFill
cli_dbgMemSetSafetyLevel
cli_dbgMemSetStackChecking
cli_dbgMemSettingsInfo
cli_dbgMemSuppressFreeFill
cli_dbgMemTotalCount
cli_dbgMemTotalSize
cli_disableAgents
cli_findBlock
cli_getFileNames
cli_getFreeAddressSpace
cli_getPoolNames
cli_loadAgents
cli_lockPool
cli_memcpy
cli_namedPool
cli_scheduleChecking
cli_strcpy
cli_unlockPool
dbgMemDeferFreeing
dbgMemFormatCall
dbgMemFormatErrorInfo
dbgMemReallocMoves
dbgMemReportWrongTaskRef
dbgMemScheduleChecking
dbgMemSetCallstackChains
dbgMemSetCheckFrequency
dbgMemSetCheckpoint
dbgMemSetDefaultErrorOutput
dbgMemSetDeferQueueLen
dbgMemSetDeferSizeThreshold
dbgMemSetEntryHandler
dbgMemSetExitHandler
dbgMemSetFreeFill
dbgMemSetGuardFill
dbgMemSetGuardSize
dbgMemSetInUseFill
dbgMemSetSafetyLevel
dbgMemSetStackChecking
dbgMemSuppressFreeFill
shi_AfxAllocMemoryDebug
shi_AfxCheckMemory
shi_AfxDumpMemoryLeaks
shi_AfxFreeMemoryDebug
shi_IsMemoryBlock
shi_IsValidHeapPointer
shi_MemDefaultPool
shi_MemFreeDefaultPool
shi_MemInitDefaultPool
shi_SetAllocHook
shi_SetBreakAlloc
shi_SetDbgBlockType
shi_addrToFileLine
shi_addrToSymbol
shi_calloc
shi_calloc_dbg
shi_debugeePopupActive
shi_delete
shi_deleteFileLine
shi_deleteStdcall
shi_expand
shi_expand_dbg
shi_formatAPI
shi_free
shi_freeThreadPools
shi_free_dbg
shi_freeingDLL
shi_getThreadPool
shi_heapadd
shi_heapchk
shi_heapmin
shi_heapset
shi_heapused
shi_heapwalk
shi_loadingDLL
shi_malloc
shi_malloc_dbg
shi_msize
shi_msize_dbg
shi_new
shi_newFileLine
shi_newFileLineStdcall
shi_newStdcall
shi_newTypeFileLine
shi_normalizeFile
shi_realloc
shi_realloc_dbg
shi_set_new_handler
shi_startingDebugger

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.debug
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/History/Armies.txt
A0E2/History/ArmiesMongols.txt
A0E2/History/ArmiesOrg.txt
A0E2/History/ArmiesStrat.txt
A0E2/History/ArmiesTactics.txt
A0E2/History/Byzantines.txt
A0E2/History/CastleDefenses.txt
A0E2/History/CastleEvolution.txt
A0E2/History/CastleSiege.txt
A0E2/History/Castles.txt
A0E2/History/Celts.txt
A0E2/History/Chinese.txt
A0E2/History/DarkArmies.txt
A0E2/History/Franks.txt
A0E2/History/Goths.txt
A0E2/History/Gunpowder.txt
A0E2/History/Japanese.txt
A0E2/History/Knights.txt
A0E2/History/Mongols.txt
A0E2/History/Naval.txt
A0E2/History/Persians.txt
A0E2/History/Saracens.txt
A0E2/History/Teutons.txt
A0E2/History/Turks.txt
A0E2/History/Vikings.txt
A0E2/History/Warfare.txt
A0E2/History/Weapons.txt
A0E2/History/WeaponsCav.txt
A0E2/History/WeaponsHand.txt
A0E2/History/WeaponsMissile.txt
A0E2/History/barbarianinvaders.txt
A0E2/History/british.txt
A0E2/History/charlemagne.txt
A0E2/History/darkagereligion.txt
A0E2/History/darkages.txt
A0E2/History/economy.txt
A0E2/History/feudalcontract.txt
A0E2/History/feudalism.txt
A0E2/History/feudalismdecline.txt
A0E2/History/latemiddleages.txt
A0E2/History/middleages.txt
A0E2/History/politics.txt
A0E2/History/religion.txt
A0E2/History/renaissance.txt
A0E2/History/technology.txt
A0E2/History/thecrusades.txt
A0E2/History/thefallofrome.txt
A0E2/History/themanor.txt
A0E2/History/thevikings.txt
A0E2/Leame.rtf
.rtf
A0E2/Learn/ElSantiiPa.uh
A0E2/Learn/Learn.txt
A0E2/Learn/Tuxtron.uh
A0E2/Learn/adry.uh
A0E2/Learn/jijiji.uh
A0E2/SETUPENU.DLL
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/SETUPREG.EXE
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A0E2/SHW32.DLL
.dll windows x86

1df00c2aba61187ead96045d118535e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualLock
VirtualAlloc
VirtualFree
VirtualQuery
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
IsBadCodePtr
OpenMutexA
MapViewOfFileEx
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetSystemInfo
OpenProcess
GetCurrentProcess
VirtualQueryEx
WaitForMultipleObjects
GetLastError
SetThreadPriority
CreateRemoteThread
ReadProcessMemory
InterlockedIncrement
GetCurrentProcessId
CreateMutexA
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
GetVersionExA
CreateEventA
SetEvent
GetVersion
GetModuleFileNameA
VirtualProtect
WriteProcessMemory
LoadLibraryA
LoadLibraryW
GetModuleHandleW
LoadLibraryExA
LoadLibraryExW
InitializeCriticalSection
CloseHandle
HeapWalk
LeaveCriticalSection
HeapUnlock
LocalHandle
HeapLock
HeapSize
RaiseException
HeapDestroy
SetLastError
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
InterlockedExchange
RtlUnwind
GetEnvironmentStrings
GetCommandLineA
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
WriteFile
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
WideCharToMultiByte
CreateFileA
SetStdHandle
FlushFileBuffers
SetEndOfFile
ReadFile
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObject
ReleaseMutex
FreeLibrary
ExitThread
GetProcessHeaps

user32

IsWindow
MessageBeep
MessageBoxA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA

Exports

Exports

@_shi_deletePage@8
@_shi_initPageVariable@8
@_shi_sysAlloc@8
@_shi_sysFree@4
@_shi_sysSize@4
MemAlloc
MemAllocFS
MemAllocPtr
MemCheckPtr
MemDefaultErrorHandler
MemErrorUnwind
MemFix
MemFree
MemFreeFS
MemFreePtr
MemHandle
MemIsMoveable
MemLock
MemLockCount
MemPoolAttachShared
MemPoolCheck
MemPoolCount
MemPoolFirst
MemPoolFree
MemPoolInfo
MemPoolInit
MemPoolInitFS
MemPoolInitNamedShared
MemPoolInitNamedSharedEx
MemPoolInitRegion
MemPoolLock
MemPoolNext
MemPoolPreAllocate
MemPoolPreAllocateHandles
MemPoolSetBlockSizeFS
MemPoolSetCeiling
MemPoolSetFloor
MemPoolSetPageSize
MemPoolSetSmallBlockSize
MemPoolShrink
MemPoolSize
MemPoolUnlock
MemPoolWalk
MemReAlloc
MemReAllocPtr
MemRegisterTask
MemSetErrorHandler
MemSize
MemSizePtr
MemSizeRequested
MemUnfix
MemUnlock
MemUnregisterTask
MemVersion
_shi_deletePtrStdcall@8
_shi_deleteStdcall@4
_shi_enterCriticalSection
_shi_leaveCriticalSection
_shi_newStdcall@4
shi_calloc
shi_delete
shi_expand
shi_free
shi_freeThreadPools
shi_freeingDLL
shi_getThreadPool
shi_heapadd
shi_heapchk
shi_heapmin
shi_heapset
shi_heapused
shi_heapwalk
shi_loadingDLL
shi_malloc
shi_msize
shi_new
shi_realloc
shi_set_new_handler

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 661B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/SaveGame/Multi/Multi.txt
A0E2/SaveGame/Multi/Partida de varios jugadores guardada - 14-jul-2012 19`03`31.mgs
A0E2/SaveGame/Multi/tempsave0.mgs
A0E2/SaveGame/Multi/tempsave1.mgs
A0E2/SaveGame/Multi/tempsave10.mgs
A0E2/SaveGame/Multi/tempsave11.mgs
A0E2/SaveGame/Multi/tempsave12.mgs
A0E2/SaveGame/Multi/tempsave13.mgs
A0E2/SaveGame/Multi/tempsave14.mgs
A0E2/SaveGame/Multi/tempsave15.mgs
A0E2/SaveGame/Multi/tempsave16.mgs
A0E2/SaveGame/Multi/tempsave17.mgs
A0E2/SaveGame/Multi/tempsave18.mgs
A0E2/SaveGame/Multi/tempsave19.mgs
A0E2/SaveGame/Multi/tempsave2.mgs
A0E2/SaveGame/Multi/tempsave20.mgs
A0E2/SaveGame/Multi/tempsave21.mgs
A0E2/SaveGame/Multi/tempsave22.mgs
A0E2/SaveGame/Multi/tempsave23.mgs
A0E2/SaveGame/Multi/tempsave24.mgs
A0E2/SaveGame/Multi/tempsave25.mgs
A0E2/SaveGame/Multi/tempsave26.mgs
A0E2/SaveGame/Multi/tempsave27.mgs
A0E2/SaveGame/Multi/tempsave28.mgs
A0E2/SaveGame/Multi/tempsave29.mgs
A0E2/SaveGame/Multi/tempsave3.mgs
A0E2/SaveGame/Multi/tempsave4.mgs
A0E2/SaveGame/Multi/tempsave5.mgs
A0E2/SaveGame/Multi/tempsave6.mgs
A0E2/SaveGame/Multi/tempsave7.mgs
A0E2/SaveGame/Multi/tempsave8.mgs
A0E2/SaveGame/Multi/tempsave9.mgs
A0E2/SaveGame/SaveGame.txt
A0E2/SaveGame/partida grabada - 09-oct-2013 14`08`40.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 14`35`48.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 14`43`42.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 14`50`16.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 17`40`06.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 17`51`49.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 18`10`40.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 18`38`54.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 19`09`15.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 21`00`38.mgl
A0E2/SaveGame/partida grabada - 09-oct-2013 22`20`28.mgl
A0E2/SaveGame/partida grabada - 10-oct-2013 18`55`00.mgl
A0E2/SaveGame/partida grabada - 10-oct-2013 21`01`23.mgl
A0E2/SaveGame/partida grabada - 10-oct-2013 23`17`55.mgl
A0E2/SaveGame/partida grabada - 20-nov-2013 14`06`18.mgl
A0E2/SaveGame/partida grabada - 21-nov-2013 12`43`40.mgl
A0E2/Scenario/- CBA 2012 Heroes 0,2.scn
A0E2/Scenario/Teutonic Blood (fair).scn
A0E2/Scenario/dfhool.scn
A0E2/Scenario/scenario.inf
A0E2/Sound/scenario/S1a.mp3
A0E2/Sound/scenario/b1a.mp3
A0E2/Sound/scenario/b1b.mp3
A0E2/Sound/scenario/b1c.mp3
A0E2/Sound/scenario/b1d.mp3
A0E2/Sound/scenario/b2a.mp3
A0E2/Sound/scenario/b2b.mp3
A0E2/Sound/scenario/b2c.mp3
A0E2/Sound/scenario/b3a.mp3
A0E2/Sound/scenario/b3aa.mp3
A0E2/Sound/scenario/b3b.mp3
A0E2/Sound/scenario/b3c.mp3
A0E2/Sound/scenario/b3d.mp3
A0E2/Sound/scenario/b3e.mp3
A0E2/Sound/scenario/b4b.mp3
A0E2/Sound/scenario/b4c.mp3
A0E2/Sound/scenario/b4d.mp3
A0E2/Sound/scenario/b4e.mp3
A0E2/Sound/scenario/b4f.mp3
A0E2/Sound/scenario/b5a.mp3
A0E2/Sound/scenario/b5b.mp3
A0E2/Sound/scenario/b5c.mp3
A0E2/Sound/scenario/b5d.mp3
A0E2/Sound/scenario/b5e.mp3
A0E2/Sound/scenario/b5f.mp3
A0E2/Sound/scenario/b5g.mp3
A0E2/Sound/scenario/b5h.mp3
A0E2/Sound/scenario/b5i.mp3
A0E2/Sound/scenario/b5j.mp3
A0E2/Sound/scenario/b5k.mp3
A0E2/Sound/scenario/b5l.mp3
A0E2/Sound/scenario/b5m.mp3
A0E2/Sound/scenario/b5n.mp3
A0E2/Sound/scenario/b5o.mp3
A0E2/Sound/scenario/b5p.mp3
A0E2/Sound/scenario/b5q.mp3
A0E2/Sound/scenario/b6a.mp3
A0E2/Sound/scenario/b6b.mp3
A0E2/Sound/scenario/b6c.mp3
A0E2/Sound/scenario/b6d.mp3
A0E2/Sound/scenario/b6e.mp3
A0E2/Sound/scenario/b6f.mp3
A0E2/Sound/scenario/b6g.mp3
A0E2/Sound/scenario/b6h.mp3
A0E2/Sound/scenario/b6i.mp3
A0E2/Sound/scenario/b6j.mp3
A0E2/Sound/scenario/b6k.mp3
A0E2/Sound/scenario/b6l.mp3
A0E2/Sound/scenario/b6m.mp3
A0E2/Sound/scenario/b6n.mp3
A0E2/Sound/scenario/g1a.mp3
A0E2/Sound/scenario/g1b.mp3
A0E2/Sound/scenario/g1c.mp3
A0E2/Sound/scenario/g1d.mp3
A0E2/Sound/scenario/g1e.mp3
A0E2/Sound/scenario/g1f.mp3
A0E2/Sound/scenario/g1g.mp3
A0E2/Sound/scenario/g1h.mp3
A0E2/Sound/scenario/g1i.mp3
A0E2/Sound/scenario/g1j.mp3
.ps1
A0E2/Sound/scenario/g1k.mp3
A0E2/Sound/scenario/g1l.mp3
A0E2/Sound/scenario/g1m.mp3
A0E2/Sound/scenario/g2a.mp3
A0E2/Sound/scenario/g2b.mp3
A0E2/Sound/scenario/g2c.mp3
A0E2/Sound/scenario/g2d.mp3
A0E2/Sound/scenario/g2e.mp3
A0E2/Sound/scenario/g2f.mp3
A0E2/Sound/scenario/g2g.mp3
A0E2/Sound/scenario/g2h.mp3
A0E2/Sound/scenario/g3a.mp3
A0E2/Sound/scenario/g3b.mp3
A0E2/Sound/scenario/g3c.mp3
A0E2/Sound/scenario/g3d.mp3
A0E2/Sound/scenario/g3e.mp3
A0E2/Sound/scenario/g4a.mp3
A0E2/Sound/scenario/g4b.mp3
A0E2/Sound/scenario/g4c.mp3
A0E2/Sound/scenario/g4d.mp3
A0E2/Sound/scenario/g4e.mp3
A0E2/Sound/scenario/g4f.mp3
A0E2/Sound/scenario/g4g.mp3
A0E2/Sound/scenario/g4h.mp3
A0E2/Sound/scenario/g4i.mp3
A0E2/Sound/scenario/g4j.mp3
A0E2/Sound/scenario/g5a.mp3
A0E2/Sound/scenario/g5b.mp3
A0E2/Sound/scenario/g5c.mp3
A0E2/Sound/scenario/g5d.mp3
A0E2/Sound/scenario/g5e.mp3
A0E2/Sound/scenario/g5f.mp3
A0E2/Sound/scenario/g5g.mp3
A0E2/Sound/scenario/g5h.mp3
A0E2/Sound/scenario/g5i.mp3
A0E2/Sound/scenario/g5j.mp3
A0E2/Sound/scenario/g6a.mp3
A0E2/Sound/scenario/g6b.mp3
A0E2/Sound/scenario/g6c.mp3
A0E2/Sound/scenario/g6d.mp3
A0E2/Sound/scenario/g6e.mp3
A0E2/Sound/scenario/g6f.mp3
A0E2/Sound/scenario/g6g.mp3
A0E2/Sound/scenario/g6h.mp3
A0E2/Sound/scenario/g6i.mp3
A0E2/Sound/scenario/j1a.mp3
A0E2/Sound/scenario/j1b.mp3
A0E2/Sound/scenario/j1c.mp3
A0E2/Sound/scenario/j1d.mp3
A0E2/Sound/scenario/j1e.mp3
A0E2/Sound/scenario/j1f.mp3
A0E2/Sound/scenario/j1g.mp3
A0E2/Sound/scenario/j1h.mp3
A0E2/Sound/scenario/j1i.mp3
A0E2/Sound/scenario/j1j.mp3
A0E2/Sound/scenario/j1k.mp3
A0E2/Sound/scenario/j1l.mp3
A0E2/Sound/scenario/j1m.mp3
A0E2/Sound/scenario/j1n.mp3
A0E2/Sound/scenario/j1o.mp3
A0E2/Sound/scenario/j1p.mp3
A0E2/Sound/scenario/j1q.mp3
A0E2/Sound/scenario/j1r.mp3
A0E2/Sound/scenario/j1t.mp3
A0E2/Sound/scenario/j1u.mp3
A0E2/Sound/scenario/j1v.mp3
A0E2/Sound/scenario/j1w.mp3
A0E2/Sound/scenario/j1x.mp3
A0E2/Sound/scenario/j1y.mp3
A0E2/Sound/scenario/j1z.mp3
A0E2/Sound/scenario/j2a.mp3
A0E2/Sound/scenario/j2b.mp3
A0E2/Sound/scenario/j2c.mp3
A0E2/Sound/scenario/j2d.mp3
A0E2/Sound/scenario/j2e.mp3
A0E2/Sound/scenario/j2f.mp3
A0E2/Sound/scenario/j2g.mp3
A0E2/Sound/scenario/j2h.mp3
A0E2/Sound/scenario/j2i.mp3
A0E2/Sound/scenario/j2j.mp3
A0E2/Sound/scenario/j2k.mp3
A0E2/Sound/scenario/j2l.mp3
A0E2/Sound/scenario/j2m.mp3
A0E2/Sound/scenario/j2n.mp3
A0E2/Sound/scenario/j2o.mp3
A0E2/Sound/scenario/j3a.mp3
A0E2/Sound/scenario/j3b.mp3
A0E2/Sound/scenario/j3c.mp3
A0E2/Sound/scenario/j3d.mp3
A0E2/Sound/scenario/j3e.mp3
A0E2/Sound/scenario/j3f.mp3
A0E2/Sound/scenario/j3g.mp3
A0E2/Sound/scenario/j3h.mp3
A0E2/Sound/scenario/j3i.mp3
A0E2/Sound/scenario/j3j.mp3
A0E2/Sound/scenario/j3k.mp3
A0E2/Sound/scenario/j3l.mp3
A0E2/Sound/scenario/j3m.mp3
A0E2/Sound/scenario/j3n.mp3
A0E2/Sound/scenario/j3o.mp3
A0E2/Sound/scenario/j3p.mp3
A0E2/Sound/scenario/j4a.mp3
A0E2/Sound/scenario/j4b.mp3
A0E2/Sound/scenario/j4c.mp3
A0E2/Sound/scenario/j4c2.mp3
A0E2/Sound/scenario/j4d.mp3
A0E2/Sound/scenario/j4e.mp3
A0E2/Sound/scenario/j4f.mp3
A0E2/Sound/scenario/j4h.mp3
A0E2/Sound/scenario/j4i.mp3
A0E2/Sound/scenario/j4j.mp3
A0E2/Sound/scenario/j5a.mp3
A0E2/Sound/scenario/j5b.mp3
A0E2/Sound/scenario/j5c.mp3
A0E2/Sound/scenario/j5d.mp3
A0E2/Sound/scenario/j5e.mp3
A0E2/Sound/scenario/j5f.mp3
A0E2/Sound/scenario/j5g.mp3
A0E2/Sound/scenario/j5h.mp3
A0E2/Sound/scenario/j5i.mp3
A0E2/Sound/scenario/j5j.mp3
A0E2/Sound/scenario/j5k.mp3
A0E2/Sound/scenario/j5l.mp3
A0E2/Sound/scenario/j6a.mp3
A0E2/Sound/scenario/j6a2.mp3
A0E2/Sound/scenario/j6b.mp3
A0E2/Sound/scenario/j6c.mp3
A0E2/Sound/scenario/j6d.mp3
A0E2/Sound/scenario/j6e.mp3
A0E2/Sound/scenario/j6f.mp3
A0E2/Sound/scenario/j6g.mp3
A0E2/Sound/scenario/j6i.mp3
A0E2/Sound/scenario/j6j.mp3
A0E2/Sound/scenario/j6k.mp3
A0E2/Sound/scenario/j6l.mp3
A0E2/Sound/scenario/j6m.mp3
A0E2/Sound/scenario/j6n.mp3
A0E2/Sound/scenario/j6o.mp3
A0E2/Sound/scenario/j6q.mp3
A0E2/Sound/scenario/s1b.mp3
A0E2/Sound/scenario/s1c.mp3
A0E2/Sound/scenario/s1d.mp3
A0E2/Sound/scenario/s1e.mp3
A0E2/Sound/scenario/s1f.mp3
A0E2/Sound/scenario/s1g.mp3
A0E2/Sound/scenario/s1h.mp3
A0E2/Sound/scenario/s1i.mp3
A0E2/Sound/scenario/s1j.mp3
A0E2/Sound/scenario/s2a.mp3
A0E2/Sound/scenario/s2b.mp3
A0E2/Sound/scenario/s2c.mp3
A0E2/Sound/scenario/s2d.mp3
A0E2/Sound/scenario/s2e.mp3
A0E2/Sound/scenario/s2f.mp3
A0E2/Sound/scenario/s2g.mp3
A0E2/Sound/scenario/s2i.mp3
A0E2/Sound/scenario/s2j.mp3
A0E2/Sound/scenario/s2l.mp3
A0E2/Sound/scenario/s3a.mp3
A0E2/Sound/scenario/s3b.mp3
A0E2/Sound/scenario/s3c.mp3
A0E2/Sound/scenario/s3d.mp3
A0E2/Sound/scenario/s3e.mp3
A0E2/Sound/scenario/s3f.mp3
A0E2/Sound/scenario/s4a.mp3
A0E2/Sound/scenario/s4b.mp3
A0E2/Sound/scenario/s4c.mp3
A0E2/Sound/scenario/s4d.mp3
A0E2/Sound/scenario/s4e.mp3
A0E2/Sound/scenario/s4f.mp3
A0E2/Sound/scenario/s4g.mp3
A0E2/Sound/scenario/s4h.mp3
A0E2/Sound/scenario/s4i.mp3
A0E2/Sound/scenario/s4j.mp3
A0E2/Sound/scenario/s4k.mp3
A0E2/Sound/scenario/s4l.mp3
A0E2/Sound/scenario/s4m.mp3
A0E2/Sound/scenario/s5a.mp3
A0E2/Sound/scenario/s5b.mp3
A0E2/Sound/scenario/s5c.mp3
A0E2/Sound/scenario/s5d.mp3
A0E2/Sound/scenario/s6a.mp3
A0E2/Sound/scenario/s6b.mp3
A0E2/Sound/scenario/s6c.mp3
A0E2/Sound/scenario/s6d.mp3
A0E2/Sound/scenario/s6e.mp3
A0E2/Sound/scenario/s6f.mp3
A0E2/Sound/scenario/s6g.mp3
A0E2/Sound/scenario/s6h.mp3
A0E2/Sound/scenario/s6i.mp3
A0E2/Sound/scenario/w1a.mp3
A0E2/Sound/scenario/w1b.mp3
A0E2/Sound/scenario/w1c.mp3
A0E2/Sound/scenario/w1d.mp3
A0E2/Sound/scenario/w1e.mp3
A0E2/Sound/scenario/w1f.mp3
A0E2/Sound/scenario/w1g.mp3
A0E2/Sound/scenario/w1h.mp3
A0E2/Sound/scenario/w1i.mp3
A0E2/Sound/scenario/w1j.mp3
A0E2/Sound/scenario/w1k.mp3
A0E2/Sound/scenario/w1l.mp3
A0E2/Sound/scenario/w1m.mp3
A0E2/Sound/scenario/w1n.mp3
A0E2/Sound/scenario/w1o.mp3
A0E2/Sound/scenario/w1p.mp3
A0E2/Sound/scenario/w1q.mp3
A0E2/Sound/scenario/w1r.mp3
A0E2/Sound/scenario/w1s.mp3
A0E2/Sound/scenario/w1t.mp3
A0E2/Sound/scenario/w1wa.mp3
A0E2/Sound/scenario/w1wb.mp3
A0E2/Sound/scenario/w1wc.mp3
A0E2/Sound/scenario/w2a.mp3
A0E2/Sound/scenario/w2aa.mp3
A0E2/Sound/scenario/w2b.mp3
A0E2/Sound/scenario/w2c.mp3
A0E2/Sound/scenario/w2d.mp3
A0E2/Sound/scenario/w2f.mp3
A0E2/Sound/scenario/w2g.mp3
A0E2/Sound/scenario/w2h.mp3
A0E2/Sound/scenario/w2i.mp3
A0E2/Sound/scenario/w2j.mp3
A0E2/Sound/scenario/w2k.mp3
A0E2/Sound/scenario/w2wa.mp3
A0E2/Sound/scenario/w3a.mp3
A0E2/Sound/scenario/w3b.mp3
A0E2/Sound/scenario/w3c.mp3
A0E2/Sound/scenario/w3d.mp3
A0E2/Sound/scenario/w3e.mp3
A0E2/Sound/scenario/w3e2.mp3
A0E2/Sound/scenario/w3f.mp3
A0E2/Sound/scenario/w3g.mp3
A0E2/Sound/scenario/w3h.mp3
A0E2/Sound/scenario/w3i.mp3
A0E2/Sound/scenario/w3j.mp3
A0E2/Sound/scenario/w3k.mp3
A0E2/Sound/scenario/w3m.mp3
A0E2/Sound/scenario/w3n.mp3
A0E2/Sound/scenario/w3o.mp3
A0E2/Sound/scenario/w3wa.mp3
A0E2/Sound/scenario/w4a.mp3
A0E2/Sound/scenario/w4b.mp3
A0E2/Sound/scenario/w4c.mp3
A0E2/Sound/scenario/w4d.mp3
A0E2/Sound/scenario/w4e.mp3
A0E2/Sound/scenario/w4f.mp3
A0E2/Sound/scenario/w4g.mp3
A0E2/Sound/scenario/w4h.mp3
A0E2/Sound/scenario/w4i.mp3
A0E2/Sound/scenario/w4j.mp3
A0E2/Sound/scenario/w4k.mp3
A0E2/Sound/scenario/w4l.mp3
A0E2/Sound/scenario/w4m.mp3
A0E2/Sound/scenario/w4n.mp3
A0E2/Sound/scenario/w4o.mp3
A0E2/Sound/scenario/w4p.mp3
A0E2/Sound/scenario/w4q.mp3
A0E2/Sound/scenario/w4wa.mp3
A0E2/Sound/scenario/w4wb.mp3
A0E2/Sound/scenario/w4wc.mp3
A0E2/Sound/scenario/w5a.mp3
A0E2/Sound/scenario/w5a2.mp3
A0E2/Sound/scenario/w5b.mp3
A0E2/Sound/scenario/w5c.mp3
A0E2/Sound/scenario/w5d.mp3
A0E2/Sound/scenario/w5e.mp3
A0E2/Sound/scenario/w5f.mp3
A0E2/Sound/scenario/w5g.mp3
A0E2/Sound/scenario/w5h.mp3
A0E2/Sound/scenario/w5i.mp3
A0E2/Sound/scenario/w5j.mp3
A0E2/Sound/scenario/w5k.mp3
A0E2/Sound/scenario/w5l.mp3
A0E2/Sound/scenario/w5m.mp3
A0E2/Sound/scenario/w5n.mp3
A0E2/Sound/scenario/w5o.mp3
A0E2/Sound/scenario/w5u.mp3
A0E2/Sound/scenario/w5w.mp3
A0E2/Sound/scenario/w5wa.mp3
A0E2/Sound/scenario/w5wd.mp3
A0E2/Sound/scenario/w5we.mp3
A0E2/Sound/scenario/w5wf.mp3
A0E2/Sound/scenario/w5wg.mp3
A0E2/Sound/scenario/w5wh.mp3
A0E2/Sound/scenario/w5z.mp3
A0E2/Sound/scenario/w5z2.mp3
A0E2/Sound/scenario/w5z3.mp3
A0E2/Sound/scenario/w5z4.mp3
A0E2/Sound/scenario/w6a.mp3
A0E2/Sound/scenario/w6b.mp3
A0E2/Sound/scenario/w6c.mp3
A0E2/Sound/scenario/w6d.mp3
A0E2/Sound/scenario/w6e.mp3
A0E2/Sound/scenario/w6f.mp3
A0E2/Sound/scenario/w6g.mp3
A0E2/Sound/scenario/w6h.mp3
A0E2/Sound/scenario/w6j.mp3
A0E2/Sound/scenario/w6k.mp3
A0E2/Sound/scenario/w6l.mp3
A0E2/Sound/scenario/w6m.mp3
A0E2/Sound/scenario/w6n.mp3
A0E2/Sound/scenario/w6o.mp3
A0E2/Sound/scenario/w6p.mp3
A0E2/Sound/scenario/w6q.mp3
A0E2/Sound/scenario/w6r.mp3
A0E2/Sound/scenario/w6s.mp3
A0E2/Sound/scenario/w6t.mp3
A0E2/Sound/scenario/w6u.mp3
A0E2/Sound/scenario/w6v.mp3
A0E2/Sound/scenario/w6w.mp3
A0E2/Sound/scenario/w7a.mp3
A0E2/Sound/scenario/w7b.mp3
A0E2/Sound/scenario/w7c.mp3
A0E2/Sound/scenario/w7d.mp3
A0E2/Sound/scenario/w7e.mp3
A0E2/Sound/scenario/w7f.mp3
A0E2/Sound/scenario/w7g.mp3
A0E2/Sound/scenario/w7h.mp3
A0E2/Sound/scenario/w7i.mp3
A0E2/Sound/scenario/w7j.mp3
A0E2/Sound/scenario/w7k.mp3
A0E2/Sound/scenario/w7l.mp3
A0E2/Sound/scenario/w7m.mp3
A0E2/Sound/scenario/w7n.mp3
A0E2/Sound/scenario/w7o.mp3
A0E2/Sound/scenario/w7p.mp3
A0E2/Sound/scenario/w7q.mp3
A0E2/Sound/terrain/Cricket.wav
A0E2/Sound/terrain/Wave1.wav
A0E2/Sound/terrain/Wave2.wav
A0E2/Sound/terrain/Wave3.wav
A0E2/Sound/terrain/Wave4.wav
A0E2/Sound/terrain/Wave5.wav
A0E2/Sound/terrain/Wind1.wav
A0E2/Sound/terrain/Wind2.wav
A0E2/Sound/terrain/Wind3.wav
A0E2/Sound/terrain/tf1.wav
A0E2/Sound/terrain/tf2.wav
A0E2/Sound/terrain/tf3.wav
A0E2/Sound/terrain/tf4.wav
A0E2/Sound/terrain/tf6.wav
A0E2/Sound/terrain/tf7.wav
A0E2/Sound/terrain/tf8.wav
A0E2/Taunt/01 Yes.mp3
A0E2/Taunt/02 No.mp3
A0E2/Taunt/03 Food, please.mp3
A0E2/Taunt/04 Wood, please.mp3
A0E2/Taunt/05 Gold, PLease.mp3
A0E2/Taunt/06 Stone, please.mp3
A0E2/Taunt/07 Ahh.mp3
A0E2/Taunt/08 All hail.mp3
A0E2/Taunt/09 Oooh.mp3
A0E2/Taunt/10 Back to Age 1.mp3
A0E2/Taunt/11 Herb laugh.mp3
A0E2/Taunt/12 Being rushed.mp3
A0E2/Taunt/13 Blame your isp.mp3
A0E2/Taunt/14 Start the game.mp3
A0E2/Taunt/15 Don't Point That Thing.mp3
A0E2/Taunt/16 Enemy Sighted.mp3
A0E2/Taunt/17 It Is Good.mp3
A0E2/Taunt/18 I Need a Monk.mp3
A0E2/Taunt/19 Long Time No Siege.mp3
A0E2/Taunt/20 My granny.mp3
A0E2/Taunt/21 Nice Town I'll Take It.mp3
A0E2/Taunt/22 Quit Touchin.mp3
A0E2/Taunt/23 Raiding Party.mp3
A0E2/Taunt/24 Dadgum.mp3
A0E2/Taunt/25 Smite Me.mp3
A0E2/Taunt/26 The wonder.mp3
A0E2/Taunt/27 You play 2 hours.mp3
A0E2/Taunt/28 You Should See the Other Guy.mp3
A0E2/Taunt/29 Roggan.mp3
A0E2/Taunt/30 Wololo.mp3
A0E2/UNINSTAL.EXE
.exe windows x86

