filenamepgosweep.exe
size50008 (0xc358)
md5c666d86632460944caf60bf3da541994
typePE32 executable (console) ARMv7 Thumb, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
203506282
205506282
2065062817
2075062813
10145
203506129
201506281
211506284
204506281

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x1c4
NumberOfSections6
TimeDateStamp0x5011b78c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion11.0
SizeOfCode0x3000
SizeOfInitializedData0x6e00
SizeOfUninitializedData0
AddressOfEntryPoint0x1d59
BaseOfCode0x1000
BaseOfData0x4000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.2
ImageVersion10.0
SubsystemVersion6.2
Reserved10
SizeOfImage0x2e000
SizeOfHeaders0x400
CheckSum0x15a75
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2f480x3000R-X CODE
.rdata0x40000x1c6c0x1e00R-- IDATA
.data0x60000x21dd80x200RW- IDATA
.pdata0x280000x2e00x400R-- IDATA
.rsrc0x290000x3e880x4000R-- IDATA
.reloc0x2d0000x9d60xa00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x510c0x78
RESOURCE0x290000x3e88
EXCEPTION0x280000x2e0
SECURITY0xa2000x2158
BASERELOC0x2d0000x318
DEBUG0x42600x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x40000x238
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#13501252
STRING#21401252
STRING#42321252
STRING#511241252
STRING#67221252
STRING#71181252
STRING#114041252
STRING#125401252
STRING#133201252
STRING#633301252
STRING#658421252
STRING#666801252
STRING#677381252
STRING#69341252
STRING#6266021252
STRING#627421252
STRING#7511981252
STRING#7579521252
STRING#7584321252
STRING#75912521252
STRING#7606581252
STRING#8762821252
STRING#8822421252
STRING#9382381252
STRING#9443781252
STRING#9451701252
STRING#12516101252
STRING#12524341252
VERSION#19681252
MANIFEST#14101252
idlangstring
11033An unexpected internal error was detected in source file '%1', line %2!d!.
21033Out of memory. Please increase the size of the page file.
31033Unhandled exception: %1.
241033The profile database '%1' has an incompatible format.
611033The option '/%1' requires an argument.
621033The option '/%1' must be provided.
631033Unrecognized option '%1'.
651033The argument '%2!ld!' provided for the option '/%1' is invalid.
661033The option '/%2' conflicts with the option '/%1'.
671033The option '%1' was specified more than once, last occurrence was used.
681033The option '/%1' must be used with '/%2'.
691033Please specify a .PGD file.
701033Please specify exactly one .PGD file.
711033'/%1' must be combined with an output option.
721033Cannot get value of environment variable '%1'.
731033Invalid warning number '%1'.
741033Too many arguments (from command line and/or environment variables '%1' and '_%1_'), only the first %2!d! arguments will be used.
811033Unable to open file '%1' for reading.
871033Unable to open file '%1' for writing.
901033Read I/O operation on file '%1' failed.
911033Write I/O operation on file '%1' failed.
921033Unable to get full path name for '%1'.
941033Not enough virtual memory to map file %1. Please increase the pagefile size.
951033The specified filename '%1' does not appear to be a .PGD or .PGC file.
961033Cannot determine windows system directory.
1651033Reading '%1' : '%2'.
1661033Missing or invalid stream '%1''%2' in '%3'.
1671033There was a problem updating .PGD file '%1'.
1681033Couldn't open func %s in module %s
1691033Couldn't open module %s in PGD file %s
1811033The .PGC file '%1' has already been merged (added) into the profile database '%2'. Ignored.
1821033The .PGC file '%1' has already been merged (subtracted) from the profile database '%2'.
1871033The .PGC file '%1' is not valid.
1881033No .PGC files matching '%1' were found.
2001033.PGD file '%1' was generated for a different machine type than image.
2011033No machine specified, defaulting to '%1'.
2021033Unknown machine '%1' specified.
10001033The .PGD file '%1' does not contain any profile data.
10011033The .PGD file '%1' is already optimized; no changes made. Use -force to force reoptimization.
10301033Cannot dynamically load PSAPI.DLL.
10311033PSAPI.DLL is invalid or out of date.
10321033Can find no running instrumented instance of image '%1'.
10331033Cannot access file mapping '%1'.
10341033Cannot open PGODRIVER.SYS.
10351033Cannot create PGC/PGD Id.
10361033Interrupted by allocation. Retrying...
10371033DeviceIoControl failed to communicate with PGODRIVER.SYS.
10381033Access denied while attempting to open a mutex '%1'
10391033Failed waiting for quiet time to sweep.
10511033The file '%1' is not a valid instrumentation data file (.PGC).
10521033The instrumentation data file '%1' belongs to a different profile database.
10531033The instrumentation data file '%1' is inconsistent because one or more threads terminated abnormally.
10541033A later .PGC file must be merge-added before the .PGC file '%1' can be subtracted.
10561033Please specify only one of /clear or .PGC files to merge, not both.
10581033The .PGC file '%1' file was generated by an incompatible revision of the profile runtime.
10591033The instrumented executable is not sweepable
10601033Please specify '/merge', '/clear', or '/summary'.
10611033Couldn't read profile data for '%s'.
10701033The .PGD file '%1' contains inconsistent function information.
11001033
100001033Copyright (C) Microsoft Corporation. All rights reserved.
100011033fatal error
100021033warning
100031033error
100041033access violation
100051033breakpoint
100061033datatype misalignment
100071033illegal instruction
100081033in page error
100091033priviledged instruction
100101033stack overflow
100111033unknown exception
100121033%s exception at 0x%p
100131033%s attempting to %s at 0x%p
100141033read
100151033write
100161033POGO
120001033Microsoft (R) Profile Guided Optimization Manager
120011033PGOMGR
120021033Microsoft (R) PGO Manager
121001033Usage: PGOMGR [options] [Profile-Count-Paths ...] Profile-Database
121011033
121021033Options:
121031033
121041033/? Display this help
121051033/help Display this help
121061033/clear Remove all merge data from this data base
121071033/detail Display verbose program statistics
121081033/merge[:n] Merge the given PGC file(s), with optional integer weight
121101033/summary Display program statistics
121111033/unique Display decorated function names
121131033
121201033Merging %s
121211033PGD File: %s
121221033 Module Count: %d Function Count: %d Arc Count: %d Value Count: %d
121231033Reading and annotating function control flow graphs...
121241033Done
121251033Module %s:
121261033 Old # %d
121271033 New # %d
121281033 Merge # %d
121291033 [Copy New; Old Synthesized]
121301033 %d data sets
121311033 %-20.20s block: %5.1f%% arc: %5.1f%% inst: %5.1f%% %-20.20s functions called: %5.1f%%
121321033 Static instructions: %I64u Basic blocks: %u Average BB size:%4.1f
121331033Dynamic instructions: %I64u
121341033%-30.30s entry static dynamic %% run
121351033%-30.30s count instr instr total total
121361033Function Name
121371033 Excel-friendly coverage follows module_name function_name
121381033blocks_covered total_blocks arcs_covered total_arcs inst_covered total_inst
121391033block_coverage arc_coverage inst_coverage
121401033Module name
121411033Function name
121421033Block %
121431033Arc %
121441033Instr %
121451033 case %3ld: taken %8I64u
121461033 default: taken %8I64u
121471033 taken (%3d) %8I64u, not-taken %8I64u
121481033Never executed
121491033 block %u: never executed
121501033 block %u: switch case %ld never seen
121511033 block %u: switch default case never seen
121521033 block %u: branch never taken
121531033 block %u: branch never falls through
121541033Blk
121551033Overall
140001033Microsoft (R) Profile Guided Optimization Database to Object Converter
140011033PGOCVT
140021033Microsoft (R) PGO Database to Object Converter
141001033Usage: PGOCVT [options] [files]
141011033
141021033Options:
141031033
141041033/NOLOGO
141051033/OUT:filename
141061033/MACHINE:targetmachine
141071033/VERBOSE
150001033Microsoft (R) Profile Guided Optimization Sweeping Utility
