辉煌奇迹登陆器.exe

info
MZ
PE
resources
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	辉煌奇迹登陆器.exe
size	10574876 (0xa15c1c)
md5	68176b66b7827760607095740880d74a

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xa
TimeDateStamp	0x2a425e19
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x16fa00
SizeOfInitializedData	0xab0000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x171000
ImageBase	0x31720000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xd72000
SizeOfHeaders	0x400
CheckSum	0xcdc1e3
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASProtect 1.33 - 2.1 Registered (Alexey Solodovnikov)

Sections

name	va	vsize	raw size	flags
	0x1000	0x170000	0x87a00	RWX IDATA
	0x171000	0x11000	0x8000	RWX IDATA
	0x182000	0x2e000	0	RWX IDATA
	0x1b0000	0x4000	0x3000	RWX IDATA
	0x1b4000	0x1000	0	RWX IDATA
	0x1b5000	0x1000	0x200	RWX IDATA
	0x1b6000	0x17000	0xbe00	RWX IDATA
.rsrc	0x1cd000	0xb35000	0x516a00	RWX IDATA
.data	0xd02000	0x6f000	0x6ec00	RWX IDATA
.adata	0xd71000	0x1000	0	RWX IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xd02c48	0x570
RESOURCE	0x1cd000	0xa84c00
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xd02bd4	8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xd02bdc	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

TLS

raw start	raw end	index	callbks	zero fill	flags
0x318d4000	0x318d4014	0x318910a4	0x318d5010	0	0

show previews

type	name	size
EXEFILE	ANI	13630
EXEFILE	ARJ	5038848
EXEFILE	ITEM	688132
EXEFILE	MAP1	131076
EXEFILE	MAP3	131076
EXEFILE	MAP4	65540
EXEFILE	MAP5	65540
EXEFILE	OGG	53248
EXEFILE	PLAYER	3004227
EXEFILE	SKILL	48004
FLASH	MOVIE	6400
TESTDATA	KEY	37
WAVE	SOU2	3968
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	308
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	CDROM	192
BITMAP	CLOSEDFOLDER	224
BITMAP	CL_MPBACK	296
BITMAP	CL_MPEJECT	296
BITMAP	CL_MPNEXT	296
BITMAP	CL_MPPAUSE	232
BITMAP	CL_MPPLAY	296
BITMAP	CL_MPPREV	296
BITMAP	CL_MPRECORD	208
BITMAP	CL_MPSTEP	296
BITMAP	CL_MPSTOP	296
BITMAP	CURRENTFOLDER	224
BITMAP	DI_MPBACK	296
BITMAP	DI_MPEJECT	296
BITMAP	DI_MPNEXT	296
BITMAP	DI_MPPAUSE	232
BITMAP	DI_MPPLAY	296
BITMAP	DI_MPPREV	296
BITMAP	DI_MPRECORD	208
BITMAP	DI_MPSTEP	296
BITMAP	DI_MPSTOP	296
BITMAP	EN_MPBACK	296
BITMAP	EN_MPEJECT	296
BITMAP	EN_MPNEXT	296
BITMAP	EN_MPPAUSE	232
BITMAP	EN_MPPLAY	296
BITMAP	EN_MPPREV	296
BITMAP	EN_MPRECORD	208
BITMAP	EN_MPSTEP	296
BITMAP	EN_MPSTOP	296
BITMAP	EXECUTABLE	224
BITMAP	FLOPPY	192
BITMAP	HARD	192
BITMAP	KNOWNFILE	224
BITMAP	NETWORK	192
BITMAP	OPENFOLDER	224
BITMAP	PREVIEWGLYPH	232
BITMAP	RAM	192
BITMAP	RZCMBOBX_DEVICE	1208
BITMAP	RZCMBOBX_FIXEDPITCH	1208
BITMAP	RZCMBOBX_PRINTER	1208
BITMAP	RZCMBOBX_TRUETYPE	1208
BITMAP	RZCMBOBX_TRUETYPEFIXED	1208
BITMAP	RZCOMMON_ABORT	1576
BITMAP	RZCOMMON_ALL	1576
BITMAP	RZCOMMON_CANCEL	1576
BITMAP	RZCOMMON_CLOSE	1576
BITMAP	RZCOMMON_HELP	1576
BITMAP	RZCOMMON_IGNORE	1576
BITMAP	RZCOMMON_NO	1576
BITMAP	RZCOMMON_OK	1576
BITMAP	RZCOMMON_RETRY	1576
BITMAP	RZCOMMON_YES	1576
BITMAP	SBLEFT	208
BITMAP	SBLEFTDIS	208
BITMAP	SBLEFTDN	208
BITMAP	SBRIGHT	208
BITMAP	SBRIGHTDIS	208
BITMAP	SBRIGHTDN	208
BITMAP	UNKNOWNFILE	224
BITMAP	VCLSKINMENU	176
ICON	#1	104656
ICON	#2	16936
ICON	#3	9640
ICON	#4	4264
ICON	#5	1128
DIALOG	DLGTEMPLATE	82
STRING	#4063	384
STRING	#4064	1988
STRING	#4065	3156
STRING	#4066	2444
STRING	#4067	504
STRING	#4068	404
STRING	#4069	292
STRING	#4070	296
STRING	#4071	800
STRING	#4072	904
GROUP_ICON	MAINICON	76

module_name	hint	ord	function_name
kernel32.dll			GetProcAddress
kernel32.dll			GetModuleHandleA
kernel32.dll			LoadLibraryA
user32.dll			GetKeyboardType
advapi32.dll			RegQueryValueExA
oleaut32.dll			SysFreeString
advapi32.dll			RegSetValueExA
version.dll			VerQueryValueA
gdi32.dll			UnrealizeObject
msimg32.dll			AlphaBlend
user32.dll			CreateWindowExA
ole32.dll			CLSIDFromString
oleaut32.dll			SafeArrayPtrOfIndex
ole32.dll			CreateStreamOnHGlobal
oleaut32.dll			CreateErrorInfo
comctl32.dll			ImageList_SetIconSize
shell32.dll			Shell_NotifyIconA
shell32.dll			SHGetSpecialFolderLocation
wsock32.dll			WSACleanup
winmm.dll			timeGetTime
ntdll.dll			NtReadVirtualMemory
ole32.dll			PropVariantClear
gdiplus.dll			GdipDeletePen
advapi32.dll			AddAccessAllowedAce
oleaut32.dll			VariantChangeTypeEx
kernel32.dll			RaiseException

show previews

offset	size	type	comment
15c1	15	HTM		#
5be6e4	104656	PNG	(256 x 256)	#
5d7fb4	4447336	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 10574876 bytes (11 MiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x748cfc

