ca.exe - CV.EXE - CommView for WiFi Packet Analyzer

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	ca.exe
size	5978032 (0x5b37b0)
md5	44a299bd9e0242d01c63173dcf1377ed

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xa
TimeDateStamp	0x4f70a849
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x81af
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x56ee00
SizeOfInitializedData	0x146600
SizeOfUninitializedData	0
AddressOfEntryPoint	0xe1d87f
BaseOfCode	0x1000
BaseOfData	0x571000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xf0b000
SizeOfHeaders	0x400
CheckSum	0x5b459d
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PolyEnE 0.01+ by Lennart Hedlund

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x56858c	0	R-X CODE
.itext	0x56a000	0x662c	0	R-X CODE
.data	0x571000	0x2a760	0	RW- IDATA
.bss	0x59c000	0x6a560	0	RW-
.idata	0x607000	0x59f6	0	RW- IDATA
.tls	0x60d000	0x154	0	RW-
.rdata	0x60e000	0x18	0	R-- IDATA
.KISS0	0x60f000	0x2941a7	0	RWX CODE IDATA
.KISS1	0x8a4000	0x59ecd1	0x59ee00	RWX CODE IDATA
.rsrc	0xe43000	0xc7fe4	0x13200	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xe3fe64	0x258
RESOURCE	0xe43000	0xc7fe4
EXCEPTION	0	0
SECURITY	0x5b2400	0x13b0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xba46d0	0x1c
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xe1f71c	0xfc
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0xa0d000	0xa0d154	0x9717cc	0xfa46e8	0	0

