filename | pfrotha.exe | |
---|---|---|
size | 1076526 (0x106d2e) | |
md5 | 3fe224694cec7c76a84ae607ead9d09c | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 21 72 75 6e 20 69 6e 20 44 4f 53 20 |t be!run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x6935 | 0x7000 | R-X CODE | |
.rdata | 0x8000 | 0xe04 | 0x1000 | R-- IDATA | |
.data | 0x9000 | 0x141 | 0x1000 | RW- IDATA | |
.rsrc | 0xa000 | 0x6a6 | 0x1000 | -W- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x8890 | 0xa0 | |
RESOURCE | 0xa000 | 0x6a3 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0 | 0 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0x8000 | 0x250 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
module_name | hint | ord | function_name |
---|---|---|---|
RASAPI32.dll | 33 | RasEnumEntriesW | |
RASAPI32.dll | 21 | RasDialW | |
RASAPI32.dll | 76 | RasHangUpW | |
MFC42u | 3917 | ||
MFC42u | 1089 | ||
MFC42u | 5193 | ||
MFC42u | 2388 | ||
MFC42u | 3341 | ||
MFC42u | 5296 | ||
MFC42u | 5298 | ||
MFC42u | 2717 | ||
MFC42u | 4074 | ||
MFC42u | 4692 | ||
MFC42u | 5303 | ||
MFC42u | 5285 | ||
MFC42u | 5710 | ||
MFC42u | 2977 | ||
MFC42u | 3142 | ||
MFC42u | 3254 | ||
MFC42u | 4459 | ||
MFC42u | 3131 | ||
MFC42u | 3257 | ||
MFC42u | 2980 | ||
MFC42u | 3076 | ||
MFC42u | 2971 | ||
MFC42u | 3825 | ||
MFC42u | 3826 | ||
MFC42u | 3820 | ||
MFC42u | 3074 | ||
MFC42u | 4075 | ||
MFC42u | 4616 | ||
MFC42u | 4418 | ||
MFC42u | 3733 | ||
MFC42u | 561 | ||
MFC42u | 825 | ||
MFC42u | 912 | ||
MFC42u | 641 | ||
MFC42u | 616 | ||
MFC42u | 656 | ||
MFC42u | 2506 | ||
MFC42u | 2613 | ||
MFC42u | 1131 | ||
MFC42u | 5261 | ||
MFC42u | 4370 | ||
MFC42u | 4847 | ||
MFC42u | 4992 | ||
MFC42u | 4704 | ||
MFC42u | 6048 | ||
MFC42u | 4073 | ||
MFC42u | 1767 | ||
MFC42u | 4401 | ||
MFC42u | 5727 | ||
MFC42u | 2377 | ||
MFC42u | 5157 | ||
MFC42u | 6370 | ||
MFC42u | 4347 | ||
MFC42u | 5276 | ||
MFC42u | 3793 | ||
MFC42u | 4831 | ||
MFC42u | 4435 | ||
MFC42u | 2640 | ||
MFC42u | 2047 | ||
MFC42u | 6372 | ||
MFC42u | 3744 | ||
MFC42u | 5059 | ||
MFC42u | 1720 | ||
MFC42u | 5257 | ||
MFC42u | 1569 | ||
MFC42u | 2116 | ||
MFC42u | 5273 | ||
MFC42u | 4621 | ||
MFC42u | 4419 | ||
MFC42u | 3592 | ||
MFC42u | 324 | ||
MFC42u | 4229 | ||
MFC42u | 3605 | ||
MFC42u | 2403 | ||
MFC42u | 2015 | ||
MFC42u | 4213 | ||
MFC42u | 2570 | ||
MFC42u | 6051 | ||
MFC42u | 1768 | ||
MFC42u | 4392 | ||
MFC42u | 5286 | ||
MFC42u | 3397 | ||
MFC42u | 3577 | ||
MFC42u | 1143 | ||
MFC42u | 1165 | ||
MFC42u | 567 | ||
MFC42u | 2294 | ||
MFC42u | 800 | ||
MFC42u | 4155 | ||
MFC42u | 540 | ||
MFC42u | 2858 | ||
MFC42u | 2371 | ||
MFC42u | 755 | ||
MFC42u | 470 | ||
MFC42u | 823 | ||
MFC42u | 2644 | ||
MFC42u | 5677 | ||
MFC42u | 3870 | ||
MFC42u | 1662 | ||
MFC42u | 2504 | ||
MFC42u | 2546 | ||
MFC42u | 4480 | ||
MFC42u | 6371 | ||
MFC42u | 4269 | ||
MFC42u | 4667 | ||
MFC42u | 5237 | ||
MFC42u | 2438 | ||
MFC42u | 815 | ||
MSVCRT.dll | 157 | _adjust_fdiv | |
MSVCRT.dll | 106 | __p__commode | |
MSVCRT.dll | 111 | __p__fmode | |
MSVCRT.dll | 129 | __set_app_type | |
MSVCRT.dll | 202 | _except_handler3 | |
MSVCRT.dll | 85 | __dllonexit | |
MSVCRT.dll | 390 | _onexit | |
MSVCRT.dll | 183 | _controlfp | |
MSVCRT.dll | 131 | __setusermatherr | |
MSVCRT.dll | 271 | _initterm | |
MSVCRT.dll | 139 | __wgetmainargs | |
MSVCRT.dll | 487 | _wcmdln | |
MSVCRT.dll | 72 | _XcptFilter | |
MSVCRT.dll | 211 | _exit | |
MSVCRT.dll | 73 | __CxxFrameHandler | |
MSVCRT.dll | 585 | exit | |
KERNEL32.dll | 381 | GetModuleFileNameA | |
KERNEL32.dll | 83 | CreateFileA | |
KERNEL32.dll | 386 | GetModuleHandleW | |
KERNEL32.dll | 440 | GetStartupInfoW | |
KERNEL32.dll | 86 | CreateFileW | |
KERNEL32.dll | 382 | GetModuleFileNameW | |
USER32.dll | 255 | GetClientRect | |
USER32.dll | 349 | GetSystemMetrics | |
USER32.dll | 182 | DrawIcon | |
USER32.dll | 196 | EnableWindow | |
USER32.dll | 447 | LoadIconW | |
USER32.dll | 348 | GetSystemMenu | |
USER32.dll | 9 | AppendMenuW | |
USER32.dll | 422 | IsIconic | |
USER32.dll | 576 | SendMessageW | |
GDI32.dll | 534 | SetBkMode | |
ADVAPI32.dll | 471 | RegDeleteKeyW |
StringTable 041d04b0
Comments | |
CompanyName | |
FileDescription | Dialup |
FileVersion | 1, 0, 0, 1 |
InternalName | Dialup |
LegalCopyright | (C) 2015 |
LegalTrademarks | |
OriginalFilename | Dialup.exe |
PrivateBuild | |
ProductName | Dialup |
ProductVersion | 1, 0, 0, 1 |
SpecialBuild |
VS_FIXEDFILEINFO
dwSignature | 0x90ef04bd |
FileVersion | 1.0.0.1 |
ProductVersion | 1.0.0.1 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x40004 |
FileType | 1 |
FileSubtype | 0 |
Scanning the drive for archives: 1 file, 1076526 bytes (1052 KiB) Errors: 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA0\xDA" followed by "C\x1A" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x0E\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37360
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37368
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37376
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37384
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37400
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37408
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37416
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37424
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37432
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37460
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37496
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37536
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37534
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37572
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37596
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37600
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37598
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37602
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37636
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37638
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37676
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37674
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37708
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37702
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37732
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37730
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37780
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37788
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37796
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 103836
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 40976
[?] too many errors getting resource data, stopped on 52 of 8254
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 40976
[?] too many errors getting resource data, stopped on 224 of 72840
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "$\xDA" followed by "\xFF\xD1" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xCB\xD9" followed by "`=" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "J\xDB" followed by "\xAF(" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 69189 entries in directory, but got EOF on 28261-th.
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAC\xDB" followed by "\xAD\xB8" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "g\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xB2\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 86214 entries in directory, but got EOF on 48608-th.
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xFF\xD9" followed by "\x85\xEA" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 71162 entries in directory, but got EOF on 68390-th.
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "@\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x1E\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "+\xD8" followed by "\x8DF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 94909 entries in directory, but got EOF on 7572-th.
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\f\xD8" followed by "\xBAn" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA4\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "B\xD9" followed by "\xDCZ" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x93\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x12\xDB" followed by "\xFF\xD2" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC5\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 59886 entries in directory, but got EOF on 58985-th.
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA0\xD9" followed by "\xEE\xD2" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xFE\xDB" followed by "~!" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA1\xD9" followed by "V\x88" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 70206
[?] too many errors getting resource data, stopped on 38 of 4651
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xF5\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA9\xDA" followed by "\x18y" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xBD\xD9" followed by "\xB0\xBB" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "'\xDA" followed by "\xC6A" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "N\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xFF\xDB" followed by "aU" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x87\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "~\xDB" followed by "\x02Z" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xFE\xD9" followed by "\\\x8A" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xEA\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC9\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "J\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "g\xD9" followed by " !" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 86452 entries in directory, but got EOF on 11257-th.
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 1076526
[?] too many errors getting resource data, stopped on 1415 of 11257
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "R\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x95\xDA" followed by "\xF4\xFF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: ";\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x05\xD8" followed by "\fK" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x98\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 806925
[?] too many errors getting resource data, stopped on 9722 of 92755
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 39384
[?] too many errors getting resource data, stopped on 7 of 21906
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA3\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAE\xDB" followed by "r+" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x8B\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x16\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 168757
[?] too many errors getting resource data, stopped on 5714 of 25878
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 41115
[?] too many errors getting resource data, stopped on 64 of 4140
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37804
[?] too many errors getting resource data, stopped on 0 of 331
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 146580
[?] too many errors getting resource data, stopped on 5226 of 58985
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 68733 entries in directory, but got EOF on 14751-th.
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x9B\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "=\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "0\xD8" followed by "\x9A\x80" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x8D\xDA" followed by "h\xF2" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x0F\xDA" followed by "\xC5\xB9" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAE\xD9" followed by "\xA8\t" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA3\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA4\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "3\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x85\xD8" followed by "\xF6\xFF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "e\xD8" followed by "\x8A\x03" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: ":\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xD6\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xCD\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xF7\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: ")\xDA" followed by "\xF99" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA1\xD9" followed by "\x88\t" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x8A\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x9F\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x13\xDA" followed by "\x04\x84" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "O\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAA\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "s\xDA" followed by "\x8C\xE3" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xB1\xDB" followed by "m\xB1" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC9\xD9" followed by "\x1FC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xCA\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 38036
[?] too many errors getting resource data, stopped on 5 of 2338
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "f\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "|\xDA" followed by "9\xE9" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC0\xDB" followed by "\x06/" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "^\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC5\xDB" followed by "/\xFE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAC\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xBE\xD9" followed by "\x1D\xBB" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAA\xD9" followed by "\xF4\x84" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "1\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "g\xDB" followed by "\xF4\xF7" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "e\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA8\xD9" followed by "c-" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "I\xDB" followed by "\xD7r" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 639050
[?] too many errors getting resource data, stopped on 9903 of 11109
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x95\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC9\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "/\xD9" followed by "/_" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "E\xD9" followed by "\xC8\xC6" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 648171
[?] too many errors getting resource data, stopped on 40953 of 45493
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\f\xDA" followed by "h\xF2" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "}\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "C\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x00\xDC" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "-\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 514191
[?] too many errors getting resource data, stopped on 8733 of 16672
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 79722
[?] too many errors getting resource data, stopped on 57604 of 68390
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "u\xDD" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 557515
[?] too many errors getting resource data, stopped on 11158 of 48608
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xF9\xD9" followed by "'\x00" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "j\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAE\xD8" followed by "\xDD\xC3" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "F\xDA" followed by "\xF1\x83" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 92071