[?] can't find file_offset of VA 0x768d00

[?] can't find file_offset of VA 0x788d04

[?] can't find file_offset of VA 0x798d08

[?] can't find file_offset of VA 0x7a8d0c

[?] can't find file_offset of VA 0x7b5d0c

[?] can't find file_offset of VA 0xa93450

[?] can't find file_offset of VA 0xa9efd4

[?] can't find file_offset of VA 0xaa08d4

[?] can't find file_offset of VA 0xaa08fc

[?] can't find file_offset of VA 0xaa187c

[?] can't find file_offset of VA 0xaa19b0

[?] can't find file_offset of VA 0xaa1ae4

[?] can't find file_offset of VA 0xaa1c18

[?] can't find file_offset of VA 0xaa1d4c

[?] can't find file_offset of VA 0xaa1e80

[?] can't find file_offset of VA 0xaa1fb4

[?] can't find file_offset of VA 0xaa20e8

[?] can't find file_offset of VA 0xaa221c

[?] can't find file_offset of VA 0xaa23ec

[?] can't find file_offset of VA 0xaa25d0

[?] can't find file_offset of VA 0xaa27a0

[?] can't find file_offset of VA 0xaa2970

[?] can't find file_offset of VA 0xaa2b40

[?] can't find file_offset of VA 0xaa2d10

[?] can't find file_offset of VA 0xaa2ee0

[?] can't find file_offset of VA 0xaa30b0

[?] can't find file_offset of VA 0xaa3280

[?] can't find file_offset of VA 0xaa3450

[?] can't find file_offset of VA 0xaa3510

[?] can't find file_offset of VA 0xaa35f0

[?] can't find file_offset of VA 0xaa3718

[?] can't find file_offset of VA 0xaa3840

[?] can't find file_offset of VA 0xaa3968

[?] can't find file_offset of VA 0xaa3a50

[?] can't find file_offset of VA 0xaa3b78

[?] can't find file_offset of VA 0xaa3ca0

[?] can't find file_offset of VA 0xaa3d70

[?] can't find file_offset of VA 0xaa3e98

[?] can't find file_offset of VA 0xaa3fc0

[?] can't find file_offset of VA 0xaa40a0

[?] can't find file_offset of VA 0xaa41c8

[?] can't find file_offset of VA 0xaa42f0

[?] can't find file_offset of VA 0xaa4418

[?] can't find file_offset of VA 0xaa4500

[?] can't find file_offset of VA 0xaa4628

[?] can't find file_offset of VA 0xaa4750

[?] can't find file_offset of VA 0xaa4820

[?] can't find file_offset of VA 0xaa4948

[?] can't find file_offset of VA 0xaa4a70

[?] can't find file_offset of VA 0xaa4b98

[?] can't find file_offset of VA 0xaa4cc0

[?] can't find file_offset of VA 0xaa4de8

[?] can't find file_offset of VA 0xaa4ed0

[?] can't find file_offset of VA 0xaa4ff8

[?] can't find file_offset of VA 0xaa5120

[?] can't find file_offset of VA 0xaa51f0

[?] can't find file_offset of VA 0xaa5318

[?] can't find file_offset of VA 0xaa5440

[?] can't find file_offset of VA 0xaa5520

[?] can't find file_offset of VA 0xaa55e0

[?] can't find file_offset of VA 0xaa56a0

[?] can't find file_offset of VA 0xaa5780

[?] can't find file_offset of VA 0xaa5840

[?] can't find file_offset of VA 0xaa5920

[?] can't find file_offset of VA 0xaa5a08

[?] can't find file_offset of VA 0xaa5ac8

[?] can't find file_offset of VA 0xaa5f80

[?] can't find file_offset of VA 0xaa6438

[?] can't find file_offset of VA 0xaa68f0

[?] can't find file_offset of VA 0xaa6da8

[?] can't find file_offset of VA 0xaa7260

[?] can't find file_offset of VA 0xaa7888

[?] can't find file_offset of VA 0xaa7eb0

[?] can't find file_offset of VA 0xaa84d8

[?] can't find file_offset of VA 0xaa8b00

[?] can't find file_offset of VA 0xaa9128

[?] can't find file_offset of VA 0xaa9750

[?] can't find file_offset of VA 0xaa9d78

[?] can't find file_offset of VA 0xaaa3a0

[?] can't find file_offset of VA 0xaaa9c8

[?] can't find file_offset of VA 0xaaaff0

[?] can't find file_offset of VA 0xaab0c0

[?] can't find file_offset of VA 0xaab190

[?] can't find file_offset of VA 0xaab260

[?] can't find file_offset of VA 0xaab330

[?] can't find file_offset of VA 0xaab400

[?] can't find file_offset of VA 0xaab4d0

[?] can't find file_offset of VA 0xaab5b0

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0xaccc10

[?] can't find file_offset of VA 0xaccc64

[?] can't find file_offset of VA 0xaccde4

[?] can't find file_offset of VA 0xacd5a8

[?] can't find file_offset of VA 0xace1fc

[?] can't find file_offset of VA 0xaceb88

[?] can't find file_offset of VA 0xaced80

[?] can't find file_offset of VA 0xacef14

[?] can't find file_offset of VA 0xacf038

[?] can't find file_offset of VA 0xacf160

[?] can't find file_offset of VA 0xacf480

[?] can't find file_offset of VA 0xacf808

[?] too many errors getting resource data, stopped on 0 of 1

[?] can't find file_offset of VA 0x0