show previews

type	name	size
RSTABLE	ENG_RS	103674
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	748
CURSOR	#9	748
CURSOR	#10	748
CURSOR	#11	748
CURSOR	#12	308
CURSOR	#13	308
CURSOR	#14	308
CURSOR	#15	308
CURSOR	#16	308
CURSOR	#17	308
CURSOR	#18	308
CURSOR	#19	308
CURSOR	#20	308
CURSOR	#21	748
CURSOR	#22	748
CURSOR	#23	748
CURSOR	#24	748
CURSOR	#25	748
CURSOR	#26	748
CURSOR	#27	308
CURSOR	#28	308
CURSOR	#29	308
BITMAP	ASCBMP	152
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	DESCBMP	152
BITMAP	ELADVPANELCLOSEBUTTON	76
BITMAP	ELADVPANELDOWNARROW	68
BITMAP	ELADVPANELUPARROW	68
BITMAP	ELCALCULATOREDIT	136
BITMAP	ELDOWNARROW	120
BITMAP	ELFILENAMEEDITBUTTON	200
BITMAP	ELFILESAVEEDITBUTTON	208
BITMAP	ELFOLDERNAMEEDITBUTTON	192
BITMAP	ELFONTCOMBODEVICEBITMAP	248
BITMAP	ELFONTCOMBOTRUETYPEBITMAP	248
BITMAP	ELHEADERASCBMP	152
BITMAP	ELHEADERDESCBMP	152
BITMAP	ELHEADERLEFTBMP	132
BITMAP	ELHEADERPOINTBMP	124
BITMAP	ELHEADERRIGHTBMP	132
BITMAP	ELTOOLBARMOREARROW	144
BITMAP	HEADERCLS	76
BITMAP	HINTICONERROR	2344
BITMAP	HINTICONINFO	2344
BITMAP	HINTICONWARNING	2344
BITMAP	LEAFBMP	176
BITMAP	LMDBMPCL_ARROWS	2088
BITMAP	LMDBMPCOL_BUTTON	3268
BITMAP	LMDBMPPLAYGLYPH	360
BITMAP	LMDBMPSHIELD_BIG	2088
BITMAP	LMDBMPSHIELD_SMALL	1320
BITMAP	MINUSBMP	176
BITMAP	PLUSBMP	176
BITMAP	PREVIEWGLYPH	232
BITMAP	SPINDOWN	152
BITMAP	SPINUP	152
BITMAP	TBUTTONCOLOR	1640
BITMAP	TBUTTONGRADIENT	1640
BITMAP	TBUTTONPEN	1640
BITMAP	TBXGLYPHS	176
BITMAP	TCOMBOFLAT	1640
BITMAP	TEEARROWDOWN	272
BITMAP	TEEARROWUP	272
BITMAP	TTEEINSPECTOR	1640
BITMAP	TTEEPREVIEWPANEL	1640
BITMAP	VT_CHECK_DARK	3304
BITMAP	VT_CHECK_LIGHT	3304
BITMAP	VT_FLAT	3304
BITMAP	VT_MOVEALL	616
BITMAP	VT_MOVEEW	616
BITMAP	VT_MOVENS	616
BITMAP	VT_TICK_DARK	3304
BITMAP	VT_TICK_LIGHT	3304
BITMAP	VT_UTILITIES	3368
BITMAP	VT_XP	19242
BITMAP	VT_XPBUTTONMINUS	294
BITMAP	VT_XPBUTTONPLUS	294
BITMAP	#1001	232
BITMAP	#1002	232
BITMAP	#1005	112
ICON	#1	1640
ICON	#2	744
ICON	#3	296
ICON	#4	3752
ICON	#5	2216
ICON	#6	1384
ICON	#7	7336
ICON	#8	3240
ICON	#9	872
ICON	#10	9640
ICON	#11	4264
ICON	#12	1128
ICON	#13	4264
ICON	#14	1128
ICON	#15	4264
ICON	#16	1128
ICON	#17	296
ICON	#18	296
ICON	#19	1128
ICON	#20	1128
ICON	#21	296
ICON	#22	296
ICON	#23	1128
ICON	#24	1128
ICON	#25	296
ICON	#26	296
ICON	#27	1128
ICON	#28	1128
DIALOG	DLGTEMPLATE	82
DIALOG	TEXTFILEDLG	82
STRING	#1	496
STRING	#2	920
GROUP_ICON	MAINICON	174
GROUP_ICON	PGEN	34
GROUP_ICON	RA	34
GROUP_ICON	TRAYICON_0	20
GROUP_ICON	TRAYICON_1	20
GROUP_ICON	TRAYICON_10	20
GROUP_ICON	TRAYICON_11	20
GROUP_ICON	TRAYICON_2	20
GROUP_ICON	TRAYICON_3	20
GROUP_ICON	TRAYICON_4	20
GROUP_ICON	TRAYICON_5	20
GROUP_ICON	TRAYICON_6	20
GROUP_ICON	TRAYICON_7	20
GROUP_ICON	TRAYICON_8	20
GROUP_ICON	TRAYICON_9	20
VERSION	#1	904
MANIFEST	#1	1492

module_name	hint	ord	function_name
oleaut32.dll			VariantChangeType
advapi32.dll			DuplicateTokenEx
user32.dll			UnionRect
kernel32.dll			InterlockedDecrement
wintrust.dll			WintrustSetRegPolicyFlags
gdi32.dll			RoundRect
version.dll			GetFileVersionInfoA
wsock32.dll			bind
ole32.dll			CoInitializeEx
shell32.dll			DragQueryPoint
comctl32.dll			ImageList_BeginDrag
imm32.dll			ImmReleaseContext
winspool.drv			ClosePrinter
comdlg32.dll			ChooseColorA
winmm.dll			waveOutUnprepareHeader
SHFolder.dll			SHGetFolderPathA
swapimap.dll			SWAPI_CountryIDToCountryCode
FCD.DLL			P2
ca2k.dll			IE
crypt32.dll			CertCloseStore
swapires.dll			SWAPI_GetCountryFlagsImageListIndex
oleacc.dll			LresultFromObject
msacm32.dll			acmStreamConvert
Translator.dll			InitVariant
swapirun.dll			SWAPI_SmartWhoisLaunch
tsftupdate.dll			FinUpdater
ws2_32.dll			gethostbyaddr
kernel32.dll			GetModuleFileNameW
kernel32.dll			GetModuleHandleA
kernel32.dll			LoadLibraryA
kernel32.dll			LocalAlloc
kernel32.dll			LocalFree
kernel32.dll			GetModuleFileNameA
kernel32.dll			ExitProcess

StringTable 040904E4

CompanyName	TamoSoft
FileDescription	CommView for WiFi Packet Analyzer
FileVersion	6.3.0.709
InternalName	CV
LegalCopyright	Copyright © 1999-2012 TamoSoft
LegalTrademarks	CommView is a registered trademark of TamoSoft
OriginalFilename	CV.EXE
ProductName	CommView for WiFi
ProductVersion	6
Comments

VS_FIXEDFILEINFO

FileVersion	6.3.0.709
ProductVersion	6.3.0.709
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Code Signing 2009-2 CA

serial: 4827C0A6BABC55629B62B5A3A62BD9BA

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
         ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
         b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
         ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
         82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
         ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
         77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
         e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
         ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
         7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
         b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
         74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
         b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
         8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
         d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: May 21 00:00:00 2009 GMT
            Not After : May 20 23:59:59 2019 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:1d:b4:60:aa:10:49:6f:56:17:7c:66:c9:
                    5e:86:0d:d5:f1:ac:a7:71:83:8e:8b:89:f8:88:04:
                    89:15:06:ba:2d:84:21:95:e4:d1:9c:50:4c:fb:d2:
                    22:bd:da:f2:b2:35:3b:1e:8f:c3:09:fb:fc:13:2e:
                    5a:bf:89:7c:3d:3b:25:1e:f6:f3:58:7b:9c:f4:01:
                    b5:c6:0a:b8:80:ce:be:27:74:61:67:27:4d:6a:e5:
                    ec:81:61:58:79:a3:e0:17:10:12:15:27:b0:e1:4d:
                    34:7f:2b:47:20:44:b9:de:66:24:66:8a:cd:4f:ba:
                    1f:c5:38:c8:54:90:e1:72:f6:19:66:75:6a:b9:49:
                    68:cf:38:79:0d:aa:30:a8:db:2c:60:48:9e:d7:aa:
                    14:01:a9:83:d7:38:91:30:39:13:96:03:3a:7c:40:
                    54:b6:ad:e0:2f:1b:83:dc:a8:11:52:3e:02:b3:d7:
                    2b:fd:21:b6:a7:5c:a3:0f:0b:a9:a6:10:50:0e:34:
                    2e:4d:a7:ce:c9:5e:25:d4:8c:bc:f3:6e:7c:29:bc:
                    01:5d:fc:31:87:5a:d5:8c:85:67:58:88:19:a0:bf:
                    35:f0:ea:2b:a3:21:e7:90:f6:83:e5:a8:ed:60:78:
                    5e:7b:60:83:fd:57:0b:5d:41:0d:63:54:60:d6:43:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-55
            X509v3 Subject Key Identifier: 
                97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2
    Signature Algorithm: sha1WithRSAEncryption
         8b:03:c0:dd:94:d8:41:a2:61:69:b0:15:a8:78:c7:30:c6:90:
         3c:7e:42:f7:24:b6:e4:83:73:17:04:7f:04:10:9c:a1:e2:fa:
         81:2f:eb:c0:ca:44:e7:72:e0:50:b6:55:10:20:83:6e:96:92:
         e4:9a:51:6a:b4:37:31:dc:a5:2d:eb:8c:00:c7:1d:4f:e7:4d:
         32:ba:85:f8:4e:be:fa:67:55:65:f0:6a:be:7a:ca:64:38:1a:
         10:10:78:45:76:31:f3:86:7a:03:0f:60:c2:b3:5d:9d:f6:8b:
         66:76:82:1b:59:e1:83:e5:bd:49:a5:38:56:e5:de:41:77:0e:
         58:0f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:27:c0:a6:ba:bc:55:62:9b:62:b5:a3:a6:2b:d9:ba
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Validity
            Not Before: Sep 24 00:00:00 2009 GMT
            Not After : Oct 22 23:59:59 2012 GMT
        Subject: C=NZ, ST=South Island, L=Christchurch, O=TamoSoft Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Application Development, CN=TamoSoft Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:9a:ee:11:65:1c:49:67:3d:cb:f4:3f:6f:e5:3c:
                    ce:36:ad:93:8d:4c:20:30:07:ab:af:b8:bf:a4:ea:
                    20:ec:be:a4:22:05:ac:26:25:c3:1c:93:7a:81:d9:
                    0f:67:e4:09:5c:ec:81:47:2e:f0:04:9d:f3:1e:2d:
                    f2:86:3e:ee:82:35:a0:8c:bc:fa:15:ce:09:bf:c7:
                    be:c4:58:e4:75:20:46:e1:62:5a:12:e6:b0:9b:89:
                    11:5f:15:26:61:84:64:28:8b:75:09:73:c9:a8:1c:
                    d4:ab:13:45:0a:92:fc:1f:7e:62:c6:8f:4b:e3:91:
                    61:6a:96:58:01:28:5b:37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer

            X509v3 Authority Key Identifier: 
                keyid:97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         47:d8:9e:6b:97:f5:6e:e7:dc:40:88:d7:d4:e9:99:0c:cb:82:
         e5:e3:f3:b9:50:76:1f:93:a2:3f:c8:b9:46:e7:2b:15:f6:be:
         52:57:f2:b7:72:5d:c3:e9:a0:89:28:24:2d:ac:6f:a1:45:ad:
         4c:0d:82:91:58:af:dd:8a:b9:f1:1a:b8:51:7e:8b:96:f6:d7:
         fc:3d:a4:5e:45:1a:2d:a5:45:79:7a:59:94:42:89:e2:fb:99:
         38:6d:d8:2a:62:3a:b9:43:7a:3c:1c:57:63:3f:a1:7d:0d:28:
         1c:c8:c3:1d:98:b3:36:8a:66:54:86:20:b8:fb:00:20:97:48:
         6f:38:01:45:a7:5b:39:e1:e7:cc:94:3b:7b:33:7a:f4:ac:6d:
         80:aa:d9:c1:b2:3a:0b:20:0d:26:2c:ad:ef:bb:43:84:17:89:
         5c:2c:8e:c4:61:fc:b4:1f:f2:df:00:3e:ef:d8:90:77:6e:c4:
         e3:ce:18:82:40:88:20:df:4d:0f:c3:a5:0d:a3:d4:37:5c:81:
         e9:05:1f:61:5e:01:37:85:d8:31:1d:52:e7:43:93:8f:48:e2:
         67:d5:4a:18:4e:bc:57:95:97:58:b1:94:30:55:2b:4f:e7:c5:
         fb:66:ce:8a:01:f6:45:bb:5c:1e:6e:ec:8f:14:46:00:f0:c2:
         4b:58:e7:a4

