MZ Header

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 50 72 6f 67 72 61 6d 20  6d 75 73 74 20 62 65 20  |Program must be |
00000020: 72 75 6e 20 75 6e 64 65  72 20 57 69 6e 33 32 0d  |run under Win32.|
00000030: 0a 24 dd 41 8c 24 00 37  00 00 00 00 00 00 00 00  |.$.A.$.7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Packer / Compiler

Sections

Data Directory

TLS

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[!] string size(95094) > stringtable size(460). truncated to 458

[!] cannot convert "W\x15QeD\x18\xCF9v\n\x93\xE2(\xEE\x8BA"... to UTF-16

[!] string size(80880) > stringtable size(424). truncated to 422

[!] cannot convert "\x9Dy;y\e\v\xF5\x02\xFD\a\xCD\xD1\xF0\xE1\x8F3"... to UTF-16

[!] string size(125936) > stringtable size(236). truncated to 234

[!] cannot convert "\xE7\x8Bz\xDE\xDD\x03\f\xCEK\x9C\xD8\xA6q\xD0\x1E\xF4"... to UTF-16

[!] string size(39944) > stringtable size(484). truncated to 482

[!] cannot convert "\xB7\xEE\xF0\xF2+g6\xBE?\xAB\x9A\x90\x13nKn"... to UTF-16

[!] string size(86126) > stringtable size(1012). truncated to 1010

[!] cannot convert "r!\xEEq\xD8\x95\r>\x9E\bv\x10\xEAyV\xE6"... to UTF-16

[!] string size(129166) > stringtable size(832). truncated to 830

[!] cannot convert "#\x1Fa\x02\xB0\xA0\xA2u\xFD\xF3\xAD\xCF,\x85T\xD2"... to UTF-16

[!] string size(60610) > stringtable size(704). truncated to 702

[!] cannot convert "\xE0\xCE\x99\xDDe\x17\xC4\xC0h\x83\xAAH\xD3\x90.$"... to UTF-16

[?] can't find file_offset of VA 0x7f0ec