filenameRHEA.exe
size60928 (0xee00)
md5dc7973a6c388291ce1d1b8dc7c366fdb
typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xb8

Rich Header

lib idversiontimes used
1381691

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x46fe929c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0xb000
SizeOfInitializedData0x5000
SizeOfUninitializedData0xe000
AddressOfEntryPoint0x18fb0
BaseOfCode0xf000
BaseOfData0x1a000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x1f000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

UPX v0.89.6 - v1.02 / v1.05 - v1.22

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

namevavsizeraw sizeflags
UPX00x10000xe0000RWX UDATA
UPX10xf0000xb0000xa200RWX IDATA
.rsrc0x1a0000x50000x4800RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x1e5b00xd4
RESOURCE0x1a0000x45b0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#111281200
ICON#242641200
ICON#396401200
ICON#300013041200
ICON#300027441200
ICON#300032961200
STRING#1401200
STRING#1441200
STRING#1641200
STRING#1401200
STRING#1441200
STRING#71521200
STRING#71321200
STRING#71321200
STRING#71401200
STRING#71281200
STRING#632361200
STRING#632361200
STRING#632921200
STRING#632121200
STRING#633241200
STRING#641881200
STRING#641921200
STRING#641721200
STRING#641561200
STRING#642201200
STRING#1262441200
STRING#1262441200
STRING#1262281200
STRING#1262721200
STRING#1262641200
GROUP_ICONAAA481200
GROUP_ICON#1481200
VERSION#18081200
MANIFEST#15841200
idlangstring
01031ࢲᄫ狂ⶡ﨡닲ﾏ￿탿獌闍퓚ལ䏄㧎
01033䵓Թ뀬䍏甕왔⽌䗿픵孕䫕ךּ톧婆峗띙䛿珫㘍
01040ᙱ鍮鳇뀫苴ﬔ￿ỿ᳗ࠂ衾㣣淍䀫爟᦮釣ꐸ훠쟱‡ķｩ쒿靿白᨟⁠⤎臸훶
01043
fc e2 c4 14 55 6f 70 eb  ff 24 c7 45 17 63 94 91  |....Uop..$.E.c..|
c6 1a 73 dc 74 1f b9 7e  48 22 8b bf fd ff ff 3c  |..s.t..~H".....<|
32 49 26 9d 7c 12 4a 29                           |2I&.|.J)        |
03082蜼鏚ꎎ꟏ﲠﴯ་䈙슯탪ф顴텆欺䢭￟ꭿ☋뢮
961031
aa 98 fc 86 53 20 ae bb  c9 b3 72 9a b4 8a b0 1b  |....S ....r.....|
ff 8d fe 9e b4 9a 9f dc  35 b4 7f 5b bc 45 5c 7c  |........5..[.E\||
bb b3 21 ff 13 ad ff 5f  e2 d2 a6 ba 47 bc 53 36  |..!...._....G.S6|
15 1c 46 bc 49 2c c0 13  3c 18 6c ff df e0 ff 6b  |..F.I,..<.l....k|
9b 41 ac ac c1 ad e4 ca  ae f4 c0 d4 bc b1 dc 4e  |.A.............N|
b1 3c 4b b4 54 cb b6 ff  bf 70 ab 64 0a 1c cf 78  |.
961033
27 c4 bd c4 ff c2 ed 5f  cc 43 02 c4 f3 b3 a9 f4  |'......_.C......|
be 87 99 e9 b3 24 9f 8b  3f f1 61 df f8 ff ff af  |.....$..?.a.....|
f6 8a 11 4f 3a 50 04 45  3a ff fa 5a d0 fe 3b 49  |...O:P.E:..Z..;I|
55 7a d0 a8 32 4f fc c4  03 bf f1 ff ff cc 08 d6  |Uz..2O..........|
ac d0 5c 02 2b 53 3c 45  9b 94 4d 08 d2 c9 56 74  |..\.+S
961040
54 a7 fd d1 af 7a 6b e1  4b b3 b1 1c 52 69 32 c7  |T....zk.K...Ri2.|
fa 24 2d cf e3 0b b7 97  0f 52 f5 5c 90 75 4f d5  |.$-......R.\.uO.|
d2 79 ac 47 4f 5b fd ff  7f cc 2b fd 0f 3f 7c 48  |.y.GO[....+..?|H|
e9 89 c8 9b bb 1e c9 ac  48 8b 4c 2f a0 b8 f2 ff  |........H.L/....|
97 fa ff 39 d3 02 7d c4  fb 0b 25 20 a1 c4 23 29  |...9..}...% ..#)|
