rapid.php.2015.v13.0.0.162-patch.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	rapid.php.2015.v13.0.0.162-patch.exe
size	226304 (0x37400)
md5	5d2d55acc5ca1474c3423e206099cef6

type	PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xc0

Rich Header

lib id	version	times used
42	8803	2
19	8078	147
18	8444	18
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	2
TimeDateStamp	0x4d8606ce
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	5.12
SizeOfCode	0x8e00
SizeOfInitializedData	0x6be00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x3d86
BaseOfCode	0x1000
BaseOfData	0xa000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x9d000
SizeOfHeaders	0x400
CheckSum	0x3cb00
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PeCompact 2.xx (BitSum Technologies / v2.0)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x89000	0x24a00	RWX CODE
.rsrc	0x8a000	0x13000	0x12600	RWX CODE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x9b6c4	0x8f
RESOURCE	0x8a000	0x116a4
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
CURSOR	#1	4268	1252
CURSOR	#50	308	1252
BITMAP	BTN_ABOUT_DOWN	8040	1252
BITMAP	BTN_ABOUT_OK_DOWN	8040	1252
BITMAP	BTN_ABOUT_OK_OVER	8040	1252
BITMAP	BTN_ABOUT_OK_UP	8040	1252
BITMAP	BTN_ABOUT_OVER	8040	1252
BITMAP	BTN_ABOUT_UP	8040	1252
BITMAP	BTN_EXIT_DOWN	8040	1252
BITMAP	BTN_EXIT_OVER	8040	1252
BITMAP	BTN_EXIT_UP	8040	1252
BITMAP	BTN_PATCH_DISABLED	8040	1252
BITMAP	BTN_PATCH_DOWN	8040	1252
BITMAP	BTN_PATCH_OVER	8040	1252
BITMAP	BTN_PATCH_UP	8040	1252
BITMAP	BTN_REGP_OK_DOWN	3248	1252
BITMAP	BTN_REGP_OK_OVER	3248	1252
BITMAP	BTN_REGP_OK_UP	3248	1252
BITMAP	_ABOUT_BACK	32040	1252
BITMAP	_BACK	111064	1252
BITMAP	_REG_BACK	12904	1252
ICON	#1	67624	1252
DIALOG	#1	772	1252
DIALOG	#2	228	1252
DIALOG	#3	252	1252
STRING	#1	492	1252
STRING	#2	612	1252
STRING	#3	764	1252
STRING	#4	120	1252
RCDATA	#1	336	1252
RCDATA	#2	1312	1252
RCDATA	#3	74940	1252
RCDATA	#4	9733	1252
RCDATA	#5	48	1252
RCDATA	#6	160	1252
GROUP_CURSOR	#1	20	1252
GROUP_CURSOR	#2	20	1252
GROUP_ICON	#500	20	1252
MANIFEST	#1	948	1252

module_name	hint	ord	function_name
kernel32.dll			LoadLibraryA
kernel32.dll			GetProcAddress
kernel32.dll			VirtualAlloc
kernel32.dll			VirtualFree

show previews

offset	size	type	comment
0	226304	EXE	03/20/2011 13:53:18	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x26020

[?] can't find file_offset of VA 0x27f88

[?] can't find file_offset of VA 0x29ef0

[?] can't find file_offset of VA 0x2be58

[?] can't find file_offset of VA 0x2ddc0

[?] can't find file_offset of VA 0x2fd28

[?] can't find file_offset of VA 0x31c90

[?] can't find file_offset of VA 0x33bf8

[?] can't find file_offset of VA 0x35b60

[?] can't find file_offset of VA 0x37ac8

[?] can't find file_offset of VA 0x39a30

[?] can't find file_offset of VA 0x3a6e0

[?] can't find file_offset of VA 0x3b390

[?] can't find file_offset of VA 0x3c040

[?] can't find file_offset of VA 0x43d68

[?] can't find file_offset of VA 0x5ef40

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x621a8

[?] can't find file_offset of VA 0x624b0

[?] can't find file_offset of VA 0x62598

[?] can't find file_offset of VA 0x62698

[?] can't find file_offset of VA 0x62888

[?] can't find file_offset of VA 0x62af0

[?] can't find file_offset of VA 0x62df0

[?] can't find file_offset of VA 0x62e68

[?] can't find file_offset of VA 0x62fb8

[?] can't find file_offset of VA 0x634d8

[?] can't find file_offset of VA 0x75998

[?] can't find file_offset of VA 0x77fa0

[?] can't find file_offset of VA 0x77fd0

[?] can't find file_offset of VA 0x78070

[?] can't find file_offset of VA 0x78088