filename | RHEA.exe | |
---|---|---|
size | 60928 (0xee00) | |
md5 | dc7973a6c388291ce1d1b8dc7c366fdb | |
type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed | |
mimetype | application/x-dosexec | |
clamav | scan pending | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xb8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
UPX v0.89.6 - v1.02 / v1.05 - v1.22 This file is packed with UPX. Analysis will be incomplete without unpacking. |
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
UPX0 | 0x1000 | 0xe000 | 0 | RWX UDATA | |
UPX1 | 0xf000 | 0xb000 | 0xa200 | RWX IDATA | |
.rsrc | 0x1a000 | 0x5000 | 0x4800 | RW- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x1e5b0 | 0xd4 | |
RESOURCE | 0x1a000 | 0x45b0 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0 | 0 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
id | lang | string |
---|---|---|
0 | 1031 | ࢲᄫ狂ⶡ﨡닲マ탿獌闍퓚ལ䏄㧎 |
0 | 1033 | 䵓Թ뀬䍏甕왔⽌䗿픵孕䫕ךּ톧婆峗띙䛿珫㘍 |
0 | 1040 | ᙱ鍮鳇뀫苴ﬔỿ᳗ࠂ衾㣣淍䀫爟釣ꐸ훠쟱ķゥ쒿靿白᨟⤎臸훶 |
0 | 1043 | fc e2 c4 14 55 6f 70 eb ff 24 c7 45 17 63 94 91 |....Uop..$.E.c..| c6 1a 73 dc 74 1f b9 7e 48 22 8b bf fd ff ff 3c |..s.t..~H".....<| 32 49 26 9d 7c 12 4a 29 |2I&.|.J) | |
0 | 3082 | 蜼鏚ꎎﲠﴯ་䈙슯탪ф顴텆欺䢭ꭿ☋뢮 |
96 | 1031 | aa 98 fc 86 53 20 ae bb c9 b3 72 9a b4 8a b0 1b |....S ....r.....| ff 8d fe 9e b4 9a 9f dc 35 b4 7f 5b bc 45 5c 7c |........5..[.E\|| bb b3 21 ff 13 ad ff 5f e2 d2 a6 ba 47 bc 53 36 |..!...._....G.S6| 15 1c 46 bc 49 2c c0 13 3c 18 6c ff df e0 ff 6b |..F.I,..<.l....k| 9b 41 ac ac c1 ad e4 ca ae f4 c0 d4 bc b1 dc 4e |.A.............N| b1 3c 4b b4 54 cb b6 ff bf 70 ab 64 0a 1c cf 78 |. |
96 | 1033 | 27 c4 bd c4 ff c2 ed 5f cc 43 02 c4 f3 b3 a9 f4 |'......_.C......| be 87 99 e9 b3 24 9f 8b 3f f1 61 df f8 ff ff af |.....$..?.a.....| f6 8a 11 4f 3a 50 04 45 3a ff fa 5a d0 fe 3b 49 |...O:P.E:..Z..;I| 55 7a d0 a8 32 4f fc c4 03 bf f1 ff ff cc 08 d6 |Uz..2O..........| ac d0 5c 02 2b 53 3c 45 9b 94 4d 08 d2 c9 56 74 |..\.+S |
96 | 1040 | 54 a7 fd d1 af 7a 6b e1 4b b3 b1 1c 52 69 32 c7 |T....zk.K...Ri2.| fa 24 2d cf e3 0b b7 97 0f 52 f5 5c 90 75 4f d5 |.$-......R.\.uO.| d2 79 ac 47 4f 5b fd ff 7f cc 2b fd 0f 3f 7c 48 |.y.GO[....+..?|H| e9 89 c8 9b bb 1e c9 ac 48 8b 4c 2f a0 b8 f2 ff |........H.L/....| 97 fa ff 39 d3 02 7d c4 fb 0b 25 20 a1 c4 23 29 |...9..}...% ..#)| 3c c5 c4 94 24 35 09 95 25 3b 55 ff ff 7f 81 cd |<...$5..%;U.....| 3e 53 a0 59 40 d8 6c c0 98 a0 89 07 5a 45 09 9a |>S.Y@.l.....ZE..| 40 b6 92 1a 10 0d 51 2f 2c fd ff dd 9c 45 0d dc |@.....Q/,....E..| 30 5b 6c 3b |0[l; | |
