MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

offsetsizetypecomment
0654848EXE11/11/2014 13:57:20#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x166714

[?] can't find file_offset of VA 0x1680ec

[?] can't find file_offset of VA 0x17aa14

[?] can't find file_offset of VA 0x182e3c

[?] can't find file_offset of VA 0x183e64

[?] can't find file_offset of VA 0x18ca90

[?] can't find file_offset of VA 0x18f7b8

[?] can't find file_offset of VA 0x19e1f4

[?] can't find file_offset of VA 0x19e61c

[?] can't find file_offset of VA 0x19e948

[?] can't find file_offset of VA 0x19ec74

[?] can't find file_offset of VA 0x19eea0

[?] can't find file_offset of VA 0x19f1cc

[?] can't find file_offset of VA 0x19f4f8

[?] can't find file_offset of VA 0x19f824

[?] can't find file_offset of VA 0x19fb50

[?] can't find file_offset of VA 0x19fe7c

[?] can't find file_offset of VA 0x1a01a8

[?] can't find file_offset of VA 0x1a04d4

[?] can't find file_offset of VA 0x1a0800

[?] can't find file_offset of VA 0x1a0b2c

[?] can't find file_offset of VA 0x1a0e58

[?] can't find file_offset of VA 0x1a1184

[?] can't find file_offset of VA 0x1a14b0

[?] can't find file_offset of VA 0x1a17dc

[?] can't find file_offset of VA 0x1a1b08

[?] can't find file_offset of VA 0x1a1e34

[?] can't find file_offset of VA 0x1a2160

[?] can't find file_offset of VA 0x1a248c

[?] can't find file_offset of VA 0x1a27b8

[?] can't find file_offset of VA 0x1a2ae4

[?] can't find file_offset of VA 0x1a2e10

[?] can't find file_offset of VA 0x1a313c

[?] can't find file_offset of VA 0x1a3468

[?] can't find file_offset of VA 0x1a3794

[?] can't find file_offset of VA 0x1a3ac0

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(85980) > stringtable size(260). truncated to 258

[!] cannot convert "Fk\xE6Z\xC51\x18\xDC\x04\x10H\x18\x85\xD9%\xF8"... to UTF-16

[!] string size(45066) > stringtable size(376). truncated to 374

[!] cannot convert "\xFFWQ\xC8\x0F\f\x10\xAF\x02\x17\xC1V\xFB\x91f\x83"... to UTF-16

[!] string size(118750) > stringtable size(306). truncated to 304

[!] cannot convert "\x18%\xBFH^\xE7\xDE\xD7{\b\xF9%\rX\xED\xE4"... to UTF-16

[!] string size(70194) > stringtable size(518). truncated to 516

[!] cannot convert "\xB8\x00L\x19\x19W^\xAAP\xE3\xBE2\xE0\xD7\xCF\x04"... to UTF-16

[!] string size(50286) > stringtable size(1150). truncated to 1148

[!] cannot convert "\x89\x01\xE8Y\xDE\bUc\xA3\xB1\x18\x84DLW["... to UTF-16

[!] string size(77108) > stringtable size(710). truncated to 708

[!] cannot convert "\xFD\x00T\x04\x89 \xFFyA\x85$\x18\x853\f*"... to UTF-16

[!] string size(126840) > stringtable size(526). truncated to 524

[!] cannot convert "3\x9B\x80EGF\xF9\xB6\x16\xC2p\xB9\xBBo\xA4\xA4"... to UTF-16

[!] string size(76450) > stringtable size(662). truncated to 660

[!] cannot convert "\xBD\xBC\x88\x02@\xA4\xB5\xF2\xFF\x87AE\x90y\xFE\x13"... to UTF-16

[!] string size(50318) > stringtable size(234). truncated to 232

[!] cannot convert "f\x90(\xAA\xBA\xB6\x01\x82\n\x98f\xFB\xE6\xFF\x87A"... to UTF-16

[!] string size(34848) > stringtable size(444). truncated to 442

[!] cannot convert "B\x02\x15#\x05\x00PI\xA0$P\x11b\xFF\x15\x94"... to UTF-16

[!] string size(105468) > stringtable size(630). truncated to 628

[!] cannot convert "@\x04p\xDD=s\xDED\x8C\xE8`v\xFF5\xB4{"... to UTF-16

[!] string size(67312) > stringtable size(592). truncated to 590

[!] cannot convert "\x97\x04\xAAB\"H\xE6\xAD\xBAj.\xFE\xE4Ixo"... to UTF-16

[!] string size(18964) > stringtable size(1508). truncated to 1506

[!] cannot convert "B\xD0\xA5\x87\xD9R\xD7\x18\x04\xFF\x80T\xC4\xB0\xE0G"... to UTF-16

[!] string size(77258) > stringtable size(80). truncated to 78

[!] cannot convert "0\xC0\xAF\xA0\xD8@\x81\xE3K\xA5\xF2\n\xA6*R\xC5"... to UTF-16

[!] string size(24686) > stringtable size(56). truncated to 54

[!] cannot convert "\xEF\x15\x81\x8AF\xCE\x7F\x17\x05\x8CB\xF2n\x0E\v\x18"... to UTF-16

[!] string size(74056) > stringtable size(110). truncated to 108

[!] cannot convert "\xEF\x7FbT\xCD:S\xBE\xC9\x87\x14\x90\xA0)\xEF\x18"... to UTF-16

[!] string size(75384) > stringtable size(44). truncated to 42

[!] string size(88146) > stringtable size(216). truncated to 214

[!] cannot convert "\xDEC\x88\x97\xE5A\x16\xEC\x10\x04\xEE\x99)b\x96\x80"... to UTF-16

[!] string size(16662) > stringtable size(296). truncated to 294

[!] cannot convert "\x84q\x1C\x8C$I\x98cP!\x83\xEF~6\xBA\xDB"... to UTF-16

[!] string size(130722) > stringtable size(512). truncated to 510

[!] cannot convert "\xCB\xFF\x10\x86'\x90\x00\x04O\xFF\xB7\xE1O\xB6Lt"... to UTF-16

[!] string size(11020) > stringtable size(1040). truncated to 1038

[!] cannot convert "\x84\x8Cg\xFF\xFE\x84G\xA1\xE1\xED\xFFQ\xB3\xFBD0"... to UTF-16

[!] string size(61326) > stringtable size(738). truncated to 736

[!] cannot convert "\x7FA]\x18a>\xCA\x9A:\xB7\x87M\x94d?\xCE"... to UTF-16

[!] string size(109276) > stringtable size(218). truncated to 216

[!] cannot convert "8\xA7\xAE\xA8r\x10\x1C=\xC4\xE4\xE1\xB2=\xC3\xE0\v"... to UTF-16

[!] string size(104574) > stringtable size(350). truncated to 348

[!] cannot convert "\x9B\x00\x87\xD4X\x18\xCE\x90\x19G\x18\xC8H0<\xA9"... to UTF-16

[!] string size(4784) > stringtable size(344). truncated to 342

[!] cannot convert "\xC9\n\xAA\x93J\x97@\x02\x00\xB2(\x04\x82\x02Y\x04"... to UTF-16

[!] string size(56116) > stringtable size(42). truncated to 40

[!] string size(32754) > stringtable size(296). truncated to 294

[!] cannot convert "\xF0\xC3\xF1\xFB\xE7\x16\xC7l\xDF}\x9A\xF3\x81\x89\xC16"... to UTF-16

[!] string size(24158) > stringtable size(574). truncated to 572

[!] cannot convert "\xCB\x18\xD6\xA6\x8D\xEF/\x01)bW\e\x8C\"\xA5/"... to UTF-16

[!] string size(24222) > stringtable size(262). truncated to 260

[!] cannot convert "o\ePj\"O\x04}a\xB8\xE2\x1D\xBA\xA6\xA6\xED"... to UTF-16

[!] string size(83468) > stringtable size(120). truncated to 118

[!] cannot convert "\xA2\xE8\x06\xD6AA\xDE\xED\xFFt'\xA0\xA5\x00\x18\x18"... to UTF-16

[!] string size(23644) > stringtable size(420). truncated to 418

[!] cannot convert "\xC8\x1A\x06))f\x91\x91\xE6\x82\x05.UV\xBC6"... to UTF-16

[!] string size(123874) > stringtable size(284). truncated to 282

[!] cannot convert "\xFD\xCE\xB4\xA6\xEB\xC6b5l\xA7\xEFn\x1Ekk\xD6"... to UTF-16

[!] refusing to read ICODIRENTRY beyond resource size