comments powered byDisqus

MZ Header

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Packer / Compiler

Sections

Data Directory

TLS

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(124886) > stringtable size(136). truncated to 134

[!] cannot convert "\xFF\xC6q\x8C\xA8\xB6\xB6dz\x9B\x8D\x06\x14\xEC\xC0\xB8"... to UTF-16

[!] string size(102238) > stringtable size(724). truncated to 722

[!] cannot convert "\xB9\xD3\xD9|\xF9 \xE6\xF6\xF7Y\x8E\xF5\xB7\x94(\x82"... to UTF-16

[!] string size(126178) > stringtable size(822). truncated to 820

[!] cannot convert "\xF9\xB60t\xE3Dz\x04?Fh\x0E \xD0q\x80"... to UTF-16

[!] string size(29380) > stringtable size(634). truncated to 632

[!] cannot convert "\x1C\x14\x87\xF0\xD5Q\xDF\x96cG\xCChVj\xFB,"... to UTF-16

[!] string size(117420) > stringtable size(814). truncated to 812

[!] cannot convert "8\x1F\x9E*\xB2\xB7\x82\xB2\x98\":GJ\x7F\xBE\x00"... to UTF-16

[!] string size(65352) > stringtable size(472). truncated to 470

[!] cannot convert "\xEC^KE\xFF\xAA\x7Fj\xA8\x17,w\xCD\x13s\x96"... to UTF-16

[!] string size(110250) > stringtable size(44). truncated to 42

[!] cannot convert "(\xB3\x8Cgf\xD5\xE7\e\xCDvpk\x1D\xCD\xBA\xEE"... to UTF-16

[!] string size(46314) > stringtable size(1424). truncated to 1422

[!] cannot convert "g\t\xE1\x97C\f7\xE3 \xEB~\xA6\xA3\\\x8C\xA4"... to UTF-16

[!] string size(76456) > stringtable size(1180). truncated to 1178

[!] cannot convert "\xE1-\xA5\xFD\xFE\x9B\xEB\xDDh\x11x\xAB\x1AZe\xEE"... to UTF-16

[!] string size(79996) > stringtable size(536). truncated to 534

[!] cannot convert "\xEBh\x80\xCB\xC4\x17\xA96q\x99\xB9p`5n\xB9"... to UTF-16

[!] string size(47118) > stringtable size(744). truncated to 742

[!] cannot convert "A\x81\xCFLw\xA3\xD9\xF6M\xDE\xA1l\x11Q\xC9\x9B"... to UTF-16

[!] string size(56230) > stringtable size(696). truncated to 694

[!] cannot convert "\xA3\xC1E\xBE\xF76\x7FB\x19\x88\xCD\v\x03\xC7\x7Fe"... to UTF-16

[!] string size(98174) > stringtable size(1176). truncated to 1174

[!] cannot convert "U\xA4'\xA8\xC2\xBE(<2\xC4\xA8\xF2d\xFB\xC9D"... to UTF-16

[!] string size(45694) > stringtable size(1392). truncated to 1390

[!] cannot convert "\xAEM\xF7J\xE3\x80\"\x9Fh\xAC4\x1CrOuL"... to UTF-16

[!] string size(102826) > stringtable size(1016). truncated to 1014

[!] cannot convert "\x10\xAA\xAD\x17\xB0\xB7k\x9B\xFB\xCFcS\b\x1EyJ"... to UTF-16

[!] string size(110228) > stringtable size(1204). truncated to 1202

[!] cannot convert "r\a\xE4\xDFF\xA3!\xD2\xF1\xE9'\xE9D\x1A\x81\xCC"... to UTF-16

[!] string size(38382) > stringtable size(1292). truncated to 1290

[!] cannot convert "\xAF\f{\xCC\xB3\xA0\xB7\xFF\xA8\xFD\x8Ei\n\x14\xB4\xEA"... to UTF-16

