| filename | iDezender.exe | |
|---|---|---|
| size | 6343168 (0x60ca00) | |
| md5 | d68a96c93afcf616df708f036a2ddb80 | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x128 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 131 | 21022 | 93 |
| 150 | 20413 | 11 |
| 149 | 30729 | 67 |
| 10 | 8447 | 31 |
| 132 | 21022 | 127 |
| 109 | 50727 | 17 |
| 123 | 50727 | 44 |
| 0 | 0 | 7 |
| 49 | 9044 | 5 |
| 48 | 9044 | 75 |
| 147 | 30729 | 3 |
| 1 | 0 | 1106 |
| 131 | 30729 | 251 |
| 132 | 30729 | 809 |
| 148 | 21022 | 1 |
| 145 | 30729 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x6eb000 | 0x24aa00 | RWX CODE | |
| .rsrc | 0x6ec000 | 0x1e000 | 0x1dc00 | RWX CODE | |
| .enigma1 | 0x70a000 | 0x1000 | 0x367000 | RWX IDATA | |
| .enigma2 | 0x70b000 | 0x3d000 | 0x3d000 | RWX CODE IDATA UDATA |
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0xb0a018 | 0xb0a040 | 0xb0a040 | 0xb0a044 | 0 | 0 |
StringTable 04090000
| CompanyName | Motionite Corporation |
| FileDescription | iDezender |
| FileVersion | 9.3.0.0 |
| LegalCopyright | Copyright © 2010-2013 Motionite Corporation (www.motionite.com) |
| LegalTrademarks | iDezender is a Motionite Trademark |
| OriginalFilename | iDezender.exe |
| ProductVersion | 9.3.0.0 |
VS_FIXEDFILEINFO
| FileVersion | 9.3.0.0 |
| ProductVersion | 9.3.0.0 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
| offset | size | type | comment | |
|---|---|---|---|---|
| 15c1 | 15 | HTM | # | |
| 269b24 | 872 | PNG | (48 x 48) | # |
| 269ee0 | 5957 | GIF | (128 x 48) | # |
| 26b679 | 11480 | PNG | (251 x 52) | # |
| 26e3a5 | 10161 | PNG | (251 x 52) | # |
| 270baa | 11140 | PNG | (251 x 52) | # |
| 273782 | 8335 | PNG | (251 x 52) | # |
| 275865 | 540452 | PNG | (1920 x 1200) | # |
| 2f97dd | 10186 | PNG | (96 x 96) | # |
| 2fbffb | 6399 | PNG | (96 x 96) | # |
| 2fe897 | 733 | PNG | (64 x 64) | # |
| 2febc6 | 359 | PNG | (48 x 48) | # |
| 2fed7f | 1115 | PNG | (48 x 48) | # |
| 2ff22c | 1405 | PNG | (48 x 48) | # |
| 2ff7fb | 1086 | PNG | (48 x 48) | # |
| 2ffc8b | 1574 | PNG | (48 x 48) | # |
| 300303 | 1063 | PNG | (48 x 48) | # |
| 320b4a | 729600 | DLL | 05/18/2013 14:26:48 | # |
| 3d4649 | 208896 | DLL | 05/22/2011 11:27:39 | # |
| 3f7ac6 | 8271 | HTM | # | |
| 4076c8 | 994137 | ZIP | # | |
| 56228c | 322048 | DLL | 03/08/2010 16:22:17 | # |
| 5b1c32 | 11264 | DLL | 08/28/2008 18:04:40 | # |
| 5cfa00 | 228864 | DLL | 06/19/1992 22:22:17 | # |
| 607800 | 20992 | BIN | overlay data past EOF | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] can't find file_offset of VA 0x595000
[?] can't find file_offset of VA 0x595078
[?] can't find file_offset of VA 0x595370
[?] can't find file_offset of VA 0x595678
[?] can't find file_offset of VA 0x595900
[?] can't find file_offset of VA 0x595c70
[?] can't find file_offset of VA 0x595dd0
[?] can't find file_offset of VA 0x595f10
[?] can't find file_offset of VA 0x596028
[?] can't find file_offset of VA 0x596158
[?] can't find file_offset of VA 0x596368
[?] can't find file_offset of VA 0x596468
[?] can't find file_offset of VA 0x596510
[?] can't find file_offset of VA 0x596590
[?] can't find file_offset of VA 0x596628
[?] can't find file_offset of VA 0x5966c0
[?] can't find file_offset of VA 0x596748
[?] can't find file_offset of VA 0x5967f0
[?] can't find file_offset of VA 0x596f68
[?] can't find file_offset of VA 0x597600
[?] can't find file_offset of VA 0x597948
[?] can't find file_offset of VA 0x597da8
[?] can't find file_offset of VA 0x597f50
[?] can't find file_offset of VA 0x598a18
[?] can't find file_offset of VA 0x598d98
[?] can't find file_offset of VA 0x5997e8
[?] can't find file_offset of VA 0x599c78
[?] can't find file_offset of VA 0x59a6c8
[?] can't find file_offset of VA 0x59aa48
[?] can't find file_offset of VA 0x59b4f8
[?] can't find file_offset of VA 0x59c018
[?] can't find file_offset of VA 0x59caa8
[?] can't find file_offset of VA 0x59d5d8
[?] can't find file_offset of VA 0x59d980
[?] can't find file_offset of VA 0x59eaa0
[?] can't find file_offset of VA 0x59ee78
[?] can't find file_offset of VA 0x59f098
[?] can't find file_offset of VA 0x59fbb0
[?] can't find file_offset of VA 0x5a0360
[?] can't find file_offset of VA 0x5a10a8
[?] can't find file_offset of VA 0x5a1450
[?] can't find file_offset of VA 0x5a1770
[?] can't find file_offset of VA 0x5a1a90
[?] can't find file_offset of VA 0x5a1d50
[?] can't find file_offset of VA 0x5a1fc8
[?] can't find file_offset of VA 0x5a2298
[?] can't find file_offset of VA 0x5a2400
[?] can't find file_offset of VA 0x5a2558
[?] can't find file_offset of VA 0x5a28e8
[?] can't find file_offset of VA 0x5a2e20
[?] can't find file_offset of VA 0x5a2fc0
[?] can't find file_offset of VA 0x5a5258
[?] can't find file_offset of VA 0x5a58f8
[?] can't find file_offset of VA 0x5a5ac0
[?] can't find file_offset of VA 0x5a5fe8
[?] can't find file_offset of VA 0x5a8460
[?] can't find file_offset of VA 0x5a8b00
[?] can't find file_offset of VA 0x5a8cc8
[?] can't find file_offset of VA 0x5a91d0
[?] can't find file_offset of VA 0x5ab6a8
[?] can't find file_offset of VA 0x5abd48
[?] can't find file_offset of VA 0x5abf10
[?] can't find file_offset of VA 0x5ac448
[?] can't find file_offset of VA 0x5ae938
[?] can't find file_offset of VA 0x5aefd8
[?] can't find file_offset of VA 0x5af1a0
[?] can't find file_offset of VA 0x5af680
[?] can't find file_offset of VA 0x5b1a58
[?] can't find file_offset of VA 0x5b1be8
[?] can't find file_offset of VA 0x5b1da8
[?] can't find file_offset of VA 0x5b2448
[?] can't find file_offset of VA 0x5b2610
[?] can't find file_offset of VA 0x5b2b00
[?] can't find file_offset of VA 0x5b4ea8
[?] can't find file_offset of VA 0x5b4f70
[?] can't find file_offset of VA 0x5b5610
[?] can't find file_offset of VA 0x5b57d0
[?] can't find file_offset of VA 0x5b5cb8
[?] can't find file_offset of VA 0x5b81c8
[?] can't find file_offset of VA 0x5b8868
[?] can't find file_offset of VA 0x5b8a30
[?] can't find file_offset of VA 0x5b8f20
[?] can't find file_offset of VA 0x5bb2e8
[?] can't find file_offset of VA 0x5bb3a0
[?] can't find file_offset of VA 0x5bb528
[?] can't find file_offset of VA 0x5bb6e0
[?] can't find file_offset of VA 0x5bb748
[?] can't find file_offset of VA 0x5bb848
[?] can't find file_offset of VA 0x5bd010
[?] can't find file_offset of VA 0x5bd298
[?] can't find file_offset of VA 0x5bd310
[?] can't find file_offset of VA 0x5bda30
[?] can't find file_offset of VA 0x5be1c8
[?] can't find file_offset of VA 0x5be450
[?] can't find file_offset of VA 0x5be658
[?] can't find file_offset of VA 0x5be810
[?] can't find file_offset of VA 0x5be8c8
[?] can't find file_offset of VA 0x5be9a0
[?] can't find file_offset of VA 0x5bebc0
[?] can't find file_offset of VA 0x5bede0
[?] can't find file_offset of VA 0x5bef90
[?] too many errors getting resource data, stopped on 0 of 1
[?] can't find file_offset of VA 0x518e90
offset:( 0x )