filenamerohanclient2.exe
size10692608 (0xa32800)
md5db48a41c874f238219cf2400c8c7332f
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40xdc03f092
reserved50xe47a544f
reserved60x6add2c04
lfanew0x140

Rich Header

lib idversiontimes used
10520677
15307757
95217910
9320672
11978215
953077259
481682
484474
95206712
1884446
299178132
2891784
2592108
10559
93217931
9630771545
9430521
9030771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x56cd88e2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10e
Magic0x10b
LinkerVersion7.10
SizeOfCode0x7f3000
SizeOfInitializedData0xa31800
SizeOfUninitializedData0
AddressOfEntryPoint0x76b7eb
BaseOfCode0x1000
BaseOfData0x7f1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xa35000
SizeOfHeaders0x400
CheckSum0xa3a063
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
0x10000x7f00000x7f0000RWX CODE IDATA
0x7f10000xe90000xe9000RW- IDATA
0x8da0000x790000x77000RW- IDATA
0x9530000x950000x95000RW- IDATA
.data0x9e80000x130000x13000RW- IDATA
.adata0x9fb0000x10000x1000RW- IDATA
.mackt0x9fc0000x30000x3000RWX CODE IDATA
.rsrc0x9ff0000x357280x35800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x9fc0000x1b8
RESOURCE0x9ff0000x35728
EXCEPTION00
SECURITY00
BASERELOC0x9e89c48
DEBUG0x7f17800x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
00x100000
typenamesizecp
ICON#122160
ICON#216401200
ICON#37441200
ICON#42961200
ICON#537521200
ICON#613841200
ICON#71008841200
ICON#8893741200
ICON#996401200
ICON#1042641200
ICON#1111281200
STRING#1251520
STRING#1257920
STRING#1263460
STRING#1876860
STRING#1938720
STRING#2007600
STRING#20131060
STRING#2014800
STRING#2019360
GROUP_ICON#1021600
VERSION#19000
MANIFEST#16480
idlangstring
200011042휴먼
200021042엘프
200031042하프엘프
200111042뉴비
201011042헬멧
201021042상의
201031042하의
201041042장갑
201051042신발
201061042한손 무기
201071042방패
201081042양손 무기
201091042장신구
201101042맥뎀석
201111042가방
202011042팔때 가격
202021042가격
300001042네트워크 서버 접속
300011042test
300021042커뮤니티 서버 접속 실패
310011042쪽지를 보낼 상대의 이름을 입력하세요
321011042게임을 종료 하시겠습니까?
322011042스킬&스펠 창
322021042퀵슬롯 창
322031042인벤토리
322041042미니 맵
322051042타겟 창
322061042캐릭터 정보창
322071042상태미니 창
322081042메신져
322091042메인 채팅 창
322101042다시 시작
322111042게임 종료
322121042전체 맵
323011042거래
module_namehintordfunction_name
advapi32.dll141CryptDestroyHash
advapi32.dll162CryptReleaseContext
advapi32.dll142CryptDestroyKey
advapi32.dll145CryptEncrypt
advapi32.dll161CryptImportKey
advapi32.dll135CryptAcquireContextA
advapi32.dll463RegCreateKeyA
advapi32.dll469RegDeleteValueA
advapi32.dll464RegCreateKeyExA
advapi32.dll477RegEnumValueA
advapi32.dll307InitializeSecurityDescriptor
advapi32.dll563SetSecurityDescriptorDacl
advapi32.dll485RegOpenKeyA
advapi32.dll155CryptGetHashParam
advapi32.dll140CryptDeriveKey
advapi32.dll138CryptCreateHash
advapi32.dll159CryptHashData
advapi32.dll172CryptVerifySignatureA
advapi32.dll509RegSetValueExA
advapi32.dll460RegCloseKey
advapi32.dll496RegQueryValueExA
advapi32.dll486RegOpenKeyExA
avifil32.dll20AVIFileRelease
avifil32.dll11AVIFileGetStream
avifil32.dll21AVIFileWriteData
avifil32.dll56AVIStreamStart
avifil32.dll16AVIFileOpen
avifil32.dll10AVIFileExit
avifil32.dll15AVIFileInit
avifil32.dll57AVIStreamTimeToSample
avifil32.dll40AVIStreamGetFrame
avifil32.dll41AVIStreamGetFrameClose
avifil32.dll42AVIStreamGetFrameOpen
avifil32.dll46AVIStreamLength
avifil32.dll50AVIStreamRead
avifil32.dll54AVIStreamSampleToTime
dinput8.dll1DirectInput8Create
gdi32.dll141DeleteDC
gdi32.dll46CreateCompatibleDC
gdi32.dll528SelectObject
gdi32.dll144DeleteObject
gdi32.dll439GetTextExtentPoint32W
gdi32.dll223ExtTextOutW
gdi32.dll467MoveToEx
gdi32.dll222ExtTextOutA
gdi32.dll572SetTextAlign
gdi32.dll62CreateFontIndirectW
gdi32.dll59CreateFontIndirectA
gdi32.dll380GetFontLanguageInfo
gdi32.dll447GetTextMetricsW
gdi32.dll568SetRectRgn
gdi32.dll34CombineRgn
gdi32.dll422GetRgnBox
gdi32.dll526SelectClipRgn
gdi32.dll81CreateSolidBrush
gdi32.dll233FillRgn
gdi32.dll51CreateDIBSection
gdi32.dll76CreateRectRgn
gdi32.dll446GetTextMetricsA
gdi32.dll536SetBkMode
gdi32.dll535SetBkColor
gdi32.dll438GetTextExtentPoint32A
gdi32.dll4AddFontResourceA
gdi32.dll547SetDeviceGammaRamp
gdi32.dll366GetDeviceGammaRamp
gdi32.dll19BitBlt
gdi32.dll574SetTextColor
gdi32.dll353GetCharacterPlacementW
gdi32.dll352GetCharacterPlacementA
gdi32.dll409GetObjectW
gdi32.dll407GetObjectA
gdi32.dll77CreateRectRgnIndirect
gdi32.dll58CreateFontA
gdi32.dll365GetDeviceCaps
gdi32.dll506RemoveFontResourceA
gdi32.dll557SetMapMode
gdi32.dll423GetStockObject
imm32.dll103ImmReleaseContext
imm32.dll54ImmGetContext
imm32.dll51ImmGetCompositionStringA
imm32.dll67ImmGetIMEFileNameA
imm32.dll72ImmGetOpenStatus
imm32.dll57ImmGetConversionStatus
imm32.dll86ImmIsIME
imm32.dll73ImmGetProperty
imm32.dll47ImmGetCandidateListW
imm32.dll117ImmSetConversionStatus
imm32.dll119ImmSetOpenStatus
imm32.dll116ImmSetCompositionWindow
imm32.dll95ImmNotifyIME
kernel32.dll954lstrlenW
kernel32.dll952lstrlen
kernel32.dll56CompareStringA
kernel32.dll57CompareStringW
kernel32.dll949lstrcpyn
kernel32.dll794SetLocalTime
kernel32.dll363GetLocalTime
kernel32.dll196FileTimeToSystemTime
kernel32.dll195FileTimeToLocalFileTime
kernel32.dll209FindFirstFileA
kernel32.dll469GetTickCount
kernel32.dll661QueryPerformanceCounter
kernel32.dll662QueryPerformanceFrequency
kernel32.dll317GetCurrentProcessId
kernel32.dll373GetModuleFileNameA
kernel32.dll151EnterCriticalSection
kernel32.dll580LeaveCriticalSection
kernel32.dll50CloseHandle
kernel32.dll316GetCurrentProcess
kernel32.dll319GetCurrentThreadId
kernel32.dll819SetThreadPriority
kernel32.dll318GetCurrentThread
kernel32.dll80CreateFileA
kernel32.dll462GetThreadContext
kernel32.dll130DeleteFileA
kernel32.dll679ReadFile
kernel32.dll824SetUnhandledExceptionFilter
kernel32.dll183ExitProcess
kernel32.dll99CreateProcessA
kernel32.dll266GetCommandLineA
kernel32.dll314GetCurrentDirectoryA
kernel32.dll409GetProcAddress
kernel32.dll581LoadLibraryA
kernel32.dll241FreeLibrary
kernel32.dll639OutputDebugStringA
kernel32.dll836Sleep
kernel32.dll896WaitForSingleObject
kernel32.dll773SetEvent
kernel32.dll76CreateEventA
kernel32.dll704ResetEvent
kernel32.dll442GetSystemDirectoryA
kernel32.dll524HeapFree
kernel32.dll518HeapAlloc
kernel32.dll413GetProcessHeap
kernel32.dll365GetLocaleInfoW
kernel32.dll584LoadLibraryW
kernel32.dll443GetSystemDirectoryW
kernel32.dll205FindClose
kernel32.dll218FindNextFileA
kernel32.dll541InterlockedDecrement
kernel32.dll845TerminateThread
kernel32.dll340GetExitCodeThread