[?] too many errors getting resource data, stopped on 22364 of 28261
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 407396
[?] too many errors getting resource data, stopped on 2350 of 59927
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 407396
[?] too many errors getting resource data, stopped on 27001 of 67825
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 407396
[?] too many errors getting resource data, stopped on 8780 of 79750
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\f\xDE" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "^\xDF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xB5\xDA" followed by "\xF1\xFF" on UTF-16LE
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 169318
[?] too many errors getting resource data, stopped on 21655 of 43434
[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 41056
[?] too many errors getting resource data, stopped on 0 of 1
[?] can't find file_offset of VA 0x3d41f56a
[?] can't find file_offset of VA 0xa39a8a60
[?] can't find file_offset of VA 0x988c751e
[?] can't find file_offset of VA 0xdfa1da4
[?] can't find file_offset of VA 0xbe1d397a
[?] can't find file_offset of VA 0x0
[?] can't find file_offset of VA 0x5b909e8d
[?] can't find file_offset of VA 0xfbf68589
[?] can't find file_offset of VA 0x448c51f5
[?] can't find file_offset of VA 0xe3c24e98
[?] can't find file_offset of VA 0x7775cca3
[?] can't find file_offset of VA 0x2757bac3
[?] can't find file_offset of VA 0x146df347
[?] can't find file_offset of VA 0x31f9ce8f
[?] can't find file_offset of VA 0x44a0c446
[?] can't find file_offset of VA 0xb56bda03
[?] can't find file_offset of VA 0xa22d7097
[?] can't find file_offset of VA 0xf0ecac19
[?] can't find file_offset of VA 0xd54ab8a8
[?] can't find file_offset of VA 0xeb06d107
[?] can't find file_offset of VA 0xc922a119
[?] can't find file_offset of VA 0xbaf29c3a
[?] can't find file_offset of VA 0xfd59b6b6
[?] can't find file_offset of VA 0xbde0339f
[?] can't find file_offset of VA 0x9bb4a23c
[?] can't find file_offset of VA 0x931673a5
[?] can't find file_offset of VA 0x5021c446
[?] can't find file_offset of VA 0xa0c5aeb0
[?] can't find file_offset of VA 0x4af04bf4
[?] can't find file_offset of VA 0x372034c9
[?] can't find file_offset of VA 0x24681274
[?] can't find file_offset of VA 0xd38af6e3
[?] can't find file_offset of VA 0x9a35dcc
[?] can't find file_offset of VA 0x696888ba
[?] can't find file_offset of VA 0xd87afcc
[?] can't find file_offset of VA 0x4f97e5ee
[?] can't find file_offset of VA 0x7111673e
[?] can't find file_offset of VA 0xc74e7d22
[?] can't find file_offset of VA 0xf1c511ec
[?] can't find file_offset of VA 0xc973714d
[?] can't find file_offset of VA 0xb4f3e39
[?] can't find file_offset of VA 0x83c62b23
[?] can't find file_offset of VA 0x13de8226
[?] can't find file_offset of VA 0xb160e6c3
[?] can't find file_offset of VA 0xd2c8296f
[?] can't find file_offset of VA 0xb2a3b7a4
[?] can't find file_offset of VA 0x39aa744d
[?] can't find file_offset of VA 0x35acb3c6
[?] can't find file_offset of VA 0xd800
[?] can't find file_offset of VA 0x2bd5deec
[?] can't find file_offset of VA 0x678d5523
[?] can't find file_offset of VA 0x13212370
[?] can't find file_offset of VA 0x35ddf618
[?] can't find file_offset of VA 0xbd9c0953
[?] can't find file_offset of VA 0x92d2b434
[?] can't find file_offset of VA 0xa8d287ae
[?] can't find file_offset of VA 0xa77a2304
[?] can't find file_offset of VA 0x1625a530
[?] can't find file_offset of VA 0x9604fd24
[?] can't find file_offset of VA 0x836fc60
[?] can't find file_offset of VA 0x3fb927c6
[?] can't find file_offset of VA 0x4f8cf929
[?] can't find file_offset of VA 0x291d8d3
[?] can't find file_offset of VA 0xcf7d0aec
[?] can't find file_offset of VA 0x46c9ccdb
[?] can't find file_offset of VA 0xef1977e1
[?] can't find file_offset of VA 0xea717e50
[?] can't find file_offset of VA 0xdb16fc88
[?] can't find file_offset of VA 0xa9cd765b
[?] can't find file_offset of VA 0xba191e99
[?] can't find file_offset of VA 0xee109846
[?] can't find file_offset of VA 0x6c1d8233
[?] can't find file_offset of VA 0x185c8288
[?] can't find file_offset of VA 0x4700ab84
[?] can't find file_offset of VA 0xe49afc6f
[?] can't find file_offset of VA 0x454cd7d7
[?] can't find file_offset of VA 0xf733753c
[?] can't find file_offset of VA 0xfffff942
[?] can't find file_offset of VA 0x43f01557
[?] can't find file_offset of VA 0x52e82d53
[?] can't find file_offset of VA 0x4bae27f0
[?] can't find file_offset of VA 0x9661a377
[?] can't find file_offset of VA 0xce2487c2
[?] can't find file_offset of VA 0x19ad647e
[?] can't find file_offset of VA 0xd0a056b9
[?] can't find file_offset of VA 0xa3a0ab7d
[?] can't find file_offset of VA 0x4308c9f3
[?] can't find file_offset of VA 0xd60d4f54
[?] can't find file_offset of VA 0x1fb82062
[?] can't find file_offset of VA 0xcf2396a8
[?] can't find file_offset of VA 0x42148031
[?] can't find file_offset of VA 0x111c290f
[?] can't find file_offset of VA 0x16703426
[?] can't find file_offset of VA 0xeb172f01
[?] can't find file_offset of VA 0x432b4b23
[?] can't find file_offset of VA 0x5e88fd06
[?] can't find file_offset of VA 0xc2cfdab0
[?] can't find file_offset of VA 0xac15d2ed
[?] can't find file_offset of VA 0x83ffff
[?] can't find file_offset of VA 0x6a9fd9ff
[?] too many errors getting resource data, stopped on 11426 of 21655
[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=36326, TimeDateStamp=0, ForwarderChain=36304, Name=0, FirstThunk=36070, module_name=nil, original_first_thunk=nil, first_thunk=nil>
[?] can't find file_offset of VA 0x90008940
[?] can't find file_offset of VA 0x90008930
[?] can't find file_offset of VA 0x90
[?] PEdump::RichHdr: dexored size(84) must be a multiple of 8