XPSViewer.exe - Software Imaging XPS Viewer

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	XPSViewer.exe
size	5635144 (0x55fc48)
md5	0151b92e234dab6a226b0fdf312a4a22

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
125	50727	44
123	50727	25
1	0	389
149	21022	1
131	21022	7
109	50727	140
110	50727	67
138	30729	169
146	30729	1
148	21022	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4b20d9c2
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x3e5200
SizeOfInitializedData	0x179000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x3c2881
BaseOfCode	0x1000
BaseOfData	0x3e7000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x565000
SizeOfHeaders	0x400
CheckSum	0x5678e1
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3e500c	0x3e5200	R-X CODE
.rdata	0x3e7000	0x40553	0x40600	R-- IDATA
.data	0x428000	0x54b8	0x3000	RW- IDATA
.rsrc	0x42e000	0xff2f4	0xff400	R-- IDATA
.reloc	0x52e000	0x364ca	0x36600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x427500	0x53
IMPORT	0x425570	0x104
RESOURCE	0x42e000	0xff2f4
EXCEPTION	0	0
SECURITY	0x55e600	0x1648
BASERELOC	0x52e000	0x2067c
DEBUG	0x3e7670	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x4004b0	0x40
Bound_IAT	0	0
IAT	0x3e7000	0x5c8
Delay_IAT	0x42549c	0x40
CLR_Header	0	0

show previews

type	name	size	cp
ICCPROFILE	#103	124856	1252
ICCPROFILE	#104	3144	1252
ICCPROFILE	#105	557168	1252
BITMAP	#128	39208	1252
BITMAP	#201	6400	1252
ICON	#1	1640	1252
ICON	#2	744	1252
ICON	#3	488	1252
ICON	#4	296	1252
ICON	#5	3752	1252
ICON	#6	2216	1252
ICON	#7	1736	1252
ICON	#8	1384	1252
ICON	#9	270376	1252
ICON	#10	9640	1252
ICON	#11	4264	1252
ICON	#12	2440	1252
ICON	#13	1128	1252
MENU	#128	1352	1252
MENU	#201	694	1252
DIALOG	#100	744	1252
DIALOG	#202	312	1252
DIALOG	#203	536	1252
DIALOG	#204	300	1252
STRING	#9	52	1252
STRING	#63	240	1252
STRING	#64	252	1252
STRING	#65	1050	1252
STRING	#66	446	1252
STRING	#2044	274	1252
STRING	#2045	864	1252
STRING	#2046	398	1252
STRING	#3585	42	1252
STRING	#3601	308	1252
STRING	#3604	636	1252
STRING	#3605	262	1252
STRING	#3606	218	1252
STRING	#3713	198	1252
STRING	#3825	504	1252
STRING	#3826	174	1252
STRING	#3838	68	1252
ACCELERATORS	#128	152	1252
GROUP_ICON	#128	188	1252
VERSION	#1	884	1252
MANIFEST	#1	622	1252
#241	#128	50	1252

id	lang	string
128	1033	XPS Viewer
1000	1033	Unable to load XPS file: %s
1001	1033	%d of %d
1002	1033	&Anti-aliased
1003	1033	&Aliased
1004	1033	%3.f%%
1005	1033	Perceptual
1006	1033	Saturation
1007	1033	Relative Colorimetric
1008	1033	Absolute Colorimetric
1009	1033	%s - %s
1010	1033	Parsing...
1011	1033	Renderering...
1012	1033	Ready
1013	1033	50%
1014	1033	75%
1015	1033	100%
1016	1033	125%
1017	1033	150%
1018	1033	200%
1019	1033	250%
1020	1033	300%
1021	1033	400%
1022	1033	Fit width
1023	1033	Fit height
1024	1033	Fit page
1025	1033	Custom
1026	1033	xps
1027	1033	XPS Files (.xps)@.xps@All Files (.)@.@
1028	1033	%u x %u
1029	1033	[Default]
1030	1033	icc
1031	1033	ICC Color Profiles(.icc)@.icc@All Files (.)@.@
1032	1033	Aliased
1033	1033	Anti-Aliased
1034	1033	http://softwareimaging.com/products-services/xpsviewer/index.asp
1035	1033	http://softwareimaging.com/products-services/xpsviewer/help.asp
1036	1033	http://softwareimaging.com/products-services/xpsviewer/registration.asp
1037	1033	http://softwareimaging.com/products-services/xpsviewer/feedback.asp
1038	1033	http://softwareimaging.com/products-services/xps/printmagicxps.asp
1039	1033	Error parsing XPS file: %s
1040	1033	The following components are not installed:
1041	1033	- Microsoft XML 6 (MSXML6).
1042	1033	- Windows Imaging Component (WIC).
1043	1033	%d
1044	1033	/ %d
1046	1033	There is no page '%d' found in this document
1047	1033	The zoom value '%d%%' is out of range
1048	1033	[%d%% - %d%%]
32700	1033	Reopen a recently viewed file Recent Files
32701	1033	Change the view's scale
32702	1033	View next page Next Page
32703	1033	View previous page Previous Page
32704	1033	Rotate image 90 degrees left Rotate Left
32705	1033	Rotate image 90 degrees right Rotate Right
32706	1033	View first page First Page
32707	1033	View last page Last Page
32710	1033	Zoom image to Normal size Normal Size
32712	1033	Zoom in Zoom In
32713	1033	Zoom out Zoom Out
32714	1033	Zoom image to fit width Fit Width
32715	1033	Zoom image to fit height Fit Height
32716	1033	Zoom image to fit page Fit Page
32717	1033	Select zoom level Zoom Level
32718	1033	Toggle aliasing mode aliased/anti-aliased Alias Mode
32719	1033	Select a color profile Color Profile
32720	1033	Display the program help information Help
32724	1033	View specific page number Goto Page Number
32725	1033	View total number of pages Total Pages
32726	1033	View specific page GotoPage
32727	1033	Zoom image to specific size Zoom To
57345	1033	Ready
57601	1033	Open an existing document Open
57602	1033	Close the active document Close
57603	1033	Save the active document Save
57604	1033	Save the active document with a new name Save As
57648	1033	Open another window for the active document New Window
57649	1033	Arrange icons at the bottom of the window Arrange Icons
57650	1033	Arrange windows so they overlap Cascade Windows
57651	1033	Arrange windows as non-overlapping tiles Tile Windows
57652	1033	Arrange windows as non-overlapping tiles Tile Windows
57653	1033	Split the active window into panes Split
57664	1033	Display program information, version number and copyright About
57665	1033	Quit the application; prompts to save documents Exit
57680	1033	Switch to the next window pane Next Pane
57681	1033	Switch back to the previous window pane Previous Pane
59392	1033	Show or hide the toolbar Toggle ToolBar
59393	1033	Show or hide the status bar Toggle StatusBar
61184	1033	Change the window size
61185	1033	Change the window position
61186	1033	Reduce the window to an icon
61187	1033	Enlarge the window to full size
61188	1033	Switch to the next document window
61189	1033	Switch to the previous document window
61190	1033	Close the active window and prompts to save the documents
61202	1033	Restore the window to normal size
61203	1033	Activate Task List
61215	1033	Activate this window
61402	1033	Open this document