pkcs7-signedData

MD5: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

MD5

70 06 bd eb 7e 60 df d0 36 c3 e1 82 e6 4e 00 c5 |p...~`..6....N..|

Certificates
- Certificate #0
  - 2
    - 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
        CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
        8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
        F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
        A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
        C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
        A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
        97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
        05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
        78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
        1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
        65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
        BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
        C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
        A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
        55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        2e 2d b0 0a 44 4a d3 87 c0 02 07 ce 97 7d 50 62 |.-..DJ.......}Pb| 20 fd 0f 83 | ... |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
```
- Certificate #1
  - 2
    - 65:52:26:E1:B2:2E:18:E1:59:0F:29:85:AC:22:E7:5C
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: Class 3 Public Primary Certification Authority
    - 2009-05-21 00:00:00 UTC: 2019-05-20 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)09
      - CN: VeriSign Class 3 Code Signing 2009-2 CA
    - #5
      - rsaEncryption: nil
      - BE:67:1D:B4:60:AA:10:49:6F:56:17:7C:66:C9:5E:86:
        0D:D5:F1:AC:A7:71:83:8E:8B:89:F8:88:04:89:15:06:
        BA:2D:84:21:95:E4:D1:9C:50:4C:FB:D2:22:BD:DA:F2:
        B2:35:3B:1E:8F:C3:09:FB:FC:13:2E:5A:BF:89:7C:3D:
        3B:25:1E:F6:F3:58:7B:9C:F4:01:B5:C6:0A:B8:80:CE:
        BE:27:74:61:67:27:4D:6A:E5:EC:81:61:58:79:A3:E0:
        17:10:12:15:27:B0:E1:4D:34:7F:2B:47:20:44:B9:DE:
        66:24:66:8A:CD:4F:BA:1F:C5:38:C8:54:90:E1:72:F6:
        19:66:75:6A:B9:49:68:CF:38:79:0D:AA:30:A8:DB:2C:
        60:48:9E:D7:AA:14:01:A9:83:D7:38:91:30:39:13:96:
        03:3A:7C:40:54:B6:AD:E0:2F:1B:83:DC:A8:11:52:3E:
        02:B3:D7:2B:FD:21:B6:A7:5C:A3:0F:0B:A9:A6:10:50:
        0E:34:2E:4D:A7:CE:C9:5E:25:D4:8C:BC:F3:6E:7C:29:
        BC:01:5D:FC:31:87:5A:D5:8C:85:67:58:88:19:A0:BF:
        35:F0:EA:2B:A3:21:E7:90:F6:83:E5:A8:ED:60:78:5E:
        7B:60:83:FD:57:0B:5D:41:0D:63:54:60:D6:43:21:EF: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - extendedKeyUsage
        clientAuth: codeSigning
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - crlDistributionPoints: http://crl.verisign.com/pca3.crl
      - subjectAltName
        CN: Class3CA2048-1-55
      - subjectKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
  - RSA-SHA1:
```
8b 03 c0 dd 94 d8 41 a2  61 69 b0 15 a8 78 c7 30  |......A.ai...x.0|
c6 90 3c 7e 42 f7 24 b6  e4 83 73 17 04 7f 04 10  |..<~B.$...s.....|
9c a1 e2 fa 81 2f eb c0  ca 44 e7 72 e0 50 b6 55  |...../...D.r.P.U|
