MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

offsetsizetypecomment
069632EXE03/27/2015 11:07:45#
110001510836BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62624

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62640

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62656

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62672

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62688

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62704

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62720

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62736

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62752

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62768

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62784

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62800

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 62032

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61526

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61794

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61722

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61624

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61622

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61560

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61522

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61502

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61498

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61686

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61648

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61766

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61516

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61552

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61540

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61514

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61544

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61620

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61518

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61568

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 61480

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 323601

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x90\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 147472

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 153616

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 159760

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 196624

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 288784

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 294928

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 301072

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 307216

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 311312

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 315408

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 319504

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 323600

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 327696

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 331792

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 335888

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 339984

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 344080

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 348176

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 352272

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 356368

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 360464

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 364560

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 368656

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 372752

[?] too many errors getting resource data, stopped on 94 of 1536

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 372752

[?] too many errors getting resource data, stopped on 106 of 1152

[?] can't find file_offset of VA 0x90

[?] can't find file_offset of VA 0x5339c032

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x3000000

[?] can't find file_offset of VA 0x90008d

[?] can't find file_offset of VA 0x8d8000

[?] can't find file_offset of VA 0x80

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x98000

[?] can't find file_offset of VA 0xb00000

[?] can't find file_offset of VA 0xe128000

[?] can't find file_offset of VA 0x9

[?] can't find file_offset of VA 0x80000150

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x80000168

[?] can't find file_offset of VA 0x1500000

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x800001f8

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x4

[?] can't find file_offset of VA 0xeda24761

[?] can't find file_offset of VA 0x7439f002

[?] can't find file_offset of VA 0x84fe69cd

[?] can't find file_offset of VA 0x213cd690

[?] can't find file_offset of VA 0xb0176ae8

[?] can't find file_offset of VA 0x10ff1cc4

[?] can't find file_offset of VA 0x593a0ec

[?] can't find file_offset of VA 0xcd25bc2e

[?] can't find file_offset of VA 0x5d90ec66

[?] can't find file_offset of VA 0x4e0170e0

[?] can't find file_offset of VA 0xbd1b638

[?] can't find file_offset of VA 0x4e595e56

[?] can't find file_offset of VA 0x6d751367

[?] can't find file_offset of VA 0xc383f1fe

[?] can't find file_offset of VA 0x44662482

[?] can't find file_offset of VA 0xd675e4c8

[?] can't find file_offset of VA 0xdcbdbcd6

[?] can't find file_offset of VA 0x2c5b39e9

[?] can't find file_offset of VA 0x9ddb982e

[?] can't find file_offset of VA 0xb1a9987a

[?] can't find file_offset of VA 0x185ff1e6

[?] can't find file_offset of VA 0x77e0c97f

[?] can't find file_offset of VA 0xaef2e4c8

[?] can't find file_offset of VA 0x25df6330

[?] can't find file_offset of VA 0xba109997

[?] can't find file_offset of VA 0xcc569a9a

[?] can't find file_offset of VA 0x26424820

[?] can't find file_offset of VA 0xb6342e72

[?] can't find file_offset of VA 0x15757e5f

[?] can't find file_offset of VA 0x12b6bb58

[?] can't find file_offset of VA 0x800c3e78

[?] can't find file_offset of VA 0x578a1644

[?] can't find file_offset of VA 0xdeb519db

[?] can't find file_offset of VA 0xd0fce

[?] can't find file_offset of VA 0xd9c7bc2c

[?] can't find file_offset of VA 0x974098da

[?] can't find file_offset of VA 0xa24761ea

[?] can't find file_offset of VA 0x57052db3

[?] can't find file_offset of VA 0xf9902d95

[?] can't find file_offset of VA 0xf4a417a5

[?] can't find file_offset of VA 0xcad3a664

[?] can't find file_offset of VA 0x4cd6bbd1

[?] can't find file_offset of VA 0x1a99fe78

[?] can't find file_offset of VA 0x98dbc0ea

[?] can't find file_offset of VA 0x52a19c02

[?] can't find file_offset of VA 0xd006f11f

[?] can't find file_offset of VA 0xdb0d61c3

[?] can't find file_offset of VA 0x40ea3d50

[?] can't find file_offset of VA 0x303ed920

[!] string size(288) > stringtable size(24). truncated to 22

[?] PEdump::RichHdr: dexored size(92) must be a multiple of 8

[?] can't find file_offset of VA 0x0