MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904e4

VS_FIXEDFILEINFO

offsetsizetypecomment
0665088EXE11/21/2010 15:58:05#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x86c28

[?] can't find file_offset of VA 0x86d5c

[?] can't find file_offset of VA 0x86e10

[?] can't find file_offset of VA 0x86f44

[?] can't find file_offset of VA 0x87078

[?] can't find file_offset of VA 0x871ac

[?] can't find file_offset of VA 0x872e0

[?] can't find file_offset of VA 0x87414

[?] can't find file_offset of VA 0x87548

[?] can't find file_offset of VA 0x8767c

[?] can't find file_offset of VA 0x877b0

[?] can't find file_offset of VA 0x878e4

[?] can't find file_offset of VA 0x87a18

[?] can't find file_offset of VA 0x87b4c

[?] can't find file_offset of VA 0x87c80

[?] can't find file_offset of VA 0x87db4

[?] can't find file_offset of VA 0x87ee8

[?] can't find file_offset of VA 0x9b70c

[?] can't find file_offset of VA 0x9b7c4

[!] string size(5440) > stringtable size(76). truncated to 74

[!] cannot convert "T/\xFCi\x8F0t\x9C3x(\\\xA8C\f\x98"... to UTF-16

[!] string size(62056) > stringtable size(130). truncated to 128

[!] string size(95370) > stringtable size(42). truncated to 40

[!] string size(2314) > stringtable size(388). truncated to 386

[!] cannot convert "\n\x80\x00\r\x11\xFF\xFFo\xF8\x0E\x15\e&&\xE07"... to UTF-16

[!] string size(74906) > stringtable size(1254). truncated to 1252

[!] cannot convert "\xFDO\x93\xD4H\x8D\xF8\x7F\x01\xFE\xD1G\x8C\xC1D\x88"... to UTF-16

[!] string size(129682) > stringtable size(612). truncated to 610

[!] cannot convert "\xDF|\xA0\xBBD\xA2\xE2G\xB2\xB0?\xAB\x93\x0E<\x9A"... to UTF-16

[!] string size(130060) > stringtable size(730). truncated to 728

[!] cannot convert "\xFFH\x9FqF\x926.\\,>[AOoB"... to UTF-16

[!] string size(13406) > stringtable size(138). truncated to 136

[!] string size(3142) > stringtable size(172). truncated to 170

[!] cannot convert "\x96\xBB\x05X\xC9:\xB1\x14r\xA8\x88?0\xFA\xB6m"... to UTF-16

[!] string size(49088) > stringtable size(222). truncated to 220

[!] cannot convert "\x80\x93H\x8E)i\x92*k\x99,Nw\x03\xB6\x82"... to UTF-16

[!] string size(82604) > stringtable size(1192). truncated to 1190

[!] cannot convert "\x9A\xE3w\x18\xFFe\xC7\x9De\xCA\x9Dg\xC9\xA0\x9Fe"... to UTF-16

[!] string size(100032) > stringtable size(552). truncated to 550

[!] cannot convert "\x96c\xC7\x9A_\xC5\x99\xF8+\xD4)\xE6^\xB8\xBC\x91"... to UTF-16

[!] string size(28972) > stringtable size(44). truncated to 42

[!] string size(63080) > stringtable size(66). truncated to 64

[!] refusing to read CURDIRENTRY beyond resource size

[?] can't find file_offset of VA 0x72c70