filename | JavascriptMenuBuilderPLATINUM.exe | |
---|---|---|
size | 267776 (0x41600) | |
md5 | 82855e8b8492a8e17449804f78672825 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x50 |
blocks_in_file | 2 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0xf |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0x1a |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0x100 |
DOS stub
00000000: ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 |........!..L.!..| 00000010: 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 |This program mus| 00000020: 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 |t be run under W| 00000030: 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 |in32..$7........| 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| * 000000c0:
PE Header
Packer / Compiler
This file is packed with ASPack. Analysis will be incomplete without unpacking. |
Sections
Data Directory
TLS
raw start | raw end | index | callbks | zero fill | flags | |
---|---|---|---|---|---|---|
0x49a000 | 0x49a010 | 0x4964d0 | 0x49b010 | 0 | 0 |
id | lang | string |
---|---|---|
65296 | 0 | b9 22 ea 77 07 f8 20 15 c8 6a 49 c9 f6 f4 34 07 |.".w.. ..jI...4.| 67 d7 fe 68 a9 41 30 63 cb f1 2f 5d 97 05 b3 cf |g..h.A0c../]....| ea 21 5f e9 ac 56 e7 12 a6 a0 17 94 0a 48 55 0c |.!_..V.......HU.| e2 90 12 80 c4 cd 98 ed 37 c6 bc b5 7d fe 96 d3 |........7...}...| 62 59 6a 00 66 06 16 64 5f c5 b3 3c 33 ec 9f 5e |bYj.f..d_..<3..^| a9 5b 2b 12 29 a5 62 41 c1 96 38 5d 61 9f 14 50 |.[+.).bA..8]a..P| 27 c0 8c 4a b1 28 cf 2a 5a ab b0 bb 9f 1a eb 32 |'..J.(.*Z......2| eb ee f1 a6 90 f6 ca 54 67 16 77 28 f0 c0 5d d1 |.......Tg.w(..].| a0 6f c3 1e 81 49 1f 50 aa a4 1e 63 06 26 5e e6 |.o...I.P...c.&^.| 50 fc 7d 79 38 4f d5 06 3e 4c 01 9c 18 4a 22 dd |P.}y8O..>L...J".| bd 99 d3 fd ca a5 69 57 d0 bd 0d ee 3d 35 a2 c2 |......iW....=5..| c8 3c 9e 2d 5a 7f 12 a7 b3 62 e6 45 58 8d 63 9a |.<.-Z....b.EX.c.| 2a 69 56 51 dd fc b7 7d e4 c3 4c 09 bb fa 56 4e |*iVQ...}..L...VN| 9e 89 44 78 3d fc 7e 77 54 1e cd 18 2e fe 70 b4 |..Dx=.~wT.....p.| fe 86 0a d2 3b 05 c4 0c f6 20 d1 ae 10 f2 4b 01 |....;.... ....K.| f8 a0 ab f8 f2 e4 5d 9f 0e 46 c7 ba 90 84 d0 3d |......]..F.....=| de 8f c3 25 bc b1 34 62 10 f9 63 e9 9d 0b ed a4 |...%..4b..c.....| 70 7e 73 bf e2 c1 5d 00 4c c0 79 b3 a8 c4 ef 49 |p~s...].L.y....I| d5 2f c6 b1 3b 8c 57 c1 93 05 1b 8b 9b c3 1b dc |./..;.W.........| 39 e2 07 cf ac 2d 09 6e 56 94 24 da 9f 5a 96 c5 |9....-.nV.$..Z..| fc 5b c5 bf 09 40 4d c9 11 29 b5 2d 92 38 b5 cd |.[...@M..).-.8..| fc 3c b6 9c ea 53 27 17 a1 b5 2d a0 5c b1 ff d5 |.<...S'...-.\...| 11 74 a5 3d |.t.= | |