150011033PGOSWEEP
150021033Microsoft (R) PGO Sweeping Utility
151001033Usage: PGOSWEEP [options] Instrumented-Executable Output-PGC-Name
151011033Options:
151021033/? Display this help
151031033/help Display this help
151041033/noreset Do not reset counts to zero after sweep
200011033Ok
200021033Unspecified Error
200031033File not found
200041033Sharing violation
200051033Unhandled PDB error
200061033Not a PGD (signature mismatch)
200071033PGD version is not supported (version mismatch)
200081033PGD file is read-only
200101033Out of memory
200111033Bad function parameter
200121033No data of the requested type
200131033PGD not open
200141033Module not open
200151033Function not open
200161033PGD stream '%s' is missing
200171033PGD stream '%s' is invalid
200181033Unable to replace PGD stream '%s'
200191033Unable to write PGD stream '%s'
200201033Unable to append to PGD stream '%s'
200211033Unable to open PGD stream '%s'
200221033Unknown error
module_namehintordfunction_name
KERNEL32.dll1017OpenMutexW
KERNEL32.dll615GetLastError
KERNEL32.dll1013OpenFileMappingW
KERNEL32.dll1164ReleaseMutex
KERNEL32.dll142CloseHandle
KERNEL32.dll1452VirtualFree
KERNEL32.dll744GetSystemDirectoryW
KERNEL32.dll1499WideCharToMultiByte
KERNEL32.dll953LoadLibraryW
KERNEL32.dll214CreateFileW
KERNEL32.dll690GetProcAddress
KERNEL32.dll1449VirtualAlloc
KERNEL32.dll300DeviceIoControl
KERNEL32.dll435FormatMessageW
KERNEL32.dll963LocalFree
KERNEL32.dll1276SetEvent
KERNEL32.dll1465WaitForSingleObject
KERNEL32.dll239CreateProcessW
KERNEL32.dll547GetCurrentProcessId
KERNEL32.dll202CreateEventW
KERNEL32.dll229CreateMutexW
KERNEL32.dll546GetCurrentProcess
KERNEL32.dll312DuplicateHandle
KERNEL32.dll976MapViewOfFile
KERNEL32.dll1373Sleep
KERNEL32.dll368ExpandEnvironmentStringsW
KERNEL32.dll798GetVersion
KERNEL32.dll1302SetLastError
KERNEL32.dll956LoadResource
KERNEL32.dll419FindResourceW
KERNEL32.dll638GetModuleHandleW
KERNEL32.dll634GetModuleFileNameW
KERNEL32.dll387FindClose
KERNEL32.dll410FindNextFileW
KERNEL32.dll398FindFirstFileW
KERNEL32.dll845HeapFree
KERNEL32.dll695GetProcessHeap
KERNEL32.dll841HeapAlloc
KERNEL32.dll775GetThreadPreferredUILanguages
KERNEL32.dll1344SetThreadPreferredUILanguages
KERNEL32.dll952LoadLibraryExW
KERNEL32.dll1519WriteFile
KERNEL32.dll523GetConsoleOutputCP
KERNEL32.dll460GetCPInfo
KERNEL32.dll519GetConsoleMode
KERNEL32.dll597GetFileType
KERNEL32.dll576GetEnvironmentVariableW
KERNEL32.dll782GetTickCount64
KERNEL32.dll753GetSystemTimeAsFileTime
KERNEL32.dll551GetCurrentThreadId
KERNEL32.dll1073QueryPerformanceCounter
KERNEL32.dll278DecodePointer
KERNEL32.dll315EncodePointer
KERNEL32.dll1466WaitForSingleObjectEx
KERNEL32.dll977MapViewOfFileEx
KERNEL32.dll211CreateFileMappingW
KERNEL32.dll1425UnmapViewOfFile
MSVCR110.dll1410fflush
MSVCR110.dll1555strlen
MSVCR110.dll1165_unlock
MSVCR110.dll390__dllonexit
MSVCR110.dll810_lock
MSVCR110.dll976_onexit
MSVCR110.dll496_calloc_crt
MSVCR110.dll387__crtSetUnhandledExceptionFilter
MSVCR110.dll313void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR110.dll511_commode
MSVCR110.dll596_fmode
MSVCR110.dll512_configthreadlocale
MSVCR110.dll440__setusermatherr
MSVCR110.dll438__set_app_type
MSVCR110.dll345_XcptFilter
MSVCR110.dll461__winitenv
MSVCR110.dll700_initterm
MSVCR110.dll701_initterm_e
MSVCR110.dll349__C_specific_handler
MSVCR110.dll569_exit
MSVCR110.dll497_cexit
MSVCR110.dll474_amsg_exit
MSVCR110.dll460__wgetmainargs
MSVCR110.dll113void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR110.dll1070_splitpath_s
MSVCR110.dll1604wcscat_s
MSVCR110.dll1119_strupr_s
MSVCR110.dll115void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCR110.dll1241_wcsicmp
MSVCR110.dll1237_wcsdup
MSVCR110.dll1407fclose
MSVCR110.dll1609wcscpy_s
MSVCR110.dll1436fseek
MSVCR110.dll1305_wfullpath
MSVCR110.dll1441fwrite
MSVCR110.dll1428fread
MSVCR110.dll1325_wremove
MSVCR110.dll1304_wfsopen
MSVCR110.dll112public: virtual __cdecl type_info::~type_info(void)

