filenamemstsc.exe
size1049600 (0x100400)
md568b4a549d0b56a4dd9a488751037cf09
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1493072915
1313072998
1473072945
10520
13230729107
126507271
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4ce7a161
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x63800
SizeOfInitializedData0x9d800
SizeOfUninitializedData0
AddressOfEntryPoint0x45ade
BaseOfCode0x1000
BaseOfData0x65000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion5.1
Reserved10
SizeOfImage0x104000
SizeOfHeaders0x600
CheckSum0x1079ab
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x40000
SizeOfStackCommit0x8000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x637b40x63800R-X CODE
.data0x650000x20d80x1000RW- IDATA
.rsrc0x680000x944f80x94600R-- IDATA
.reloc0xfd0000x6e480x7000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x622980x1a4
RESOURCE0x680000x944f8
EXCEPTION00
SECURITY00
BASERELOC0xfd0000x5570
DEBUG0x18000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x17b280x40
Bound_IAT0x2800x1a4
IAT0x10000x6f4
Delay_IAT00
CLR_Header00
typenamesizecp
MUI#12720
REGISTRY#150277300
REGISTRY#150283070
TYPELIB#118720
BITMAP#62510960
BITMAP#62622020
BITMAP#62711020
BITMAP#62825580
BITMAP#62911300
BITMAP#63023220
BITMAP#675204080
BITMAP#67613340
BITMAP#6775060
BITMAP#678319600
BITMAP#67914020
BITMAP#6807540
BITMAP#681460960
BITMAP#68214700
BITMAP#6838660
BITMAP#68422160
BITMAP#68533160
BITMAP#68647400
ICON#1538040
ICON#211280
ICON#317200
ICON#424400
ICON#542640
ICON#667600
ICON#796400
ICON#8169360
ICON#9676240
ICON#102960
ICON#1113840
ICON#1211280
ICON#1313840
ICON#1411280
ICON#1522160
ICON#1637520
ICON#1742640
ICON#1896400
ICON#1922160
ICON#2037520
ICON#2142640
ICON#2296400
ICON#2311280
ICON#2442640
ICON#2567600
ICON#2696400
ICON#2722160
ICON#2837520
ICON#2942640
ICON#3096400
ICON#3122160
ICON#3237520
ICON#3342640
ICON#3496400
ICON#3522160
ICON#3637520
ICON#3742640
ICON#3896400
ICON#3922160
ICON#4037520
ICON#4142640
ICON#4296400
ICON#4322160
ICON#4437520
ICON#4542640
ICON#4696400
ICON#4722160
ICON#4837520
ICON#4942640
ICON#5096400
ICON#5122160
ICON#5237520
ICON#5342640
ICON#5496400
ICON#5522160
ICON#5637520
ICON#5742640
ICON#5896400
ICON#5922160
ICON#6037520
ICON#6142640
ICON#6296400
ICON#6322160
ICON#6437520
ICON#6542640
ICON#6696400
ICON#6722160
ICON#6837520
ICON#6942640
ICON#7096400
ICON#7122160
ICON#7237520
ICON#7342640
ICON#7496400
GROUP_ICON#1011320
GROUP_ICON#380480
GROUP_ICON#381340
GROUP_ICON#13000620
GROUP_ICON#13001620
GROUP_ICON#13002620
GROUP_ICON#13003620
GROUP_ICON#13004620
GROUP_ICON#13005620
GROUP_ICON#13006620
GROUP_ICON#13007620
GROUP_ICON#13008620
GROUP_ICON#13009620
GROUP_ICON#13010620
GROUP_ICON#13011620
GROUP_ICON#13012620
GROUP_ICON#13013620
GROUP_ICON#14026620
VERSION#19200
MANIFEST#111780
module_namehintordfunction_name
ADVAPI32.dll758TraceMessage
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll347GetTraceEnableFlags
ADVAPI32.dll348GetTraceEnableLevel
ADVAPI32.dll349GetTraceLoggerHandle
ADVAPI32.dll650RegisterTraceGuidsW
ADVAPI32.dll770UnregisterTraceGuids
ADVAPI32.dll637RegSetValueExA
ADVAPI32.dll141CredGetSessionTypes
ADVAPI32.dll169CredWriteW
ADVAPI32.dll158CredReadW
ADVAPI32.dll163CredUnmarshalCredentialW
ADVAPI32.dll568RegCreateKeyExA
ADVAPI32.dll608RegOpenKeyExA
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll168CredWriteDomainCredentialsW
ADVAPI32.dll157CredReadDomainCredentialsW
ADVAPI32.dll356GetUserNameA
ADVAPI32.dll134CredDeleteW
ADVAPI32.dll140CredFree
KERNEL32.dll669GetUserDefaultUILanguage
KERNEL32.dll621GetSystemDefaultUILanguage
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll516GetLocaleInfoW
KERNEL32.dll140CreateFileMappingW
KERNEL32.dll854MapViewOfFile
KERNEL32.dll333FindResourceExW
KERNEL32.dll944RaiseException
KERNEL32.dll662GetTimeFormatW
KERNEL32.dll456GetDateFormatW
KERNEL32.dll739InitializeCriticalSection
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll723HeapSetInformation
KERNEL32.dll1202Sleep
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll168CreateProcessW
KERNEL32.dll1252VerSetConditionMask
KERNEL32.dll1256VerifyVersionInfoW
KERNEL32.dll485GetFileAttributesExW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll325FindNextFileW
KERNEL32.dll302FindClose
KERNEL32.dll644GetTempPathW
KERNEL32.dll1124SetFilePointer
KERNEL32.dll360GetACP
KERNEL32.dll1137SetLastError
KERNEL32.dll505GetFullPathNameW
KERNEL32.dll488GetFileAttributesW
KERNEL32.dll1346lstrcmpW
KERNEL32.dll100CompareStringW
KERNEL32.dll836LocalAlloc
KERNEL32.dll840LocalFree
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll675GetVersionExW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll350FormatMessageW
KERNEL32.dll1052SearchPathW
KERNEL32.dll609GetStartupInfoA
KERNEL32.dll199DebugBreak
KERNEL32.dll1358lstrlenW
KERNEL32.dll513GetLocalTime
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1222TlsFree
KERNEL32.dll851LockResource
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll1317WriteFile
KERNEL32.dll630GetSystemTime
KERNEL32.dll828LoadLibraryA
KERNEL32.dll284ExpandEnvironmentStringsA
KERNEL32.dll221DeviceIoControl
KERNEL32.dll715HeapAlloc
KERNEL32.dll584GetProcessHeap
KERNEL32.dll719HeapFree
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll632GetSystemTimeAsFileTime
KERNEL32.dll658GetTickCount
KERNEL32.dll934QueryPerformanceCounter
KERNEL32.dll531GetModuleHandleA
KERNEL32.dll1188SetUnhandledExceptionFilter
KERNEL32.dll904OutputDebugStringA
KERNEL32.dll673GetVersion
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll748InterlockedExchange
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll391GetCommandLineW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll334FindResourceW
KERNEL32.dll833LoadResource
KERNEL32.dll1201SizeofResource
KERNEL32.dll870MultiByteToWideChar
KERNEL32.dll354FreeLibrary
KERNEL32.dll1112SetEvent
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll133CreateEventW
KERNEL32.dll181CreateThread
KERNEL32.dll530GetModuleFileNameW
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll534GetModuleHandleW
KERNEL32.dll579GetProcAddress
KERNEL32.dll831LoadLibraryW
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll1216TerminateProcess
KERNEL32.dll674GetVersionExA
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll214DeleteFileW
KERNEL32.dll143CreateFileW
KERNEL32.dll494GetFileSize
KERNEL32.dll959ReadFile
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll82CloseHandle
KERNEL32.dll512GetLastError
KERNEL32.dll238EnterCriticalSection
GDI32.dll230DeleteObject
GDI32.dll672SetRectRgn
GDI32.dll455GetDCOrgEx
GDI32.dll448GetClipBox
GDI32.dll34CombineRgn
GDI32.dll301EqualRgn
GDI32.dll604RealizePalette
GDI32.dll632SelectPalette
GDI32.dll509GetObjectW
GDI32.dll525GetStockObject
GDI32.dll459GetDeviceCaps
GDI32.dll631SelectObject
GDI32.dll48CreateCompatibleDC
GDI32.dll701UpdateColors
GDI32.dll227DeleteDC
GDI32.dll19BitBlt
GDI32.dll64CreateFontIndirectW
GDI32.dll698TranslateCharsetInfo
GDI32.dll660SetMapMode
GDI32.dll639SetBkMode
GDI32.dll678SetTextColor
GDI32.dll691StretchBlt
GDI32.dll47CreateCompatibleBitmap
GDI32.dll457GetDIBColorTable
GDI32.dll73CreatePalette
GDI32.dll80CreateRectRgnIndirect
GDI32.dll79CreateRectRgn
USER32.dll656SetDlgItemTextW
USER32.dll295GetDlgItem
USER32.dll658SetFocus
USER32.dll636SendMessageW
USER32.dll349GetMessageW
USER32.dll764TranslateMessage
USER32.dll475IsWindow
USER32.dll175DispatchMessageW
USER32.dll60CharUpperW
USER32.dll569PostThreadMessageW
USER32.dll49CharNextW
USER32.dll715SetWindowTextW
USER32.dll493LoadIconW
USER32.dll269GetClassInfoExW
USER32.dll774UnregisterClassW
USER32.dll686SetRect
USER32.dll2AdjustWindowRect
USER32.dll482IsZoomed
USER32.dll491LoadCursorW
USER32.dll648SetCursor
USER32.dll10AppendMenuW
USER32.dll549OffsetRect
USER32.dll445IntersectRect
USER32.dll747SystemParametersInfoA
USER32.dll216EnableWindow
USER32.dll735ShowWindow
USER32.dll85CopyRect
USER32.dll465IsIconic
USER32.dll411GetWindowPlacement
USER32.dll412GetWindowRect
USER32.dll382GetSystemMetrics
USER32.dll110CreateWindowExW
USER32.dll485LoadAcceleratorsW
USER32.dll589RegisterClassExW
USER32.dll156DefWindowProcW
USER32.dll659SetForegroundWindow
USER32.dll166DestroyWindow
USER32.dll457IsChild
USER32.dll762TranslateAcceleratorW
USER32.dll461IsDialogMessageW
USER32.dll172DialogBoxParamW
USER32.dll99CreateDialogParamW
USER32.dll533MessageBoxW
USER32.dll6AllowSetForegroundWindow
USER32.dll406GetWindowLongW
USER32.dll708SetWindowLongW
USER32.dll462IsDlgButtonChecked
USER32.dll483KillTimer
USER32.dll699SetTimer
USER32.dll62CheckDlgButton
USER32.dll218EndDialog
USER32.dll566PostMessageW
USER32.dll748SystemParametersInfoW
USER32.dll270GetClassInfoW
USER32.dll149DefDlgProcW
USER32.dll590RegisterClassW
USER32.dll576PtInRect
USER32.dll468IsRectEmpty
USER32.dll538MonitorFromWindow
USER32.dll351GetMonitorInfoW
USER32.dll506LoadStringW
USER32.dll773UnregisterClassA
USER32.dll243EqualRect
USER32.dll442InsertMenuW
USER32.dll106CreateMenu
USER32.dll535ModifyMenuW
USER32.dll381GetSystemMenu
USER32.dll710SetWindowPos
USER32.dll276GetClientRect
USER32.dll785UpdateWindow
USER32.dll446InvalidateRect
USER32.dll480IsWindowVisible
USER32.dll709SetWindowPlacement
USER32.dll509LockWindowUpdate
USER32.dll539MoveWindow
USER32.dll3AdjustWindowRectEx
USER32.dll214EnableMenuItem
USER32.dll567PostQuitMessage
USER32.dll46CharLowerW
USER32.dll246FillRect
USER32.dll65CheckRadioButton
USER32.dll288GetCursorPos
USER32.dll402GetWindowDC
USER32.dll200DrawIconEx
USER32.dll300GetFocus
USER32.dll516MapDialogRect
USER32.dll621ScreenToClient
USER32.dll398GetWindow
USER32.dll208DrawTextW
USER32.dll230EnumDisplayMonitors
USER32.dll291GetDesktopWindow
USER32.dll97CreateDialogIndirectParamW
USER32.dll298GetDlgItemTextW
USER32.dll521MapWindowPoints
USER32.dll14BeginPaint
USER32.dll199DrawIcon
USER32.dll220EndPaint
USER32.dll627SendDlgItemMessageW
USER32.dll289GetDC
USER32.dll613ReleaseDC
USER32.dll163DestroyIcon
USER32.dll331GetMenu
USER32.dll495LoadImageW
USER32.dll476IsWindowEnabled
USER32.dll586RedrawWindow
USER32.dll736ShowWindowAsync
msvcrt.dll342_errno
msvcrt.dll1011_wcslwr
msvcrt.dll1229iswdigit
msvcrt.dll1133_wtol
msvcrt.dll1382wcstok
msvcrt.dll1361wcschr
msvcrt.dll1017_wcsnicmp
msvcrt.dll1157calloc
msvcrt.dll145__getmainargs
msvcrt.dll276_cexit
msvcrt.dll354_exit
msvcrt.dll1376wcsrchr
msvcrt.dll1294srand
msvcrt.dll1332time
msvcrt.dll1234iswspace
msvcrt.dll1338toupper
msvcrt.dll1129_wtoi
msvcrt.dll1375wcspbrk
msvcrt.dll1340towupper
msvcrt.dll1339towlower
msvcrt.dll106_XcptFilter
msvcrt.dll500_ismbblead
msvcrt.dll1167exit
msvcrt.dll231_acmdln
msvcrt.dll469_initterm
msvcrt.dll1258memcpy
msvcrt.dll968_vsnprintf
msvcrt.dll1371wcsncmp
msvcrt.dll1380wcsstr
msvcrt.dll1260memmove
msvcrt.dll1007_wcsicmp
msvcrt.dll974_vsnwprintf
msvcrt.dll764_purecall
msvcrt.dll257_amsg_exit
msvcrt.dll212__setusermatherr
msvcrt.dll185__p__commode
msvcrt.dll1154bsearch
msvcrt.dll1341ungetc
msvcrt.dll367_fileno
msvcrt.dll772_read
msvcrt.dll207__pioinfo
msvcrt.dll190__p__fmode
msvcrt.dll1385wcstombs
msvcrt.dll1228iswctype
msvcrt.dll1390wctomb
msvcrt.dll1241localeconv
msvcrt.dll1237isxdigit
msvcrt.dll1218isleadbyte
msvcrt.dll176__mb_cur_max
msvcrt.dll1255mbtowc
msvcrt.dll1216isdigit
msvcrt.dll18void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll1262memset
msvcrt.dll41void * __cdecl operator new[](unsigned int)

??_U@YAPAXI@Z

msvcrt.dll1190free
msvcrt.dll1246malloc
msvcrt.dll43void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

msvcrt.dll20void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll295_controlfp
msvcrt.dll55void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll68_CIpow
msvcrt.dll747_onexit
msvcrt.dll578_lock
msvcrt.dll141__dllonexit
msvcrt.dll934_unlock
msvcrt.dll1279realloc
msvcrt.dll210__set_app_type
msvcrt.dll133__badioinfo
ole32.dll95CoRevokeClassObject
ole32.dll8CLSIDFromString
ole32.dll377StringFromGUID2
ole32.dll104CoTaskMemFree
ole32.dll83CoRegisterClassObject
ole32.dll108CoUninitialize
ole32.dll62CoInitialize
ole32.dll105CoTaskMemRealloc
ole32.dll103CoTaskMemAlloc
ole32.dll16CoCreateInstance
OLEAUT32.dll186
OLEAUT32.dll6
OLEAUT32.dll2
OLEAUT32.dll161
OLEAUT32.dll163
OLEAUT32.dll277
OLEAUT32.dll77
OLEAUT32.dll19
OLEAUT32.dll20
OLEAUT32.dll21
OLEAUT32.dll22
OLEAUT32.dll16
OLEAUT32.dll149
OLEAUT32.dll9
OLEAUT32.dll4
OLEAUT32.dll15
OLEAUT32.dll8
OLEAUT32.dll150
OLEAUT32.dll7
SHELL32.dll223SHGetSpecialFolderLocation
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll207SHGetMalloc
SHELL32.dll43ExtractIconW
SHELL32.dll289ShellExecuteExW
SHELL32.dll112SHAddToRecentDocs
SHELL32.dll182SHGetDesktopFolder
COMCTL32.dll111ImageList_ReplaceIcon
COMCTL32.dll105ImageList_LoadImageW
COMCTL32.dll123InitCommonControlsEx
COMCTL32.dll83ImageList_Create
COMCTL32.dll84ImageList_Destroy
COMCTL32.dll17
COMDLG32.dll10GetFileTitleW
COMDLG32.dll14GetSaveFileNameW
COMDLG32.dll12GetOpenFileNameW
SHLWAPI.dll71PathFindExtensionW
SHLWAPI.dll52PathAppendW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll255SHStrDupW
SHLWAPI.dll149PathStripPathW
SHLWAPI.dll139PathRemoveFileSpecW
CRYPT32.dll116CertVerifyCertificateChainPolicy
CRYPT32.dll64CertFreeCertificateContext
CRYPT32.dll61CertFreeCertificateChain
CRYPT32.dll125CryptBinaryToStringW
CRYPT32.dll217CryptStringToBinaryW
CRYPT32.dll37CertDuplicateCertificateContext
CRYPT32.dll36CertDuplicateCertificateChain
CRYPT32.dll70CertGetCertificateContextProperty
CRYPT32.dll175CryptMsgClose
CRYPT32.dll87CertOpenStore
CRYPT32.dll186CryptMsgUpdate
CRYPT32.dll183CryptMsgOpenToDecode
CRYPT32.dll214CryptSignMessage
CRYPT32.dll18CertCloseStore
CRYPT32.dll228CryptVerifyDetachedMessageSignature
CRYPT32.dll219CryptUnprotectData
CRYPT32.dll189CryptProtectData
CRYPT32.dll130CryptDecodeObject
CRYPT32.dll55CertFindExtension
CRYPT32.dll71CertGetEnhancedKeyUsage
CRYPT32.dll69CertGetCertificateChain
credui.dll8CredUIParseUserNameW
credui.dll10CredUIPromptForCredentialsW
Secur32.dll39LsaConnectUntrusted
Secur32.dll30GetUserNameExW
Secur32.dll24FreeContextBuffer
Secur32.dll57QuerySecurityPackageInfoW
Secur32.dll45LsaLookupAuthenticationPackage
Secur32.dll40LsaDeregisterLogonProcess
Secur32.dll2147483647
CRYPTUI.dll21CryptUIDlgViewCertificateW
ntdll.dll923RtlInitString
ntdll.dll343NtOpenFile
ntdll.dll924RtlInitUnicodeString
ntdll.dll931RtlInitializeCriticalSection
ntdll.dll1236RtlUnwind
CFGMGR32.dll144CM_Get_Parent
CFGMGR32.dll64CM_Get_Child
CFGMGR32.dll91CM_Get_DevNode_Registry_PropertyW
CFGMGR32.dll153CM_Get_Sibling
WINHTTP.dll15WinHttpOpen
WINHTTP.dll8WinHttpConnect
WINHTTP.dll16WinHttpOpenRequest
WINHTTP.dll23WinHttpSendRequest
WINHTTP.dll20WinHttpQueryOption
WINHTTP.dll7WinHttpCloseHandle
WINMM.dll149timeKillEvent
WINMM.dll150timeSetEvent
WINMM.dll148timeGetTime
NETAPI32.dll152NetGetJoinInformation
NETAPI32.dll101NetApiBufferFree
NETAPI32.dll2147483647

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionRemote Desktop Connection
FileVersion6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalNamemstsc.exe
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamemstsc.exe
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion6.1.7601.17514
ProductVersion6.1.7601.17514
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
01049600EXE11/20/2010 10:22:25#
15c115HTM#
66cf853804PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x280