module_name	hint	ord	function_name
KERNEL32.dll	1079		TerminateProcess
KERNEL32.dll	1096		UnhandledExceptionFilter
KERNEL32.dll	1055		SetUnhandledExceptionFilter
KERNEL32.dll	726		IsDebuggerPresent
KERNEL32.dll	1156		WideCharToMultiByte
KERNEL32.dll	95		ConvertThreadToFiber
KERNEL32.dll	92		ConvertFiberToThread
KERNEL32.dll	119		CreateFiber
KERNEL32.dll	1074		SwitchToFiber
KERNEL32.dll	192		DeleteFiber
KERNEL32.dll	589		GetSystemInfo
KERNEL32.dll	593		GetSystemTime
KERNEL32.dll	1076		SystemTimeToFileTime
KERNEL32.dll	271		FileTimeToDosDateTime
KERNEL32.dll	681		HeapReAlloc
KERNEL32.dll	586		GetSystemDirectoryW
KERNEL32.dll	1126		VirtualQuery
KERNEL32.dll	1118		VirtualAlloc
KERNEL32.dll	798		MulDiv
KERNEL32.dll	766		LocalAlloc
KERNEL32.dll	322		FlushFileBuffers
KERNEL32.dll	121		CreateFileA
KERNEL32.dll	1174		WriteConsoleW
KERNEL32.dll	410		GetConsoleOutputCP
KERNEL32.dll	1164		WriteConsoleA
KERNEL32.dll	1030		SetStdHandle
KERNEL32.dll	489		GetLocaleInfoA
KERNEL32.dll	579		GetStringTypeW
KERNEL32.dll	576		GetStringTypeA
KERNEL32.dll	406		GetConsoleMode
KERNEL32.dll	388		GetConsoleCP
KERNEL32.dll	1121		VirtualFree
KERNEL32.dll	1067		Sleep
KERNEL32.dll	744		LCMapStringW
KERNEL32.dll	742		LCMapStringA
KERNEL32.dll	532		GetOEMCP
KERNEL32.dll	339		GetACP
KERNEL32.dll	348		GetCPInfo
KERNEL32.dll	595		GetSystemTimeAsFileTime
KERNEL32.dll	618		GetTickCount
KERNEL32.dll	857		QueryPerformanceCounter
KERNEL32.dll	572		GetStartupInfoA
KERNEL32.dll	472		GetFileType
KERNEL32.dll	1008		SetHandleCount
KERNEL32.dll	368		GetCommandLineA
KERNEL32.dll	450		GetEnvironmentStringsW
KERNEL32.dll	332		FreeEnvironmentStringsW
KERNEL32.dll	448		GetEnvironmentStrings
KERNEL32.dll	331		FreeEnvironmentStringsA
KERNEL32.dll	501		GetModuleFileNameA
KERNEL32.dll	574		GetStdHandle
KERNEL32.dll	676		HeapCreate
KERNEL32.dll	261		ExitProcess
KERNEL32.dll	1085		TlsFree
KERNEL32.dll	1087		TlsSetValue
KERNEL32.dll	1084		TlsAlloc
KERNEL32.dll	1086		TlsGetValue
KERNEL32.dll	503		GetModuleHandleA
KERNEL32.dll	1124		VirtualProtect
KERNEL32.dll	831		OutputDebugStringA
KERNEL32.dll	922		RtlUnwind
KERNEL32.dll	573		GetStartupInfoW
KERNEL32.dll	164		CreateThread
KERNEL32.dll	262		ExitThread
KERNEL32.dll	634		GetVersionExA
KERNEL32.dll	683		HeapSize
KERNEL32.dll	677		HeapDestroy
KERNEL32.dll	758		LoadLibraryA
KERNEL32.dll	674		HeapAlloc
KERNEL32.dll	550		GetProcessHeap
KERNEL32.dll	678		HeapFree
KERNEL32.dll	427		GetCurrentProcessId
KERNEL32.dll	1012		SetLastError
KERNEL32.dll	369		GetCommandLineW
KERNEL32.dll	697		InitializeCriticalSection
KERNEL32.dll	502		GetModuleFileNameW
KERNEL32.dll	506		GetModuleHandleW
KERNEL32.dll	760		LoadLibraryExW
KERNEL32.dll	1207		lstrcmpiW
KERNEL32.dll	761		LoadLibraryW
KERNEL32.dll	546		GetProcAddress
KERNEL32.dll	333		FreeLibrary
KERNEL32.dll	1210		lstrcpyW
KERNEL32.dll	1204		lstrcmpW
KERNEL32.dll	864		RaiseException
KERNEL32.dll	799		MultiByteToWideChar
KERNEL32.dll	770		LocalFree
KERNEL32.dll	328		FormatMessageA
KERNEL32.dll	635		GetVersionExW
KERNEL32.dll	1216		lstrlenW
KERNEL32.dll	86		CompareStringW
KERNEL32.dll	430		GetCurrentThreadId
KERNEL32.dll	323		FlushInstructionCache
KERNEL32.dll	426		GetCurrentProcess
KERNEL32.dll	336		FreeResource
KERNEL32.dll	1099		UnmapViewOfFile
KERNEL32.dll	784		MapViewOfFileEx
KERNEL32.dll	125		CreateFileMappingW
KERNEL32.dll	465		GetFileInformationByHandle
KERNEL32.dll	1175		WriteFile
KERNEL32.dll	878		ReadFile
KERNEL32.dll	128		CreateFileW
KERNEL32.dll	999		SetFilePointer
KERNEL32.dll	917		ResumeThread
KERNEL32.dll	313		FindResourceExW
KERNEL32.dll	314		FindResourceW
KERNEL32.dll	763		LoadResource
KERNEL32.dll	780		LockResource
KERNEL32.dll	1066		SizeofResource
KERNEL32.dll	709		InterlockedIncrement
KERNEL32.dll	705		InterlockedDecrement
KERNEL32.dll	706		InterlockedExchange
