0bc2a27d5645c4046358faf33558be81

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2013-Feb-10 03:04:13
Detected languages English - United States
Russian - Russia
CompanyName
FileDescription тулза в помощь модератору ТО
FileVersion 2.3.3.0
InternalName
LegalCopyright (c) deda
LegalTrademarks
OriginalFilename
ProductName TOM :: TankiOnline Moderator tool ::
ProductVersion 2.3.0.0
Comments

Plugin Output

Info Matching compiler(s): Borland C++ DLL
Borland C++ for Win32 1999
Suspicious PEiD Signature: UPX V2.00-V2.90 -> Markus Oberhumer & Laszlo Molnar & John Reiser
UPX v2.0 -> Markus, Laszlo & Reiser (h)
UPX -> www.upx.sourceforge.net
UPX V2.00-V2.90 -> Markus Oberhumer & Laszlo Molnar & John Reiser
Info Cryptographic algorithms detected in the binary: Uses constants related to MD5
Suspicious The PE is packed with UPX Unusual section name found: UPX0
Section UPX0 is both writable and executable.
Unusual section name found: UPX1
Section UPX1 is both writable and executable.
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
Info The PE's resources present abnormal characteristics. Resource EXCEPT is possibly compressed or encrypted.
Resource 1 is possibly compressed or encrypted.
Resource 2 is possibly compressed or encrypted.
Resource 3 is possibly compressed or encrypted.
Resource 4 is possibly compressed or encrypted.
Resource 5 is possibly compressed or encrypted.
Resource 6 is possibly compressed or encrypted.
Resource 7 is possibly compressed or encrypted.
Resource MEIBIG is possibly compressed or encrypted.
Resource MEICANTCONTINUE is possibly compressed or encrypted.
Resource MEICLOSE is possibly compressed or encrypted.
Resource MEICONTINUE is possibly compressed or encrypted.
Resource MEIPLWAIT is possibly compressed or encrypted.
Resource MEIPRINT is possibly compressed or encrypted.
Resource MEIRESTART is possibly compressed or encrypted.
Resource MEISAVE is possibly compressed or encrypted.
Resource MEISEND is possibly compressed or encrypted.
Resource MEISEND32 is possibly compressed or encrypted.
Resource MEISHOW is possibly compressed or encrypted.
Resource 4064 is possibly compressed or encrypted.
Resource 4065 is possibly compressed or encrypted.
Resource 4066 is possibly compressed or encrypted.
Resource 4067 is possibly compressed or encrypted.
Resource 4068 is possibly compressed or encrypted.
Resource 4069 is possibly compressed or encrypted.
Resource 4070 is possibly compressed or encrypted.
Resource 4071 is possibly compressed or encrypted.
Resource 4072 is possibly compressed or encrypted.
Resource 4073 is possibly compressed or encrypted.
Resource 4074 is possibly compressed or encrypted.
Resource 4075 is possibly compressed or encrypted.
Resource 4076 is possibly compressed or encrypted.
Resource 4077 is possibly compressed or encrypted.
Resource 4078 is possibly compressed or encrypted.
Resource 4079 is possibly compressed or encrypted.
Resource 4080 is possibly compressed or encrypted.
Resource 4082 is possibly compressed or encrypted.
Resource 4083 is possibly compressed or encrypted.
Resource 4084 is possibly compressed or encrypted.
Resource 4085 is possibly compressed or encrypted.
Resource 4086 is possibly compressed or encrypted.
Resource 4087 is possibly compressed or encrypted.
Resource 4088 is possibly compressed or encrypted.
Resource 4089 is possibly compressed or encrypted.
Resource 4090 is possibly compressed or encrypted.
Resource 4091 is possibly compressed or encrypted.
Resource 4092 is possibly compressed or encrypted.
Resource 4093 is possibly compressed or encrypted.
Resource 4094 is possibly compressed or encrypted.
Resource 4095 is possibly compressed or encrypted.
Resource 4096 is possibly compressed or encrypted.
Resource TFRMBANBATTLE is possibly compressed or encrypted.
Resource TFRMBANBATTLEINPUTNICK is possibly compressed or encrypted.
Resource TFRMCLICKER is possibly compressed or encrypted.
Resource TFRMIMAGEVIEW is possibly compressed or encrypted.
Resource TFRMMAIN is possibly compressed or encrypted.
Resource TFRMNOTIFY is possibly compressed or encrypted.
Resource TFRMSELECTSCREENRGN is possibly compressed or encrypted.
Resource TMADEXCEPT is possibly compressed or encrypted.
Resource TMECONTACTFORM is possibly compressed or encrypted.
Resource TMEDETAILSFORM is possibly compressed or encrypted.
Resource TMESCRSHOTFORM is possibly compressed or encrypted.
The binary may have been compiled on a machine in the UTC+4 timezone.
Suspicious VirusTotal score: 1/58 (Scanned on 2017-02-22 22:06:31) Endgame: malicious (moderate confidence)

Hashes

MD5 0bc2a27d5645c4046358faf33558be81
SHA1 852bdd3ca1258eb422334f5fc2cf6b43b033f2f1
SHA256 375621de7beb264269f30a34daac795fd9fd90c42b4d372497639298859b77bd
SHA3 ee48aeb2442fd337f54c7b07a22ffb05e3c5d93e52583a928ed640f33aef0ce5
SSDeep 24576:8TGPnJ4Xt5Kx4H6naWVt2PWp/ntVVRYZHsQX6ZwC7DqidsepOl:Vpx4H1G/nXjIHieC7DEepq
Imports Hash 4b4a1e1e83e0fd42f6bc05a1b0cc8b6d

