World of Warcraft Launcher.exe - World of Warcraft Launcher

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	World of Warcraft Launcher.exe
size	4698600 (0x47b1e8)
md5	d76af52b8f8f8cc12585487879581e0d

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x120

Rich Header

lib id	version	times used
259	25203	22
261	25203	206
260	25203	24
199	41118	7
259	25930	32
261	25930	131
260	25930	44
262	25203	2
260	25547	332
1	0	505
257	25203	35
260	26129	95
261	26129	39
265	26129	376
255	26129	1
258	26129	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5b89c5b2
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.13
SizeOfCode	0x2a7a00
SizeOfInitializedData	0x1d1c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x14b124
BaseOfCode	0x1000
BaseOfData	0x2a9000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x4d8000
SizeOfHeaders	0x400
CheckSum	0x47e2a9
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x2a78ac	0x2a7a00	R-X CODE
.rdata	0x2a9000	0xfce5c	0xfd000	R-- IDATA
.data	0x3a6000	0x895f4	0x2d000	RW- IDATA
.rsrc	0x430000	0x83b68	0x83c00	R-- IDATA
.reloc	0x4b4000	0x23fac	0x24000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3a399c	0x154
RESOURCE	0x430000	0x83b68
EXCEPTION	0	0
SECURITY	0x479a00	0x17e8
BASERELOC	0x4b4000	0x23fac
DEBUG	0x36f200	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x36f2f8	0x18
LOAD_CONFIG	0x36f258	0x40
Bound_IAT	0	0
IAT	0x2a9000	0x6c8
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x781348	0x7813b5	0x7d341c	0x6a9998	0	0x400000

show previews

type	name	size	cp
FONT	BLIZZARDREG.TTF	91680	1252
JSON	SCREEN.BOOTSTRAP.JSON	938	1252
JSON	SCREEN.ERROR.JSON	1624	1252
JSON	SCREEN.INSTALL.JSON	1518	1252
JSON	SCREEN.LANGUAGE.JSON	1360	1252
JSON	SCREEN.SPLASH.JSON	2815	1252
JSON	SETTINGS.JSON	476	1252
PNG	BG_LANGUAGE_SELECT.PNG	32466	1252
PNG	BG_SMALL_WINDOW.PNG	25427	1252
PNG	BTN_CHK_BOX.PNG	1025	1252
PNG	BTN_CHK_MARK.PNG	1221	1252
PNG	BTN_LONG_DISABLED.PNG	1294	1252
PNG	BTN_LONG_DOWN.PNG	1342	1252
PNG	BTN_LONG_NORMAL.PNG	1355	1252
PNG	BTN_LONG_OVER.PNG	1358	1252
PNG	BTN_SMALL_DISABLED.PNG	249	1252
PNG	BTN_SMALL_DOWN.PNG	317	1252
PNG	BTN_SMALL_NORMAL.PNG	1070	1252
PNG	BTN_SMALL_OVER.PNG	1080	1252
PNG	BTN_WIN_CLOSE_HOVER.PNG	1199	1252
PNG	BTN_WIN_CLOSE_NORMAL.PNG	1060	1252
PNG	BTN_WIN_MINIMIZE_HOVER.PNG	1111	1252
PNG	BTN_WIN_MINIMIZE_NORMAL.PNG	1021	1252
PNG	IMG_DENY.PNG	1113	1252
PNG	IMG_ERROR_SHADE.PNG	665	1252
PNG	IMG_LINE_H.PNG	938	1252
PNG	IMG_LINK.PNG	1227	1252
PNG	PROGRESSBAR_LARGE_EMPTY.PNG	2972	1252
PNG	PROGRESSBAR_LARGE_FULL.PNG	2382	1252
PNG	PROGRESSBAR_LEAD.PNG	1802	1252
PNG	PROGRESSBAR_SMALL_EMPTY.PNG	2958	1252
PNG	PROGRESSBAR_SMALL_FULL.PNG	2279	1252
PNG	RADIOBUTTON_BG.PNG	1222	1252
PNG	RADIOBUTTON_SELECTION.PNG	1471	1252
PNG	WOW_BACKGROUND.PNG	305632	1252
STRINGS	STRINGS.BIN	18165	1252
ICON	#1	9640	1252
ICON	#2	4264	1252
ICON	#3	2440	1252
ICON	#4	1128	1252
GROUP_ICON	ICON	62	1252
VERSION	#1	908	1252
MANIFEST	#1	1360	1252

module_name	hint	ord	function_name
ADVAPI32.dll	535		OpenSCManagerW
ADVAPI32.dll	537		OpenServiceW
ADVAPI32.dll	587		QueryServiceConfigW
ADVAPI32.dll	101		CloseServiceHandle
ADVAPI32.dll	651		RegOpenKeyExA
ADVAPI32.dll	664		RegQueryValueExA
ADVAPI32.dll	603		RegCloseKey
ADVAPI32.dll	626		RegDeleteValueA
ADVAPI32.dll	533		OpenProcessToken
ADVAPI32.dll	368		GetTokenInformation
ADVAPI32.dll	122		ConvertSidToStringSidA
ADVAPI32.dll	611		RegCreateKeyExA
ADVAPI32.dll	680		RegSetValueExA
ADVAPI32.dll	538		OpenThreadToken
ADVAPI32.dll	240		DuplicateToken
ADVAPI32.dll	32		AllocateAndInitializeSid
ADVAPI32.dll	5		AccessCheck
ADVAPI32.dll	681		RegSetValueExW
ADVAPI32.dll	665		RegQueryValueExW
ADVAPI32.dll	431		LookupPrivilegeValueW
ADVAPI32.dll	31		AdjustTokenPrivileges
ADVAPI32.dll	129		ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll	703		ReportEventA
ADVAPI32.dll	685		RegisterEventSourceA
ADVAPI32.dll	237		DeregisterEventSource
ADVAPI32.dll	379		GetUserNameW
ADVAPI32.dll	241		DuplicateTokenEx
ADVAPI32.dll	88		BuildTrusteeWithSidW
ADVAPI32.dll	512		MapGenericMask
ADVAPI32.dll	325		GetFileSecurityW
ADVAPI32.dll	343		GetNamedSecurityInfoW
ADVAPI32.dll	739		SetNamedSecurityInfoW
ADVAPI32.dll	121		ConvertSecurityDescriptorToStringSecurityDescriptorW
ADVAPI32.dll	728		SetEntriesInAclW
ADVAPI32.dll	203		CryptEncrypt
ADVAPI32.dll	219		CryptImportKey
ADVAPI32.dll	200		CryptDestroyKey
ADVAPI32.dll	199		CryptDestroyHash
ADVAPI32.dll	217		CryptHashData
ADVAPI32.dll	196		CryptCreateHash
ADVAPI32.dll	213		CryptGetHashParam
ADVAPI32.dll	210		CryptGenRandom
ADVAPI32.dll	220		CryptReleaseContext
ADVAPI32.dll	193		CryptAcquireContextA
WS2_32.dll		15
WS2_32.dll		21
WS2_32.dll		1
WS2_32.dll	58		WSAIoctl
WS2_32.dll		151
WS2_32.dll		18
WS2_32.dll		115
WS2_32.dll		6
WS2_32.dll		5
WS2_32.dll		4
WS2_32.dll		3
WS2_32.dll		2
WS2_32.dll		23
WS2_32.dll	149		freeaddrinfo
WS2_32.dll		10
WS2_32.dll		7
WS2_32.dll		8
WS2_32.dll		14
WS2_32.dll		116
WS2_32.dll		9
WS2_32.dll		112
WS2_32.dll		22
WS2_32.dll		17
WS2_32.dll		19
WS2_32.dll		16
WS2_32.dll		111
WS2_32.dll		20
WS2_32.dll		13
WS2_32.dll		57
WS2_32.dll	150		getaddrinfo
WLDAP32.dll		46
WLDAP32.dll		143
WLDAP32.dll		211
WLDAP32.dll		60
WLDAP32.dll		45
WLDAP32.dll		50
WLDAP32.dll		301
WLDAP32.dll		200
WLDAP32.dll		30
WLDAP32.dll		41
WLDAP32.dll		22
WLDAP32.dll		26
WLDAP32.dll		27
WLDAP32.dll		32
WLDAP32.dll		33
WLDAP32.dll		35
WLDAP32.dll		79
CRYPT32.dll	184		CryptMsgGetParam
CRYPT32.dll	64		CertFreeCertificateContext
CRYPT32.dll	177		CryptMsgClose
CRYPT32.dll	200		CryptQueryObject
CRYPT32.dll	75		CertGetNameStringW
CRYPT32.dll	53		CertFindCertificateInStore
CRYPT32.dll	18		CertCloseStore
MSIMG32.dll			AlphaBlend
RPCRT4.dll	524		RpcStringFreeA
RPCRT4.dll	534		UuidCreate
RPCRT4.dll	542		UuidToStringA
VERSION.dll	7		GetFileVersionInfoSizeW
VERSION.dll	16		VerQueryValueW
VERSION.dll	8		GetFileVersionInfoW
KERNEL32.dll	583		GetFileSize
KERNEL32.dll	755		GetThreadContext
KERNEL32.dll	606		GetLocalTime
KERNEL32.dll	859		InitializeCriticalSectionEx
KERNEL32.dll	605		GetLastError
KERNEL32.dll	1115		RaiseException
KERNEL32.dll	959		LoadLibraryW
KERNEL32.dll	263		DecodePointer
KERNEL32.dll	682		GetProcAddress
KERNEL32.dll	270		DeleteCriticalSection
KERNEL32.dll	628		GetModuleHandleW
KERNEL32.dll	425		FreeLibrary
KERNEL32.dll	771		GetTickCount
KERNEL32.dll	791		GetVersionExW
KERNEL32.dll	965		LocalAlloc
KERNEL32.dll	969		LocalFree
KERNEL32.dll	1030		OpenProcess
KERNEL32.dll	134		CloseHandle
KERNEL32.dll	783		GetUserDefaultLangID
KERNEL32.dll	533		GetCurrentProcess
KERNEL32.dll	537		GetCurrentThread
KERNEL32.dll	837		HeapFree
KERNEL32.dll	1294		SetEvent
KERNEL32.dll	833		HeapAlloc
KERNEL32.dll	688		GetProcessHeap
KERNEL32.dll	187		CreateEventA
KERNEL32.dll	1396		SizeofResource
KERNEL32.dll	980		LockResource
KERNEL32.dll	962		LoadResource
KERNEL32.dll	404		FindResourceW
KERNEL32.dll	1526		WideCharToMultiByte
KERNEL32.dll	1094		QueryPerformanceCounter
KERNEL32.dll	1095		QueryPerformanceFrequency
KERNEL32.dll	303		EnterCriticalSection
KERNEL32.dll	952		LeaveCriticalSection
KERNEL32.dll	1439		TryEnterCriticalSection
KERNEL32.dll	538		GetCurrentThreadId
KERNEL32.dll	297		DuplicateHandle
KERNEL32.dll	1488		WaitForSingleObjectEx
KERNEL32.dll	1397		Sleep
KERNEL32.dll	569		GetExitCodeThread
KERNEL32.dll	299		EncodePointer
KERNEL32.dll	1322		SetLastError
KERNEL32.dll	858		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	190		CreateEventW
KERNEL32.dll	1430		TlsAlloc
KERNEL32.dll	1432		TlsGetValue
KERNEL32.dll	1433		TlsSetValue
KERNEL32.dll	1431		TlsFree
KERNEL32.dll	741		GetSystemTimeAsFileTime
KERNEL32.dll	1000		MultiByteToWideChar
KERNEL32.dll	154		CompareStringW
KERNEL32.dll	940		LCMapStringW
KERNEL32.dll	609		GetLocaleInfoW
KERNEL32.dll	723		GetStringTypeW
KERNEL32.dll	447		GetCPInfo
KERNEL32.dll	1215		ResetEvent
KERNEL32.dll	534		GetCurrentProcessId
KERNEL32.dll	862		InitializeSListHead
KERNEL32.dll	890		IsDebuggerPresent
KERNEL32.dll	1445		UnhandledExceptionFilter
KERNEL32.dll	1381		SetUnhandledExceptionFilter
KERNEL32.dll	716		GetStartupInfoW
KERNEL32.dll	897		IsProcessorFeaturePresent
KERNEL32.dll	1412		TerminateProcess
KERNEL32.dll	1042		OutputDebugStringW
KERNEL32.dll	248		CreateTimerQueue
KERNEL32.dll	1395		SignalObjectAndWait
KERNEL32.dll	1407		SwitchToThread
KERNEL32.dll	241		CreateThread
KERNEL32.dll	1366		SetThreadPriority
KERNEL32.dll	765		GetThreadPriority
KERNEL32.dll	613		GetLogicalProcessorInformation
KERNEL32.dll	249		CreateTimerQueueTimer
KERNEL32.dll	120		ChangeTimerQueueTimer
KERNEL32.dll	280		DeleteTimerQueueTimer
KERNEL32.dll	645		GetNumaHighestNodeNumber
KERNEL32.dll	683		GetProcessAffinityMask
KERNEL32.dll	1355		SetThreadAffinityMask
KERNEL32.dll	1186		RegisterWaitForSingleObject
KERNEL32.dll	1454		UnregisterWait
KERNEL32.dll	426		FreeLibraryAndExitThread
KERNEL32.dll	624		GetModuleFileNameW
KERNEL32.dll	625		GetModuleHandleA
KERNEL32.dll	958		LoadLibraryExW
KERNEL32.dll	1470		VirtualAlloc
KERNEL32.dll	1476		VirtualProtect
KERNEL32.dll	1473		VirtualFree
KERNEL32.dll	1197		ReleaseSemaphore
KERNEL32.dll	873		InterlockedPopEntrySList
KERNEL32.dll	874		InterlockedPushEntrySList
KERNEL32.dll	871		InterlockedFlushSList
KERNEL32.dll	1084		QueryDepthSList
KERNEL32.dll	1455		UnregisterWaitEx
KERNEL32.dll	1487		WaitForSingleObject
KERNEL32.dll	1227		RtlUnwind
KERNEL32.dll	348		ExitProcess
KERNEL32.dll	627		GetModuleHandleExW
KERNEL32.dll	718		GetStdHandle
KERNEL32.dll	586		GetFileType
KERNEL32.dll	623		GetModuleFileNameA
KERNEL32.dll	1545		WriteConsoleW
KERNEL32.dll	349		ExitThread
KERNEL32.dll	1221		ResumeThread
KERNEL32.dll	477		GetComputerNameW
KERNEL32.dll	1546		WriteFile
KERNEL32.dll	432		GetACP
KERNEL32.dll	1249		SetConsoleCtrlHandler
KERNEL32.dll	413		FlushFileBuffers
KERNEL32.dll	488		GetConsoleCP
KERNEL32.dll	506		GetConsoleMode
KERNEL32.dll	1041		OutputDebugStringA
KERNEL32.dll	543		GetDateFormatW
KERNEL32.dll	776		GetTimeFormatW
KERNEL32.dll	904		IsValidLocale
KERNEL32.dll	782		GetUserDefaultLCID
KERNEL32.dll	338		EnumSystemLocalesW
KERNEL32.dll	1132		ReadFile
KERNEL32.dll	1307		SetFilePointerEx
KERNEL32.dll	778		GetTimeZoneInformation
KERNEL32.dll	371		FindClose
KERNEL32.dll	377		FindFirstFileExW
KERNEL32.dll	394		FindNextFileW
KERNEL32.dll	902		IsValidCodePage
KERNEL32.dll	659		GetOEMCP
KERNEL32.dll	468		GetCommandLineA
KERNEL32.dll	469		GetCommandLineW
KERNEL32.dll	563		GetEnvironmentStringsW
KERNEL32.dll	424		FreeEnvironmentStringsW
KERNEL32.dll	1291		SetEnvironmentVariableA
KERNEL32.dll	1346		SetStdHandle
KERNEL32.dll	842		HeapSize
KERNEL32.dll	1129		ReadConsoleW
KERNEL32.dll	202		CreateFileW
KERNEL32.dll	1288		SetEndOfFile
KERNEL32.dll	772		GetTickCount64
KERNEL32.dll	420		FormatMessageA
KERNEL32.dll	1400		SleepEx
KERNEL32.dll	1051		PeekNamedPipe
KERNEL32.dll	1485		WaitForMultipleObjects
KERNEL32.dll	351		ExpandEnvironmentStringsA
KERNEL32.dll	1465		VerSetConditionMask
KERNEL32.dll	731		GetSystemDirectoryA
KERNEL32.dll	956		LoadLibraryA
KERNEL32.dll	1468		VerifyVersionInfoA
KERNEL32.dll	1281		SetCurrentDirectoryW
KERNEL32.dll	527		GetCurrentDirectoryW
KERNEL32.dll	185		CreateDirectoryW
KERNEL32.dll	275		DeleteFileW
KERNEL32.dll	382		FindFirstFileW
KERNEL32.dll	550		GetDiskFreeSpaceExW
KERNEL32.dll	577		GetFileAttributesW
KERNEL32.dll	574		GetFileAttributesExW
KERNEL32.dll	579		GetFileInformationByHandle
KERNEL32.dll	585		GetFileTime
KERNEL32.dll	597		GetFullPathNameW
KERNEL32.dll	1202		RemoveDirectoryW
KERNEL32.dll	1301		SetFileAttributesW
KERNEL32.dll	1310		SetFileTime
KERNEL32.dll	283		DeviceIoControl
KERNEL32.dll	993		MoveFileExW
KERNEL32.dll	35		AreFileApisANSI
KERNEL32.dll	1017		OpenEventA
KERNEL32.dll	1390		SetWaitableTimer
KERNEL32.dll	735		GetSystemInfo
KERNEL32.dll	251		CreateWaitableTimerA
KERNEL32.dll	1408		SystemTimeToFileTime
KERNEL32.dll	988		Module32FirstW
KERNEL32.dll	1062		Process32Next
KERNEL32.dll	272		DeleteFileA
KERNEL32.dll	360		FileTimeToSystemTime
KERNEL32.dll	194		CreateFileA
KERNEL32.dll	753		GetTempPathA
KERNEL32.dll	250		CreateToolhelp32Snapshot
KERNEL32.dll	1406		SwitchToFiber
KERNEL32.dll	1405		SuspendThread
KERNEL32.dll	882		IsBadStringPtrA
KERNEL32.dll	1428		Thread32First
KERNEL32.dll	473		GetCompressedFileSizeW
KERNEL32.dll	1306		SetFilePointer
KERNEL32.dll	857		InitializeCriticalSection
KERNEL32.dll	1429		Thread32Next
KERNEL32.dll	690		GetProcessId
KERNEL32.dll	271		DeleteFiber
KERNEL32.dll	551		GetDiskFreeSpaceW
KERNEL32.dll	713		GetShortPathNameW
KERNEL32.dll	1222		RtlCaptureContext
KERNEL32.dll	884		IsBadWritePtr
KERNEL32.dll	1060		Process32First
KERNEL32.dll	584		GetFileSizeEx
KERNEL32.dll	1331		SetNamedPipeHandleState
KERNEL32.dll	794		GetVolumeInformationW
KERNEL32.dll	1469		VerifyVersionInfoW
KERNEL32.dll	990		Module32NextW
KERNEL32.dll	821		GlobalMemoryStatus
KERNEL32.dll	881		IsBadReadPtr
KERNEL32.dll	1588		lstrlenW
KERNEL32.dll	1475		VirtualLock
KERNEL32.dll	1480		VirtualUnlock
KERNEL32.dll	1193		ReleaseMutex
KERNEL32.dll	1584		lstrcpynA
KERNEL32.dll	555		GetDriveTypeW
KERNEL32.dll	1409		SystemTimeToTzSpecificLocalTime
KERNEL32.dll	1195		ReleaseSRWLockExclusive
KERNEL32.dll			AcquireSRWLockExclusive
KERNEL32.dll	412		FlushConsoleInputBuffer
KERNEL32.dll	214		CreateMutexA
KERNEL32.dll	816		GlobalFree
KERNEL32.dll	568		GetExitCodeProcess
KERNEL32.dll	1311		SetFileValidData
KERNEL32.dll	1494		WaitNamedPipeW
KERNEL32.dll	192		CreateFiberEx
KERNEL32.dll	163		ConvertThreadToFiber
KERNEL32.dll	996		MoveFileW
KERNEL32.dll	1478		VirtualQuery
KERNEL32.dll	191		CreateFiber
KERNEL32.dll	840		HeapReAlloc
KERNEL32.dll	1120		ReadConsoleInputA
KERNEL32.dll	1037		OpenThread
KERNEL32.dll	769		GetThreadTimes
KERNEL32.dll	1265		SetConsoleMode
USER32.dll	322		GetDesktopWindow
USER32.dll	421		GetProcessWindowStation
USER32.dll	460		GetUserObjectInformationW
USER32.dll	638		MessageBoxA
USER32.dll	661		OffsetRect
USER32.dll	89		CopyRect
USER32.dll	319		GetDC
USER32.dll	222		DrawTextW
USER32.dll	474		GetWindowLongW
USER32.dll	168		DefWindowProcW
USER32.dll	3		AdjustWindowRectEx
USER32.dll	480		GetWindowRect
USER32.dll	181		DestroyWindow
USER32.dll	871		SetWindowPos
USER32.dll	645		MessageBoxW
USER32.dll	115		CreateWindowExW
USER32.dll	781		SendMessageW
USER32.dll	444		GetSystemMetrics
USER32.dll	238		EnableWindow
USER32.dll	876		SetWindowTextW
USER32.dll	725		RegisterClassExW
USER32.dll	888		ShowWindow
USER32.dll	189		DispatchMessageW
USER32.dll	857		SetTimer
USER32.dll	676		PeekMessageW
USER32.dll	913		TrackMouseEvent
USER32.dll	920		TranslateMessage
USER32.dll	582		LoadIconW
USER32.dll	580		LoadCursorW
USER32.dll	785		SetCapture
USER32.dll	468		GetWindowDC
USER32.dll	869		SetWindowLongW
USER32.dll	943		UpdateLayeredWindow
USER32.dll	681		PostQuitMessage
USER32.dll	754		ReleaseCapture
USER32.dll	528		InvalidateRect
USER32.dll	547		IsIconic
USER32.dll	755		ReleaseDC
USER32.dll	318		GetCursorPos
USER32.dll	16		BeginPaint
USER32.dll	243		EndPaint
USER32.dll	329		GetDlgItem
USER32.dll	241		EndDialog
USER32.dll	184		DialogBoxIndirectParamW
USER32.dll	7		AllowSetForegroundWindow
USER32.dll	45		CharLowerA
USER32.dll	488		GetWindowThreadProcessId
USER32.dll	439		GetShellWindow
USER32.dll	281		GetActiveWindow
USER32.dll	338		GetForegroundWindow
GDI32.dll	55		CreateDIBSection
GDI32.dll	662		GetObjectW
GDI32.dll	365		DeleteObject
GDI32.dll	2		AddFontMemResourceEx
GDI32.dll	430		EnumFontFamiliesExW
GDI32.dll	68		CreateFontW
GDI32.dll	849		SetBkColor
GDI32.dll	842		SelectObject
GDI32.dll	49		CreateCompatibleDC
GDI32.dll	646		GetLayout
GDI32.dll	869		SetLayout
GDI32.dll	362		DeleteDC
GDI32.dll	890		SetTextColor
GDI32.dll	850		SetBkMode
GDI32.dll	872		SetMapMode
GDI32.dll	888		SetTextAlign
SHELL32.dll	357		SHGetMalloc
SHELL32.dll	135		SHBrowseForFolderW
SHELL32.dll	439		ShellExecuteExW
SHELL32.dll	345		SHGetFolderPathW
SHELL32.dll	365		SHGetPathFromIDListW
SHELL32.dll	438		ShellExecuteExA
SHELL32.dll	53		FindExecutableA
ole32.dll	40		CoCreateInstance
ole32.dll	137		CoTaskMemFree
WINTRUST.dll	136		WinVerifyTrust
WININET.dll	124		HttpQueryInfoA
WININET.dll	126		HttpSendRequestA
WININET.dll	148		InternetCloseHandle
WININET.dll	226		InternetSetStatusCallbackA
WININET.dll	197		InternetOpenA
WININET.dll	206		InternetReadFileExA
WININET.dll	214		InternetSetCookieW
WININET.dll	219		InternetSetOptionA
WININET.dll	157		InternetCrackUrlA
WININET.dll	119		HttpOpenRequestA
WININET.dll	154		InternetConnectA
WINHTTP.dll	28		WinHttpGetIEProxyConfigForCurrentUser
WINHTTP.dll	37		WinHttpOpen
WINHTTP.dll	7		WinHttpCloseHandle
WINHTTP.dll	29		WinHttpGetProxyForUrl
OLEAUT32.dll		9

