filename7cb00e2268c74c1ace2f91a508b24537bc5448af0b705adb032f4172b6acfda8.bin
size979936 (0xef3e0)
md575450b43a4031b6587adeb7fdc0a851d
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavWIN.Spy.Magania-278 FOUND
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00x42e000
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x78

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  00 b8 01 4c cd 00 90 90  |...........L....|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37                           |in32..$7        |

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x4bf3dc67
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion6.0
SizeOfCode0x2d000
SizeOfInitializedData0x99a00
SizeOfUninitializedData0
AddressOfEntryPoint0xc8000
BaseOfCode0x1000
BaseOfData0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xc9000
SizeOfHeaders0x400
CheckSum0xc4c40
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

namevavsizeraw sizeflags
.!rc!0x10000x2c0000x2ac00RWX CODE UDATA
ChW8avWh0x2d0000x10000xd44R-X CODE
OZNFY7Rg0x2e0000x4c0000x4b332RW- IDATA
IHJ3KUI50x7a0000x10000x126RW- IDATA
0ICFj14c0x7b0000x60000x5f1aR-- IDATA
.AoRE0x810000x8000x74fRW- IDATA
.rsrc0x820000x45cd40x45e00R-- IDATA SHARED
.yvs0xc80000x10000x600RWX CODE

Data Directory

typevasize
EXPORT00
IMPORT0x810000x64
RESOURCE0x820000x45cd4
EXCEPTION00
SECURITY0x29bf00x1600
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x1b8
Delay_IAT00
CLR_Header00
typenamesizecp
EXE#1041223681252
ICON#111281252
ICON#224401252
ICON#342641252
ICON#496401252
ICON#5169361252
ICON#6216401252
ICON#7380560
ICON#8676240
GROUP_ICON#1011181252
VERSION#110441252
module_namehintordfunction_name
ADVAPI32.dll486RegOpenKeyExA
ADVAPI32.dll464RegCreateKeyExA
ADVAPI32.dll428OpenProcessToken
ADVAPI32.dll335LookupPrivilegeValueA
ADVAPI32.dll30AdjustTokenPrivileges
ADVAPI32.dll463RegCreateKeyA
ADVAPI32.dll509RegSetValueExA
ADVAPI32.dll460RegCloseKey
ADVAPI32.dll431OpenServiceA
ADVAPI32.dll64CloseServiceHandle
ADVAPI32.dll578StartServiceA
ADVAPI32.dll429OpenSCManagerA
ADVAPI32.dll102CreateServiceA
ADVAPI32.dll496RegQueryValueExA
ADVAPI32.dll211EnumServicesStatusA
ADVAPI32.dll446QueryServiceConfigA
ADVAPI32.dll634UnlockServiceDatabase
ADVAPI32.dll56ChangeServiceConfigA
ADVAPI32.dll321LockServiceDatabase
KERNEL32.dllLoadLibraryA
KERNEL32.dllGetProcAddress
KERNEL32.dll706RestoreLastError
KERNEL32.dll64CopyFileA
KERNEL32.dll650Process32Next
KERNEL32.dll648Process32First
KERNEL32.dll112CreateToolhelp32Snapshot
KERNEL32.dll632OpenProcess
KERNEL32.dll896WaitForSingleObject
KERNEL32.dll241FreeLibrary
KERNEL32.dll478GetVersion
KERNEL32.dll778SetFilePointer
KERNEL32.dll692ReleaseMutex
KERNEL32.dll93CreateMutexA
KERNEL32.dll130DeleteFileA
KERNEL32.dll319GetCurrentThreadId
KERNEL32.dll350GetFileTime
KERNEL32.dll937lstrcat
KERNEL32.dll918WritePrivateProfileStringA
KERNEL32.dll72CreateDirectoryA
KERNEL32.dll946lstrcpy
KERNEL32.dll243FreeResource
KERNEL32.dll913WriteFile
KERNEL32.dll835SizeofResource
KERNEL32.dll586LoadResource
KERNEL32.dll224FindResourceA
KERNEL32.dll782SetFileTime
KERNEL32.dll589LocalFileTimeToFileTime
KERNEL32.dll594LocalReAlloc
KERNEL32.dll616MultiByteToWideChar
KERNEL32.dll80CreateFileA
KERNEL32.dll679ReadFile
KERNEL32.dll50CloseHandle
KERNEL32.dll591LocalFree
KERNEL32.dll469GetTickCount
KERNEL32.dll581LoadLibraryA
KERNEL32.dll836Sleep
KERNEL32.dll99CreateProcessA
KERNEL32.dll183ExitProcess
KERNEL32.dll881VirtualAllocEx
KERNEL32.dll922WriteProcessMemory
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll409GetProcAddress
KERNEL32.dll104CreateRemoteThread
KERNEL32.dll316GetCurrentProcess
KERNEL32.dll361GetLastError
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll952lstrlen
KERNEL32.dll587LocalAlloc
KERNEL32.dll639OutputDebugStringA
KERNEL32.dll442GetSystemDirectoryA
KERNEL32.dll266GetCommandLineA
KERNEL32.dll343GetFileAttributesA
msvcrt.dll678free
msvcrt.dll238_except_handler3
msvcrt.dll507_strlwr
msvcrt.dll16public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

msvcrt.dll108__dllonexit
msvcrt.dll437_onexit
msvcrt.dll781strstr
msvcrt.dll753rename
msvcrt.dll699isdigit
msvcrt.dll18void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll84__CxxFrameHandler
msvcrt.dll17void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll762sprintf
msvcrt.dll660fclose
msvcrt.dll686fwrite
msvcrt.dll677fread
msvcrt.dll497_stat
msvcrt.dll671fopen
msvcrt.dll750rand
msvcrt.dll814wcslen
msvcrt.dll767strchr
msvcrt.dll751realloc
msvcrt.dll729malloc
msvcrt.dll776strncmp
msvcrt.dll785strtoul
SHELL32.dll359ShellExecuteA
USER32.dll43CharNextA
USER32.dll285GetInputState
USER32.dll515PostThreadMessageA
USER32.dll97CreateWindowExA
USER32.dll729wsprintfA
USER32.dll484MessageBoxW
USER32.dll315GetMessageA

StringTable 080404B0

Comments
CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft(R) Windows(R) Operating System
FileVersion5.2.3790.3959
InternalNameinstall
LegalCopyright? Microsoft Corporation. All rights reserved.
LegalTrademarks
OriginalFilenameinstall.exe
PrivateBuild
ProductNameMicrosoft(R) Windows(R) Operating System
ProductVersion5.2.3790.3989
SpecialBuuld

VS_FIXEDFILEINFO

FileVersion5.2.3790.3959
ProductVersion5.2.3790.3959
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

No certificates in

undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass

Cannot call to_der on

undefined method `type' for nil:NilClass
offsetsizetypecomment
0803840EXE05/19/2010 12:41:11#
15c115HTM#
c4400176096BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 979936 bytes (957 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[!] PEdump::WIN_CERTIFICATE: too big length 826159390
[!] PEdump::WIN_CERTIFICATE: too big length 829895012
[!] PEdump::WIN_CERTIFICATE: too big length 835596743
[!] PEdump::WIN_CERTIFICATE: too big length 841757221
[!] PEdump::WIN_CERTIFICATE: too big length 846738035
[!] PEdump::WIN_CERTIFICATE: too big length 850342558
[!] PEdump::WIN_CERTIFICATE: too big length 852570828
[!] PEdump::WIN_CERTIFICATE: too big length 854995691
[!] PEdump::WIN_CERTIFICATE: too big length 857748248
[!] PEdump::WIN_CERTIFICATE: too big length 860828481
[!] PEdump::WIN_CERTIFICATE: too big length 862860137
[!] PEdump::WIN_CERTIFICATE: too big length 868561810
[!] PEdump::WIN_CERTIFICATE: too big length 876426294
[!] PEdump::WIN_CERTIFICATE: too big length 884290693
[!] PEdump::WIN_CERTIFICATE: too big length 892089637
[!] PEdump::WIN_CERTIFICATE: too big length 903034312
[!] PEdump::WIN_CERTIFICATE: too big length 908473861
[!] PEdump::WIN_CERTIFICATE: too big length 920663756
[!] PEdump::WIN_CERTIFICATE: too big length 929314654
[!] PEdump::WIN_CERTIFICATE: too big length 942159902
[!] PEdump::WIN_CERTIFICATE: too big length 952055986
[!] PEdump::WIN_CERTIFICATE: too big length 965884294
[!] PEdump::WIN_CERTIFICATE: too big length 970537421
[!] PEdump::WIN_CERTIFICATE: too big length 974273030
[!] PEdump::WIN_CERTIFICATE: too big length 978008645
[!] PEdump::WIN_CERTIFICATE: too big length 980040288
[!] PEdump::WIN_CERTIFICATE: too big length 982006398
[!] PEdump::WIN_CERTIFICATE: too big length 986462876
[!] PEdump::WIN_CERTIFICATE: too big length 987511512
[!] PEdump::WIN_CERTIFICATE: too big length 988560104
[!] PEdump::WIN_CERTIFICATE: too big length 989608696
[!] PEdump::WIN_CERTIFICATE: too big length 990657288
[!] PEdump::WIN_CERTIFICATE: too big length 994786091
[!] PEdump::WIN_CERTIFICATE: too big length 996555615
[!] PEdump::WIN_CERTIFICATE: too big length 998521722
[!] PEdump::WIN_CERTIFICATE: too big length 1000618904
[!] PEdump::WIN_CERTIFICATE: too big length 1007631342
[!] PEdump::WIN_CERTIFICATE: too big length 1020017850
[!] PEdump::WIN_CERTIFICATE: too big length 1024998676
[!] PEdump::WIN_CERTIFICATE: too big length 1038106076
[!] PEdump::WIN_CERTIFICATE: too big length 1043480044
[!] PEdump::WIN_CERTIFICATE: too big length 1063206605
[!] PEdump::WIN_CERTIFICATE: too big length 826159390
[!] PEdump::WIN_CERTIFICATE: too big length 829895012
[!] PEdump::WIN_CERTIFICATE: too big length 835596743
[!] PEdump::WIN_CERTIFICATE: too big length 841757221
[!] PEdump::WIN_CERTIFICATE: too big length 846738035
[!] PEdump::WIN_CERTIFICATE: too big length 850342558
[!] PEdump::WIN_CERTIFICATE: too big length 852570828
[!] PEdump::WIN_CERTIFICATE: too big length 854995691
[!] PEdump::WIN_CERTIFICATE: too big length 857748248
[!] PEdump::WIN_CERTIFICATE: too big length 860828481
[!] PEdump::WIN_CERTIFICATE: too big length 862860137
[!] PEdump::WIN_CERTIFICATE: too big length 868561810
[!] PEdump::WIN_CERTIFICATE: too big length 876426294
[!] PEdump::WIN_CERTIFICATE: too big length 884290693
[!] PEdump::WIN_CERTIFICATE: too big length 892089637
[!] PEdump::WIN_CERTIFICATE: too big length 903034312
[!] PEdump::WIN_CERTIFICATE: too big length 908473861
[!] PEdump::WIN_CERTIFICATE: too big length 920663756
[!] PEdump::WIN_CERTIFICATE: too big length 929314654
[!] PEdump::WIN_CERTIFICATE: too big length 942159902
[!] PEdump::WIN_CERTIFICATE: too big length 952055986
[!] PEdump::WIN_CERTIFICATE: too big length 965884294
[!] PEdump::WIN_CERTIFICATE: too big length 970537421
[!] PEdump::WIN_CERTIFICATE: too big length 974273030
[!] PEdump::WIN_CERTIFICATE: too big length 978008645
[!] PEdump::WIN_CERTIFICATE: too big length 980040288
[!] PEdump::WIN_CERTIFICATE: too big length 982006398
[!] PEdump::WIN_CERTIFICATE: too big length 986462876
[!] PEdump::WIN_CERTIFICATE: too big length 987511512
[!] PEdump::WIN_CERTIFICATE: too big length 988560104
[!] PEdump::WIN_CERTIFICATE: too big length 989608696
[!] PEdump::WIN_CERTIFICATE: too big length 990657288
[!] PEdump::WIN_CERTIFICATE: too big length 994786091
[!] PEdump::WIN_CERTIFICATE: too big length 996555615
[!] PEdump::WIN_CERTIFICATE: too big length 998521722
[!] PEdump::WIN_CERTIFICATE: too big length 1000618904
[!] PEdump::WIN_CERTIFICATE: too big length 1007631342
[!] PEdump::WIN_CERTIFICATE: too big length 1020017850
[!] PEdump::WIN_CERTIFICATE: too big length 1024998676
[!] PEdump::WIN_CERTIFICATE: too big length 1038106076
[!] PEdump::WIN_CERTIFICATE: too big length 1043480044
[!] PEdump::WIN_CERTIFICATE: too big length 1063206605
[!] PEdump::WIN_CERTIFICATE: too big length 826159390
[!] PEdump::WIN_CERTIFICATE: too big length 829895012
[!] PEdump::WIN_CERTIFICATE: too big length 835596743
[!] PEdump::WIN_CERTIFICATE: too big length 841757221
[!] PEdump::WIN_CERTIFICATE: too big length 846738035
[!] PEdump::WIN_CERTIFICATE: too big length 850342558
[!] PEdump::WIN_CERTIFICATE: too big length 852570828
[!] PEdump::WIN_CERTIFICATE: too big length 854995691
[!] PEdump::WIN_CERTIFICATE: too big length 857748248
[!] PEdump::WIN_CERTIFICATE: too big length 860828481
[!] PEdump::WIN_CERTIFICATE: too big length 862860137
[!] PEdump::WIN_CERTIFICATE: too big length 868561810
[!] PEdump::WIN_CERTIFICATE: too big length 876426294
[!] PEdump::WIN_CERTIFICATE: too big length 884290693
[!] PEdump::WIN_CERTIFICATE: too big length 892089637
[!] PEdump::WIN_CERTIFICATE: too big length 903034312
[!] PEdump::WIN_CERTIFICATE: too big length 908473861
[!] PEdump::WIN_CERTIFICATE: too big length 920663756
[!] PEdump::WIN_CERTIFICATE: too big length 929314654
[!] PEdump::WIN_CERTIFICATE: too big length 942159902
[!] PEdump::WIN_CERTIFICATE: too big length 952055986
[!] PEdump::WIN_CERTIFICATE: too big length 965884294
[!] PEdump::WIN_CERTIFICATE: too big length 970537421
[!] PEdump::WIN_CERTIFICATE: too big length 974273030
[!] PEdump::WIN_CERTIFICATE: too big length 978008645
[!] PEdump::WIN_CERTIFICATE: too big length 980040288
[!] PEdump::WIN_CERTIFICATE: too big length 982006398
[!] PEdump::WIN_CERTIFICATE: too big length 986462876
[!] PEdump::WIN_CERTIFICATE: too big length 987511512
[!] PEdump::WIN_CERTIFICATE: too big length 988560104
[!] PEdump::WIN_CERTIFICATE: too big length 989608696
[!] PEdump::WIN_CERTIFICATE: too big length 990657288
[!] PEdump::WIN_CERTIFICATE: too big length 994786091
[!] PEdump::WIN_CERTIFICATE: too big length 996555615
[!] PEdump::WIN_CERTIFICATE: too big length 998521722
[!] PEdump::WIN_CERTIFICATE: too big length 1000618904
[!] PEdump::WIN_CERTIFICATE: too big length 1007631342
[!] PEdump::WIN_CERTIFICATE: too big length 1020017850
[!] PEdump::WIN_CERTIFICATE: too big length 1024998676
[!] PEdump::WIN_CERTIFICATE: too big length 1038106076
[!] PEdump::WIN_CERTIFICATE: too big length 1043480044
[!] PEdump::WIN_CERTIFICATE: too big length 1063206605
[!] PEdump::WIN_CERTIFICATE: too big length 826159390
[!] PEdump::WIN_CERTIFICATE: too big length 829895012
[!] PEdump::WIN_CERTIFICATE: too big length 835596743
[!] PEdump::WIN_CERTIFICATE: too big length 841757221
[!] PEdump::WIN_CERTIFICATE: too big length 846738035
[!] PEdump::WIN_CERTIFICATE: too big length 850342558
[!] PEdump::WIN_CERTIFICATE: too big length 852570828
[!] PEdump::WIN_CERTIFICATE: too big length 854995691
[!] PEdump::WIN_CERTIFICATE: too big length 857748248
[!] PEdump::WIN_CERTIFICATE: too big length 860828481
[!] PEdump::WIN_CERTIFICATE: too big length 862860137
[!] PEdump::WIN_CERTIFICATE: too big length 868561810
[!] PEdump::WIN_CERTIFICATE: too big length 876426294
[!] PEdump::WIN_CERTIFICATE: too big length 884290693
[!] PEdump::WIN_CERTIFICATE: too big length 892089637
[!] PEdump::WIN_CERTIFICATE: too big length 903034312
[!] PEdump::WIN_CERTIFICATE: too big length 908473861
[!] PEdump::WIN_CERTIFICATE: too big length 920663756
[!] PEdump::WIN_CERTIFICATE: too big length 929314654
[!] PEdump::WIN_CERTIFICATE: too big length 942159902
[!] PEdump::WIN_CERTIFICATE: too big length 952055986
[!] PEdump::WIN_CERTIFICATE: too big length 965884294
[!] PEdump::WIN_CERTIFICATE: too big length 970537421
[!] PEdump::WIN_CERTIFICATE: too big length 974273030
[!] PEdump::WIN_CERTIFICATE: too big length 978008645
[!] PEdump::WIN_CERTIFICATE: too big length 980040288
[!] PEdump::WIN_CERTIFICATE: too big length 982006398
[!] PEdump::WIN_CERTIFICATE: too big length 986462876
[!] PEdump::WIN_CERTIFICATE: too big length 987511512
[!] PEdump::WIN_CERTIFICATE: too big length 988560104
[!] PEdump::WIN_CERTIFICATE: too big length 989608696
[!] PEdump::WIN_CERTIFICATE: too big length 990657288
[!] PEdump::WIN_CERTIFICATE: too big length 994786091
[!] PEdump::WIN_CERTIFICATE: too big length 996555615
[!] PEdump::WIN_CERTIFICATE: too big length 998521722
[!] PEdump::WIN_CERTIFICATE: too big length 1000618904
[!] PEdump::WIN_CERTIFICATE: too big length 1007631342
[!] PEdump::WIN_CERTIFICATE: too big length 1020017850
[!] PEdump::WIN_CERTIFICATE: too big length 1024998676
[!] PEdump::WIN_CERTIFICATE: too big length 1038106076
[!] PEdump::WIN_CERTIFICATE: too big length 1043480044
[!] PEdump::WIN_CERTIFICATE: too big length 1063206605
[!] PEdump::WIN_CERTIFICATE: too big length 826159390
[!] PEdump::WIN_CERTIFICATE: too big length 829895012
[!] PEdump::WIN_CERTIFICATE: too big length 835596743
[!] PEdump::WIN_CERTIFICATE: too big length 841757221
[!] PEdump::WIN_CERTIFICATE: too big length 846738035
[!] PEdump::WIN_CERTIFICATE: too big length 850342558
[!] PEdump::WIN_CERTIFICATE: too big length 852570828
[!] PEdump::WIN_CERTIFICATE: too big length 854995691
[!] PEdump::WIN_CERTIFICATE: too big length 857748248
[!] PEdump::WIN_CERTIFICATE: too big length 860828481
[!] PEdump::WIN_CERTIFICATE: too big length 862860137
[!] PEdump::WIN_CERTIFICATE: too big length 868561810
[!] PEdump::WIN_CERTIFICATE: too big length 876426294
[!] PEdump::WIN_CERTIFICATE: too big length 884290693
[!] PEdump::WIN_CERTIFICATE: too big length 892089637
[!] PEdump::WIN_CERTIFICATE: too big length 903034312
[!] PEdump::WIN_CERTIFICATE: too big length 908473861
[!] PEdump::WIN_CERTIFICATE: too big length 920663756
[!] PEdump::WIN_CERTIFICATE: too big length 929314654