DOS Header

e_magic MZ
e_cblp 0x50
e_cp 0x2
e_crlc 0
e_cparhdr 0x4
e_minalloc 0xf
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0x1a
e_oemid 0
e_oeminfo 0
e_lfanew 0x200

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 3
TimeDateStamp 2013-Feb-10 03:04:13
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 5.0
SizeOfCode 0x100000
SizeOfInitializedData 0x9000
SizeOfUninitializedData 0x213000
AddressOfEntryPoint 0x00313150 (Section: UPX1)
BaseOfCode 0x214000
BaseOfData 0x314000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 5.0
Win32VersionValue 0
SizeOfImage 0x31d000
SizeOfHeaders 0x1000
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x2000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

UPX0

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x213000
VirtualAddress 0x1000
SizeOfRawData 0
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1

MD5 49e1228c09f2689073c22b5aba5715c9
SHA1 7a9e44e534c16a43fe4ca9eb07b1af990ec0acde
SHA256 929fbbd9a162f59d9e39d0494943a5f4669e162169d7ed5efbc4b21de3a51c83
SHA3 d8850a4dae28f614ac55595d5d48076e438eb65ade00951ec87fdfee244736cf
VirtualSize 0x100000
VirtualAddress 0x214000
SizeOfRawData 0xff600
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.92988

.rsrc

MD5 a159344fca16e121b30ab76ff7207e66
SHA1 bfe90d1f5d05ed955aa5d13b45c377a6c114f166
SHA256 a8b013dd9626f2f6103e228eebcd076f01e397b7d3db9ee9cbf17549c691dafc
SHA3 ce51bf68d53f5bc6d2370d732c237e8007a7ac71087b5a1247065dd532c04bf1
VirtualSize 0x9000
VirtualAddress 0x314000
SizeOfRawData 0x8400
PointerToRawData 0xffa00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 5.28969

Imports

KERNEL32.DLL LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
ADVAPI32.DLL FreeSid
COMCTL32.DLL #17
COMDLG32.DLL PrintDlgW
DWMAPI.DLL (EMPTY)
GDI32.DLL Arc
MSIMG32.DLL AlphaBlend
OLE32.DLL IsEqualGUID
OLEAUT32.DLL #8
SHELL32.DLL SHGetMalloc
USER32.DLL GetDC
UXTHEME.DLL (EMPTY)
VERSION.DLL VerQueryValueA
WINDOWSCODECS.DLL (EMPTY)
WINMM.DLL timeGetTime
WINSPOOL.DRV #203
WSOCK32.DLL #2

Delayed Imports

CALIBRATE

Type MAD
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54145
MD5 36333be52d2f74d65ed9723be83c0899
SHA1 4701679ceda562f0660a2669ba6ffef8425bdf3e
SHA256 8cc82f3a811fee6e6078a12c973078844741769aa59a14b661c245242b60f6e9
SHA3 558afb735e98df5a947ba55552abb0999d54ec418acb72ab68130aa3e908b454

EXCEPT

Type MAD
Language UNKNOWN
Codepage UNKNOWN
Size 0x17aa8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.92201
MD5 909555eb03863cfdd1eb82117a108c91
SHA1 6f7ba0dfd5bc75fa1e798e388cdfbdcf1fc11a6e
SHA256 ca528aaa0f3a7837d2b1a9aa286abc13bd71494f983f706874d2a4e5916d4f44
SHA3 95cc883b032a2af6f0618b722c1940cd316b2b8b3852f74c914ab8f7998d305b

1

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.19539
MD5 6736765f4b705fc9296b71ac43914249
SHA1 d165b6f47eb3be1a858bf1fdc0dc06a25c33db5e
SHA256 bb78e7a89649981fa95ff120d500b35668e4ed989b569465395f7995a21eeae6
SHA3 fba2005656cc4bc81d034e4144a3949a47e717ef0498d640c1a93366da3ba774

2

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.27266
MD5 0fd89332e6ef35d73ba4be87d80073f3
SHA1 1570709668a8bbbdd7bb463f98d848451c952a8e
SHA256 d7d77156f8866025498f7dcafc091fffe67d1c9b113f67deba46403df2d88d5c
SHA3 c75f9ef6eca5eedf4401b4fdb9babf46561fa9487e9b72fbd3f774f4035d13a9

3

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.27788
MD5 6407fda9ebe4295a0cb0052ffaf7c61e
SHA1 f9dedf39e871605ec43129cf3d05bbb1d5dd7304
SHA256 8c939d9e1cf23ba89935cc420a33b0fd925bd95df016d6fd957af7f72f58e53e
SHA3 40d6ffe7a471c08f074ad71304bd91a8cdfeeb59cd4db78be5ea63c3bf76a864

4

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.20686
MD5 179191e4cacc9b70397f9c15df338ec1
SHA1 31f556f79d64489eecd539a6951d9f4a18a14601
SHA256 c98a314d9d3d08a432808ad36f65bf26bc7b041bcf7866adbc04f8a6a1fc9b71
SHA3 3ec164113ebd3e992fbe4d8520ba8150fcf02489c6be4c1579442a3b71738ce0

5

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.19784
MD5 1f7a21cff75786c5c376a0c049d5d71f
SHA1 410ccb14806477794e24807a06a25fee712e4f9f
SHA256 8b42180414d1abf1ba03a3e42a4c83d9b137d7429c354cae1f941eb424f083c1
SHA3 5b1b54b327115cc15215b42fea0822605d6f96ea8334ec13a9a4c32ebd277301

6

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.2241
MD5 3f926eedb7218870ae4a541ae685846d
SHA1 7992ceb176d5bd53afd72c4d00e01861b4d3c769
SHA256 52274e1fb781b7e589bf5d2ce12a4ef3ae8eba7ee4437b0524524d5be619b294
SHA3 b80ac35a11faf41221d22a02bf87bde608e3dfe2116f5b538ee069b36c6aac1f

7

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.19315
MD5 16ebbd1b9889795d2d9d5b23d1d4e2b2
SHA1 884d960583f7fd6965ed7b822caa5dd0b8679855
SHA256 8ffa1fa360c12246ec72cb488a8178a0fa839f271f2f59b35eda2c3ec9ebb941
SHA3 928955aed436863f18fc670c58dd9af9e12d045ce1a905866a1811f8bcbaf221

MEIBIG

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.86566
MD5 37cd9062866e495528de59ad36e8aebe
SHA1 89f8bf5f203d8fb27e1ca267f33571fa94136957
SHA256 1bf0ab8ba7f4e92312db0f269467acbe3bb53db4c6d3e46e77c1c56714c56c9b
SHA3 f3376b6773a2a33689d7ac8f43cef5dcb628fcc7dd50f4b33d60ad8c48700196
Preview

MEICANTCONTINUE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.69625
MD5 4a9882263c7e8561740682f74b098411
SHA1 5d677f9656a7635008bba52ab451717859218a60
SHA256 3d916afe444a3ab1146fae17606dc2d64d9d750c3c27c9ebab0fb3e75958739b
SHA3 0002c72083c2d914c040e168e47bf642327831feb777f087aaf4af314b2d7d8f
Preview

MEICLOSE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.74067
MD5 27b72cae9b8e7abff573bba8c3967926
SHA1 32bc374a1ac5762ef6d5fee362cbe1f062a1347b
SHA256 9aae6b3d1b81ccd16a4ff458cc93769967a8bc151b0585f612dc93a7529d7ded
SHA3 115babde18d1a0423c7c27f0618060a056f02de5706a4e0ecf263f76b441ffa1
Preview

MEICONTINUE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.71287
MD5 755390fcebe165a02d65fb23c62be9c6
SHA1 bdd9aaa79075022761dc49646b90338dea5e2f5d
SHA256 9d618626e28411752f2cb977ea9d854a8ef7c7ecf331a5a7be585e3335079284
SHA3 acb6d2df14394991b4dc44f1c8a9c06b1d3b6607d897989dfc4250ced5fcffe6
Preview

MEIPLWAIT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.85302
MD5 37656e60828029ae74c72994ed278793
SHA1 90605426619b3b619628560c751bc9d781a0a43b
SHA256 556956efbd37bcf6f31f8f626278beaf737374da1bd7c70765643c9ff3976964
SHA3 a96f2d61f0e4646d20fe7f06b98b0801dcd80d5efae04305e8ffbf6f36702774
Preview

MEIPRINT

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.72253
MD5 af2e39fa973ed4f2089fd36386187d54
SHA1 d6a0a50742de3424152ec1cb259730776da70f86
SHA256 faccf61acd03f6b60df174f7ac75502da865348858660fb529586f9b092f37ff
SHA3 eb19151416e681160b6b90b8c05d1faa1f558bee75a1cf877dbecd772d75024a
Preview

MEIRESTART

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.63476
MD5 23a751579d19aab24c9c2158addc55ee
SHA1 7fab42278aa68212d7d25df358670c92696dae0f
SHA256 f51581356e742ebade508de361cac70e19b3e7dd016a48c25b966c5ca1c261c7
SHA3 442deb4201210cec1cf61ee80e4472395573633407d64c460560cc3be095b9f8
Preview

MEISAVE

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.69801
MD5 139d3a57f469ad9bdf1c7a57074d8ad8
SHA1 0ae44b18dd0875b54ae0066d05d765be8ced850c
SHA256 449ac9a49bf418dd47a8f42691a43f3a95557d2422fef885cfca24acc51863a6
SHA3 13bb5b3ffe42df4cbd66465d3590fb9956628ed0f0dca2db807cfa17421a5789
Preview

MEISEND

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68283
MD5 545b8c74fa1db981b5365ba30b68ecc9
SHA1 7f83e15df6577ff1767f52254ae71a8428b2902c
SHA256 cf3cb1afdf2479d52db7a37cbc663d463775940d270745de26935666a69579bd
SHA3 500896b556d916fcdad6fa6e30b642e7c81e9d3568a5a4de403850137bd18ab5
Preview

MEISEND32

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x1028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.87074
MD5 bee1cfcef8fe9cc703f8f857003ea602
SHA1 386c39ce8b41902de81ee47c07f69b7e1eb6d559
SHA256 3f227d0fd7484acba1a69b1851b5397a83fbaf27502fb4749999d410550d2318
SHA3 d1deae3c384ce614726e931c42cb5ba98afcbd592bfc3a69d86a03f5dbcb34a8
Preview

MEISHOW

Type RT_BITMAP
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.72308
MD5 71c585267653fca2a32a6db2063f195e
SHA1 34d882331191debb9c2107d6f1a8cae108aa2668
SHA256 5e2ab8b6c290927f3feae4f811f91e879ddc49bc5fbdf137064ae4e5704033f5
SHA3 6e53a678e02c0888f7d12aaec9f600afb9dcfd09f6a56716e04fafb9d43ea9dd
Preview

1 (#2)