??1type_info@@UAA@XZ

MSVCR110.dll1489malloc
MSVCR110.dll1430free
MSVCR110.dll1402exit
MSVCR110.dll1513putchar
MSVCR110.dll355__CxxFrameHandler3
MSVCR110.dll1124_swprintf_c
MSVCR110.dll330_CxxThrowException
MSVCR110.dll1360_wtoi
MSVCR110.dll1612wcslen
MSVCR110.dll1425fputs
MSVCR110.dll650_get_osfhandle
MSVCR110.dll583_fileno
MSVCR110.dll400__iob_func
MSVCR110.dll524_cputws
MSVCR110.dll1209_vsnwprintf_s
MSVCR110.dll1631wcstoul
MSVCR110.dll1617wcsncpy_s
MSVCR110.dll798_itow_s
MSVCR110.dll1614wcsncat_s
MSVCR110.dll1606wcscmp
MSVCR110.dll1574swscanf_s
MSVCR110.dll1281_wdupenv_s
MSVCR110.dll1605wcschr
MSVCR110.dll560_errno
MSVCR110.dll1628wcstol
MSVCR110.dll1598vswprintf_s
MSVCR110.dll1627wcstok_s
MSVCR110.dll1504memset
MSVCR110.dll326public: virtual char const * __cdecl std::exception::what(void)const

?what@exception@std@@UBAPBDXZ

MSVCR110.dll107public: virtual __cdecl std::exception::~exception(void)

??1exception@std@@UAA@XZ

MSVCR110.dll46public: __cdecl std::exception::exception(void)

??0exception@std@@QAA@XZ

MSVCR110.dll45public: __cdecl std::exception::exception(class std::exception const &)

??0exception@std@@QAA@ABV01@@Z

MSVCR110.dll1500memcpy
MSVCR110.dll1572swprintf_s
MSVCR110.dll1501memcpy_s
MSVCR110.dll1317_wpgmptr
USER32.dll60CharUpperW
ole32.dll24CoCreateGuid
ADVAPI32.dll662RegQueryValueExW
ADVAPI32.dll649RegOpenKeyExW
ADVAPI32.dll600RegCloseKey

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft® Profile Guided Optimization Count Sweep Utility
FileVersion11.00.50727.1 built by: RTMREL
InternalNamePGOSWEEP.EXE
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamePGOSWEEP.EXE
ProductNameMicrosoft® Visual Studio® 2012
ProductVersion11.00.50727.1

VS_FIXEDFILEINFO

FileVersion11.0.50727.1
ProductVersion11.0.50727.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA 2010
serial: 6105495500000000000B