kernel32.dll375GetModuleHandleA
kernel32.dll946lstrcpy
kernel32.dll255GetCPInfoExA
kernel32.dll391GetNumberFormatA
kernel32.dll706SetLastError
kernel32.dll555IsBadWritePtr
kernel32.dll552IsBadReadPtr
kernel32.dll837SleepEx
kernel32.dll913WriteFile
kernel32.dll591LocalFree
kernel32.dll236FormatMessageA
kernel32.dll444GetSystemInfo
kernel32.dll72CreateDirectoryA
kernel32.dll778SetFilePointer
kernel32.dll880VirtualAlloc
kernel32.dll883VirtualFree
kernel32.dll888VirtualQuery
kernel32.dll852TlsSetValue
kernel32.dll850TlsFree
kernel32.dll849TlsAlloc
kernel32.dll851TlsGetValue
kernel32.dll902WriteConsoleA
kernel32.dll759SetConsoleTitleA
kernel32.dll943lstrcmpi
kernel32.dll10AllocConsole
kernel32.dll238FreeConsole
kernel32.dll545InterlockedIncrement
kernel32.dll433GetStdHandle
kernel32.dll615MulDiv
kernel32.dll894WaitForMultipleObjects
kernel32.dll146DuplicateHandle
kernel32.dll465GetThreadPriority
kernel32.dll109CreateThread
kernel32.dll560IsProcessorFeaturePresent
kernel32.dll603MapViewOfFile
kernel32.dll348GetFileSize
kernel32.dll81CreateFileMappingA
kernel32.dll83CreateFileW
kernel32.dll864UnmapViewOfFile
kernel32.dll600LockResource
kernel32.dll586LoadResource
kernel32.dll835SizeofResource
kernel32.dll224FindResourceA
kernel32.dll540InterlockedCompareExchange
kernel32.dll354GetFullPathNameA
kernel32.dll429GetShortPathNameA
kernel32.dll937lstrcat
kernel32.dll350GetFileTime
kernel32.dll625OpenFile
kernel32.dll184ExitThread
kernel32.dll844TerminateProcess
kernel32.dll769SetEndOfFile
kernel32.dll93CreateMutexA
kernel32.dll707ResumeThread
kernel32.dll339GetExitCodeProcess
kernel32.dll626OpenFileMappingA
kernel32.dll623OpenEventA
kernel32.dll630OpenMutexA
kernel32.dll64CopyFileA
kernel32.dll610MoveFileExA
kernel32.dll692ReleaseMutex
kernel32.dll886VirtualProtect
kernel32.dll374GetModuleFileNameW
kernel32.dll807SetStdHandle
kernel32.dll98CreatePipe
kernel32.dll643PeekNamedPipe
kernel32.dll489GetWindowsDirectoryA
kernel32.dll137DeviceIoControl
kernel32.dll327GetDiskFreeSpaceExA
kernel32.dll507GlobalMemoryStatusEx
kernel32.dll445GetSystemPowerStatus
kernel32.dll940lstrcmp
kernel32.dll351GetFileType
kernel32.dll40CancelIo
kernel32.dll538InitializeCriticalSectionAndSpinCount
kernel32.dll301GetConsoleMode
kernel32.dll712RtlUnwind
kernel32.dll449GetSystemTimeAsFileTime
kernel32.dll528HeapReAlloc
kernel32.dll431GetStartupInfoA
kernel32.dll472GetTimeZoneInformation
kernel32.dll567LCMapStringA
kernel32.dll568LCMapStringW
kernel32.dll254GetCPInfo
kernel32.dll434GetStringTypeA
kernel32.dll437GetStringTypeW
kernel32.dll522HeapDestroy
kernel32.dll520HeapCreate
kernel32.dll530HeapSize
kernel32.dll396GetOEMCP
kernel32.dll861UnhandledExceptionFilter
kernel32.dll231FlushFileBuffers
kernel32.dll128DeleteCriticalSection
kernel32.dll537InitializeCriticalSection
kernel32.dll361GetLastError
kernel32.dll666RaiseException
kernel32.dll900WideCharToMultiByte
kernel32.dll616MultiByteToWideChar
kernel32.dll479GetVersionExA
kernel32.dll464GetThreadLocale
kernel32.dll364GetLocaleInfoA
kernel32.dll247GetACP
kernel32.dll542InterlockedExchange
kernel32.dll609MoveFileA
kernel32.dll343GetFileAttributesA
kernel32.dll750SetConsoleMode
kernel32.dll776SetFileAttributesA
kernel32.dll239FreeEnvironmentStringsA
