filenameNotepad.exe
size1669552 (0x1979b0)
md5630f64376db7eb93dad4c4765cbca9f4
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x120

Rich Header

lib idversiontimes used
2603321810
259332184
2613321846
257332188
260335231
260307952
262307951
1473072952
257307959
10583
2653352358
255335231
15101
258335231

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x666340ea
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.39
SizeOfCode0xdda00
SizeOfInitializedData0xb8a00
SizeOfUninitializedData0
AddressOfEntryPoint0xca3d0
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x19a000
SizeOfHeaders0x400
CheckSum0x199187
Subsystem2
DllCharacteristics0xc160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

namevavsizeraw sizeflags
.text0x10000xdd9fb0xdda00R-X CODE
.rdata0xdf0000x7c8920x7ca00R-- IDATA
.data0x15c0000x21d900x20800RW- IDATA
.pdata0x17e0000xa4c40xa600R-- IDATA
.rsrc0x1890000xe5500xe600R-- IDATA
.reloc0x1980000x157c0x1600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x156fd80x2a8
RESOURCE0x1890000xe550
EXCEPTION0x17e0000xa4c4
SECURITY0x1952000x27b0
BASERELOC0x1980000x157c
DEBUG0x129d900x54
ARCHITECTURE00
GLOBALPTR00
TLS0x129e000x28
LOAD_CONFIG0x129c500x140
Bound_IAT00
IAT0xdf0000x11c0
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1401407200x1401412280x14017ccf40x1400e03f000x500000
typenamesizecp
EDPENLIGHTENEDAPPINFOIDMICROSOFTEDPENLIGHTENEDAPPINFO20
EDPPERMISSIVEAPPINFOIDMICROSOFTEDPPERMISSIVEAPPINFO20
ICON#196620
ICON#2169360
ICON#396400
ICON#467600
ICON#542640
ICON#624400
ICON#711280
DIALOG#111620
DIALOG#128740
DIALOG#141620
DIALOG#162740
RCDATA#4430230
GROUP_ICON#21040
VERSION#17720
MANIFEST#112070
module_namehintordfunction_name
SHLWAPI.dll97PathIsFileSpecW
SHLWAPI.dll75PathFindExtensionW
SHLWAPI.dll101PathIsNetworkPathW
SHLWAPI.dll373UrlUnescapeW
SHLWAPI.dll73PathFileExistsW
SHLWAPI.dll358UrlEscapeW
KERNEL32.dll1177UnmapViewOfFile
KERNEL32.dll1058SetFileInformationByHandle
KERNEL32.dll117CreateFileW
KERNEL32.dll804LocalAlloc
KERNEL32.dll181DeleteFileW
KERNEL32.dll449GetFileAttributesW
KERNEL32.dll450GetFileInformationByHandle
KERNEL32.dll1246WideCharToMultiByte
KERNEL32.dll1263WriteFile
KERNEL32.dll1044SetEndOfFile
KERNEL32.dll814LocalUnlock
KERNEL32.dll446GetFileAttributesExW
KERNEL32.dll104CreateEventExW
KERNEL32.dll836MultiByteToWideChar
KERNEL32.dll810LocalLock
KERNEL32.dll992RtlLookupFunctionEntry
KERNEL32.dll999RtlVirtualUnwind
KERNEL32.dll1174UnhandledExceptionFilter
KERNEL32.dll1210WaitForSingleObject
KERNEL32.dll1131SetUnhandledExceptionFilter
KERNEL32.dll1157TerminateProcess
KERNEL32.dll467GetFullPathNameW
KERNEL32.dll722InterlockedPushEntrySList
KERNEL32.dll411GetCurrentProcessId
KERNEL32.dll739IsProcessorFeaturePresent
KERNEL32.dll550GetProcessId
KERNEL32.dll322FreeLibrary
KERNEL32.dll1218WakeAllConditionVariable
KERNEL32.dll410GetCurrentProcess
KERNEL32.dll201DuplicateHandle
KERNEL32.dll1146SleepConditionVariableSRW
KERNEL32.dll910QueryPerformanceCounter
KERNEL32.dll2RegisterApplicationRestart
KERNEL32.dll599GetSystemTimeAsFileTime
KERNEL32.dll801LoadLibraryW
KERNEL32.dll856OpenProcess
KERNEL32.dll768K32GetModuleFileNameExW
KERNEL32.dll114CreateFileMappingW
KERNEL32.dll716InitializeSListHead
KERNEL32.dll663GetWindowsDirectoryW
KERNEL32.dll821MapViewOfFile
KERNEL32.dll277FindFirstFileExW
KERNEL32.dll291FindNextFileW
KERNEL32.dll922RaiseException
KERNEL32.dll100CreateDirectoryW
KERNEL32.dll800LoadLibraryExW
KERNEL32.dll985RtlCaptureContext
KERNEL32.dll1050SetEvent
KERNEL32.dll1170TrySubmitThreadpoolCallback
KERNEL32.dll168DebugBreak
KERNEL32.dll548GetProcessHeap
KERNEL32.dll129CreateMutexExW
KERNEL32.dll542GetProcAddress
KERNEL32.dll689HeapAlloc
KERNEL32.dll858OpenSemaphoreW
KERNEL32.dll1211WaitForSingleObjectEx
KERNEL32.dll959ReleaseMutex
KERNEL32.dll496GetModuleHandleExW
KERNEL32.dll963ReleaseSemaphore
KERNEL32.dll693HeapFree
KERNEL32.dll1189VerSetConditionMask
KERNEL32.dll1192VerifyVersionInfoW
KERNEL32.dll143CreateSemaphoreExW
KERNEL32.dll477GetLocaleInfoEx