[!] string size(29930) > stringtable size(1368). truncated to 1366

[!] cannot convert "w]\x85\xB5\x1F\xB4\xFDM\xC7\xAE\x81\xA7\xFF\xB8\x80\x8F"... to UTF-16

[!] string size(80466) > stringtable size(1164). truncated to 1162

[!] cannot convert "g\b\xF8\x7F\xC5p\xEE\x17\x9C\xC7\xEFv\x04\xD2\x9D\xC4"... to UTF-16

[!] string size(21332) > stringtable size(632). truncated to 630

[!] cannot convert ";\xE4\x82\x17\t\xAA\xF2\xA0\xB8\xC3\x8E\xE9#K\xB3\xDD"... to UTF-16

[!] string size(105102) > stringtable size(512). truncated to 510

[!] cannot convert "G\x105\"\x1Da\xB0w\xBE\xF3\x90\x94\x9Cc\x1D\xF6"... to UTF-16

[!] string size(22040) > stringtable size(248). truncated to 246

[!] cannot convert "Ut\xD7!\xE5d\x81\xA9\xE89\xAE\x10\xCB=\xA7\xB2"... to UTF-16

[!] string size(105480) > stringtable size(904). truncated to 902

[!] cannot convert "\x832\xCEKs\xC5B\x00X\x1C\x83\x82\x94\xDF\xC1\x0E"... to UTF-16

[!] string size(22938) > stringtable size(740). truncated to 738

[!] cannot convert "\xB51u\x12=v\xDCm\xFB\xAF\x01\x00\xEB\xE8b%"... to UTF-16

[!] string size(68536) > stringtable size(404). truncated to 402

[!] cannot convert "\x97\xC4\xC7\xDA\xB5\xBA\xB2\x12\x8A\x83\xAF;\xF4E|L"... to UTF-16

[!] string size(86128) > stringtable size(236). truncated to 234

[!] cannot convert "\\\xA5\x18\xC99\xD4\x92\xD3\e~\xBB\xECp\x9F\x9B\x99"... to UTF-16

[!] string size(106762) > stringtable size(424). truncated to 422

[!] cannot convert "\xE2\xE3.}\xAB\xFA\x83f\x03\xDFJ\x8A\x1El\vA"... to UTF-16

[!] string size(76496) > stringtable size(696). truncated to 694

[!] cannot convert "\b\x94\x9AH.\x9B,SbR\xC2)\xB9[c\x01"... to UTF-16

[!] string size(37528) > stringtable size(1072). truncated to 1070

[!] cannot convert "P\xF5\xAD\xAFe\x9Du\xF5\x1F\x02\xB3\xAC.\xBA\nN"... to UTF-16

[!] string size(55556) > stringtable size(900). truncated to 898

[!] cannot convert "I\x1A\x9F2\xC5\xB7\\ \xFCKI\xA6\xA0\x13\xB4c"... to UTF-16

[!] string size(3266) > stringtable size(904). truncated to 902

[!] cannot convert "\x87\x02^W>\xB6DM\a\xD0\xA1?jOiO"... to UTF-16

[!] string size(75778) > stringtable size(952). truncated to 950

[!] cannot convert " \x80\xA0\xBC\xB6\xD7P\x9C\xC8,t\xF5\x03\xBCku"... to UTF-16

[!] string size(54552) > stringtable size(1076). truncated to 1074

[!] cannot convert "\x02\x05\x1D\x02-Y\xBE\x9D\x9C\xF2\x1F\xB5\xC1z\xB0O"... to UTF-16

[!] string size(32648) > stringtable size(476). truncated to 474

[!] cannot convert "BU\x7FYC\x19!\xD3)\x10\xDCPA\x87q\x7F"... to UTF-16

[!] string size(84046) > stringtable size(236). truncated to 234

[!] cannot convert "fr\x98\"\xE9\xF6\xE6\xB8j\x04\xEC#E\x03\x88\x87"... to UTF-16

[!] string size(106578) > stringtable size(496). truncated to 494

[!] cannot convert "\v62\x98\x0F\xF8}a\xCF\xE8\xC0\xD8<\xA1\x9A\xAF"... to UTF-16

[!] string size(58990) > stringtable size(1064). truncated to 1062

[!] cannot convert "\xC0cy\xF3!\x82\xDB\xA6\xE36*\x12\x1C\x01;\xD2"... to UTF-16

[!] string size(36480) > stringtable size(956). truncated to 954

[!] cannot convert "r5\xDF\x93\x875h\xF6r\xE7\x84\xB5\xAE\xF5\xFD+"... to UTF-16

[!] string size(21564) > stringtable size(764). truncated to 762

[!] cannot convert "\x8CA\x00\xDE\x1E+\x88\xF5\n\x06%\xFEx\x91\xA1\xC9"... to UTF-16

[!] string size(97178) > stringtable size(856). truncated to 854

[!] cannot convert "Z\tv\xE7s\x17F\xAD\xCCf\xFEC\xD1H\xAE\""... to UTF-16

[?] can't find file_offset of VA 0x2a168c

[?] can't find file_offset of VA 0x2a1e40

[?] can't find file_offset of VA 0x2a27c8

[?] can't find file_offset of VA 0x2a2b3c

[?] can't find file_offset of VA 0x2a3238

[?] can't find file_offset of VA 0x2a3b18

[?] can't find file_offset of VA 0x2a3e18

[?] can't find file_offset of VA 0x2a4114

[?] can't find file_offset of VA 0x2a49c8

[?] can't find file_offset of VA 0x2c3914

[?] can't find file_offset of VA 0x2c4364

[?] can't find file_offset of VA 0x2c48d8

[?] can't find file_offset of VA 0x2c58cc

[?] can't find file_offset of VA 0x2c7cec

[?] can't find file_offset of VA 0x2d4ef0

[?] can't find file_offset of VA 0x2d51fc

[?] can't find file_offset of VA 0x2d572c

[?] can't find file_offset of VA 0x2d5aa4

[?] can't find file_offset of VA 0x2d5f24

[?] can't find file_offset of VA 0x30a05c

[?] can't find file_offset of VA 0x30a7c4

[?] can't find file_offset of VA 0x30b224

[?] can't find file_offset of VA 0x30bea8

[?] can't find file_offset of VA 0x30e02c

[?] can't find file_offset of VA 0x30e324

[?] can't find file_offset of VA 0x30e608

[?] can't find file_offset of VA 0x30eb34

[?] can't find file_offset of VA 0x30f260

[?] can't find file_offset of VA 0x30f644

[?] can't find file_offset of VA 0x30fce4

[?] can't find file_offset of VA 0x31001c

[?] can't find file_offset of VA 0x310dc0

[?] can't find file_offset of VA 0x3113d8

[?] can't find file_offset of VA 0x3116c8

[?] can't find file_offset of VA 0x311ad8

[?] can't find file_offset of VA 0x311f6c

[?] can't find file_offset of VA 0x31886c

[?] can't find file_offset of VA 0x318c30

[?] can't find file_offset of VA 0x318dc0

[?] can't find file_offset of VA 0x3197c4

[?] can't find file_offset of VA 0x319e98

[?] can't find file_offset of VA 0x31a4d0

[?] can't find file_offset of VA 0x31a4e4

[?] can't find file_offset of VA 0x31a4f8

[?] can't find file_offset of VA 0x31a50c

[?] can't find file_offset of VA 0x31a520

[?] can't find file_offset of VA 0x31a534

[?] can't find file_offset of VA 0x31a548

[?] can't find file_offset of VA 0x31a55c

[?] can't find file_offset of VA 0x31a570

[?] can't find file_offset of VA 0x31a584

[?] can't find file_offset of VA 0x31a598

[?] can't find file_offset of VA 0x31a5ac

[?] can't find file_offset of VA 0x31a5c0

[?] can't find file_offset of VA 0x31a5d4

[?] can't find file_offset of VA 0x31a5e8

[?] can't find file_offset of VA 0x31a5fc

[?] can't find file_offset of VA 0x0