MZ Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Sections

Data Directory

offsetsizetypecomment
15c115HTM#
15d063489277BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 16

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 144

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 17

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 18

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 32

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 687044

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 2392

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 132

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 4329488

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 6201360

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 6250512

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 6254608

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 6270992

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 1040

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 33095184

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 33252368

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 33585168

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 33749008

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 37444112

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 4541529

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 4411503

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 50349406

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 4543313

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 1026067

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 183772

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 16794709

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 30179600

[?] too many errors getting resource data, stopped on 48 of 49735

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x00\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 1046288

[?] too many errors getting resource data, stopped on 294 of 65535

[?] can't find file_offset of VA 0x24230200

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x54050001

[?] can't find file_offset of VA 0x53544649

[?] can't find file_offset of VA 0x74020046

[?] can't find file_offset of VA 0x49504c41

[?] can't find file_offset of VA 0x200

[?] can't find file_offset of VA 0xb8

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x55425445

[?] can't find file_offset of VA 0x54594203

[?] can't find file_offset of VA 0xa0d0d2e

[?] can't find file_offset of VA 0x20656220

[?] can't find file_offset of VA 0x414c4654

[?] can't find file_offset of VA 0x68741200

[?] can't find file_offset of VA 0x50f020d

[?] can't find file_offset of VA 0x73696874

[?] can't find file_offset of VA 0x75722065

[?] can't find file_offset of VA 0x50130004

[?] can't find file_offset of VA 0x12000000

[?] can't find file_offset of VA 0x67

[?] can't find file_offset of VA 0x323a3a48

[?] can't find file_offset of VA 0x313a3a54

[?] can't find file_offset of VA 0xf4

[?] can't find file_offset of VA 0x41323b54

[?] can't find file_offset of VA 0x10

[?] can't find file_offset of VA 0x72206562

[?] can't find file_offset of VA 0x52543231

[?] can't find file_offset of VA 0x1

[?] can't find file_offset of VA 0x5433313a

[?] can't find file_offset of VA 0x696f7600

[?] can't find file_offset of VA 0x54414d52

[?] can't find file_offset of VA 0x65637275

[?] can't find file_offset of VA 0x2d3b3033

[?] can't find file_offset of VA 0x12000004

[?] can't find file_offset of VA 0x312a4132

[?] can't find file_offset of VA 0x45444f4e

[?] can't find file_offset of VA 0x50030000

[?] can't find file_offset of VA 0x43180000

[?] can't find file_offset of VA 0x12000380

[?] can't find file_offset of VA 0xec020141

[?] can't find file_offset of VA 0x474e4f4c

[?] can't find file_offset of VA 0x454e5953

[?] can't find file_offset of VA 0x53540033

[?] can't find file_offset of VA 0x7265706f

[?] can't find file_offset of VA 0x10010073

[?] can't find file_offset of VA 0x1200056a

[?] can't find file_offset of VA 0x41060043

[?] can't find file_offset of VA 0x15000000

[?] can't find file_offset of VA 0x4f4c3754

[?] can't find file_offset of VA 0x59535400

[?] can't find file_offset of VA 0x24544e49

[?] can't find file_offset of VA 0x21cd09b4

[?] can't find file_offset of VA 0x55435445

[?] can't find file_offset of VA 0x54414e47

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x400

[?] can't find file_offset of VA 0x4f485353

[?] can't find file_offset of VA 0x411a0000

[?] can't find file_offset of VA 0x5000000

[?] can't find file_offset of VA 0x59545308

[?] can't find file_offset of VA 0x4f200000

[?] can't find file_offset of VA 0x53210000

[?] can't find file_offset of VA 0x41455203

[?] can't find file_offset of VA 0x49575245

[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=0, TimeDateStamp=64, ForwarderChain=0, Name=0, FirstThunk=0, module_name=nil, original_first_thunk=nil, first_thunk=nil>

[?] invalid VA 0x5b9c0900 in OriginalFirstThunk[0] for ITESTRINGPROPERTY

[?] invalid VA 0x540c0000 in OriginalFirstThunk[1] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4c4f43 in OriginalFirstThunk[2] for ITESTRINGPROPERTY

[?] invalid VA 0x49544345 in OriginalFirstThunk[3] for ITESTRINGPROPERTY

[?] invalid VA 0x4e454e4f in OriginalFirstThunk[4] for ITESTRINGPROPERTY

[?] invalid VA 0x52454d55 in OriginalFirstThunk[5] for ITESTRINGPROPERTY

[?] invalid VA 0x524f5441 in OriginalFirstThunk[6] for ITESTRINGPROPERTY

[?] invalid VA 0x5e131200 in OriginalFirstThunk[8] for ITESTRINGPROPERTY

[?] invalid VA 0x540e0000 in OriginalFirstThunk[9] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4c4f43 in OriginalFirstThunk[10] for ITESTRINGPROPERTY

[?] invalid VA 0x49544345 in OriginalFirstThunk[11] for ITESTRINGPROPERTY

[?] invalid VA 0x4e454e4f in OriginalFirstThunk[12] for ITESTRINGPROPERTY

[?] invalid VA 0x52454d55 in OriginalFirstThunk[13] for ITESTRINGPROPERTY

[?] invalid VA 0x524f5441 in OriginalFirstThunk[14] for ITESTRINGPROPERTY

[?] invalid VA 0x15000082 in OriginalFirstThunk[17] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4f4346 in OriginalFirstThunk[18] for ITESTRINGPROPERTY

[?] invalid VA 0x5443454c in OriginalFirstThunk[19] for ITESTRINGPROPERTY

[?] invalid VA 0x4f504615 in OriginalFirstThunk[23] for ITESTRINGPROPERTY

[?] invalid VA 0x49544953 in OriginalFirstThunk[24] for ITESTRINGPROPERTY

[?] invalid VA 0x2400000f in OriginalFirstThunk[27] for ITESTRINGPROPERTY

[?] invalid VA 0x41455243 in OriginalFirstThunk[28] for ITESTRINGPROPERTY

[?] invalid VA 0x5df30141 in OriginalFirstThunk[30] for ITESTRINGPROPERTY

[?] invalid VA 0x74170000 in OriginalFirstThunk[31] for ITESTRINGPROPERTY

[?] invalid VA 0x6d761800 in OriginalFirstThunk[34] for ITESTRINGPROPERTY

[?] invalid VA 0x10b90074 in OriginalFirstThunk[35] for ITESTRINGPROPERTY

[?] invalid VA 0x41180000 in OriginalFirstThunk[36] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4c4f43 in OriginalFirstThunk[37] for ITESTRINGPROPERTY

[?] invalid VA 0x49544345 in OriginalFirstThunk[38] for ITESTRINGPROPERTY

[?] invalid VA 0x75004e4f in OriginalFirstThunk[39] for ITESTRINGPROPERTY

[?] invalid VA 0x56 in OriginalFirstThunk[40] for ITESTRINGPROPERTY

[?] invalid VA 0x54454724 in OriginalFirstThunk[41] for ITESTRINGPROPERTY

[?] invalid VA 0x52525543 in OriginalFirstThunk[42] for ITESTRINGPROPERTY

[?] invalid VA 0x1700005b in OriginalFirstThunk[45] for ITESTRINGPROPERTY

[?] invalid VA 0x73696874 in OriginalFirstThunk[46] for ITESTRINGPROPERTY

[?] invalid VA 0x5df30100 in OriginalFirstThunk[47] for ITESTRINGPROPERTY

[?] invalid VA 0x24000000 in OriginalFirstThunk[48] for ITESTRINGPROPERTY

[?] invalid VA 0x45564f4d in OriginalFirstThunk[49] for ITESTRINGPROPERTY

[?] invalid VA 0x5458454e in OriginalFirstThunk[50] for ITESTRINGPROPERTY

[?] invalid VA 0xff8 in OriginalFirstThunk[52] for ITESTRINGPROPERTY

[?] invalid VA 0x69687417 in OriginalFirstThunk[53] for ITESTRINGPROPERTY

[?] invalid VA 0x5d in OriginalFirstThunk[55] for ITESTRINGPROPERTY

[?] invalid VA 0x5df30900 in OriginalFirstThunk[56] for ITESTRINGPROPERTY

[?] invalid VA 0x540c0000 in OriginalFirstThunk[57] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4c4f43 in OriginalFirstThunk[58] for ITESTRINGPROPERTY

[?] invalid VA 0x49544345 in OriginalFirstThunk[59] for ITESTRINGPROPERTY

[?] invalid VA 0x54494e4f in OriginalFirstThunk[60] for ITESTRINGPROPERTY

[?] invalid VA 0x4c434d45 in OriginalFirstThunk[61] for ITESTRINGPROPERTY

[?] invalid VA 0x5ed30900 in OriginalFirstThunk[65] for ITESTRINGPROPERTY

[?] invalid VA 0x540c0000 in OriginalFirstThunk[66] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4c4f43 in OriginalFirstThunk[67] for ITESTRINGPROPERTY

[?] invalid VA 0x49544345 in OriginalFirstThunk[68] for ITESTRINGPROPERTY

[?] invalid VA 0x4f4e4e4f in OriginalFirstThunk[69] for ITESTRINGPROPERTY

[?] invalid VA 0x49464954 in OriginalFirstThunk[70] for ITESTRINGPROPERTY

[?] invalid VA 0x49544143 in OriginalFirstThunk[71] for ITESTRINGPROPERTY

[?] invalid VA 0x14004e4f in OriginalFirstThunk[72] for ITESTRINGPROPERTY

[?] invalid VA 0x2700005f in OriginalFirstThunk[73] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4f4354 in OriginalFirstThunk[74] for ITESTRINGPROPERTY

