RakNet.dll

info
MZ
PE
resources
imports
exports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	RakNet.dll
size	277848 (0x43d58)
md5	fc7b6b886f04b5103c7447c31f3165d5

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
241	40116	7
243	40116	141
242	40116	13
260	26706	14
259	26706	8
261	26706	41
203	65501	5
1	0	123
261	27026	38
256	27026	1
255	27026	1
258	27026	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x5f02e06e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	14.16
SizeOfCode	0x2f000
SizeOfInitializedData	0x26600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1dc54
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x58000
SizeOfHeaders	0x400
CheckSum	0x4c3da
Subsystem	2
DllCharacteristics	0x160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2ef8c	0x2f000	R-X CODE
.rdata	0x30000	0xefb2	0xf000	R-- IDATA
.data	0x3f000	0x13fb4	0x1000	RW- IDATA
.pdata	0x53000	0x29a0	0x2a00	R-- IDATA
.rsrc	0x56000	0x1e0	0x200	R-- IDATA
.reloc	0x57000	0x848	0xa00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x3e250	0x42c
IMPORT	0x3e67c	0x3c
RESOURCE	0x56000	0x1e0
EXCEPTION	0x53000	0x29a0
SECURITY	0x42a00	0x1358
BASERELOC	0x57000	0x848
DEBUG	0x39de0	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x39f40	0x28
LOAD_CONFIG	0x39e40	0x100
Bound_IAT	0	0
IAT	0x30000	0x318
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x18003ab00	0x18003ab08	0x180051d80	0x180030400	0	0x300000

show previews

type	name	size	cp
MANIFEST	#2	381	0

module_name	hint	ord	function_name
WS2_32.dll		8
WS2_32.dll		116
WS2_32.dll		115
WS2_32.dll		15
WS2_32.dll		57
WS2_32.dll		52
WS2_32.dll		23
WS2_32.dll		21
WS2_32.dll		20
WS2_32.dll		17
WS2_32.dll		12
WS2_32.dll		11
WS2_32.dll		7
WS2_32.dll		6
WS2_32.dll		10
WS2_32.dll		3
WS2_32.dll		2
WS2_32.dll		9
KERNEL32.dll	293		EncodePointer
KERNEL32.dll	1520		WriteConsoleW
KERNEL32.dll	833		HeapSize
KERNEL32.dll	194		CreateFileW
KERNEL32.dll	482		GetConsoleCP
KERNEL32.dll	1521		WriteFile
KERNEL32.dll	408		FlushFileBuffers
KERNEL32.dll	1328		SetStdHandle
KERNEL32.dll	681		GetProcessHeap
KERNEL32.dll	419		FreeEnvironmentStringsW
KERNEL32.dll	558		GetEnvironmentStringsW
KERNEL32.dll	463		GetCommandLineW
KERNEL32.dll	462		GetCommandLineA
KERNEL32.dll	653		GetOEMCP
KERNEL32.dll	1072		QueryPerformanceCounter
KERNEL32.dll	1073		QueryPerformanceFrequency
KERNEL32.dll	1377		Sleep
KERNEL32.dll	980		MultiByteToWideChar
KERNEL32.dll	1501		WideCharToMultiByte
KERNEL32.dll	127		CloseHandle
KERNEL32.dll	1347		SetThreadPriority
KERNEL32.dll	1279		SetEvent
KERNEL32.dll	1468		WaitForSingleObjectEx
KERNEL32.dll	182		CreateEventW
KERNEL32.dll	848		InitializeCriticalSection
KERNEL32.dll	297		EnterCriticalSection
KERNEL32.dll	933		LeaveCriticalSection
KERNEL32.dll	262		DeleteCriticalSection
KERNEL32.dll	598		GetLastError
KERNEL32.dll	733		GetSystemTimeAsFileTime
KERNEL32.dll	885		IsValidCodePage
KERNEL32.dll	849		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1190		ResetEvent
KERNEL32.dll	621		GetModuleHandleW
KERNEL32.dll	676		GetProcAddress
KERNEL32.dll	1198		RtlCaptureContext
KERNEL32.dll	1205		RtlLookupFunctionEntry
KERNEL32.dll	1212		RtlVirtualUnwind
KERNEL32.dll	1426		UnhandledExceptionFilter
KERNEL32.dll	1362		SetUnhandledExceptionFilter
KERNEL32.dll	527		GetCurrentProcess
KERNEL32.dll	1392		TerminateProcess
KERNEL32.dll	880		IsProcessorFeaturePresent
KERNEL32.dll	874		IsDebuggerPresent
KERNEL32.dll	709		GetStartupInfoW
KERNEL32.dll	528		GetCurrentProcessId
KERNEL32.dll	532		GetCurrentThreadId
KERNEL32.dll	852		InitializeSListHead
KERNEL32.dll	1211		RtlUnwindEx
KERNEL32.dll	1207		RtlPcToFileHeader
KERNEL32.dll	1092		RaiseException
KERNEL32.dll	856		InterlockedFlushSList
KERNEL32.dll	1305		SetLastError
KERNEL32.dll	1410		TlsAlloc
KERNEL32.dll	1412		TlsGetValue
KERNEL32.dll	1413		TlsSetValue
KERNEL32.dll	1411		TlsFree
KERNEL32.dll	420		FreeLibrary
KERNEL32.dll	938		LoadLibraryExW
KERNEL32.dll	231		CreateThread
KERNEL32.dll	344		ExitThread
KERNEL32.dll	421		FreeLibraryAndExitThread
KERNEL32.dll	620		GetModuleHandleExW
KERNEL32.dll	343		ExitProcess
KERNEL32.dll	616		GetModuleFileNameA
KERNEL32.dll	828		HeapFree
KERNEL32.dll	824		HeapAlloc
KERNEL32.dll	426		GetACP
KERNEL32.dll	711		GetStdHandle
KERNEL32.dll	581		GetFileType
KERNEL32.dll	831		HeapReAlloc
KERNEL32.dll	716		GetStringTypeW
KERNEL32.dll	921		LCMapStringW
KERNEL32.dll	500		GetConsoleMode
KERNEL32.dll	1292		SetFilePointerEx
KERNEL32.dll	441		GetCPInfo
KERNEL32.dll	366		FindClose
KERNEL32.dll	371		FindFirstFileExA
KERNEL32.dll	387		FindNextFileA

ord	entry_va	function_name
1	0x12d0	NETRCV_Address
2	0x12e0	NETRCV_GUID
3	0x12f0	NETRCV_LengthBits
4	0x1300	NETRCV_Port
5	0x1310	NETRCV_RawData
6	0x1320	NETRCV_ReadBytes
7	0x1330	NETRCV_SetReadPointer
8	0x1340	NETRCV_UnreadBits
9	0x1360	NETSND_Broadcast
10	0x1410	NETSND_ReadCompressedFloat
11	0x1460	NETSND_ReadCompressedInt32
12	0x1490	NETSND_ReadCompressedInt64
13	0x14c0	NETSND_Send
14	0x1570	NETSND_Size
15	0x1580	NETSND_Start
16	0x1590	NETSND_WriteBytes
17	0x15a0	NETSND_WriteCompressedFloat
18	0x15f0	NETSND_WriteCompressedInt32
19	0x1620	NETSND_WriteCompressedInt64
20	0x1650	NET_Close
21	0x16d0	NET_CloseConnection
22	0x1740	NET_Create
23	0x1790	NET_GetAddress
24	0x1830	NET_GetAveragePing
25	0x1890	NET_GetGUID
26	0x18b0	NET_GetLastPing
27	0x1910	NET_GetLowestPing
28	0x1970	NET_GetReceiveBufferSize
29	0x1980	NET_GetStatistics
30	0x1a50	NET_GetStatisticsString
31	0x1b50	NET_LastStartupError
32	0x1b70	NET_LimitBandwidth
33	0x1b80	NET_Receive
34	0x1c20	NET_SendMessage
35	0x1cd0	NET_StartClient
36	0x1dd0	NET_StartServer

module_name	Raknet64.dll
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	36
nNames	36
Names(36)	0x3e308
Functions(36)	0x3e278
NameOrdinals(36)	0x3e398

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http:\/\/certs.godaddy.com\/repository\//CN=Go Daddy Secure Certificate Authority - G2

serial: D09DC10C35B365B8

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828629 (0x1be715)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
        Validity
            Not Before: Jan  1 07:00:00 2014 GMT
            Not After : May 30 07:00:00 2031 GMT
        Subject: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:62:08:f1:fa:59:34:f7:1b:c9:18:a3:f7:
                    80:49:58:e9:22:83:13:a6:c5:20:43:01:3b:84:f1:
                    e6:85:49:9f:27:ea:f6:84:1b:4e:a0:b4:db:70:98:
                    c7:32:01:b1:05:3e:07:4e:ee:f4:fa:4f:2f:59:30:
                    22:e7:ab:19:56:6b:e2:80:07:fc:f3:16:75:80:39:
                    51:7b:e5:f9:35:b6:74:4e:a9:8d:82:13:e4:b6:3f:
                    a9:03:83:fa:a2:be:8a:15:6a:7f:de:0b:c3:b6:19:
                    14:05:ca:ea:c3:a8:04:94:3b:46:7c:32:0d:f3:00:
                    66:22:c8:8d:69:6d:36:8c:11:18:b7:d3:b2:1c:60:
                    b4:38:fa:02:8c:ce:d3:dd:46:07:de:0a:3e:eb:5d:
                    7c:c8:7c:fb:b0:2b:53:a4:92:62:69:51:25:05:61:
                    1a:44:81:8c:2c:a9:43:96:23:df:ac:3a:81:9a:0e:
                    29:c5:1c:a9:e9:5d:1e:b6:9e:9e:30:0a:39:ce:f1:
                    88:80:fb:4b:5d:cc:32:ec:85:62:43:25:34:02:56:
                    27:01:91:b4:3b:70:2a:3f:6e:b1:e8:9c:88:01:7d:
                    9f:d4:f9:db:53:6d:60:9d:bf:2c:e7:58:ab:b8:5f:
                    46:fc:ce:c4:1b:03:3c:09:eb:49:31:5c:69:46:b3:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE
            X509v3 Authority Key Identifier: 
                D2:C4:B0:D2:91:D4:4C:11:71:B3:61:CB:3D:A1:FE:DD:A8:6A:D4:E3
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdroot.crl
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://certs.godaddy.com/repository/
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        59:0b:53:bd:92:86:11:a7:24:7b:ed:5b:31:cf:1d:1f:6c:70:
        c5:b8:6e:be:4e:bb:f6:be:97:50:e1:30:7f:ba:28:5c:62:94:
        c2:e3:7e:33:f7:fb:42:76:85:db:95:1c:8c:22:58:75:09:0c:
        88:65:67:39:0a:16:09:c5:a0:38:97:a4:c5:23:93:3f:b4:18:
        a6:01:06:44:91:e3:a7:69:27:b4:5a:25:7f:3a:b7:32:cd:dd:
        84:ff:2a:38:29:33:a4:dd:67:b2:85:fe:a1:88:20:1c:50:89:
        c8:dc:2a:f6:42:03:37:4c:e6:88:df:d5:af:24:f2:b1:c3:df:
        cc:b5:ec:e0:99:5e:b7:49:54:20:3c:94:18:0c:c7:1c:52:18:
        49:a4:6d:e1:b3:58:0b:c9:d8:ec:d9:ae:1c:32:8e:28:70:0d:
        e2:fe:a6:17:9e:84:0f:bd:57:70:b3:5a:e9:1f:a0:86:53:bb:
        ef:7c:ff:69:0b:e0:48:c3:b7:93:0b:c8:0a:54:c4:ac:5d:14:
        67:37:6c:ca:a5:2f:31:08:37:aa:6e:6f:8c:bc:9b:e2:57:5d:
        24:81:af:97:97:9c:84:ad:6c:ac:37:4c:66:f3:61:91:11:20:
        e4:be:30:9f:7a:a4:29:09:b0:e1:34:5f:64:77:18:40:51:df:
        8c:30:a6:af

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
        Validity
            Not Before: May  3 07:00:00 2011 GMT
            Not After : May  3 07:00:00 2031 GMT
        Subject: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:cb:10:d4:af:76:bd:d4:93:62:eb:30:64:
                    b8:81:08:6c:c3:04:d9:62:17:8e:2f:ff:3e:65:cf:
                    8f:ce:62:e6:3c:52:1c:da:16:45:4b:55:ab:78:6b:
                    63:83:62:90:ce:0f:69:6c:99:c8:1a:14:8b:4c:cc:
                    45:33:ea:88:dc:9e:a3:af:2b:fe:80:61:9d:79:57:
                    c4:cf:2e:f4:3f:30:3c:5d:47:fc:9a:16:bc:c3:37:
                    96:41:51:8e:11:4b:54:f8:28:be:d0:8c:be:f0:30:
                    38:1e:f3:b0:26:f8:66:47:63:6d:de:71:26:47:8f:
                    38:47:53:d1:46:1d:b4:e3:dc:00:ea:45:ac:bd:bc:
                    71:d9:aa:6f:00:db:db:cd:30:3a:79:4f:5f:4c:47:
                    f8:1d:ef:5b:c2:c4:9d:60:3b:b1:b2:43:91:d8:a4:
                    33:4e:ea:b3:d6:27:4f:ad:25:8a:a5:c6:f4:d5:d0:
                    a6:ae:74:05:64:57:88:b5:44:55:d4:2d:2a:3a:3e:
                    f8:b8:bd:e9:32:0a:02:94:64:c4:16:3a:50:f1:4a:
                    ae:e7:79:33:af:0c:20:07:7f:e8:df:04:39:c2:69:
                    02:6c:63:52:fa:77:c1:1b:c8:74:87:c8:b9:93:18:
                    50:54:35:4b:69:4e:bc:3b:d3:49:2e:1f:dc:c1:d2:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Authority Key Identifier: 
                3A:9A:85:07:10:67:28:B6:EF:F6:BD:05:41:6E:20:C1:94:DA:0F:DE
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdroot-g2.crl
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://certs.godaddy.com/repository/
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        08:7e:6c:93:10:c8:38:b8:96:a9:90:4b:ff:a1:5f:4f:04:ef:
        6c:3e:9c:88:06:c9:50:8f:a6:73:f7:57:31:1b:be:bc:e4:2f:
        db:f8:ba:d3:5b:e0:b4:e7:e6:79:62:0e:0c:a2:d7:6a:63:73:
        31:b5:f5:a8:48:a4:3b:08:2d:a2:5d:90:d7:b4:7c:25:4f:11:
        56:30:c4:b6:44:9d:7b:2c:9d:e5:5e:e6:ef:0c:61:aa:bf:e4:
        2a:1b:ee:84:9e:b8:83:7d:c1:43:ce:44:a7:13:70:0d:91:1f:
        f4:c8:13:ad:83:60:d9:d8:72:a8:73:24:1e:b5:ac:22:0e:ca:
        17:89:62:58:44:1b:ab:89:25:01:00:0f:cd:c4:1b:62:db:51:
        b4:d3:0f:51:2a:9b:f4:bc:73:fc:76:ce:36:a4:cd:d9:d8:2c:
        ea:ae:9b:f5:2a:b2:90:d1:4d:75:18:8a:3f:8a:41:90:23:7d:
        5b:4b:fe:a4:03:58:9b:46:b2:c3:60:60:83:f8:7d:50:41:ce:
        c2:a1:90:c3:bb:ef:02:2f:d2:15:54:ee:44:15:d9:0a:ae:a7:
        8a:33:ed:b1:2d:76:36:26:dc:04:eb:9f:f7:61:1f:15:dc:87:
        6f:ee:46:96:28:ad:a1:26:7d:0a:09:a7:2e:04:a3:8d:bc:f8:
        bc:04:30:01

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d0:9d:c1:0c:35:b3:65:b8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: May 22 10:19:02 2020 GMT
            Not After : May 22 03:38:01 2023 GMT
        Subject: C=GB, L=Walsall, O=Facepunch Studios Ltd, CN=Facepunch Studios Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:c3:c6:10:4c:af:e0:28:bf:b2:58:8f:86:e8:c1:
                    aa:2c:93:a6:d4:d7:92:22:9b:a4:c5:cc:38:76:52:
                    5a:a6:2e:5a:7a:02:81:07:1f:28:2e:74:89:c8:b1:
                    90:0c:70:22:ee:18:5d:2c:d2:c5:71:ba:dd:18:fd:
                    18:87:99:60:00:a1:d9:67:5c:13:c3:06:65:b2:c7:
                    0c:b1:7c:4a:b6:de:ae:14:91:e4:92:0f:d5:0e:3f:
                    56:2b:3d:f1:27:96:32:ca:6f:0c:fe:2d:23:b4:ce:
                    c9:2d:02:ec:87:83:db:39:4d:aa:5c:ea:d2:09:de:
                    56:8f:51:bb:a3:f4:3c:f6:94:cf:c5:19:62:56:92:
                    8e:99:31:3b:1a:8b:6d:0d:f6:99:62:02:ee:23:a4:
                    7d:7f:a5:93:cd:a9:18:df:92:66:a3:68:05:f0:de:
                    81:6c:3d:7f:99:2d:40:88:95:aa:e3:67:16:ba:88:
                    ce:99:58:7d:e5:b7:8d:fb:9e:89:9b:2c:cb:d7:30:
                    d9:3d:56:ac:f4:79:17:43:5f:2f:ca:92:5e:18:23:
                    f8:34:21:6f:c2:90:de:a5:55:93:67:b0:83:20:de:
                    ca:bb:fa:cc:ed:66:8a:66:18:ba:4f:c1:3b:4b:e2:
                    6f:b2:87:0b:ed:63:21:7c:8e:86:16:3d:6d:d5:d2:
                    1d:6e:5d:a2:ca:c7:69:f1:ce:5d:ac:87:ce:ab:70:
                    4a:f5:21:f9:bb:28:13:82:8c:6f:7b:f1:fe:f9:14:
                    32:bd:ee:47:65:00:06:2b:5e:9c:37:a6:4f:d4:35:
                    0d:61:e3:ce:d4:1e:4c:45:08:7e:c1:23:cc:77:3a:
                    dd:cf:d0:7a:26:49:0c:93:1e:f8:4f:63:57:26:02:
                    bb:67:29:89:6f:18:77:df:2f:3b:94:ad:af:30:71:
                    15:25:49:41:ce:2f:10:83:4c:81:ed:b3:a7:99:39:
                    d5:6e:a1:05:45:01:8e:2d:54:5a:da:32:21:2f:f3:
                    73:07:e1:e5:e8:34:1a:57:e4:f7:a6:53:3e:c4:a8:
                    51:cc:d8:4c:84:11:e0:b3:f4:5c:3b:34:d3:67:f3:
                    d3:aa:05:69:b9:5e:e1:28:5e:d9:02:8f:9e:e3:e1:
                    2b:db:41:00:54:2c:fe:1e:da:b6:64:59:0a:bd:a3:
                    94:b0:3d:7f:60:74:3b:e0:7a:fe:69:a3:33:24:e5:
                    1f:a0:71:10:7b:bb:dc:b4:20:94:0e:f8:36:01:77:
                    a1:68:6a:bf:c3:61:e7:39:e2:54:a8:8c:51:43:da:
                    d6:71:25:46:cc:04:64:72:73:bd:93:77:04:bf:3e:
                    16:f4:3e:ec:c1:b6:c9:33:8b:8b:af:5d:4f:62:50:
                    cc:97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s5-5.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.2
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.4.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Key Identifier: 
                2D:01:CC:A5:F4:AF:53:D7:E1:F6:39:4A:FB:45:A4:A3:2A:07:C4:DB
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        11:1b:42:48:f2:a2:f7:8f:5e:cf:a5:7d:30:9c:f7:01:4c:87:
        a2:3d:1a:34:cd:ab:b4:9d:db:2b:72:7f:62:e0:90:80:68:61:
        3c:cf:0c:98:8f:a7:23:fc:e6:90:1b:be:51:30:8c:74:23:63:
        08:68:9c:09:51:03:ef:61:20:9a:68:52:56:5b:34:b9:3d:ce:
        2d:f8:c2:4c:7f:22:e6:b5:5b:ec:75:8a:da:a0:17:90:00:28:
        e9:4f:4f:9a:b2:1e:1d:6f:08:ee:81:29:38:a8:a8:95:70:cb:
        6d:b2:80:9e:ae:b7:82:a1:19:28:86:20:b5:d5:f2:c5:e7:1e:
        7f:7d:f9:bc:76:bf:b3:84:85:96:e2:73:e4:db:f4:e5:5c:d4:
        bf:3d:6e:f1:1c:7d:4d:a1:05:0b:c5:91:3c:39:4e:06:9b:66:
        b4:e0:b2:69:52:b8:09:6a:c4:10:c8:30:5a:ad:c8:f7:e3:36:
        5c:92:8e:b1:da:a1:50:e6:8e:12:c8:b4:ab:b3:42:60:f4:81:
        71:91:b5:5b:fd:cc:20:97:e6:c3:b5:b7:ae:2c:f2:e8:28:f3:
        50:34:ad:64:33:c8:30:7a:71:ca:51:52:d0:5e:23:81:88:f5:
        01:f0:63:6e:86:a8:98:b2:50:aa:50:e1:81:27:45:2d:63:16:
        3f:1b:8a:98

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

da b1 5b fe 86 59 c6 1e 9f 11 7b 0f 18 14 24 3d |..[..Y....{...$=| 48 65 8f 86 |He.. |

Certificates
- Certificate #0
  - 2
    - 0x1BE715
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: The Go Daddy Group, Inc.
      - OU: Go Daddy Class 2 Certification Authority
    - 2014-01-01 07:00:00 UTC: 2031-05-30 07:00:00 UTC
    - Subject
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - CN: Go Daddy Root Certificate Authority - G2
    - #5
      - rsaEncryption: nil
      - BF:71:62:08:F1:FA:59:34:F7:1B:C9:18:A3:F7:80:49:
        58:E9:22:83:13:A6:C5:20:43:01:3B:84:F1:E6:85:49:
        9F:27:EA:F6:84:1B:4E:A0:B4:DB:70:98:C7:32:01:B1:
        05:3E:07:4E:EE:F4:FA:4F:2F:59:30:22:E7:AB:19:56:
        6B:E2:80:07:FC:F3:16:75:80:39:51:7B:E5:F9:35:B6:
        74:4E:A9:8D:82:13:E4:B6:3F:A9:03:83:FA:A2:BE:8A:
        15:6A:7F:DE:0B:C3:B6:19:14:05:CA:EA:C3:A8:04:94:
        3B:46:7C:32:0D:F3:00:66:22:C8:8D:69:6D:36:8C:11:
        18:B7:D3:B2:1C:60:B4:38:FA:02:8C:CE:D3:DD:46:07:
        DE:0A:3E:EB:5D:7C:C8:7C:FB:B0:2B:53:A4:92:62:69:
        51:25:05:61:1A:44:81:8C:2C:A9:43:96:23:DF:AC:3A:
        81:9A:0E:29:C5:1C:A9:E9:5D:1E:B6:9E:9E:30:0A:39:
        CE:F1:88:80:FB:4B:5D:CC:32:EC:85:62:43:25:34:02:
        56:27:01:91:B4:3B:70:2A:3F:6E:B1:E8:9C:88:01:7D:
        9F:D4:F9:DB:53:6D:60:9D:BF:2C:E7:58:AB:B8:5F:46:
        FC:CE:C4:1B:03:3C:09:EB:49:31:5C:69:46:B3:E0:47: 0x010001
    - X509v3 extensions
      - basicConstraints: true, true
      - keyUsage: true, 6
      - subjectKeyIdentifier:
        3a 9a 85 07 10 67 28 b6 ef f6 bd 05 41 6e 20 c1 |:....g(.....An .| 94 da 0f de |.... |
      - authorityKeyIdentifier:
        d2 c4 b0 d2 91 d4 4c 11 71 b3 61 cb 3d a1 fe dd |......L.q.a.=...| a8 6a d4 e3 |.j.. |
      - authorityInfoAccess
        OCSP: http://ocsp.godaddy.com/
      - crlDistributionPoints: http://crl.godaddy.com/gdroot.crl
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://certs.godaddy.com/repository/
  - RSA-SHA256:
```
59 0b 53 bd 92 86 11 a7  24 7b ed 5b 31 cf 1d 1f  |Y.S.....${.[1...|
6c 70 c5 b8 6e be 4e bb  f6 be 97 50 e1 30 7f ba  |lp..n.N....P.0..|
28 5c 62 94 c2 e3 7e 33  f7 fb 42 76 85 db 95 1c  |(\b...~3..Bv....|
8c 22 58 75 09 0c 88 65  67 39 0a 16 09 c5 a0 38  |."Xu...eg9.....8|
97 a4 c5 23 93 3f b4 18  a6 01 06 44 91 e3 a7 69  |...#.?.....D...i|
27 b4 5a 25 7f 3a b7 32  cd dd 84 ff 2a 38 29 33  |'.Z%.:.2....*8)3|
a4 dd 67 b2 85 fe a1 88  20 1c 50 89 c8 dc 2a f6  |..g..... .P...*.|
42 03 37 4c e6 88 df d5  af 24 f2 b1 c3 df cc b5  |B.7L.....$......|
ec e0 99 5e b7 49 54 20  3c 94 18 0c c7 1c 52 18  |...^.IT <.....R.|
49 a4 6d e1 b3 58 0b c9  d8 ec d9 ae 1c 32 8e 28  |I.m..X.......2.(|
70 0d e2 fe a6 17 9e 84  0f bd 57 70 b3 5a e9 1f  |p.........Wp.Z..|
a0 86 53 bb ef 7c ff 69  0b e0 48 c3 b7 93 0b c8  |..S..|.i..H.....|
0a 54 c4 ac 5d 14 67 37  6c ca a5 2f 31 08 37 aa  |.T..].g7l../1.7.|
6e 6f 8c bc 9b e2 57 5d  24 81 af 97 97 9c 84 ad  |no....W]$.......|
6c ac 37 4c 66 f3 61 91  11 20 e4 be 30 9f 7a a4  |l.7Lf.a.. ..0.z.|
29 09 b0 e1 34 5f 64 77  18 40 51 df 8c 30 a6 af  |)...4_dw.@Q..0..|
```
- Certificate #1
  - 2
    - 7
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - CN: Go Daddy Root Certificate Authority - G2