StringTable 000004b0

LegalCopyright	© 2005-2018 Blizzard Entertainment Inc.
InternalName	World of Warcraft Launcher
FileVersion	1.16.1.2943
CompanyName	Blizzard Entertainment
ProductName	World of Warcraft Launcher
ProductVersion	1.16.1.2943
FileDescription	World of Warcraft Launcher
OriginalFilename	World of Warcraft Launcher.exe

VS_FIXEDFILEINFO

FileVersion	1.16.1.2943
ProductVersion	1.16.1.2943
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Assured ID Code Signing CA

serial: 0443B567BFFBAA3BC083FE45A46DD041

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Oct 22 12:00:00 2013 GMT
            Not After : Oct 22 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:b3:1c:7f:0e:11:af:67:77:07:d3:0b:31:
                    49:19:cf:d0:fb:45:99:b1:3a:db:44:f5:7f:e5:a8:
                    9d:db:32:d7:71:ea:76:9d:05:2e:b7:8f:fa:92:43:
                    c0:a5:f9:89:d4:37:19:d7:b6:aa:f0:9c:86:a5:d8:
                    25:ac:0e:79:28:3a:7e:e9:d1:67:d3:c6:fb:29:27:
                    c7:d3:7b:23:94:e4:91:23:96:90:77:82:f9:a1:84:
                    23:66:12:54:33:50:74:b1:28:26:bb:24:69:c2:c2:
                    52:f2:14:67:8a:89:45:d4:2d:a1:a3:e9:88:2c:20:
                    95:ae:1c:4a:87:08:df:0c:f5:e2:4d:60:18:be:aa:
                    c4:b2:ae:70:31:66:33:71:3e:ac:70:a2:ab:ce:7f:
                    e9:7c:cb:92:a1:e5:3b:31:1c:cf:ea:f2:0a:e4:57:
                    bb:4a:b5:e9:74:e6:2b:fe:6c:cb:7e:74:39:36:0d:
                    90:ef:e4:b5:4e:a4:a9:ea:6a:0a:ab:84:f3:ac:67:
                    4e:b5:c4:f7:8c:d1:20:25:23:eb:08:64:3e:52:96:
                    c1:f2:0f:12:f4:c5:8e:0f:c1:a2:e8:2c:51:f7:73:
                    bc:bd:85:b1:62:83:73:41:82:07:e4:38:8b:6a:73:
                    20:d0:0f:64:73:3c:9e:9f:a6:33:a9:fd:19:df:25:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.3
            X509v3 Subject Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Authority Key Identifier: 
                45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3e:ec:0d:5a:24:b3:f3:22:d1:15:c8:2c:7c:25:29:76:a8:1d:
        5d:1c:2d:3a:1a:c4:ef:30:61:d7:7e:0b:60:fd:c3:3d:0f:c4:
        af:8b:fd:ef:2a:df:20:55:37:b0:e1:f6:d1:92:75:0f:51:b4:
        6e:a5:8e:5a:e2:5e:24:81:4e:10:a4:ee:3f:71:8e:63:0e:13:
        4b:ad:d7:5f:44:79:f3:36:14:06:8a:f7:9c:46:4e:5c:ff:90:
        b1:1b:07:0e:91:15:fb:ba:af:b5:51:c2:8d:24:ae:24:c6:c7:
        27:2a:a1:29:28:1a:3a:71:28:02:3c:2e:91:a3:c0:25:11:e2:
        9c:14:47:a1:7a:68:68:af:9b:a7:5c:20:5c:d9:71:b1:0c:8f:
        bb:a8:f8:c5:12:68:9f:cf:40:cb:40:44:a5:13:f0:e6:64:0c:
        25:08:42:32:b2:36:8a:24:02:fe:2f:72:7e:1c:d7:49:45:96:
        e8:59:1d:e9:fa:74:64:6b:b2:eb:66:43:da:b3:b0:8c:d5:e9:
        0d:dd:f6:01:20:ce:99:31:63:3d:08:1a:18:b3:81:9b:4f:c6:
        93:10:06:fc:07:81:fa:8b:da:f9:82:49:f7:62:6e:a1:53:fa:
        12:94:18:85:2e:92:91:ea:68:6c:44:32:b2:66:a1:e7:18:a4:
        9a:64:51:ef

