filenameAgile1pAgent.exe
size3675920 (0x381710)
md5ee6b17c68ecfeb5798acf40e7d2b9fc6
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavWin.Trojan.Wpbrutebot-2 FOUND
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xa
TimeDateStamp0x53be521c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x818f
Magic0x10b
LinkerVersion2.25
SizeOfCode0x24f000
SizeOfInitializedData0x131400
SizeOfUninitializedData0
AddressOfEntryPoint0x24fb80
BaseOfCode0x1000
BaseOfData0x250000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x3d7000
SizeOfHeaders0x400
CheckSum0x382c80
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland Delphi v6.0 - v7.0

Sections

namevavsizeraw sizeflags
.text0x10000x24ce140x24d000R-X CODE
.itext0x24e0000x1e040x2000R-X CODE
.data0x2500000x166b00x16800RW- IDATA
.bss0x2670000x2b1600RW-
.idata0x2930000x47c60x4800RW- IDATA
.edata0x2980000x2f30x400R-- IDATA
.tls0x2990000x1c80RW-
.rdata0x29a0000x180x200R-- IDATA
.reloc0x29b0000x252d40RW-
.rsrc0x2c10000x115e000x115e00R-- IDATA

Data Directory

typevasize
EXPORT0x2980000x2f3
IMPORT0x2930000x47c6
RESOURCE0x2c10000x115e00
EXCEPTION00
SECURITY0x3808000xf10
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x29a0000x18
LOAD_CONFIG00
Bound_IAT00
IAT0x293d4c0xae0
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x6990000x6991c80x65079c0x69a01000
typenamesizecp
WAVELOCKCLOSING704080
WAVELOCKOPENING624180
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
BITMAPBBABORT4640
BITMAPBBALL4840
BITMAPBBCANCEL4640
BITMAPBBCLOSE4640
BITMAPBBHELP4640
BITMAPBBIGNORE4640
BITMAPBBNO4640
BITMAPBBOK4640
BITMAPBBRETRY4640
BITMAPBBYES4640
BITMAPBTNCOLLAPSED11960
BITMAPBTNEXPANDED11960
BITMAPBTNTRANSIENT11960
BITMAPCDROM1920
BITMAPCLOSEDFOLDER2240
BITMAPCURRENTFOLDER2240
BITMAPEL_BPL2320
BITMAPEL_DLL13200
BITMAPEL_ERROR21300
BITMAPEL_MINUS2480
BITMAPEL_NET13200
BITMAPEL_PAS2320
BITMAPEL_PLUS2480
BITMAPEL_SEND20880
BITMAPEL_VCL2320
BITMAPEXECUTABLE2240
BITMAPFLOPPY1920
BITMAPHARD1920
BITMAPKNOWNFILE2240
BITMAPNETWORK1920
BITMAPOPENFOLDER2240
BITMAPPREVIEWGLYPH2320
BITMAPRAM1920
BITMAPUNKNOWNFILE2240
ICON#1735720
ICON#2676240
ICON#3169360
ICON#496400
ICON#542640
ICON#624400
ICON#711280
ICON#811280
ICON#911280
DIALOGDLGTEMPLATE820
DIALOGEL_DIALOG6160
DIALOGEL_MS_DIALOG13440
DIALOGEL_REQUEST2760
DIALOGEL_SERVER1780
DIALOGEL_TAB_ASSEMBLER1880
DIALOGEL_TAB_CALLSTACK1920
DIALOGEL_TAB_CPU1880
DIALOGEL_TAB_GENERAL1880
DIALOGEL_TAB_MODULESLIST1920
DIALOGEL_TAB_PROCESSESLIST1920
DIALOGTEXTFILEDLG820
STRING#40635520
STRING#40648000
STRING#40654160
STRING#40668040
STRING#406710600
STRING#40683840
STRING#40697080
STRING#407010960
STRING#407116720
STRING#40728200
STRING#407310280
STRING#407410640
STRING#40758440
STRING#40769120
STRING#40776160
STRING#407818920
STRING#407929880
STRING#408020600
STRING#40819320
STRING#408210600
STRING#40831600
STRING#40842200
STRING#40852560
STRING#408611400
STRING#40878800
STRING#40888960
STRING#40898760
STRING#40908520
STRING#40911920
STRING#40921560
STRING#40938400
STRING#40949960
STRING#40957480
STRING#40967720
RCDATABASE6467680
RCDATABTNARROWDOWN3790
RCDATABTNARROWUP3720
RCDATACCTLDS446490
RCDATACOMMON_PASSWORDS830170
RCDATACOPY10650
RCDATACREDITCARD_OPWALLETITEM12800
RCDATACREDITCARD_TEMPLATE14590
RCDATACROPPEDSMALL85030
RCDATADEACTIVATED320960
RCDATADICEWARE_EXTENDED1293570
RCDATADICEWARE_STANDARD873920
RCDATADOMAINRULES7990
RCDATADROPBOX-1P-4513100
RCDATADVCLAL160
RCDATAELDATA1423630
RCDATAFAVORITE12370
RCDATAFAVORITEITEM32580
RCDATAFOLDERITEM11860
RCDATAGIBBERISHAES437240
RCDATAIDENTITY_OPWALLETITEM31870
RCDATAIDENTITY_TEMPLATE19700
RCDATAIMAGESERVER8150
RCDATAINDEXOF4430
RCDATAIXWEB35620
RCDATAJSON72410
RCDATAKEYCHAIN16690
RCDATAPACKAGEINFO52760
RCDATAPROXYAUTOCONFIG64080
RCDATAPUBLIC_SUFFIX770720
RCDATAREFRESH5560
RCDATASEARCHSMALL7510
RCDATASETTINGSSMALL16340
RCDATASHA159780
RCDATATAG1633510
RCDATATDEBUGMAIN27430
RCDATATFRM1PAGENT17180
RCDATATFRMAGAINMESSAGEDLG8300
RCDATATFRMAUTOSAVE14220
RCDATATFRMAUTOSAVE26730
RCDATATFRMAUTOSAVE34460
RCDATATFRMAUTOSAVEBASE9560
RCDATATFRMBETAEXPIRED8600
RCDATATFRMDROPBOXBROWSE9880
RCDATATFRMERRORDLG23850
RCDATATFRMEXCEPTIONDLG33330
RCDATATFRMGENERATEPASSWORD6020
RCDATATFRMITEMLIMIT16920
RCDATATFRMLOGIN10680
RCDATATFRMPROGRESSDLG4520
RCDATATFRMPROXY12210
RCDATATFRMRANDOMPASSWORD30010
RCDATATFRMSEARCH18650
RCDATATFRMSECUREDESKTOP8350
RCDATATFRMUPDATEAVAILABLE11470
RCDATATFRMUPGRADEREQUIRED11070
RCDATATLDS42320
RCDATATYPE-CREDIT-CARD-16PX30620
RCDATATYPE-IDENTITY-16PX31070
RCDATATYPE-LOGIN-16PX31350
RCDATATYPE-PASSWORD-16PX34610
RCDATAUNASSIGNED11980
RCDATAVAULT7970
GROUP_CURSOR#32761200
GROUP_CURSOR#32762200
GROUP_CURSOR#32763200
GROUP_CURSOR#32764200
GROUP_CURSOR#32765200
GROUP_CURSOR#32766200
GROUP_CURSOR#32767200
GROUP_ICONAAA_APP_ICON1040
GROUP_ICONLOCKED200
GROUP_ICONUNLOCKED200
VERSION#18680
MANIFEST#17330
idlangstring
649920Login not found
649930Cannot %s. Login not found.
649940Login not found
649950Cannot update %s. Login not found.
649960Communicating with JSE version: %s.
6499701Password could not fill any login fields on
649980this page.
649990New Password
650000Lock
650010Unlock
650020Downloading update... (%d%%)
650030Cancelling... Please wait...
650080Password Generator...
650090Last Generated Password
650100Username
650110Password
650120Mark as Favorite
650130Unmark as Favorite
650140Open in 1Password
650150No items found for %s...
650160Searching for %s...
650170Unassigned
6501801Password has encountered a problem.
650190Unable to unlock %s
650200Your %s could not be unlocked with the password you provided. Please verify the password and try again.
650210Replace
650220Replace password only (keep the other fields)
650230Unassigned
650240Lock
650250Search...
650260New Tab
650270Settings
650280Favorites
650290Identities
650300New Window
650310Current Tab
650320Credit Cards
650330Open Login In
650340Save New Login...
650350Open 1Password
650360Animate Logins
650370Auto-Save Logins
650380Auto-Submit Logins
650390Open 1Password Vault
6504001Password has encountered a problem.
650410Unable to unlock %s
650420Your %s could not be unlocked with the password you provided. Please verify the password and try again.
650430has encountered a problem.
650440Handshake:
650450This login item does not have a URL.
650460Communicating with JSE version: %s.
650470Failed to sync with JSE, problem with keys
650480Go && Fill
650490Copy Password
650500Tags
650510Logins
650520Tag
650530Vault
650540Folder
650550There are no %s in this %s.
650560last name
650570email
650580sex
650590company
650600address
650610website
650620forum signature
650630Please wait while we back up your %s...
650640"%s" DOMImplementation already registered
650650Property or Method "%s" is not supported by DOM Vendor "%s"
650660Node cannot be null
650670Microsoft MSXML is not installed
650680does not exist.
650690"%s" is currently unavailable. The web site might be experiencing technical difficulties, or you may need to adjust your internet connection settings.
650700Error: this update won't go through the normal process.
650710Please wait while we check for a new version...
650720Copying
650730Optimizing
650740Cannot change the size of a JPEG image
650750JPEG error #%d
650760JPEG Image File
650770Terrible
650780Weak
650790Fair
650800Good
650810Excellent
650820Fantastic
650830Identification
650840Address
650850Internet Details
650860first name
650870initial
650880No global or local color table defined
650890Invalid pixel coordinates
650900Unsupported PixelFormat
650910Invalid image dimensions
650920Image has no DIB
650930Invalid stream operation
650940Color not in color table
650950Color table is empty
650960Image is empty
650970Frame contains multiple Graphic Control Extension blocks
650980Missing, invalid or empty palette
650990GIF Image
651000Loading
651010Saving
651020Converting
651030Rendering
651040Invalid GIF signature
651050Invalid number of colors specified in Screen Descriptor
651060Invalid number of colors specified in Image Descriptor
651070Unknown extension type
651080Invalid extension introducer
651090Failed to allocate memory for GIF DIB
651100Decoder bit buffer under-run
651110Circular decoder table entry
651120Invalid Image trailer
651130Internal error: Extension Instance does not match Extension Label
651140Unsupported Application Extension block size
651150Unknown GIF block type
651160Object type not supported for operation
651170Invalid GIF data
651180Invalid image size
651190Image exceeds Logical Screen size
651200This authentication method is already registered with class name %s.
651210Cancel
651220Please wait while we contact the activation server...
651230Enter License Key
651240Please paste your License Key:
651250You have made %d attempts to enter a valid license key. Please restart %s, and try again.
651260You have entered a 1Password for Mac license code. 1Password for Windows is a separate product and requires its own license. Please enter the 1Password for Windows license code from your receipt email or visit our online store.
651270If you can provide any additional information about what 1Password was doing when the problem occurred, please type it here (replacing this sentence).
6512801Password Diagnostics Report
651290version
651300does not exist.
651310Premature end of data
651320Color table overflow
651330Invalid color index
651340Invalid color index - color map expanded
651350Cannot save empty GIF
651360Not enough data in buffer.
651370Too much data in buffer.
651380File "%s" not found
651390Not Connected
651400Object type not supported.
651410No data to read.
651420Read Timeout
651430Max line length exceeded.
651440Connect timed out.
651450Already connected.
651460Maximum number of line allowed exceeded
651470Transparent proxy cannot bind.
651480UDP Not supported by this proxy.
651490Buffer terminator must be specified.
651500Buffer start position is invalid.
651510Reply Code is not valid: %s
651520Request rejected or failed.
651530Request rejected because SOCKS server cannot connect.
651540Request rejected because the client program and identd report different user-ids.
651550Unknown socks error.
651560Socks server did not respond.
651570Invalid socks authentication method.
651580Authentication error to socks server.
651590General SOCKS server failure.
651600Connection not allowed by ruleset.
651610Network unreachable.
651620Host unreachable.
651630Connection refused.
651640TTL expired.
651650Command not supported.
651660Address type not supported.
651670%d: Circular links are not allowed
651680Stack Class is undefined.
651690Stack already created.
651700Only one TIdAntiFreeze can exist per application.
651710Cannot change IPVersion when connected
651720Can not bind in port range (%d - %d)
651730Connection Closed Gracefully.
651740Could not bind socket. Address and port are already in use.
651750Invalid Port Range (%d - %d)
651760%s is not a valid service.
651770IPv6 unavailable
651780%s is not a valid IPv6 address
651790The requested IPVersion / Address family is not supported.
651800Not all bytes sent.
651810Package Size Too Big.
651820Set Size Exceeded.
651830UDP is not support in this SOCKS version.
651840Net dropped connection or reset.
651850Software caused connection abort.
651860Connection reset by peer.
651870No buffer space available.
651880Socket is already connected.
651890Socket is not connected.
651900Cannot send or receive after socket is closed.
651910Too many references, cannot splice.
651920Connection timed out.
651930Connection refused.
651940Too many levels of symbolic links.
651950File name too long.
651960Host is down.
651970No route to host.
651980Directory not empty
651990Host not found.
652000Operation now in progress.
652010Operation already in progress.
652020Socket operation on non-socket.
652030Destination address required.
652040Message too long.
652050Protocol wrong type for socket.
652060Bad protocol option.
652070Protocol not supported.
652080Socket type not supported.
652090Operation not supported on socket.
652100Protocol family not supported.
652110Address family not supported by protocol family.
652120Address already in use.
652130Cannot assign requested address.
652140Network is down.
652150Network is unreachable.
652160Error on loading Winsock2 library (%s)
652170Winsock Initialization Error.
652180Resolving hostname %s.
652190Connecting to %s.
652200Connected.
652210Disconnecting.
652220Disconnected.
652230%s
652240Socket Error # %d %s
652250Interrupted system call.
652260Bad file number.
652270Access denied.
652280Buffer fault.
652290Invalid argument.
652300Too many open files.
652310Operation would block.
652320This "Portable Network Graphics" image contains no data.
652330The program tried to add a existent critical chunk to the current image which is not allowed.
652340It's not allowed to add a new chunk because the current image is invalid.
652350The png image could not be loaded from the resource ID.
652360Some operation could not be performed because the system is out of resources. Close some windows and try again.
652370This operation is not valid because the current image contains no valid header.
652380The new size provided for image resizing is invalid.
652390The "Portable Network Graphics" could not be created because invalid image type parameters have being provided.
652400Unable to unlock %s.
652410"%s" does not exist.
652420"%s" is read-only.
652430"%s" is not a %s.
652440Dropbox is probably busy syncing your %s. Please wait.
652450Changing your master password in the Mac version might correct this problem.
652460Failed attempting to retrieve time zone information.
652470Error on call Winsock2 library function %s
652480%s has been copied to the Windows Clipboard.
652490The proxy server might require a username and password.
652500This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
652510The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted
652520This "Portable Network Graphics" image is invalid because it has missing image parts.
652530Could not decompress the image because it contains invalid compressed data. Description:
652540The "Portable Network Graphics" image contains an invalid palette.
652550The file being readed is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corruped, try obtaining it again.
652560This "Portable Network Graphics" image is not supported or it might be invalid. (IHDR chunk is not the first)
652570This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
652580There is no such palette entry.
652590This "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
652600This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.
652610This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.
652620The chunks must be compatible to be assigned.
652630This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.
652640Invalid UTF7
652650OLE control activation failed
652660Could not obtain OLE control window handle
652670License information for %s is invalid
652680License information for %s not found. You cannot use this control in design mode
652690Unable to retrieve a pointer to a running object registered with OLE for %s/%s
652700Oops! An error has occurred. An important component is missing from %s. Re-installing %s "as administrator" might correct this problem. When you re-install %s, please disable your anti-virus software. It might accidentally block a "false positive".
652710Invalid owner
652720This control requires version 4.70 or greater of COMCTL32.DLL
652730It is recommended to create new Logins using 1Password browser extensions.
652740Would you like to open the backup folder?
652750Auto-Type will enter your password into the following window.
652760%s has been detected in your Dropbox.
652770An important update to our Chrome extension is available. Would you like to install this now?
652780An important update to our Firefox add-on is available. Would you like to install this now?
652790Password
652800ASCII
652810Unicode
652820Big Endian Unicode
652830UTF-8
652840UTF-7
652850Cannot remove shell notification icon
652860Cannot create shell notification icon
652870%s requires Windows Vista or later
652880%s not found. Re-installing this application might correct this problem
652890Function named "%s" not found in %s
652900OLE error %.8x
652910Method '%s' not supported by automation object
652920Variant does not reference an automation object
652930Dispatch methods do not support more than 64 parameters
652940DCOM not installed
652950Buffer overflow
652960Value must be between %d and %d
652970Unable to insert a line
652980Invalid clipboard format
652990Clipboard does not support Icons
653000Cannot open clipboard
653010Text exceeds memo capacity
653020Menu '%s' is already being used by another form
653030Docked control must have a name
653040Error removing control from dock tree
653050 - Dock zone not found
653060 - Dock zone has no control
653070Error loading dock zone from the stream. Expecting version %d, but found %d.
653080Error setting %s.Count
653090Listbox (%s) style must be virtual in order to set Count
653100No OnGetItem event handler assigned
653110ANSI
653120Esc
653130Enter
653140Space
653150PgUp
653160PgDn
653170End
653180Home
653190Left
653200Up
653210Right
653220Down
653230Ins
653240Del
653250Shift+
653260Ctrl+
653270Alt+
653280Error
653290Information
653300Confirm
653310&Yes
653320&No
653330OK
653340Cancel
653350&Help
653360&Abort
653370&Retry
653380&Ignore
653390&All
653400N&o to All
653410Yes to &All
653420BkSp
653430Tab
653440OK
653450Cancel
653460&Yes
653470&No
653480&Help
653490&Close
653500&Ignore
653510&Retry
653520Abort
653530&All
653540Cannot drag a form
653550Metafiles
653560Enhanced Metafiles
653570Icons
653580Bitmaps
653590Warning
653600Error creating window device context
653610Error creating window class
653620Cannot focus a disabled or invisible window
653630Control '%s' has no parent window
653640Parent given is not a parent of '%s'
653650Cannot hide an MDI Child Form
653660Cannot change Visible in OnShow or OnHide
653670Cannot make a visible window modal
653680%s property out of range
653690Menu index out of range
653700Menu inserted twice
653710Sub-menu is not in menu
653720Not enough timers available
653730GroupIndex cannot be less than a previous menu item's GroupIndex
653740Cannot create form. No MDI forms are currently active
653750A control cannot have itself as its parent
653760Bitmap image is not valid
653770Icon image is not valid
653780Metafile is not valid
653790Invalid pixel format
653800Scan line index out of range
653810Cannot change the size of an icon
653820Invalid operation on TOleGraphic
653830Unsupported clipboard format
653840Out of system resources
653850Canvas does not allow drawing
653860Invalid image size
653870Invalid ImageList
653880Unable to Replace Image
653890Invalid ImageList Index
653900Failed to read ImageList data from stream
653910Failed to write ImageList data to stream
653920Property is read-only
653930Failed to get data for '%s'
653940Failed to set data for '%s'
653950Resource %s not found
653960%s.Seek not implemented
653970Operation not allowed on sorted list
653980%s not in a class registration group
653990Property %s does not exist
654000Stream write error
654010Thread creation error: %s
654020Thread Error: %s (%d)
654030Unable to find a Table of Contents
654040No help found for %s
654050No context-sensitive help installed
654060No help found for context
654070No topic-based help system installed
654080Cannot open file "%s". %s
654090Unable to write to %s
654100Invalid stream format
654110''%s'' is not a valid component name
654120Invalid property value
654130Invalid property element: %s
654140Invalid property path
654150Invalid property type: %s
654160Invalid property value
654170Invalid data type for '%s'
654180List capacity out of bounds (%d)
654190List count out of bounds (%d)
654200List index out of bounds (%d)
654210Out of memory while expanding memory stream
654220Error reading %s%s%s: %s
654230Stream read error
654240Tuesday
654250Wednesday
654260Thursday
654270Friday
654280Saturday
654290Ancestor for '%s' not found
654300Cannot assign a %s to a %s
654310Bits index out of range
654320Can't write to a read-only resource stream
654330CheckSynchronize called from thread $%x, which is NOT the main thread
654340Class %s not found
654350A class named %s already exists
654360List does not allow duplicates ($0%x)
654370A component named %s already exists
654380String list does not allow duplicates
654390Cannot create file "%s". %s
654400June
654410July
654420August
654430September
654440October
654450November
654460December
654470Sun
654480Mon
654490Tue
654500Wed
654510Thu
654520Fri
654530Sat
654540Sunday
654550Monday
654560Feb
654570Mar
654580Apr
654590May
654600Jun
654610Jul
654620Aug
654630Sep
654640Oct
654650Nov
654660Dec
654670January
654680February
654690March
654700April
654710May
654720Overflow while converting variant of type (%s) into type (%s)
654730Variant overflow
654740Invalid argument
654750Invalid variant type
654760Operation not supported
654770Unexpected variant error
654780External exception %x
654790Assertion failed
654800Interface not supported
654810Exception in safecall method
654820%s (%s, line %d)
654830Abstract Error
654840Access violation at address %p in module '%s'. %s of address %p
654850System Error. Code: %d. %s
654860A call to an OS function failed
654870Jan
654880Exception %s in module %s at %p. %s%s
654890Application Error
654900Format '%s' invalid or incompatible with argument
654910No argument for format '%s'
654920Variant method calls not supported
654930Read
654940Write
654950Format string too long
654960Error creating variant or safe array
654970Variant or safe array index out of bounds
654980Variant or safe array is locked
654990Invalid variant type conversion
655000Invalid variant operation
655010Invalid NULL variant operation
655020Invalid variant operation (%s%.8x) %s
655030Could not convert variant of type (%s) into type (%s)
655040Invalid numeric input
655050Division by zero
655060Range check error
655070Integer overflow
655080Invalid floating point operation
655090Floating point division by zero
655100Floating point overflow
655110Floating point underflow
655120Invalid pointer operation
655130Invalid class typecast
655140Access violation at address %p. %s of address %p
655150Access violation
655160Stack overflow
655170Control-C hit
655180Privileged instruction
655190Operation aborted
655200'%s' is not a valid integer value
655210'%s' is not a valid floating point value
655220'%s' is not a valid date
655230'%s' is not a valid time
655240'%s' is not a valid date and time
655250'%s' is not a valid GUID value
655260Invalid argument to time encode
655270Invalid argument to date encode
655280Out of memory
655290I/O error %d
655300File not found
655310Invalid filename
655320Too many open files
655330File access denied
655340Read beyond end of file
655350Disk full
module_namehintordfunction_name
oleaut32.dllSysFreeString
oleaut32.dllSysReAllocStringLen
oleaut32.dllSysAllocStringLen
advapi32.dllRegQueryValueExA
advapi32.dllRegOpenKeyExA
advapi32.dllRegCloseKey
user32.dllGetKeyboardType
user32.dllDestroyWindow
user32.dllLoadStringA
user32.dllMessageBoxA
user32.dllCharNextA
kernel32.dllGetACP
kernel32.dllSleep
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllGetTickCount
kernel32.dllQueryPerformanceCounter
kernel32.dllGetCurrentThreadId
kernel32.dllInterlockedDecrement
kernel32.dllInterlockedIncrement
kernel32.dllVirtualQuery
kernel32.dllWideCharToMultiByte
kernel32.dllSetCurrentDirectoryA
kernel32.dllMultiByteToWideChar
kernel32.dlllstrlenA
kernel32.dlllstrcpynA
kernel32.dllLoadLibraryExA
kernel32.dllGetThreadLocale
kernel32.dllGetStartupInfoA
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleA
kernel32.dllGetModuleFileNameA
kernel32.dllGetLocaleInfoA
kernel32.dllGetLastError
kernel32.dllGetCurrentDirectoryA
kernel32.dllGetCommandLineA
kernel32.dllFreeLibrary
kernel32.dllFindFirstFileA
kernel32.dllFindClose
kernel32.dllExitProcess
kernel32.dllExitThread
kernel32.dllCreateThread
kernel32.dllCompareStringA
kernel32.dllWriteFile
kernel32.dllUnhandledExceptionFilter
kernel32.dllSetFilePointer
kernel32.dllSetEndOfFile
kernel32.dllRtlUnwind
kernel32.dllReadFile
kernel32.dllRaiseException
kernel32.dllGetStdHandle
kernel32.dllGetFileSize
kernel32.dllGetFileType
kernel32.dllCreateFileA
kernel32.dllCloseHandle
kernel32.dllTlsSetValue
kernel32.dllTlsGetValue
kernel32.dllLocalAlloc
kernel32.dllGetModuleHandleA
user32.dllCreateWindowExW
user32.dllCreateWindowExA
user32.dllkeybd_event
user32.dllWindowFromPoint
user32.dllWaitMessage
user32.dllWaitForInputIdle
user32.dllVkKeyScanW
user32.dllUpdateWindow
user32.dllUnregisterClassW
user32.dllUnregisterClassA
user32.dllUnhookWindowsHookEx
user32.dllTranslateMessage
user32.dllTranslateMDISysAccel
user32.dllTrackPopupMenuEx
user32.dllTrackPopupMenu
user32.dllSystemParametersInfoA
user32.dllSwitchDesktop
user32.dllShowWindow
user32.dllShowScrollBar
user32.dllShowOwnedPopups
user32.dllSetWindowsHookExW
user32.dllSetWindowsHookExA
user32.dllSetWindowTextW
user32.dllSetWindowTextA
user32.dllSetWindowPos
user32.dllSetWindowPlacement
user32.dllSetWindowLongW
user32.dllSetWindowLongA
user32.dllSetTimer
user32.dllSetSystemCursor
user32.dllSetScrollRange
user32.dllSetScrollPos
user32.dllSetScrollInfo
user32.dllSetRect
user32.dllSetPropA
user32.dllSetParent
user32.dllSetMenuItemInfoW
user32.dllSetMenuItemInfoA
user32.dllSetMenu
user32.dllSetForegroundWindow
user32.dllSetFocus
user32.dllSetCursorPos
user32.dllSetCursor
user32.dllSetClipboardData
user32.dllSetClassLongA
user32.dllSetCapture
user32.dllSetActiveWindow
user32.dllSendMessageTimeoutA
user32.dllSendMessageW
user32.dllSendMessageA
user32.dllScrollWindow
user32.dllScreenToClient
user32.dllRemovePropA
user32.dllRemoveMenu
user32.dllReleaseDC
user32.dllReleaseCapture
user32.dllRegisterWindowMessageA
user32.dllRegisterClipboardFormatA
user32.dllRegisterClassW
user32.dllRegisterClassA
user32.dllRedrawWindow
user32.dllPtInRect
user32.dllPostQuitMessage
user32.dllPostMessageW
user32.dllPostMessageA
user32.dllPeekMessageW
user32.dllPeekMessageA
user32.dllOpenInputDesktop
user32.dllOpenDesktopA
user32.dllOpenClipboard
user32.dllOffsetRect
user32.dllOemToCharA
user32.dllMsgWaitForMultipleObjects
user32.dllMoveWindow
user32.dllMessageBoxA
user32.dllMessageBeep
user32.dllMapWindowPoints
user32.dllMapVirtualKeyW
user32.dllMapVirtualKeyA
user32.dllLoadStringA
user32.dllLoadKeyboardLayoutA
user32.dllLoadImageA
user32.dllLoadIconA
user32.dllLoadCursorA
user32.dllLoadBitmapA
user32.dllKillTimer
user32.dllIsZoomed
user32.dllIsWindowVisible
user32.dllIsWindowUnicode
user32.dllIsWindowEnabled
user32.dllIsWindow
user32.dllIsRectEmpty
user32.dllIsIconic
user32.dllIsDialogMessageW
user32.dllIsDialogMessageA
user32.dllIsClipboardFormatAvailable
user32.dllIsChild
user32.dllInvalidateRgn
user32.dllInvalidateRect
user32.dllIntersectRect
user32.dllInsertMenuItemA
user32.dllInsertMenuA
user32.dllInflateRect
user32.dllGetWindowThreadProcessId
user32.dllGetWindowTextLengthW
user32.dllGetWindowTextW
user32.dllGetWindowTextA
user32.dllGetWindowRect
user32.dllGetWindowPlacement
user32.dllGetWindowLongW
user32.dllGetWindowLongA
user32.dllGetWindowDC
user32.dllGetTopWindow
user32.dllGetSystemMetrics
user32.dllGetSystemMenu
user32.dllGetSysColorBrush
user32.dllGetSysColor
user32.dllGetSubMenu
user32.dllGetScrollRange
user32.dllGetScrollPos
user32.dllGetScrollInfo
user32.dllGetPropA
user32.dllGetParent
user32.dllGetWindow
user32.dllGetMessageTime
user32.dllGetMessagePos
user32.dllGetMessageA
user32.dllGetMenuStringW
user32.dllGetMenuStringA
user32.dllGetMenuState
user32.dllGetMenuItemRect
user32.dllGetMenuItemInfoW
user32.dllGetMenuItemInfoA
user32.dllGetMenuItemID
user32.dllGetMenuItemCount
user32.dllGetMenu
user32.dllGetLastActivePopup
user32.dllGetKeyboardState
user32.dllGetKeyboardLayoutNameA
user32.dllGetKeyboardLayoutList
user32.dllGetKeyboardLayout
user32.dllGetKeyState
user32.dllGetKeyNameTextW
user32.dllGetKeyNameTextA
user32.dllGetIconInfo
user32.dllGetForegroundWindow
user32.dllGetFocus
user32.dllGetDlgItem
user32.dllGetDesktopWindow
user32.dllGetDCEx
user32.dllGetDC
user32.dllGetCursorPos
user32.dllGetCursor
user32.dllGetClipboardData
user32.dllGetClientRect
user32.dllGetClassNameW
user32.dllGetClassNameA
user32.dllGetClassLongA
user32.dllGetClassInfoW
user32.dllGetClassInfoA
user32.dllGetCapture
user32.dllGetActiveWindow
user32.dllFrameRect
user32.dllFindWindowExA
user32.dllFindWindowA
user32.dllFillRect
user32.dllEqualRect
user32.dllEnumWindows
user32.dllEnumThreadWindows
user32.dllEnumDesktopWindows
user32.dllEnumClipboardFormats
user32.dllEnumChildWindows
user32.dllEndPaint
user32.dllEndDialog
user32.dllEnableWindow
user32.dllEnableScrollBar
user32.dllEnableMenuItem
user32.dllEmptyClipboard
user32.dllDrawTextW
user32.dllDrawTextA
user32.dllDrawMenuBar
user32.dllDrawIconEx
user32.dllDrawIcon
user32.dllDrawFrameControl
user32.dllDrawFocusRect
user32.dllDrawEdge
user32.dllDispatchMessageW
user32.dllDispatchMessageA
user32.dllDialogBoxParamA
user32.dllDestroyWindow
user32.dllDestroyMenu
user32.dllDestroyIcon
user32.dllDestroyCursor
user32.dllDeleteMenu
user32.dllDefWindowProcW
user32.dllDefWindowProcA
user32.dllDefMDIChildProcA
user32.dllDefFrameProcA
user32.dllCreatePopupMenu
user32.dllCreateMenu
user32.dllCreateIconIndirect
user32.dllCreateIcon
user32.dllCreateDialogParamA
user32.dllCreateDesktopA
user32.dllCopyRect
user32.dllCopyIcon
user32.dllCloseDesktop
user32.dllCloseClipboard
user32.dllClientToScreen
user32.dllChildWindowFromPoint
user32.dllCheckMenuItem
user32.dllCharUpperBuffW
user32.dllCharNextW
user32.dllCharLowerBuffW
user32.dllCallWindowProcW
user32.dllCallWindowProcA
user32.dllCallNextHookEx
user32.dllBringWindowToTop
user32.dllBeginPaint
user32.dllAttachThreadInput
user32.dllCharNextA
user32.dllCharLowerBuffA
user32.dllCharLowerA
user32.dllCharUpperBuffA
user32.dllCharToOemA
user32.dllAdjustWindowRectEx
user32.dllActivateKeyboardLayout
msimg32.dllGradientFill
gdi32.dllUnrealizeObject
gdi32.dllTextOutA
gdi32.dllStretchDIBits
gdi32.dllStretchBlt
gdi32.dllSetWindowOrgEx
gdi32.dllSetWinMetaFileBits
gdi32.dllSetViewportOrgEx
gdi32.dllSetTextColor
gdi32.dllSetStretchBltMode
gdi32.dllSetROP2
gdi32.dllSetPixelV
gdi32.dllSetPixel
gdi32.dllSetPaletteEntries
gdi32.dllSetMapMode
gdi32.dllSetEnhMetaFileBits
gdi32.dllSetDIBColorTable
gdi32.dllSetBrushOrgEx
gdi32.dllSetBkMode
gdi32.dllSetBkColor
gdi32.dllSelectPalette
gdi32.dllSelectObject
gdi32.dllSelectClipRgn
gdi32.dllSaveDC
gdi32.dllRoundRect
gdi32.dllRestoreDC
gdi32.dllResizePalette
gdi32.dllRectangle
gdi32.dllRectVisible
gdi32.dllRealizePalette
gdi32.dllPolyline
gdi32.dllPlayEnhMetaFile
gdi32.dllPatBlt
gdi32.dllMoveToEx
gdi32.dllMaskBlt
gdi32.dllLineTo
gdi32.dllLPtoDP
gdi32.dllIntersectClipRect
gdi32.dllGetWindowOrgEx
gdi32.dllGetWinMetaFileBits
gdi32.dllGetTextMetricsA
gdi32.dllGetTextExtentPointA
gdi32.dllGetTextExtentPoint32W
gdi32.dllGetTextExtentPoint32A
gdi32.dllGetSystemPaletteEntries
gdi32.dllGetStockObject
gdi32.dllGetRgnBox
gdi32.dllGetPixel
gdi32.dllGetPaletteEntries
gdi32.dllGetObjectA
gdi32.dllGetNearestPaletteIndex
gdi32.dllGetMapMode
gdi32.dllGetEnhMetaFilePaletteEntries
gdi32.dllGetEnhMetaFileHeader
gdi32.dllGetEnhMetaFileDescriptionA
gdi32.dllGetEnhMetaFileBits
gdi32.dllGetDeviceCaps
gdi32.dllGetDIBits
gdi32.dllGetDIBColorTable
gdi32.dllGetDCOrgEx
gdi32.dllGetCurrentPositionEx
gdi32.dllGetCurrentObject
gdi32.dllGetClipBox
gdi32.dllGetBrushOrgEx
gdi32.dllGetBitmapBits
gdi32.dllGdiFlush
gdi32.dllExtTextOutW
gdi32.dllExtTextOutA
gdi32.dllExcludeClipRect
gdi32.dllEllipse
gdi32.dllDeleteObject
gdi32.dllDeleteEnhMetaFile
gdi32.dllDeleteDC
gdi32.dllCreateSolidBrush
gdi32.dllCreateRectRgnIndirect
gdi32.dllCreateRectRgn
gdi32.dllCreatePenIndirect
gdi32.dllCreatePalette
gdi32.dllCreateHalftonePalette
gdi32.dllCreateFontIndirectA
gdi32.dllCreateFontA
gdi32.dllCreateEnhMetaFileA
gdi32.dllCreateDIBitmap
gdi32.dllCreateDIBSection
gdi32.dllCreateCompatibleDC
gdi32.dllCreateCompatibleBitmap
gdi32.dllCreateBrushIndirect
gdi32.dllCreateBitmap
gdi32.dllCopyEnhMetaFileA
gdi32.dllCombineRgn
gdi32.dllCloseEnhMetaFile
gdi32.dllBitBlt
version.dllVerQueryValueA
version.dllGetFileVersionInfoSizeA
version.dllGetFileVersionInfoA
kernel32.dlllstrcpyA
kernel32.dlllstrcmpW
kernel32.dlllstrcmpA
kernel32.dllWritePrivateProfileStringA
kernel32.dllWriteFile
kernel32.dllWideCharToMultiByte
kernel32.dllWaitForSingleObject
kernel32.dllWaitForMultipleObjects
kernel32.dllVirtualQuery
kernel32.dllVirtualProtect
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllUnmapViewOfFile
kernel32.dllTerminateThread
kernel32.dllTerminateProcess
kernel32.dllSuspendThread
kernel32.dllSleepEx
kernel32.dllSleep
kernel32.dllSizeofResource
kernel32.dllSetUnhandledExceptionFilter
kernel32.dllSetThreadPriority
kernel32.dllSetThreadLocale
kernel32.dllSetLastError
kernel32.dllSetFileTime
kernel32.dllSetFilePointer
kernel32.dllSetFileAttributesA
kernel32.dllSetEvent
kernel32.dllSetErrorMode
kernel32.dllSetEnvironmentVariableA
kernel32.dllSetEndOfFile
kernel32.dllSetCurrentDirectoryA
kernel32.dllResumeThread
kernel32.dllResetEvent
kernel32.dllRemoveDirectoryA
kernel32.dllReleaseMutex
kernel32.dllReadFile
kernel32.dllRaiseException
kernel32.dllQueryPerformanceFrequency
kernel32.dllQueryPerformanceCounter
kernel32.dllQueryDosDeviceA
kernel32.dllOutputDebugStringA
kernel32.dllOpenProcess
kernel32.dllOpenFileMappingW
kernel32.dllOpenFileMappingA
kernel32.dllMultiByteToWideChar
kernel32.dllMulDiv
kernel32.dllMoveFileA
kernel32.dllMapViewOfFile
kernel32.dllLockResource
kernel32.dllLocalFileTimeToFileTime
kernel32.dllLoadResource
kernel32.dllLoadLibraryExA
kernel32.dllLoadLibraryA
kernel32.dllLeaveCriticalSection
kernel32.dllIsBadReadPtr
kernel32.dllInitializeCriticalSection
kernel32.dllHeapFree
kernel32.dllHeapAlloc
kernel32.dllGlobalUnlock
kernel32.dllGlobalSize
kernel32.dllGlobalReAlloc
kernel32.dllGlobalMemoryStatus
kernel32.dllGlobalHandle
kernel32.dllGlobalLock
kernel32.dllGlobalGetAtomNameW
kernel32.dllGlobalGetAtomNameA
kernel32.dllGlobalFree
kernel32.dllGlobalFindAtomA
kernel32.dllGlobalDeleteAtom
kernel32.dllGlobalAlloc
kernel32.dllGlobalAddAtomW
kernel32.dllGlobalAddAtomA
kernel32.dllGetWindowsDirectoryA
kernel32.dllGetVersionExA
kernel32.dllGetVersion
kernel32.dllGetUserDefaultLCID
kernel32.dllGetTimeZoneInformation
kernel32.dllGetTickCount
kernel32.dllGetThreadPriority
kernel32.dllGetThreadLocale
kernel32.dllGetThreadContext
kernel32.dllGetTempPathW
kernel32.dllGetTempPathA
kernel32.dllGetTempFileNameA
kernel32.dllGetSystemTime
kernel32.dllGetSystemInfo
kernel32.dllGetSystemDirectoryA
kernel32.dllGetSystemDefaultLangID
kernel32.dllGetStdHandle
kernel32.dllGetStartupInfoA
kernel32.dllGetProfileStringA
kernel32.dllGetProcessHeap
kernel32.dllGetProcAddress
kernel32.dllGetPrivateProfileStringA
kernel32.dllGetPriorityClass
kernel32.dllGetModuleHandleA
kernel32.dllGetModuleFileNameA
kernel32.dllGetLogicalDriveStringsA
kernel32.dllGetLocaleInfoW
kernel32.dllGetLocaleInfoA
kernel32.dllGetLocalTime
kernel32.dllGetLastError
kernel32.dllGetHandleInformation
kernel32.dllGetFullPathNameW
kernel32.dllGetFullPathNameA
kernel32.dllGetFileSize
kernel32.dllGetFileAttributesExA
kernel32.dllGetFileAttributesA
kernel32.dllGetExitCodeThread
kernel32.dllGetExitCodeProcess
kernel32.dllGetEnvironmentVariableA
kernel32.dllGetDiskFreeSpaceA
kernel32.dllGetDateFormatA
kernel32.dllGetCurrentThreadId
kernel32.dllGetCurrentThread
kernel32.dllGetCurrentProcessId
kernel32.dllGetCurrentProcess
kernel32.dllGetComputerNameA
kernel32.dllGetCommandLineA
kernel32.dllGetCPInfo
kernel32.dllGetACP
kernel32.dllFreeResource
kernel32.dllInterlockedIncrement
kernel32.dllInterlockedExchange
kernel32.dllInterlockedDecrement
kernel32.dllFreeLibrary
kernel32.dllFormatMessageW
kernel32.dllFormatMessageA
kernel32.dllFlushInstructionCache
kernel32.dllFindResourceA
kernel32.dllFindNextFileA
kernel32.dllFindNextChangeNotification
kernel32.dllFindFirstFileA
kernel32.dllFindFirstChangeNotificationA
kernel32.dllFindCloseChangeNotification
kernel32.dllFindClose
kernel32.dllFileTimeToSystemTime
kernel32.dllFileTimeToLocalFileTime
kernel32.dllFileTimeToDosDateTime
kernel32.dllExitThread
kernel32.dllEnumSystemLocalesA
kernel32.dllEnumCalendarInfoA
kernel32.dllEnterCriticalSection
kernel32.dllDuplicateHandle
kernel32.dllDosDateTimeToFileTime
kernel32.dllDeleteFileA
kernel32.dllDeleteCriticalSection
kernel32.dllCreateThread
kernel32.dllCreateProcessA
kernel32.dllCreateMutexA
kernel32.dllCreateFileMappingW
kernel32.dllCreateFileMappingA
kernel32.dllCreateFileW
kernel32.dllCreateFileA
kernel32.dllCreateEventA
kernel32.dllCreateDirectoryA
kernel32.dllCopyFileA
kernel32.dllCompareStringW
kernel32.dllCompareStringA
kernel32.dllCloseHandle
advapi32.dllRegSetValueExA
advapi32.dllRegQueryValueExA
advapi32.dllRegQueryInfoKeyA
advapi32.dllRegOpenKeyExA
advapi32.dllRegNotifyChangeKeyValue
advapi32.dllRegFlushKey
advapi32.dllRegEnumValueA
advapi32.dllRegEnumKeyExA
advapi32.dllRegDeleteKeyA
advapi32.dllRegCreateKeyExA
advapi32.dllRegCloseKey
advapi32.dllOpenThreadToken
advapi32.dllOpenProcessToken
advapi32.dllLookupPrivilegeNameA
advapi32.dllIsValidSid
advapi32.dllGetUserNameA
advapi32.dllGetTokenInformation
advapi32.dllGetSidSubAuthorityCount
advapi32.dllGetSidSubAuthority
advapi32.dllGetSidIdentifierAuthority
kernel32.dllSleep
ole32.dllCLSIDFromString
ole32.dllCoTaskMemFree
ole32.dllStringFromCLSID
oleaut32.dllCreateErrorInfo
oleaut32.dllGetErrorInfo
oleaut32.dllSetErrorInfo
oleaut32.dllGetActiveObject
oleaut32.dllSysFreeString
ole32.dllCreateStreamOnHGlobal
ole32.dllIsAccelerator
ole32.dllOleDraw
ole32.dllOleSetMenuDescriptor
ole32.dllCoTaskMemFree
ole32.dllCoTaskMemAlloc
ole32.dllCoCreateGuid
ole32.dllProgIDFromCLSID
ole32.dllStringFromCLSID
ole32.dllCoCreateInstance
ole32.dllCoGetClassObject
ole32.dllCoUninitialize
ole32.dllCoInitializeEx
ole32.dllCoInitialize
ole32.dllIsEqualGUID
oleaut32.dllSafeArrayPtrOfIndex
oleaut32.dllSafeArrayPutElement
oleaut32.dllSafeArrayGetElement
oleaut32.dllSafeArrayUnaccessData
oleaut32.dllSafeArrayAccessData
oleaut32.dllSafeArrayGetUBound
oleaut32.dllSafeArrayGetLBound
oleaut32.dllSafeArrayCreate
oleaut32.dllVariantChangeType
oleaut32.dllVariantCopyInd
oleaut32.dllVariantCopy
oleaut32.dllVariantClear
oleaut32.dllVariantInit
shell32.dllShell_NotifyIconA
shell32.dllShellExecuteExA
shell32.dllShellExecuteA
shell32.dllSHGetFileInfoA
shell32.dllExtractIconExA
gdi32.dllTranslateCharsetInfo
comctl32.dllImageList_Destroy
comctl32.dllImageList_Add
comctl32.dllImageList_Create
comctl32.dll_TrackMouseEvent
comctl32.dllImageList_SetIconSize
comctl32.dllImageList_GetIconSize
comctl32.dllImageList_Write
comctl32.dllImageList_Read
comctl32.dllImageList_GetDragImage
comctl32.dllImageList_DragShowNolock
comctl32.dllImageList_DragMove
comctl32.dllImageList_DragLeave
comctl32.dllImageList_DragEnter
comctl32.dllImageList_EndDrag
comctl32.dllImageList_BeginDrag
comctl32.dllImageList_GetIcon
comctl32.dllImageList_Remove
comctl32.dllImageList_DrawEx
comctl32.dllImageList_Replace
comctl32.dllImageList_Draw
comctl32.dllImageList_GetBkColor
comctl32.dllImageList_SetBkColor
comctl32.dllImageList_ReplaceIcon
comctl32.dllImageList_Add
comctl32.dllImageList_SetImageCount
comctl32.dllImageList_GetImageCount
comctl32.dllImageList_Destroy
comctl32.dllImageList_Create
comctl32.dllInitCommonControls
wininet.dllInternetGetConnectedState
shell32.dllSHGetSpecialFolderLocation
shell32.dllSHGetPathFromIDListA
comdlg32.dllGetSaveFileNameA
comdlg32.dllGetOpenFileNameA
wsock32.dllntohs
advapi32.dllCryptGenRandom
advapi32.dllCryptReleaseContext
advapi32.dllCryptAcquireContextA
winmm.dlltimeGetTime
winmm.dllPlaySoundA
wintrust.dllWinVerifyTrust
Crypt32.dllCertFreeCertificateContext
Crypt32.dllCertGetNameStringA
Crypt32.dllCryptVerifyMessageSignature
Imagehlp.dllImageGetCertificateData
Imagehlp.dllImageGetCertificateHeader
Imagehlp.dllImageEnumerateCertificates
msvcrt.dllstrlen
msvcrt.dllstrncpy
msvcrt.dll_ftol
msvcrt.dllvsprintf
msvcrt.dllfprintf
msvcrt.dllprintf
msvcrt.dllpow
msvcrt.dllceil
msvcrt.dllfloor
msvcrt.dllmemcpy
msvcrt.dllmemset
msvcrt.dllrealloc
msvcrt.dllfree
msvcrt.dllcalloc
msvcrt.dllmalloc

StringTable 040904E4

CompanyNameAgileBits
InternalName1Password
ProductName1Password
ProductVersion4.0.1.503
FileDescription1Password
FileVersion4.0.1.503
LegalCopyrightCopyright © AgileBits
LegalTrademarksAll brand names and product names are trademarks or registered trademarks of their respective owners.

VS_FIXEDFILEINFO

FileVersion4.0.1.503
ProductVersion4.0.1.503
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: 0BD569BE4F0D9C932E44FB2FC9CEDEA7

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
        ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
        b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
        ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
        82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
        ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
        77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
        e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
        ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
        7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
        b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
        74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
        b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
        8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
        d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d5:69:be:4f:0d:9c:93:2e:44:fb:2f:c9:ce:de:a7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: May 17 00:00:00 2013 GMT
            Not After : May 16 23:59:59 2016 GMT
        Subject: C=CA/postalCode=M5E1W7, ST=Ontario, L=Toronto/street=1 Yonge Street Suite 1801, O=AgileBits Inc., CN=AgileBits Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:79:b9:cd:f7:82:ba:6d:44:ec:b0:20:12:
                    92:1e:38:c8:0e:30:97:c1:aa:9b:f1:ee:19:f7:a0:
                    8a:87:38:4f:01:a8:fb:8b:63:f5:41:7c:0f:50:36:
                    ef:ad:3b:14:ae:5d:5e:9b:17:54:7c:be:79:23:7c:
                    4b:a6:70:b0:a1:8b:51:70:4e:67:3a:1c:af:df:73:
                    b0:ea:2e:54:c6:80:46:c4:77:c6:5b:ea:91:c9:9b:
                    03:89:da:f8:b7:ca:cb:0a:6d:d7:c8:b2:9b:b9:c8:
                    35:b1:9d:cb:9c:f4:d7:3f:1a:3e:55:d1:3f:24:6e:
                    3f:d7:13:2d:19:bc:0d:fe:fa:ea:1c:bd:91:82:3a:
                    1f:9a:2c:f3:52:56:b6:e6:e9:ea:86:08:83:af:45:
                    52:bf:ab:30:e6:ff:53:d0:46:51:a2:65:e4:25:c5:
                    8a:9a:7b:12:6a:97:a3:c4:54:48:22:ab:3f:74:f7:
                    8c:8b:ec:0a:b5:67:a5:73:8c:f2:9f:34:59:b4:ed:
                    4a:b6:79:b5:53:c3:a1:11:38:10:d0:26:ae:9d:34:
                    3d:d0:16:cc:0e:9c:69:26:68:53:a1:ac:b6:c8:1e:
                    cc:4b:06:07:76:ea:c6:ab:c2:e6:4f:88:be:74:fb:
                    ad:9f:2a:81:d0:25:c1:2d:39:8a:34:bc:f6:af:a8:
                    79:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Subject Key Identifier: 
                28:1D:C5:4F:44:EB:F5:F9:50:5C:0D:F1:8A:00:1E:7D:B4:DB:D4:8B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com
            X509v3 Subject Alternative Name: 
                email:admin@agilebits.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        7c:fe:26:65:78:18:7e:d6:b3:b8:c5:59:5f:66:42:f7:a8:19:
        43:47:e9:d1:fa:fc:53:c6:61:d9:cb:22:66:db:f2:52:cd:33:
        6b:e1:d4:01:eb:2b:8a:b9:f1:b5:fc:6f:88:2d:fc:6e:b2:65:
        6e:d9:f5:18:fb:55:45:44:52:54:a6:89:8d:b9:fd:9a:94:76:
        a5:c4:35:67:2d:0d:ee:8d:e6:3e:b7:c7:0d:f0:be:3c:02:b6:
        7d:24:a6:1e:f3:75:0d:b7:e3:3c:21:cf:ba:3e:f9:9a:26:62:
        09:9b:bb:d8:77:c7:71:05:e2:7e:be:8a:f4:44:f4:b7:df:4b:
        a0:60:a5:aa:2d:ea:57:6f:76:56:a4:02:32:a3:df:2e:0b:d4:
        7c:25:88:af:03:cd:19:a0:30:8e:20:69:6a:4e:fb:cb:c6:a9:
        8d:91:a8:74:0b:8b:35:7e:99:ac:8c:c5:fc:a8:7d:37:99:28:
        0b:c6:7b:ff:bc:1e:3f:fb:ce:c9:09:c8:8e:b7:89:9b:24:0e:
        4c:51:49:55:56:8b:35:f5:85:c9:59:72:6f:34:df:5d:39:b4:
        d8:56:e6:86:c4:67:df:33:e5:69:a3:c6:d9:bd:32:31:79:fe:
        ed:8d:0b:20:83:9d:7d:29:10:8f:bd:df:d0:ee:a8:e9:74:f0:
        5b:4c:24:b8
pkcs7-signedData
  • 1
    • MD5: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • MD5
          • f2 09 72 2b 6a 4c 34 28  48 6e 63 f9 34 32 1b 1e  |..r+jL4(Hnc.42..|
    • Certificates
      • Certificate #0
        • 2
          • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
              CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
              8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
              F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
              A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
              C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
              A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
              97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
              05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
              78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
              1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
              65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
              BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
              C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
              A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
              55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              2e 2d b0 0a 44 4a d3 87  c0 02 07 ce 97 7d 50 62  |.-..DJ.......}Pb|
20 fd 0f 83                                       | ...            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
      • Certificate #1
        • 2
          • 0B:D5:69:BE:4F:0D:9C:93:2E:44:FB:2F:C9:CE:DE:A7
          • RSA-SHA1: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • 2013-05-17 00:00:00 UTC: 2016-05-16 23:59:59 UTC
          • Subject
            • C: CA
            • postalCode: M5E1W7
            • ST: Ontario
            • L: Toronto
            • street: 1 Yonge Street Suite 1801
            • O: AgileBits Inc.
            • CN: AgileBits Inc.
          • #5
            • rsaEncryption: nil
            • C2:3B:79:B9:CD:F7:82:BA:6D:44:EC:B0:20:12:92:1E:
              38:C8:0E:30:97:C1:AA:9B:F1:EE:19:F7:A0:8A:87:38:
              4F:01:A8:FB:8B:63:F5:41:7C:0F:50:36:EF:AD:3B:14:
              AE:5D:5E:9B:17:54:7C:BE:79:23:7C:4B:A6:70:B0:A1:
              8B:51:70:4E:67:3A:1C:AF:DF:73:B0:EA:2E:54:C6:80:
              46:C4:77:C6:5B:EA:91:C9:9B:03:89:DA:F8:B7:CA:CB:
              0A:6D:D7:C8:B2:9B:B9:C8:35:B1:9D:CB:9C:F4:D7:3F:
              1A:3E:55:D1:3F:24:6E:3F:D7:13:2D:19:BC:0D:FE:FA:
              EA:1C:BD:91:82:3A:1F:9A:2C:F3:52:56:B6:E6:E9:EA:
              86:08:83:AF:45:52:BF:AB:30:E6:FF:53:D0:46:51:A2:
              65:E4:25:C5:8A:9A:7B:12:6A:97:A3:C4:54:48:22:AB:
              3F:74:F7:8C:8B:EC:0A:B5:67:A5:73:8C:F2:9F:34:59:
              B4:ED:4A:B6:79:B5:53:C3:A1:11:38:10:D0:26:AE:9D:
              34:3D:D0:16:CC:0E:9C:69:26:68:53:A1:AC:B6:C8:1E:
              CC:4B:06:07:76:EA:C6:AB:C2:E6:4F:88:BE:74:FB:AD:
              9F:2A:81:D0:25:C1:2D:39:8A:34:BC:F6:AF:A8:79:7B              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
b6 cf de f1                                       |....            |
            • subjectKeyIdentifier: 
              28 1d c5 4f 44 eb f5 f9  50 5c 0d f1 8a 00 1e 7d  |(..OD...P\.....}|
b4 db d4 8b                                       |....            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                • OCSP: http://ocsp.comodoca.com
            • subjectAltName: admin@agilebits.com
        • RSA-SHA1: 
          7c fe 26 65 78 18 7e d6  b3 b8 c5 59 5f 66 42 f7  ||.&ex.~....Y_fB.|
a8 19 43 47 e9 d1 fa fc  53 c6 61 d9 cb 22 66 db  |..CG....S.a.."f.|
f2 52 cd 33 6b e1 d4 01  eb 2b 8a b9 f1 b5 fc 6f  |.R.3k....+.....o|
88 2d fc 6e b2 65 6e d9  f5 18 fb 55 45 44 52 54  |.-.n.en....UEDRT|
a6 89 8d b9 fd 9a 94 76  a5 c4 35 67 2d 0d ee 8d  |.......v..5g-...|
e6 3e b7 c7 0d f0 be 3c  02 b6 7d 24 a6 1e f3 75  |.>.....<..}$...u|
0d b7 e3 3c 21 cf ba 3e  f9 9a 26 62 09 9b bb d8  |.....&b....|
77 c7 71 05 e2 7e be 8a  f4 44 f4 b7 df 4b a0 60  |w.q..~...D...K.`|
a5 aa 2d ea 57 6f 76 56  a4 02 32 a3 df 2e 0b d4  |..-.WovV..2.....|
7c 25 88 af 03 cd 19 a0  30 8e 20 69 6a 4e fb cb  ||%......0. ijN..|
c6 a9 8d 91 a8 74 0b 8b  35 7e 99 ac 8c c5 fc a8  |.....t..5~......|
7d 37 99 28 0b c6 7b ff  bc 1e 3f fb ce c9 09 c8  |}7.(..{...?.....|
8e b7 89 9b 24 0e 4c 51  49 55 56 8b 35 f5 85 c9  |....$.LQIUV.5...|
59 72 6f 34 df 5d 39 b4  d8 56 e6 86 c4 67 df 33  |Yro4.]9..V...g.3|
e5 69 a3 c6 d9 bd 32 31  79 fe ed 8d 0b 20 83 9d  |.i....21y.... ..|
7d 29 10 8f bd df d0 ee  a8 e9 74 f0 5b 4c 24 b8  |})........t.[L$.|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO Code Signing CA 2
        • 0B:D5:69:BE:4F:0D:9C:93:2E:44:FB:2F:C9:CE:DE:A7
      • MD5: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          da 98 54 25 b0 f8 11 d1  67 32 30 b6 b0 be ee ed  |..T%....g20.....|
        • 1.3.6.1.4.1.311.2.1.12
          • 00 31 00 50 00 61 00 73  00 73 00 77 00 6f 00 72  |.1.P.a.s.s.w.o.r|
00 64                                             |.d              |
            : http://agilebits.com
      • rsaEncryption: 
        53 d1 43 de e0 4b 7c b8  ff 4f c0 83 64 ee 90 03  |S.C..K|..O..d...|
56 83 76 ce 76 4a 2c 1e  de ef 57 be ce b7 f8 17  |V.v.vJ,...W.....|
bf 0f 1e 85 98 1e a9 80  b4 1f 9e d7 be 75 57 f5  |.............uW.|
09 31 ac 4e d0 51 62 30  85 77 28 7d d1 ff d0 c7  |.1.N.Qb0.w(}....|
14 fd f9 39 d3 26 88 2d  40 ce b0 90 10 f9 68 09  |...9.&.-@.....h.|
4e 67 65 d8 f3 f0 1c 08  3c 71 18 2a ef 07 b4 fc  |Nge.........2U.(..f.|
d3 be 2f bf 13 2e 4c 2d  a9 90 a9 e6 8d 82 73 98  |../...L-......s.|
b9 bc a5 cd 8a 1d 91 5f  0c 95 ac af a5 43 10 1e  |......._.....C..|
8e 7c 4e 80 dd 22 f9 f7  98 c9 15 3f ce 7c fd 2c  |.|N..".....?.|.,|
31 9e 34 d8 e9 77 dc 33  bd 3b a5 6d 4f f1 ef 45  |1.4..w.3.;.mO..E|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2014-07-10 08:43:11 UTC
            • messageDigest: 
              0b a4 a5 61 a6 a5 a5 6e  65 3e 51 4e a1 83 fa a4  |...a...ne>QN....|
01 7f 2f cb                                       |../.            |
          • rsaEncryption: 
            4b 9e a5 e1 e2 79 ec af  d1 83 f5 19 6d 83 b2 cf  |K....y......m...|
06 12 b8 7c 2d 1d 7e b3  55 cd ab 6d 05 c8 45 3f  |...|-.~.U..m..E?|
67 49 3c 14 85 81 ac 7d  4b 99 14 d5 b3 30 4d da  |gI<....}K....0M.|
1d 0c 89 28 6b dc a4 e3  10 34 2c bf 58 56 cc f2  |...(k....4,.XV..|
0d b8 9f 45 f5 57 df a1  57 96 03 60 1e 5e dd 9a  |...E.W..W..`.^..|
bb 78 53 11 34 db fe 54  bb 11 7e c7 6f 38 ed 5d  |.xS.4..T..~.o8.]|
35 70 a2 74 83 2b bb 7a  b4 12 1c bf 8b 92 30 d0  |5p.t.+.z......0.|
1b 3a 62 e3 be e7 ee 70  95 21 69 bc f5 a5 32 18  |.:b....p.!i...2.|
a7 82 16 4c 99 be 08 b4  aa 4c df a9 2f dd a3 e0  |...L.....L../...|
8d a5 7a e8 17 a3 f7 71  d9 9d 7b 17 c9 ab 91 4b  |..z....q..{....K|
8f 9a 50 3e 5f a6 c5 5b  28 ac c8 eb 57 91 2d f8  |..P>_..[(...W.-.|
84 df 21 0e d5 d8 34 0f  34 48 60 d6 6e 44 6e 9d  |..!...4.4H`.nDn.|
dd d2 45 e7 cc 96 20 a9  fb 1b 93 b7 ee bf 32 2b  |..E... .......2+|
26 19 5c 2a 74 f9 3f c1  7f bd b3 fa 8d 02 e6 64  |&.\*t.?........d|
64 f1 e6 6f 75 ee 09 55  7b 17 68 94 78 dd 8d b1  |d..ou..U{.h.x...|
52 ab 40 2d 43 81 5f bc  28 2a 8a fe 9c 18 d6 01  |R.@-C._.(*......|
offsetsizetypecomment
03672064EXE07/10/2014 08:43:08#
15c115HTM#
26d63070400WAV#
27e93862410WAV#
292f0c73572PNG(256 x 256)#
2c86b0379PNG(16 x 16)#
2c882c372PNG(16 x 16)#
2e7c581065PNG(16 x 16)#
2e8b388503PNG(87 x 91)#
327ba01310PNG(45 x 45)#
34acec1237PNG(16 x 16)#
34b1c43258PNG(16 x 16)#
34be801186PNG(16 x 16)#
358218815PNG(16 x 16)#
371278556PNG(14 x 14)#
3714a4751PNG(16 x 16)#
3717941634PNG(16 x 16)#
3735543351PNG(16 x 16)#
376b891302BMP(14 x 14)#
37755f1302BMP(14 x 14)#
37c1cc3062PNG(16 x 16)#
37cdc43107PNG(16 x 16)#
37d9e83135PNG(16 x 16)#
37e6283461PNG(16 x 16)#
37f3b01198PNG(16 x 16)#
37f860797PNG(16 x 16)#
3808003856PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER