filenameClient.exe
size14963904 (0xe454c0)
md586b1aa2783077c58ac457dec201f588d
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x180

Rich Header

lib idversiontimes used
110507271
9340352
9540352
2594662
1097821
11978214
221210052
152201153
1584021914
1704021920
156402196
4990442
1095072742
4844726
1323072950
9321792
2994661
2894663
2891782
171303197
1313072959
1754021921
1473072935
10895
171402193804
155402191
154402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x56c15460
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x12f
Magic0x10b
LinkerVersion10.0
SizeOfCode0x2012e00
SizeOfInitializedData0x82d400
SizeOfUninitializedData0
AddressOfEntryPoint0x2d2e000
BaseOfCode0x1000
BaseOfData0x2015000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x2d2f000
SizeOfHeaders0x400
CheckSum0xe49cda
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
0x10000x2a9e0000xcf6800RWX IDATA
.rsrc0x2a9f0000xa27950x34200RW- IDATA
.idata0x2b420000x10000x200RW- IDATA
0x2b430000x1050000x200RWX IDATA
zmdncjtg0x2c480000xe60000xe5a00RWX IDATA
jobasjuw0x2d2e0000x10000x200RWX IDATA

Data Directory

typevasize
EXPORT0x2d143040xe7f
IMPORT0x2b4206d0x95
RESOURCE0x2a9f0000xa2795
EXCEPTION00
SECURITY0xe421b00x3310
BASERELOC00
DEBUG0x2d2d8420x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT0x27492bc0x60
CLR_Header00
typenamesizecp
BINARY#22632798801252
TEXTURE#33012561252
TEXTURE#33021361252
TEXTURE#33031749081252
CURSOR#213081252
CURSOR#223081252
CURSOR#233081252
CURSOR#243081252
CURSOR#253081252
CURSOR#263081252
CURSOR#273081252
CURSOR#283081252
CURSOR#293081252
CURSOR#303081252
CURSOR#313081252
CURSOR#323081252
CURSOR#333081252
CURSOR#343081252
CURSOR#353081252
CURSOR#363081252
CURSOR#373081252
CURSOR#383081252
CURSOR#393081252
CURSOR#403081252
CURSOR#413081252
CURSOR#423081252
CURSOR#433081252
CURSOR#443081252
CURSOR#453081252
CURSOR#463081252
CURSOR#473081252
CURSOR#483081252
CURSOR#493081252
CURSOR#503081252
CURSOR#513081252
CURSOR#523081252
CURSOR#533081252
CURSOR#543081252
CURSOR#553081252
CURSOR#563081252
CURSOR#573081252
CURSOR#583081252
CURSOR#593081252
CURSOR#603081252
CURSOR#613081252
CURSOR#623081252
CURSOR#633081252
CURSOR#643081252
CURSOR#653081252
CURSOR#663081252
CURSOR#673081252
CURSOR#683081252
CURSOR#693081252
CURSOR#7022201252
CURSOR#7122201252
CURSOR#7222201252
CURSOR#7322201252
CURSOR#7422201252
CURSOR#7522201252
CURSOR#7622201252
CURSOR#7722201252
CURSOR#7822201252
CURSOR#7922201252
CURSOR#8022201252
CURSOR#8122201252
CURSOR#8222201252
CURSOR#8322201252
CURSOR#8422201252
CURSOR#8522201252
CURSOR#863081252
CURSOR#873081252
CURSOR#883081252
CURSOR#893081252
CURSOR#9022201252
CURSOR#9122201252
CURSOR#9222201252
CURSOR#9322201252
CURSOR#9422201252
CURSOR#9522201252
CURSOR#9622201252
CURSOR#9722201252
CURSOR#9822201252
CURSOR#9922201252
CURSOR#10022201252
CURSOR#10122201252
CURSOR#10222201252
CURSOR#10322201252
CURSOR#1043081252
CURSOR#1053081252
CURSOR#1063081252
CURSOR#1073081252
CURSOR#1083081252
CURSOR#1093081252
CURSOR#1103081252
CURSOR#1117481252
CURSOR#1127481252
CURSOR#1137481252
CURSOR#1143081252
CURSOR#1153081252
CURSOR#11622201252
CURSOR#11722201252
ICON#113841252
ICON#217361252
ICON#322161252
ICON#437521252
ICON#556721252
ICON#611281252
ICON#724401252
ICON#842641252
ICON#996401252
ICON#10169361252
ICON#1113841252
ICON#1217361252
ICON#1322161252
ICON#1437521252
ICON#1556721252
ICON#1611281252
ICON#1724401252
ICON#1842641252
ICON#1996401252
ICON#20169361252
GROUP_ICON#22011461252
GROUP_ICON#22571461252
VERSION#16921252
MANIFEST#16091252
module_namehintordfunction_name
kernel32.dlllstrcpy
comctl32.dllInitCommonControls
ordentry_vafunction_name
10x1420e90??0CIMEHandler@esl@@QAE@PAUHWND__@@@Z
20x2fc60??0IIMEEventHandler@esl@@QAE@ABV01@@Z
30x1002e0??0IIMEEventHandler@esl@@QAE@XZ
40x1480??0Lexian_Sdk_Client@@QAE@XZ
50x13fc29a??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
60x141fbb0??1CIMEHandler@esl@@QAE@XZ
70x1002f0??1IIMEEventHandler@esl@@UAE@XZ
80x1490??1Lexian_Sdk_Client@@QAE@XZ
90x2fc50??4CIMEHandler@esl@@QAEAAV01@ABV01@@Z
100x2fc80??4IIMEEventHandler@esl@@QAEAAV01@ABV01@@Z
110x13fc29f??4_Init_locks@std@@QAEAAV01@ABV01@@Z
120x2018e5c??_7IIMEEventHandler@esl@@6B@
130x2180?AuthLogin@Lexian_Sdk_Client@@QAEHPAD0H00PAPAD@Z
140x141fe80?CancelComposition@CIMEHandler@esl@@QAEXXZ
150x14200a0?CloseCandidateList@CIMEHandler@esl@@QAEXK@Z
160x141fe00?CompleteComposition@CIMEHandler@esl@@QAEXXZ
170x141ff00?ConvertComposition@CIMEHandler@esl@@QAEXXZ
180x141f580?Enable@CIMEHandler@esl@@QAEX_N@Z
190x1710?GetCaptchaForGame@Lexian_Sdk_Client@@QAEHPADHAAHPAPAEAAK@Z
200x141f480?GetCodePage@CIMEHandler@esl@@QBE?BW4ECodePageId@esl_constant@2@XZ
210x141f430?GetCodePage@CIMEHandler@esl@@SA?BW4ECodePageId@esl_constant@2@W4EInputLanguage@12@@Z
220x1420d50?GetCompositionString@CIMEHandler@esl@@QBE?BV?$CStringT@_WVunicode_string_trait@esl@@Vunicode_string_implement@2@@2@XZ
230x1420c10?GetCurrentIMEDescription@CIMEHandler@esl@@QBE?BV?$CStringT@_WVunicode_string_trait@esl@@Vunicode_string_implement@2@@2@XZ
240x1420ad0?GetCurrentIMEFileName@CIMEHandler@esl@@QBE?BV?$CStringT@_WVunicode_string_trait@esl@@Vunicode_string_implement@2@@2@XZ
250x141f420?GetInputLanguage@CIMEHandler@esl@@QBE?BW4EInputLanguage@12@XZ
260x1d10?GetUserMatrix@Lexian_Sdk_Client@@QAEHPADAAHAAW4AuthProtectType@@PAPAD@Z
270x16c0?GetVersionInfo@Lexian_Sdk_Client@@QAEHPAPAD@Z
280x14a0?InitAuthClientApi@Lexian_Sdk_Client@@QAEHPAD00@Z
290x141f750?IsCapsLockKeyEnabled@CIMEHandler@esl@@QBE_NXZ
300x141f650?IsCompositing@CIMEHandler@esl@@QBE_NXZ
310x141f600?IsEnabled@CIMEHandler@esl@@QBE_NXZ
320x141f640?IsFullShapeMode@CIMEHandler@esl@@QBE_NXZ
330x141f760?IsKanaModeKeyEnabled@CIMEHandler@esl@@QBE_NXZ
340x141f620?IsKatakanaMode@CIMEHandler@esl@@QBE_NXZ
350x141f630?IsLanguageMode@CIMEHandler@esl@@QBE_NXZ
360x141f610?IsNativeMode@CIMEHandler@esl@@QBE_NXZ
370x141f6e0?IsNumLockKeyEnabled@CIMEHandler@esl@@QBE_NXZ
380x141f410?IsOpened@CIMEHandler@esl@@QBE_NXZ
390x141f740?IsScrollLockKeyEnabled@CIMEHandler@esl@@QBE_NXZ
400x141f6d0?IsStatusWindowShown@CIMEHandler@esl@@QBE_NXZ
410x100360?OnConversionModeUpdated@IIMEEventHandler@esl@@UAEXK@Z
420x100350?OnInputLanguageChange@IIMEEventHandler@esl@@UAEXW4EInputLanguage@CIMEHandler@2@@Z
430x100320?OnKeyDown@IIMEEventHandler@esl@@UAEXK@Z
440x100330?OnKeyPressed@IIMEEventHandler@esl@@UAEXK@Z
450x100340?OnKeyUp@IIMEEventHandler@esl@@UAEXK@Z
460x100310?OnOpenStatusChanged@IIMEEventHandler@esl@@UAEX_N@Z
470x100370?OnSentenceModeUpdated@IIMEEventHandler@esl@@UAEXK@Z
480x141fc20?Open@CIMEHandler@esl@@QBE_N_N@Z
490x1b85500?PreTranslateMessage@CIMEHandler@esl@@QAE_NABUtagMSG@@@Z
500x100300?PreTranslateMessage@IIMEEventHandler@esl@@UAE_NIIJ@Z
510x1b86cd0?ProcessMessage@CIMEHandler@esl@@QAE?AW4ETranslationResult@12@AAJPAUHWND__@@IAAI0@Z
520x16e0?ReleaseAuthClientApi@Lexian_Sdk_Client@@QAEHXZ
530x141fdf0?ReleaseCallback@CIMEHandler@esl@@QAEPAVIIMEEventHandler@2@XZ
540x141ff80?RevertComposition@CIMEHandler@esl@@QAEXXZ
550x2da0?SetAuthAccountType@Lexian_Sdk_Client@@QAEHW4AuthAccountType@@@Z
560x141fcc0?SetCallback@CIMEHandler@esl@@QAEXPAVIIMEEventHandler@2@@Z
570x1420000?SetCompositionString@CIMEHandler@esl@@QAEXABV?$CStringT@_WVunicode_string_trait@esl@@Vunicode_string_implement@2@@2@@Z
580x141f660?ShowStatusWindow@CIMEHandler@esl@@QAEX_N@Z
590x141f6f0?ToggleNumLock@CIMEHandler@esl@@QBEX_N@Z
module_nameClientS.exe
flags0
timestamp2016-02-15 04:30:05
version0.0
ordinal_base1
nFunctions59
nNames59
Names(59)0x2d14418
Functions(59)0x2d1432c
NameOrdinals(59)0x2d14504

StringTable 040004b0

CompanyNameNEXON KOREA
FileDescriptionMabinogi
FileVersion1.0.0.1
InternalNameMabinogi.exe
LegalCopyrightCopyright (C) 2003
OriginalFilenameMabinogi.exe
ProductNameMabinogi
ProductVersion1.0.0.1

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 SHA256 Code Signing CA
serial: 3C9F5BA47A07D8DD185FCA39CF5CFBF4

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9f:5b:a4:7a:07:d8:dd:18:5f:ca:39:cf:5c:fb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Validity
            Not Before: Jan 19 00:00:00 2016 GMT
            Not After : Feb 17 23:59:59 2019 GMT
        Subject: C=KR, ST=Seoul, L=Gangnam-gu, O=NEXON Korea Corporation., CN=NEXON Korea Corporation.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:dc:f5:df:4a:c5:41:1d:95:ce:1e:27:0d:
                    7b:0f:03:07:ce:8e:9d:be:ce:1d:90:c0:f7:ff:9b:
                    54:c5:7c:aa:07:56:b5:4c:b4:b4:15:74:79:c5:14:
                    a5:69:35:c6:5a:a1:da:e3:f2:d8:31:bb:d6:7d:75:
                    b8:3c:e6:5b:3e:76:df:54:e5:86:a4:d8:6f:c7:c2:
                    81:54:46:d0:5b:79:4c:0d:5e:cb:67:e6:c2:f9:75:
                    f9:46:96:df:cb:9c:b4:8e:5c:48:e1:d0:fe:88:e1:
                    70:63:04:19:33:49:0c:38:e1:46:9e:53:38:f3:c5:
                    a1:e6:70:c9:db:71:ed:0b:97:b9:f5:06:91:35:74:
                    db:84:d9:a5:df:d2:6a:a1:cc:27:8e:fa:d9:67:6a:
                    5f:51:9c:dd:b3:8a:9a:a8:98:6f:8c:49:13:a0:09:
                    d4:da:c1:64:99:eb:f1:ab:69:82:2d:41:f9:f3:26:
                    cb:33:80:60:72:d1:a8:6b:7f:f4:4a:77:71:08:90:
                    26:c3:bc:c3:4c:a8:70:c5:51:d6:4c:59:72:17:0c:
                    21:06:53:96:ce:d5:cb:d5:74:ef:49:3a:11:9a:30:
                    9f:ee:1f:0c:e3:46:6b:7f:92:dd:ec:9c:cb:d4:ad:
                    8d:75:09:32:3b:ed:6b:83:7e:3a:53:38:b1:a8:62:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://sv.symcb.com/sv.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sv.symcd.com
                CA Issuers - URI:http://sv.symcb.com/sv.crt

            X509v3 Authority Key Identifier: 
                keyid:96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66

            X509v3 Subject Key Identifier: 
                04:D4:87:9B:A3:DA:BD:59:CE:4A:18:59:07:2C:64:90:55:DC:D9:14
    Signature Algorithm: sha256WithRSAEncryption
         1a:59:f6:a2:55:17:a7:30:d1:dc:aa:0d:2e:cb:56:f1:e4:96:
         14:db:cc:12:83:e1:cc:d4:c6:64:ef:c0:5c:55:9f:19:eb:3b:
         67:83:e2:cc:01:26:5a:da:33:25:27:f7:7b:ff:a5:c8:88:8b:
         1d:95:32:2f:bb:0b:dd:a1:a8:00:ff:4f:d6:e5:3e:9e:c8:f5:
         d2:f5:42:fe:a5:ec:57:76:52:59:ca:d3:6c:c0:52:1e:f7:ae:
         7b:32:38:7e:03:f3:39:4c:56:23:aa:00:d3:f8:c9:b5:83:c2:
         a9:ff:dc:93:eb:af:c5:36:87:0d:05:77:2f:1b:b7:98:7e:8e:
         34:d0:18:37:4d:26:3a:6a:79:ce:f8:4b:a1:a4:16:da:19:e0:
         e6:95:e7:88:8c:b7:d4:57:13:e0:48:36:b2:29:e3:bb:4e:4a:
         c1:99:01:b0:c3:ec:c6:50:cf:32:8e:e5:38:81:d9:c3:3a:ef:
         60:08:fd:07:84:c0:45:87:40:bc:c4:44:66:92:41:21:60:5f:
         0a:8f:de:72:fe:81:a5:38:21:79:47:91:da:45:91:2b:6f:e0:
         32:ff:e6:e4:d9:93:41:5f:24:77:3d:f1:51:f3:ef:1c:ae:ed:
         77:85:52:a1:53:fe:87:9b:9e:84:e4:e3:af:83:c0:d7:84:73:
         f9:7a:63:8c
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:97:83:1e:00:16:af:2c:b1:d2:08:c4:d7:68:93:
                    51:60:1e:71:f6:e2:47:b4:db:58:4d:23:62:6a:b4:
                    bf:5a:1b:51:f7:a3:0d:18:77:68:bb:d8:36:ab:2f:
                    21:50:da:9e:f3:e7:5f:27:4e:0b:c2:97:c8:09:70:
                    93:a9:da:5c:0d:4e:a4:0d:91:a0:b4:ec:14:ce:91:
                    72:54:2e:ce:a3:db:44:e9:52:1b:3f:41:3c:ca:4a:
                    e4:aa:c0:e8:39:ab:53:cc:21:d0:cc:cf:7f:9b:e6:
                    c2:cc:58:6a:82:15:ee:3d:36:cf:1c:c5:97:07:24:
                    8e:f1:7b:be:31:2d:3d:6e:dc:b5:99:42:9f:4b:61:
                    95:5f:1c:70:ee:17:7d:db:8b:e5:61:89:78:c7:68:
                    1b:af:11:78:1a:98:ae:c4:55:47:53:d9:b3:32:d6:
                    a1:0e:46:40:c5:97:92:8a:d1:53:a7:99:5b:85:35:
                    57:d3:ea:93:62:61:20:0a:c7:30:77:24:11:4d:62:
                    83:b6:ba:7b:68:82:31:ee:65:ca:df:f9:d5:8d:b2:
                    35:dc:8c:2b:6f:6a:72:5c:60:84:9c:f2:0c:94:5e:
                    c0:56:52:00:48:cc:d3:f8:a5:7d:de:2f:d7:13:e4:
                    38:a8:84:d5:46:b8:13:86:c2:1b:9d:ea:5a:38:dd:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://s2.symcb.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: http://www.symauth.com/cps
                  User Notice:
                    Explicit Text: http://www.symauth.com/rpa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://s1.symcb.com/pca3-g5.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-567
            X509v3 Subject Key Identifier: 
                96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha256WithRSAEncryption
         13:85:1a:1e:69:a9:37:f7:a0:bd:a4:af:7e:1d:61:53:fe:9d:
         8c:5e:0c:a6:75:1e:78:17:23:dd:fd:ec:1a:03:55:39:fb:71:
         95:c7:65:5a:a7:8e:30:d2:44:5a:61:db:70:6f:da:21:05:c2:
         2e:73:ba:49:f1:d1:93:fe:5d:c9:cd:5e:03:e0:89:9e:3f:74:
         1e:d7:f7:38:8b:a9:d6:cf:bb:35:2f:33:58:a8:92:56:d1:c8:
         4d:3b:82:e6:79:84:16:fc:28:b0:b1:47:f3:1d:a2:3e:ee:87:
         d9:a6:7f:a4:56:a5:3f:ad:84:2e:29:de:7c:bc:a8:aa:a3:3d:
         04:01:ea:ba:93:a2:0e:50:22:29:17:4c:87:e4:3a:11:5f:d6:
         a4:25:89:9b:05:6b:2f:b4:c9:01:4c:27:7b:0b:ac:19:05:22:
         a0:60:15:3f:da:c9:fb:4d:4c:8f:fb:72:67:77:fd:27:94:c7:
         ba:35:0e:88:49:fe:8d:fd:28:af:4a:12:bd:0d:b3:97:05:de:
         44:0c:15:fa:36:2b:03:dc:c1:50:01:f1:a1:11:5d:14:e5:e2:
         bd:27:4b:54:be:2b:84:5e:0f:a6:c3:74:05:0a:ef:97:c3:89:
         22:b1:1f:77:f3:bd:cd:43:d4:f1:4c:a9:3f:b5:8b:84:af:64:
         f2:d0:14:21

Cannot convert into OpenSSL::BN

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable
[?] can't find file_offset of VA 0x2ae62c0
[?] can't find file_offset of VA 0x2ae63c0
[?] can't find file_offset of VA 0x2ae6448
[?] can't find file_offset of VA 0x2b10f84
[?] can't find file_offset of VA 0x2b110b8
[?] can't find file_offset of VA 0x2b111ec
[?] can't find file_offset of VA 0x2b11320
[?] can't find file_offset of VA 0x2b11454
[?] can't find file_offset of VA 0x2b11588
[?] can't find file_offset of VA 0x2b116bc
[?] can't find file_offset of VA 0x2b117f0
[?] can't find file_offset of VA 0x2b11924
[?] can't find file_offset of VA 0x2b11a58
[?] can't find file_offset of VA 0x2b11b8c
[?] can't find file_offset of VA 0x2b11cc0
[?] can't find file_offset of VA 0x2b11df4
[?] can't find file_offset of VA 0x2b11f28
[?] can't find file_offset of VA 0x2b1205c
[?] can't find file_offset of VA 0x2b12190
[?] can't find file_offset of VA 0x2b122c4
[?] can't find file_offset of VA 0x2b123f8
[?] can't find file_offset of VA 0x2b1252c
[?] can't find file_offset of VA 0x2b12660
[?] can't find file_offset of VA 0x2b12794
[?] can't find file_offset of VA 0x2b128c8
[?] can't find file_offset of VA 0x2b129fc
[?] can't find file_offset of VA 0x2b12b30
[?] can't find file_offset of VA 0x2b12c64
[?] can't find file_offset of VA 0x2b12d98
[?] can't find file_offset of VA 0x2b12ecc
[?] can't find file_offset of VA 0x2b13000
[?] can't find file_offset of VA 0x2b13134
[?] can't find file_offset of VA 0x2b13268
[?] can't find file_offset of VA 0x2b1339c
[?] can't find file_offset of VA 0x2b134d0
[?] can't find file_offset of VA 0x2b13604
[?] can't find file_offset of VA 0x2b13738
[?] can't find file_offset of VA 0x2b1386c
[?] can't find file_offset of VA 0x2b139a0
[?] can't find file_offset of VA 0x2b13ad4
[?] can't find file_offset of VA 0x2b13c08
[?] can't find file_offset of VA 0x2b13d3c
[?] can't find file_offset of VA 0x2b13e70
[?] can't find file_offset of VA 0x2b13fa4
[?] can't find file_offset of VA 0x2b140d8
[?] can't find file_offset of VA 0x2b1420c
[?] can't find file_offset of VA 0x2b14340
[?] can't find file_offset of VA 0x2b14474
[?] can't find file_offset of VA 0x2b145a8
[?] can't find file_offset of VA 0x2b146dc
[?] can't find file_offset of VA 0x2b14810
[?] can't find file_offset of VA 0x2b14944
[?] can't find file_offset of VA 0x2b14a78
[?] can't find file_offset of VA 0x2b15324
[?] can't find file_offset of VA 0x2b15bd0
[?] can't find file_offset of VA 0x2b1647c
[?] can't find file_offset of VA 0x2b16d28
[?] can't find file_offset of VA 0x2b175d4
[?] can't find file_offset of VA 0x2b17e80
[?] can't find file_offset of VA 0x2b1872c
[?] can't find file_offset of VA 0x2b18fd8
[?] can't find file_offset of VA 0x2b19884
[?] can't find file_offset of VA 0x2b1a130
[?] can't find file_offset of VA 0x2b1a9dc
[?] can't find file_offset of VA 0x2b1b288
[?] can't find file_offset of VA 0x2b1bb34
[?] can't find file_offset of VA 0x2b1c3e0
[?] can't find file_offset of VA 0x2b1cc8c
[?] can't find file_offset of VA 0x2b1d538
[?] can't find file_offset of VA 0x2b1d66c
[?] can't find file_offset of VA 0x2b1d7a0
[?] can't find file_offset of VA 0x2b1d8d4
[?] can't find file_offset of VA 0x2b1da08
[?] can't find file_offset of VA 0x2b1e2b4
[?] can't find file_offset of VA 0x2b1eb60
[?] can't find file_offset of VA 0x2b1f40c
[?] can't find file_offset of VA 0x2b1fcb8
[?] can't find file_offset of VA 0x2b20564
[?] can't find file_offset of VA 0x2b20e10
[?] can't find file_offset of VA 0x2b216bc
[?] can't find file_offset of VA 0x2b21f68
[?] can't find file_offset of VA 0x2b22814
[?] can't find file_offset of VA 0x2b230c0
[?] can't find file_offset of VA 0x2b2396c
[?] can't find file_offset of VA 0x2b24218
[?] can't find file_offset of VA 0x2b24ac4
[?] can't find file_offset of VA 0x2b25370
[?] can't find file_offset of VA 0x2b254a4
[?] can't find file_offset of VA 0x2b255d8
[?] can't find file_offset of VA 0x2b2570c
[?] can't find file_offset of VA 0x2b25840
[?] can't find file_offset of VA 0x2b25974
[?] can't find file_offset of VA 0x2b25aa8
[?] can't find file_offset of VA 0x2b25bdc
[?] can't find file_offset of VA 0x2b25ec8
[?] can't find file_offset of VA 0x2b261b4
[?] can't find file_offset of VA 0x2b264a0
[?] can't find file_offset of VA 0x2b265d4
[?] can't find file_offset of VA 0x2b26708
[?] can't find file_offset of VA 0x2b26fb4
[?] can't find file_offset of VA 0x2b27860
[?] too many errors getting resource data, stopped on 0 of 1
[?] can't find file_offset of VA 0x27492bc