KERNEL32.dll492GetModuleFileNameA
KERNEL32.dll317FormatMessageA
KERNEL32.dll451GetFileInformationByHandleEx
KERNEL32.dll105CreateEventW
KERNEL32.dll684GlobalUnlock
KERNEL32.dll679GlobalLock
KERNEL32.dll358GetCommandLineW
KERNEL32.dll203EncodePointer
KERNEL32.dll329GetACP
KERNEL32.dll835MulDiv
KERNEL32.dll147CreateSymbolicLinkW
KERNEL32.dll301FindResourceW
KERNEL32.dll1143SizeofResource
KERNEL32.dll819LockResource
KERNEL32.dll803LoadResource
KERNEL32.dll1201VirtualQuery
KERNEL32.dll406GetCurrentPackageFullName
KERNEL32.dll647GetUserDefaultUILanguage
KERNEL32.dll478GetLocaleInfoW
KERNEL32.dll475GetLocalTime
KERNEL32.dll420GetDateFormatW
KERNEL32.dll637GetTimeFormatW
KERNEL32.dll280FindFirstFileW
KERNEL32.dll870ParseApplicationUserModelId
KERNEL32.dll576GetStartupInfoW
KERNEL32.dll400GetCurrentApplicationUserModelId
KERNEL32.dll153CreateThreadpoolTimer
KERNEL32.dll68CloseThreadpoolTimer
KERNEL32.dll497GetModuleHandleW
KERNEL32.dll1213WaitForThreadpoolTimerCallbacks
KERNEL32.dll59CloseHandle
KERNEL32.dll286FindNLSString
KERNEL32.dll1125SetThreadpoolTimer
KERNEL32.dll1072SetLastError
KERNEL32.dll961ReleaseSRWLockExclusive
KERNEL32.dll1039SetCurrentDirectoryW
KERNEL32.dllAcquireSRWLockExclusive
KERNEL32.dll75CompareStringOrdinal
KERNEL32.dll830MoveFileExW
KERNEL32.dll474GetLastError
KERNEL32.dll733IsDebuggerPresent
KERNEL32.dll318FormatMessageW
KERNEL32.dll415GetCurrentThreadId
KERNEL32.dll864OutputDebugStringW
KERNEL32.dll808LocalFree
KERNEL32.dll89CopyFileW
KERNEL32.dll675GlobalFree
KERNEL32.dll670GlobalAlloc
KERNEL32.dll192DeviceIoControl
KERNEL32.dll27AreFileApisANSI
KERNEL32.dll271FindClose
USER32.dll620SetWindowTextW
USER32.dll567SetDlgItemTextW
USER32.dll342GetDpiForWindow
USER32.dll219GetDlgCtrlID
USER32.dll243GetKeyboardState
USER32.dll270GetNextDlgTabItem
USER32.dll623SetWindowsHookExW
USER32.dll17CallNextHookEx
USER32.dll196GetClassNameW
USER32.dll285GetProcessDefaultLayout
USER32.dll64CopyRect
USER32.dll125DrawIconEx
USER32.dll472PostThreadMessageW
USER32.dll303GetSysColor
USER32.dll638SystemParametersInfoW
USER32.dll596SetScrollInfo
USER32.dll297GetScrollInfo
USER32.dll649TranslateAcceleratorW
USER32.dll584SetParent
USER32.dll79CreateWindowExW
USER32.dll52ClientToScreen
USER32.dll230GetGUIThreadInfo
USER32.dll617SetWindowRgn
USER32.dll307GetSystemMetricsForDpi
USER32.dll539SendDlgItemMessageW
USER32.dll226GetDpiForSystem
USER32.dll215GetDesktopWindow
USER32.dll131DrawTextExW
USER32.dll73CreateDialogParamW
USER32.dll340GetWindowTextW
USER32.dll339GetWindowTextLengthW
USER32.dll382IsDialogMessageW
USER32.dll465PeekMessageW
USER32.dll587SetProcessDefaultLayout
USER32.dll409LoadImageW
USER32.dll407LoadIconW
USER32.dll268GetMonitorInfoW
USER32.dll443MonitorFromWindow
USER32.dll332GetWindowPlacement
USER32.dll44CharUpperW
USER32.dll615SetWindowPlacement
USER32.dll272GetParent
USER32.dll594SetRect
USER32.dll320GetWindow
USER32.dll614SetWindowLongW
USER32.dll444MoveWindow
USER32.dll165EqualRect
USER32.dll223GetDlgItemTextW
USER32.dll240GetKeyboardLayoutList
USER32.dll33CharNextW
USER32.dll534ScreenToClient
USER32.dll239GetKeyboardLayout
USER32.dll330GetWindowLongPtrW
USER32.dll67CreateAcceleratorTableW
USER32.dll212GetCursorPos
USER32.dll431MapWindowPoints
USER32.dll341GetWindowThreadProcessId
USER32.dll92DefWindowProcW
USER32.dll228GetFocus
USER32.dll229GetForegroundWindow
USER32.dll616SetWindowPos
USER32.dll470PostQuitMessage
USER32.dll531RemovePropW
USER32.dll505RedrawWindow
USER32.dll145EndPaint
USER32.dll12BeginPaint
USER32.dll399KillTimer
USER32.dll604SetTimer
USER32.dll170FillRect
USER32.dll304GetSysColorBrush
USER32.dll331GetWindowLongW
USER32.dll238GetKeyState
USER32.dll379IsChild
USER32.dll54CloseClipboard
USER32.dll380IsClipboardFormatAvailable
USER32.dll453OpenClipboard
USER32.dll508RegisterClassExW
USER32.dll593SetPropW
USER32.dll613SetWindowLongPtrW
USER32.dll545SendMessageW
USER32.dll101DestroyWindow
USER32.dll475PtInRect
USER32.dll647TrackPopupMenuEx
USER32.dll398IsZoomed
USER32.dll305GetSystemMenu
USER32.dll138EnableMenuItem
USER32.dll333GetWindowRect
USER32.dll441MonitorFromPoint
USER32.dll602SetThreadDpiAwarenessContext
USER32.dll525ReleaseDC
USER32.dll213GetDC
USER32.dll667UpdateWindow
USER32.dll368InvalidateRect
USER32.dll597SetScrollPos
USER32.dll561SetCursor
USER32.dll405LoadCursorW
USER32.dll4AllowSetForegroundWindow
USER32.dll395IsWindowEnabled
USER32.dll385IsHungAppWindow
USER32.dll108DispatchMessageW
USER32.dll651TranslateMessage
USER32.dll266GetMessageW
USER32.dll397IsWindowVisible
USER32.dll179GetActiveWindow
USER32.dll141EnableWindow
USER32.dll628ShowWindow
USER32.dll548SetActiveWindow
USER32.dll164EnumWindows
USER32.dll571SetForegroundWindow
USER32.dll386IsIconic
USER32.dll469PostMessageW
USER32.dll198GetClientRect
USER32.dll96DestroyAcceleratorTable
USER32.dll105DialogBoxParamW
USER32.dll143EndDialog
USER32.dll220GetDlgItem
USER32.dll570SetFocus
SHELL32.dll114SHGetKnownFolderPath
SHELL32.dll53SHAddToRecentDocs
SHELL32.dll3CommandLineToArgvW
SHELL32.dll78SHCreateItemFromParsingName
SHELL32.dll151ShellExecuteW
SHELL32.dll150ShellExecuteExW
SHELL32.dll14DragFinish
SHELL32.dll16DragQueryFileW
SHELL32.dll13DragAcceptFiles
ole32.dll478RevokeDragDrop
ole32.dll36CoCreateFreeThreadedMarshaler
ole32.dll359PropVariantClear
ole32.dll337OleInitialize
ole32.dll126CoTaskMemAlloc
ole32.dll132CoUninitialize
ole32.dll77CoGetObjectContext
ole32.dll58CoGetApartmentType
ole32.dll38CoCreateInstance
ole32.dll127CoTaskMemFree
ole32.dll139CoWaitForMultipleHandles
ole32.dll356OleUninitialize
ole32.dll88CoInitializeEx
ole32.dll475RegisterDragDrop
ADVAPI32.dll239DuplicateEncryptionInfoFile
ADVAPI32.dll221EventWriteTransfer
ADVAPI32.dll217EventUnregister
ADVAPI32.dll215EventRegister
ADVAPI32.dll106CreateProcessAsUserW
ADVAPI32.dll394OpenProcessToken
ADVAPI32.dll216EventSetInformation
ADVAPI32.dll462RegCloseKey
ADVAPI32.dll477RegDeleteKeyExW
ADVAPI32.dll494RegEnumValueW
ADVAPI32.dll265GetTokenInformation
ADVAPI32.dll498RegGetValueW
ADVAPI32.dll182DecryptFileW
ADVAPI32.dll516RegQueryInfoKeyW
ADVAPI32.dll509RegOpenKeyExW
CRYPT32.dll125CryptBinaryToStringW
CRYPT32.dll223CryptStringToBinaryW
urlmon.dll32FindMimeFromData
PROPSYS.dll150PropVariantToStringVectorAlloc
PROPSYS.dll62PSGetPropertyDescriptionListFromString
COMDLG32.dll17PrintDlgExW
COMDLG32.dll14PageSetupDlgW
COMDLG32.dll4CommDlgExtendedError
COMDLG32.dll8GetFileTitleW
GDI32.dll19CreateDCW
GDI32.dll217TextOutW
GDI32.dll137GetTextExtentPoint32W
GDI32.dll47DeleteObject
GDI32.dll38CreateRectRgn
GDI32.dll93GetDeviceCaps
GDI32.dll41CreateSolidBrush
GDI32.dll203SetViewportExtEx
GDI32.dll129GetStockObject
GDI32.dll17CreateCompatibleDC
GDI32.dll205SetWindowExtEx
GDI32.dll21CreateDIBSection
GDI32.dll5BitBlt
GDI32.dll151LPtoDP
GDI32.dll27CreateFontIndirectW
GDI32.dll176SelectObject
GDI32.dll191SetMapMode
GDI32.dll179SetBkMode
GDI32.dll57EnumFontsW
GDI32.dll143GetTextMetricsW
GDI32.dll51EndPage
GDI32.dllAbortDoc
GDI32.dll49EndDoc
GDI32.dll55EnumFontFamiliesExW
GDI32.dll44DeleteDC
GDI32.dll209StartDocW
GDI32.dll886SetAbortProc
GDI32.dll210StartPage
OLEAUT32.dll6
OLEAUT32.dll4
OLEAUT32.dll2
OLEAUT32.dll7
OLEAUT32.dll201
OLEAUT32.dll200
OLEAUT32.dll8
OLEAUT32.dll9
COMCTL32.dll410
COMCTL32.dll413
api-ms-win-core-winrt-l1-1-0.dll1RoGetActivationFactory
api-ms-win-core-winrt-string-l1-1-0.dll11WindowsCreateStringReference
api-ms-win-core-winrt-string-l1-1-0.dll12WindowsDeleteString
api-ms-win-core-winrt-string-l1-1-0.dll10WindowsCreateString
api-ms-win-core-winrt-string-l1-1-0.dll16WindowsGetStringRawBuffer
icu.dll152u_vformatMessage
WINSPOOL.DRV29ClosePrinter
WINSPOOL.DRV140GetPrinterDriverW
WINSPOOL.DRV150OpenPrinterW
dwmapi.dll27DwmSetWindowAttribute
dwmapi.dll16DwmGetWindowAttribute
dwmapi.dll8DwmExtendFrameIntoClientArea
dwmapi.dll3DwmDefWindowProc
UxTheme.dll77OpenThemeData
UxTheme.dll20DrawThemeTextEx
UxTheme.dll9CloseThemeData
UxTheme.dll60GetThemeSysFont
MSVCP140.dll664void __cdecl __ExceptionPtrCurrentException(void * __ptr64)

?__ExceptionPtrCurrentException@@YAXPEAX@Z

MSVCP140.dll666void __cdecl __ExceptionPtrRethrow(void const * __ptr64)

?__ExceptionPtrRethrow@@YAXPEBX@Z

MSVCP140.dll1311int __cdecl std::uncaught_exceptions(void)

?uncaught_exceptions@std@@YAHXZ

MSVCP140.dll1319public: int __cdecl std::codecvt<char, char, struct _Mbstatet>::unshift(struct _Mbstatet & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

MSVCP140.dll662void __cdecl __ExceptionPtrCopyException(void * __ptr64, void const * __ptr64, void const * __ptr64)

?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

MSVCP140.dll652void __cdecl std::_Xbad_function_call(void)

?_Xbad_function_call@std@@YAXXZ

MSVCP140.dll1075public: int __cdecl std::codecvt<char, char, struct _Mbstatet>::out(struct _Mbstatet & __ptr64, char const * __ptr64, char const * __ptr64, char const * __ptr64 & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64

?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

MSVCP140.dll1014protected: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const & __ptr64) __ptr64

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

MSVCP140.dll1277protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) __ptr64

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

MSVCP140.dll1205protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char * __ptr64, __int64) __ptr64

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

MSVCP140.dll1080protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::overflow(int) __ptr64

?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

MSVCP140.dll1307protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) __ptr64

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

MSVCP140.dll639public: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) __ptr64

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

MSVCP140.dll552public: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) __ptr64

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

MSVCP140.dll659void __cdecl __ExceptionPtrAssign(void * __ptr64, void const * __ptr64)

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

MSVCP140.dll134public: virtual __cdecl std::basic_ostream<char, struct std::char_traits<char> >::~basic_ostream<char, struct std::char_traits<char> >(void) __ptr64

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

MSVCP140.dll1464_Thrd_yield
MSVCP140.dll863public: bool __cdecl std::ios_base::fail(void)const __ptr64

?fail@ios_base@std@@QEBA_NXZ

MSVCP140.dll665void __cdecl __ExceptionPtrDestroy(void * __ptr64)

?__ExceptionPtrDestroy@@YAXPEAX@Z

MSVCP140.dll629void __cdecl std::_Throw_Cpp_error(int)

?_Throw_Cpp_error@std@@YAXH@Z

MSVCP140.dll1413_Mtx_lock
MSVCP140.dll1417_Mtx_unlock
MSVCP140.dll12protected: __cdecl std::basic_ios<char, struct std::char_traits<char> >::basic_ios<char, struct std::char_traits<char> >(void) __ptr64

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

MSVCP140.dll26public: __cdecl std::basic_istream<char, struct std::char_traits<char> >::basic_istream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64, bool) __ptr64

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

MSVCP140.dll47protected: __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

MSVCP140.dll1083protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::pbackfail(int) __ptr64

?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z

MSVCP140.dll37public: __cdecl std::basic_ostream<char, struct std::char_traits<char> >::basic_ostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64, bool) __ptr64

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

MSVCP140.dll860public: void __cdecl std::ios_base::exceptions(int) __ptr64

?exceptions@ios_base@std@@QEAAXH@Z

MSVCP140.dll1461_Thrd_join
MSVCP140.dll1460_Thrd_id
MSVCP140.dll128public: virtual __cdecl std::basic_iostream<char, struct std::char_traits<char> >::~basic_iostream<char, struct std::char_traits<char> >(void) __ptr64

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

MSVCP140.dll1357_Cnd_destroy_in_situ
MSVCP140.dll1283public: class std::fpos<struct _Mbstatet> __cdecl std::basic_istream<char, struct std::char_traits<char> >::tellg(void) __ptr64

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

MSVCP140.dll501protected: void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Init(void) __ptr64

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ

MSVCP140.dll663void __cdecl __ExceptionPtrCreate(void * __ptr64)

?__ExceptionPtrCreate@@YAXPEAX@Z

MSVCP140.dll999public: static class std::locale::id std::numpunct<char>::id

?id@?$numpunct@D@std@@2V0locale@2@A

MSVCP140.dll1358_Cnd_do_broadcast_at_thread_exit
MSVCP140.dll429struct _iobuf * __ptr64 __cdecl std::_Fiopen(wchar_t const * __ptr64, int, int)

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

MSVCP140.dll527private: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Init(bool)

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

MSVCP140.dll1001public: static class std::locale::id std::numpunct<wchar_t>::id

?id@?$numpunct@_W@std@@2V0locale@2@A

MSVCP140.dll117protected: __cdecl std::locale::facet::facet(unsigned __int64) __ptr64

??0facet@locale@std@@IEAA@_K@Z

MSVCP140.dll960public: class std::locale __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::getloc(void)const __ptr64

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

MSVCP140.dll171protected: virtual __cdecl std::locale::facet::~facet(void) __ptr64

??1facet@locale@std@@MEAA@XZ

MSVCP140.dll414public: virtual class std::_Facet_base * __ptr64 __cdecl std::locale::facet::_Decref(void) __ptr64

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

MSVCP140.dll131public: virtual __cdecl std::basic_istream<char, struct std::char_traits<char> >::~basic_istream<char, struct std::char_traits<char> >(void) __ptr64

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

MSVCP140.dll476public: struct lconv const * __ptr64 __cdecl std::_Locinfo::_Getlconv(void)const __ptr64

?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ

MSVCP140.dll456public: struct _Cvtvec __cdecl std::_Locinfo::_Getcvt(void)const __ptr64

?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ

MSVCP140.dll1425_Query_perf_frequency
MSVCP140.dll1424_Query_perf_counter
MSVCP140.dll125public: virtual __cdecl std::basic_ios<char, struct std::char_traits<char> >::~basic_ios<char, struct std::char_traits<char> >(void) __ptr64

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

MSVCP140.dll1261protected: void __cdecl std::basic_iostream<char, struct std::char_traits<char> >::swap(class std::basic_iostream<char, struct std::char_traits<char> > & __ptr64) __ptr64

?swap@?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z

MSVCP140.dll645int __cdecl std::_Winerror_map(int)

?_Winerror_map@std@@YAHH@Z

MSVCP140.dll459public: char const * __ptr64 __cdecl std::_Locinfo::_Getfalse(void)const __ptr64

?_Getfalse@_Locinfo@std@@QEBAPEBDXZ

MSVCP140.dll651void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP140.dll481public: char const * __ptr64 __cdecl std::_Locinfo::_Gettrue(void)const __ptr64

?_Gettrue@_Locinfo@std@@QEBAPEBDXZ

MSVCP140.dll678public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::clear(int, bool) __ptr64

?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

MSVCP140.dll19public: __cdecl std::basic_iostream<char, struct std::char_traits<char> >::basic_iostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64) __ptr64

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

MSVCP140.dll1405_Mbrtowc
MSVCP140.dll1221public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) __ptr64

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

MSVCP140.dll108public: __cdecl std::_Locinfo::_Locinfo(char const * __ptr64) __ptr64

??0_Locinfo@std@@QEAA@PEBD@Z

MSVCP140.dll1191public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::seekp(class std::fpos<struct _Mbstatet>) __ptr64

?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z

MSVCP140.dll1286public: class std::fpos<struct _Mbstatet> __cdecl std::basic_ostream<char, struct std::char_traits<char> >::tellp(void) __ptr64

?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

MSVCP140.dll1182public: class std::basic_istream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_istream<char, struct std::char_traits<char> >::seekg(class std::fpos<struct _Mbstatet>) __ptr64

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z

MSVCP140.dll627char const * __ptr64 __cdecl std::_Syserror_map(int)

?_Syserror_map@std@@YAPEBDH@Z

MSVCP140.dll1360_Cnd_init_in_situ
MSVCP140.dll1365_Cnd_wait
MSVCP140.dll164public: __cdecl std::_Locinfo::~_Locinfo(void) __ptr64

??1_Locinfo@std@@QEAA@XZ

MSVCP140.dll498public: virtual void __cdecl std::locale::facet::_Incref(void) __ptr64

?_Incref@facet@locale@std@@UEAAXXZ

MSVCP140.dll1362_Cnd_signal
MSVCP140.dll1165public: class std::basic_istream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_istream<char, struct std::char_traits<char> >::read(char * __ptr64, __int64) __ptr64

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

MSVCP140.dll440public: static unsigned __int64 __cdecl std::ctype<wchar_t>::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64)

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

MSVCP140.dll1043public: bool __cdecl std::ctype<wchar_t>::is(short, wchar_t)const __ptr64

?is@?$ctype@_W@std@@QEBA_NF_W@Z

MSVCP140.dll1343public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::write(char const * __ptr64, __int64) __ptr64

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z

MSVCP140.dll1237protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) __ptr64

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

MSVCP140.dll661void __cdecl __ExceptionPtrCopy(void * __ptr64, void const * __ptr64)

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

MSVCP140.dll1412_Mtx_init_in_situ
MSVCP140.dll977public: static class std::locale::id std::ctype<wchar_t>::id

?id@?$ctype@_W@std@@2V0locale@2@A

MSVCP140.dll974public: static class std::locale::id std::collate<wchar_t>::id

?id@?$collate@_W@std@@2V0locale@2@A

MSVCP140.dll1481_Wcsxfrm
MSVCP140.dll1480_Wcscoll
MSVCP140.dll1409_Mtx_destroy_in_situ
MSVCP140.dll454public: struct _Collvec __cdecl std::_Locinfo::_Getcoll(void)const __ptr64

?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

MSVCP140.dll657void __cdecl std::_Xregex_error(enum std::regex_constants::error_type)

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

MSVCP140.dll654void __cdecl std::_Xlength_error(char const * __ptr64)

?_Xlength_error@std@@YAXPEBD@Z

MSVCP140.dll1300public: wchar_t __cdecl std::ctype<wchar_t>::tolower(wchar_t)const __ptr64

?tolower@?$ctype@_W@std@@QEBA_W_W@Z

MSVCP140.dll1299public: wchar_t const * __ptr64 __cdecl std::ctype<wchar_t>::tolower(wchar_t * __ptr64, wchar_t const * __ptr64)const __ptr64

?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z

MSVCP140.dll137public: virtual __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

MSVCP140.dll433public: static unsigned __int64 __cdecl std::codecvt<char, char, struct _Mbstatet>::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64)

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

MSVCP140.dll872public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

MSVCP140.dll165public: __cdecl std::_Lockit::~_Lockit(void) __ptr64

??1_Lockit@std@@QEAA@XZ

MSVCP140.dll109public: __cdecl std::_Lockit::_Lockit(int) __ptr64

??0_Lockit@std@@QEAA@H@Z

MSVCP140.dll469private: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Getgloballocale(void)

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

MSVCP140.dll969public: static class std::locale::id std::codecvt<char, char, struct _Mbstatet>::id

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

MSVCP140.dll305public: __cdecl std::locale::id::operator unsigned __int64(void) __ptr64

??Bid@locale@std@@QEAA_KXZ

MSVCP140.dll669public: bool __cdecl std::codecvt_base::always_noconv(void)const __ptr64

?always_noconv@codecvt_base@std@@QEBA_NXZ

MSVCP140.dll1018public: int __cdecl std::codecvt<char, char, struct _Mbstatet>::in(struct _Mbstatet & __ptr64, char const * __ptr64, char const * __ptr64, char const * __ptr64 & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

MSVCP140.dll655void __cdecl std::_Xout_of_range(char const * __ptr64)

?_Xout_of_range@std@@YAXPEBD@Z

MSVCP140.dll1347protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char * __ptr64, __int64) __ptr64

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

MSVCP140.dll1350protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const * __ptr64, __int64) __ptr64

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

MSVCP140.dll1312protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::underflow(void) __ptr64