[!] PEdump::WIN_CERTIFICATE: too big length 942159902
[!] PEdump::WIN_CERTIFICATE: too big length 952055986
[!] PEdump::WIN_CERTIFICATE: too big length 965884294
[!] PEdump::WIN_CERTIFICATE: too big length 970537421
[!] PEdump::WIN_CERTIFICATE: too big length 974273030
[!] PEdump::WIN_CERTIFICATE: too big length 978008645
[!] PEdump::WIN_CERTIFICATE: too big length 980040288
[!] PEdump::WIN_CERTIFICATE: too big length 982006398
[!] PEdump::WIN_CERTIFICATE: too big length 986462876
[!] PEdump::WIN_CERTIFICATE: too big length 987511512
[!] PEdump::WIN_CERTIFICATE: too big length 988560104
[!] PEdump::WIN_CERTIFICATE: too big length 989608696
[!] PEdump::WIN_CERTIFICATE: too big length 990657288
[!] PEdump::WIN_CERTIFICATE: too big length 994786091
[!] PEdump::WIN_CERTIFICATE: too big length 996555615
[!] PEdump::WIN_CERTIFICATE: too big length 998521722
[!] PEdump::WIN_CERTIFICATE: too big length 1000618904
[!] PEdump::WIN_CERTIFICATE: too big length 1007631342
[!] PEdump::WIN_CERTIFICATE: too big length 1020017850
[!] PEdump::WIN_CERTIFICATE: too big length 1024998676
[!] PEdump::WIN_CERTIFICATE: too big length 1038106076
[!] PEdump::WIN_CERTIFICATE: too big length 1043480044
[!] PEdump::WIN_CERTIFICATE: too big length 1063206605
[!] PEdump::WIN_CERTIFICATE: too big length 826159390
[!] PEdump::WIN_CERTIFICATE: too big length 829895012
[!] PEdump::WIN_CERTIFICATE: too big length 835596743
[!] PEdump::WIN_CERTIFICATE: too big length 841757221
[!] PEdump::WIN_CERTIFICATE: too big length 846738035
[!] PEdump::WIN_CERTIFICATE: too big length 850342558
[!] PEdump::WIN_CERTIFICATE: too big length 852570828
[!] PEdump::WIN_CERTIFICATE: too big length 854995691
[!] PEdump::WIN_CERTIFICATE: too big length 857748248
[!] PEdump::WIN_CERTIFICATE: too big length 860828481
[!] PEdump::WIN_CERTIFICATE: too big length 862860137
[!] PEdump::WIN_CERTIFICATE: too big length 868561810
[!] PEdump::WIN_CERTIFICATE: too big length 876426294
[!] PEdump::WIN_CERTIFICATE: too big length 884290693
[!] PEdump::WIN_CERTIFICATE: too big length 892089637
[!] PEdump::WIN_CERTIFICATE: too big length 903034312
[!] PEdump::WIN_CERTIFICATE: too big length 908473861
[!] PEdump::WIN_CERTIFICATE: too big length 920663756
[!] PEdump::WIN_CERTIFICATE: too big length 929314654
[!] PEdump::WIN_CERTIFICATE: too big length 942159902
[!] PEdump::WIN_CERTIFICATE: too big length 952055986
[!] PEdump::WIN_CERTIFICATE: too big length 965884294
[!] PEdump::WIN_CERTIFICATE: too big length 970537421
[!] PEdump::WIN_CERTIFICATE: too big length 974273030
[!] PEdump::WIN_CERTIFICATE: too big length 978008645
[!] PEdump::WIN_CERTIFICATE: too big length 980040288
[!] PEdump::WIN_CERTIFICATE: too big length 982006398
[!] PEdump::WIN_CERTIFICATE: too big length 986462876
[!] PEdump::WIN_CERTIFICATE: too big length 987511512
[!] PEdump::WIN_CERTIFICATE: too big length 988560104
[!] PEdump::WIN_CERTIFICATE: too big length 989608696
[!] PEdump::WIN_CERTIFICATE: too big length 990657288
[!] PEdump::WIN_CERTIFICATE: too big length 994786091
[!] PEdump::WIN_CERTIFICATE: too big length 996555615
[!] PEdump::WIN_CERTIFICATE: too big length 998521722
[!] PEdump::WIN_CERTIFICATE: too big length 1000618904
[!] PEdump::WIN_CERTIFICATE: too big length 1007631342
[!] PEdump::WIN_CERTIFICATE: too big length 1020017850
[!] PEdump::WIN_CERTIFICATE: too big length 1024998676
[!] PEdump::WIN_CERTIFICATE: too big length 1038106076
[!] PEdump::WIN_CERTIFICATE: too big length 1043480044
[!] PEdump::WIN_CERTIFICATE: too big length 1063206605