KERNEL32.dll	118		CreateEventW
KERNEL32.dll	703		InterlockedCompareExchange
KERNEL32.dll	756		LeaveCriticalSection
KERNEL32.dll	218		EnterCriticalSection
KERNEL32.dll	191		DeleteCriticalSection
KERNEL32.dll	698		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1132		WaitForMultipleObjects
KERNEL32.dll	1134		WaitForSingleObject
KERNEL32.dll	914		ResetEvent
KERNEL32.dll	987		SetEvent
KERNEL32.dll	68		CloseHandle
KERNEL32.dll	487		GetLastError
USER32.dll	660		SetScrollPos
USER32.dll	358		GetScrollInfo
USER32.dll	417		InflateRect
USER32.dll	425		IntersectRect
USER32.dll	448		IsRectEmpty
USER32.dll	503		MessageBeep
USER32.dll	10		AppendMenuW
USER32.dll	473		LoadImageW
USER32.dll	600		ScrollWindowEx
USER32.dll	624		SetCursor
USER32.dll	332		GetMessagePos
USER32.dll	587		ReleaseCapture
USER32.dll	213		EndPaint
USER32.dll	14		BeginPaint
USER32.dll	265		GetClassLongW
USER32.dll	207		EnableMenuItem
USER32.dll	422		InsertMenuW
USER32.dll	152		DeleteMenu
USER32.dll	596		ScreenToClient
USER32.dll	101		CreatePopupMenu
USER32.dll	590		RemoveMenu
USER32.dll	292		GetFocus
USER32.dll	543		PostMessageW
USER32.dll	515		MonitorFromRect
USER32.dll	336		GetMonitorInfoW
USER32.dll	386		GetWindowLongW
USER32.dll	734		UnregisterClassA
USER32.dll	341		GetParent
USER32.dll	381		GetWindow
USER32.dll	771		WindowFromPoint
USER32.dll	365		GetSysColorBrush
USER32.dll	246		FrameRect
USER32.dll	187		DrawEdge
USER32.dll	190		DrawFrameControl
USER32.dll	44		CharLowerW
USER32.dll	305		GetKeyState
USER32.dll	586		RegisterWindowMessageW
USER32.dll	323		GetMenuItemID
USER32.dll	400		GetWindowThreadProcessId
USER32.dll	281		GetCursorPos
USER32.dll	257		GetCapture
USER32.dll	188		DrawFocusRect
USER32.dll	43		CharLowerBuffW
USER32.dll	553		PtInRect
USER32.dll	649		SetParent
USER32.dll	544		PostQuitMessage
USER32.dll	483		LoadStringA
USER32.dll	463		LoadAcceleratorsW
USER32.dll	481		LoadMenuW
USER32.dll	211		EndDialog
USER32.dll	166		DialogBoxParamW
USER32.dll	659		SetScrollInfo
USER32.dll	657		SetRect
USER32.dll	150		DefWindowProcW
USER32.dll	29		CallWindowProcW
USER32.dll	239		FillRect
USER32.dll	364		GetSysColor
USER32.dll	398		GetWindowTextLengthW
USER32.dll	399		GetWindowTextW
USER32.dll	454		IsWindowEnabled
USER32.dll	677		SetWindowLongW
USER32.dll	286		GetDlgCtrlID
USER32.dll	611		SendMessageW
USER32.dll	287		GetDlgItem
USER32.dll	453		IsWindow
USER32.dll	696		ShowWindow
USER32.dll	633		SetFocus
USER32.dll	526		OffsetRect
USER32.dll	200		DrawTextW
USER32.dll	684		SetWindowTextW
USER32.dll	209		EnableWindow
USER32.dll	249		GetActiveWindow
USER32.dll	709		SystemParametersInfoW
USER32.dll	458		IsWindowVisible
USER32.dll	645		SetMenuItemInfoW
USER32.dll	325		GetMenuItemInfoW
USER32.dll	641		SetMenuDefaultItem
USER32.dll	316		GetMenu
USER32.dll	392		GetWindowRect
USER32.dll	269		GetClientRect
USER32.dll	499		MapWindowPoints
USER32.dll	679		SetWindowPos
USER32.dll	511		MessageBoxW
USER32.dll	282		GetDC
USER32.dll	588		ReleaseDC
USER32.dll	615		SetCapture
USER32.dll	383		GetWindowDC
USER32.dll	262		GetClassInfoExW
USER32.dll	565		RegisterClassExW
USER32.dll	329		GetMenuStringW
USER32.dll	469		LoadCursorW
USER32.dll	658		SetRectEmpty
USER32.dll	426		InvalidateRect
USER32.dll	363		GetSubMenu
USER32.dll	723		TranslateAcceleratorW
USER32.dll	484		LoadStringW
USER32.dll	160		DestroyWindow
USER32.dll	540		PeekMessageW
USER32.dll	334		GetMessageW
USER32.dll	725		TranslateMessage
USER32.dll	169		DispatchMessageW
USER32.dll	47		CharNextW
USER32.dll	357		GetScrollBarInfo
USER32.dll	367		GetSystemMetrics
USER32.dll	517		MoveWindow
USER32.dll	69		ClientToScreen
USER32.dll	446		IsMenu
USER32.dll	688		SetWindowsHookExW
USER32.dll	267		GetClassNameW
USER32.dll	27		CallNextHookEx
USER32.dll	514		MonitorFromPoint
USER32.dll	720		TrackPopupMenuEx
USER32.dll	729		UnhookWindowsHookEx
USER32.dll	745		UpdateWindow
USER32.dll	322		GetMenuItemCount
USER32.dll	513		ModifyMenuW
USER32.dll	158		DestroyMenu
USER32.dll	104		CreateWindowExW
USER32.dll	639		SetMenu
GDI32.dll	539		LPtoDP
GDI32.dll	604		SelectClipRgn
GDI32.dll	557		PatBlt
GDI32.dll	426		GetClipBox
GDI32.dll	33		CombineRgn
GDI32.dll	77		CreateRectRgn
GDI32.dll	525		GetTextMetricsW
GDI32.dll	40		CreateBitmap
GDI32.dll	78		CreateRectRgnIndirect
GDI32.dll	284		ExcludeClipRect
GDI32.dll	613		SetBkColor
GDI32.dll	617		SetBrushOrgEx
GDI32.dll	45		CreateCompatibleBitmap
GDI32.dll	471		GetMapMode
GDI32.dll	656		SetViewportOrgEx
GDI32.dll	655		SetViewportExtEx
GDI32.dll	659		SetWindowExtEx
GDI32.dll	635		SetMapMode
GDI32.dll	146		DPtoLP
GDI32.dll	291		ExtTextOutW
GDI32.dll	666		StretchBlt
GDI32.dll	511		GetTextColor
GDI32.dll	208		DeleteObject
GDI32.dll	205		DeleteDC
GDI32.dll	46		CreateCompatibleDC
GDI32.dll	606		SelectObject
GDI32.dll	82		CreateSolidBrush
GDI32.dll	18		BitBlt
GDI32.dll	614		SetBkMode
GDI32.dll	517		GetTextExtentPoint32W
GDI32.dll	653		SetTextColor
GDI32.dll	500		GetStockObject
GDI32.dll	62		CreateFontIndirectW
GDI32.dll	72		CreatePatternBrush
GDI32.dll	51		CreateDIBSection
GDI32.dll	484		GetObjectW
GDI32.dll	583		RemoveFontMemResourceEx
GDI32.dll	459		GetGlyphOutlineW
GDI32.dll	2		AddFontMemResourceEx
GDI32.dll	486		GetOutlineTextMetricsW
COMDLG32.dll	14		GetSaveFileNameW
COMDLG32.dll	12		GetOpenFileNameW
ADVAPI32.dll	616		RegQueryValueExW
ADVAPI32.dll	554		RegCloseKey
ADVAPI32.dll	610		RegQueryInfoKeyW
ADVAPI32.dll	585		RegEnumKeyExW
ADVAPI32.dll	603		RegOpenKeyExW
ADVAPI32.dll	632		RegSetValueExW
ADVAPI32.dll	563		RegCreateKeyExW
ADVAPI32.dll	578		RegDeleteValueW
ADVAPI32.dll	574		RegDeleteKeyW
SHELL32.dll	7		CommandLineToArgvW
SHELL32.dll	280		ShellExecuteW
ole32.dll	15		CoCreateGuid
ole32.dll	275		PropVariantCopy
ole32.dll	274		PropVariantClear
ole32.dll	102		CoTaskMemAlloc
ole32.dll	104		CoTaskMemRealloc
ole32.dll	103		CoTaskMemFree
ole32.dll	16		CoCreateInstance
ole32.dll	107		CoUninitialize
ole32.dll	62		CoInitializeEx
ole32.dll	25		CoFileTimeNow
OLEAUT32.dll		277
OLEAUT32.dll		2
OLEAUT32.dll		176
OLEAUT32.dll		10
OLEAUT32.dll		7
OLEAUT32.dll		314
OLEAUT32.dll		150
OLEAUT32.dll		149
OLEAUT32.dll		8
OLEAUT32.dll		4
OLEAUT32.dll		9
OLEAUT32.dll		6
SHLWAPI.dll	69		PathFileExistsW
SHLWAPI.dll	70		PathFindExtensionA
COMCTL32.dll	84		ImageList_Destroy
COMCTL32.dll	12		CreateStatusWindowW
COMCTL32.dll	99		ImageList_GetImageCount
COMCTL32.dll	122		InitCommonControlsEx
COMCTL32.dll	89		ImageList_Draw
COMCTL32.dll	91		ImageList_DrawIndirect
COMCTL32.dll	104		ImageList_LoadImageW
COMCTL32.dll	145		_TrackMouseEvent
gdiplus.dll	628		GdiplusShutdown
gdiplus.dll	629		GdiplusStartup
gdiplus.dll	245		GdipGetCellDescent
gdiplus.dll	244		GdipGetCellAscent
gdiplus.dll	143		GdipDeleteFontFamily
gdiplus.dll	467		GdipPrivateAddMemoryFont
gdiplus.dll	149		GdipDeletePrivateFontCollection
gdiplus.dll	451		GdipNewPrivateFontCollection
gdiplus.dll	53		GdipCloneFontFamily
gdiplus.dll	268		GdipGetFontCollectionFamilyList
gdiplus.dll	267		GdipGetFontCollectionFamilyCount
gdiplus.dll	348		GdipGetPathWorldBounds
gdiplus.dll	144		GdipDeleteGraphics
gdiplus.dll	91		GdipCreateFromHDC
gdiplus.dll	345		GdipGetPathPoints
gdiplus.dll	347		GdipGetPathTypes
gdiplus.dll	31		GdipAddPathString
gdiplus.dll	146		GdipDeletePath
gdiplus.dll	115		GdipCreatePath
gdiplus.dll	587		GdipSetStringFormatAlign
gdiplus.dll	151		GdipDeleteStringFormat
gdiplus.dll	132		GdipCreateStringFormat
gdiplus.dll	237		GdipFree
gdiplus.dll	371		GdipGetPointCount
mscms.dll	69		TranslateBitmapBits
mscms.dll	26		DeleteColorTransform
mscms.dll	23		CreateMultiProfileTransform
mscms.dll	4		CloseColorProfile
mscms.dll	39		GetColorProfileHeader
mscms.dll	58		OpenColorProfileW

ord	entry_va	function_name
1	0x3c12ec	_crt_debugger_hook

module_name	XPSViewer.exe
flags	0
timestamp	2009-12-10 11:18:04
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x42752c
Functions(1)	0x427528
NameOrdinals(1)	0x427530

StringTable 040904b0

CompanyName	Software Imaging
FileDescription	Software Imaging XPS Viewer
FileVersion	1, 0, 0, 0
InternalName	XPSViewer
LegalCopyright	Copyright © Software 2000 Limited 1996-2009. All rights reserved.
OriginalFilename	XPSViewer.exe
ProductName	Software Imaging PrintMagicXPS
ProductVersion	1, 0, 0, 0

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http:\/\/certificates.godaddy.com\/repository/CN=Go Daddy Secure Certification Authority/serialNumber=07969287

serial: E2CAE6

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
        82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
        fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
        36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
        8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
        27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
        87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
        ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
        a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
        24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
        80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
        3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
        b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
        0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
        49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
        d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
        04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
        15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
        fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
        e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
        c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
        3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
        Validity
            Not Before: Nov 16 01:54:37 2006 GMT
            Not After : Nov 16 01:54:37 2026 GMT
        Subject: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certificates.godaddy.com\/repository, CN=Go Daddy Secure Certification Authority/serialNumber=07969287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:d5:15:8c:9c:26:4c:ec:32:35:eb:5f:b8:
                    59:01:5a:a6:61:81:59:3b:70:63:ab:e3:dc:3d:c7:
                    2a:b8:c9:33:d3:79:e4:3a:ed:3c:30:23:84:8e:b3:
                    30:14:b6:b2:87:c3:3d:95:54:04:9e:df:99:dd:0b:
                    25:1e:21:de:65:29:7e:35:a8:a9:54:eb:f6:f7:32:
                    39:d4:26:55:95:ad:ef:fb:fe:58:86:d7:9e:f4:00:
                    8d:8c:2a:0c:bd:42:04:ce:a7:3f:04:f6:ee:80:f2:
                    aa:ef:52:a1:69:66:da:be:1a:ad:5d:da:2c:66:ea:
                    1a:6b:bb:e5:1a:51:4a:00:2f:48:c7:98:75:d8:b9:
                    29:c8:ee:f8:66:6d:0a:9c:b3:f3:fc:78:7c:a2:f8:
                    a3:f2:b5:c3:f3:b9:7a:91:c1:a7:e6:25:2e:9c:a8:
                    ed:12:65:6e:6a:f6:12:44:53:70:30:95:c3:9c:2b:
                    58:2b:3d:08:74:4a:f2:be:51:b0:bf:87:d0:4c:27:
                    58:6b:b5:35:c5:9d:af:17:31:f8:0b:8f:ee:ad:81:
                    36:05:89:08:98:cf:3a:af:25:87:c0:49:ea:a7:fd:
                    67:f7:45:8e:97:cc:14:39:e2:36:85:b5:7e:1a:37:
                    fd:16:f6:71:11:9a:74:30:16:fe:13:94:a3:3f:84:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FD:AC:61:32:93:6C:45:D6:E2:EE:85:5F:9A:BA:E7:76:99:68:CC:E7
            X509v3 Authority Key Identifier: 
                D2:C4:B0:D2:91:D4:4C:11:71:B3:61:CB:3D:A1:FE:DD:A8:6A:D4:E3
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://certificates.godaddy.com/repository/gdroot.crl
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: http://certificates.godaddy.com/repository
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        d2:86:c0:ec:bd:f9:a1:b6:67:ee:66:0b:a2:06:3a:04:50:8e:
        15:72:ac:4a:74:95:53:cb:37:cb:44:49:ef:07:90:6b:33:d9:
        96:f0:94:56:a5:13:30:05:3c:85:32:21:7b:c9:c7:0a:a8:24:
        a4:90:de:46:d3:25:23:14:03:67:c2:10:d6:6f:0f:5d:7b:7a:
        cc:9f:c5:58:2a:c1:c4:9e:21:a8:5a:f3:ac:a4:46:f3:9e:e4:
        63:cb:2f:90:a4:29:29:01:d9:72:2c:29:df:37:01:27:bc:4f:
        ee:68:d3:21:8f:c0:b3:e4:f5:09:ed:d2:10:aa:53:b4:be:f0:
        cc:59:0b:d6:3b:96:1c:95:24:49:df:ce:ec:fd:a7:48:91:14:
        45:0e:3a:36:6f:da:45:b3:45:a2:41:c9:d4:d7:44:4e:3e:b9:
        74:76:d5:a2:13:55:2c:c6:87:a3:b5:99:ac:06:84:87:7f:75:
        06:fc:bf:14:4c:0e:cc:6e:c4:df:3d:b7:12:71:f4:e8:f1:51:
        40:22:28:49:e0:1d:4b:87:a8:34:cc:06:a2:dd:12:5a:d1:86:
        36:64:03:35:6f:6f:77:6e:eb:f2:85:50:98:5e:ab:03:53:ad:
        91:23:63:1f:16:9c:cd:b9:b2:05:63:3a:e1:f4:68:1b:17:05:
        35:95:53:ee