[?] invalid VA 0x5443454c in OriginalFirstThunk[75] for ITESTRINGPROPERTY

[?] invalid VA 0x4e4e4f49 in OriginalFirstThunk[76] for ITESTRINGPROPERTY

[?] invalid VA 0x4649544f in OriginalFirstThunk[77] for ITESTRINGPROPERTY

[?] invalid VA 0x54414349 in OriginalFirstThunk[78] for ITESTRINGPROPERTY

[?] invalid VA 0x4e432804 in OriginalFirstThunk[80] for ITESTRINGPROPERTY

[?] invalid VA 0x45444441 in OriginalFirstThunk[81] for ITESTRINGPROPERTY

[?] invalid VA 0x44 in OriginalFirstThunk[82] for ITESTRINGPROPERTY

[?] invalid VA 0x43280000 in OriginalFirstThunk[83] for ITESTRINGPROPERTY

[?] invalid VA 0x5458454e in OriginalFirstThunk[84] for ITESTRINGPROPERTY

[?] invalid VA 0x54434152 in OriginalFirstThunk[85] for ITESTRINGPROPERTY

[?] invalid VA 0x1 in OriginalFirstThunk[87] for ITESTRINGPROPERTY

[?] invalid VA 0x444e4328 in OriginalFirstThunk[88] for ITESTRINGPROPERTY

[?] invalid VA 0x54454c45 in OriginalFirstThunk[89] for ITESTRINGPROPERTY

[?] invalid VA 0x2 in OriginalFirstThunk[91] for ITESTRINGPROPERTY

[?] invalid VA 0x5ef70900 in OriginalFirstThunk[92] for ITESTRINGPROPERTY

[?] invalid VA 0x540c0000 in OriginalFirstThunk[93] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4c4f43 in OriginalFirstThunk[94] for ITESTRINGPROPERTY

[?] invalid VA 0x49544345 in OriginalFirstThunk[95] for ITESTRINGPROPERTY

[?] invalid VA 0x4f534e4f in OriginalFirstThunk[96] for ITESTRINGPROPERTY

[?] invalid VA 0x4f435452 in OriginalFirstThunk[97] for ITESTRINGPROPERTY

[?] invalid VA 0x5241504d in OriginalFirstThunk[98] for ITESTRINGPROPERTY

[?] invalid VA 0x5f7f0045 in OriginalFirstThunk[99] for ITESTRINGPROPERTY

[?] invalid VA 0x541e0000 in OriginalFirstThunk[100] for ITESTRINGPROPERTY

[?] invalid VA 0x4c4c4f43 in OriginalFirstThunk[101] for ITESTRINGPROPERTY

[?] invalid VA 0x49544345 in OriginalFirstThunk[102] for ITESTRINGPROPERTY

[?] invalid VA 0x4f534e4f in OriginalFirstThunk[103] for ITESTRINGPROPERTY

[?] invalid VA 0x4f435452 in OriginalFirstThunk[104] for ITESTRINGPROPERTY

[?] invalid VA 0x5241504d in OriginalFirstThunk[105] for ITESTRINGPROPERTY

[?] invalid VA 0x1800000f in OriginalFirstThunk[107] for ITESTRINGPROPERTY

[?] invalid VA 0x4d455449 in OriginalFirstThunk[108] for ITESTRINGPROPERTY

[?] invalid VA 0x5b9c0031 in OriginalFirstThunk[109] for ITESTRINGPROPERTY

[?] invalid VA 0x49180000 in OriginalFirstThunk[110] for ITESTRINGPROPERTY

[?] invalid VA 0x324d4554 in OriginalFirstThunk[111] for ITESTRINGPROPERTY

[?] invalid VA 0x63090000 in OriginalFirstThunk[113] for ITESTRINGPROPERTY

[?] invalid VA 0xc00005f in OriginalFirstThunk[114] for ITESTRINGPROPERTY

[?] invalid VA 0x4c415654 in OriginalFirstThunk[115] for ITESTRINGPROPERTY

[?] invalid VA 0x59544555 in OriginalFirstThunk[116] for ITESTRINGPROPERTY

[?] invalid VA 0x2700005f in OriginalFirstThunk[118] for ITESTRINGPROPERTY

[?] invalid VA 0x4c415654 in OriginalFirstThunk[119] for ITESTRINGPROPERTY

[?] invalid VA 0x59544555 in OriginalFirstThunk[120] for ITESTRINGPROPERTY

[?] invalid VA 0x4e415628 in OriginalFirstThunk[122] for ITESTRINGPROPERTY

[?] can't find file_offset of VA 0xb8

[?] import table: empty FirstThunk for ITESTRINGPROPERTY