aden.exe

info
MZ
PE
resources
strings
imports
foremost
7zip
hexdump
disasm
log
discuss
donate

filename	aden.exe
size	299520 (0x49200)
md5	a02442b5c25ab5767c523ed5d878e5c3

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
37	8755	2
29	9178	2
28	9178	11
64	9210	6
28	9037	2
0	0	1
1	0	206
25	9210	14
29	9466	28
69	9111	1
61	9210	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x54342140
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x11f
Magic	0x10b
LinkerVersion	7.0
SizeOfCode	0x9000
SizeOfInitializedData	0x3f000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2af9
BaseOfCode	0x1000
BaseOfData	0xa000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x49cac
SizeOfHeaders	0x1000
CheckSum	0x5269e
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x8eeb	0x9000	R-X CODE
.rdata	0xa000	0x348d	0x4000	R-- IDATA
.data	0xe000	0x101d	0x1000	RW- IDATA
.CRT	0x10000	4	0x1000	RW- IDATA
.rsrc	0x11000	0x38cac	0x39000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xcb08	0x7b
RESOURCE	0x11000	0x38cac
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xa000	0x5d4
Delay_IAT	0xa10	0x48
CLR_Header	0	0

show previews

type	name	size	cp	r
RF	#91	608	1252	0
BITMAP	#128	1064	1252	0
ICON	#1	9640	1252	0
MENU	#102	46	1252	0
MENU	#128	296	1252	0
MENU	#129	820	1252	0
DIALOG	#100	266	1252	0
DIALOG	#131	254	1252	0
DIALOG	#134	182	1252	0
DIALOG	#135	1058	1252	0
DIALOG	#137	1120	1252	0
DIALOG	#139	350	1252	0
STRING	#9	140	1252	0
STRING	#2049	186	1252	0
STRING	#3585	54	1252	0
STRING	#3601	662	1252	0
STRING	#3603	808	1252	0
STRING	#3604	636	1252	0
STRING	#3605	262	1252	0
STRING	#3606	218	1252	0
STRING	#3697	70	1252	0
STRING	#3713	198	1252	0
STRING	#3825	504	1252	0
STRING	#3826	174	1252	0
STRING	#3841	110	1252	0
ACCELERATORS	#128	112	1252	0
GROUP_ICON	#1	20	1252	0
#240	#131	316	1252	0
#240	#135	50	1252	0
#240	#137	50	1252	0
#240	#137	0	4	589825
#240	#137	1449187978	3941720169	1530887760
#240	#137	30	1252	0
#240	#137	1468045312	3221199440	2901437013
#240	#137	0	4	65536
#240	#137	230182943	961380965	126025771
#240	#137	13631488	425984	17825792
#240	#137	2147484472	3585	2147484496
#240	#137	0	0	4
#240	#137	32768	0	262144
#240	#137	49283072	9142272	50855936
#240	#137	38273024	8421376	39845888
#240	#137	0	0	262144
#240	#137	65536	1033	1680
#240	#137	65011712	242319360	66584576
#240	#137	0	0	4
#240	#137	8421376	39845888	8486912
#240	#137	17825792	622592	26214400
#240	#137	0	67698689	90177536
#240	#137	0	4	65536
#240	#137	65536	1033	1472
#240	#137	4	65536	1033
#240	#137	50855936	32768	0
#240	#137	6553606	42991616	8617984
#240	#137	27787264	15761408	29360128
#240	#137	41418752	32768	0
#240	#137	2147484904	0	0
#240	#137	0	6684675	38273024
#240	#137	33554432	32768	0
#240	#137	2147484160	0	0
#240	#137	2	2147483768	3
#240	#137	3602	2147484544	3603
#240	#137	425984	17825792	622592
#240	#137	9437184	294912	11010048
#240	#137	2981460746	769124365	2193060742