96 | 1043 | 66 9c ac 1a bc c1 67 84 c6 75 5b 37 6c fc ea b4 |f.....g..u[7l...| 6d fb ff ff 04 b1 fc b2 41 28 4b b3 2c cb 2b 4c |m.......A(K.,.+L| cb 74 ac 42 b6 54 47 6a e4 e6 e4 d8 bf 70 f9 ff |.t.B.TGj.....p..| 9c cb 47 20 47 bb cc 04 bc cc cb 4c 20 83 04 60 |..G G......L ..`| c7 79 a4 47 7e ff ff ff ff e4 c7 27 b4 c7 7b e4 |.y.G~......'..{.| 04 ff 28 24 ee 0a c3 9a 53 24 85 59 18 32 cc 29 |..($....S$.Y.2.)| f3 72 bf f7 03 9f 8c 14 3a ff ff bf f4 8e 2c 3a |.r......:.....,:| a3 47 fc e3 b4 4a b4 c4 4b fc bf 4c dc 1f aa 5a |.G...J..K..L...Z| c9 2d e9 12 5a d2 2a ff 2f 75 a9 8b |.-..Z.*./u.. | |
96 | 3082 | cd 0d ce 14 49 a5 5b ba a7 0a b5 a7 83 3a 01 5f |....I.[......:._| fa ff ff fc 2f 00 0b b0 d6 ec aa d7 a4 49 ae fb |..../........I..| 25 55 cc 49 09 b4 b5 3d b3 0b 04 ca 0c 6f ff ff |%U.I...=.....o..| ff dc 40 0e f3 c0 bc 02 41 10 13 ce b9 23 31 15 |..@.....A....#1.| ba 3b e4 14 c6 bb 21 c6 bf 03 e7 54 27 df 7e ab |.;....!....T'.~.| ff c0 69 a7 65 94 2c c5 73 c6 43 4e ec 04 4b ee |..i.e.,.s.CN..K.| 98 ef fc ce b4 e2 ff ff ff 0c cf 2a 24 cf f1 34 |...........*$..4| cf 6e 44 cf f4 bc 4b bd 74 cf f7 8c 4f 7a 9c cf |.nD...K.t...Oz..| |
992 | 1031 | b4 c0 04 d6 e5 34 14 98 e0 b2 c6 09 82 4e bb 13 |.....4.......N..| 05 db 7a c1 b8 5a 58 6b cd ac eb 77 ff 2f fd a1 |..z..ZXk...w./..| b8 02 42 69 8e 0b 7c f5 ab 36 01 0b 37 6f 12 36 |..Bi..|..6..7o.6| 9c 50 0c 5d 51 7f 83 bf d4 4e 73 88 9d 3b 8c 31 |.P.]Q....Ns..;.1| 64 81 48 1b 13 d1 b2 50 50 ff 97 fa 6f dc 2c d1 |d.H....PP...o.,.| 08 47 70 43 09 b0 51 19 d6 00 06 48 0c 62 11 de |.GpC..Q....H.b..| 26 bf d0 ff ff 84 b8 d5 01 8b 79 b4 a3 13 66 c8 |&.........y...f.| 84 bb d5 61 0e 77 a4 5a d9 30 03 26 06 6f fd 7f |...a.w.Z.0.&.o..| a3 11 20 10 22 dc e3 46 87 ff 3b d6 b0 0d 4e af |.. ."..F..;...N.| 16 0b 87 ff ff 2f f1 05 3d e6 71 49 44 5c e2 fc |...../..=.qID\..| c8 47 3e 48 b7 8e 74 cc 43 e3 0e 7f 38 c5 eb bf |.G>H..t.C...8...| f0 37 fa 51 2d 37 8c 83 88 40 07 2c cc f1 f0 b0 |.7.Q-7...@.,....| 03 1e 55 60 87 ff ff df fe 27 c6 91 0d 6b 68 17 |..U`.....'...kh.| e4 8c 1e 78 c5 6b 3d f2 3e cc bc 12 03 d1 25 4b |...x.k=.>.....%K| 74 b1 f5 b2 97 ff ff 7f fb d2 46 b5 |t.........F. | |
992 | 1033 | ff 7f a3 5e 92 af 31 14 68 62 3b 0f 2b 8b b7 0b |...^..1.hb;.+...| 31 b9 cb 26 ba f8 c1 6f f5 ff ff f2 26 17 4a b1 |1..&...o....&.J.| 66 eb bb 68 5b 2c c6 72 95 c7 3a bc c2 11 a2 c3 |f..h[,.r..:.....| 0d 41 c0 ff ff ed ff 06 46 18 84 4b 88 bc 6a 08 |.A......F..K..j.| 83 43 02 42 70 84 41 c8 bc 6f 8b 3c 43 f0 c1 ff |.C.Bp.A..o. |
992 | 1040 | 4b a0 ad 63 20 07 94 e0 a0 b0 a3 40 3e a1 b0 65 |K..c ......@>..e| 83 ff 1b ff 62 a6 a9 a8 2b 0e ec 40 22 0b bd 1a |....b...+..@"...| 36 11 63 9b b9 38 b6 94 2f fd 6f 70 36 14 d8 be |6.c..8../.op6...| 63 41 16 93 b6 17 2c 3c 8f 27 c2 a1 fd ff b7 f8 |cA....,<.'......| 95 78 5a 3c 25 2c 6f 1b 84 c7 bb 84 d6 1b 42 46 |.xZ<%,o.......BF| b8 46 cd 7b bd 4b 68 70 6b bc cc 47 78 84 db 11 |.F.{.Khpk..Gx...| db 46 f6 68 ff ff 9b 35 c6 d6 ab c2 2b 24 84 6d |.F.h...5....+$.m| 8c 3d d2 cb 84 72 64 c2 42 80 fc ff ff 7f 0b 1f |.=...rd.B.......| 3c 04 dc bb 47 e6 89 04 4e 08 03 24 fc 33 4d 10 |<...G...N..$.3M.| 34 6b 18 83 3d fc ff 46 2b f0 41 2d 44 10 a8 b9 |4k..=..F+.A-D...| f5 4d 48 42 7f 0c 34 40 ff ff 4b fd 0c 44 84 b9 |.MHB..4@..K..D..| 39 44 66 43 74 34 11 81 bf ff 48 d3 a4 46 ac bf |9DfCt4....H..F..| 2d 18 87 1c 8b ff ff ff 89 44 a5 da b4 fa b2 2f |-........D...../| 4f 63 ba 97 f9 bf a7 db 44 58 9a 3a ac a2 25 04 |Oc......DX.:..%.| 1c 09 6f 74 81 7f 2a 45 57 e3 a5 b1 7a af 6c 30 |..ot..*EW...z.l0| b6 2b b5 12 ff ff ff ff bb 0a 4c a6 58 bc 30 0c |.+........L.X.0.| a3 45 5f 03 36 46 71 bb bd 12 31 12 ec 45 13 34 |.E_.6Fq...1..E.4| 31 65 d3 3b 15 9b a1 16 0b fd ff ff 74 c1 c6 02 |1e.;........t...| 1c 19 fb 21 |...! | |
992 | 1043 | cd ff ff ff ff 70 52 db e4 a6 a6 36 05 98 17 1e |.....pR....6....| 96 9c 89 4d 15 0e 59 d5 d8 75 b2 d3 9d 91 2d 8d |...M..Y..u....-.| 69 e4 29 88 40 5b 97 f8 0b ad 17 b8 48 c4 22 1e |i.).@[......H.".| b6 06 30 5e 2d 5f ea ff ff 48 c5 29 ce 60 08 46 |..0^-_...H.).`.F| 60 43 c9 24 ff 00 72 90 19 c0 81 1d 72 12 3f 76 |`C.$..r.....r.?v| 32 bf 71 83 ff 07 9a e0 06 72 80 a1 10 51 e6 16 |2.q......r...Q..| 2c 88 2a 3f 79 07 e9 2f fc ff ff 50 c7 08 de e5 |,.*?y../...P....| 64 34 a7 b9 ca 60 80 85 99 d5 8c e6 e6 e2 e3 1d |d4...`..........| ea 6e 98 19 50 ff ff 25 fe 80 1d 74 21 09 9e 40 |.n..P..%...t!..@| 3b 98 e7 3c ee 1e c8 bb d2 6b 90 4d 17 f6 48 48 |;..<.....k.M..HH| 62 2f f4 7f eb 48 a7 1b 4d 87 bc f7 d3 a0 0a 95 |b/...H..M.......| 63 1e fb 7d 43 a1 be e0 1b ff ff a4 8a 72 94 f1 |c..}C........r..| 6b 2a 92 5a 66 bf a8 4a 95 20 fd 02 ce b8 84 d5 |k*.Zf..J. ......| ff ff ff 37 |...7 | |
992 | 3082 | d1 fa e8 32 52 76 9a 65 4f 85 2a fe f4 47 33 52 |...2Rv.eO.*..G3R| 57 d5 d4 b3 cc ea 00 57 bd df e0 ff ff 6a 03 ef |W......W.....j..| 12 c1 46 8b 35 4d 66 4d 6b 9f 18 73 c2 55 cb f5 |..F.5MfMk..s.U..| 3a c9 35 67 fa ff ff ff ff fa d7 5e 91 66 a3 a8 |:.5g.......^.f..| 99 16 6b 5e 73 52 6d 7b 1b 5e 4c 5c 0b 70 2e 9b |..k^sRm{.^L\.p..| d9 86 c1 1b b4 1d 73 43 53 ff 37 be f1 ac ea c5 |......sCS.7.....| 98 86 ac 62 45 63 e5 51 db ab 09 84 b7 1b 41 88 |...bEc.Q......A.| 47 fb 52 6f f0 64 22 1c 9c a9 83 38 e1 c6 30 e2 |G.Ro.d"....8..0.| db 8e e7 ff ff bf 55 a1 c0 89 37 b0 21 bb 85 28 |......U...7.!..(| 84 e7 0f a1 09 36 e8 74 13 85 b8 04 21 85 ff ff |.....6.t....!...| ff 06 21 70 4c 64 e2 f3 9b 48 43 19 26 c1 09 4e |..!pLd...HC.&..N| 88 c1 1c e8 78 83 36 b6 ff 91 14 d0 42 ff ff b4 |....x.6.....B...| 43 f8 c3 6f c7 39 ca d1 86 6c a4 61 12 db 60 27 |C..o.9...l.a..`'| 7e fa ff 5b bf 3a 77 bc a3 1c 68 99 25 de 30 86 |~..[.:w...h.%.0.| 49 b0 41 f8 ef 38 45 c8 ab f0 ff ff ff 5f 4b 68 |I.A..8E......_Kh| 42 e6 00 eb ee a0 c1 6b e8 f1 5a 28 7b 6a 98 64 |B......k..Z({j.d| c4 d0 6b b1 8b 61 8c 45 e4 73 ef ff 97 f8 ff 7b |..k..a.E.s.....{| 31 7d f4 a5 32 55 65 9e fe 74 d3 55 5e fe 72 a5 |1}..2Ue..t.U^.r.| 84 b0 2a 86 a0 3a 9e 77 f4 ff ff e9 99 ab 63 35 |..*..:.w......c5| 5d 7a 35 b2 7a 13 b3 ba 09 61 02 bb 9f d0 93 03 |]z5.z....a......| b2 9b 2b db |..+. | |
1008 | 1031 | b7 dd 25 2f 99 8a db dc 3e 15 0b bb 8d 4a 31 ff |..%/....>....J1.| ff ff ff a6 62 05 2a f6 a6 aa be 59 06 14 7f 7b |....b.*....Y...{| 95 e0 64 35 ab d0 d4 ca 56 b8 d2 d5 e2 62 a3 88 |..d5....V....b..| 21 24 91 ff 97 fe 5b 79 40 c1 3b d8 e0 08 2c d4 |!$....[y@.;...,.| 07 15 f8 41 12 93 78 ae 08 44 e1 56 7f a3 8d 38 |...A..x..D.V...8| 31 c2 69 41 0e 2d 84 21 0e 33 6f f4 ff ff 9d 05 |1.iA.-.!.3o.....| 90 a8 c4 02 fc 40 3b 2e e0 62 1b dd 38 84 06 40 |.....@;..b..8..@| a0 a1 80 c2 1b 85 ff ff ff ad c8 81 02 b0 c0 1e |................| 34 38 80 0c b8 68 2f 14 a4 e8 0b 64 f0 97 f3 0a |48...h/....d....| 04 bd e6 ff ff ff ff 08 61 09 8b 90 84 2a 04 06 |........a....*..| 87 61 68 43 1c fa d0 c4 46 64 b1 f0 ad 68 7c 2f |.ahC....Fd...h|/| 32 1f c8 d2 27 32 92 de ea 4b fc 99 |2...'2...K.. | |
1008 | 1033 | 6c 60 89 54 24 23 1b f9 c8 48 aa 01 62 94 9c df |l`.T$#...H..b...| 68 b5 f4 58 c5 be 77 f6 69 ec f7 d1 f9 3e a9 ff |h..X..w.i....>..| ff ed ff 23 f6 f5 e8 64 28 2b 25 fd 5c d6 e7 c9 |...#...d(+%.\...| 6c 66 35 c3 d2 cd 00 f8 90 9d 81 a9 22 b8 e4 ff |lf5........."...| 25 7e e1 6a 48 46 02 a1 a1 a4 68 6d ed 30 99 36 |%~.jHF....hm.0.6| 4c 3b f4 a4 98 75 e1 52 ff 41 99 5a d5 90 d2 0c |L;...u.R.A.Z....| 65 f0 6b 1c 91 33 c3 ff c6 ff 2f cc 45 95 ad 9a |e.k..3..../.E...| 91 f2 05 36 29 95 42 bb e8 05 72 f3 54 dd c6 49 |...6).B...r.T..I| 2a bf c5 ff ff 1a 9e 13 9d 95 b9 cc 0e 7b e8 c3 |*............{..| 77 c2 d3 ff 34 b7 4a 07 14 c1 8b 59 f0 4b fd 2f |w...4.J....Y.K./| f1 82 06 04 8d 71 0a b0 81 06 ec e0 14 9f 28 c9 |.....q........(.| e2 ff ff 06 ff 00 05 82 42 c0 b3 9f 25 e7 20 71 |........B...%. q| |
1008 | 1040 | 2c d5 7e b6 01 1b d8 18 25 0c 11 07 5c bb d4 ff |,.~.....%...\...| 12 c2 b5 0e e8 ec 06 5a 7b 08 12 da b6 ab 5b ff |.......Z{.....[.| 2f f1 7f 71 65 2b 81 e0 0e d7 b8 be e5 f1 d2 61 |/..qe+.........a| 8f 14 38 60 b8 a0 e5 41 17 1b fd ff ff 42 51 05 |..8`...A.....BQ.| 30 bc b4 79 03 92 e9 18 08 66 b0 45 2a cc 91 d8 |0..y.....f.E*...| cb de f6 09 d3 ff ff ff ff ef 81 2f 63 43 2d 5f |.........../cC-_| 27 69 74 d4 91 91 0c 48 a3 94 df fc 8c 74 4a 54 |'it....H.....tJT| e2 6f 4a 53 bd d2 2b 61 79 fd 6f f0 ff d5 5a 6e |.oJS..+ay.o...Zn| b5 ab 03 e6 c8 57 c3 2a d6 cb ad 81 33 09 a6 30 |.....W.*....3..0| d1 6a 87 a5 fe ff bf 75 a5 82 17 cc a0 5c 9d b2 |.j.....u.....\..| b5 a9 50 c5 83 1f 8c 66 5e a7 69 b6 |..P....f^.i. | |
1008 | 1043 | 0b 50 21 0a 03 2c d8 fd f1 16 2f fc ff 73 19 d8 |.P!..,..../..s..| 27 95 33 ca e0 af 3f 00 03 1c 70 4b 0b 6e 90 33 |'.3...?...pK.n.3| bf d1 e8 ff 25 64 b8 61 87 33 2c 23 62 0f 86 55 |....%d.a.3,#b..U| 8c 53 dc 98 63 fe ff ff ff 37 3c 06 79 1c 1b 6f |.S..c....7<.y..o| c4 71 c7 1e 4b e6 42 c8 51 52 b6 62 65 25 5d 86 |.q..K.B.QR.be%].| 12 66 55 66 16 c8 20 9b ff ff 5b 05 91 78 9d ed |.fUf.. ...[..x..| 2c 4c 18 01 5a 01 7d 26 34 93 10 8d 25 6e 4a ff |,L..Z.}&4...%nJ.| ff a5 ff 1a 9c 6a 82 13 3a d9 09 4f 61 1a d5 fa |.....j..:..Oa...| a4 94 3f 35 23 50 83 ea 9a d7 c0 16 ff ff ff 0b |..?5#P..........| ff b6 b1 91 cd 51 67 83 54 1e c6 36 |.....Qg.T..6 | |
1008 | 3082 | ec 7d 42 92 1f 25 e7 a4 fb 45 18 f9 d3 df ff 05 |.}B..%...E......| fe ad 52 a6 90 ff 35 04 22 5e 81 98 0c 78 cb 32 |..R...5."^...x.2| 21 50 4d ff 37 f8 ff 29 59 20 03 65 42 93 a5 cd |!PM.7..)Y .eB...| a9 4e 76 82 2e 2a 68 41 a3 5c 2d 83 1b 94 4a ff |.Nv..*hA.\-...J.| ff ff ff 07 bf 86 a8 44 8d 6d 2c 66 79 14 da da |.......D.m,fy...| a2 b6 b5 ff b5 ad 2e 2a 64 21 5f 38 d5 29 ba 11 |.......*d!_8.)..| 26 86 a4 1b fc 56 e9 2a 95 de 4f 1d ea 90 87 81 |&....V.*..O.....| 13 8e 40 ff bf d1 ff 13 c4 c3 21 4e 10 50 98 c5 |..@.......!N.P..| 2d 6d 03 03 90 c0 8a 1b 60 62 2a 28 81 09 2c ff |-m......`b*(..,.| 6f f4 ff e0 a2 03 13 70 40 1b 39 20 81 11 18 c7 |o......p@.9 ....| 5c f4 22 39 3e 01 89 38 f4 42 0e fa ff ff ff 2f |\."9>..8.B...../| c8 e7 3e d3 d8 81 03 30 c0 8e 76 8c 23 05 4a b0 |..>....0..v.#.J.| d1 24 6e a0 00 2d e8 47 1c 78 c3 c5 ff ff ff 37 |.$n..-.G.x.....7| 59 60 03 33 72 43 1a fa f5 1f 43 0a |Y`.3rC....C. | |
2000 | 1031 | 04 b3 75 0f cf 3f c6 f6 d8 36 fe 6f c0 a9 c7 0d |..u..?...6.o....| 58 10 bc 95 1d 68 51 14 12 11 fd eb ff ff 5f 78 |X....hQ......._x| 28 2c f6 3e db e7 7f ae ef 25 67 d3 10 4e a5 55 |(,.>.....%g..N.U| 0a cd ab fd 95 be c7 05 ff ff ff 7f 1c db f9 11 |................| 0a 8f 4e db 15 d5 58 5b 4b a6 4b ed ad df 8a be |..N...X[K.K.....| 99 6e 62 27 56 6b 16 7f f1 2c ff ff ff d2 ae 7d |.nb'Vk...,.....}| 27 ce a0 23 11 6c 5b bf 77 70 ea 21 1f b7 23 ff |'..#.l[.wp.!..#.| 30 31 51 f2 ae 0e c0 b8 ff d2 ff ff 13 eb 7b eb |01Q...........{.| 3b 51 41 eb 85 68 eb 43 be 4d 0a ec a8 48 2e d3 |;QA..h.C.M...H..| f3 dd bf 5e 9a 0a 5f f8 ff f6 5d 03 ed 35 b3 c0 |...^.._...]..5..| 02 67 8f c2 50 e0 5e 32 d0 ec 2a e4 70 f0 0d b3 |.g..P.^2..*.p...| ff 7f 83 ff e9 5e 1e ab 02 c4 5f fc 3f 3b 07 20 |.....^...._.?;. | fb e8 e5 03 63 9e fb cb 4f c3 36 1c 0d fe 5f e2 |....c...O.6..._.| fd 30 88 cb a0 ee 17 a0 fc e8 f5 9a 95 9b 02 ff |.0..............| 5f e0 b6 6d ea 14 02 ee 21 bf 5a 6c b0 e0 f9 fe |_..m....!.Zl....| ff 2f f4 ff |./.. | |
2000 | 1033 | 01 ff 8b 7b 24 50 70 e0 ef ed 1f 0c 22 37 fd ff |...{$Pp....."7..| 97 a5 f3 cd 42 82 df 40 16 48 e0 57 4f 5e be 74 |....B..@.H.WO^.t| b0 ae 8e db 47 01 fe ff bf c5 20 1e 4c f9 3d a2 |....G..... .L.=.| c2 01 f0 e1 c5 4f 78 c0 20 ca 8d 04 26 92 03 89 |.....Ox. ...&...| e0 bf f0 6f 35 2d f1 70 be cb f8 1d 3c 02 b6 94 |...o5-.p....<...| d4 98 89 d4 ff ff ff ff 3f 92 18 31 34 d1 44 12 |........?..14.D.| 02 cd 30 63 8c 4d 36 99 64 c1 05 c9 60 e3 c1 07 |..0c.M6.d...`...| d3 48 03 0c 0a 29 54 e3 df f8 ff ff c2 32 32 ec |.H...)T......22.| a4 13 4a 28 59 63 8d 33 42 fc e4 93 2f 4a 6c a3 |..J(Yc.3B.../Jl.| 0d e5 20 67 45 37 ff ff ff ff 5a 6c b1 0a 18 ab |.. gE7....Zl....| 18 67 c6 19 b7 d8 22 14 1c 43 f1 c4 93 2e ba e0 |.g...."..C......| c2 c7 51 82 0c d2 0a 22 a9 30 ff ff ff ff 92 8a |..Q....".0......| 52 92 7c a2 94 27 9a 7c c2 09 27 54 91 72 20 2a |R.|..'.|..'T.r *| 0d 2a 48 16 85 b0 6c c8 21 87 22 f2 c7 9f ff 25 |.*H...l.!."....%| fe ff 8a 28 0a 69 4c 32 cb f4 68 24 93 4e 4a 49 |...(.iL2..h$.NJI| 25 96 82 69 |%..i | |
2000 | 1040 | a6 9a 6c ca 03 9a bf d0 7f e9 9c 76 ea 90 a0 84 |..l........v....| 22 aa a8 a3 e6 60 c3 a7 a2 12 94 2a ff f6 ff ff |"....`.....*....| ab 8e c9 4a 2b af ba 0a ff 2b 2c b2 ca 42 4b ad |...J+....+,..BK.| b6 dc 82 4b 6d 74 b9 0b 2f 5b f8 ea bf d0 4b ff |...Kmt../[....K.| 8b 16 bf fe 1a 4c 30 c3 13 2c b1 56 1b 0c 32 c9 |.....L0..,.V..2.| 22 a3 e3 c6 ff ff 8c 94 cb 30 db 8c 33 cf 3e 43 |"........0..3.>C| 44 b4 d2 00 39 2d b5 40 b8 ed b5 14 e8 5b 7f 69 |D...9-.@.....[.i| f8 8e 15 6e cb 47 9d 28 32 60 82 5f 93 ff bf f1 |...n.G.(2`._....| 5f 40 82 11 ae 90 e3 b8 64 7f 66 80 7d e0 c9 06 |_@......d.f.}...| 0c 4d b8 89 c3 06 d9 92 b7 2f f1 ff 55 01 3b ed |.M......./..U.;.| 16 89 76 5c 72 7f 90 80 21 72 b8 c0 d7 09 88 80 |..v\r...!r......| 2f fd 2f ff 81 1f 3a a8 20 85 68 25 05 79 d6 e8 |/./...:. .h%.y..| 84 0c 31 fc 03 f5 02 25 31 ff ff 7f fb 10 41 05 |..1....%1.....A.| 19 9c 0e 07 21 64 63 c2 0a 2f c4 50 43 0e 3d 04 |....!dc../.PC.=.| 31 c4 33 48 |1.3H | |
2000 | 1043 | cf cf 44 dd 13 5a a1 06 dc fc 4c e4 da 16 91 47 |..D..Z....L....G| 85 ff 6f f0 fe a8 05 8b a4 86 d0 78 6d c9 27 ea |..o........xm.'.| 01 7f 76 05 0d 20 ff b7 b7 5a 0b d5 e7 02 10 b7 |..v.. ...Z......| 3e d0 02 e4 00 0b 2d da 70 3f fc f6 bf f0 e0 02 |>.....-.p?......| d6 7e fd 4e 02 50 f0 67 3f 30 e6 35 05 af 09 b3 |.~.N.P.g?0.5....| 32 8b e2 8d df 1a 3b 1d dc e0 5f 6f 1e 99 f8 02 |2.....;..._o....| 0d ff 7f a1 dd 90 28 d0 3a 65 34 d0 70 23 40 9d |......(.:e4.p#@.| 0a 4e 06 62 50 b4 47 68 ff ff ff ff d3 c9 aa ac |.N.bP.Gh........| 85 3e e1 57 9a 50 ad fd d3 5b 6c 61 f7 51 b5 15 |.>.W.P...[la.Q..| 34 51 1e 3e be 64 5c be 96 4e 42 4e ff ff ff ff |4Q.>.d\..NBN....| 1d 22 6b bc e9 2c 94 e2 2a 9e 7d fa 22 a7 e9 1c |."k..,..*.}."...| 98 31 4e 98 45 42 e3 e4 57 7e aa 8e e3 8c 09 c8 |.1N.EB..W~......| e3 ff ff ff 43 06 a1 11 ea e3 09 39 32 f3 57 7f |....C......92.W.| 89 8a c0 c3 a5 eb dc ff dd eb 91 2c a2 c0 5e 02 |...........,..^.| f0 0d 0a 7c 4b 03 df f5 60 c3 f6 90 02 13 ff ff |...|K...`.......| 0b bf 33 82 36 bb 23 70 30 80 ab b3 19 68 04 90 |..3.6.#p0....h..| bb 4c 8f ec 41 bf f3 63 2e 78 b4 b1 2d f0 de a5 |.L..A..c.x..-...| |
2000 | 3082 | 4f dd c9 ef cc ec ef 55 6a a5 56 9c 21 2e 96 5c |O......Uj.V.!..\| 4a 96 df 4b 6a 7d 2f 8e 0b ff ff ff d8 3a c6 0d |J..Kj}/......:..| ff 96 88 03 10 45 04 0e 24 52 90 88 2c 84 ab 14 |.....E..$R..,...| 0a 60 28 20 46 00 ff ff 37 f8 fe 22 fe a3 f8 a7 |.`( F...7.."....| 45 00 19 35 6e e4 d8 d1 e3 47 90 1d fd f8 99 56 |E..5n....G.....V| b2 24 fb ff ff ff 1f 94 7c fa f4 d1 d3 b2 e5 9e |.$......|.......| 68 31 a3 49 93 86 27 cf 4d 68 76 74 ea bc 73 e7 |h1.I..'.Mhvt..s.| d9 b3 3a d1 c5 7f a1 7f d0 21 ea cc a8 b3 39 13 |..:......!....9.| 2d 65 ba cc e9 32 66 51 ff 7f 8b bf f8 43 56 f5 |-e...2fQ.....CV.| d8 55 63 3b 19 23 d6 95 d8 30 b0 60 85 09 0b 16 |.Uc;.#...0.`....| 0c d8 ff 56 bf c0 59 60 0c f9 62 cb 76 d7 8f 71 |...V..Y`..b.v..q| 73 e9 a2 7b cb ee ff 5f e2 ff 2d 5b 79 6b ed dd |s..{..._..-[yk..| 4b 6b d6 df 59 7a 0f 7e 55 f8 95 2b c4 88 5b 2d |Kk..Yz.~U..+..[-| 66 d5 ff 17 e8 ff b8 31 2a 53 91 25 93 a2 2c ca |f......1*S.%..,.| b2 55 34 6f fe d3 19 d1 e7 44 a1 13 0b fd 37 fe |.U4o.....D....7.| 29 22 ad 08 50 20 d4 a2 09 12 d5 ad 98 b7 1c 16 |)"..P ..........| 7a a1 f8 c2 5b fc ed 63 |z...[..c | |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.DLL | LoadLibraryA | ||
KERNEL32.DLL | GetProcAddress | ||
KERNEL32.DLL | VirtualProtect | ||
KERNEL32.DLL | VirtualAlloc | ||
KERNEL32.DLL | VirtualFree | ||
KERNEL32.DLL | ExitProcess | ||
MSVBVM60.DLL | 581 |
StringTable 040904B0
CompanyName | HackMew Productions |
FileDescription | A program to edit the header in Advance-ROMs. |
LegalCopyright | Copyright © 2007 HackMew |
ProductName | ROM Header Editor Advance |
FileVersion | 1.00.0001 |
ProductVersion | 1.00.0001 |
InternalName | RHEA |
OriginalFilename | RHEA.exe |
VS_FIXEDFILEINFO
FileVersion | 1.0.0.1 |
ProductVersion | 1.0.0.1 |
StrucVersion | 0x10000 |
FileFlagsMask | 0 |
FileFlags | 0 |
FileOS | 4 |
FileType | 1 |
FileSubtype | 0 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[!] string size(85190) > stringtable size(40). truncated to 38
[!] string size(10286) > stringtable size(44). truncated to 42
[!] string size(11368) > stringtable size(64). truncated to 62
[!] string size(116216) > stringtable size(40). truncated to 38
[!] cannot convert "\xC4\x14Uop\xEB\xFF$\xC7E\x17c\x94\x91\xC6\x1A"... to UTF-16
[!] string size(85970) > stringtable size(44). truncated to 42
[!] string size(78164) > stringtable size(152). truncated to 150
[!] cannot convert "\xFC\x86S \xAE\xBB\xC9\xB3r\x9A\xB4\x8A\xB0\e\xFF\x8D"... to UTF-16
[!] string size(100430) > stringtable size(132). truncated to 130
[!] cannot convert "\xBD\xC4\xFF\xC2\xED_\xCCC\x02\xC4\xF3\xB3\xA9\xF4\xBE\x87"... to UTF-16
[!] string size(85672) > stringtable size(132). truncated to 130
[!] cannot convert "\xFD\xD1\xAFzk\xE1K\xB3\xB1\x1CRi2\xC7\xFA$"... to UTF-16
[!] string size(80076) > stringtable size(140). truncated to 138
[!] cannot convert "\xAC\x1A\xBC\xC1g\x84\xC6u[7l\xFC\xEA\xB4m\xFB"... to UTF-16
[!] string size(7066) > stringtable size(128). truncated to 126
[!] cannot convert "\xCE\x14I\xA5[\xBA\xA7\n\xB5\xA7\x83:\x01_\xFA\xFF"... to UTF-16
[!] string size(98664) > stringtable size(236). truncated to 234
[!] cannot convert "\x04\xD6\xE54\x14\x98\xE0\xB2\xC6\t\x82N\xBB\x13\x05\xDB"... to UTF-16
[!] string size(65534) > stringtable size(236). truncated to 234
[!] cannot convert "\xA3^\x92\xAF1\x14hb;\x0F+\x8B\xB7\v1\xB9"... to UTF-16
[!] string size(82070) > stringtable size(292). truncated to 290
[!] cannot convert "\xADc \a\x94\xE0\xA0\xB0\xA3@>\xA1\xB0e\x83\xFF"... to UTF-16
[!] string size(130970) > stringtable size(212). truncated to 210
[!] cannot convert "\xFF\xFF\xFFpR\xDB\xE4\xA6\xA66\x05\x98\x17\x1E\x96\x9C"... to UTF-16
[!] string size(128418) > stringtable size(324). truncated to 322
[!] cannot convert "\xE82Rv\x9AeO\x85*\xFE\xF4G3RW\xD5"... to UTF-16
[!] string size(113518) > stringtable size(188). truncated to 186
[!] cannot convert "%/\x99\x8A\xDB\xDC>\x15\v\xBB\x8DJ1\xFF\xFF\xFF"... to UTF-16
[!] string size(49368) > stringtable size(192). truncated to 190
[!] cannot convert "\x89T$#\e\xF9\xC8H\xAA\x01b\x94\x9C\xDFh\xB5"... to UTF-16
[!] string size(109144) > stringtable size(172). truncated to 170
[!] cannot convert "~\xB6\x01\e\xD8\x18%\f\x11\a\\\xBB\xD4\xFF\x12\xC2"... to UTF-16
[!] string size(40982) > stringtable size(156). truncated to 154
[!] cannot convert "!\n\x03,\xD8\xFD\xF1\x16/\xFC\xFFs\x19\xD8'\x95"... to UTF-16
[!] string size(64472) > stringtable size(220). truncated to 218
[!] cannot convert "B\x92\x1F%\xE7\xA4\xFBE\x18\xF9\xD3\xDF\xFF\x05\xFE\xAD"... to UTF-16
[!] string size(91656) > stringtable size(244). truncated to 242
[!] cannot convert "u\x0F\xCF?\xC6\xF6\xD86\xFEo\xC0\xA9\xC7\rX\x10"... to UTF-16
[!] string size(130562) > stringtable size(244). truncated to 242
[!] cannot convert "\x8B{$Pp\xE0\xEF\xED\x1F\f\"7\xFD\xFF\x97\xA5"... to UTF-16
[!] string size(79180) > stringtable size(228). truncated to 226
[!] cannot convert "l\xCA\x03\x9A\xBF\xD0\x7F\xE9\x9Cv\xEA\x90\xA0\x84\"\xAA"... to UTF-16
[!] string size(106398) > stringtable size(272). truncated to 270
[!] cannot convert "D\xDD\x13Z\xA1\x06\xDC\xFCL\xE4\xDA\x16\x91G\x85\xFF"... to UTF-16
[!] string size(113310) > stringtable size(264). truncated to 262
[!] cannot convert "\xC9\xEF\xCC\xEC\xEFUj\xA5V\x9C!.\x96\\J\x96"... to UTF-16
[!] refusing to read ICODIRENTRY beyond resource size