MZ Header

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

Packer / Compiler

Sections

Data Directory

TLS

offsetsizetypecomment
0251904EXE12/09/2009 07:35:22#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(7218) > stringtable size(776). truncated to 774

[!] cannot convert "\x81V6\xB6\xC4'M\\d@\x1E\x10\xD5K'\xA9"... to UTF-16

[!] string size(88632) > stringtable size(200). truncated to 198

[!] cannot convert "\xFE\xE6 `\xA8\x97\xC7{I$1\xCC\x11\xB6S\x14"... to UTF-16

[!] string size(63792) > stringtable size(380). truncated to 378

[!] cannot convert "\xF1\xEE\xB7o\x16f\x89\\[\xF9\xD8\rDzg\x99"... to UTF-16

[!] string size(34848) > stringtable size(1168). truncated to 1166

[!] cannot convert "\xA4\xA1\x86)\xBAa\xC0\ay\xF4\xA7J#\b\r\a"... to UTF-16

[!] string size(51762) > stringtable size(704). truncated to 702

[!] cannot convert "\xC6\xA9\x9EP\a\xA5\x015@\xAF\x8D$\xBFv+\xB3"... to UTF-16

[!] string size(82434) > stringtable size(224). truncated to 222

[!] cannot convert "g\x13\xA8\xE4\x99\xEC\x0E\xD89\x90\a\v\xE0\x94\xEC\x1E"... to UTF-16

[!] string size(58040) > stringtable size(188). truncated to 186

[!] cannot convert "\xC1\x99f\xE3\x1F^\v\xC3\x99`b\xA8\a '\x98"... to UTF-16

[!] string size(31936) > stringtable size(872). truncated to 870

[!] cannot convert "Z\xF8w\x17\x02\x83\xE2\x9B3\xF6\xB8\xF4\xF4\x04FX"... to UTF-16

[!] string size(96928) > stringtable size(996). truncated to 994

[!] cannot convert "\x1F\xCDC\x83\xF4lv~\x888QU\x90\x8C\xEE\x82"... to UTF-16

[!] string size(74140) > stringtable size(776). truncated to 774

[!] cannot convert "6\x8C\xABM\x88\x81\xA7`H~\xDE\x8C\x88\xC22\xCD"... to UTF-16

[!] string size(66092) > stringtable size(792). truncated to 790

[!] cannot convert "\xA3|P\x871\x9D\xDBh\xD1\xCF\xD8Q2\x9D\x9E\x06"... to UTF-16

[!] string size(113134) > stringtable size(1044). truncated to 1042

[!] cannot convert "U\xCC\x896\x87\xB0CF}\xC8\xC2\b;\xDB\xA6\xF4"... to UTF-16

[!] string size(78126) > stringtable size(1108). truncated to 1106

[!] cannot convert "\x90\x90\xE8pC4\x979\xDF\x1C\x8B\xA7\x8C\x84\x818"... to UTF-16

[!] refusing to read CURDIRENTRY beyond resource size

[?] can't find file_offset of VA 0xd176181d

[?] can't find file_offset of VA 0x1c742305

[?] can't find file_offset of VA 0x206c6a63

[?] can't find file_offset of VA 0x10002a01

[?] can't find file_offset of VA 0x1c742305

[?] can't find file_offset of VA 0x206c6a63