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:43:b5:67:bf:fb:aa:3b:c0:83:fe:45:a4:6d:d0:41
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Validity
            Not Before: Jan 18 00:00:00 2018 GMT
            Not After : Jan 22 12:00:00 2021 GMT
        Subject: C=US, ST=California, L=Irvine, O=Blizzard Entertainment, Inc., CN=Blizzard Entertainment, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:84:fb:35:ab:e0:d6:9b:76:e1:dd:57:b2:
                    28:43:a4:fe:21:89:82:00:83:35:89:a7:e3:f2:a8:
                    20:10:1f:d8:b0:31:bb:9c:66:1f:b3:52:5e:8d:11:
                    0e:1a:80:89:b7:29:17:28:f1:45:de:e5:bf:98:a5:
                    5a:73:35:eb:b3:1f:fb:a5:cb:22:45:6c:bf:59:75:
                    94:73:11:c3:e9:52:df:2f:26:cc:a5:cb:80:aa:f6:
                    34:d4:58:67:6b:91:5f:36:74:b3:f1:b5:2a:48:3b:
                    6b:46:3d:77:a9:59:28:d1:d4:d3:a9:99:b4:7d:8e:
                    d9:05:89:3f:b2:d0:65:b5:71:0d:a6:68:bd:41:83:
                    07:ac:15:d4:f8:59:a4:ca:65:ce:d9:cf:91:8e:7a:
                    34:72:e7:12:46:72:a5:11:aa:67:ab:18:1a:f8:4a:
                    43:d8:6d:ec:32:fb:d7:65:ce:9c:19:82:aa:c4:2c:
                    03:73:a6:85:e5:04:cf:f7:2a:d8:f6:73:6e:be:66:
                    7e:60:ca:5d:65:6a:eb:fe:a4:f7:37:b7:f1:94:68:
                    c8:e1:9c:60:39:b6:4e:99:ad:56:36:69:55:e1:cd:
                    81:20:65:84:3d:88:18:e3:65:aa:9a:f8:92:3e:0e:
                    63:d1:a0:98:ad:7a:35:d4:6f:13:82:f9:84:65:7d:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Subject Key Identifier: 
                52:B9:E4:D8:C4:5A:53:8C:26:03:FF:04:70:F0:6C:31:D1:DA:E8:31
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/sha2-assured-cs-g1.crl
                Full Name:
                  URI:http://crl4.digicert.com/sha2-assured-cs-g1.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.4.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        bb:f6:b2:8b:c7:0e:9e:23:22:40:b6:6a:6d:36:40:39:ad:78:
        7c:92:81:f0:1f:de:f2:d2:f4:a6:c3:9c:64:d6:0d:54:8c:83:
        1f:a3:20:bc:60:bb:c0:2b:e7:02:3b:3b:bc:9b:fc:8f:62:af:
        94:e0:58:e8:19:bc:0c:59:48:f1:f5:83:af:24:3a:fc:6f:b5:
        28:7c:f3:f7:ee:2e:69:88:40:6b:46:ce:8b:84:44:88:05:2c:
        26:ad:76:80:13:5f:c8:86:75:b1:8c:23:1f:e8:89:b7:bf:67:
        81:9d:4e:a3:15:85:bc:bc:ac:a1:50:3c:15:d2:d0:6a:dc:e8:
        26:90:d3:ec:01:b4:c4:d5:c7:20:7f:3d:59:a7:0d:e5:3a:0b:
        90:58:cb:47:ca:25:0e:3d:bb:d7:4e:67:49:9b:d5:a1:64:0c:
        c3:72:15:f6:0c:2c:62:40:06:72:ae:27:4c:c9:bb:25:f6:27:
        df:88:4c:ed:b6:a5:4a:ca:93:0f:b3:f1:07:c2:cf:1a:80:35:
        89:26:99:28:0d:8a:10:1b:49:15:04:d5:1b:c3:f2:45:a6:47:
        bc:e1:fa:d4:59:a2:ce:43:bc:47:38:df:18:f0:75:85:6d:63:
        0c:54:1a:66:a2:a4:d8:f0:51:3e:fb:f3:66:27:32:2b:a8:99:
        cd:c7:86:24