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14863078 (0xe2cae6)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certificates.godaddy.com\/repository, CN=Go Daddy Secure Certification Authority/serialNumber=07969287
        Validity
            Not Before: Feb  3 14:18:16 2009 GMT
            Not After : Feb  3 14:18:16 2012 GMT
        Subject: C=GB, ST=N\/A, L=Oxford, O=Software Imaging Group Limited, CN=Software Imaging Group Limited
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:b0:c1:37:3a:34:f4:d4:0c:94:34:6a:a1:
                    25:64:64:4f:29:58:e5:06:c6:5e:ed:4b:b9:53:1d:
                    38:1c:cb:39:28:1c:1d:10:f7:c7:46:7f:b4:26:60:
                    d8:36:23:7a:a4:7d:cd:32:29:5d:89:7d:a3:bc:82:
                    e2:99:1f:e4:40:a3:c4:b8:bf:b8:d4:b2:d9:4a:b4:
                    30:ad:9e:06:10:9b:17:65:ab:95:a8:29:10:c6:67:
                    42:4a:40:47:ad:aa:78:ca:0c:38:8d:de:ff:66:27:
                    df:2a:53:71:75:41:05:75:91:40:a1:02:14:c6:22:
                    07:22:2d:72:81:f5:f9:0c:02:a0:4a:58:32:8c:d1:
                    57:4f:03:6f:8e:4c:a4:b4:77:a5:de:57:6e:54:ab:
                    83:64:18:5b:5d:6b:3b:90:ff:be:af:6b:d9:af:52:
                    cb:9a:f9:8e:6a:04:6f:35:c0:9b:b5:2e:f9:41:1d:
                    45:0f:a2:0b:62:08:ba:79:37:6e:98:fb:73:be:b7:
                    a2:04:e1:0a:39:d5:ca:00:fc:b5:8a:1b:4a:d4:97:
                    e3:78:b7:66:10:89:6a:55:11:9e:c4:49:be:0c:8e:
                    77:bc:02:72:99:c2:a5:5b:5e:6c:a0:29:c6:a9:d2:
                    6e:37:45:d2:70:85:6d:b9:6f:e5:b1:ce:97:31:63:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gds5-0.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.2
                  CPS: http://certificates.godaddy.com/repository/
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gd_intermediate.crt
            X509v3 Authority Key Identifier: 
                FD:AC:61:32:93:6C:45:D6:E2:EE:85:5F:9A:BA:E7:76:99:68:CC:E7
            X509v3 Subject Key Identifier: 
                B7:9B:C5:79:86:47:ED:3C:EC:02:EB:73:F9:48:BE:45:12:3C:D7:D5
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        97:22:3b:22:ca:a6:6d:51:f1:13:0e:cf:ca:e4:5d:f5:ce:13:
        18:bd:a4:4a:24:a5:b2:10:df:50:3e:1c:1b:42:27:d7:53:6a:
        03:23:56:3f:c6:e2:95:9e:d5:41:ec:55:21:f9:1a:31:da:a2:
        c2:5a:9b:ec:67:5a:96:04:6a:5f:79:cb:ae:f4:e4:21:6c:d4:
        96:d8:eb:d1:9e:e4:02:ac:93:3e:ce:42:4b:a7:53:c3:a6:bf:
        5a:1e:cf:3a:32:f0:07:c0:37:25:ac:80:79:77:1f:2e:90:2e:
        ad:36:28:23:01:97:1e:08:2e:4f:b1:c0:80:cd:c6:13:9d:1d:
        10:16:7b:58:f4:37:c2:4e:ab:30:db:c4:eb:66:a1:61:0e:96:
        9e:05:20:b6:e7:69:f3:93:70:2c:70:a1:ec:b5:60:a4:ba:40:
        58:69:ec:c1:d9:ae:2f:56:e1:d6:27:b0:40:f6:02:5d:2e:a8:
        97:11:b1:25:11:3f:2a:97:60:93:54:83:c5:6e:f5:76:4b:85:
        1d:7e:b2:c4:12:47:c3:11:5a:57:58:df:f2:89:77:01:0f:d3:
        e4:39:e0:53:ef:cb:4c:85:e5:38:3e:3a:de:24:28:17:cb:a7:
        0b:a3:70:89:09:13:39:ae:e1:39:bf:cb:7f:18:d7:f7:e7:0f:
        28:c8:ed:96

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

d5 a5 b8 f1 4d e2 9a 2e 6f ca d2 aa eb b8 64 c9 |....M...o.....d.| a7 8f 96 8a |.... |