b29cd47f6ac97ea065dc81d03d0397fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
FormatMessageA
GetExitCodeProcess
GetTempPathA
LocalFree
GetSystemInfo
CreateThread
SetErrorMode
GetPrivateProfileStringA
GetTempFileNameA
GlobalMemoryStatus
DeviceIoControl
WritePrivateProfileStringA
CreateDirectoryA
WriteFile
ReadFile
SetFileTime
GetFileTime
SetFilePointer
GetFileSize
GetVolumeInformationA
GetFileType
CreateFileA
RemoveDirectoryA
GetFileAttributesA
GetCurrentDirectoryA
GetDriveTypeA
MoveFileExA
DeleteFileA
GetModuleFileNameA
GetDiskFreeSpaceA
SetCurrentDirectoryA
GetLogicalDrives
FindFirstFileA
FindNextFileA
SetFileAttributesA
GetCurrentProcess
ResumeThread
SetPriorityClass
GetCurrentThread
SetThreadPriority
GetEnvironmentVariableA
FlushFileBuffers
QueryPerformanceCounter
GetThreadPriority
GetPriorityClass
QueryPerformanceFrequency
GetExitCodeThread
SetEndOfFile
CopyFileA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsBadStringPtrW
IsBadStringPtrA
GetUserDefaultLCID
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
OpenMutexA
SuspendThread
WaitForMultipleObjects
_lread
MulDiv
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TlsSetValue
FileTimeToSystemTime
FileTimeToLocalFileTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsAlloc
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetCPInfo
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
HeapSize
SetStdHandle
GetFullPathNameA
GetACP
WaitForSingleObject
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadCodePtr
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEvent
ResetEvent
lstrcpynA
CreateMutexA
GetLocaleInfoA
GetSystemDirectoryA
lstrcmpA
GetCurrentThreadId
ReleaseMutex
FindNextChangeNotification
FindCloseChangeNotification
FindFirstChangeNotificationA
CreateProcessA
CreateEventA
GetShortPathNameA
FindResourceA
CloseHandle
VerLanguageNameA
SizeofResource
LoadResource
LockResource
LoadLibraryA
VirtualProtect
SetLastError
FreeLibrary
GetProcAddress
MultiByteToWideChar
GetWindowsDirectoryA
GetModuleHandleA
lstrcmpiA
lstrcatA
Sleep
lstrcpyA
FindClose
lstrlenA
GetVersionExA
IsBadWritePtr
IsBadReadPtr
GetTickCount
ExitThread
GetOEMCP