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

f2 f8 7b 1f 11 6b 4e 4d 3a 14 f0 f7 bd a6 9b 44 |..{..kNM:......D| 58 b5 ca 28 |X..( |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 04:09:18:1B:5F:D5:BB:66:75:53:43:B5:6F:95:50:08
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert Assured ID Root CA
    - 2013-10-22 12:00:00 UTC: 2028-10-22 12:00:00 UTC
    - Subject
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert SHA2 Assured ID Code Signing CA
    - #5
      - rsaEncryption: nil
      - F8:D3:B3:1C:7F:0E:11:AF:67:77:07:D3:0B:31:49:19:
        CF:D0:FB:45:99:B1:3A:DB:44:F5:7F:E5:A8:9D:DB:32:
        D7:71:EA:76:9D:05:2E:B7:8F:FA:92:43:C0:A5:F9:89:
        D4:37:19:D7:B6:AA:F0:9C:86:A5:D8:25:AC:0E:79:28:
        3A:7E:E9:D1:67:D3:C6:FB:29:27:C7:D3:7B:23:94:E4:
        91:23:96:90:77:82:F9:A1:84:23:66:12:54:33:50:74:
        B1:28:26:BB:24:69:C2:C2:52:F2:14:67:8A:89:45:D4:
        2D:A1:A3:E9:88:2C:20:95:AE:1C:4A:87:08:DF:0C:F5:
        E2:4D:60:18:BE:AA:C4:B2:AE:70:31:66:33:71:3E:AC:
        70:A2:AB:CE:7F:E9:7C:CB:92:A1:E5:3B:31:1C:CF:EA:
        F2:0A:E4:57:BB:4A:B5:E9:74:E6:2B:FE:6C:CB:7E:74:
        39:36:0D:90:EF:E4:B5:4E:A4:A9:EA:6A:0A:AB:84:F3:
        AC:67:4E:B5:C4:F7:8C:D1:20:25:23:EB:08:64:3E:52:
        96:C1:F2:0F:12:F4:C5:8E:0F:C1:A2:E8:2C:51:F7:73:
        BC:BD:85:B1:62:83:73:41:82:07:E4:38:8B:6A:73:20:
        D0:0F:64:73:3C:9E:9F:A6:33:A9:FD:19:DF:25:93:D1: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - keyUsage: true, 0x86
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
      - crlDistributionPoints
        http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
      - certificatePolicies
        #0
        2.16.840.1.114412.0.2.4
        id-qt-cps: https://www.digicert.com/CPS
        2.16.840.1.114412.3
      - subjectKeyIdentifier:
        5a c4 b9 7b 2a 0a a3 a5 ea 71 03 c0 60 f9 2d f6 |Z..{*....q..`.-.| 65 75 0e 58 |eu.X |
      - authorityKeyIdentifier:
        45 eb a2 af f4 92 cb 82 31 2d 51 8b a7 a7 21 9d |E.......1-Q...!.| f3 6d c8 0f |.m.. |
  - RSA-SHA256:
```
3e ec 0d 5a 24 b3 f3 22  d1 15 c8 2c 7c 25 29 76  |>..Z$.."...,|%)v|
a8 1d 5d 1c 2d 3a 1a c4  ef 30 61 d7 7e 0b 60 fd  |..].-:...0a.~.`.|
c3 3d 0f c4 af 8b fd ef  2a df 20 55 37 b0 e1 f6  |.=......*. U7...|
d1 92 75 0f 51 b4 6e a5  8e 5a e2 5e 24 81 4e 10  |..u.Q.n..Z.^$.N.|
a4 ee 3f 71 8e 63 0e 13  4b ad d7 5f 44 79 f3 36  |..?q.c..K.._Dy.6|
14 06 8a f7 9c 46 4e 5c  ff 90 b1 1b 07 0e 91 15  |.....FN\........|
fb ba af b5 51 c2 8d 24  ae 24 c6 c7 27 2a a1 29  |....Q..$.$..'*.)|
28 1a 3a 71 28 02 3c 2e  91 a3 c0 25 11 e2 9c 14  |(.:q(.<....%....|
47 a1 7a 68 68 af 9b a7  5c 20 5c d9 71 b1 0c 8f  |G.zhh...\ \.q...|
bb a8 f8 c5 12 68 9f cf  40 cb 40 44 a5 13 f0 e6  |.....h..@.@D....|
64 0c 25 08 42 32 b2 36  8a 24 02 fe 2f 72 7e 1c  |d.%.B2.6.$../r~.|
d7 49 45 96 e8 59 1d e9  fa 74 64 6b b2 eb 66 43  |.IE..Y...tdk..fC|
da b3 b0 8c d5 e9 0d dd  f6 01 20 ce 99 31 63 3d  |.......... ..1c=|
08 1a 18 b3 81 9b 4f c6  93 10 06 fc 07 81 fa 8b  |......O.........|
da f9 82 49 f7 62 6e a1  53 fa 12 94 18 85 2e 92  |...I.bn.S.......|
91 ea 68 6c 44 32 b2 66  a1 e7 18 a4 9a 64 51 ef  |..hlD2.f.....dQ.|
```
- Certificate #3
  - 2
    - 04:43:B5:67:BF:FB:AA:3B:C0:83:FE:45:A4:6D:D0:41
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert SHA2 Assured ID Code Signing CA
    - 2018-01-18 00:00:00 UTC: 2021-01-22 12:00:00 UTC
    - Subject
      - C: US
      - ST: California
      - L: Irvine
      - O: Blizzard Entertainment, Inc.
      - CN: Blizzard Entertainment, Inc.
    - #5
      - rsaEncryption: nil
      - BA:B2:84:FB:35:AB:E0:D6:9B:76:E1:DD:57:B2:28:43:
        A4:FE:21:89:82:00:83:35:89:A7:E3:F2:A8:20:10:1F:
        D8:B0:31:BB:9C:66:1F:B3:52:5E:8D:11:0E:1A:80:89:
        B7:29:17:28:F1:45:DE:E5:BF:98:A5:5A:73:35:EB:B3:
        1F:FB:A5:CB:22:45:6C:BF:59:75:94:73:11:C3:E9:52:
        DF:2F:26:CC:A5:CB:80:AA:F6:34:D4:58:67:6B:91:5F:
        36:74:B3:F1:B5:2A:48:3B:6B:46:3D:77:A9:59:28:D1:
        D4:D3:A9:99:B4:7D:8E:D9:05:89:3F:B2:D0:65:B5:71:
        0D:A6:68:BD:41:83:07:AC:15:D4:F8:59:A4:CA:65:CE:
        D9:CF:91:8E:7A:34:72:E7:12:46:72:A5:11:AA:67:AB:
        18:1A:F8:4A:43:D8:6D:EC:32:FB:D7:65:CE:9C:19:82:
        AA:C4:2C:03:73:A6:85:E5:04:CF:F7:2A:D8:F6:73:6E:
        BE:66:7E:60:CA:5D:65:6A:EB:FE:A4:F7:37:B7:F1:94:
        68:C8:E1:9C:60:39:B6:4E:99:AD:56:36:69:55:E1:CD:
        81:20:65:84:3D:88:18:E3:65:AA:9A:F8:92:3E:0E:63:
        D1:A0:98:AD:7A:35:D4:6F:13:82:F9:84:65:7D:12:49: 0x010001
    - #6
      - authorityKeyIdentifier:
        5a c4 b9 7b 2a 0a a3 a5 ea 71 03 c0 60 f9 2d f6 |Z..{*....q..`.-.| 65 75 0e 58 |eu.X |
      - subjectKeyIdentifier:
        52 b9 e4 d8 c4 5a 53 8c 26 03 ff 04 70 f0 6c 31 |R....ZS.&...p.l1| d1 da e8 31 |...1 |
      - keyUsage: true, 0x80
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints
        http://crl3.digicert.com/sha2-assured-cs-g1.crl: http://crl4.digicert.com/sha2-assured-cs-g1.crl
      - certificatePolicies
        #0
        2.16.840.1.114412.3.1
        id-qt-cps: https://www.digicert.com/CPS
        2.23.140.1.4.1
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
      - basicConstraints
        true
        nil
  - RSA-SHA256:
```
bb f6 b2 8b c7 0e 9e 23  22 40 b6 6a 6d 36 40 39  |.......#"@.jm6@9|
ad 78 7c 92 81 f0 1f de  f2 d2 f4 a6 c3 9c 64 d6  |.x|...........d.|
0d 54 8c 83 1f a3 20 bc  60 bb c0 2b e7 02 3b 3b  |.T.... .`..+..;;|
bc 9b fc 8f 62 af 94 e0  58 e8 19 bc 0c 59 48 f1  |....b...X....YH.|
f5 83 af 24 3a fc 6f b5  28 7c f3 f7 ee 2e 69 88  |...$:.o.(|....i.|
40 6b 46 ce 8b 84 44 88  05 2c 26 ad 76 80 13 5f  |@kF...D..,&.v.._|
c8 86 75 b1 8c 23 1f e8  89 b7 bf 67 81 9d 4e a3  |..u..#.....g..N.|
15 85 bc bc ac a1 50 3c  15 d2 d0 6a dc e8 26 90  |......P<...j..&.|
d3 ec 01 b4 c4 d5 c7 20  7f 3d 59 a7 0d e5 3a 0b  |....... .=Y...:.|
90 58 cb 47 ca 25 0e 3d  bb d7 4e 67 49 9b d5 a1  |.X.G.%.=..NgI...|
64 0c c3 72 15 f6 0c 2c  62 40 06 72 ae 27 4c c9  |d..r...,b@.r.'L.|
bb 25 f6 27 df 88 4c ed  b6 a5 4a ca 93 0f b3 f1  |.%.'..L...J.....|
07 c2 cf 1a 80 35 89 26  99 28 0d 8a 10 1b 49 15  |.....5.&.(....I.|
04 d5 1b c3 f2 45 a6 47  bc e1 fa d4 59 a2 ce 43  |.....E.G....Y..C|
bc 47 38 df 18 f0 75 85  6d 63 0c 54 1a 66 a2 a4  |.G8...u.mc.T.f..|
d8 f0 51 3e fb f3 66 27  32 2b a8 99 cd c7 86 24  |..Q>..f'2+.....$|
```

Signer

1
unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert SHA2 Assured ID Code Signing CA
- 04:43:B5:67:BF:FB:AA:3B:C0:83:FE:45:A4:6D:D0:41
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

b2 20 47 98 dd 83 20 e0  5c d0 50 13 07 70 53 12  |. G... .\.P..pS.|
09 f9 05 3e                                       |...>            |

rsaEncryption:

14 1e 36 34 77 e7 87 54  26 ee 2c bc 29 fe 23 92  |..64w..T&.,.).#.|
70 ae 04 57 79 03 4c 30  0b 43 c6 61 25 db e8 80  |p..Wy.L0.C.a%...|
fc 10 88 f5 ae 0e 97 68  5a d7 59 b4 df 2a ed 51  |.......hZ.Y..*.Q|
fe 41 04 48 26 97 23 77  b0 a0 4c c2 f0 98 58 16  |.A.H&.#w..L...X.|
aa bf 5d f3 ad 57 46 fb  8b 1a a4 76 1f 92 5a d5  |..]..WF....v..Z.|
14 fa 30 d9 a2 64 76 86  e0 03 c9 0a ff 36 ff a6  |..0..dv......6..|
d9 3c 68 53 58 bf 6c 46  6a d9 1c d1 14 f9 36 f4  |.countersignature1unnamed#0C: US
O: Symantec Corporation
CN: Symantec Time Stamping Services CA - G2
0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil
#2contentType: pkcs7-data
signingTime: 2018-08-31 22:48:27 UTC
messageDigest: 15 f5 b7 b0 24 ea 29 9a  45 73 a6 5f ac 36 02 9d  |....$.).Es._.6..|
6d ed 2b 35                                       |m.+5            |
rsaEncryption: 16 01 a4 8f 3f 9d 0b b8  34 aa 43 2d 46 fc bb ca  |....?...4.C-F...|
42 56 57 fe 11 17 7e 51  b8 c3 6d 62 71 9c 7c 42  |BVW...~Q..mbq.|B|
48 78 b9 d7 b8 5f 8f 49  4f ef b8 c7 51 97 2f ce  |Hx..._.IO...Q./.|
d9 5b 06 ff 7b 59 45 5f  80 fb fc bc 5f a6 2c 93  |.[..{YE_...._.,.|
f6 89 43 ec 0c 8e d6 a5  73 c0 ab e5 50 fa 0c ef  |..C.....s...P...|
ff e7 07 1f 9b 71 d8 7c  c2 d1 05 39 4e da a8 af  |.....q.|...9N...|
ac e7 f1 78 3c 12 73 34  18 01 80 6f 05 a8 a2 e1  |...x<.s4...o....|
79 56 0b e6 2e 35 c4 77  1f 6a 4b 82 ae 7e 33 03  |yV...5.w.jK..~3.|
fc bc 5e bb 61 ba 79 d9  a4 fb c9 58 e9 66 e2 76  |..^.a.y....X.f.v|
cd 61 0b 91 75 90 9c 79  3a 3a 07 ce 67 77 35 6a  |.a..u..y::..gw5j|
c3 92 8f 9e 08 0a a6 ff  ca 67 d2 c5 25 75 9c d2  |.........g..%u..|
b5 e6 7b b0 1e 8f b8 54  2d 58 8e bf c3 a9 4e 38  |..{....T-X....N8|
3c 08 06 1c c5 42 3a 7a  76 2b f1 71 be 1d e9 38  |<....B:zv+.q...8|
bd 63 35 83 0e 74 5b cb  5b 0c 4b a1 bb 97 83 a7  |.c5..t[.[.K.....|
33 07 ab 5d 2b b9 b0 cf  00 1f 55 a4 dd 32 56 d6  |3..]+.....U..2V.|
42 10 fe 04 2a 2c 8c 4d  1d a7 51 17 c2 1b 7e 35  |B...*,.M..Q...~5|