id	lang	string
128	1033	RTDemo
129	1033	RTDemo RTDemo RTDemo.Document RTDemo Document
32774	1033	Insert a line
32775	1033	Delete a line
32776	1033	Modify a line
32782	1033	Kill the curret timer
32783	1033	Restore the timer
57344	1033	RTDemo
57345	1033	Ready
57600	1033	Create a new document New
57601	1033	Open an existing document Open
57602	1033	Close the active document Close
57603	1033	Save the active document Save
57604	1033	Save the active document with a new name Save As
57605	1033	Change the printing options Page Setup
57606	1033	Change the printer and printing options Print Setup
57607	1033	Print the active document Print
57609	1033	Display full pages Print Preview
57632	1033	Erase the selection Erase
57633	1033	Erase everything Erase All
57634	1033	Copy the selection and put it on the Clipboard Copy
57635	1033	Cut the selection and put it on the Clipboard Cut
57636	1033	Find the specified text Find
57637	1033	Insert Clipboard contents Paste
57640	1033	Repeat the last action Repeat
57641	1033	Replace specific text with different text Replace
57642	1033	Select the entire document Select All
57643	1033	Undo the last action Undo
57644	1033	Redo the previously undone action Redo
57648	1033	Open another window for the active document New Window
57649	1033	Arrange icons at the bottom of the window Arrange Icons
57650	1033	Arrange windows so they overlap Cascade Windows
57651	1033	Arrange windows as non-overlapping tiles Tile Windows
57652	1033	Arrange windows as non-overlapping tiles Tile Windows
57653	1033	Split the active window into panes Split
57664	1033	Display program information, version number and copyright About
57665	1033	Quit the application; prompts to save documents Exit
57680	1033	Switch to the next window pane Next Pane
57681	1033	Switch back to the previous window pane Previous Pane
59136	1033	EXT
59137	1033	CAP
59138	1033	NUM
59139	1033	SCRL
59140	1033	OVR
59141	1033	REC
59392	1033	Show or hide the toolbar Toggle ToolBar
59393	1033	Show or hide the status bar Toggle StatusBar
61184	1033	Change the window size
61185	1033	Change the window position
61186	1033	Reduce the window to an icon
61187	1033	Enlarge the window to full size
61188	1033	Switch to the next document window
61189	1033	Switch to the previous document window
61190	1033	Close the active window and prompts to save the documents
61202	1033	Restore the window to normal size
61203	1033	Activate Task List
61215	1033	Activate this window
61445	1033	Close print preview mode Cancel Preview

module_name	hint	ord	function_name
MFC42.DLL		2382
MFC42.DLL		5163
MFC42.DLL		6374
MFC42.DLL		4353
MFC42.DLL		5283
MFC42.DLL		2649
MFC42.DLL		1665
MFC42.DLL		3798
MFC42.DLL		4837
MFC42.DLL		4436
MFC42.DLL		2648
MFC42.DLL		2055
MFC42.DLL		6376
MFC42.DLL		3749
MFC42.DLL		5065
MFC42.DLL		1727
MFC42.DLL		2445
MFC42.DLL		2124
MFC42.DLL		5277
MFC42.DLL		2982
MFC42.DLL		3147
MFC42.DLL		3259
MFC42.DLL		4465
MFC42.DLL		3136
MFC42.DLL		3262
MFC42.DLL		2985
MFC42.DLL		3081
MFC42.DLL		2976
MFC42.DLL		3830
MFC42.DLL		3831
MFC42.DLL		3825
MFC42.DLL		3079
MFC42.DLL		4080
MFC42.DLL		4627
MFC42.DLL		4427
MFC42.DLL		527
MFC42.DLL		401
MFC42.DLL		674
MFC42.DLL		794
MFC42.DLL		5254
MFC42.DLL		2252
MFC42.DLL		3481
MFC42.DLL		641
MFC42.DLL		609
MFC42.DLL		793
MFC42.DLL		616
MFC42.DLL		800
MFC42.DLL		2514
MFC42.DLL		2575
MFC42.DLL		4078
MFC42.DLL		4396
MFC42.DLL		5241
MFC42.DLL		2385
MFC42.DLL		5290
MFC42.DLL		4441
MFC42.DLL		5261
MFC42.DLL		2446
MFC42.DLL		4424
MFC42.DLL		3574
MFC42.DLL		567
MFC42.DLL		4275
MFC42.DLL		3663
MFC42.DLL		3573
MFC42.DLL		3626
MFC42.DLL		755
MFC42.DLL		2414
MFC42.DLL		1641
MFC42.DLL		470
MFC42.DLL		1859
MFC42.DLL		4246
MFC42.DLL		3869
MFC42.DLL		2127
MFC42.DLL		2391
MFC42.DLL		5102
MFC42.DLL		5105
MFC42.DLL		4468
MFC42.DLL		3350
MFC42.DLL		975
MFC42.DLL		2880
MFC42.DLL		4153
MFC42.DLL		2383
MFC42.DLL		5284
MFC42.DLL		4437
MFC42.DLL		4428
MFC42.DLL		796
MFC42.DLL		554
MFC42.DLL		529
MFC42.DLL		402
MFC42.DLL		807
MFC42.DLL		2494
MFC42.DLL		2627
MFC42.DLL		2626
MFC42.DLL		6000
MFC42.DLL		2117
MFC42.DLL		4163
MFC42.DLL		6625
MFC42.DLL		4457
MFC42.DLL		5255
MFC42.DLL		3402
MFC42.DLL		2135
MFC42.DLL		818
MFC42.DLL		1949
MFC42.DLL		4034
MFC42.DLL		540
MFC42.DLL		2024
MFC42.DLL		4219
MFC42.DLL		2581
MFC42.DLL		1771
MFC42.DLL		6366
MFC42.DLL		2413
MFC42.DLL		4401
MFC42.DLL		3639
MFC42.DLL		692
MFC42.DLL		5875
MFC42.DLL		2567
MFC42.DLL		283
MFC42.DLL		4216
MFC42.DLL		1168
MFC42.DLL		2859
MFC42.DLL		4615
MFC42.DLL		4612
MFC42.DLL		4610
MFC42.DLL		4274
MFC42.DLL		6375
MFC42.DLL		4486
MFC42.DLL		2554
MFC42.DLL		2512
MFC42.DLL		5731
MFC42.DLL		3922
MFC42.DLL		1089
MFC42.DLL		5199
MFC42.DLL		2396
MFC42.DLL		3346
MFC42.DLL		5300
MFC42.DLL		5302
MFC42.DLL		2725
MFC42.DLL		4079
MFC42.DLL		4698
MFC42.DLL		5307
MFC42.DLL		5289
MFC42.DLL		5714
MFC42.DLL		4622
MFC42.DLL		3738
MFC42.DLL		1776
MFC42.DLL		815
MFC42.DLL		6215
MFC42.DLL		617
MFC42.DLL		5301
MFC42.DLL		5214
MFC42.DLL		296
MFC42.DLL		986
MFC42.DLL		411
MFC42.DLL		4159
MFC42.DLL		5237
MFC42.DLL		2621
MFC42.DLL		1134
MFC42.DLL		5265
MFC42.DLL		4376
MFC42.DLL		4853
MFC42.DLL		4998
MFC42.DLL		4710
MFC42.DLL		6052
MFC42.DLL		1775
MFC42.DLL		5280
MFC42.DLL		4425
MFC42.DLL		3597
MFC42.DLL		324
MFC42.DLL		4234
MFC42.DLL		1825
MFC42.DLL		4238
MFC42.DLL		4696
MFC42.DLL		3058
MFC42.DLL		3065
MFC42.DLL		6336
MFC42.DLL		2510
MFC42.DLL		2542
MFC42.DLL		5243
MFC42.DLL		5740
MFC42.DLL		1746
MFC42.DLL		5577
MFC42.DLL		3172
MFC42.DLL		5653
MFC42.DLL		4420
MFC42.DLL		4953
MFC42.DLL		4858
MFC42.DLL		2399
MFC42.DLL		4387
MFC42.DLL		3454
MFC42.DLL		3198
MFC42.DLL		6080
MFC42.DLL		6175
MFC42.DLL		4623
MFC42.DLL		4426
MFC42.DLL		338
MFC42.DLL		652
MFC42.DLL		4823
MFC42.DLL		2513
MFC42.DLL		293
MFC42.DLL		4614
MFC42.DLL		4613
MFC42.DLL		1945
MFC42.DLL		4273
MFC42.DLL		4589
MFC42.DLL		4899
MFC42.DLL		5076
MFC42.DLL		4341
MFC42.DLL		4349
MFC42.DLL		4890
MFC42.DLL		4531
MFC42.DLL		4545
MFC42.DLL		4543
MFC42.DLL		4526
MFC42.DLL		4529
MFC42.DLL		4524
MFC42.DLL		4964
MFC42.DLL		4961
MFC42.DLL		4108
MFC42.DLL		5240
MFC42.DLL		3748
MFC42.DLL		1726
MFC42.DLL		4432
MFC42.DLL		813
MFC42.DLL		560
MFC42.DLL		5260
MFC42.DLL		2535
MFC42.DLL		2642
MFC42.DLL		6111
MFC42.DLL		2113
MFC42.DLL		4723
MFC42.DLL		2379
MFC42.DLL		4508
MFC42.DLL		4299
MFC42.DLL		2864
MFC42.DLL		860
MFC42.DLL		4220
MFC42.DLL		2584
MFC42.DLL		3654
MFC42.DLL		2438
MFC42.DLL		6270
MFC42.DLL		3797
MFC42.DLL		2863
MFC42.DLL		1644
MFC42.DLL		1146
MFC42.DLL		6605
MFC42.DLL		795
MFC42.DLL		790
MFC42.DLL		2302
MFC42.DLL		2411
MFC42.DLL		2023
MFC42.DLL		4218
MFC42.DLL		2578
MFC42.DLL		4398
MFC42.DLL		3582
MFC42.DLL		3719
MFC42.DLL		2294
MFC42.DLL		2362
MFC42.DLL		2291
MFC42.DLL		2367
MFC42.DLL		2289
MFC42.DLL		2370
MFC42.DLL		6334
MFC42.DLL		4123
MFC42.DLL		537
MFC42.DLL		1841
MFC42.DLL		4588
MFC42.DLL		4370
MFC42.DLL		4892
MFC42.DLL		4533
MFC42.DLL		4340
MFC42.DLL		4347
MFC42.DLL		4889
MFC42.DLL		4963
MFC42.DLL		4960
MFC42.DLL		6054
MFC42.DLL		5281
MFC42.DLL		1725
MFC42.DLL		2091
MFC42.DLL		364
MFC42.DLL		784
MFC42.DLL		4241
MFC42.DLL		5037
MFC42.DLL		4720
MFC42.DLL		3716
MFC42.DLL		3721
MFC42.DLL		6646
MFC42.DLL		6199
MFC42.DLL		4694
MFC42.DLL		4077
MFC42.DLL		6055
MFC42.DLL		4152
MFC42.DLL		2878
MFC42.DLL		2879
MFC42.DLL		3403
MFC42.DLL		5472
MFC42.DLL		976
MFC42.DLL		5012
MFC42.DLL		3351
MFC42.DLL		4303
MFC42.DLL		5104
MFC42.DLL		5100
MFC42.DLL		3059
MFC42.DLL		2390
MFC42.DLL		2723
MFC42.DLL		2101
MFC42.DLL		5101
MFC42.DLL		4245
MFC42.DLL		1858
MFC42.DLL		825
MFC42.DLL		6117
MFC42.DLL		4407
MFC42.DLL		561
MFC42.DLL		823
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	588		fclose
MSVCRT.dll	605		fread
MSVCRT.dll	682		rewind
MSVCRT.dll	612		ftell
MSVCRT.dll	610		fseek
MSVCRT.dll	515		_wfopen
MSVCRT.dll	241		_ftol
MSVCRT.dll	402		_purecall
MSVCRT.dll	690		sprintf
MSVCRT.dll	59		_CIpow
MSVCRT.dll	606		free
MSVCRT.dll	576		calloc
MSVCRT.dll	664		memmove
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	46		void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCRT.dll	244		_gcvt
MSVCRT.dll	390		_onexit
KERNEL32.dll	382		GetModuleFileNameW
USER32.dll	255		GetClientRect
USER32.dll	196		EnableWindow
USER32.dll	403		InvalidateRect
USER32.dll	454		LoadMenuA
USER32.dll	345		GetSubMenu
USER32.dll	325		GetParent
USER32.dll	429		IsWindow
USER32.dll	437		KillTimer
USER32.dll	571		SendMessageA
USER32.dll	634		SetTimer
USER32.dll	700		UpdateWindow
USER32.dll	74		CopyRect
USER32.dll	394		InflateRect
USER32.dll	346		GetSysColor
USER32.dll	179		DrawFocusRect
USER32.dll	226		FillRect
USER32.dll	178		DrawEdge
GDI32.dll	80		CreateSolidBrush
GDI32.dll	579		SetWindowOrgEx
GDI32.dll	526		SelectObject
GDI32.dll	44		CreateCompatibleBitmap
GDI32.dll	45		CreateCompatibleDC
GDI32.dll	352		GetClipBox
GDI32.dll	140		DeleteDC
GDI32.dll	143		DeleteObject
GDI32.dll	18		BitBlt
GDI32.dll	502		Rectangle
GDI32.dll	572		SetTextColor
GDI32.dll	534		SetBkMode
GDI32.dll	58		CreateFontIndirectA
GDI32.dll	71		CreatePen
GDI32.dll	461		LineTo
GDI32.dll	465		MoveToEx
GDI32.dll	570		SetTextAlign
GDI32.dll	494		Polyline
GDI32.dll	363		GetDeviceCaps

show previews

offset	size	type	comment
0	299008	EXE	10/07/2014 17:22:08	#
15c1	15	HTM		#
49000	512	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 299520 bytes (293 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66456

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 276030

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66616

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 75192

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65598

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65848

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66372

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65818

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65806

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65734

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66610

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66672

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65902

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65692

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65738

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65606

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66214

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66160

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66360

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66188

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65814

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65770

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65622

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65750

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 66056

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65726

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65662

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65664

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65572

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65868

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65602

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 65582

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 131209

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0xdd43655e

[?] can't find file_offset of VA 0x3d00dc00

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0xfcc0ff96

[?] can't find file_offset of VA 0x58000

[?] can't find file_offset of VA 0x801

[?] can't find file_offset of VA 0x5c0

[?] can't find file_offset of VA 0x3080000

[?] can't find file_offset of VA 0x898000

[?] can't find file_offset of VA 0x660003

[?] can't find file_offset of VA 0x6600000

[?] can't find file_offset of VA 0x4

[?] can't find file_offset of VA 0xe168000

[?] can't find file_offset of VA 0x80000218

[?] can't find file_offset of VA 0x2480000

[?] can't find file_offset of VA 0x68000

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x4

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x8b8000

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0xe8000

[?] can't find file_offset of VA 0x818000

[?] can't find file_offset of VA 0x80

[?] can't find file_offset of VA 0x5b0001

[?] can't find file_offset of VA 0x5b

[?] can't find file_offset of VA 0x80000060

[?] can't find file_offset of VA 0x80000368

[?] can't find file_offset of VA 0xd00000

[?] can't find file_offset of VA 0xa6cb522f

[?] can't find file_offset of VA 0xa10