MZ Header

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Packer / Compiler

Sections

Data Directory

TLS

offsetsizetypecomment
0341504EXE06/19/1992 22:22:17#
15c115HTM#
2e42047934PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x66bf8

[?] can't find file_offset of VA 0x66d2c

[?] can't find file_offset of VA 0x66e60

[?] can't find file_offset of VA 0x66f94

[?] can't find file_offset of VA 0x670c8

[?] can't find file_offset of VA 0x671fc

[?] can't find file_offset of VA 0x67330

[?] can't find file_offset of VA 0x67464

[?] can't find file_offset of VA 0x67634

[?] can't find file_offset of VA 0x67818

[?] can't find file_offset of VA 0x679e8

[?] can't find file_offset of VA 0x67bb8

[?] can't find file_offset of VA 0x67d88

[?] can't find file_offset of VA 0x67f58

[?] can't find file_offset of VA 0x68128

[?] can't find file_offset of VA 0x682f8

[?] can't find file_offset of VA 0x684c8

[?] can't find file_offset of VA 0x68698

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(20614) > stringtable size(356). truncated to 354

[!] cannot convert "\xF0\xCC!\xBC\xA2\xA9\xF0a)t\xC5\x14\x86\xD7\x88e"... to UTF-16

[!] string size(70694) > stringtable size(512). truncated to 510

[!] cannot convert "6\x87P\x01\xC0\xB8'@\xEA\xD16fKt\xB1R"... to UTF-16

[!] string size(92886) > stringtable size(248). truncated to 246

[!] cannot convert "\x1Ax\x80pH.F'Xr\xA4\xC8GX\xE40"... to UTF-16

[!] string size(56834) > stringtable size(808). truncated to 806

[!] cannot convert "\";Nd\xC3\x8AD\xE1%q\xB7a\xED\x90\xB5\x7F"... to UTF-16

[!] string size(33590) > stringtable size(192). truncated to 190

[!] string size(88834) > stringtable size(260). truncated to 258

[!] cannot convert "\a\xEBoO\x85\xD6\x9A\xA9\xF1h!I\x99\xD9D!"... to UTF-16

[!] string size(23680) > stringtable size(616). truncated to 614

[!] cannot convert "Y\x93\x87\x14\xEF\x1C\xA1\x00]\xC1\x10c\"\xEA?\xF9"... to UTF-16

[!] string size(33700) > stringtable size(1016). truncated to 1014

[!] cannot convert "\x11q\xC3\x03o\xED\xE2\xB53\xA9\x90\xE4\x86\x1D6\xBF"... to UTF-16

[!] string size(2570) > stringtable size(912). truncated to 910

[!] cannot convert "P.\x9C\xD0\xC3(\b\x8FC~\x8B\xD8\x17e\xC5{"... to UTF-16

[!] string size(122144) > stringtable size(1056). truncated to 1054

[!] cannot convert "\xC6\x01\x03\xCFA7\xCF\xB0\x03\x062\xFE\xCB\xF6\x06\x15"... to UTF-16

[!] string size(87408) > stringtable size(432). truncated to 430

[!] cannot convert "\xA9\x87\t\xD8\x83@\xAF\xA4\x8D7\x19@E\x93\xFF\xFE"... to UTF-16

[!] string size(29096) > stringtable size(236). truncated to 234

[!] cannot convert "\tG+\x96\xB9\xD2U\x9D\x06\xDC@\x02\xDB\x98DV"... to UTF-16

[!] string size(34960) > stringtable size(484). truncated to 482

[!] cannot convert "\xE2I\xDA4\xDB\x03\xC3V\x88 \x84%\x97\x00\xEA\x13"... to UTF-16

[!] string size(127230) > stringtable size(1012). truncated to 1010

[!] cannot convert "\xC7\x00\x8E\x16\eH\x12\xA9\x17\xF0\xC6\e-\xFCx%"... to UTF-16

[!] string size(80974) > stringtable size(820). truncated to 818

[!] cannot convert "a\xCF\xDB<%$ /\x19p\"\xEB <O#"... to UTF-16

[!] string size(7928) > stringtable size(692). truncated to 690

[!] cannot convert "\xB7\xA5\xD2\x95v\vh\x1F\x16F\x11\b\x84ra\x92"... to UTF-16

[!] refusing to read CURDIRENTRY beyond resource size

[?] can't find file_offset of VA 0x570a0