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:49:55:00:00:00:00:00:0b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2010
        Validity
            Not Before: Oct 10 20:45:24 2011 GMT
            Not After : Jan 10 20:55:24 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:30:31:81:51:16:86:e5:55:cc:34:60:b6:
                    96:45:29:5f:2b:ef:08:a4:d2:d6:17:2b:f3:ce:05:
                    b0:e5:72:43:a4:cc:ed:9b:5c:3b:1e:e4:11:e9:2a:
                    59:fd:9c:71:72:78:20:2c:9b:1a:38:81:1e:8b:5b:
                    a4:62:f3:fd:e4:06:c8:f8:7d:8d:b1:d4:af:61:07:
                    ba:eb:e8:44:9f:39:aa:ce:b2:93:dc:54:fd:4b:e0:
                    26:44:4f:57:f0:f8:ef:23:1a:4a:6a:03:e6:14:f4:
                    e9:d8:a9:36:ae:77:14:ad:bc:f0:f5:e6:da:34:f0:
                    f2:ca:4f:7b:02:b0:5f:d4:fe:0f:75:b8:93:39:7d:
                    7f:06:8f:61:9d:52:e4:9e:12:c6:b2:86:c8:f3:7e:
                    06:3a:d6:78:c8:94:3d:c7:47:88:bf:27:16:c6:72:
                    83:8f:cf:ff:9e:70:57:e4:30:b8:db:06:11:27:63:
                    ce:61:15:28:96:96:7f:87:97:d0:bb:62:64:02:40:
                    8b:22:be:2b:5e:b9:a3:01:77:72:e7:d3:4e:7c:02:
                    13:55:7e:c0:c0:06:5c:a6:a9:7e:40:ee:36:dd:74:
                    64:af:57:24:b3:58:f6:90:6b:9e:55:67:18:5a:b8:
                    90:ea:da:c7:2e:e3:b4:69:aa:3b:b9:db:25:e1:03:
                    d6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                69:F8:B2:F7:31:FA:B9:62:18:83:71:58:FB:A8:E2:C2:F9:D8:78:61
            X509v3 Authority Key Identifier: 
                E6:FC:5F:7B:BB:22:00:58:E4:72:4E:B5:F4:21:74:23:32:E6:EF:AC
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        78:8a:5b:e0:5a:6d:23:7d:75:09:9b:90:17:80:fa:ca:6a:9d:
        27:aa:45:d3:92:85:ef:bc:4e:86:bc:bc:c4:a7:65:b9:dd:85:
        d8:0c:4a:b8:a6:95:f0:0f:87:53:78:41:0a:88:30:a4:b1:20:
        54:16:16:1e:14:a1:16:27:b3:59:b4:68:c5:38:b0:1d:2e:3f:
        10:bf:69:c3:4c:fe:83:0c:9d:98:4c:78:0a:96:bb:50:b4:3a:
        4d:92:f2:03:3f:2b:95:93:cb:c8:d9:52:3d:4d:18:6b:19:26:
        5a:fd:5c:6a:40:4b:ae:f7:e1:d4:31:28:c8:7c:ea:54:a9:a1:
        d7:70:3f:76:80:59:1a:d0:10:da:f7:fe:f6:1a:9f:05:30:8a:
        6e:c0:ba:6d:fd:2e:0c:24:58:39:4d:52:6c:6a:e4:d9:06:df:
        08:80:5b:41:53:8d:7b:02:c1:54:31:0d:cb:c2:e8:a4:05:44:
        10:85:c7:41:f9:bb:05:7e:52:82:84:69:3f:63:32:e3:4b:df:
        57:38:ae:88:58:c2:97:d4:ee:d1:40:63:ef:2d:6d:6b:b0:7c:
        2b:91:3b:fc:e8:42:ba:8a:2b:10:c5:07:39:c7:40:8d:d2:11:
        22:51:70:b8:41:a0:1d:01:f6:0a:19:60:fc:82:26:b0:c7:a9:
        63:df:d8:85

