filenamegenerals.exe
size98304 (0x18000)
md5e090fef4aa72c9bcb344716b53b83e54
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: 6c 27 7b a8 28 46 15 fb  28 46 15 fb 28 46 15 fb  |l'{.(F..(F..(F..|
00000050: 53 5a 19 fb 2d 46 15 fb  ab 5a 1b fb 3b 46 15 fb  |SZ..-F...Z..;F..|
00000060: c0 59 1f fb 5f 46 15 fb  28 46 15 fb 2b 46 15 fb  |.Y.._F..(F..+F..|
00000070: 4a 59 06 fb 23 46 15 fb  28 46 14 fb ac 46 15 fb  |JY..#F..(F...F..|
00000080: c0 59 1e fb 08 46 15 fb  90 40 13 fb 29 46 15 fb  |.Y...F...@..)F..|
00000090: c0 59 11 fb 29 46 15 fb  52 69 63 68 28 46 15 fb  |.Y..)F..Rich(F..|
000000a0: 00 00 00 00 00 00 00 00  00 00 00 00 01 00 2d ad  |..............-.|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x3f4ea0f8
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x15000
SizeOfInitializedData0x9000
SizeOfUninitializedData0
AddressOfEntryPoint0x78df
BaseOfCode0x1000
BaseOfData0x10000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x18eae
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v4.x

Sections

namevavsizeraw sizeflags
.text0x10000xe35a0xf000R-X CODE
.rdata0x100000x289b0x3000R-- IDATA
.data0x130000x2a180x2000RW- IDATA
.rsrc0x160000x2eae0x3000R-- IDATA

Data Directory

typevasize
EXPORT0x127e00x9c
IMPORT0x11c380x8c
RESOURCE0x160000x2e68
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#113840
ICON#27440
ICON#322160
ICON#416400
ICON#537520
DIALOG#1012380
DIALOG#1031500
STRING#111240
GROUP_ICON#102760
idlangstring
11033Your computer needs to be restarted to continue the patch. Press OK to continue.
21033About to restart
31033You need to download a patch from our website. When you press OK, your browser will automatically open to the download page.
41033Web Patch
51033File (%d of %d)
61033You must restart your computer now.
71033Could not set the patch to run on system reboot! You must exit the game and run %s to complete the patch.
81033Error
91033Error: Couldn't find file: %s
101033A required DLL is corrupt.
111033Patch error. Existing game files may have been modified. You should re-install the game from the CD.
module_namehintordfunction_name
KERNEL32.dllGetExitCodeProcess
KERNEL32.dllSleep
KERNEL32.dllWaitForSingleObject
KERNEL32.dllCreateFileMappingA
KERNEL32.dllCreateMutexA
KERNEL32.dllWaitForMultipleObjects
KERNEL32.dllCreateEventA
KERNEL32.dllUnmapViewOfFile
KERNEL32.dllGetVolumeInformationA
KERNEL32.dllMapViewOfFileEx
KERNEL32.dllGetModuleFileNameA
KERNEL32.dllCompareStringA
KERNEL32.dllSetStdHandle
KERNEL32.dllGetStringTypeW
KERNEL32.dllGetStringTypeA
KERNEL32.dllIsBadCodePtr
KERNEL32.dllIsBadReadPtr
KERNEL32.dllSetUnhandledExceptionFilter
KERNEL32.dllFlushFileBuffers
KERNEL32.dllGetFileType
KERNEL32.dllCreateProcessA
KERNEL32.dllSetHandleCount
KERNEL32.dllGetEnvironmentStringsW
KERNEL32.dllGetEnvironmentStrings
KERNEL32.dllFreeEnvironmentStringsW
KERNEL32.dllFreeEnvironmentStringsA
KERNEL32.dllUnhandledExceptionFilter
KERNEL32.dllGetOEMCP
KERNEL32.dllGetACP
KERNEL32.dllGetCPInfo
KERNEL32.dllIsBadWritePtr
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualFree
KERNEL32.dllHeapCreate
KERNEL32.dllHeapDestroy
KERNEL32.dllLCMapStringW
KERNEL32.dllLCMapStringA
KERNEL32.dllMultiByteToWideChar
KERNEL32.dllHeapSize
KERNEL32.dllHeapReAlloc
KERNEL32.dllGetVersion
KERNEL32.dllFormatMessageA
KERNEL32.dllGetCurrentProcess
KERNEL32.dllLoadLibraryA
KERNEL32.dllGetProcAddress
KERNEL32.dllFreeLibrary
KERNEL32.dllGlobalAlloc
KERNEL32.dllGlobalLock
KERNEL32.dllGlobalUnlock
KERNEL32.dllFindNextFileA
KERNEL32.dllFindFirstFileA
KERNEL32.dllFindClose
KERNEL32.dllSetFilePointer
KERNEL32.dllSetEndOfFile
KERNEL32.dllGetFileSize
KERNEL32.dllReadFile
KERNEL32.dllDeleteFileA
KERNEL32.dllGetLastError
KERNEL32.dllWideCharToMultiByte
KERNEL32.dllWriteFile
KERNEL32.dllCloseHandle
KERNEL32.dllGetCommandLineA
KERNEL32.dllGetStartupInfoA
KERNEL32.dllCreateFileA
KERNEL32.dllGetStdHandle
KERNEL32.dllRtlUnwind
KERNEL32.dllHeapAlloc
KERNEL32.dllExitProcess
KERNEL32.dllTerminateProcess
KERNEL32.dllGetCurrentDirectoryA
KERNEL32.dllGetFullPathNameA
KERNEL32.dllGetDriveTypeA
KERNEL32.dllSetEnvironmentVariableA
KERNEL32.dllSetCurrentDirectoryA
KERNEL32.dllGetTimeZoneInformation
KERNEL32.dllGetSystemTime
KERNEL32.dllGetLocalTime
KERNEL32.dllHeapFree
KERNEL32.dllGetModuleHandleA
KERNEL32.dllCompareStringW
USER32.dllPostThreadMessageA
USER32.dllSetWindowTextA
USER32.dllExitWindowsEx
USER32.dllGetMessageA
USER32.dllLoadStringA
USER32.dllPeekMessageA
USER32.dllTranslateMessage
USER32.dllDispatchMessageA
USER32.dllDefWindowProcA
USER32.dllLoadIconA
USER32.dllRegisterClassA
USER32.dllGetSystemMetrics
USER32.dllBeginPaint
USER32.dllMessageBoxA
USER32.dllEndPaint
USER32.dllGetDC
USER32.dllReleaseDC
USER32.dllGetClientRect
USER32.dllInvalidateRect
USER32.dllUpdateWindow
USER32.dllGetDlgItem
USER32.dllSendMessageA
USER32.dllDestroyWindow
USER32.dllPostQuitMessage
USER32.dllCreateDialogParamA
USER32.dllShowWindow
USER32.dllSetForegroundWindow
USER32.dllCreateWindowExA
GDI32.dllCreateCompatibleDC
GDI32.dllSelectObject
GDI32.dllGetObjectA
GDI32.dllSetStretchBltMode
GDI32.dllStretchBlt
GDI32.dllDeleteDC
GDI32.dllCreatePalette
GDI32.dllRealizePalette
GDI32.dllCreateDIBitmap
GDI32.dllDeleteObject
GDI32.dllSelectPalette
ADVAPI32.dllLookupPrivilegeValueA
ADVAPI32.dllRegOpenKeyExA
ADVAPI32.dllRegCloseKey
ADVAPI32.dllOpenProcessToken
ADVAPI32.dllRegQueryValueExA
ADVAPI32.dllAdjustTokenPrivileges
ADVAPI32.dllRegCreateKeyExA
ADVAPI32.dllRegSetValueExA
SHELL32.dllShellExecuteA
COMCTL32.dll17
ordentry_vafunction_name
10
20x4f90?PatchCallBack@@YGPAXIPAX@Z
module_namegenerals.exe
flags0
timestamp2003-08-29 00:40:24
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x12810
Functions(2)0x12808
NameOrdinals(2)0x12818
offsetsizetypecomment
098304EXE08/29/2003 00:40:24#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[!] non-zero dos stub after rich_hdr: "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00-\xAD"