?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

MSVCP140_ATOMIC_WAIT.dll9__std_atomic_wait_direct
MSVCP140_ATOMIC_WAIT.dll6__std_atomic_notify_one_direct
MSVCP140_ATOMIC_WAIT.dll4__std_atomic_notify_all_direct
VCRUNTIME140_1.dll__CxxFrameHandler4
VCRUNTIME140.dll33__std_exception_copy
VCRUNTIME140.dll61memmove
VCRUNTIME140.dll60memcpy
VCRUNTIME140.dll35__std_terminate
VCRUNTIME140.dll62memset
VCRUNTIME140.dll1_CxxThrowException
VCRUNTIME140.dll28__current_exception_context
VCRUNTIME140.dll27__current_exception
VCRUNTIME140.dll34__std_exception_destroy
VCRUNTIME140.dll54_purecall
VCRUNTIME140.dll64strchr
VCRUNTIME140.dll8__C_specific_handler
VCRUNTIME140.dll59memcmp
VCRUNTIME140.dll68wcschr
api-ms-win-crt-runtime-l1-1-0.dll61_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll21_c_exit
api-ms-win-crt-runtime-l1-1-0.dll35_exit
api-ms-win-crt-runtime-l1-1-0.dll85exit
api-ms-win-crt-runtime-l1-1-0.dll54_initterm
api-ms-win-crt-runtime-l1-1-0.dll43_get_narrow_winmain_command_line
api-ms-win-crt-runtime-l1-1-0.dll66_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll103terminate
api-ms-win-crt-runtime-l1-1-0.dll64_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll57_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll22_cexit
api-ms-win-crt-runtime-l1-1-0.dll33_errno
api-ms-win-crt-runtime-l1-1-0.dll56_invalid_parameter_noinfo
api-ms-win-crt-runtime-l1-1-0.dll30_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll60_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll52_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll51_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll84abort
api-ms-win-crt-runtime-l1-1-0.dll24_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll20_beginthreadex
api-ms-win-crt-runtime-l1-1-0.dll55_initterm_e
api-ms-win-crt-string-l1-1-0.dll169wcsnlen
api-ms-win-crt-string-l1-1-0.dll123iswspace
api-ms-win-crt-string-l1-1-0.dll118iswdigit
api-ms-win-crt-string-l1-1-0.dll74_wcsicmp
api-ms-win-crt-string-l1-1-0.dll161wcscpy_s
api-ms-win-crt-string-l1-1-0.dll168wcsncpy_s
api-ms-win-crt-stdio-l1-1-0.dll121fgetpos
api-ms-win-crt-stdio-l1-1-0.dll47_fseeki64
api-ms-win-crt-stdio-l1-1-0.dll131fread
api-ms-win-crt-stdio-l1-1-0.dll157ungetc
api-ms-win-crt-stdio-l1-1-0.dll120fgetc
api-ms-win-crt-stdio-l1-1-0.dll13__stdio_common_vsprintf
api-ms-win-crt-stdio-l1-1-0.dll17__stdio_common_vswprintf
api-ms-win-crt-stdio-l1-1-0.dll57_get_stream_buffer_pointers
api-ms-win-crt-stdio-l1-1-0.dll11__stdio_common_vsnprintf_s
api-ms-win-crt-stdio-l1-1-0.dll136fsetpos
api-ms-win-crt-stdio-l1-1-0.dll1__p__commode
api-ms-win-crt-stdio-l1-1-0.dll116fclose
api-ms-win-crt-stdio-l1-1-0.dll138fwrite
api-ms-win-crt-stdio-l1-1-0.dll127fputc
api-ms-win-crt-stdio-l1-1-0.dll119fflush
api-ms-win-crt-stdio-l1-1-0.dll152setvbuf
api-ms-win-crt-stdio-l1-1-0.dll84_set_fmode
api-ms-win-crt-filesystem-l1-1-0.dll36_unlock_file
api-ms-win-crt-filesystem-l1-1-0.dll22_lock_file
api-ms-win-crt-heap-l1-1-0.dll23calloc
api-ms-win-crt-heap-l1-1-0.dll24free
api-ms-win-crt-heap-l1-1-0.dll8_callnewh
api-ms-win-crt-heap-l1-1-0.dll26realloc
api-ms-win-crt-heap-l1-1-0.dll25malloc
api-ms-win-crt-heap-l1-1-0.dll22_set_new_mode
api-ms-win-crt-math-l1-1-0.dll16_dclass
api-ms-win-crt-math-l1-1-0.dll60_ldsign
api-ms-win-crt-math-l1-1-0.dll23_dsign
api-ms-win-crt-math-l1-1-0.dll125ceilf
api-ms-win-crt-math-l1-1-0.dll29_fdclass
api-ms-win-crt-math-l1-1-0.dll54_ldclass
api-ms-win-crt-math-l1-1-0.dll9__setusermatherr
api-ms-win-crt-math-l1-1-0.dll37_fdsign
api-ms-win-crt-locale-l1-1-0.dll8_configthreadlocale
api-ms-win-crt-locale-l1-1-0.dll18localeconv
api-ms-win-crt-locale-l1-1-0.dll___lc_codepage_func
api-ms-win-crt-convert-l1-1-0.dll110wcstol
api-ms-win-crt-convert-l1-1-0.dll101strtoull
api-ms-win-crt-convert-l1-1-0.dll94strtod
api-ms-win-crt-convert-l1-1-0.dll99strtoll
api-ms-win-core-featurestaging-l1-1-0.dll5UnsubscribeFeatureStateChangeNotification
api-ms-win-core-featurestaging-l1-1-0.dllGetFeatureEnabledState
api-ms-win-core-featurestaging-l1-1-0.dll4SubscribeFeatureStateChangeNotification
api-ms-win-core-featurestaging-l1-1-0.dll3RecordFeatureUsage
bcrypt.dll2BCryptCloseAlgorithmProvider
bcrypt.dll27BCryptFinishHash
bcrypt.dll35BCryptHashData
bcrypt.dll39BCryptOpenAlgorithmProvider
bcrypt.dll6BCryptCreateHash
bcrypt.dll13BCryptDestroyHash

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionNotepad.exe
FileVersion11.2405.13.0
InternalNameNotepad
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameNotepad.exe
ProductNameNotepad
ProductVersion11.2405.13.0

VS_FIXEDFILEINFO

FileVersion11.2405.13.0
ProductVersion11.2405.13.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA 2011
serial: 33000003AF30400E4CA34D05410000000003AF