65312 | 0 | 51 41 bc c5 08 b1 f3 56 58 c2 d1 2a d5 fe f2 ae |QA.....VX..*....| f9 fc 97 79 c4 8b 57 8c 17 86 ca cd e8 be ea 0a |...y..W.........| f0 cc ca a2 58 ec ad 6f 46 5e 79 58 6b c9 d7 af |....X..oF^yXk...| 8c 18 7a b2 73 91 91 79 cb 7b 9b 94 aa 70 38 4c |..z.s..y.{...p8L| ae f3 9c c3 ad ba df 24 c9 96 f0 b8 b5 2c b3 ce |.......$.....,..| 76 56 ab f2 bd f5 54 36 94 97 ea 29 fc f7 19 3b |vV....T6...)...;| 64 9b 18 5c 0f 9a b3 b8 94 fa 05 33 0d 28 ef f5 |d..\.......3.(..| 96 d2 98 bd 5e 06 5a f0 20 c3 38 c5 68 31 85 aa |....^.Z. .8.h1..| 2c 92 40 4f cf 1c 3a 85 14 6a fb e5 ec 13 68 66 |,.@O..:..j....hf| d6 fc 2e 9d b1 c9 2f 32 72 73 6d 8e 65 d4 45 87 |....../2rsm.e.E.| 49 99 15 72 98 3e e5 69 50 58 3b 91 ed c5 60 f1 |I..r.>.iPX;...`.| 05 6a b1 6c 8a c6 bf 84 ba d1 85 72 96 bb 25 b4 |.j.l.......r..%.| f1 f7 04 07 c8 5c b9 75 d2 28 84 a8 06 e8 44 4a |.....\.u.(....DJ| 64 da a2 c9 b2 7a bf be 21 9b 83 ae c5 97 7c 37 |d....z..!.....|7| 66 e5 23 80 77 34 7e 30 9d 9b 95 fb be 82 a1 f2 |f.#.w4~0........| 2c ce d5 93 b4 66 e6 68 f0 1b b0 13 2c c4 b5 36 |,....f.h....,..6| 80 98 e6 2f 6a 6e 11 49 3d 0f c6 22 77 8f 7d e5 |.../jn.I=.."w.}.| 46 e9 ab be f2 a1 66 d8 ad b4 32 7e 6c 05 4c ef |F.....f...2~l.L.| 86 e5 9e ba 4b 5d b6 22 eb 9a 2d 37 1c 77 eb e1 |....K]."..-7.w..| 14 32 b6 82 a6 1b 73 fa 15 48 bb 6e 6a 8a 30 7c |.2....s..H.nj.0|| 87 a1 41 12 ef 00 74 e4 85 64 17 95 0f 6c 62 f9 |..A...t..d...lb.| 1d f1 23 74 e6 a1 5d e0 41 49 a9 31 6e 12 6c 3b |..#t..].AI.1n.l;| bf 1a 94 20 ac 59 4c 02 6f be f2 53 28 86 2b 83 |... .YL.o..S(.+.| 8a 7e fc 89 95 4d c0 ca 64 06 65 fc 96 2b cd 7f |.~...M..d.e..+..| 15 18 18 f5 45 8c 1e 02 67 50 64 53 24 7f ca 94 |....E...gPdS$...| 45 8b 62 5d 6d 03 e9 ef da d7 41 84 89 44 8a 85 |E.b]m.....A..D..| 9e f7 71 f4 e3 c8 cd b4 6b 5b d5 4b 1b 41 0c ef |..q.....k[.K.A..| fc a2 e9 a9 9e 73 26 9a 35 8c c4 9e 39 ba 29 d9 |.....s&.5...9.).| 4a 65 e7 15 7d de c0 6b 5b d5 6b 1b 41 19 e3 bc |Je..}..k[.k.A...| 7b e1 c5 cd d7 e7 e8 b8 ef 9e 2e 9e 22 51 ad 6f |{..........."Q.o| 5e 0d 6d 04 e7 86 72 20 e6 de 9d c6 b5 bc d3 7a |^.m...r .......z| a0 19 e7 37 ea b0 59 92 e5 63 f3 c3 c1 56 09 0c |...7..Y..c...V..