10 20 83 6e 96 92 e4 9a  51 6a b4 37 31 dc a5 2d  |. .n....Qj.71..-|
eb 8c 00 c7 1d 4f e7 4d  32 ba 85 f8 4e be fa 67  |.....O.M2...N..g|
55 65 f0 6a be 7a ca 64  38 1a 10 10 78 45 76 31  |Ue.j.z.d8...xEv1|
f3 86 7a 03 0f 60 c2 b3  5d 9d f6 8b 66 76 82 1b  |..z..`..]...fv..|
59 e1 83 e5 bd 49 a5 38  56 e5 de 41 77 0e 58 0f  |Y....I.8V..Aw.X.|
```
- Certificate #2
  - 2
    - 48:27:C0:A6:BA:BC:55:62:9B:62:B5:A3:A6:2B:D9:BA
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)09
      - CN: VeriSign Class 3 Code Signing 2009-2 CA
    - 2009-09-24 00:00:00 UTC: 2012-10-22 23:59:59 UTC
    - Subject
      - C: NZ
      - ST: South Island
      - L: Christchurch
      - O: TamoSoft Ltd
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - OU: Application Development
      - CN: TamoSoft Ltd
    - #5
      - rsaEncryption: nil
      - 9A:EE:11:65:1C:49:67:3D:CB:F4:3F:6F:E5:3C:CE:36:
        AD:93:8D:4C:20:30:07:AB:AF:B8:BF:A4:EA:20:EC:BE:
        A4:22:05:AC:26:25:C3:1C:93:7A:81:D9:0F:67:E4:09:
        5C:EC:81:47:2E:F0:04:9D:F3:1E:2D:F2:86:3E:EE:82:
        35:A0:8C:BC:FA:15:CE:09:BF:C7:BE:C4:58:E4:75:20:
        46:E1:62:5A:12:E6:B0:9B:89:11:5F:15:26:61:84:64:
        28:8B:75:09:73:C9:A8:1C:D4:AB:13:45:0A:92:FC:1F:
        7E:62:C6:8F:4B:E3:91:61:6A:96:58:01:28:5B:37:D1: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer
      - authorityKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
47 d8 9e 6b 97 f5 6e e7  dc 40 88 d7 d4 e9 99 0c  |G..k..n..@......|
cb 82 e5 e3 f3 b9 50 76  1f 93 a2 3f c8 b9 46 e7  |......Pv...?..F.|
2b 15 f6 be 52 57 f2 b7  72 5d c3 e9 a0 89 28 24  |+...RW..r]....($|
2d ac 6f a1 45 ad 4c 0d  82 91 58 af dd 8a b9 f1  |-.o.E.L...X.....|
1a b8 51 7e 8b 96 f6 d7  fc 3d a4 5e 45 1a 2d a5  |..Q~.....=.^E.-.|
45 79 7a 59 94 42 89 e2  fb 99 38 6d d8 2a 62 3a  |EyzY.B....8m.*b:|
b9 43 7a 3c 1c 57 63 3f  a1 7d 0d 28 1c c8 c3 1d  |.Cz<.Wc?.}.(....|
98 b3 36 8a 66 54 86 20  b8 fb 00 20 97 48 6f 38  |..6.fT. ... .Ho8|
01 45 a7 5b 39 e1 e7 cc  94 3b 7b 33 7a f4 ac 6d  |.E.[9....;{3z..m|
80 aa d9 c1 b2 3a 0b 20  0d 26 2c ad ef bb 43 84  |.....:. .&,...C.|
17 89 5c 2c 8e c4 61 fc  b4 1f f2 df 00 3e ef d8  |..\,..a......>..|
90 77 6e c4 e3 ce 18 82  40 88 20 df 4d 0f c3 a5  |.wn.....@. .M...|
0d a3 d4 37 5c 81 e9 05  1f 61 5e 01 37 85 d8 31  |...7\....a^.7..1|
1d 52 e7 43 93 8f 48 e2  67 d5 4a 18 4e bc 57 95  |.R.C..H.g.J.N.W.|
97 58 b1 94 30 55 2b 4f  e7 c5 fb 66 ce 8a 01 f6  |.X..0U+O...f....|
45 bb 5c 1e 6e ec 8f 14  46 00 f0 c2 4b 58 e7 a4  |E.\.n...F...KX..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)09
  - CN: VeriSign Class 3 Code Signing 2009-2 CA
- 48:27:C0:A6:BA:BC:55:62:9B:62:B5:A3:A6:2B:D9:BA
MD5: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

4f 05 6d 51 21 cd 15 7c  0d 05 ba cc c3 70 0a 42  |O.mQ!..|.....p.B|

1.3.6.1.4.1.311.2.1.12

00 43 00 6f 00 6d 00 6d 00 56 00 69 00 65 00 77 |.C.o.m.m.V.i.e.w| 00 20 00 66 00 6f 00 72 00 20 00 57 00 69 00 46 |. .f.o.r. .W.i.F| 00 69 |.i |
: www.tamos.com

rsaEncryption:

2a e1 76 87 0f e8 22 82  71 9d 72 68 20 bf 41 ee  |*.v...".q.rh .A.|
b4 02 60 92 ff 83 f4 0e  cb 27 2f 32 96 c2 6a a4  |..`......'/2..j.|
cd 08 6f a4 97 ea f0 68  df 49 4a f2 d3 d5 26 f1  |..o....h.IJ...&.|
fa e5 e3 d9 71 3c f8 32  32 49 1a f5 4a ac 56 0b  |....q<.22I..J.V.|
ba 83 09 a8 95 cb e5 52  5f 2b c2 d9 17 23 54 d0  |.......R_+...#T.|
b8 cc 9d 1b fb 42 d1 76  dd 98 7d c6 a7 ee 92 04  |.....B.v..}.....|
bd 95 d1 49 9f f4 02 cf  cd 38 2b 5b 03 43 e9 15  |...I.....8+[.C..|
35 75 c9 c2 11 e2 4d 0c  2d ca 43 4e ac 25 b1 e7  |5u....M.-.CN.%..|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
SHA1: nil

contentType: pkcs7-data
signingTime: 2012-03-26 17:33:52 UTC

messageDigest:

d6 f9 42 43 74 c3 43 72  91 c0 34 83 ca 19 85 27  |..BCt.Cr..4....'|
16 bb f7 31                                       |...1            |

rsaEncryption:

79 e7 ba a0 b3 8a 7b b4  f9 74 0d 4c e4 47 2b 13  |y.....{..t.L.G+.|
c3 eb d0 30 f3 fe 5a e0  ad 40 72 49 b1 52 d7 a4  |...0..Z..@rI.R..|
31 61 55 6d 18 ec fd 0f  c3 37 6a 4c 5c 8d 2c 94  |1aUm.....7jL\.,.|
d6 e7 a6 49 fb eb 40 c4  96 a7 f4 ab d5 9a 9b a8  |...I..@.........|
ba f4 fb 88 08 54 89 74  10 b2 cb 0d b7 74 f4 29  |.....T.t.....t.)|
0e d3 48 d4 88 25 c1 95  ee a8 30 ff 9e f5 a7 76  |..H..%....0....v|
62 69 de fb 31 38 9d 75  69 96 19 30 fb b8 24 7a  |bi..18.ui..0..$z|
79 0e 47 65 70 ce 17 b1  99 9a cf fa b5 31 51 a1  |y.Gep........1Q.|
a1 a2 34 10 7e ee 50 06  38 2b d4 1e bc 4d 53 e5  |..4.~.P.8+...MS.|
b0 8e 09 94 6e 8d 79 f7  db 5a 4d 6d d2 98 22 7c  |....n.y..ZMm.."||
98 dd 1a a6 4a 50 e8 15  74 40 bc 68 73 64 91 43  |....JP..t@.hsd.C|
b5 bb 22 b2 c5 54 ee 2a  3f 32 ce 0c c3 de e0 87  |.."..T.*?2......|
86 3a 87 6d 82 63 37 15  9c 86 0d e0 3d 35 53 f1  |.:.m.c7.....=5S.|
8a 76 7b a6 bb 83 bc af  85 5f 21 10 7e da b6 0f  |.v{......_!.~...|
7f 93 a5 5d c8 8e 3e 2f  1d 01 fc 88 96 06 35 63  |...]..>/......5c|
21 54 ce 46 c9 c4 d8 57  b4 2e 7f 84 83 57 a3 06  |!T.F...W.....W..|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	5972448	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0xe6f60c

[?] can't find file_offset of VA 0xe6f740

[?] can't find file_offset of VA 0xe6f874

[?] can't find file_offset of VA 0xe6f9a8

[?] can't find file_offset of VA 0xe6fadc

[?] can't find file_offset of VA 0xe6fc10

[?] can't find file_offset of VA 0xe6fd44

[?] can't find file_offset of VA 0xe6fe78

[?] can't find file_offset of VA 0xe70164

[?] can't find file_offset of VA 0xe70450

[?] can't find file_offset of VA 0xe7073c

[?] can't find file_offset of VA 0xe70a28

[?] can't find file_offset of VA 0xe70b5c

[?] can't find file_offset of VA 0xe70c90

[?] can't find file_offset of VA 0xe70dc4

[?] can't find file_offset of VA 0xe70ef8

[?] can't find file_offset of VA 0xe7102c

[?] can't find file_offset of VA 0xe71160

[?] can't find file_offset of VA 0xe71294

[?] can't find file_offset of VA 0xe713c8

[?] can't find file_offset of VA 0xe714fc

[?] can't find file_offset of VA 0xe717e8

[?] can't find file_offset of VA 0xe71ad4

[?] can't find file_offset of VA 0xe71dc0

[?] can't find file_offset of VA 0xe720ac

[?] can't find file_offset of VA 0xe72398

[?] can't find file_offset of VA 0xe72684

[?] can't find file_offset of VA 0xe727b8

[?] can't find file_offset of VA 0xe728ec

[?] can't find file_offset of VA 0xe72a20

[?] can't find file_offset of VA 0xe72ab8

[?] can't find file_offset of VA 0xe72c88

[?] can't find file_offset of VA 0xe72e6c

[?] can't find file_offset of VA 0xe7303c

[?] can't find file_offset of VA 0xe7320c

[?] can't find file_offset of VA 0xe733dc

[?] can't find file_offset of VA 0xe735ac

[?] can't find file_offset of VA 0xe7377c

[?] can't find file_offset of VA 0xe7394c

[?] can't find file_offset of VA 0xe73b1c

[?] can't find file_offset of VA 0xe73cec

[?] can't find file_offset of VA 0xe73d84

[?] can't find file_offset of VA 0xe73dd0

[?] can't find file_offset of VA 0xe73e14

[?] can't find file_offset of VA 0xe73e58

[?] can't find file_offset of VA 0xe73ee0

[?] can't find file_offset of VA 0xe73f58

[?] can't find file_offset of VA 0xe74020

[?] can't find file_offset of VA 0xe740f0

[?] can't find file_offset of VA 0xe741b0

[?] can't find file_offset of VA 0xe742a8

[?] can't find file_offset of VA 0xe743a0

[?] can't find file_offset of VA 0xe74438

[?] can't find file_offset of VA 0xe744d0

[?] can't find file_offset of VA 0xe74554

[?] can't find file_offset of VA 0xe745d0

[?] can't find file_offset of VA 0xe74654

[?] can't find file_offset of VA 0xe746e4

[?] can't find file_offset of VA 0xe74730

[?] can't find file_offset of VA 0xe75058

[?] can't find file_offset of VA 0xe75980

[?] can't find file_offset of VA 0xe762a8

[?] can't find file_offset of VA 0xe76358

[?] can't find file_offset of VA 0xe76b80

[?] can't find file_offset of VA 0xe77844

[?] can't find file_offset of VA 0xe779ac

[?] can't find file_offset of VA 0xe781d4

[?] can't find file_offset of VA 0xe786fc

[?] can't find file_offset of VA 0xe787ac

[?] can't find file_offset of VA 0xe7885c

[?] can't find file_offset of VA 0xe78944

[?] can't find file_offset of VA 0xe789dc

[?] can't find file_offset of VA 0xe78a74

[?] can't find file_offset of VA 0xe790dc

[?] can't find file_offset of VA 0xe79744

[?] can't find file_offset of VA 0xe79dac

[?] can't find file_offset of VA 0xe79e5c

[?] can't find file_offset of VA 0xe7a4c4

[?] can't find file_offset of VA 0xe7a5d4

[?] can't find file_offset of VA 0xe7a6e4

[?] can't find file_offset of VA 0xe7ad4c

[?] can't find file_offset of VA 0xe7b3b4

[?] can't find file_offset of VA 0xe7c09c

[?] can't find file_offset of VA 0xe7cd84

[?] can't find file_offset of VA 0xe7da6c

[?] can't find file_offset of VA 0xe7dcd4

[?] can't find file_offset of VA 0xe7df3c

[?] can't find file_offset of VA 0xe7e1a4

[?] can't find file_offset of VA 0xe7ee8c

[?] can't find file_offset of VA 0xe7fb74

[?] can't find file_offset of VA 0xe8089c

[?] can't find file_offset of VA 0xe853c8

[?] can't find file_offset of VA 0xe854f0

[?] can't find file_offset of VA 0xe85618

[?] can't find file_offset of VA 0xe85700

[?] can't find file_offset of VA 0xe857e8

[?] can't find file_offset of VA 0xe85858

[?] can't find file_offset of VA 0xe858ac

[?] can't find file_offset of VA 0xe85900

[?] can't find file_offset of VA 0xe85af0

[?] can't find file_offset of VA 0xe85e88

[?] too many errors getting resource data, stopped on 0 of 1

[?] can't find file_offset of VA 0x5717cc

ca.exe- CV.EXE - CommView for WiFi Packet Analyzer