user32

IsIconic
DestroyCursor
GetPropA
CharLowerA
SetCursor
GetClientRect
OemToCharA
GetMessageA
ReleaseCapture
IsDialogMessageA
UnregisterClassA
SetCapture
ScreenToClient
CallWindowProcA
GetClassInfoA
OffsetRect
GetNextDlgGroupItem
GetParent
GetCapture
GrayStringA
DrawTextA
DrawTextExA
EnableWindow
IsWindowEnabled
DialogBoxIndirectParamA
CreateDialogIndirectParamA
SetWindowLongA
InvalidateRect
GetNextDlgTabItem
GetAsyncKeyState
GetWindowTextLengthA
CreateDialogParamA
EqualRect
FrameRect
PtInRect
RegisterWindowMessageA
LoadIconA
PostQuitMessage
EnableMenuItem
FillRect
MessageBeep
SetActiveWindow
BeginPaint
EndPaint
SetFocus
GetFocus
IsChild
GetWindowLongA
EndDialog
GetUpdateRect
RegisterClassA
SetPropA
IsWindowVisible
IntersectRect
CopyRect
IsRectEmpty
GetWindowRect
SetWindowTextA
RemovePropA
SystemParametersInfoA
GetWindow
GetClassNameA
CharToOemA
IsWindow
ExitWindowsEx
FindWindowExA
EnumWindows
EnumDisplaySettingsA
GetDC
ReleaseDC
CreateWindowExA
LoadImageA
CharPrevA
GetDesktopWindow
WaitForInputIdle
GetKeyboardType
LoadStringA
PeekMessageA
TranslateMessage
DispatchMessageA
SetWindowPos
wvsprintfA
MsgWaitForMultipleObjects
GetWindowPlacement
GetSystemMetrics
UnionRect
FindWindowA
SetForegroundWindow
MessageBoxA
PostMessageA
SetTimer
CharNextA
wsprintfA
KillTimer
DefWindowProcA
GetMessagePos
MapWindowPoints
ShowWindow
SendMessageA
DestroyWindow
SetRectEmpty
RedrawWindow
LoadCursorA
CharUpperA

gdi32

RemoveFontResourceA
SetDIBits
CreateDIBSection
DeleteObject
RealizePalette
SelectPalette
GetNearestPaletteIndex
SetTextColor
SetBkColor
GetStockObject
SelectObject
GetTextMetricsA
SetBkMode
EndDoc
EndPage
DeleteDC
StartDocA
SetMapMode
StartPage
CreatePalette
GetDIBColorTable
GetSystemPaletteEntries
GetObjectA
BitBlt
CreateCompatibleDC
FillRgn
CreateBrushIndirect
TextOutA
CreatePolygonRgn
SetDIBColorTable
CombineRgn
GetPaletteEntries
CreateSolidBrush
CreateDCA
GetClipBox
CreateFontA
GetDCOrgEx
GetDeviceCaps
AddFontResourceA

comctl32

ImageList_LoadImageA
ImageList_Destroy

comdlg32

PrintDlgA

advapi32

RegOpenKeyExA
CloseServiceHandle
AdjustTokenPrivileges
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
LookupPrivilegeValueA
OpenSCManagerA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
OpenProcessToken

shell32

SHChangeNotify
SHGetPathFromIDListA
ShellExecuteExA
SHGetSpecialFolderLocation

ole32

CoInitialize
CoCreateInstance
CoUninitialize
OleInitialize
OleUninitialize

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

mciGetErrorStringA
waveOutGetNumDevs
waveOutGetDevCapsA
timeGetTime
mciSendCommandA
mciSendStringA
joyGetNumDevs
PlaySoundA
mmioInstallIOProcA

Exports

Exports

?DialogProc@CAppAlert@@SGHPAUHWND__@@IIJ@Z
?DialogProc@CAppMessage@@SGHPAUHWND__@@IIJ@Z
?DialogProc@CDirBrowser@@SGHPAUHWND__@@IIJ@Z
?HotsetupCallback@@YG?AW4EBURETCODE@@PAX@Z

Sections

.text
Size: 372KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A0E2/clcd16.dll
A0E2/clcd32.dll
.dll windows x86

07bcffb1f82feb7a242fdad899ace521

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_20
ThunkConnect32
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
SMapLS_IP_EBP_8
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
GetStartupInfoA
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
SMapLS_IP_EBP_20
SUnMapLS_IP_EBP_20
ThunkConnect32
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
SMapLS_IP_EBP_8
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

_GetIDT_If32@8
_GetRMInts_If32@8
_GetV86Vector_If32@12
_GetVectors_If32@8
_InitIV_32@12
_InitVectors_32@8
_IsLoadComplete_32@4
_SetIDT_If32@8
_SetV86Vector_If32@12
_SetVectors_If32@16
thk_ThunkData32

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/clokspl.exe
.exe windows x86

503b8663acf52579007e3ef9afa85466

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetACP
HeapDestroy
HeapCreate
HeapReAlloc
GetCPInfo
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
VirtualFree
VirtualAlloc
EnterCriticalSection
TerminateProcess
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CloseHandle
MulDiv
InterlockedDecrement
GlobalFree
ExitProcess
RaiseException
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
RtlUnwind
SetErrorMode
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
WritePrivateProfileStringA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
SetLastError
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
LeaveCriticalSection
GlobalReAlloc
FindResourceA
LoadResource
LCMapStringW
GlobalHandle
LockResource
GetCurrentThreadId
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
IsBadReadPtr
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
GetFileAttributesA
GlobalGetAtomNameA
GetModuleFileNameA
GetCommandLineA
GetVersion
GlobalAddAtomA
lstrcatA
GlobalUnlock
lstrcpynA
GlobalLock
lstrlenA
lstrcpyA

user32

EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
SetWindowTextA
LoadBitmapA
GetMenuCheckMarkDimensions
IsZoomed
OffsetRect
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
LoadStringA
PostQuitMessage
ShowOwnedPopups
MessageBoxA
GetClassNameA
PtInRect
ClientToScreen
GetSysColorBrush
FindWindowA
FillRect
IsRectEmpty
SetTimer
KillTimer
WindowFromPoint
SetRect
DeleteMenu
CharUpperA
InflateRect
GetDCEx
LockWindowUpdate
SetCapture
IntersectRect
SetParent
AppendMenuA
GetSystemMenu
InvertRect
DispatchMessageA
AdjustWindowRectEx
DeferWindowPos
GetClientRect
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
RegisterClassA
GetSysColor
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
IsDialogMessageA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
BringWindowToTop
IsWindowVisible
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
SetWindowLongA
wsprintfA
GetKeyState
SetWindowPos
GetDlgCtrlID
GetMenuItemCount
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
GetMenu
GetClassInfoA
DestroyMenu
SetFocus
GetParent
GetActiveWindow
ShowWindow
GetWindowLongA
IsWindow
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
PostMessageA
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
LoadMenuA
GetSubMenu
GetCursorPos
GetMenuItemID
LoadIconA
InvalidateRect
LoadImageA
ReleaseDC
GetWindowRect
ScreenToClient
GetDesktopWindow
GetDC
LoadCursorA
UpdateWindow
EnableWindow
SetForegroundWindow
SendMessageA
GetNextDlgTabItem
EndDialog
GetSystemMetrics
CreateDialogIndirectParamA
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
SetWindowsHookExA
CallNextHookEx
DestroyWindow
GetForegroundWindow
UnhookWindowsHookEx
CreateWindowExA
UnregisterClassA

gdi32

GetObjectA
BitBlt
RealizePalette
CreateCompatibleDC
CreateHalftonePalette
DeleteDC
CreatePalette
GetDIBColorTable
SelectObject
SetTextColor
SetBkColor
CreateBitmap
GetTextExtentPointA
GetTextMetricsA
SaveDC
RestoreDC
GetStockObject
SelectPalette
DeleteObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
SetTextAlign
CreateRectRgn
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateFontIndirectA
PatBlt
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetDeviceCaps
SetBkMode

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A0E2/dplayerx.dll
.dll windows x86

8cf1b8750b965ca353117928e02ab995

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetCurrentProcessId
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
CloseHandle
DeleteCriticalSection
ReadFile
SetFilePointer
WriteFile
GetLastError
LoadLibraryA
GetModuleFileNameA
LoadLibraryExA
GetVersionExA
CreateFileA
DeviceIoControl
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
GetCurrentProcess
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetLocaleInfoA
SetStdHandle
GetStringTypeA
GetStringTypeW
HeapReAlloc
GetLocaleInfoW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

user32

GetKeyboardType
wsprintfA

Exports

Exports

Ox77F052CC
_DllMain@12

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.txt
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.txt2
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/drvmgt.dll
.dll windows x86

9dfafe4e7d6597e0f3e491f2f25e9f7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
Sleep
CopyFileA
GetSystemDirectoryA
lstrlenA
CreateFileA
GetLastError
DeviceIoControl
HeapDestroy
GetCurrentProcess
GetCurrentThreadId
HeapAlloc
SetFileAttributesA
GetFileAttributesA
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
CloseHandle
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetModuleFileNameA
FreeEnvironmentStringsA
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WideCharToMultiByte
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
LoadLibraryA
FlushFileBuffers
SetFilePointer

user32

wsprintfA

advapi32

RegOpenKeyExA
OpenServiceA
RegEnumKeyExA
StartServiceA
OpenSCManagerA
QueryServiceStatus
DeleteService
CloseServiceHandle
CreateServiceA
GetSecurityDescriptorDacl
ControlService
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
GetAclInformation
QueryServiceObjectSecurity
SetServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetAce

Exports

Exports

Remove
Setup
_DllMain@12

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/empires2.exe
.exe windows x86

