comments powered byDisqus

MZ Header

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 69 73 20  61 20 66 69 6c 65 20 6c  |This is a file l|
00000020: 6f 61 64 65 72 20 20 6d  6f 64 75 6c 65 20 66 6f  |oader  module fo|
00000030: 72 20 49 44 41 24 20 20  36 ef ce 27 72 8e a0 74  |r IDA$  6..'r..t|
00000040: 72 8e a0 74 72 8e a0 74  7b f6 33 74 7a 8e a0 74  |r..tr..t{.3tz..t|
00000050: af 71 6b 74 76 8e a0 74  49 d0 a3 75 71 8e a0 74  |.qktv..tI..uq..t|
00000060: 49 d0 a5 75 66 8e a0 74  49 d0 a4 75 79 8e a0 74  |I..uf..tI..uy..t|
00000070: 49 d0 a1 75 76 8e a0 74  e5 d0 a1 75 71 8e a0 74  |I..uv..t...uq..t|
00000080: 72 8e a1 74 cb 8e a0 74  e5 d0 a5 75 77 8e a0 74  |r..t...t...uw..t|
00000090: e5 d0 a0 75 73 8e a0 74  e5 d0 a2 75 73 8e a0 74  |...us..t...us..t|
000000a0: 52 69 63 68 72 8e a0 74  00 00 00 00 ed a0 d1 e8  |Richr..t........|
000000b0: 4a 69 61 6e 67 20 59 69  6e 67 2c 20 50 65 72 73  |Jiang Ying, Pers|

PE Header

Packer / Compiler

Sections

Data Directory

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[!] non-zero dos stub after rich_hdr: "\x00\x00\x00\x00\xED\xA0\xD1\xE8Jiang Ying, Pers"