MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

offsetsizetypecomment
01183744EXE04/15/2013 01:21:50#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[!] string size(116258) > stringtable size(1056). truncated to 1054

[!] cannot convert "\x917\xC8\x12\xAB\xFCB\xAD\\\xFDp\x928\x86lD"... to UTF-16

[!] string size(44160) > stringtable size(1082). truncated to 1080

[!] cannot convert "7rqZ\a&\x1EA\xF5\xF8\xD3\x9D\xD3\xFC\xCD\xEB"... to UTF-16

[!] string size(63544) > stringtable size(1470). truncated to 1468

[!] cannot convert "\xBD\x18\b\xF1\xAD\xEB~\xD6\xF4\xDD[DeK\xD3V"... to UTF-16

[!] string size(12770) > stringtable size(1174). truncated to 1172

[!] cannot convert "\f\"@\x99\xD6WY\xD5\xE4\x0FVsV\r\x14@"... to UTF-16

[!] string size(86796) > stringtable size(432). truncated to 430

[!] cannot convert "P\xAAV}m\x8F`l\xDFJY\xB72\xBFd\xE3"... to UTF-16

[!] string size(71600) > stringtable size(416). truncated to 414

[!] cannot convert "\v~\xF0\xC9O\x14\xD0V\x9E;\x18\x05\x83\xD3\xA0\x13"... to UTF-16

[!] string size(36762) > stringtable size(1776). truncated to 1774

[!] cannot convert "I%\xDC\x99\xB7\xDF\xED\xBD\xED(7\x921\xC2\xA9\t"... to UTF-16

[!] string size(4186) > stringtable size(1644). truncated to 1642

[!] cannot convert "\xC2\x8F\xA8\xE1D\x02\t\x9C:y\xD1\xC7\x9A\x8Br\xBA"... to UTF-16

[!] string size(117890) > stringtable size(1564). truncated to 1562

[!] cannot convert "\xF36\xFA,\x8Dd\x84\x88\nU\xC04=\xCF)\x99"... to UTF-16

[!] string size(6522) > stringtable size(1138). truncated to 1136

[!] cannot convert "\xC6\xE0\x86\xAE\xC7\xEF\xEDr\xB4\x01\xAD\xA3\x18sr+"... to UTF-16

[!] string size(129238) > stringtable size(860). truncated to 858

[!] cannot convert "*\xAB\xE4\xAFa\xD6\xE0\x06q'(\x8AN\xE7\x8A\xA4"... to UTF-16

[!] string size(109784) > stringtable size(880). truncated to 878

[!] cannot convert "\x8B\x85\xA3\xFF\x1A\xA8\a[s\xB7S3\xB6\x8A\x1FY"... to UTF-16

[!] string size(111590) > stringtable size(70). truncated to 68

[!] cannot convert "\xEE\xED\xCB\xDF\xC3\f\xA9\x1C\xB5\x1E\xC1\x8F:\xBE\x01\xB7"... to UTF-16

[?] can't find file_offset of VA 0x328a34