3c c5 c4 94 24 35 09 95  25 3b 55 ff ff 7f 81 cd  |<...$5..%;U.....|
3e 53 a0 59 40 d8 6c c0  98 a0 89 07 5a 45 09 9a  |>S.Y@.l.....ZE..|
40 b6 92 1a 10 0d 51 2f  2c fd ff dd 9c 45 0d dc  |@.....Q/,....E..|
30 5b 6c 3b                                       |0[l;            |
961043
66 9c ac 1a bc c1 67 84  c6 75 5b 37 6c fc ea b4  |f.....g..u[7l...|
6d fb ff ff 04 b1 fc b2  41 28 4b b3 2c cb 2b 4c  |m.......A(K.,.+L|
cb 74 ac 42 b6 54 47 6a  e4 e6 e4 d8 bf 70 f9 ff  |.t.B.TGj.....p..|
9c cb 47 20 47 bb cc 04  bc cc cb 4c 20 83 04 60  |..G G......L ..`|
c7 79 a4 47 7e ff ff ff  ff e4 c7 27 b4 c7 7b e4  |.y.G~......'..{.|
04 ff 28 24 ee 0a c3 9a  53 24 85 59 18 32 cc 29  |..($....S$.Y.2.)|
f3 72 bf f7 03 9f 8c 14  3a ff ff bf f4 8e 2c 3a  |.r......:.....,:|
a3 47 fc e3 b4 4a b4 c4  4b fc bf 4c dc 1f aa 5a  |.G...J..K..L...Z|
c9 2d e9 12 5a d2 2a ff  2f 75 a9 8b              |.-..Z.*./u..    |
963082
cd 0d ce 14 49 a5 5b ba  a7 0a b5 a7 83 3a 01 5f  |....I.[......:._|
fa ff ff fc 2f 00 0b b0  d6 ec aa d7 a4 49 ae fb  |..../........I..|
25 55 cc 49 09 b4 b5 3d  b3 0b 04 ca 0c 6f ff ff  |%U.I...=.....o..|
ff dc 40 0e f3 c0 bc 02  41 10 13 ce b9 23 31 15  |..@.....A....#1.|
ba 3b e4 14 c6 bb 21 c6  bf 03 e7 54 27 df 7e ab  |.;....!....T'.~.|
ff c0 69 a7 65 94 2c c5  73 c6 43 4e ec 04 4b ee  |..i.e.,.s.CN..K.|
98 ef fc ce b4 e2 ff ff  ff 0c cf 2a 24 cf f1 34  |...........*$..4|
cf 6e 44 cf f4 bc 4b bd  74 cf f7 8c 4f 7a 9c cf  |.nD...K.t...Oz..|
9921031
b4 c0 04 d6 e5 34 14 98  e0 b2 c6 09 82 4e bb 13  |.....4.......N..|
05 db 7a c1 b8 5a 58 6b  cd ac eb 77 ff 2f fd a1  |..z..ZXk...w./..|
b8 02 42 69 8e 0b 7c f5  ab 36 01 0b 37 6f 12 36  |..Bi..|..6..7o.6|
9c 50 0c 5d 51 7f 83 bf  d4 4e 73 88 9d 3b 8c 31  |.P.]Q....Ns..;.1|
64 81 48 1b 13 d1 b2 50  50 ff 97 fa 6f dc 2c d1  |d.H....PP...o.,.|
08 47 70 43 09 b0 51 19  d6 00 06 48 0c 62 11 de  |.GpC..Q....H.b..|
26 bf d0 ff ff 84 b8 d5  01 8b 79 b4 a3 13 66 c8  |&.........y...f.|
84 bb d5 61 0e 77 a4 5a  d9 30 03 26 06 6f fd 7f  |...a.w.Z.0.&.o..|
a3 11 20 10 22 dc e3 46  87 ff 3b d6 b0 0d 4e af  |.. ."..F..;...N.|
16 0b 87 ff ff 2f f1 05  3d e6 71 49 44 5c e2 fc  |...../..=.qID\..|
c8 47 3e 48 b7 8e 74 cc  43 e3 0e 7f 38 c5 eb bf  |.G>H..t.C...8...|
f0 37 fa 51 2d 37 8c 83  88 40 07 2c cc f1 f0 b0  |.7.Q-7...@.,....|
03 1e 55 60 87 ff ff df  fe 27 c6 91 0d 6b 68 17  |..U`.....'...kh.|
e4 8c 1e 78 c5 6b 3d f2  3e cc bc 12 03 d1 25 4b  |...x.k=.>.....%K|
74 b1 f5 b2 97 ff ff 7f  fb d2 46 b5              |t.........F.    |
9921033
ff 7f a3 5e 92 af 31 14  68 62 3b 0f 2b 8b b7 0b  |...^..1.hb;.+...|
31 b9 cb 26 ba f8 c1 6f  f5 ff ff f2 26 17 4a b1  |1..&...o....&.J.|
66 eb bb 68 5b 2c c6 72  95 c7 3a bc c2 11 a2 c3  |f..h[,.r..:.....|
0d 41 c0 ff ff ed ff 06  46 18 84 4b 88 bc 6a 08  |.A......F..K..j.|
83 43 02 42 70 84 41 c8  bc 6f 8b 3c 43 f0 c1 ff  |.C.Bp.A..o...|
1e 9c ca 10 30 20 83 2c  bf b4 0e 09 91 ff ff ff  |....0 .,........|
5f 37 28 03 7e 31 03 32  00 83 0c a1 84 4f d0 82  |_7(.~1.2.....O..|
4f d8 17 33 00 10 7f 21  3f 03 11 34 42 3b ff ff  |O..3...!?..4B;..|
ff ff 18 46 c2 b9 9c d3  a9 9d 93 98 47 fb b9 f0  |...F........G...|
d1 98 49 ab 3f f4 51 1f  a4 92 2f 51 d2 bf 94 e1  |..I.?.Q.../Q....|
3f a6 46 6f 54 ff 0b 35  00 ac 12 fe 29 b5 49 54  |?.FoT..5....).IT|
3b 40 af ff 8d fa ff b5  04 34 a0 ac              |;@.......4..    |
9921040
4b a0 ad 63 20 07 94 e0  a0 b0 a3 40 3e a1 b0 65  |K..c ......@>..e|
83 ff 1b ff 62 a6 a9 a8  2b 0e ec 40 22 0b bd 1a  |....b...+..@"...|
36 11 63 9b b9 38 b6 94  2f fd 6f 70 36 14 d8 be  |6.c..8../.op6...|
63 41 16 93 b6 17 2c 3c  8f 27 c2 a1 fd ff b7 f8  |cA....,<.'......|
95 78 5a 3c 25 2c 6f 1b  84 c7 bb 84 d6 1b 42 46  |.xZ<%,o.......BF|
b8 46 cd 7b bd 4b 68 70  6b bc cc 47 78 84 db 11  |.F.{.Khpk..Gx...|
db 46 f6 68 ff ff 9b 35  c6 d6 ab c2 2b 24 84 6d  |.F.h...5....+$.m|
8c 3d d2 cb 84 72 64 c2  42 80 fc ff ff 7f 0b 1f  |.=...rd.B.......|
3c 04 dc bb 47 e6 89 04  4e 08 03 24 fc 33 4d 10  |<...G...N..$.3M.|
34 6b 18 83 3d fc ff 46  2b f0 41 2d 44 10 a8 b9  |4k..=..F+.A-D...|
f5 4d 48 42 7f 0c 34 40  ff ff 4b fd 0c 44 84 b9  |.MHB..4@..K..D..|
39 44 66 43 74 34 11 81  bf ff 48 d3 a4 46 ac bf  |9DfCt4....H..F..|
2d 18 87 1c 8b ff ff ff  89 44 a5 da b4 fa b2 2f  |-........D...../|
4f 63 ba 97 f9 bf a7 db  44 58 9a 3a ac a2 25 04  |Oc......DX.:..%.|
1c 09 6f 74 81 7f 2a 45  57 e3 a5 b1 7a af 6c 30  |..ot..*EW...z.l0|
b6 2b b5 12 ff ff ff ff  bb 0a 4c a6 58 bc 30 0c  |.+........L.X.0.|
a3 45 5f 03 36 46 71 bb  bd 12 31 12 ec 45 13 34  |.E_.6Fq...1..E.4|
31 65 d3 3b 15 9b a1 16  0b fd ff ff 74 c1 c6 02  |1e.;........t...|
1c 19 fb 21                                       |...!            |
9921043
cd ff ff ff ff 70 52 db  e4 a6 a6 36 05 98 17 1e  |.....pR....6....|
96 9c 89 4d 15 0e 59 d5  d8 75 b2 d3 9d 91 2d 8d  |...M..Y..u....-.|
69 e4 29 88 40 5b 97 f8  0b ad 17 b8 48 c4 22 1e  |i.).@[......H.".|
b6 06 30 5e 2d 5f ea ff  ff 48 c5 29 ce 60 08 46  |..0^-_...H.).`.F|
60 43 c9 24 ff 00 72 90  19 c0 81 1d 72 12 3f 76  |`C.$..r.....r.?v|
32 bf 71 83 ff 07 9a e0  06 72 80 a1 10 51 e6 16  |2.q......r...Q..|
2c 88 2a 3f 79 07 e9 2f  fc ff ff 50 c7 08 de e5  |,.*?y../...P....|
64 34 a7 b9 ca 60 80 85  99 d5 8c e6 e6 e2 e3 1d  |d4...`..........|
ea 6e 98 19 50 ff ff 25  fe 80 1d 74 21 09 9e 40  |.n..P..%...t!..@|
3b 98 e7 3c ee 1e c8 bb  d2 6b 90 4d 17 f6 48 48  |;..<.....k.M..HH|
62 2f f4 7f eb 48 a7 1b  4d 87 bc f7 d3 a0 0a 95  |b/...H..M.......|
63 1e fb 7d 43 a1 be e0  1b ff ff a4 8a 72 94 f1  |c..}C........r..|
6b 2a 92 5a 66 bf a8 4a  95 20 fd 02 ce b8 84 d5  |k*.Zf..J. ......|
ff ff ff 37                                       |...7            |
9923082
d1 fa e8 32 52 76 9a 65  4f 85 2a fe f4 47 33 52  |...2Rv.eO.*..G3R|
57 d5 d4 b3 cc ea 00 57  bd df e0 ff ff 6a 03 ef  |W......W.....j..|
12 c1 46 8b 35 4d 66 4d  6b 9f 18 73 c2 55 cb f5  |..F.5MfMk..s.U..|
3a c9 35 67 fa ff ff ff  ff fa d7 5e 91 66 a3 a8  |:.5g.......^.f..|
99 16 6b 5e 73 52 6d 7b  1b 5e 4c 5c 0b 70 2e 9b  |..k^sRm{.^L\.p..|
d9 86 c1 1b b4 1d 73 43  53 ff 37 be f1 ac ea c5  |......sCS.7.....|
98 86 ac 62 45 63 e5 51  db ab 09 84 b7 1b 41 88  |...bEc.Q......A.|
47 fb 52 6f f0 64 22 1c  9c a9 83 38 e1 c6 30 e2  |G.Ro.d"....8..0.|
db 8e e7 ff ff bf 55 a1  c0 89 37 b0 21 bb 85 28  |......U...7.!..(|
84 e7 0f a1 09 36 e8 74  13 85 b8 04 21 85 ff ff  |.....6.t....!...|
ff 06 21 70 4c 64 e2 f3  9b 48 43 19 26 c1 09 4e  |..!pLd...HC.&..N|
88 c1 1c e8 78 83 36 b6  ff 91 14 d0 42 ff ff b4  |....x.6.....B...|
43 f8 c3 6f c7 39 ca d1  86 6c a4 61 12 db 60 27  |C..o.9...l.a..`'|
7e fa ff 5b bf 3a 77 bc  a3 1c 68 99 25 de 30 86  |~..[.:w...h.%.0.|
49 b0 41 f8 ef 38 45 c8  ab f0 ff ff ff 5f 4b 68  |I.A..8E......_Kh|
42 e6 00 eb ee a0 c1 6b  e8 f1 5a 28 7b 6a 98 64  |B......k..Z({j.d|
c4 d0 6b b1 8b 61 8c 45  e4 73 ef ff 97 f8 ff 7b  |..k..a.E.s.....{|
31 7d f4 a5 32 55 65 9e  fe 74 d3 55 5e fe 72 a5  |1}..2Ue..t.U^.r.|
84 b0 2a 86 a0 3a 9e 77  f4 ff ff e9 99 ab 63 35  |..*..:.w......c5|
5d 7a 35 b2 7a 13 b3 ba  09 61 02 bb 9f d0 93 03  |]z5.z....a......|
b2 9b 2b db                                       |..+.            |
10081031
b7 dd 25 2f 99 8a db dc  3e 15 0b bb 8d 4a 31 ff  |..%/....>....J1.|
ff ff ff a6 62 05 2a f6  a6 aa be 59 06 14 7f 7b  |....b.*....Y...{|
95 e0 64 35 ab d0 d4 ca  56 b8 d2 d5 e2 62 a3 88  |..d5....V....b..|
21 24 91 ff 97 fe 5b 79  40 c1 3b d8 e0 08 2c d4  |!$....[y@.;...,.|
07 15 f8 41 12 93 78 ae  08 44 e1 56 7f a3 8d 38  |...A..x..D.V...8|
31 c2 69 41 0e 2d 84 21  0e 33 6f f4 ff ff 9d 05  |1.iA.-.!.3o.....|
90 a8 c4 02 fc 40 3b 2e  e0 62 1b dd 38 84 06 40  |.....@;..b..8..@|
a0 a1 80 c2 1b 85 ff ff  ff ad c8 81 02 b0 c0 1e  |................|
34 38 80 0c b8 68 2f 14  a4 e8 0b 64 f0 97 f3 0a  |48...h/....d....|
04 bd e6 ff ff ff ff 08  61 09 8b 90 84 2a 04 06  |........a....*..|
87 61 68 43 1c fa d0 c4  46 64 b1 f0 ad 68 7c 2f  |.ahC....Fd...h|/|
32 1f c8 d2 27 32 92 de  ea 4b fc 99              |2...'2...K..    |
10081033
6c 60 89 54 24 23 1b f9  c8 48 aa 01 62 94 9c df  |l`.T$#...H..b...|
68 b5 f4 58 c5 be 77 f6  69 ec f7 d1 f9 3e a9 ff  |h..X..w.i....>..|
ff ed ff 23 f6 f5 e8 64  28 2b 25 fd 5c d6 e7 c9  |...#...d(+%.\...|
6c 66 35 c3 d2 cd 00 f8  90 9d 81 a9 22 b8 e4 ff  |lf5........."...|
25 7e e1 6a 48 46 02 a1  a1 a4 68 6d ed 30 99 36  |%~.jHF....hm.0.6|
4c 3b f4 a4 98 75 e1 52  ff 41 99 5a d5 90 d2 0c  |L;...u.R.A.Z....|
65 f0 6b 1c 91 33 c3 ff  c6 ff 2f cc 45 95 ad 9a  |e.k..3..../.E...|
91 f2 05 36 29 95 42 bb  e8 05 72 f3 54 dd c6 49  |...6).B...r.T..I|
2a bf c5 ff ff 1a 9e 13  9d 95 b9 cc 0e 7b e8 c3  |*............{..|
77 c2 d3 ff 34 b7 4a 07  14 c1 8b 59 f0 4b fd 2f  |w...4.J....Y.K./|
f1 82 06 04 8d 71 0a b0  81 06 ec e0 14 9f 28 c9  |.....q........(.|
e2 ff ff 06 ff 00 05 82  42 c0 b3 9f 25 e7 20 71  |........B...%. q|
10081040
2c d5 7e b6 01 1b d8 18  25 0c 11 07 5c bb d4 ff  |,.~.....%...\...|
12 c2 b5 0e e8 ec 06 5a  7b 08 12 da b6 ab 5b ff  |.......Z{.....[.|
2f f1 7f 71 65 2b 81 e0  0e d7 b8 be e5 f1 d2 61  |/..qe+.........a|
8f 14 38 60 b8 a0 e5 41  17 1b fd ff ff 42 51 05  |..8`...A.....BQ.|
30 bc b4 79 03 92 e9 18  08 66 b0 45 2a cc 91 d8  |0..y.....f.E*...|
cb de f6 09 d3 ff ff ff  ff ef 81 2f 63 43 2d 5f  |.........../cC-_|
27 69 74 d4 91 91 0c 48  a3 94 df fc 8c 74 4a 54  |'it....H.....tJT|
e2 6f 4a 53 bd d2 2b 61  79 fd 6f f0 ff d5 5a 6e  |.oJS..+ay.o...Zn|
b5 ab 03 e6 c8 57 c3 2a  d6 cb ad 81 33 09 a6 30  |.....W.*....3..0|
d1 6a 87 a5 fe ff bf 75  a5 82 17 cc a0 5c 9d b2  |.j.....u.....\..|
b5 a9 50 c5 83 1f 8c 66  5e a7 69 b6              |..P....f^.i.    |
10081043
0b 50 21 0a 03 2c d8 fd  f1 16 2f fc ff 73 19 d8  |.P!..,..../..s..|
27 95 33 ca e0 af 3f 00  03 1c 70 4b 0b 6e 90 33  |'.3...?...pK.n.3|
bf d1 e8 ff 25 64 b8 61  87 33 2c 23 62 0f 86 55  |....%d.a.3,#b..U|
8c 53 dc 98 63 fe ff ff  ff 37 3c 06 79 1c 1b 6f  |.S..c....7<.y..o|
c4 71 c7 1e 4b e6 42 c8  51 52 b6 62 65 25 5d 86  |.q..K.B.QR.be%].|
12 66 55 66 16 c8 20 9b  ff ff 5b 05 91 78 9d ed  |.fUf.. ...[..x..|
2c 4c 18 01 5a 01 7d 26  34 93 10 8d 25 6e 4a ff  |,L..Z.}&4...%nJ.|
ff a5 ff 1a 9c 6a 82 13  3a d9 09 4f 61 1a d5 fa  |.....j..:..Oa...|
a4 94 3f 35 23 50 83 ea  9a d7 c0 16 ff ff ff 0b  |..?5#P..........|
ff b6 b1 91 cd 51 67 83  54 1e c6 36              |.....Qg.T..6    |
10083082
ec 7d 42 92 1f 25 e7 a4  fb 45 18 f9 d3 df ff 05  |.}B..%...E......|
fe ad 52 a6 90 ff 35 04  22 5e 81 98 0c 78 cb 32  |..R...5."^...x.2|
21 50 4d ff 37 f8 ff 29  59 20 03 65 42 93 a5 cd  |!PM.7..)Y .eB...|
a9 4e 76 82 2e 2a 68 41  a3 5c 2d 83 1b 94 4a ff  |.Nv..*hA.\-...J.|
ff ff ff 07 bf 86 a8 44  8d 6d 2c 66 79 14 da da  |.......D.m,fy...|
a2 b6 b5 ff b5 ad 2e 2a  64 21 5f 38 d5 29 ba 11  |.......*d!_8.)..|
26 86 a4 1b fc 56 e9 2a  95 de 4f 1d ea 90 87 81  |&....V.*..O.....|
13 8e 40 ff bf d1 ff 13  c4 c3 21 4e 10 50 98 c5  |..@.......!N.P..|
2d 6d 03 03 90 c0 8a 1b  60 62 2a 28 81 09 2c ff  |-m......`b*(..,.|
6f f4 ff e0 a2 03 13 70  40 1b 39 20 81 11 18 c7  |o......p@.9 ....|
5c f4 22 39 3e 01 89 38  f4 42 0e fa ff ff ff 2f  |\."9>..8.B...../|
c8 e7 3e d3 d8 81 03 30  c0 8e 76 8c 23 05 4a b0  |..>....0..v.#.J.|
d1 24 6e a0 00 2d e8 47  1c 78 c3 c5 ff ff ff 37  |.$n..-.G.x.....7|
59 60 03 33 72 43 1a fa  f5 1f 43 0a              |Y`.3rC....C.    |
20001031
04 b3 75 0f cf 3f c6 f6  d8 36 fe 6f c0 a9 c7 0d  |..u..?...6.o....|
58 10 bc 95 1d 68 51 14  12 11 fd eb ff ff 5f 78  |X....hQ......._x|
28 2c f6 3e db e7 7f ae  ef 25 67 d3 10 4e a5 55  |(,.>.....%g..N.U|
0a cd ab fd 95 be c7 05  ff ff ff 7f 1c db f9 11  |................|
0a 8f 4e db 15 d5 58 5b  4b a6 4b ed ad df 8a be  |..N...X[K.K.....|
99 6e 62 27 56 6b 16 7f  f1 2c ff ff ff d2 ae 7d  |.nb'Vk...,.....}|
27 ce a0 23 11 6c 5b bf  77 70 ea 21 1f b7 23 ff  |'..#.l[.wp.!..#.|
30 31 51 f2 ae 0e c0 b8  ff d2 ff ff 13 eb 7b eb  |01Q...........{.|
3b 51 41 eb 85 68 eb 43  be 4d 0a ec a8 48 2e d3  |;QA..h.C.M...H..|
f3 dd bf 5e 9a 0a 5f f8  ff f6 5d 03 ed 35 b3 c0  |...^.._...]..5..|
02 67 8f c2 50 e0 5e 32  d0 ec 2a e4 70 f0 0d b3  |.g..P.^2..*.p...|
ff 7f 83 ff e9 5e 1e ab  02 c4 5f fc 3f 3b 07 20  |.....^...._.?;. |
fb e8 e5 03 63 9e fb cb  4f c3 36 1c 0d fe 5f e2  |....c...O.6..._.|
fd 30 88 cb a0 ee 17 a0  fc e8 f5 9a 95 9b 02 ff  |.0..............|
5f e0 b6 6d ea 14 02 ee  21 bf 5a 6c b0 e0 f9 fe  |_..m....!.Zl....|
ff 2f f4 ff                                       |./..            |
20001033
01 ff 8b 7b 24 50 70 e0  ef ed 1f 0c 22 37 fd ff  |...{$Pp....."7..|
97 a5 f3 cd 42 82 df 40  16 48 e0 57 4f 5e be 74  |....B..@.H.WO^.t|
b0 ae 8e db 47 01 fe ff  bf c5 20 1e 4c f9 3d a2  |....G..... .L.=.|
c2 01 f0 e1 c5 4f 78 c0  20 ca 8d 04 26 92 03 89  |.....Ox. ...&...|
e0 bf f0 6f 35 2d f1 70  be cb f8 1d 3c 02 b6 94  |...o5-.p....<...|
d4 98 89 d4 ff ff ff ff  3f 92 18 31 34 d1 44 12  |........?..14.D.|
02 cd 30 63 8c 4d 36 99  64 c1 05 c9 60 e3 c1 07  |..0c.M6.d...`...|
d3 48 03 0c 0a 29 54 e3  df f8 ff ff c2 32 32 ec  |.H...)T......22.|
a4 13 4a 28 59 63 8d 33  42 fc e4 93 2f 4a 6c a3  |..J(Yc.3B.../Jl.|
0d e5 20 67 45 37 ff ff  ff ff 5a 6c b1 0a 18 ab  |.. gE7....Zl....|
18 67 c6 19 b7 d8 22 14  1c 43 f1 c4 93 2e ba e0  |.g...."..C......|
c2 c7 51 82 0c d2 0a 22  a9 30 ff ff ff ff 92 8a  |..Q....".0......|
52 92 7c a2 94 27 9a 7c  c2 09 27 54 91 72 20 2a  |R.|..'.|..'T.r *|
0d 2a 48 16 85 b0 6c c8  21 87 22 f2 c7 9f ff 25  |.*H...l.!."....%|
fe ff 8a 28 0a 69 4c 32  cb f4 68 24 93 4e 4a 49  |...(.iL2..h$.NJI|
25 96 82 69                                       |%..i            |
20001040
a6 9a 6c ca 03 9a bf d0  7f e9 9c 76 ea 90 a0 84  |..l........v....|
22 aa a8 a3 e6 60 c3 a7  a2 12 94 2a ff f6 ff ff  |"....`.....*....|
ab 8e c9 4a 2b af ba 0a  ff 2b 2c b2 ca 42 4b ad  |...J+....+,..BK.|
b6 dc 82 4b 6d 74 b9 0b  2f 5b f8 ea bf d0 4b ff  |...Kmt../[....K.|
8b 16 bf fe 1a 4c 30 c3  13 2c b1 56 1b 0c 32 c9  |.....L0..,.V..2.|
22 a3 e3 c6 ff ff 8c 94  cb 30 db 8c 33 cf 3e 43  |"........0..3.>C|
44 b4 d2 00 39 2d b5 40  b8 ed b5 14 e8 5b 7f 69  |D...9-.@.....[.i|
f8 8e 15 6e cb 47 9d 28  32 60 82 5f 93 ff bf f1  |...n.G.(2`._....|
5f 40 82 11 ae 90 e3 b8  64 7f 66 80 7d e0 c9 06  |_@......d.f.}...|
0c 4d b8 89 c3 06 d9 92  b7 2f f1 ff 55 01 3b ed  |.M......./..U.;.|
16 89 76 5c 72 7f 90 80  21 72 b8 c0 d7 09 88 80  |..v\r...!r......|
2f fd 2f ff 81 1f 3a a8  20 85 68 25 05 79 d6 e8  |/./...:. .h%.y..|
84 0c 31 fc 03 f5 02 25  31 ff ff 7f fb 10 41 05  |..1....%1.....A.|
19 9c 0e 07 21 64 63 c2  0a 2f c4 50 43 0e 3d 04  |....!dc../.PC.=.|
31 c4 33 48                                       |1.3H            |
20001043
cf cf 44 dd 13 5a a1 06  dc fc 4c e4 da 16 91 47  |..D..Z....L....G|
85 ff 6f f0 fe a8 05 8b  a4 86 d0 78 6d c9 27 ea  |..o........xm.'.|
01 7f 76 05 0d 20 ff b7  b7 5a 0b d5 e7 02 10 b7  |..v.. ...Z......|
3e d0 02 e4 00 0b 2d da  70 3f fc f6 bf f0 e0 02  |>.....-.p?......|
d6 7e fd 4e 02 50 f0 67  3f 30 e6 35 05 af 09 b3  |.~.N.P.g?0.5....|
32 8b e2 8d df 1a 3b 1d  dc e0 5f 6f 1e 99 f8 02  |2.....;..._o....|
0d ff 7f a1 dd 90 28 d0  3a 65 34 d0 70 23 40 9d  |......(.:e4.p#@.|
0a 4e 06 62 50 b4 47 68  ff ff ff ff d3 c9 aa ac  |.N.bP.Gh........|
85 3e e1 57 9a 50 ad fd  d3 5b 6c 61 f7 51 b5 15  |.>.W.P...[la.Q..|
34 51 1e 3e be 64 5c be  96 4e 42 4e ff ff ff ff  |4Q.>.d\..NBN....|
1d 22 6b bc e9 2c 94 e2  2a 9e 7d fa 22 a7 e9 1c  |."k..,..*.}."...|
98 31 4e 98 45 42 e3 e4  57 7e aa 8e e3 8c 09 c8  |.1N.EB..W~......|
e3 ff ff ff 43 06 a1 11  ea e3 09 39 32 f3 57 7f  |....C......92.W.|
89 8a c0 c3 a5 eb dc ff  dd eb 91 2c a2 c0 5e 02  |...........,..^.|
f0 0d 0a 7c 4b 03 df f5  60 c3 f6 90 02 13 ff ff  |...|K...`.......|
0b bf 33 82 36 bb 23 70  30 80 ab b3 19 68 04 90  |..3.6.#p0....h..|
bb 4c 8f ec 41 bf f3 63  2e 78 b4 b1 2d f0 de a5  |.L..A..c.x..-...|
20003082
4f dd c9 ef cc ec ef 55  6a a5 56 9c 21 2e 96 5c  |O......Uj.V.!..\|
4a 96 df 4b 6a 7d 2f 8e  0b ff ff ff d8 3a c6 0d  |J..Kj}/......:..|
ff 96 88 03 10 45 04 0e  24 52 90 88 2c 84 ab 14  |.....E..$R..,...|
0a 60 28 20 46 00 ff ff  37 f8 fe 22 fe a3 f8 a7  |.`( F...7.."....|
45 00 19 35 6e e4 d8 d1  e3 47 90 1d fd f8 99 56  |E..5n....G.....V|
b2 24 fb ff ff ff 1f 94  7c fa f4 d1 d3 b2 e5 9e  |.$......|.......|
68 31 a3 49 93 86 27 cf  4d 68 76 74 ea bc 73 e7  |h1.I..'.Mhvt..s.|
d9 b3 3a d1 c5 7f a1 7f  d0 21 ea cc a8 b3 39 13  |..:......!....9.|
2d 65 ba cc e9 32 66 51  ff 7f 8b bf f8 43 56 f5  |-e...2fQ.....CV.|
d8 55 63 3b 19 23 d6 95  d8 30 b0 60 85 09 0b 16  |.Uc;.#...0.`....|
0c d8 ff 56 bf c0 59 60  0c f9 62 cb 76 d7 8f 71  |...V..Y`..b.v..q|
73 e9 a2 7b cb ee ff 5f  e2 ff 2d 5b 79 6b ed dd  |s..{..._..-[yk..|
4b 6b d6 df 59 7a 0f 7e  55 f8 95 2b c4 88 5b 2d  |Kk..Yz.~U..+..[-|
66 d5 ff 17 e8 ff b8 31  2a 53 91 25 93 a2 2c ca  |f......1*S.%..,.|
b2 55 34 6f fe d3 19 d1  e7 44 a1 13 0b fd 37 fe  |.U4o.....D....7.|
29 22 ad 08 50 20 d4 a2  09 12 d5 ad 98 b7 1c 16  |)"..P ..........|
7a a1 f8 c2 5b fc ed 63                           |z...[..c        |
module_namehintordfunction_name
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLVirtualProtect
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLVirtualFree
KERNEL32.DLLExitProcess
MSVBVM60.DLL581

StringTable 040904B0

CompanyNameHackMew Productions
FileDescriptionA program to edit the header in Advance-ROMs.
LegalCopyrightCopyright © 2007 HackMew
ProductNameROM Header Editor Advance
FileVersion1.00.0001
ProductVersion1.00.0001
InternalNameRHEA
OriginalFilenameRHEA.exe

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
060928EXE09/29/2007 17:59:56#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER
[!] string size(85190) > stringtable size(40). truncated to 38
[!] string size(10286) > stringtable size(44). truncated to 42
[!] string size(11368) > stringtable size(64). truncated to 62
[!] string size(116216) > stringtable size(40). truncated to 38
[!] cannot convert "\xC4\x14Uop\xEB\xFF$\xC7E\x17c\x94\x91\xC6\x1A"... to UTF-16
[!] string size(85970) > stringtable size(44). truncated to 42
[!] string size(78164) > stringtable size(152). truncated to 150
[!] cannot convert "\xFC\x86S \xAE\xBB\xC9\xB3r\x9A\xB4\x8A\xB0\e\xFF\x8D"... to UTF-16
[!] string size(100430) > stringtable size(132). truncated to 130
[!] cannot convert "\xBD\xC4\xFF\xC2\xED_\xCCC\x02\xC4\xF3\xB3\xA9\xF4\xBE\x87"... to UTF-16
[!] string size(85672) > stringtable size(132). truncated to 130
[!] cannot convert "\xFD\xD1\xAFzk\xE1K\xB3\xB1\x1CRi2\xC7\xFA$"... to UTF-16
[!] string size(80076) > stringtable size(140). truncated to 138
[!] cannot convert "\xAC\x1A\xBC\xC1g\x84\xC6u[7l\xFC\xEA\xB4m\xFB"... to UTF-16
[!] string size(7066) > stringtable size(128). truncated to 126
[!] cannot convert "\xCE\x14I\xA5[\xBA\xA7\n\xB5\xA7\x83:\x01_\xFA\xFF"... to UTF-16
[!] string size(98664) > stringtable size(236). truncated to 234
[!] cannot convert "\x04\xD6\xE54\x14\x98\xE0\xB2\xC6\t\x82N\xBB\x13\x05\xDB"... to UTF-16
[!] string size(65534) > stringtable size(236). truncated to 234
[!] cannot convert "\xA3^\x92\xAF1\x14hb;\x0F+\x8B\xB7\v1\xB9"... to UTF-16
[!] string size(82070) > stringtable size(292). truncated to 290
[!] cannot convert "\xADc \a\x94\xE0\xA0\xB0\xA3@>\xA1\xB0e\x83\xFF"... to UTF-16
[!] string size(130970) > stringtable size(212). truncated to 210
[!] cannot convert "\xFF\xFF\xFFpR\xDB\xE4\xA6\xA66\x05\x98\x17\x1E\x96\x9C"... to UTF-16
[!] string size(128418) > stringtable size(324). truncated to 322
[!] cannot convert "\xE82Rv\x9AeO\x85*\xFE\xF4G3RW\xD5"... to UTF-16
[!] string size(113518) > stringtable size(188). truncated to 186
[!] cannot convert "%/\x99\x8A\xDB\xDC>\x15\v\xBB\x8DJ1\xFF\xFF\xFF"... to UTF-16
[!] string size(49368) > stringtable size(192). truncated to 190
[!] cannot convert "\x89T$#\e\xF9\xC8H\xAA\x01b\x94\x9C\xDFh\xB5"... to UTF-16
[!] string size(109144) > stringtable size(172). truncated to 170
[!] cannot convert "~\xB6\x01\e\xD8\x18%\f\x11\a\\\xBB\xD4\xFF\x12\xC2"... to UTF-16
[!] string size(40982) > stringtable size(156). truncated to 154
[!] cannot convert "!\n\x03,\xD8\xFD\xF1\x16/\xFC\xFFs\x19\xD8'\x95"... to UTF-16
[!] string size(64472) > stringtable size(220). truncated to 218
[!] cannot convert "B\x92\x1F%\xE7\xA4\xFBE\x18\xF9\xD3\xDF\xFF\x05\xFE\xAD"... to UTF-16
[!] string size(91656) > stringtable size(244). truncated to 242
[!] cannot convert "u\x0F\xCF?\xC6\xF6\xD86\xFEo\xC0\xA9\xC7\rX\x10"... to UTF-16
[!] string size(130562) > stringtable size(244). truncated to 242
[!] cannot convert "\x8B{$Pp\xE0\xEF\xED\x1F\f\"7\xFD\xFF\x97\xA5"... to UTF-16
[!] string size(79180) > stringtable size(228). truncated to 226
[!] cannot convert "l\xCA\x03\x9A\xBF\xD0\x7F\xE9\x9Cv\xEA\x90\xA0\x84\"\xAA"... to UTF-16
[!] string size(106398) > stringtable size(272). truncated to 270
[!] cannot convert "D\xDD\x13Z\xA1\x06\xDC\xFCL\xE4\xDA\x16\x91G\x85\xFF"... to UTF-16
[!] string size(113310) > stringtable size(264). truncated to 262
[!] cannot convert "\xC9\xEF\xCC\xEC\xEFUj\xA5V\x9C!.\x96\\J\x96"... to UTF-16
[!] refusing to read ICODIRENTRY beyond resource size