comments powered byDisqus

MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

Signers (1)

issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Assured ID Code Signing CA
serial: 08C34635AB9215BA72F239F2BB239318

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
         eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
         f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
         39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
         09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
         a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
         04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
         e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
         b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
         16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
         8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
         d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
         4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
         2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
         1d:5d:d0:c6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c3:46:35:ab:92:15:ba:72:f2:39:f2:bb:23:93:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Validity
            Not Before: Feb  3 00:00:00 2016 GMT
            Not After : May  2 12:00:00 2019 GMT
        Subject: C=DE, L=Hamburg, O=Bigpoint GmbH, CN=Bigpoint GmbH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:cf:45:83:80:21:49:97:aa:f2:fb:f0:29:
                    97:d6:f3:53:7f:78:75:6c:9e:00:68:97:33:6c:fc:
                    07:21:aa:11:ed:cf:d4:4d:d1:d9:d2:88:7f:8a:f0:
                    b2:fe:d9:c2:6d:29:e9:90:a3:82:46:ce:26:d6:01:
                    96:fe:99:b1:a4:ab:94:21:af:6b:9f:df:18:cb:e7:
                    f7:37:d3:56:31:db:8e:82:75:c5:f3:a5:1c:da:88:
                    f4:3b:5d:27:01:d7:6f:32:fc:3a:4f:81:63:5e:f6:
                    70:b5:79:fc:a2:f5:fc:54:13:cc:a0:fe:b2:c8:25:
                    b1:4c:f4:34:99:b0:c3:51:76:1d:55:6c:68:b0:21:
                    86:30:78:f1:61:bb:1c:6e:6f:16:5a:ad:33:cf:ea:
                    70:52:93:f9:fa:06:18:e2:e2:23:88:2e:5b:f0:c1:
                    79:1d:bb:4f:ea:a5:96:6f:57:99:39:b7:b5:0f:13:
                    4e:77:50:4a:ee:89:99:a2:e4:e0:50:61:00:93:af:
                    cc:2b:bf:c4:25:6d:3f:08:28:ea:d2:6d:f3:46:f9:
                    1b:df:1b:59:06:d8:f0:5d:4d:44:23:3a:52:7e:2e:
                    c6:1b:41:03:ad:76:65:d8:a6:08:eb:1f:5d:21:28:
                    8a:db:78:ab:d5:eb:50:7c:9b:6b:0b:7b:a0:b6:ee:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58

            X509v3 Subject Key Identifier: 
                A5:04:38:5B:FB:C5:87:4F:C6:6E:90:62:A5:6A:A7:1F:4A:3D:B5:4D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/sha2-assured-cs-g1.crl

                Full Name:
                  URI:http://crl4.digicert.com/sha2-assured-cs-g1.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.4.1

            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         1f:87:98:ec:4a:a0:d0:4b:25:fc:e8:d8:b9:7b:9e:f5:40:a0:
         19:ef:63:2c:19:69:b1:f6:02:cc:58:13:b1:b5:29:5f:f0:7a:
         66:ed:d4:f6:dd:96:55:6a:d2:55:cb:54:6c:c5:32:44:48:a0:
         38:6c:a4:bd:8c:f7:0e:2d:7c:d8:7d:1b:db:a9:0d:3e:00:22:
         d1:dd:dc:0e:64:2e:70:ea:bb:9b:e8:0c:79:66:fc:08:5e:0e:
         6c:dc:12:db:a3:42:b4:5a:46:f6:75:e6:4e:6d:8f:47:e6:a3:
         76:23:43:29:00:7e:e1:1c:64:a3:66:f7:64:96:3c:f5:36:e8:
         84:32:70:94:b0:00:43:1f:64:a7:42:f5:88:da:b9:e0:78:04:
         70:9b:b5:30:ba:83:29:63:68:6d:2e:c6:39:a4:16:aa:cf:ab:
         16:37:58:e4:07:69:49:6a:b7:75:44:4f:b6:8c:a1:cf:99:31:
         33:07:83:ca:d2:f5:e3:e8:57:3c:38:e6:a6:7f:f4:c3:6c:e8:
         ac:c8:ce:fa:b0:57:6c:b3:6f:27:e5:ad:be:80:c6:78:59:81:
         dc:ef:38:1e:40:42:b7:c1:02:74:1a:7b:1d:6e:79:66:6d:41:
         e9:99:4a:00:06:57:ec:41:b5:49:27:08:a1:8d:f0:f8:a1:cb:
         1b:f6:ea:c7

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Oct 22 12:00:00 2013 GMT
            Not After : Oct 22 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:b3:1c:7f:0e:11:af:67:77:07:d3:0b:31:
                    49:19:cf:d0:fb:45:99:b1:3a:db:44:f5:7f:e5:a8:
                    9d:db:32:d7:71:ea:76:9d:05:2e:b7:8f:fa:92:43:
                    c0:a5:f9:89:d4:37:19:d7:b6:aa:f0:9c:86:a5:d8:
                    25:ac:0e:79:28:3a:7e:e9:d1:67:d3:c6:fb:29:27:
                    c7:d3:7b:23:94:e4:91:23:96:90:77:82:f9:a1:84:
                    23:66:12:54:33:50:74:b1:28:26:bb:24:69:c2:c2:
                    52:f2:14:67:8a:89:45:d4:2d:a1:a3:e9:88:2c:20:
                    95:ae:1c:4a:87:08:df:0c:f5:e2:4d:60:18:be:aa:
                    c4:b2:ae:70:31:66:33:71:3e:ac:70:a2:ab:ce:7f:
                    e9:7c:cb:92:a1:e5:3b:31:1c:cf:ea:f2:0a:e4:57:
                    bb:4a:b5:e9:74:e6:2b:fe:6c:cb:7e:74:39:36:0d:
                    90:ef:e4:b5:4e:a4:a9:ea:6a:0a:ab:84:f3:ac:67:
                    4e:b5:c4:f7:8c:d1:20:25:23:eb:08:64:3e:52:96:
                    c1:f2:0f:12:f4:c5:8e:0f:c1:a2:e8:2c:51:f7:73:
                    bc:bd:85:b1:62:83:73:41:82:07:e4:38:8b:6a:73:
                    20:d0:0f:64:73:3c:9e:9f:a6:33:a9:fd:19:df:25:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.3

            X509v3 Subject Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:0d:5a:24:b3:f3:22:d1:15:c8:2c:7c:25:29:76:a8:1d:
         5d:1c:2d:3a:1a:c4:ef:30:61:d7:7e:0b:60:fd:c3:3d:0f:c4:
         af:8b:fd:ef:2a:df:20:55:37:b0:e1:f6:d1:92:75:0f:51:b4:
         6e:a5:8e:5a:e2:5e:24:81:4e:10:a4:ee:3f:71:8e:63:0e:13:
         4b:ad:d7:5f:44:79:f3:36:14:06:8a:f7:9c:46:4e:5c:ff:90:
         b1:1b:07:0e:91:15:fb:ba:af:b5:51:c2:8d:24:ae:24:c6:c7:
         27:2a:a1:29:28:1a:3a:71:28:02:3c:2e:91:a3:c0:25:11:e2:
         9c:14:47:a1:7a:68:68:af:9b:a7:5c:20:5c:d9:71:b1:0c:8f:
         bb:a8:f8:c5:12:68:9f:cf:40:cb:40:44:a5:13:f0:e6:64:0c:
         25:08:42:32:b2:36:8a:24:02:fe:2f:72:7e:1c:d7:49:45:96:
         e8:59:1d:e9:fa:74:64:6b:b2:eb:66:43:da:b3:b0:8c:d5:e9:
         0d:dd:f6:01:20:ce:99:31:63:3d:08:1a:18:b3:81:9b:4f:c6:
         93:10:06:fc:07:81:fa:8b:da:f9:82:49:f7:62:6e:a1:53:fa:
         12:94:18:85:2e:92:91:ea:68:6c:44:32:b2:66:a1:e7:18:a4:
         9a:64:51:ef

Cannot convert into OpenSSL::BN

offsetsizetypecomment
050176EXE02/24/2012 19:19:59#
a660101672PNG(256 x 256)#
2338822144408BINoverlay data past EOF#
Path = [0]
Size = 22106536
Packed Size = 22106536
Offset = 171520
--
Path = [0]
Type = Nsis
Method = LZMA:25
Solid = +

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....        11264     22102436  /System.dll
2016-07-15 12:07:22 .....       154542               /modern-wizard.bmp
                    .....         9728               /nsDialogs.dll
2016-07-15 12:07:22 .....        30944               /modern-header.bmp
2016-08-08 14:40:42 .....       431992               /thinclient.exe
2016-07-15 12:07:30 .....          817               /thinclient_ar.qm
2016-07-15 12:07:30 .....         2922               /thinclient_de.qm
2016-07-15 12:07:30 .....           23               /thinclient_en.qm
2016-07-15 12:07:30 .....           23               /thinclient_it.qm
2016-07-15 12:07:30 .....         1734               /thinclient_es.qm
2016-07-15 12:07:30 .....         1776               /thinclient_fr.qm
2016-07-15 12:07:30 .....          767               /thinclient_ko.qm
2016-07-15 12:07:30 .....          607               /thinclient_pl.qm
2016-07-15 12:07:30 .....          609               /thinclient_pt.qm
2016-07-15 12:07:30 .....          580               /thinclient_ru.qm
2016-07-15 12:07:30 .....          824               /thinclient_th.qm
2016-07-15 12:07:30 .....          602               /thinclient_tr.qm
2016-07-15 12:07:30 .....          641               /thinclient_tw.qm
2016-07-15 12:07:30 .....           16               /thinclient_vn.qm
2016-07-15 12:07:30 .....          570               /thinclient_zh.qm
2016-07-15 12:07:08 .....      4652544               /Qt5Core.dll
2016-07-15 12:07:08 .....      4877312               /Qt5Gui.dll
2016-07-15 12:07:08 .....       560128               /Qt5Multimedia.dll
2016-07-15 12:07:08 .....        82432               /Qt5MultimediaWidgets.dll
2016-07-15 12:07:08 .....       858112               /Qt5Network.dll
2016-07-15 12:07:08 .....       271872               /Qt5OpenGL.dll
2016-07-15 12:07:08 .....       166400               /Qt5Positioning.dll
2016-07-15 12:07:08 .....       265728               /Qt5PrintSupport.dll
2016-07-15 12:07:08 .....      2643968               /Qt5Qml.dll
2016-07-15 12:07:08 .....      2423296               /Qt5Quick.dll
2016-07-15 12:07:08 .....       145920               /Qt5Sensors.dll
2016-07-15 12:07:08 .....       151552               /Qt5Sql.dll
2016-07-15 12:07:08 .....        78336               /Qt5WebChannel.dll
2016-07-15 12:07:08 .....     17542656               /Qt5WebKit.dll
2016-07-15 12:07:08 .....       200192               /Qt5WebKitWidgets.dll
2016-07-15 12:07:08 .....      4491264               /Qt5Widgets.dll
2016-07-15 12:07:08 .....     25338368               /icudt54.dll
2016-07-15 12:07:08 .....      2036224               /icuin54.dll
2016-07-15 12:07:08 .....      1387008               /icuuc54.dll
2016-07-15 12:07:08 .....        11264               /libEGL.dll
2016-07-15 12:07:08 .....      1713664               /libGLESv2.dll
2016-07-15 12:07:08 .....      1362944               /libeay32.dll
2016-07-15 12:07:08 .....       421200               /msvcp100.dll
2016-07-15 12:07:08 .....       773968               /msvcr100.dll
2016-07-15 12:07:08 .....       359424               /ssleay32.dll
2016-07-15 12:07:08 .....        22016               /imageformats/qgif.dll
2016-07-15 12:07:08 .....       206848               /imageformats/qjpeg.dll
2016-07-15 12:07:08 .....       991744               /platforms/qwindows.dll
2016-07-15 12:07:32 .....         1848               /bigpoint_gmbh_2016.cer
2016-07-15 12:07:32 .....       125994               /icon.ico
2016-07-15 12:07:22 .....        26940               /LICENSE.LGPL
                    .....       179712               /Drakensang Online//SimpleFC.dll
                    .....                            /Drakensang Online//inetc.dll
------------------- ----- ------------ ------------  ------------------------
                              75021859     22102436  53 files, 0 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x7a000