filename1602.exe
size977920 (0xeec00)
md55e7a28a814fcf3bfa328fc6d8907eaf6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
2730375
1980343
616681
00171

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x35d7dbb9
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion5.10
SizeOfCode0x98e00
SizeOfInitializedData0x285400
SizeOfUninitializedData0
AddressOfEntryPoint0x99a60
BaseOfCode0x1000
BaseOfData0x9a000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x321000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++

Sections

namevavsizeraw sizeflags
.text0x10000x98c6c0x98e00R-X CODE
.rdata0x9a0000x15380x1600R-- IDATA
.data0x9c0000x2430640x13800RW- IDATA
.rsrc0x2e00000x40b180x40c00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x9a6040xdc
RESOURCE0x2e00000x40b18
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x9a0000x2c8
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#23080
CURSOR#33080
BITMAP#1022603240
ICON#17440
DIALOG#1027320
DIALOG#1103580
STRING#1720
STRING#32820
ACCELERATORS#1393120
GROUP_CURSOR#122200
GROUP_CURSOR#125200
GROUP_ICON#104200
VERSION#17840
idlangstring
11031ANNO 1602 GAMEWINDOW
5021031\StringFileInfo\040704b0\
module_namehintordfunction_name
KERNEL32.dll603VirtualAlloc
KERNEL32.dll609VirtualProtect
KERNEL32.dll606VirtualFree
KERNEL32.dll67CreateThread
KERNEL32.dll108ExitThread
KERNEL32.dll419LockResource
KERNEL32.dll405LoadResource
KERNEL32.dll377InitializeCriticalSection
KERNEL32.dll254GetModuleHandleA
KERNEL32.dll296GetStartupInfoA
KERNEL32.dll575Sleep
KERNEL32.dll309GetSystemTime
KERNEL32.dll335GetVolumeInformationA
KERNEL32.dll325GetTickCount
KERNEL32.dll219GetDiskFreeSpaceA
KERNEL32.dll252GetModuleFileNameA
KERNEL32.dll209GetCurrentDirectoryA
KERNEL32.dll76DeleteCriticalSection
KERNEL32.dll673lstrlenA
KERNEL32.dll341GlobalAlloc
KERNEL32.dll352GlobalLock
KERNEL32.dll348GlobalFree
KERNEL32.dll667lstrcpyA
KERNEL32.dll358GlobalUnlock
KERNEL32.dll223GetDriveTypeA
KERNEL32.dll88EnterCriticalSection
KERNEL32.dll399LeaveCriticalSection
KERNEL32.dll137FindResourceA
USER32.dll581TranslateMessage
USER32.dll180EndDialog
USER32.dll338InvalidateRect
USER32.dll277GetMessageA
USER32.dll144DispatchMessageA
USER32.dll501SetFocus
USER32.dll557ShowWindow
USER32.dll182EndPaint
USER32.dll9BeginPaint
USER32.dll431PeekMessageA
USER32.dll578TranslateAcceleratorA
USER32.dll433PostMessageA
USER32.dll492SetCursor
USER32.dll405MessageBoxA
USER32.dll461ReleaseDC
USER32.dll142DialogBoxParamA
USER32.dll128DefWindowProcA
USER32.dll238GetDC
USER32.dll54ClientToScreen
USER32.dll228GetClientRect
USER32.dll520SetRect
USER32.dll300GetSystemMetrics
USER32.dll593UpdateWindow
USER32.dll542SetWindowPos
USER32.dll85CreateWindowExA
USER32.dll376LoadImageA
USER32.dll436PostThreadMessageA
USER32.dll502SetForegroundWindow
USER32.dll138DestroyWindow
USER32.dll243GetDlgItem
USER32.dll498SetDlgItemTextA
USER32.dll545SetWindowTextA
USER32.dll387LoadStringA
USER32.dll597ValidateRect
USER32.dll435PostQuitMessage
USER32.dll589UnregisterClassA
USER32.dll205FindWindowA
USER32.dll356IsIconic
USER32.dll370LoadCursorA
USER32.dll366LoadAcceleratorsA
USER32.dll374LoadIconA
USER32.dll447RegisterClassExA
GDI32.dll392UpdateColors
GDI32.dll331SelectPalette
GDI32.dll199GetDeviceCaps
GDI32.dll253GetSystemPaletteUse
GDI32.dll252GetSystemPaletteEntries
GDI32.dll70DeleteObject
GDI32.dll330SelectObject
GDI32.dll53CreatePalette
GDI32.dll366SetStretchBltMode
GDI32.dll31CreateCompatibleDC
GDI32.dll36CreateDIBSection
GDI32.dll67DeleteDC
GDI32.dll250GetStockObject
GDI32.dll10BitBlt
GDI32.dll234GetObjectA
GDI32.dll311RealizePalette
GDI32.dll290PatBlt
ADVAPI32.dll321RegSetValueExA
ADVAPI32.dll279RegCloseKey
ADVAPI32.dll283RegCreateKeyExA
ADVAPI32.dll310RegQueryValueExA
VERSION.dll1GetFileVersionInfoSizeA
VERSION.dll10VerQueryValueA
VERSION.dllGetFileVersionInfoA
DDRAW.dll6DirectDrawCreate
Maxnet.dll1_MaxnetClrConnect@4
Maxnet.dll3_MaxnetCreate@28
Maxnet.dll6_MaxnetPause@8
Maxnet.dll7_MaxnetRun@8
Maxnet.dll_MaxnetClrConfirm@4
Maxnet.dll11_MaxnetSetNetGroup@4
Maxnet.dll5_MaxnetGetNetGroupStruct@4
Maxnet.dll2_MaxnetClrNetGroupStruct@4
Maxnet.dll12_MaxnetSetPlayer@8
Maxnet.dll8_MaxnetSend@12
Maxnet.dll10_MaxnetSetConfirm@8
Maxsound.dll13_MaxstreamStop@4
Maxsound.dll8_MaxstreamDestroy@4
Maxsound.dll4_MaxsoundSleep@0
Maxsound.dll2_MaxsoundInit@20
Maxsound.dll18_MaxwaveLoad@4
Maxsound.dll_MaxsoundClr@0
Maxsound.dll10_MaxstreamPlay@8
Maxsound.dll11_MaxstreamSetVolume@8
Maxsound.dll5_MaxsoundWakeUp@4
Maxsound.dll20_MaxwavePlayOFF@0
Maxsound.dll21_MaxwavePlayON@0
Maxsound.dll7_MaxstreamCreate@12
Maxsound.dll23_MaxwaveSetVolume@4
Maxsound.dll3_MaxsoundSetScreensize@8
Maxsound.dll22_MaxwavePlayOnce@12
Maxsound.dll6_MaxstreamContinue@4
Maxsound.dll26_MaxwaveWorkEvents@4
Maxsound.dll1_MaxsoundGetInterface@0
smackw32.dll42_SmackSoundOnOff@8
smackw32.dll54_SmackWait@4
smackw32.dll49_SmackToBuffer@28
smackw32.dll30_SmackDoFrame@4
smackw32.dll35_SmackNextFrame@4
smackw32.dll26_SmackClose@4
smackw32.dll45_SmackSoundUseDirectSound@4
smackw32.dll36_SmackOpen@12
smackw32.dll53_SmackVolumePan@16
MSVCRT.dll155_adjust_fdiv
MSVCRT.dll611fwrite
MSVCRT.dll130__setusermatherr
MSVCRT.dll268_initterm
MSVCRT.dll88__getmainargs
MSVCRT.dll141_acmdln
MSVCRT.dll582exit
MSVCRT.dll72_XcptFilter
MSVCRT.dll208_exit
MSVCRT.dll729vsprintf
MSVCRT.dll607fseek
MSVCRT.dll720tolower
MSVCRT.dll692strchr
MSVCRT.dll96__mb_cur_max
MSVCRT.dll274_isctype
MSVCRT.dll395_pctype
MSVCRT.dll707strtod
MSVCRT.dll689srand
MSVCRT.dll721toupper
MSVCRT.dll661memmove
MSVCRT.dll596fopen
MSVCRT.dll585fclose
MSVCRT.dll709strtol
MSVCRT.dll675rand
MSVCRT.dll687sprintf
MSVCRT.dll602fread
MSVCRT.dll589fgetc
MSVCRT.dll238_ftol
MSVCRT.dll654malloc
MSVCRT.dll603free
MSVCRT.dll105__p__commode
MSVCRT.dll110__p__fmode
MSVCRT.dll128__set_app_type
MSVCRT.dll199_except_handler3
MSVCRT.dll180_controlfp

StringTable 040704b0

CommentsPATCH A
CompanyNameMAX DESIGN
FileDescription1602
FileVersion0, 1, 8, 9
InternalName1602
LegalCopyrightCopyright © 1996-1998
OriginalFilename1602.exe
ProductNameAnno 1602 - Erschaffung einer neuen Welt
ProductVersion1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion0.1.8.9
ProductVersion1.0.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0977920EXE08/17/1998 07:28:57#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK