MS13-098 (activated with regkey EnableCertPaddingCheck) illustrated with my AnalyzePESig tool bitly.com/1cpaFrb