filenamegenerals.e
size893854 (0xda39e)
md53b742051df3fe58fdb8b8591dc7ff524
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1272915
1180479
14729920
108047120
1181685
003
19803411
10134
49904418
617351
484471

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x3e20eefe
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x15000
SizeOfInitializedData0xe000
SizeOfUninitializedData0
AddressOfEntryPoint0x2105e
BaseOfCode0x1000
BaseOfData0x10000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x25000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

SafeDisc/SafeCast 2.xx - 3.xx (Macrovision)

Sections

namevavsizeraw sizeflags
.text0x10000xed4a0xf000R-X CODE
.rdata0x100000x28bb0x3000R-- IDATA
.data0x130000x49d80x4000RW- IDATA
.rsrc0x180000x5d860x6000R-- IDATA
stxt7740x1e0000x203a0x3000RWX CODE
stxt3710x210000x31800x4000RWX CODE

Data Directory

typevasize
EXPORT0x128000x9c
IMPORT0x23f800x8c
RESOURCE0x180000x5d40
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x240980x40
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#12960
ICON#213840
ICON#38720
ICON#47440
ICON#522160
ICON#632400
ICON#716400
ICON#837520
ICON#973360
DIALOG#1012380
DIALOG#1031500
STRING#111240
GROUP_ICON#1021320
idlangstring
11033Your computer needs to be restarted to continue the patch. Press OK to continue.
21033About to restart
31033You need to download a patch from our website. When you press OK, your browser will automatically open to the download page.
41033Web Patch
51033File (%d of %d)
61033You must restart your computer now.
71033Could not set the patch to run on system reboot! You must exit the game and run %s to complete the patch.
81033Error
91033Error: Couldn't find file: %s
101033A required DLL is corrupt.
111033Patch error. Existing game files may have been modified. You should re-install the game from the CD.
module_namehintordfunction_name
KERNEL32.dllGetModuleHandleA
KERNEL32.dllGetProcAddress
KERNEL32.dllGlobalAlloc
KERNEL32.dllGlobalFree
KERNEL32.dllExitProcess
USER32.dllMessageBoxA
GDI32.dllCreateCompatibleDC
ADVAPI32.dllLookupPrivilegeValueA
SHELL32.dllShellExecuteA
COMCTL32.dll17
ordentry_vafunction_name
20x4cf0?PatchCallBack@@YGPAXIPAX@Z
module_namegenerals.exe
flags0
timestamp2003-01-12 04:28:46
version0.0
ordinal_base1
nFunctions2
nNames1
Names(1)0x12830
Functions(2)0x12828
NameOrdinals(1)0x12838
offsetsizetypecomment
0151552EXE01/12/2003 04:28:46#
15c115HTM#
25000742302BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 893854 bytes (873 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK