MZ Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: b7 12 07 db f3 73 69 88  f3 73 69 88 f3 73 69 88  |.....si..si..si.|
00000050: 1a 6c 64 88 f2 73 69 88  52 69 63 68 f3 73 69 88  |.ld..si.Rich.si.|
00000060: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000070: 00 00 00 00 00 00 00 03                           |........        |

PE Header

Packer / Compiler

Sections

Data Directory

offsetsizetypecomment
032768EXE03/08/2004 01:57:36#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[!] non-zero dos stub after rich_hdr: "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03"

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x15000

[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=1852990827, TimeDateStamp=842230885, ForwarderChain=1819042862, Name=0, FirstThunk=1867251712, module_name=nil, original_first_thunk=nil, first_thunk=nil>

[?] can't find file_offset of VA 0x8001856c

[?] can't find file_offset of VA 0x5a530

[?] can't find file_offset of VA 0x101a520

[?] can't find file_offset of VA 0x420

[?] can't find file_offset of VA 0x8400

[?] ignoring invalid PEdump::BITMAPINFOHEADER