    - 2011-05-03 07:00:00 UTC: 2031-05-03 07:00:00 UTC
    - Subject
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - OU: http://certs.godaddy.com/repository/
      - CN: Go Daddy Secure Certificate Authority - G2
    - #5
      - rsaEncryption: nil
      - B9:E0:CB:10:D4:AF:76:BD:D4:93:62:EB:30:64:B8:81:
        08:6C:C3:04:D9:62:17:8E:2F:FF:3E:65:CF:8F:CE:62:
        E6:3C:52:1C:DA:16:45:4B:55:AB:78:6B:63:83:62:90:
        CE:0F:69:6C:99:C8:1A:14:8B:4C:CC:45:33:EA:88:DC:
        9E:A3:AF:2B:FE:80:61:9D:79:57:C4:CF:2E:F4:3F:30:
        3C:5D:47:FC:9A:16:BC:C3:37:96:41:51:8E:11:4B:54:
        F8:28:BE:D0:8C:BE:F0:30:38:1E:F3:B0:26:F8:66:47:
        63:6D:DE:71:26:47:8F:38:47:53:D1:46:1D:B4:E3:DC:
        00:EA:45:AC:BD:BC:71:D9:AA:6F:00:DB:DB:CD:30:3A:
        79:4F:5F:4C:47:F8:1D:EF:5B:C2:C4:9D:60:3B:B1:B2:
        43:91:D8:A4:33:4E:EA:B3:D6:27:4F:AD:25:8A:A5:C6:
        F4:D5:D0:A6:AE:74:05:64:57:88:B5:44:55:D4:2D:2A:
        3A:3E:F8:B8:BD:E9:32:0A:02:94:64:C4:16:3A:50:F1:
        4A:AE:E7:79:33:AF:0C:20:07:7F:E8:DF:04:39:C2:69:
        02:6C:63:52:FA:77:C1:1B:C8:74:87:C8:B9:93:18:50:
        54:35:4B:69:4E:BC:3B:D3:49:2E:1F:DC:C1:D2:52:FB: 0x010001
    - X509v3 extensions
      - basicConstraints: true, true
      - keyUsage: true, 6
      - subjectKeyIdentifier:
        40 c2 bd 27 8e cc 34 83 30 a2 33 d7 fb 6c b3 f0 |@..'..4.0.3..l..| b4 2c 80 ce |.,.. |
      - authorityKeyIdentifier:
        3a 9a 85 07 10 67 28 b6 ef f6 bd 05 41 6e 20 c1 |:....g(.....An .| 94 da 0f de |.... |
      - authorityInfoAccess
        OCSP: http://ocsp.godaddy.com/
      - crlDistributionPoints: http://crl.godaddy.com/gdroot-g2.crl
      - certificatePolicies
        anyPolicy
        id-qt-cps: https://certs.godaddy.com/repository/
  - RSA-SHA256:
```
08 7e 6c 93 10 c8 38 b8  96 a9 90 4b ff a1 5f 4f  |.~l...8....K.._O|
04 ef 6c 3e 9c 88 06 c9  50 8f a6 73 f7 57 31 1b  |..l>....P..s.W1.|
be bc e4 2f db f8 ba d3  5b e0 b4 e7 e6 79 62 0e  |.../....[....yb.|
0c a2 d7 6a 63 73 31 b5  f5 a8 48 a4 3b 08 2d a2  |...jcs1...H.;.-.|
5d 90 d7 b4 7c 25 4f 11  56 30 c4 b6 44 9d 7b 2c  |]...|%O.V0..D.{,|
9d e5 5e e6 ef 0c 61 aa  bf e4 2a 1b ee 84 9e b8  |..^...a...*.....|
83 7d c1 43 ce 44 a7 13  70 0d 91 1f f4 c8 13 ad  |.}.C.D..p.......|
83 60 d9 d8 72 a8 73 24  1e b5 ac 22 0e ca 17 89  |.`..r.s$..."....|
62 58 44 1b ab 89 25 01  00 0f cd c4 1b 62 db 51  |bXD...%......b.Q|
b4 d3 0f 51 2a 9b f4 bc  73 fc 76 ce 36 a4 cd d9  |...Q*...s.v.6...|
d8 2c ea ae 9b f5 2a b2  90 d1 4d 75 18 8a 3f 8a  |.,....*...Mu..?.|
41 90 23 7d 5b 4b fe a4  03 58 9b 46 b2 c3 60 60  |A.#}[K...X.F..``|
83 f8 7d 50 41 ce c2 a1  90 c3 bb ef 02 2f d2 15  |..}PA......../..|
54 ee 44 15 d9 0a ae a7  8a 33 ed b1 2d 76 36 26  |T.D......3..-v6&|
dc 04 eb 9f f7 61 1f 15  dc 87 6f ee 46 96 28 ad  |.....a....o.F.(.|
a1 26 7d 0a 09 a7 2e 04  a3 8d bc f8 bc 04 30 01  |.&}...........0.|
```
- Certificate #2
  - 2
    - D0:9D:C1:0C:35:B3:65:B8
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - OU: http://certs.godaddy.com/repository/
      - CN: Go Daddy Secure Certificate Authority - G2
    - 2020-05-22 10:19:02 UTC: 2023-05-22 03:38:01 UTC
    - Subject
      - C: GB
      - L: Walsall
      - O: Facepunch Studios Ltd
      - CN: Facepunch Studios Ltd
    - #5
      - rsaEncryption: nil
      - C3:C6:10:4C:AF:E0:28:BF:B2:58:8F:86:E8:C1:AA:2C:
        93:A6:D4:D7:92:22:9B:A4:C5:CC:38:76:52:5A:A6:2E:
        5A:7A:02:81:07:1F:28:2E:74:89:C8:B1:90:0C:70:22:
        EE:18:5D:2C:D2:C5:71:BA:DD:18:FD:18:87:99:60:00:
        A1:D9:67:5C:13:C3:06:65:B2:C7:0C:B1:7C:4A:B6:DE:
        AE:14:91:E4:92:0F:D5:0E:3F:56:2B:3D:F1:27:96:32:
        CA:6F:0C:FE:2D:23:B4:CE:C9:2D:02:EC:87:83:DB:39:
        4D:AA:5C:EA:D2:09:DE:56:8F:51:BB:A3:F4:3C:F6:94:
        CF:C5:19:62:56:92:8E:99:31:3B:1A:8B:6D:0D:F6:99:
        62:02:EE:23:A4:7D:7F:A5:93:CD:A9:18:DF:92:66:A3:
        68:05:F0:DE:81:6C:3D:7F:99:2D:40:88:95:AA:E3:67:
        16:BA:88:CE:99:58:7D:E5:B7:8D:FB:9E:89:9B:2C:CB:
        D7:30:D9:3D:56:AC:F4:79:17:43:5F:2F:CA:92:5E:18:
        23:F8:34:21:6F:C2:90:DE:A5:55:93:67:B0:83:20:DE:
        CA:BB:FA:CC:ED:66:8A:66:18:BA:4F:C1:3B:4B:E2:6F:
        B2:87:0B:ED:63:21:7C:8E:86:16:3D:6D:D5:D2:1D:6E:
        5D:A2:CA:C7:69:F1:CE:5D:AC:87:CE:AB:70:4A:F5:21:
        F9:BB:28:13:82:8C:6F:7B:F1:FE:F9:14:32:BD:EE:47:
        65:00:06:2B:5E:9C:37:A6:4F:D4:35:0D:61:E3:CE:D4:
        1E:4C:45:08:7E:C1:23:CC:77:3A:DD:CF:D0:7A:26:49:
        0C:93:1E:F8:4F:63:57:26:02:BB:67:29:89:6F:18:77:
        DF:2F:3B:94:AD:AF:30:71:15:25:49:41:CE:2F:10:83:
        4C:81:ED:B3:A7:99:39:D5:6E:A1:05:45:01:8E:2D:54:
        5A:DA:32:21:2F:F3:73:07:E1:E5:E8:34:1A:57:E4:F7:
        A6:53:3E:C4:A8:51:CC:D8:4C:84:11:E0:B3:F4:5C:3B:
        34:D3:67:F3:D3:AA:05:69:B9:5E:E1:28:5E:D9:02:8F:
        9E:E3:E1:2B:DB:41:00:54:2C:FE:1E:DA:B6:64:59:0A:
        BD:A3:94:B0:3D:7F:60:74:3B:E0:7A:FE:69:A3:33:24:
        E5:1F:A0:71:10:7B:BB:DC:B4:20:94:0E:F8:36:01:77:
        A1:68:6A:BF:C3:61:E7:39:E2:54:A8:8C:51:43:DA:D6:
        71:25:46:CC:04:64:72:73:BD:93:77:04:BF:3E:16:F4:
        3E:EC:C1:B6:C9:33:8B:8B:AF:5D:4F:62:50:CC:97:C9: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: codeSigning
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://crl.godaddy.com/gdig2s5-5.crl
      - certificatePolicies
        #0
        2.16.840.1.114413.1.7.23.2
        id-qt-cps: http://certificates.godaddy.com/repository/
        2.23.140.1.4.1
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.godaddy.com/
        caIssuers: http://certificates.godaddy.com/repository/gdig2.crt
      - authorityKeyIdentifier:
        40 c2 bd 27 8e cc 34 83 30 a2 33 d7 fb 6c b3 f0 |@..'..4.0.3..l..| b4 2c 80 ce |.,.. |
      - subjectKeyIdentifier:
        2d 01 cc a5 f4 af 53 d7 e1 f6 39 4a fb 45 a4 a3 |-.....S...9J.E..| 2a 07 c4 db |*... |
  - RSA-SHA256:
```
11 1b 42 48 f2 a2 f7 8f  5e cf a5 7d 30 9c f7 01  |..BH....^..}0...|
4c 87 a2 3d 1a 34 cd ab  b4 9d db 2b 72 7f 62 e0  |L..=.4.....+r.b.|
90 80 68 61 3c cf 0c 98  8f a7 23 fc e6 90 1b be  |..ha<.....#.....|
51 30 8c 74 23 63 08 68  9c 09 51 03 ef 61 20 9a  |Q0.t#c.h..Q..a .|
68 52 56 5b 34 b9 3d ce  2d f8 c2 4c 7f 22 e6 b5  |hRV[4.=.-..L."..|
5b ec 75 8a da a0 17 90  00 28 e9 4f 4f 9a b2 1e  |[.u......(.OO...|
1d 6f 08 ee 81 29 38 a8  a8 95 70 cb 6d b2 80 9e  |.o...)8...p.m...|
ae b7 82 a1 19 28 86 20  b5 d5 f2 c5 e7 1e 7f 7d  |.....(. .......}|
f9 bc 76 bf b3 84 85 96  e2 73 e4 db f4 e5 5c d4  |..v......s....\.|
bf 3d 6e f1 1c 7d 4d a1  05 0b c5 91 3c 39 4e 06  |.=n..}M.....<9N.|
9b 66 b4 e0 b2 69 52 b8  09 6a c4 10 c8 30 5a ad  |.f...iR..j...0Z.|
c8 f7 e3 36 5c 92 8e b1  da a1 50 e6 8e 12 c8 b4  |...6\.....P.....|
ab b3 42 60 f4 81 71 91  b5 5b fd cc 20 97 e6 c3  |..B`..q..[.. ...|
b5 b7 ae 2c f2 e8 28 f3  50 34 ad 64 33 c8 30 7a  |...,..(.P4.d3.0z|
71 ca 51 52 d0 5e 23 81  88 f5 01 f0 63 6e 86 a8  |q.QR.^#.....cn..|
98 b2 50 aa 50 e1 81 27  45 2d 63 16 3f 1b 8a 98  |..P.P..'E-c.?...|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: Arizona
  - L: Scottsdale
  - O: GoDaddy.com, Inc.
  - OU: http://certs.godaddy.com/repository/
  - CN: Go Daddy Secure Certificate Authority - G2
- D0:9D:C1:0C:35:B3:65:B8
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

3c e7 1c fa f5 bf 8e 89  00 90 cd ce 93 eb be 3c  |<..............<|
2f 5f 99 42                                       |/_.B            |

rsaEncryption:

61 85 51 b0 95 cb 4b ce  36 20 d4 7f 4a cf a7 3f  |a.Q...K.6 ..J..?|
b6 20 78 44 28 b8 20 ce  aa e4 1b ce 19 52 73 40  |. xD(. ......Rs@|
d3 c9 a9 6e 45 a6 93 77  9f 7a 60 61 d3 9e 2b 8c  |...nE..w.z`a..+.|
44 84 16 f2 cc 52 f9 cb  01 d0 a6 b3 f6 1f 11 fc  |D....R..........|
0a 88 bc a2 22 ad 11 77  30 d3 6e 1c a7 32 1f 1c  |...."..w0.n..2..|
44 fc fa ed 90 d9 1e 63  04 bb 45 6a d0 b9 2b 73  |D......c..Ej..+s|
27 7e d7 bd 31 26 2e 75  70 26 59 5e c4 94 14 63  |'~..1&.up&Y^...c|
22 11 b9 27 93 8b 6d a9  d3 d4 58 ee 45 69 39 23  |"..'..m...X.Ei9#|
66 b8 b3 f9 12 c5 b6 c9  e2 a5 53 60 8d a8 2c cc  |f.........S`..,.|
94 48 08 0d 5e 41 66 a3  b3 e0 be 3d 75 54 81 a2  |.H..^Af....=uT..|
3e c6 cd d6 33 80 21 57  b2 35 8a d7 34 a8 a7 b5  |>...3.!W.5..4...|
b0 ca 9c 83 8e 1f 32 79  3c f8 a0 fe 61 77 e1 14  |......2y<...aw..|
51 e2 26 6d ca 1c c0 20  13 48 df 7d 11 81 ce ae  |Q.&m... .H.}....|
0c 02 f4 27 a7 24 f9 4e  fe 8a bc 4d 8f 3a 1f 88  |...'.$.N...M.:..|
b0 bb 61 e3 f2 b3 2f 1b  2e 0f a5 7a ad 06 74 38  |..a.../....z..t8|
f2 a1 14 4a fd 3e d0 cf  ea 8b 8e 05 56 0e 56 2c  |...J.>......V.V,|
e2 16 65 bc fe 1d dc fe  2d 9d 83 d6 d1 f7 72 c2  |..e.....-.....r.|
06 0f d7 b9 6c 31 b2 c5  1b 74 c1 24 51 0c 2d 0c  |....l1...t.$Q.-.|
69 63 ba 08 39 aa 31 bc  1f 40 0a 81 e0 d9 37 47  |ic..9.1..@....7G|
1e 63 c1 be 3b e9 5f 90  7f 64 81 e6 40 3f 65 2e  |.c..;._..d..@?e.|
bd d7 f4 50 91 73 9c 74  7c 06 75 ac d0 76 e5 26  |...P.s.t|.u..v.&|
43 0f ba fb 92 f4 17 31  dc 5d b3 fc 7a e8 9f 40  |C......1.]..z..@|
63 5b 71 3b 07 04 51 2f  a6 97 17 42 2c a4 51 3c  |c[q;..Q/...B,.Q<|
e8 df ad 37 a2 9d 95 bb  f3 5b a0 ba 4e db 60 1d  |...7.....[..N.`.|
16 36 94 bd a0 c8 66 7f  4d fa 16 a7 24 e0 26 e1  |.6....f.M...$.&.|
15 cb aa b5 6d d4 66 90  58 d1 40 70 e1 18 47 fb  |....m.f.X.@p..G.|
e8 d6 f4 16 c6 02 5b d4  e7 35 75 aa 8d 1f 33 13  |......[..5u...3.|
41 1a 8a f2 b5 7e 94 ce  95 5f 40 a5 46 ef b9 e1  |A....~..._@.F...|
78 8c e2 1d 08 3e b2 e4  4c e3 92 17 2f b5 b2 bf  |x....>..L.../...|
95 b6 87 3f 55 e6 72 31  f7 a1 40 99 36 10 a3 c3  |...?U.r1..@.6...|
86 1b c7 00 77 59 16 09  c0 a7 7b af e9 f9 6b e3  |....wY....{...k.|
25 60 e3 17 2a 25 d7 2d  44 75 71 6f bb 46 0b 2f  |%`..*%.-Duqo.F./|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	272264	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x51d80