MZ Header

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904b0

VS_FIXEDFILEINFO

offsetsizetypecomment
0554496EXE06/07/2012 15:59:53#
15c115HTM#
3ea5011855PNG(256 x 256)#
418a430518PNG(256 x 256)#
48fe081011PNG(256 x 256)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0xada4c

[?] can't find file_offset of VA 0xadb80

[?] can't find file_offset of VA 0xadcb4

[?] can't find file_offset of VA 0xadde8

[?] can't find file_offset of VA 0xadf1c

[?] can't find file_offset of VA 0xae050

[?] can't find file_offset of VA 0xae184

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(4180) > stringtable size(524). truncated to 522

[!] cannot convert "|#\xF7YL\xB7I-4ZE_L\x90\t`"... to UTF-16

[!] string size(35016) > stringtable size(1020). truncated to 1018

[!] cannot convert "\xFAh\x19\xD7h\xCB\x9E\xFCjIC_<\x1D\x99\xE0"... to UTF-16

[!] string size(104450) > stringtable size(168). truncated to 166

[!] cannot convert "\x0Fw`\xEA9\xED\xAA\x89\xF3\xB0\xC3l:\xA0uF"... to UTF-16

[!] string size(130440) > stringtable size(320). truncated to 318

[!] cannot convert "\a\x87\xE5C\x82N\xE9\x91\xC0\xF7a\e\x90\n\xA4\x98"... to UTF-16

[!] string size(90512) > stringtable size(1144). truncated to 1142

[!] cannot convert "e\xACK\xA4\x0E\x1D\x8E_\x9B\xE4\xEBHjd\v_"... to UTF-16

[!] string size(45884) > stringtable size(816). truncated to 814

[!] cannot convert "\x82f\x02\xD89%\a\x90\xDF\xDA\xDF\xDC\xDFW@\xE1"... to UTF-16

[!] string size(95168) > stringtable size(876). truncated to 874

[!] cannot convert " \x00V\xD8\xC0\xCB\xD2\x93\xF3\x82\xC5s\xBB\xCD\xB6\xA3"... to UTF-16

[!] string size(78560) > stringtable size(1008). truncated to 1006

[!] cannot convert "M\x01\x85\x1F\x06v\xAE\xD1w~\x93\xA4\xA1\x80\x04k"... to UTF-16

[!] string size(113828) > stringtable size(204). truncated to 202

[!] cannot convert "\"\xEF\xA3\x12*\xA1\x9D4\xA4\x9E\xD1X\x16He\x0E"... to UTF-16

[!] string size(46772) > stringtable size(176). truncated to 174

[!] cannot convert "HF\x80`\"\xA1\xABA\xF0\x1E\xBF\x02grun"... to UTF-16

[!] string size(74174) > stringtable size(684). truncated to 682

[!] cannot convert "\x19\x01\xDC\x89p8\x9F\x05\x12Iv\xBA\xE45\x14\xA6"... to UTF-16

[!] string size(20398) > stringtable size(952). truncated to 950

[!] cannot convert "\xD8\xC0\xF4\xA8\xF3\xD6\xAF\x93\xAF\e\xED\xD0\xC0\xC0\x96\xCF"... to UTF-16

[!] string size(19574) > stringtable size(852). truncated to 850

[!] cannot convert "GxW\xB7V\x87w\x0F|tc\x18\x84\xBBK\x02"... to UTF-16

[!] string size(89024) > stringtable size(752). truncated to 750

[!] cannot convert "\x11\x06\x96\xE0O\byM\x19\xFD\xAE\xE4\xC3\x11\xCE\xB7"... to UTF-16

[!] refusing to read CURDIRENTRY beyond resource size

[?] can't find file_offset of VA 0x917b8