Type RT_ICON
Language Russian - Russia
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 5.50554
MD5 7ced75e04ce99f585d096fa6dd91ccf3
SHA1 d247ca887518c486e3af22df25a3dac5da5a6e55
SHA256 a43d3218df7d11fc076600767207852902406d6dee0ad8f166b264de986ab8a5
SHA3 96d9aa349302a60f9b47e4851638dcf6b1e6912cd5d1116991fae46c7ee33e49

2 (#2)

Type RT_ICON
Language Russian - Russia
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 5.78445
MD5 ee6191571824f5a418e6f20bcc3f2248
SHA1 fb8ab39df5b3f18ec6bfa8e7b180eade532a6655
SHA256 1d02a95ee1694e6faede65a7e9e29ceaa7584a3929e4a4d7d649306729359eb9
SHA3 2ac6bdc890b3097ac9786be6166cdab59936430b75a73a9797827295054631c3

3 (#2)

Type RT_ICON
Language Russian - Russia
Codepage UNKNOWN
Size 0x468
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 5.79875
MD5 3b56e81704d0b19ab551e0f6818c1021
SHA1 e50eaff4aa3cf48c12d7e3bb3d639c683aa4057d
SHA256 9eb85e4d67a615004c8222dbb7d44ba6e345d4f5b41acb3ba65412a259aa9766
SHA3 656aa6d83d6cae76213c0b19cee79493db7a2e6d1b4751be178755df2d5a9cdc

4 (#2)

Type RT_ICON
Language Russian - Russia
Codepage UNKNOWN
Size 0x1ca8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 5.10443
MD5 52b3fdb82fc79d2446bdf8f4fb218975
SHA1 c64a965aaafe931b21b18d00b571bb28cd1cb8fd
SHA256 eb87be5efe151d65b60459e22e47b8361e6ca91fc509037eda6aa148dffb6ffa
SHA3 7373848dafc61b54a70a441413f585ca052c731df968aafa88da0d8acadd6b1b

5 (#2)

Type RT_ICON
Language Russian - Russia
Codepage UNKNOWN
Size 0xca8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 5.16934
MD5 8d4ff6805c355ff282a154b959de3c17
SHA1 1479cf72dac7d015497166437519910c2a5b8ed7
SHA256 6227681a73dc1ffcd2e93dff61d7aacfc0721ce01773e2381db3060f8a01feb1
SHA3 14729c77a0b2230144c30ba4ca8f4af50217a3bdcdf5058e8620cd00663e5e6d

6 (#2)

Type RT_ICON
Language Russian - Russia
Codepage UNKNOWN
Size 0x368
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.80551
MD5 bb7ab7508809f16a1753fddb861cb884
SHA1 2d52f3d58b6904fe0e237ec2cbac0777b8fd9a53
SHA256 15848c39dc273e0dd8ab91e43cf59bdfb1634d409525a5f4ccc4b97d23f8b519
SHA3 15f23f35a0f3ba22eda67ddc33519a1c00211cd2192256adb775c2a4f73cbe4d

4064

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x268
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.5142
MD5 ce2b5bbdcd470777512dd5eeaf56f0a9
SHA1 97331bc870b21c92952b7f0353c1fd73620ed6f8
SHA256 19acdb6832223312db806690e739f36e499c64171921dbd2c0717ca694e0173c
SHA3 be1145e385898309054e2654db0c7783612b2f97099a8fbf1b1635eec7220b58

4065

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x350
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.63492
MD5 4b5bd1bea0d30a5c88ab3898d3602a1a
SHA1 67601e53249a470c495e651bed9e42f9638c869b
SHA256 182f6167aa50096cd957efe6282b551e3090ef0b069926416cc8484ae1f95291
SHA3 5e0aa5881c6bff7a966167f899a9586c757a03123487020ad7412c89e14ed4d1

4066

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x364
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.62218
MD5 d852ca17d1fd7ea6dcdf83466baaff66
SHA1 214847c6a63211efdc3472c9dddeb6da1a849ceb
SHA256 b6050fd7772c68ebd7b7a79421f01408de9f67f5013e9a0ae7def8e41e5af13b
SHA3 6c6b74e9c7840ad83adaff1122540055c1d40d45887f2aba7dc10b0672732e2c

4067

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x488
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.72594
MD5 7cd0cab19bb0c08f5d26584385dd5641
SHA1 d75d05f3dd7d98f60d87199cecf4512aa070a3e5
SHA256 96188a3b8d03ddc17f1990921707211b44fa8cd8aa5e8272d0a2854ec9ed7bc6
SHA3 1724533e4f7bc57e08655008d43696fe9dc94556a81dbb78ee6de3aaf48859ad

4068

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4f8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.755
MD5 8471f5ce16aa4942bedbdd55d6704d68
SHA1 500908f2023e0047aca29e569461b2ddcaaa6939
SHA256 211a8ec8f21fc79acbbe30f39e4794adda2e456cf93e5eb9110cc002acc6ee50
SHA3 32960ef410f77a071e5ad38601c571c8c314ed3c11d1ee6e649e6b2ff2b76bc1

4069

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x6b8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.8254
MD5 676d6037fce9faafe9a4e5c6ef6051e1
SHA1 6e39da76c44433b3c3c78d439bf93ac870223d75
SHA256 b138a6baab042c038d2e551ec92ce125256946fabe666cf07992ecad95bd414f
SHA3 7bef41c795d4d68caf4b9dae7b8f64e42575cd3923ffc1ce13653d36fe7a7efd

4070

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x964
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.83835
MD5 f48e3b84858b2a88ce3a0490130e84fb
SHA1 0b8327c705b7933b2317a19bdaf4182768d7b8a4
SHA256 37fc3b6aa766400fa420e4fcc95c485e87a6ee9a0c0d47a0f4cc222e584b5485
SHA3 0315c6c7ab7d2b6bac931bd11fdf9f384e16a09e1597d95b7ab26236ff72e345

4071

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x6b0
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.82405
MD5 6fcc969da5a23401f09a4f79fdff55c4
SHA1 1dd7f90c6a3d0f30fe803ddac79e6500b9b4b6f4
SHA256 274aa9a1ddc60a44b7e6c4e7cc6e9917ffbf46a24ebdb640020cddf16b1aeb63
SHA3 23537374aeb78cf4a176977d256d1ce01d9c86be28b52ebd6e192b61ed513477

4072

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x344
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.6479
MD5 8bc690d0adc5191499858f2abc4e0de0
SHA1 f9b7e2800723d76168ec6b942198bf4c09ba758b
SHA256 c0a963ed82b606b03cadb3ecde3eb6436cb103879b5a65c227b9a20a355ab684
SHA3 d4e0b2cbbb08f47660329fba8ea50f3585e8ebfb4399321144a878b172a36464

4073

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3b8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.70539
MD5 6c92b84b240a7fd78199ffb80d7ea81a
SHA1 b97c5a15c93a696d2b3f3c7965cb33a7c27b80a6
SHA256 e40468f1d5164ae096b0d28695d6530c82db31078dd240dc657b119621a26ac7
SHA3 a0d18d18df9a75641bf1ccc42d719d027fa5d3629067c3b7a1509a1966d1111e

4074

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x404
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.70585
MD5 2db944f7aad13c57746d87a4ed577505
SHA1 fd02e31f425b7604c40818c14ddc06bf110a5dee
SHA256 361736be4889822b498d4de19df386885948b36efabddb6afe0e89129754e41a
SHA3 07078694e3cef6c689b064ba3ca5401861ec31f59234007b2ddc680faab9a695

4075

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x304
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.62083
MD5 1aa4746464260c30cf9ef9c32091beec
SHA1 ce7d89de692f52f369ac24229e3dbd331466bf82
SHA256 8bc7a52536fc56d01a5313f37eae11d08c8ebe4f82a49b2fcbcdac5f757be6b7
SHA3 ea038b1aa52e0b2b8bee443b35df342bf5b8ec5e5184f58ba97061f0a3588f61

4076

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3b8
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.6377
MD5 ec94e9923892a966d7ba885a76155704
SHA1 c7d5f8ee91c0ba59b389d95af53ef35c19589997
SHA256 05495bfabfebb70eb27ab34f6885c4737569f29baadd031a8961c1fe1fdb4cae
SHA3 8ef9ff264b3dc726993c447003659c3e37fbdc9352b82d311014356dfb94fa5b

4077

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x400
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.68923
MD5 92a70bba541a9c0f4e3287f7a4314077
SHA1 db8f4490925954312ae77eebe9a47f63bb95f64e
SHA256 73a785634547ae5847ff924f4844ca7b3c4deea269481b3d9b9f66243b0345fc
SHA3 69a79e921c6cfcfb444d1a189e48b7d0470096b9844032b29da7e843ed45342f

4078

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x37c
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.59702
MD5 b4344ced1833f46c3e9c38d396c680c8
SHA1 dbd2bec25a02b0d6b534e21ce6a3bf2658161fd2
SHA256 2cebb3e18c5462d8b049ebcb2f2f739556845609697dde485b81ed00bd4a7b58
SHA3 61b5089b3087f09f8267cda372f02d7fec8a3ff292b156a0887591405e39c003

4079

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4d0
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.76061
MD5 09777d339ef6eefb18c0f68d08417319
SHA1 a6c0e36c0915f6422a35a4d58209b91352ca75e6
SHA256 81bee061b98de49b67b0b6537ef3abc4ea1e00e1fe2692143195574e92ebad03
SHA3 da3c96352fbcda788fdb67e099f16b36e6c22a931540eefd22e650e1f04d71fe

4080

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2a0
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.60385
MD5 fa7fcd2ef5d38bf0324183c43a80d269
SHA1 dc6cdaeaab1ff9663b604479db681ad9b0911a6b
SHA256 eac631c75f855288b31cb9d68a8135b497d20597f8d0a24227df178dcc09af96
SHA3 730b140e01ba98b0c6e97ef48fb4ac38c3c3581396c43458ed430da8afc0b409

4081

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xe0
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 6.92645
MD5 61792821492fe76bb8f6e09370c3ff30
SHA1 a8d917c6a2be65ed55038b24910ee28f9aabc5a9
SHA256 d3651885b8e8d54e7aa866ff8987e0acd1a8c5a236bb65df7b02f2cc7cb299e6
SHA3 c9e454acfaaefb3de7e8f76b421bcc5ce91857423c24ded665713796cfc17d7c

4082

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x120
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.10754
MD5 0eb301b42e618810cb1bd5ee074fc486
SHA1 6aac03fd1fd61f86f3723899ba715762d1883222
SHA256 4dce55e15914a4928affa363b256bae18a1cbc0ce30e09c2044325cc363c0d2b
SHA3 0c9acd751fa79e17d163c4c268cc7e50f9d56fca11cd3ff62ee99b1ccc441bf0

4083

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x418
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.71325
MD5 4053ee2762b557feb987525b85cd806e
SHA1 c10c60ef371a9492e1ec1e8f84cbaae09dadb91f
SHA256 cb25e0a6c43259d2653ea5cab05855fa0079f19954f9dc4b90e21c1da9a90620
SHA3 fdad42429593671ceea4fbea665b551b39dc274e460c8d5ba5aaf313a7be19f8

4084

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x410
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.59032
MD5 05ffbf6287bfa1cb9de3c97aac081a11
SHA1 1d0c50d9630f814f8f4daec73ddc6706bf010de7
SHA256 0ab8a1c6da8704bec99c4655e7b3822b82b701903afd4df232fee96dc2cc325b
SHA3 f4b5879df5291ca636826fee5b18e2a169fcd8b2622155142bddf1b78749819f

4085

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x384
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.68917
MD5 8249f44b2e7ebdec3c87cffd5da849d0
SHA1 6a526be17018703d7791eafe95b2d7fb9be88db3
SHA256 51549c69d997236bbc132473716393e1c1ec4731ad63d156215bd21cd7aab971
SHA3 fb3f5c4a9b7bf049beaef1a3babc4bdc795a140dbc584c4ccfcffebd5a34ddc7

4086

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x158
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.25251
MD5 7954d18f6abd40c4c48054d8ccfdbc13
SHA1 3c689f3f06125070d1490634c39a5307c4aa4d22
SHA256 b6dc4589546e724ce68e58e3a2119ef62287cfa7a2f9a63c4fc5f3c2e75b2b99
SHA3 3bed4f14012228fc3a028866d4023eb980a9cd2ff4cef62621070aedb1cdfb93

4087

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0xec
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.01039
MD5 936dc727fe05eeb80102aa86b27e0565
SHA1 ca24103bd92ee5c12ee0988728c2462e2a887594
SHA256 ac9382e368d59a36386fa941a6c79f2cb8581a46b888b22ed469ecba637310ba
SHA3 05e923eb276e8c5c3c4d08203ccd7789347d07c5626a387ffbcfb86dd207ac54

4088

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x224
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.46107
MD5 2488fefc71d7b64d40b8036977d674a2
SHA1 2a159f3f0593ece12c052ec8cb3b59f30f923bb9
SHA256 4ce50474a19ebde364b39bfb6fb5930d9ce8d57a492e6f7aeb23d26c17002e5e
SHA3 256698e38adb772ed5c9d1d5907a86408120b359eb8ce1cc2b3c62d266f40937

4089

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x434
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.70139
MD5 612631d23cf329d2a443e3d0f82e7256
SHA1 2c52228705b9971134f697253ff270243522ee9e
SHA256 b9ecb4b19df1eaf87af553c6248a24718011cec53d1549bd0ea9121d9276ac82
SHA3 ea07d7c57d73f5a0f81fdb30f1b514575bd289f67ab1a220f2eed5639862f312

4090

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x3bc
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.69087
MD5 91853f64a63ad497f179d02f9964c9d2
SHA1 e0d550f5c4c1c696bb99661503dd14eb6e47431e
SHA256 2f9e3bc1514dbba7da12a47a3dc8f254f5f0215c7ccf6d120e110c845eb482af
SHA3 1c0427a865b589f11228d5ca8234641371b80bfe2590e390dd2d4dbd4c40cafd

4091

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2fc
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.57066
MD5 9bc0dcb4bbd48fb833c0ae102a9c4a91
SHA1 4a330413ef056009bba36493bdcce2081c02aa50
SHA256 a058c79220a1abf310b5aac7fd3e5b4cc81fb1ebc47a072547532d040aed1287
SHA3 0a1239bce211227df485da84339fcba77e1a09a63a526eba7509978269ad0a01

4092

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x364
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.65619
MD5 2b329b8e4caaadbbea46a58febca80f2
SHA1 70ea026ee88c4d57f71dbce9e98c819f4face765
SHA256 90021a76b31cb84b1dc84b33ac08564f029a36921f148cdfa55537bc2ea048a8
SHA3 0bbd72cbe52060888305eb555c0eccc6194fe8dd226e9baa1016c436020d049e

4093

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x610
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.75122
MD5 1125289b7143fc495b9dbf7fc09f67cc
SHA1 7f0d3e11784ccf7be641461f312266f4d853bf0c
SHA256 9d0908f5e353c6f449b5101aeceee7739e81ee870facefe02d1cd7409a110274
SHA3 6011eac30490ca584a8e21e7d4a244858682e3dfaa4708cc7bf2a17c0266f308

4094

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x494
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.71993
MD5 cbf18b341a79262c6ba02b981b454276
SHA1 caeab58caa6dde3c7cefa51ecbd3be10d007f827
SHA256 85eff700a8b21f237df865024951dbb72bfb635518e2db4734fa9e51f66ef04f
SHA3 a907a4808bf9fcc6aea6c5a2dfe239a9a97076a0367bb3d485f27d10e8d6842c

4095

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x39c
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.64452
MD5 ad493c1cab5416784fe9f52233102f51
SHA1 75f5f61c1bf41fc1b5ada1dc47d54b1e48b18ef7
SHA256 8b3b10f0dcb0961eb1d37dfdf9a0f2dbdcfd3f6a0a1526e1e86f03f270ec553d
SHA3 25ea1edcb44c1351ecf533dfb5e2494120ea7b643096cacd7c698f801176c1fd

4096

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x4a0
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.3982
MD5 ca97d5238aa54a4199e863d3eea75805
SHA1 127dbffc2db4bff819f85f9972c1880aa5468b9e
SHA256 aa90268a59f407b83e41eb7b3385d5f261d17385efb9cdca8d472e1b9728c40f
SHA3 ef69c42bd873cf946029762442f4d3115e712952f3e46be6d8eb661a56dc38bc