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2011
        Validity
            Not Before: Nov 16 19:09:00 2023 GMT
            Not After : Nov 14 19:09:00 2024 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:cb:35:ad:ae:9f:d1:81:ad:83:43:a1:11:
                    a4:1a:fe:dd:d0:fa:ad:4c:10:78:56:26:1a:90:56:
                    e3:b9:6a:66:17:42:9c:bc:30:33:cd:a0:96:24:f8:
                    55:80:85:e3:cf:e4:bc:70:71:28:1e:e5:a7:a7:f9:
                    fe:50:e9:63:4f:77:a1:03:c4:6c:e8:b6:f5:69:36:
                    2e:6f:7b:41:fd:ed:2d:c5:ec:2f:da:c4:37:ca:c7:
                    23:61:db:53:06:d1:6f:12:6f:4b:f1:8b:fb:e8:ad:
                    c2:c7:38:bf:62:fa:dd:83:eb:2b:ef:0f:32:e5:11:
                    e7:d4:09:b4:15:ff:31:82:06:35:c6:95:82:5c:52:
                    3e:91:03:35:f2:78:d0:0d:c5:2a:4a:5c:01:9d:ec:
                    58:7e:a1:c1:87:3c:fa:61:70:3f:4b:41:33:89:80:
                    6e:d8:ed:a6:33:b4:7a:81:2c:98:90:43:87:80:81:
                    93:54:e1:a7:3a:fb:c2:e7:10:60:0b:82:8d:72:74:
                    2e:41:24:4b:89:42:36:0a:6c:d4:f2:f7:9f:47:ac:
                    a4:ae:ec:b3:b7:5a:cd:30:f2:3c:3a:a5:87:42:d4:
                    83:29:75:39:24:da:9b:93:81:8d:8f:0c:dc:c1:b4:
                    b3:38:7a:f1:bb:15:87:ab:dd:65:fe:f2:dd:54:31:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.76.8.1, Code Signing
            X509v3 Subject Key Identifier: 
                47:1C:71:34:F2:04:3C:64:8E:F2:4A:B3:F9:B8:02:01:05:86:5E:C1
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Corporation/serialNumber=230012\+501826
            X509v3 Authority Key Identifier: 
                48:6E:64:E5:50:05:D3:82:AA:17:37:37:22:B5:6D:A8:CA:75:02:95
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        84:b1:16:df:f3:47:67:eb:4c:53:c1:e3:96:1d:9a:16:69:07:
        69:cd:26:83:a8:8b:ea:a5:81:c4:e5:9c:ee:10:c2:56:0d:d7:
        0f:ef:63:06:c3:cb:fa:05:26:89:43:e6:be:85:30:97:74:44:
        67:20:10:cf:2a:f5:38:10:d8:e0:bb:81:01:26:87:07:95:27:
        bc:ae:28:99:50:04:7e:cf:ec:f8:39:46:2a:a0:57:77:12:a2:
        72:7e:38:ce:24:14:76:cf:de:03:cb:8b:2c:ec:b1:24:1d:46:
        e3:d8:d6:62:16:a0:68:3d:8b:b6:38:64:2f:12:4f:b5:a1:a5:
        2c:9c:d2:99:ec:d9:7b:14:7b:55:ec:22:36:94:70:6b:bb:cd:
        de:e0:83:de:de:09:48:8b:45:d5:64:94:f9:a9:5e:86:c7:f4:
        21:00:59:a9:11:50:63:48:09:83:76:02:08:e1:45:30:b8:8f:
        72:89:7e:a3:24:53:4e:11:e9:3a:32:87:8f:d3:a2:cc:26:d6:
        ea:03:70:6a:f9:95:a6:27:4d:f7:17:de:ee:56:9c:9a:89:2e:
        1b:8f:7b:c5:23:f6:41:80:39:cc:a8:d0:ed:66:37:00:da:f8:
        b8:45:13:30:7a:08:1d:f6:fb:07:c9:32:e9:9f:af:a7:5e:82:
        f2:d3:7b:cc:79:e6:ea:d0:2d:e4:e3:8a:60:50:81:2e:3d:05:
        25:24:84:53:7b:a2:2b:37:71:9c:8d:a6:7a:cc:71:ae:40:65:
        a0:bb:a4:b2:3b:da:fb:aa:4a:c4:a5:2d:a9:46:39:c6:66:3c:
        76:46:60:9a:99:d0:16:9c:37:6e:f8:39:9f:34:43:c0:75:d6:
        23:68:92:7b:3d:39:dd:f8:f1:b3:1b:e5:9e:1f:8a:1c:5a:05:
        67:9b:97:c9:16:12:2d:8e:3e:f4:08:98:e0:1e:ab:79:ed:ed:
        45:89:07:32:58:2c:01:84:a5:f6:ac:68:0d:d9:42:02:1c:11:
        77:43:fa:ec:28:eb:29:8c:cc:36:3a:51:a9:85:39:f6:2a:61:
        65:e4:9e:dc:43:1a:ee:e7:80:3d:ae:80:a5:2e:71:c6:0a:24:
        94:62:8b:3f:8b:01:47:23:f7:40:55:71:21:d1:2d:0a:29:f4:
        df:33:a0:02:eb:ff:5b:09:bb:03:eb:54:0b:71:1c:d1:20:49:
        6f:80:28:1a:88:c5:85:8c:e0:4b:f7:da:5e:9a:81:25:00:7b:
        32:cc:6e:ae:5f:dd:df:31:f6:ac:d3:d3:7d:63:30:34:fe:b1:
        40:28:0b:0d:0c:e7:05:6d:09:44:1c:a8:83:4f:b9:88:db:4b:
        55:a0:27:26:48:88:49:01

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0e:90:d2:00:00:00:00:00:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
        Validity
            Not Before: Jul  8 20:59:09 2011 GMT
            Not After : Jul  8 21:09:09 2026 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:ab:f0:fa:72:10:1c:2e:ad:d8:6e:aa:82:10:4d:
                    34:ba:f2:b6:58:21:9f:42:1b:2a:6b:e9:5a:50:aa:
                    b8:06:38:1a:04:49:ba:7f:c3:0c:1e:dd:37:6b:c6:
                    12:d8:0b:f0:38:c2:99:06:b0:c8:39:d5:01:14:31:
                    42:d3:89:0d:79:64:87:7e:94:60:24:6c:af:9e:49:
                    9c:e9:68:5e:d2:df:9b:53:b2:0a:2c:c3:af:d9:a9:
                    2b:ae:7a:09:af:d7:96:59:ca:60:1a:05:e9:66:76:
                    e8:32:52:26:12:2f:e7:ab:08:50:cf:b3:44:b7:5d:
                    d8:c4:2e:03:75:ab:68:f3:cb:6d:f3:3a:5c:a1:16:
                    f4:46:ba:e0:38:64:ac:6e:64:35:78:a6:a0:63:0f:
                    2d:d3:40:93:f8:e3:de:07:0d:d5:5c:79:a5:49:29:
                    e7:0d:be:a0:13:77:be:94:3d:ef:fb:e3:2b:5a:10:
                    1f:4d:56:28:a2:7a:72:e0:12:3a:b7:49:5e:d8:ed:
                    ed:43:91:83:d9:7b:b2:7b:86:1b:d9:3e:b1:8c:5d:
                    e8:89:4f:84:1a:f2:a1:2f:59:e4:90:3b:2d:ae:33:
                    58:c5:b7:3e:fe:32:d3:b3:03:3d:b1:b2:af:92:38:
                    7e:d2:9d:80:2c:f5:4e:56:91:21:35:25:c3:39:6e:
                    64:7f:53:ba:9c:0f:ad:19:23:84:cb:f4:ba:03:86:
                    8d:f7:5f:f0:d0:52:bf:8c:94:87:bc:c0:21:74:25:
                    5f:18:28:b6:cc:27:28:38:25:98:39:4a:36:cf:7c:
                    b1:92:ae:1c:23:a7:a9:66:ec:61:1f:6a:e1:28:49:
                    9d:5f:88:e2:25:5d:d3:21:4b:3e:52:c4:b5:57:3f:
                    24:03:f0:d1:7a:5b:2f:d5:23:e3:70:5d:0f:51:46:
                    77:b3:f8:00:e1:bc:ac:02:82:5f:db:c0:15:b3:bd:
                    1b:d4:55:4b:e7:39:a1:0f:e9:23:49:bc:18:b8:44:
                    7c:45:e4:c1:c3:72:7a:e0:72:e7:24:df:bf:46:99:
                    c5:ef:c2:1c:57:db:83:8d:ec:4d:49:30:a7:ab:8e:
                    df:ec:5b:9f:af:fc:dd:b0:66:e2:c1:97:81:7b:ed:
                    d6:ed:4b:e7:49:29:a7:13:28:a6:a7:7d:67:80:e6:
                    8a:62:78:5f:b2:2f:84:d7:57:9c:5c:bf:77:28:28:
                    f1:ed:6d:c3:28:8f:2c:8f:40:37:4f:c1:e1:85:44:
                    89:c4:09:4c:c5:d4:a5:43:2f:74:95:f7:6e:f8:78:
                    20:58:2c:13:5d:60:95:9a:3e:4f:33:84:da:b0:88:
                    17:de:9e:4e:f4:96:b0:bc:46:a0:6c:98:d2:e0:d6:
                    88:8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                48:6E:64:E5:50:05:D3:82:AA:17:37:37:22:B5:6D:A8:CA:75:02:95
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                72:2D:3A:02:31:90:43:B9:14:05:4E:E1:EA:A7:C7:31:D1:23:89:34
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.46.3
                  CPS: http://www.microsoft.com/pkiops/docs/primarycps.htm
                  User Notice:
                    Explicit Text:  
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        67:f2:86:a5:98:e0:54:79:1a:2e:d3:d8:74:67:22:9b:0b:96:
        11:e1:63:92:99:42:96:7d:d2:79:0c:90:c1:65:5f:2e:2c:3e:
        f8:c3:72:d1:6d:83:fe:be:3f:e8:0a:ca:3b:bf:47:a9:a3:f3:
        69:db:63:bf:22:35:a5:97:5d:65:84:90:7d:8b:46:50:55:d8:
        0c:92:7c:d2:1a:4b:1c:f3:3c:42:8b:52:d0:b0:fd:6b:e3:3e:
        07:2e:29:9b:e6:3d:1b:a5:d4:b5:1d:77:94:39:e2:e9:64:c9:
        44:3d:78:7a:23:f3:13:7d:a6:90:74:83:8d:f4:cb:26:02:46:
        2a:c2:8a:10:bb:a4:a9:05:0c:9b:ed:68:fa:68:2e:95:a0:2a:
        3f:2a:6b:58:49:63:1f:09:69:6e:5a:98:96:e4:83:f4:c0:8f:
        f3:46:2b:de:fc:3b:d0:bd:35:ef:6e:25:ae:e5:af:27:ed:d0:
        dd:f3:0e:af:99:28:97:98:4d:0e:3d:0b:f2:08:89:d6:1f:c3:
        32:18:e2:f0:c5:2d:ce:5b:9e:b4:49:39:0a:c6:0a:c2:c6:ad:
        ae:e5:b2:d9:db:15:88:51:45:58:38:32:71:27:1a:7f:b1:f4:
        27:f8:de:2c:3a:20:69:98:b2:59:89:68:6e:6f:a7:b7:74:c3:
        40:05:06:a6:01:2a:28:3e:82:3f:13:4d:66:0b:c0:b3:4d:f5:
        e1:8f:7f:1c:6f:15:7d:45:a7:76:e5:40:2a:65:a3:c3:5d:52:
        62:86:c3:1d:63:36:97:86:df:da:f3:f8:f2:16:a1:9a:27:e1:
        cd:a5:97:d0:ee:5d:63:41:e3:5b:07:9c:87:3e:06:77:06:d1:
        06:b1:75:1f:14:be:61:61:b5:f0:dc:c6:1b:04:be:df:41:c7:
        0e:28:ee:de:65:2f:ec:97:f6:a1:5c:96:d8:00:d6:a1:46:bd:
        59:f3:97:a5:09:4b:48:10:99:80:1f:d0:00:29:c5:b1:9b:a5:
        3f:45:77:1e:35:c6:d2:a2:a2:9f:7a:7a:22:fa:48:95:1f:ab:
        fb:47:23:80:f5:9e:f8:bf:6b:b7:4b:97:e2:eb:75:78:1a:ec:
        ea:37:99:79:18:4b:ff:d6:b3:23:68:75:e6:af:fa:fc:8b:eb:
        0b:80:ea:69:3b:af:fc:30:ed:04:4c:8e:df:df:75:6d:63:91:
        3d:d1:9d:56:4e:4f:bf:80:57:22:a1:78:11:32:21:7a:ef:41:
        0a:b1:3f:fb:a8:cc:a4:5d:c1:a1:88:9b:57:71:56:4e:48:45:
        c0:42:c9:9b:76:5b:0a:80:48:6b:fd:79:9f:c1:bd:6d:6d:6a:
        c9:52:73:13:0d:7a:50:cd

undefined method `first' for #

offsetsizetypecomment
15c115HTM#
185df89662PNG(256 x 256)#
1883b662970BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x17ccf4