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:52:4c:00:00:00:00:00:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Jul  6 20:40:17 2010 GMT
            Not After : Jul  6 20:50:17 2025 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:0e:64:50:79:67:b5:c4:e3:fd:09:00:4c:9e:
                    94:ac:f7:56:68:ea:44:d8:cf:c5:58:4f:a9:a5:76:
                    7c:6d:45:ba:d3:39:92:b4:a4:1e:f9:f9:65:82:e4:
                    17:d2:8f:fd:44:9c:08:e8:65:93:ce:2c:55:84:bf:
                    7d:08:e3:2e:2b:a8:41:2b:18:b7:a2:4b:6e:49:4c:
                    6b:15:07:de:d1:d2:c2:89:1e:71:94:cd:b5:7f:4b:
                    b4:af:08:d8:cc:88:d6:6b:17:94:3a:93:ce:26:3f:
                    ec:e6:fe:34:98:57:d5:1d:5d:49:f6:b2:2a:2e:d5:
                    85:bb:59:3f:f8:90:b4:2b:83:74:ca:2b:b3:3b:46:
                    e3:f0:46:49:c1:17:66:54:c9:1c:bd:1d:c4:55:62:
                    57:72:f8:67:b9:25:20:34:de:5d:a6:a5:95:5e:ab:
                    28:80:cd:d5:b2:9e:e5:03:b5:63:d3:b2:14:c8:c1:
                    c8:8a:26:0a:59:7f:07:ec:ff:0e:ed:80:12:35:4c:
                    12:a6:be:52:5b:f5:a6:da:e0:8b:0b:48:77:d6:85:
                    47:d5:10:b9:c6:e8:aa:ee:8b:6a:2d:05:5c:60:c6:
                    b4:2a:5b:9c:23:1c:5f:45:e3:1a:14:1e:6f:37:cb:
                    19:33:80:6a:89:4d:a3:6a:66:63:78:93:d5:30:cf:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                E6:FC:5F:7B:BB:22:00:58:E4:72:4E:B5:F4:21:74:23:32:E6:EF:AC
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.46.3
                  CPS: http://www.microsoft.com/PKI/docs/CPS/default.htm
                  User Notice:
                    Explicit Text:  
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1a:74:ef:57:4f:29:7b:c4:16:85:78:b8:50:d3:22:fc:09:9d:
        ac:82:97:f8:34:ff:2a:2c:97:95:12:e5:e4:bf:cf:bf:93:c8:
        e3:34:a9:db:81:b8:dc:1e:00:be:d2:35:6f:af:e5:7f:79:95:
        77:e5:02:d4:f1:eb:d8:cd:4e:1e:1b:61:a2:c2:5a:23:1a:f0:
        8c:a8:62:51:45:67:08:e3:3f:3c:1e:93:f8:30:85:17:c8:39:
        40:a6:d7:0e:b3:21:29:e5:a5:a1:69:8c:22:93:cc:74:98:e7:
        a1:47:43:f2:53:ac:c0:0f:30:69:7f:fe:d2:25:20:6d:6f:61:
        d3:df:07:d5:d9:72:00:2c:69:86:76:3d:51:db:a6:39:48:c9:
        37:61:6d:07:dd:53:19:cb:a7:d6:61:c2:bf:e2:83:ab:0f:e0:
        6b:9b:95:d6:7d:28:51:b0:89:4a:51:a4:9a:6c:c8:b7:1f:4a:
        1a:0e:69:a9:d7:dc:c1:7e:d1:49:70:aa:b6:ad:bb:72:47:63:
        17:fa:a6:d6:a2:a6:86:ec:a8:10:44:9b:63:b6:b2:69:89:06:
        c7:46:86:7a:18:3f:e8:c5:1d:21:d5:7b:f9:02:23:2d:c5:41:
        cb:bf:1d:4c:c8:16:ef:b1:9c:7f:fc:22:4b:49:8a:6e:15:e3:
        a6:7f:76:5b:d1:53:79:91:85:9d:d5:d2:db:3d:73:35:f3:3c:
        ae:54:b2:52:47:6a:c0:aa:13:95:d2:8e:11:da:99:67:5e:32:
        8c:fb:37:85:d1:dc:75:85:9c:87:c6:5a:57:85:c2:bf:dd:0d:
        8f:8c:9b:2d:eb:b4:ee:cf:27:d3:b5:5e:69:fa:a4:16:04:01:
        a7:24:67:73:cf:4d:4f:b6:de:05:56:97:7a:f7:e9:52:4d:f4:
        77:05:4f:85:c6:d8:0b:f1:8e:ed:42:09:d1:0d:76:e3:23:56:
        78:22:26:36:be:ca:b1:8c:6e:aa:1d:e4:85:da:47:33:62:8f:
        a4:c9:91:33:5f:71:1e:40:af:98:65:c9:22:e8:42:21:25:8a:
        1c:2d:60:d9:37:89:41:89:2a:16:0f:d7:61:3c:94:68:60:52:
        ef:d6:47:99:a0:80:40:ee:15:81:77:3e:9c:e0:53:18:1a:50:
        1d:38:95:9b:1e:66:33:13:27:39:17:78:87:36:ce:4e:c3:5f:
        b2:f5:3d:47:53:b6:e0:e5:db:0b:61:3d:2a:d7:92:2c:ce:37:
        5a:3e:40:42:31:a4:1f:10:08:c2:56:9c:bf:24:5d:51:02:9d:
        6a:79:d2:17:d3:da:c1:94:8e:07:7b:25:71:44:ab:06:6a:e6:
        d4:c6:df:23:9a:96:75:c5

undefined method `first' for #

offsetsizetypecomment
041472EXE07/26/2012 21:33:00#
15c115HTM#
a2008536PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK