parentGenerals.exe
filenameGenerals.unpacked.exe
size151552 (0x25000)
md5170744e44ddeb99836757ee07b172974
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x4b536944
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x15000
SizeOfInitializedData0xe000
SizeOfUninitializedData0
AddressOfEntryPoint0x102f101
BaseOfCode0x1000
BaseOfData0x10000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x29000
SizeOfHeaders0x1000
CheckSum0x28516
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xf0000xee00RW- IDATA
.rdata0x100000x30000x2a00RW- IDATA
.data0x130000x50000x4000RW- IDATA
.rsrc0x180000x60000x5e00RW- IDATA
.DDeMCod0x1e0000x20000x2000RW- IDATA
.DDeMImp0x200000x10000xd74RW- IDATA
.packit0x210000x70000x6800RW- IDATA
.data0x280000x10000RW- IDATA

Data Directory

typevasize
EXPORT0x128000x9c
IMPORT0x200000xb4
RESOURCE0x180000x5d40
EXCEPTION00
SECURITY00
BASERELOC0x220c48
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x100000xe030
Delay_IAT00
CLR_Header00
00x100000
typenamesizecp
ICON#12960
ICON#213840
ICON#38720
ICON#47440
ICON#522160
ICON#632400
ICON#716400
ICON#837520
ICON#973360
DIALOG#1012380
DIALOG#1031500
STRING#111240
GROUP_ICON#1021320
idlangstring
11033Your computer needs to be restarted to continue the patch. Press OK to continue.
21033About to restart
31033You need to download a patch from our website. When you press OK, your browser will automatically open to the download page.
41033Web Patch
51033File (%d of %d)
61033You must restart your computer now.
71033Could not set the patch to run on system reboot! You must exit the game and run %s to complete the patch.
81033Error
91033Error: Couldn't find file: %s
101033A required DLL is corrupt.
111033Patch error. Existing game files may have been modified. You should re-install the game from the CD.
module_namehintordfunction_name
KERNEL32.dllGetExitCodeProcess
KERNEL32.dllSleep
KERNEL32.dllWaitForSingleObject
KERNEL32.dllCreateFileMappingA
KERNEL32.dllCreateMutexA
KERNEL32.dllWaitForMultipleObjects
KERNEL32.dllCreateEventA
KERNEL32.dllUnmapViewOfFile
KERNEL32.dllGetVolumeInformationA
KERNEL32.dllMapViewOfFileEx
KERNEL32.dllGetModuleFileNameA
KERNEL32.dllCompareStringA
KERNEL32.dllSetStdHandle
KERNEL32.dllGetStringTypeW
KERNEL32.dllGetStringTypeA
KERNEL32.dllIsBadCodePtr
KERNEL32.dllIsBadReadPtr
KERNEL32.dllSetUnhandledExceptionFilter
KERNEL32.dllFlushFileBuffers
KERNEL32.dllGetFileType
KERNEL32.dllCreateProcessA
KERNEL32.dllSetHandleCount
KERNEL32.dllGetEnvironmentStringsW
KERNEL32.dllGetEnvironmentStrings
KERNEL32.dllFreeEnvironmentStringsW
KERNEL32.dllFreeEnvironmentStringsA
KERNEL32.dllUnhandledExceptionFilter
KERNEL32.dllGetOEMCP
KERNEL32.dllGetACP
KERNEL32.dllGetCPInfo
KERNEL32.dllIsBadWritePtr
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualFree
KERNEL32.dllHeapCreate
KERNEL32.dllHeapDestroy
KERNEL32.dllGetVersionExA
KERNEL32.dllGetEnvironmentVariableA
KERNEL32.dllLCMapStringW
KERNEL32.dllLCMapStringA
KERNEL32.dllMultiByteToWideChar
KERNEL32.dllHeapSize
KERNEL32.dllFormatMessageA
KERNEL32.dllGetCurrentProcess
KERNEL32.dllLoadLibraryA
KERNEL32.dllGetProcAddress
KERNEL32.dllFreeLibrary
KERNEL32.dllGlobalAlloc
KERNEL32.dllGlobalLock
KERNEL32.dllGlobalUnlock
KERNEL32.dllFindNextFileA
KERNEL32.dllFindFirstFileA
KERNEL32.dllFindClose
KERNEL32.dllSetFilePointer
KERNEL32.dllSetEndOfFile
KERNEL32.dllGetFileSize
KERNEL32.dllReadFile
KERNEL32.dllDeleteFileA
KERNEL32.dllGetLastError
KERNEL32.dllWideCharToMultiByte
KERNEL32.dllWriteFile
KERNEL32.dllCloseHandle
KERNEL32.dllHeapReAlloc
KERNEL32.dllGetVersion
KERNEL32.dllCreateFileA
KERNEL32.dllGetStdHandle
KERNEL32.dllRtlUnwind
KERNEL32.dllHeapAlloc
KERNEL32.dllExitProcess
KERNEL32.dllTerminateProcess
KERNEL32.dllGetCurrentDirectoryA
KERNEL32.dllGetFullPathNameA
KERNEL32.dllGetDriveTypeA
KERNEL32.dllSetEnvironmentVariableA
KERNEL32.dllSetCurrentDirectoryA
KERNEL32.dllGetTimeZoneInformation
KERNEL32.dllGetSystemTime
KERNEL32.dllGetLocalTime
KERNEL32.dllHeapFree
KERNEL32.dllGetModuleHandleA
KERNEL32.dllGetStartupInfoA
KERNEL32.dllGetCommandLineA
KERNEL32.dllCompareStringW
USER32.dllPostThreadMessageA
USER32.dllSetWindowTextA
USER32.dllExitWindowsEx
USER32.dllGetMessageA
USER32.dllLoadStringA
USER32.dllPeekMessageA
USER32.dllTranslateMessage
USER32.dllDispatchMessageA
USER32.dllDefWindowProcA
USER32.dllLoadIconA
USER32.dllRegisterClassA
USER32.dllGetSystemMetrics
USER32.dllBeginPaint
USER32.dllMessageBoxA
USER32.dllEndPaint
USER32.dllGetDC
USER32.dllReleaseDC
USER32.dllGetClientRect
USER32.dllInvalidateRect
USER32.dllUpdateWindow
USER32.dllGetDlgItem
USER32.dllSendMessageA
USER32.dllDestroyWindow
USER32.dllPostQuitMessage
USER32.dllCreateDialogParamA
USER32.dllShowWindow
USER32.dllSetForegroundWindow
USER32.dllCreateWindowExA
GDI32.dllCreateCompatibleDC
GDI32.dllSelectObject
GDI32.dllGetObjectA
GDI32.dllSetStretchBltMode
GDI32.dllStretchBlt
GDI32.dllDeleteDC
GDI32.dllSelectPalette
GDI32.dllRealizePalette
GDI32.dllCreateDIBitmap
GDI32.dllDeleteObject
GDI32.dllCreatePalette
ADVAPI32.dllLookupPrivilegeValueA
ADVAPI32.dllRegOpenKeyExA
ADVAPI32.dllRegCloseKey
ADVAPI32.dllOpenProcessToken
ADVAPI32.dllRegQueryValueExA
ADVAPI32.dllAdjustTokenPrivileges
ADVAPI32.dllRegCreateKeyExA
ADVAPI32.dllRegSetValueExA
SHELL32.dllShellExecuteA
COMCTL32.dll17
Kernel32.dllCloseHandle
Kernel32.dllCreateFileA
Kernel32.dllExitProcess
Kernel32.dllGetDriveTypeA
Kernel32.dllGetFileSize
Kernel32.dllGetVolumeInformationA
Kernel32.dllReadFile
Kernel32.dllSetErrorMode
Kernel32.dllSetFilePointer
User32.dllMessageBoxA
ordentry_vafunction_name
20x4cf0?PatchCallBack@@YGPAXIPAX@Z
module_namegenerals.exe
flags0
timestamp2003-01-12 04:28:46
version0.0
ordinal_base1
nFunctions2
nNames1
Names(1)0x12830
Functions(2)0x12828
NameOrdinals(1)0x12838
offsetsizetypecomment
0151552EXE01/17/2010 19:47:16#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x102f101
[?] can't find EntryPoint RVA (0x102f101) file offset
[?] can't find file_offset of VA 0x102f101
[?] can't find EntryPoint RVA (0x102f101) file offset
[?] can't find file_offset of VA 0x102f101
[?] can't find EntryPoint RVA (0x102f101) file offset
[?] can't find file_offset of VA 0x0