kernel32.dll334GetEnvironmentStrings
kernel32.dll240FreeEnvironmentStringsW
kernel32.dll336GetEnvironmentStringsW
kernel32.dll173EnumSystemLocalesA
kernel32.dll564IsValidLocale
kernel32.dll562IsValidCodePage
kernel32.dll549IsBadCodePtr
kernel32.dll770SetEnvironmentVariableA
kernel32.dll473GetUserDefaultLCID
libeay32.dll477RC4
libeay32.dll479RC4_set_key
libeay32.dll3165EVP_Digest
libeay32.dll323EVP_md5
libeay32.dll340MD5_Final
libeay32.dll342MD5_Update
libeay32.dll341MD5_Init
netapi32.dll106NetApiBufferFree
netapi32.dll254NetWkstaGetInfo
netapi32.dll263Netbios
oleaut32.dll6SysFreeString
oleaut32.dll150SysAllocStringByteLen
oleaut32.dll149SysStringByteLen
oleaut32.dll9VariantClear
oleaut32.dll8VariantInit
oleaut32.dll200GetErrorInfo
oleaut32.dll2SysAllocString
shell32.dll317SHGetSpecialFolderPathA
shell32.dll359ShellExecuteA
shell32.dll360ShellExecuteEx
shlwapi.dll855wnsprintfA
shlwapi.dll668PathRemoveFileSpecA
user32.dll539RegisterClipboardFormatA
user32.dll395InflateRect
user32.dll423IsIconic
user32.dll606SetMenu
user32.dll301GetMenu
user32.dll489MonitorFromWindow
user32.dll320GetMonitorInfoA
user32.dll372GetWindowPlacement
user32.dll212EnumDisplaySettingsA
user32.dll635SetTimer
user32.dll435KillTimer
user32.dll326GetParent
user32.dll403IntersectRect
user32.dll246GetCaretPos
user32.dll290GetKeyState
user32.dll581SetCapture
user32.dll554ReleaseCapture
user32.dll98CreateWindowExW
user32.dll512PostMessageA
user32.dll583SetCaretPos
user32.dll28CallWindowProcA
user32.dll647SetWindowTextA
user32.dll376GetWindowTextA
user32.dll655ShowCursor
user32.dll243GetAsyncKeyState
user32.dll65ClientToScreen
user32.dll592SetCursorPos
user32.dll291GetKeyboardLayout
user32.dll279GetFocus
user32.dll491MsgWaitForMultipleObjects
user32.dll562ScreenToClient
user32.dll490MoveWindow
user32.dll143DefWindowProcA
user32.dll377GetWindowTextLengthA
user32.dll572SendMessageA
user32.dll350GetSystemMetrics
user32.dll687UnhookWindowsHookEx
user32.dll524PtInRect
user32.dll510PeekMessageA
user32.dll514PostQuitMessage
user32.dll315GetMessageA
user32.dll683TranslateMessage
user32.dll162DispatchMessageA
user32.dll269GetDC
user32.dll555ReleaseDC
user32.dll641SetWindowLongA
user32.dll34ChangeDisplaySettingsExA
user32.dll154DestroyWindow
user32.dll367GetWindowLongA
user32.dll644SetWindowPos
user32.dll659ShowWindow
user32.dll700UpdateWindow
user32.dll599SetFocus
user32.dll271GetDesktopWindow
user32.dll373GetWindowRect
user32.dll444LoadIconA
user32.dll440LoadCursorA
user32.dll535RegisterClassA
user32.dll621SetRect
user32.dll2AdjustWindowRect
user32.dll97CreateWindowExA
user32.dll729wsprintfA
user32.dll228FindWindowA
user32.dll333GetQueueStatus
user32.dll515PostThreadMessageA
user32.dll425IsRectEmpty
user32.dll224EqualRect
user32.dll688UnionRect
user32.dll477MessageBoxA
user32.dll256GetClientRect
user32.dll268GetCursorPos
user32.dll615SetParent
version.dll2GetFileVersionInfoSizeA
version.dll1GetFileVersionInfoA
version.dll11VerQueryValueA
wininet.dll207HttpQueryInfoA
wininet.dll277InternetReadFile
wininet.dll242InternetErrorDlg
wininet.dll269InternetOpenA
wininet.dll231InternetConnectA
wininet.dll205HttpOpenRequestA
wininet.dll209HttpSendRequestA
wininet.dll172FtpPutFileA
wininet.dll233InternetCrackUrlA
wininet.dll200HttpAddRequestHeadersA
wininet.dll225InternetCloseHandle
wininet.dll275InternetQueryOptionA
wininet.dll290InternetSetOptionA
winmm.dll152mmioSetInfo
winmm.dll149mmioSeek
winmm.dll138mmioCreateChunk
winmm.dll141mmioGetInfo
winmm.dll139mmioDescend
winmm.dll137mmioClose
winmm.dll144mmioOpenA
winmm.dll146mmioRead
winmm.dll136mmioAscend
winmm.dll166timeGetTime
winmm.dll168timeSetEvent
winmm.dll163timeEndPeriod
winmm.dll162timeBeginPeriod
winmm.dll167timeKillEvent
winmm.dll155mmioWrite
ws2_32.dll2bind
ws2_32.dll116WSACleanup
ws2_32.dll23socket
ws2_32.dll115WSAStartup
ws2_32.dll12inet_ntoa
ws2_32.dll57gethostname
ws2_32.dll11inet_addr
ws2_32.dll52gethostbyname
ws2_32.dll9htons
ws2_32.dll4connect
ws2_32.dll71WSARecv
ws2_32.dll16recv
ws2_32.dll6getsockname
ws2_32.dll3closesocket
ws2_32.dll21setsockopt
ws2_32.dll20sendto
ws2_32.dll76WSASend
ws2_32.dll10ioctlsocket
ws2_32.dll82WSASocketA
ws2_32.dll111WSAGetLastError
ws2_32.dll79WSASetEvent
ws2_32.dll32WSACloseEvent
ws2_32.dll43WSAGetOverlappedResult
ws2_32.dll75WSAResetEvent
ws2_32.dll86WSAWaitForMultipleEvents
ws2_32.dll34WSACreateEvent
ws2_32.dll19send
d3d9.dll14Direct3DCreate9
dbghelp.dll28MiniDumpWriteDump
fmod.dll48_FSOUND_3D_Listener_SetCurrent@8
fmod.dll49_FSOUND_3D_SetAttributes@12
fmod.dll182_FSOUND_SetPriority@8
fmod.dll189_FSOUND_StopSound@4
fmod.dll52_FSOUND_3D_SetMinMaxDistance@12
fmod.dll172_FSOUND_SetLoopMode@8
fmod.dll134_FSOUND_PlaySoundEx@16
fmod.dll219_FSOUND_Stream_PlayEx@16
fmod.dll224_FSOUND_Stream_SetMode@8
fmod.dll47_FSOUND_3D_Listener_SetAttributes@32
fmod.dll232_FSOUND_Update@0
fmod.dll129_FSOUND_GetVersion@0
fmod.dll178_FSOUND_SetOutput@4
fmod.dll181_FSOUND_SetPaused@8
fmod.dll68_FSOUND_Close@0
fmod.dll114_FSOUND_GetNumDrivers@0
fmod.dll104_FSOUND_GetDriverCaps@8
fmod.dll168_FSOUND_SetDriver@4
fmod.dll176_FSOUND_SetMixer@4
fmod.dll171_FSOUND_SetHWND@4
fmod.dll115_FSOUND_GetNumHWChannels@12
fmod.dll118_FSOUND_GetOutput@0
fmod.dll112_FSOUND_GetMixer@0
fmod.dll220_FSOUND_Stream_SetBufferSize@4
fmod.dll145_FSOUND_Reverb_SetProperties@4
fmod.dll191_FSOUND_Stream_Close@4
fmod.dll132_FSOUND_IsPlaying@4
fmod.dll177_FSOUND_SetMute@8
fmod.dll187_FSOUND_SetVolume@8
fmod.dll106_FSOUND_GetError@0
fmod.dll217_FSOUND_Stream_Open@16
fmod.dll147_FSOUND_Sample_Free@4
fmod.dll156_FSOUND_Sample_Load@20
fmod.dll46_FSOUND_3D_Listener_GetAttributes@32
fmod.dll131_FSOUND_Init@12
iphlpapi.dll28GetAdaptersInfo
npkcrypt.dll2NPKCloseDriver
ole32.dll60CoInitialize
ole32.dll106CoUninitialize
ole32.dll101CoTaskMemAlloc
ole32.dll30CoFreeUnusedLibraries
ole32.dll102CoTaskMemFree
ole32.dll18CoCreateInstance

StringTable 040904B0

CompanyNameYNK Games
FileDescriptionRohan Online Game
FileVersion1, 0, 0, 4
InternalNameRohanClient
LegalCopyrightCopyright (C) 2005
OriginalFilenameRohanClient
ProductNameRohan
ProductVersion1, 0, 0, 4
CommentsModified by an unpaid evaluation copy of Resource Tuner 2. http://www.heaventools.com

VS_FIXEDFILEINFO

FileVersion1.0.0.4
ProductVersion1.0.0.4
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType0
FileSubtype0
offsetsizetypecomment
15c115HTM#
9ffc08100884PNG(256 x 256)#
a1861c89374PNG(256 x 256)#
a2e33a17606BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x0