Certificates
- Certificate #0
  - 2
    - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services Signer - G2
    - #5
      - rsaEncryption: nil
      - C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0xc0
      - subjectAltName
        CN: TSA1-2
  - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
- Certificate #1
  - 2
    - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - CN: VeriSign Time Stamping Services CA
    - #5
      - rsaEncryption: nil
      - A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TSA2048-1-53
  - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
- Certificate #2
  - 2
    - 0x0301
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: The Go Daddy Group, Inc.
      - OU: Go Daddy Class 2 Certification Authority
    - 2006-11-16 01:54:37 UTC: 2026-11-16 01:54:37 UTC
    - Subject
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - OU: http://certificates.godaddy.com/repository
      - CN: Go Daddy Secure Certification Authority
      - serialNumber: 07969287
    - #5
      - rsaEncryption: nil
      - C4:2D:D5:15:8C:9C:26:4C:EC:32:35:EB:5F:B8:59:01:
        5A:A6:61:81:59:3B:70:63:AB:E3:DC:3D:C7:2A:B8:C9:
        33:D3:79:E4:3A:ED:3C:30:23:84:8E:B3:30:14:B6:B2:
        87:C3:3D:95:54:04:9E:DF:99:DD:0B:25:1E:21:DE:65:
        29:7E:35:A8:A9:54:EB:F6:F7:32:39:D4:26:55:95:AD:
        EF:FB:FE:58:86:D7:9E:F4:00:8D:8C:2A:0C:BD:42:04:
        CE:A7:3F:04:F6:EE:80:F2:AA:EF:52:A1:69:66:DA:BE:
        1A:AD:5D:DA:2C:66:EA:1A:6B:BB:E5:1A:51:4A:00:2F:
        48:C7:98:75:D8:B9:29:C8:EE:F8:66:6D:0A:9C:B3:F3:
        FC:78:7C:A2:F8:A3:F2:B5:C3:F3:B9:7A:91:C1:A7:E6:
        25:2E:9C:A8:ED:12:65:6E:6A:F6:12:44:53:70:30:95:
        C3:9C:2B:58:2B:3D:08:74:4A:F2:BE:51:B0:BF:87:D0:
        4C:27:58:6B:B5:35:C5:9D:AF:17:31:F8:0B:8F:EE:AD:
        81:36:05:89:08:98:CF:3A:AF:25:87:C0:49:EA:A7:FD:
        67:F7:45:8E:97:CC:14:39:E2:36:85:B5:7E:1A:37:FD:
        16:F6:71:11:9A:74:30:16:FE:13:94:A3:3F:84:0D:4F: 0x010001
    - #6
      - subjectKeyIdentifier:
        fd ac 61 32 93 6c 45 d6 e2 ee 85 5f 9a ba e7 76 |..a2.lE...._...v| 99 68 cc e7 |.h.. |
      - authorityKeyIdentifier:
        d2 c4 b0 d2 91 d4 4c 11 71 b3 61 cb 3d a1 fe dd |......L.q.a.=...| a8 6a d4 e3 |.j.. |
      - basicConstraints
        true
        true: 0
      - authorityInfoAccess
        OCSP: http://ocsp.godaddy.com
      - crlDistributionPoints: http://certificates.godaddy.com/repository/gdroot.crl
      - certificatePolicies
        anyPolicy
        id-qt-cps: http://certificates.godaddy.com/repository
      - keyUsage: true, 6
  - RSA-SHA1:
```
d2 86 c0 ec bd f9 a1 b6  67 ee 66 0b a2 06 3a 04  |........g.f...:.|
50 8e 15 72 ac 4a 74 95  53 cb 37 cb 44 49 ef 07  |P..r.Jt.S.7.DI..|
90 6b 33 d9 96 f0 94 56  a5 13 30 05 3c 85 32 21  |.k3....V..0.<.2!|
7b c9 c7 0a a8 24 a4 90  de 46 d3 25 23 14 03 67  |{....$...F.%#..g|
c2 10 d6 6f 0f 5d 7b 7a  cc 9f c5 58 2a c1 c4 9e  |...o.]{z...X*...|
21 a8 5a f3 ac a4 46 f3  9e e4 63 cb 2f 90 a4 29  |!.Z...F...c./..)|
29 01 d9 72 2c 29 df 37  01 27 bc 4f ee 68 d3 21  |)..r,).7.'.O.h.!|
8f c0 b3 e4 f5 09 ed d2  10 aa 53 b4 be f0 cc 59  |..........S....Y|
0b d6 3b 96 1c 95 24 49  df ce ec fd a7 48 91 14  |..;...$I.....H..|
45 0e 3a 36 6f da 45 b3  45 a2 41 c9 d4 d7 44 4e  |E.:6o.E.E.A...DN|
3e b9 74 76 d5 a2 13 55  2c c6 87 a3 b5 99 ac 06  |>.tv...U,.......|
84 87 7f 75 06 fc bf 14  4c 0e cc 6e c4 df 3d b7  |...u....L..n..=.|
12 71 f4 e8 f1 51 40 22  28 49 e0 1d 4b 87 a8 34  |.q...Q@"(I..K..4|
cc 06 a2 dd 12 5a d1 86  36 64 03 35 6f 6f 77 6e  |.....Z..6d.5oown|
eb f2 85 50 98 5e ab 03  53 ad 91 23 63 1f 16 9c  |...P.^..S..#c...|
cd b9 b2 05 63 3a e1 f4  68 1b 17 05 35 95 53 ee  |....c:..h...5.S.|
```
- Certificate #3
  - 2
    - 0xE2CAE6
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: Arizona
      - L: Scottsdale
      - O: GoDaddy.com, Inc.
      - OU: http://certificates.godaddy.com/repository
      - CN: Go Daddy Secure Certification Authority
      - serialNumber: 07969287
    - 2009-02-03 14:18:16 UTC: 2012-02-03 14:18:16 UTC
    - Subject
      - C: GB
      - ST: N/A
      - L: Oxford
      - O: Software Imaging Group Limited
      - CN: Software Imaging Group Limited
    - #5
      - rsaEncryption: nil
      - DF:B1:B0:C1:37:3A:34:F4:D4:0C:94:34:6A:A1:25:64:
        64:4F:29:58:E5:06:C6:5E:ED:4B:B9:53:1D:38:1C:CB:
        39:28:1C:1D:10:F7:C7:46:7F:B4:26:60:D8:36:23:7A:
        A4:7D:CD:32:29:5D:89:7D:A3:BC:82:E2:99:1F:E4:40:
        A3:C4:B8:BF:B8:D4:B2:D9:4A:B4:30:AD:9E:06:10:9B:
        17:65:AB:95:A8:29:10:C6:67:42:4A:40:47:AD:AA:78:
        CA:0C:38:8D:DE:FF:66:27:DF:2A:53:71:75:41:05:75:
        91:40:A1:02:14:C6:22:07:22:2D:72:81:F5:F9:0C:02:
        A0:4A:58:32:8C:D1:57:4F:03:6F:8E:4C:A4:B4:77:A5:
        DE:57:6E:54:AB:83:64:18:5B:5D:6B:3B:90:FF:BE:AF:
        6B:D9:AF:52:CB:9A:F9:8E:6A:04:6F:35:C0:9B:B5:2E:
        F9:41:1D:45:0F:A2:0B:62:08:BA:79:37:6E:98:FB:73:
        BE:B7:A2:04:E1:0A:39:D5:CA:00:FC:B5:8A:1B:4A:D4:
        97:E3:78:B7:66:10:89:6A:55:11:9E:C4:49:BE:0C:8E:
        77:BC:02:72:99:C2:A5:5B:5E:6C:A0:29:C6:A9:D2:6E:
        37:45:D2:70:85:6D:B9:6F:E5:B1:CE:97:31:63:29:A5: 0x010001
    - X509v3 extensions
      - basicConstraints: true, false
      - extendedKeyUsage: codeSigning
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://crl.godaddy.com/gds5-0.crl
      - certificatePolicies
        2.16.840.1.114413.1.7.23.2
        id-qt-cps: http://certificates.godaddy.com/repository/
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.godaddy.com/
        caIssuers: http://certificates.godaddy.com/repository/gd_intermediate.crt
      - authorityKeyIdentifier:
        fd ac 61 32 93 6c 45 d6 e2 ee 85 5f 9a ba e7 76 |..a2.lE...._...v| 99 68 cc e7 |.h.. |
      - subjectKeyIdentifier:
        b7 9b c5 79 86 47 ed 3c ec 02 eb 73 f9 48 be 45 |...y.G.<...s.H.E| 12 3c d7 d5 |.<.. |
  - RSA-SHA1:
```
97 22 3b 22 ca a6 6d 51  f1 13 0e cf ca e4 5d f5  |.";"..mQ......].|
ce 13 18 bd a4 4a 24 a5  b2 10 df 50 3e 1c 1b 42  |.....J$....P>..B|
27 d7 53 6a 03 23 56 3f  c6 e2 95 9e d5 41 ec 55  |'.Sj.#V?.....A.U|
21 f9 1a 31 da a2 c2 5a  9b ec 67 5a 96 04 6a 5f  |!..1...Z..gZ..j_|
79 cb ae f4 e4 21 6c d4  96 d8 eb d1 9e e4 02 ac  |y....!l.........|
93 3e ce 42 4b a7 53 c3  a6 bf 5a 1e cf 3a 32 f0  |.>.BK.S...Z..:2.|
07 c0 37 25 ac 80 79 77  1f 2e 90 2e ad 36 28 23  |..7%..yw.....6(#|
01 97 1e 08 2e 4f b1 c0  80 cd c6 13 9d 1d 10 16  |.....O..........|
7b 58 f4 37 c2 4e ab 30  db c4 eb 66 a1 61 0e 96  |{X.7.N.0...f.a..|
9e 05 20 b6 e7 69 f3 93  70 2c 70 a1 ec b5 60 a4  |.. ..i..p,p...`.|
ba 40 58 69 ec c1 d9 ae  2f 56 e1 d6 27 b0 40 f6  |.@Xi..../V..'.@.|
02 5d 2e a8 97 11 b1 25  11 3f 2a 97 60 93 54 83  |.].....%.?*.`.T.|
c5 6e f5 76 4b 85 1d 7e  b2 c4 12 47 c3 11 5a 57  |.n.vK..~...G..ZW|
58 df f2 89 77 01 0f d3  e4 39 e0 53 ef cb 4c 85  |X...w....9.S..L.|
e5 38 3e 3a de 24 28 17  cb a7 0b a3 70 89 09 13  |.8>:.$(.....p...|
39 ae e1 39 bf cb 7f 18  d7 f7 e7 0f 28 c8 ed 96  |9..9........(...|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: Arizona
  - L: Scottsdale
  - O: GoDaddy.com, Inc.
  - OU: http://certificates.godaddy.com/repository
  - CN: Go Daddy Secure Certification Authority
  - serialNumber: 07969287
- 0xE2CAE6
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

7a 77 5d c3 47 ac 8b 6e  f2 69 10 5b f3 e1 87 af  |zw].G..n.i.[....|
6d a3 27 8b                                       |m.'.            |

1.3.6.1.4.1.311.2.1.12

00 58 00 50 00 53 00 20 00 56 00 69 00 65 00 77 |.X.P.S. .V.i.e.w| 00 65 00 72 |.e.r |
: http://www.softwareimaging.com

rsaEncryption:

67 ba ac 82 ef c2 b4 97  bc eb 06 44 aa 2d 63 36  |g..........D.-c6|
1d fb f0 49 61 ff c2 94  eb 74 f6 6e fe 25 21 20  |...Ia....t.n.%! |
d4 a6 56 49 1f 9f 4c fc  9d 3e 90 e0 10 ea c1 ea  |..VI..L..>......|
c8 4e c5 c5 05 2e c7 6a  26 d6 b2 44 27 87 5c 16  |.N.....j&..D'.\.|
86 3c cb 63 b0 61 da 48  a8 df ec 91 51 d7 ca 2b  |.<.c.a.H....Q..+|
c3 3c 8c cb f1 67 58 e4  5c 66 59 35 ce fc b4 c7  |.<...gX.\fY5....|
09 b3 05 cc e6 77 04 ec  1c ec fd 6c 51 77 4f 0e  |.....w.....lQwO.|
7d b3 4c ca 0a 90 bf 51  88 13 28 49 0d 27 74 f0  |}.L....Q..(I.'t.|
b9 af 5f 0a 28 a5 0b 5f  9c 1c 2c 9e 2b d8 a3 69  |.._.(.._..,.+..i|
a2 09 57 b9 b0 58 34 6a  ad 63 0f 59 a1 54 69 d7  |..W..X4j.c.Y.Ti.|
2d cf bb 70 3d 12 4f 00  8d 5b f4 b0 26 19 e6 de  |-..p=.O..[..&...|
54 be 12 82 3e 8e a0 cc  36 fe 10 ed 3e 25 c6 45  |T...>...6...>%.E|
ab cb bf 71 35 d7 7d e6  37 f2 6c fd b2 3b 4b b2  |...q5.}.7.l..;K.|
53 e3 14 bc 98 e8 88 3a  4e c4 8d 02 d4 6b a4 81  |S......:N....k..|
2b d7 85 5e 04 d6 5e c2  41 2e 36 89 d0 f5 9f 73  |+..^..^.A.6....s|
1d 22 32 93 af 17 ac d2  41 d4 ea a6 38 ea 00 e4  |."2.....A...8...|

countersignature

unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - CN: VeriSign Time Stamping Services CA
- 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
SHA1: nil

contentType: pkcs7-data
signingTime: 2009-12-10 11:21:47 UTC