646b36b477ecd687f453f7c5ed9ad176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

msvfw32

ICInfo
MCIWndCreateA

winmm

mixerGetNumDevs
mixerGetLineControlsA
mixerGetLineInfoA
timeEndPeriod
timeGetTime
mciSendCommandA
mixerOpen
mixerSetControlDetails
timeBeginPeriod
mixerGetControlDetailsA
mciGetErrorStringA
mixerClose

kernel32

_llseek
GetModuleFileNameA
IsDBCSLeadByte
SetLastError
GetProcAddress
CompareStringA
_lread
ReleaseSemaphore
SetThreadPriority
SetPriorityClass
GetPriorityClass
GetThreadPriority
FindResourceA
GlobalHandle
GlobalAlloc
MapViewOfFile
LoadResource
LockResource
LoadLibraryA
GetTempFileNameA
GetTempPathA
VirtualFree
WinExec
FreeEnvironmentStringsW
GetEnvironmentStrings
OpenFile
GetCurrentProcess
GetModuleHandleA
GetCurrentThread
GlobalLock
GetEnvironmentStringsW
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
CompareStringW
GlobalUnlock
GlobalReAlloc
_lclose
GlobalFree
_hread
FindNextFileA
OutputDebugStringA
DeleteFileA
FindFirstFileA
GetDateFormatA
GetTimeFormatA
GetLastError
FindClose
CreateMutexA
GetVolumeInformationA
ReleaseMutex
GetDriveTypeA
FreeLibrary
MulDiv
CloseHandle
CreateFileMappingA
GlobalMemoryStatus
GetCurrentDirectoryA
GetStartupInfoA
SetStdHandle
SetEndOfFile
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
CreateFileA
UnmapViewOfFile
WaitForSingleObject
CreateSemaphoreA
GetCommandLineA
SetEnvironmentVariableA
GetStringTypeW
GetFullPathNameA
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
TerminateProcess
ExitProcess
WriteFile
SetFilePointer
GetFileType
ReadFile
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
IsBadCodePtr
HeapAlloc
VirtualAlloc
VirtualLock
VirtualQuery
GetVersion
RaiseException
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA

user32

GetWindowThreadProcessId
InvalidateRect
GetParent
GetWindowTextA
SetCursor
SetClassLongA
GetCursorPos
ScreenToClient
FillRect
ValidateRect
GetUpdateRect
IsIconic
SetForegroundWindow
GetLastActivePopup
BringWindowToTop
GetDC
ReleaseDC
GetAsyncKeyState
DefWindowProcA
GetKeyState
GetClientRect
SetWindowPos
UpdateWindow
LoadIconA
RegisterClassA
CharUpperA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
DestroyWindow
FindWindowA
SendMessageA
SystemParametersInfoA
ShowWindow
SetFocus
SetTimer
LoadCursorA
IsWindow
PostQuitMessage
KillTimer
SetWindowTextA
SetCapture
ReleaseCapture
GetCapture
SetWindowLongA
PostMessageA
GetActiveWindow
WinHelpA
GetKeyboardState
GetKeyNameTextA
MapVirtualKeyA
wsprintfA
DrawTextA
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
GetCaretBlinkTime
DrawTextExA
CallWindowProcA
MoveWindow
MessageBeep
GetWindowLongA
SetSysColors
GetSysColor
MessageBoxA
LoadStringA
SetRect
ClientToScreen
GetWindowRect
GetSystemMetrics
GetForegroundWindow
CreateWindowExA
GetFocus
SetCursorPos

gdi32

GetDeviceCaps
SelectObject
CreateFontIndirectA
GetStockObject
RealizePalette
SelectPalette
DeleteDC
CreateICA
CreatePalette
GetObjectA
GetPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
GetSystemPaletteEntries
SelectClipRgn
ResizePalette
SetBkMode
TextOutA
SetTextColor
GetTextExtentPoint32A
SetBkColor
CreateRectRgn
MoveToEx
SetTextAlign
LineTo
DeleteObject
CreatePen
GetTextMetricsA

dplayx

ord4
ord2
ord1

dsound

ord1

ddraw

DirectDrawCreate

imm32

ImmAssociateContext
ImmGetContext
ImmGetOpenStatus
ImmSetOpenStatus
ImmNotifyIME
ImmGetDefaultIMEWnd
ImmReleaseContext

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

ole32

CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize

wsock32

gethostname
WSAStartup
gethostbyname
WSACleanup

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

THIS_COD
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

THIS_DAT
Size: 4KB - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Inf32Dat
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A0E2/language.dll
.dll windows x86

fb80b577eec61d576561a1fb3cd53b9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
GetCommandLineA
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
A0E2/player.nfo
A0E2/scenariobkg.bmp

Sharing

General

Malware Config

Signatures

Files

b83464d8132ecd9f810820e192566e15

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

comctl32

version

Sections

.text Size: 36KB - Virtual size: 35KB

.data Size: 1024B - Virtual size: 7KB

.rsrc Size: 430KB - Virtual size: 432KB

3443450a10d6d557144798ae521a009f

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 1024B - Virtual size: 943B

.data Size: 5KB - Virtual size: 9KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

910e2783f4515ac83620aa7b692fa60a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 4KB - Virtual size: 3KB

b7ae0f51879a8b877f1b3713d076b107

Headers

File Characteristics

Imports

version

msvfw32

winmm

gdi32

dplayx

dsound

ddraw

imm32

advapi32

ole32

wsock32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

THIS_COD Size: 48KB - Virtual size: 46KB

.rdata Size: 196KB - Virtual size: 195KB

.data Size: 88KB - Virtual size: 1.2MB

THIS_DAT Size: 4KB - Virtual size: 188B

Inf32Dat Size: 44KB - Virtual size: 43KB

.rsrc Size: 8KB - Virtual size: 4KB

9297fea69b3d6d0bc8d4d9a7f396de78

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

.text
Size: 36KB - Virtual size: 35KB

.data
Size: 1024B - Virtual size: 7KB

.rsrc
Size: 430KB - Virtual size: 432KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 1024B - Virtual size: 943B

.data
Size: 5KB - Virtual size: 9KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 2.1MB - Virtual size: 2.1MB

THIS_COD
Size: 48KB - Virtual size: 46KB

.rdata
Size: 196KB - Virtual size: 195KB

.data
Size: 88KB - Virtual size: 1.2MB

THIS_DAT
Size: 4KB - Virtual size: 188B

Inf32Dat
Size: 44KB - Virtual size: 43KB

.rsrc
Size: 8KB - Virtual size: 4KB

.text
Size: 177KB - Virtual size: 177KB

.bss
Size: - Virtual size: 5KB

.sdata
Size: 512B - Virtual size: 268B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 45KB - Virtual size: 44KB

.idata
Size: 5KB - Virtual size: 4KB

.edata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 11KB - Virtual size: 10KB

.debug
Size: 103KB - Virtual size: 103KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 4KB - Virtual size: 12B

CODE
Size: 12KB - Virtual size: 11KB

DATA
Size: 512B - Virtual size: 428B

BSS
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1024B - Virtual size: 980B

.rsrc
Size: 10KB - Virtual size: 10KB

.text
Size: 64KB - Virtual size: 63KB

.bss
Size: - Virtual size: 5KB

.sdata
Size: 512B - Virtual size: 268B

.rdata
Size: 1024B - Virtual size: 661B

.data
Size: 27KB - Virtual size: 26KB

.idata
Size: 2KB - Virtual size: 2KB

.edata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 776B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 372KB - Virtual size: 368KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 40KB - Virtual size: 68KB

.rsrc
Size: 132KB - Virtual size: 132KB