DVCLAL

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x10
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 3.625
MD5 768c170a37794e89250199093d307978
SHA1 05f9ebfd2e80207ebe1fa37ea6ec4ba688911c38
SHA256 7221d044000835da0559b33ec7e0d93d460a363c8e8a9fc5abf75fefb1499d29
SHA3 6c5055253cdbbdb541da509427d16e4000366b01aa8ad59bed99d6b19f4802d1

TFRMBANBATTLE

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xf2f
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.8623
MD5 dd5b87e2ad18a86c70a8fe24a34d437c
SHA1 73cbccaed7e1107e1e597fa8f0a78e0ad49a21d8
SHA256 0798fda94506e9395936cb96173b07188455cf90977f8b05290103768381489d
SHA3 93a40134967c8e206c894e2c14fc6c3bc1e0a5702f0115b48f7cdb8dffee6277

TFRMBANBATTLEINPUTNICK

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x26e
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.6157
MD5 d011143608a7105a90b9559ca0816aa6
SHA1 f946f37973c2cdc797edbb637f0ee2eba10bbdf2
SHA256 efb2e354a22fcef2a88b78a8becb7b7b0a4fe9c9fd9cfa0ef52c88c3ca54cc4e
SHA3 363b79fb0efbf4797c38743e679e51029d1cf0d01f047d8b5a7c8cea8ed47f06

TFRMCLICKER

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x512
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.78972
MD5 3f9cd5211270871240a305f9046285ee
SHA1 509b0bfaf14d43e2481f59194ff7bb9c71c37154
SHA256 4834d8d8673442c3a5625054999cf6ad073db629400029f576c0f374616c5a9b
SHA3 8358ebd8e87d096f27ad4593e3cd0f54ca0062fb59c5f8fa18a800bf1d06075e

TFRMIMAGEVIEW

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x1da
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.39147
MD5 f78ea07756a4e31ed572afbbc72e8747
SHA1 2155a9f64ad7b0e0700fe1a9ff7b3834ba07cff9
SHA256 31d7342ae75c64019a56682e25de72938c830d04a7a932dd4fe9a16868413866
SHA3 6cd125a17ba4451383101fda8e99ba83360c284a8504e530e69ed45272c592a8

TFRMMAIN

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xfe4
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.8557
MD5 84fd324561cd3e76d0ca9628cd3a64bd
SHA1 443a0519baca8597824783f2a0499e860c9ad2a9
SHA256 ec7a581cf0006069f88c669c43b74c7fadb8e97fc2f139ce448f7b929459489f
SHA3 9eaf727b71d75ed8170234066b070fa32f9420f060fa0b750db277aaffd02953

TFRMNOTIFY

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x704
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.78562
MD5 7b9a4ea6044fd52665426a61f922eb1b
SHA1 48dd2794940a53984eaf1e10c1bd710fad7634e6
SHA256 b2b41d811a824746198944cbd88db9ce999831af0da9606d978763d6d4cb62ac
SHA3 d1d297710ba5f568e3e8e39119d1f90f2c2fefa1e86a54d99454d24d5aebfa4d

TFRMSELECTSCREENRGN

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x428
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 7.71671
MD5 aa536d96ded2a82bcbfd6baec37bd7aa
SHA1 8167902ffc0603f16d0f09c9a4ba6b3c74e3a170
SHA256 adaeb049111979bb2609d5fca8aa91f90aa35c7b8df7f6e1d7d0ccaaea0a0575
SHA3 0c4a78d0fbeb08ba81eb76c18bd34c3044f3b433b01cd22205d72a0a8908e160

TMADEXCEPT

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0xb74
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.85791
MD5 12d488abca76f15b4719e18344c758ab
SHA1 2584c9231a090326b67bdbf9ed35426a5184646d
SHA256 50fc0f3003b7a88afd3fa576085c88031f470c9488dde7131ebb902f76df6164
SHA3 7cadfc011d808854c9f8038874037620a68dcb0fee8d0f1ad23040e1a2116de3

TMECONTACTFORM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x34e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.67772
MD5 2e5022886552939fcc789fda0f7c0451
SHA1 11df1d83f9b5a574437912b10961cd546eef3afa
SHA256 5efeb3a7267d37ef9d220839ea535ff087ed2f63a918952fe53f59c966dda697
SHA3 b6d680f381e52c196557c91b1d2902c1dd30259db8d0c4adfee4218ed6ea1752

TMEDETAILSFORM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.42671
MD5 f1b43d24bd678a25dd2e8a5871be6aa8
SHA1 54ebb3c52135d12f7e88d2e17933dadb79f9b6dd
SHA256 7c6b77569251f09011339af9c1d29f158dde893458dc6a883ac71de6d4a2eafa
SHA3 3b67ddb20d561550df0cd4b5cd31ca2b7f2904027702302ca797a113cd0e0d1a

TMESCRSHOTFORM

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x2a3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.64312
MD5 81c580608911ba89d34b1ed1723a670b
SHA1 e4909aee269f1387b2ccb7d3926599615c36b88c
SHA256 616de23b96fc2ce56e99840c49859f318cf6a529820dafdd59b853734566c803
SHA3 2f09caf57a7d48a2ef35a5e9557b2a31feff4ddcb6f69766d8eaccd0655b47a1

32761

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.22193
MD5 96445863ab7f3075531e5d4c82e87306
SHA1 59808151cd19ccccbf1cd417e48a10a06cb00c75
SHA256 57c4b84e8445b0aeda6df43df1da1b0d1a0f5a5b05cee937f12468c8c94b1f7a
SHA3 9141776cc908411fd1f58f5b12fb68420e007c794f2224139915eccc6ec603da

32762

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.22193
MD5 646e3089013255a610fd93a4282d14c2
SHA1 733f970857f0415cb62892c7eb156a003b9a10e3
SHA256 e0e6762531cbba0046c3ef4419be26f29ae8895796c74aca5211362fe667cda8
SHA3 fdb75d8df97f8667163a23fdcddaa6d824ecb25915a6152cc46d9aa9aa132f09

32763

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.12193
MD5 abc219e997a3a0f6c2465a816beff1d3
SHA1 a4e5bb4d840694357889df0c6ccb6bc38f19daa4
SHA256 320b0757721240742da7908c615389cb966a1ea9e479ed16a17bf1cfeac2af09
SHA3 bbdcba798531d234068518ed86ad554f1bfef8e294d004f42a45f514e4aad3eb

32764

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.12193
MD5 189c3663117f6a18c06569b597803b96
SHA1 12510736e2ee2f44f6e794f2f3511a152c2d01be
SHA256 6b5f552590e85af981f21dbc19a93a845d39bca826fbc1e204352fdf9d71f4b8
SHA3 96c86f8d57a3c3f23c5278d87da1d8f6aae1db5d83d7d83df510dec56181c9c0

32765

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.12193
MD5 32663713ec955997f68b1b4e4bfe8125
SHA1 9f989902468864f8dabb7a1b6ed574a0919fda11
SHA256 2a18d0c72245779165092b90ff61af86d633790d72578d4a118992fb5ea7ed86
SHA3 87c7441a757e00dd271786b9ebb1ad38ac061bc39df8b00464a588d441254218

32766

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.22193
MD5 d5017edf28c189ed7b81a015cc8b0193
SHA1 cd243a3f10c6413fa646ee06da0464d8abca14a3
SHA256 dbeec3763e7caf630b4fdc754d556f806d199bdf81735b0abc58491f1bea9c96
SHA3 67fb1ba89aee6bcdc1ab58002f0fdcb79158d417aa3687a0aaaf69faacbb7b5d

32767

Type RT_GROUP_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 4.32193
MD5 09d2e6fb5997cc56fe5cc70c330c90ff
SHA1 b84ae4d83a9f25ef8a47255d5653034908fe7f59
SHA256 b4d0a3efc9e816466d1435cda455175ab5a93bef4a4e92414dba0f59e9d7330e
SHA3 819931ec9e30d330e646856784e0f12827e42d56515f476c80c29c2d3bd9388a

MAINICON

Type RT_GROUP_ICON
Language Russian - Russia
Codepage UNKNOWN
Size 0x5a
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 2.83109
Detected Filetype Icon file
MD5 4ddffe61a8e8b788ebe03b4401bfbefe
SHA1 8d45951c82239616c9200f82a01094d49791de44
SHA256 34d48d09610b1f1f35e21084250c9f65e3b2a8287a15740ce1d85fe20487ec24
SHA3 9920505c38938cef5e86707de7b294d23caf553449899b089c0c069e887bb274

1 (#3)

Type RT_VERSION
Language Russian - Russia
Codepage UNKNOWN
Size 0x304
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 3.52167
MD5 e2d5c7beeafe1dfa1f3554c5a17933a4
SHA1 1a11b3c592f0e5efc99eb157035d2b47ff289e55
SHA256 5446df92a2a66a45f49349a1628dc826397a163880eac68c84980c8f6f5e68be
SHA3 45a600e93951a6d7dc5368e1f9dc9f4c126f94f95cd7c9abdf1748069586d8f6

1 (#4)

Type RT_MANIFEST
Language Russian - Russia
Codepage UNKNOWN
Size 0x225
TimeDateStamp 2013-Feb-10 07:04:14
Entropy 5.16431
MD5 94526e891e21c9f2adaecacd0a8864e3
SHA1 603214855d9246158eda464c2d850c5f69c323ac
SHA256 1e2d631ed44ed285b9eefe973dbee3dd4aa7d746e5e43b4ee267cee928bad46d
SHA3 d94771284e4275831b522936b1170172488fadf0ca352dbbcd82bbdcc65dcb6f

String Table contents

狈䐪婛
柒闸ᯙ瓉쎧Ǡ倯㝲舂⧜䀗吏鰆朿ᘘ䬜ゆ翩︙፾帗१纃ň

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 2.3.3.0
ProductVersion 2.3.3.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language Russian - Russia
CompanyName
FileDescription тулза в помощь модератору ТО
FileVersion (#2) 2.3.3.0
InternalName
LegalCopyright (c) deda
LegalTrademarks
OriginalFilename
ProductName TOM :: TankiOnline Moderator tool ::
ProductVersion (#2) 2.3.0.0
Comments
Resource LangID Russian - Russia

TLS Callbacks

Load Configuration

RICH Header

Errors

[*] Warning: Could not read the name of the DLL to be delay-loaded! [*] Warning: IMAGE_EXPORT_DIRECTORY field Characteristics is reserved and should be 0! [!] Error: Could not read the exported DLL name. [!] Error: Could not reach the TLS callback table. [*] Warning: Section UPX0 has a size of 0! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Couldn't convert a string from a RT_STRING resource to UTF-8! [*] Warning: Resource 32761 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32762 is empty! [*] Warning: Resource 32763 is empty! [*] Warning: Resource 32764 is empty! [*] Warning: Resource 32765 is empty! [*] Warning: Resource 32766 is empty! [!] Error: The number of ICON_DIRECTORY_ENTRIES is bigger than the number of resources in the file. [*] Warning: Resource 32767 is empty!
<-- -->