| 7f 60 da f1 f3 3f 65 be 64 a5 ff 85 7c a7 d7 ad |.`...?e.d...|...| 74 7d 79 9a 61 7f a4 d9 e6 0b 8c bc 2a c3 68 75 |t}y.a.......*.hu| 46 30 dc d3 44 be b8 c5 ea 52 66 c6 a1 b5 64 a2 |F0..D....Rf...d.| c2 6f b9 59 92 9f 5c c6 d0 df 9e e5 9f 7b c6 26 |.o.Y..\......{.&| de 4c bd 2a 15 b3 f0 dc b9 4f 45 d6 0d 21 2a 09 |.L.*.....OE..!*.| de 7b ea 25 36 34 f5 ab 1b d3 8a a9 36 65 79 43 |.{.%64......6eyC| 31 cb 9f 71 16 87 a6 3a c9 21 63 e1 9f 9f b2 47 |1..q...:.!c....G| 19 e2 bc 36 af de c5 44 18 d7 c3 2a 64 d1 fc 5c |...6...D...*d..\| 11 9f 7d f8 9b 29 26 f9 47 d4 9a bf cd 99 cb 27 |..}..)&.G......'| 21 e2 84 f4 a2 2c 4a 84 7e 88 21 61 fa c8 00 da |!....,J.~.!a....| b2 73 c3 0a 34 79 7d dd fa 24 74 fe 4f 17 28 e5 |.s..4y}..$t.O.(.| 77 01 74 25 40 3b 65 95 76 2b bb 13 70 e9 17 f3 |w.t%@;e.v+..p...| 2e 65 31 51 07 58 b2 72 93 91 5c 67 04 91 f8 8a |.e1Q.X.r..\g....| 4f ea 83 f4 69 94 b6 70 54 52 e0 71 f0 c1 de f4 |O...i..pTR.q....| 6a d0 17 64 1a 63 81 90 aa e5 ad df f9 25 4b 1f |j..d.c.......%K.| ba 88 ad 0e b5 63 fc 38 d8 ac e1 92 45 d4 b1 23 |.....c.8....E..#| ff c5 b1 8a 0c d2 2d 58 dd d3 09 64 71 32 26 e9 |......-X...dq2&.| ad 80 fe 40 a8 ec e8 4b 7f 21 03 de 18 9c 1a 13 |...@...K.!......| 09 99 8c 26 f5 34 2a fb e1 e9 ac 5d b1 a3 0a 3b |...&.4*....]...;| f9 41 70 da c9 8c 40 21 85 cd 91 e3 17 ff 48 77 |.Ap...@!......Hw| eb 03 b5 34 09 d5 02 df 6e 11 16 f3 27 e3 ba 75 |...4....n...'..u| 89 aa ad 26 5c ee 23 87 78 96 5e c0 d1 07 05 d7 |...&\.#.x.^.....| 34 41 23 6f 74 b5 05 09 8b ac 70 7c bf 04 93 78 |4A#ot.....p|...x| 1a 2c 67 11 bf 83 7f 06 82 0b b1 09 2c 2d c3 ff |.,g.........,-..| a1 57 f5 c0 82 48 97 78 bf 24 c3 df 4b bf ff fc |.W...H.x.$..K...| 53 2e a8 c8 64 60 00 00 09 19 b7 63 35 11 8e d1 |S...d`.....c5...| fe 03 b7 8d e1 79 24 0b c9 e0 ea 4a 5e 88 4e 0f |.....y$....J^.N.| 1a 17 a5 a1 08 16 c1 a1 3b 6f c8 ec 0a 94 4d e2 |........;o....M.| f7 b7 95 eb 39 22 5e 09 74 21 49 d1 eb 79 cd 9c |....9"^.t!I..y..| a6 da 5b 59 38 2d 90 36 6e 7d f3 54 cd d4 57 d6 |..[Y8-.6n}.T..W.| 2c 87 b6 f0 4c 96 94 6b 1b 49 f7 c8 a4 96 05 24 |,...L..k.I.....$| 95 0b 64 94 2d b3 84 29 22 16 52 ca 21 4a 82 8b |..d.-..)".R.!J..| d1 06 e7 14 7d ce bc 5b 33 8c a4 e9 bd 37 a6 f4 |....}..[3....7..| 9d 37 a3 d1 e8 83 04 48 |.7.....H | |
65328 | 0 | d2 f5 a0 b7 83 d2 ff 7f fe 66 c9 3f 69 3d 3c 7e |.........f.?i=<~| cd f6 67 de 3f 4c dc cf 7b 3d fe cc f7 ff 02 13 |..g.?L..{=......| 9d 1f 8a e2 b7 46 fe 8b fa 2f e8 90 70 05 d4 16 |.....F.../..p...| 0d ec 33 05 30 33 2e a0 00 5f d1 67 a2 d4 69 b7 |..3.03..._.g..i.| 8e 53 80 3f 3b d9 71 b5 70 3f d1 5d 55 55 5b 78 |.S.?;.q.p?.]UU[x| 6e d0 71 9f a0 ff 2c 77 27 73 1a 24 e7 02 bb aa |n.q...,w's.$....| 6f fb 38 15 ef a7 45 b8 a0 36 89 1a 17 00 1a 79 |o.8...E..6.....y| 6b 32 d1 ed 03 1b 1f 12 51 5a 01 fb f7 e0 a1 ca |k2......QZ......| 2a e0 14 dc 02 e0 15 01 0a 1a c9 fd 79 5c 8b b4 |*...........y\..| 04 d3 cb aa 3e 63 e3 13 04 5d 80 16 60 28 fa d0 |....>c...]..`(..| 8c 20 a2 29 fd 85 f2 78 ba 40 e4 20 ef 18 f9 31 |. .)...x.@. ...1| 2d eb c2 11 2f 05 64 ac 99 08 6d c5 9b 56 59 f9 |-.../.d...m..VY.| 92 0a d8 98 25 d0 00 e0 01 dd 44 f0 84 74 ce 59 |....%.....D..t.Y| 7c c1 89 0b 78 0e 24 c0 e0 95 c6 a4 cf 14 02 80 ||...x.$.........| 25 3b c3 44 0f 70 89 bd a2 00 91 46 16 65 70 00 |%;.D.p.....F.ep.| 1e 9c 53 28 10 02 fe 8a 1b 0c b7 00 31 ce 9f 82 |..S(........1...| e4 90 6f 0f d1 06 57 19 6d e7 1a 24 40 25 f0 57 |..o...W.m..$@%.W| 97 8e 20 5c 71 ff bb 56 c1 5b 4f 2d 80 61 c2 e5 |.. \q..V.[O-.a..| f6 09 78 31 e6 cc 3b c7 1f bf f5 20 52 2a 3f 08 |..x1..;.... R*?.| 15 e1 8d 8f 96 1f 52 e9 00 00 7f 3d e8 0d ff 44 |......R....=...D| 22 aa 80 cc 21 ad b8 eb 90 92 f3 60 5d 40 26 30 |"...!......`]@&0| 01 80 30 af 99 02 50 3c 80 80 8a 00 b2 f9 40 39 |..0...P<......@9| e6 b6 fe 32 59 81 34 3f a5 d0 00 73 d1 43 dd 0a |...2Y.4?...s.C..| 6c d3 75 ec 0b 98 02 d8 17 48 2f e8 46 c1 35 46 |l.u......H/.F.5F| 19 cb 70 65 56 7b 32 17 f1 59 83 a9 f9 50 5b c8 |..peV{2..Y...P[.| 0e 55 52 c2 0c e8 98 e8 21 86 4b 0d 81 6f c0 a8 |.UR.....!.K..o..| c1 ca 57 0e 3e b1 f0 91 2e 01 d0 ad 50 84 92 60 |..W.>.......P..`| 97 b9 00 ed 81 4b 48 57 e3 a1 00 9f 7a ad 5f 28 |.....KHW....z._(| a9 6a 80 fb 8e 4a 2c 0c c5 e2 08 e5 00 16 98 00 |.j...J,.........| 3f c6 05 e6 40 c0 62 e5 80 b3 c0 0d b3 5a 82 99 |?...@.b......Z..| 71 84 09 82 62 2e e3 92 d3 17 40 51 79 7a 80 2e |q...b.....@Qyz..| 0c 00 27 dd 94 31 20 02 d7 01 7b 2c f0 54 96 5a |..'..1 ...{,.T.Z| c0 25 af 01 f5 c9 88 46 63 67 5e d8 81 32 a6 ee |.%.....Fcg^..2..| 00 2d 4a 30 26 77 57 6e 7f 75 f9 59 b8 6f e8 bf |.-J0&wWn.u.Y.o..| a2 fe 95 73 b9 e0 b8 3f 93 34 a3 b1 25 1f af 8a |...s...?.4..%...| f9 9d 69 e7 99 50 00 e2 2d e8 30 1a 05 7f 68 08 |..i..P..-.0...h.| 00 53 24 94 80 85 22 c7 65 ed 80 29 e1 49 6f 54 |.S$...".e..).IoT| 93 10 44 40 5f 75 26 01 92 52 00 96 15 f7 67 0c |..D@_u&..R....g.| 69 cf 6a 33 c5 55 d9 c3 56 00 92 0e d0 34 86 a1 |i.j3.U..V....4..| 24 38 19 43 75 1b fa 2f fd a5 01 5e ff f9 dd 27 |$8.Cu../...^...'| 23 c0 35 2e 7e 96 8a 2d 8b f6 6a fc 7a f3 44 7d |#.5.~..-..j.z.D}| ee d8 6b 5c bd 86 1e fa 15 1e bd 9f 6e 0e ae 3e |..k\........n..>| a6 bc c6 77 17 c4 f7 1c 35 b9 16 9f 61 12 ce 46 |...w....5...a..F| 10 ef 60 df aa 22 5e 1a c6 1d 1e 8e 2f 93 ed 1a |..`.."^...../...| 1b ad 0d 29 b5 d5 11 62 1b 3f 17 54 ed d1 ab f1 |...)...b.?.T....| 8a 5d 05 fe d8 bc 73 3d 3e 86 2c 67 d1 71 99 47 |.]....s=>.,g.q.G| 49 fa ef 0f f3 a3 51 9f e0 f6 fd 28 d8 63 f8 ee |I.....Q....(.c..| 55 36 2d 46 81 ec d4 c4 6a dd 22 1b 55 ef 99 61 |U6-F....j.".U..a| a8 8f 6b b4 9b 78 6f 19 37 bd b4 a9 65 c3 e7 36 |..k..xo.7...e..6| 55 83 f7 87 |U... | |
65344 | 0 | e6 eb c1 75 8b e6 ea 0b bc 85 ab ac f3 dd c6 81 |...u............| c7 7a cf 23 9f 7d 12 17 ed b6 58 ca d3 81 cd 13 |.z.#.}....X.....| ef 7e 39 98 6b 68 d1 9a ab dc d5 57 30 d3 0e ab |.~9.kh.....W0...| 76 6d 3a 66 c2 13 4e d9 c1 f7 1a 8c ff 84 de 3b |vm:f..N........;| 67 07 98 47 8f 6a 9c 2b 70 e8 0c fe 80 f7 fe c8 |g..G.j.+p.......| 9a b3 d8 c0 3a 4a 1b ab 2e 11 e1 b1 75 0e db 67 |....:J......u..g| c4 9e b5 b1 69 e6 e3 95 24 f3 82 3c 29 26 69 ff |....i...$..<)&i.| 20 85 60 78 1b bf a9 23 d5 65 c2 44 6f 46 1b d3 | .`x...#.e.DoF..| d9 33 67 59 0d f1 e9 e1 6d 5a 7e 78 58 b4 8e 5d |.3gY....mZ~xX..]| 19 25 41 a9 ee dc 3c f2 fb 3f 0f e8 2f 87 43 9a |.%A...<..?../.C.| 2d e7 80 eb 34 5c fe 75 bc ff 85 d6 4f e8 fc 6a |-...4\.u....O..j| 4a 6a 6c ef e7 9f ef 41 c6 74 b3 dd b0 f9 3f a4 |Jjl....A.t....?.| |
65360 | 0 | f2 29 a9 fb 84 21 e6 f8 5d 8c 12 f3 29 bc ec 1f |.)...!..]...)...| f9 4e 79 d0 a6 e6 d4 37 f6 a5 ff fc 19 7d b9 ea |.Ny....7.....}..| 5b d9 a2 f6 e9 dc 3e 17 8b 6f b4 c0 6b e9 03 9d |[.....>..o..k...| a1 d3 c8 76 79 0e 9f 43 9e 19 34 30 00 00 00 00 |...vy..C..40....| 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| * 00 00 00 00 00 00 00 00 00 00 00 00 |............ | |
module_name | hint | ord | function_name |
---|---|---|---|
kernel32.dll | GetProcAddress | ||
kernel32.dll | GetModuleHandleA | ||
kernel32.dll | LoadLibraryA | ||
user32.dll | GetKeyboardType | ||
advapi32.dll | RegQueryValueExA | ||
oleaut32.dll | VariantChangeTypeEx | ||
advapi32.dll | RegSetValueExA | ||
version.dll | VerQueryValueA | ||
gdi32.dll | UnrealizeObject | ||
user32.dll | WindowFromPoint | ||
ole32.dll | IsEqualGUID | ||
comctl32.dll | ImageList_SetIconSize | ||
winspool.drv | OpenPrinterA | ||
shell32.dll | ShellExecuteA | ||
shell32.dll | SHGetSpecialFolderLocation | ||
comdlg32.dll | ChooseColorA |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0xaa420
[?] can't find file_offset of VA 0xaa810
[?] can't find file_offset of VA 0xaac0c
[?] can't find file_offset of VA 0xaafe8
[?] can't find file_offset of VA 0xab33c
[?] can't find file_offset of VA 0xab430
[?] can't find file_offset of VA 0xab4f4
[?] can't find file_offset of VA 0xab7c8
[?] can't find file_offset of VA 0xabb24
[!] string size(17778) > stringtable size(356). truncated to 354
[!] cannot convert "\xEAw\a\xF8 \x15\xC8jI\xC9\xF6\xF44\ag\xD7"... to UTF-16
[!] string size(33442) > stringtable size(1048). truncated to 1046
[!] cannot convert "\xBC\xC5\b\xB1\xF3VX\xC2\xD1*\xD5\xFE\xF2\xAE\xF9\xFC"... to UTF-16
[!] string size(125860) > stringtable size(788). truncated to 786
[!] cannot convert "\xA0\xB7\x83\xD2\xFF\x7F\xFEf\xC9?i=<~\xCD\xF6"... to UTF-16
[!] string size(120780) > stringtable size(192). truncated to 190
[!] cannot convert "\xC1u\x8B\xE6\xEA\v\xBC\x85\xAB\xAC\xF3\xDD\xC6\x81\xC7z"... to UTF-16
[!] string size(21476) > stringtable size(252). truncated to 250
[!] cannot convert "\xA9\xFB\x84!\xE6\xF8]\x8C\x12\xF3)\xBC\xEC\x1F\xF9N"... to UTF-16
[?] can't find file_offset of VA 0xabdd8
[?] can't find file_offset of VA 0xabde8
[?] can't find file_offset of VA 0xac074
[?] can't find file_offset of VA 0xac9bc
[?] can't find file_offset of VA 0xacd3c
[?] can't find file_offset of VA 0xad69c
[?] can't find file_offset of VA 0xae1e4
[?] can't find file_offset of VA 0xae77c
[?] can't find file_offset of VA 0xaeb84
[?] can't find file_offset of VA 0xbaca8
[?] can't find file_offset of VA 0xbacbc
[?] can't find file_offset of VA 0xbacd0
[?] can't find file_offset of VA 0xbace4
[?] can't find file_offset of VA 0xbacf8
[?] can't find file_offset of VA 0xbad0c
[?] can't find file_offset of VA 0xbad20
[?] can't find file_offset of VA 0x964d0
[?] can't find file_offset of VA 0x0