| / Chip: Special Tips & Tricks for Windows 95
/ Chip Wintips.iso / sharewar / tools / winu203 / winu3.exe
| < prev |
| Unknown | 1996-01-30 | 5.0 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (DLL), Intel i386, 8 sections | default | |
| 99% | file | data | default | |
| 27% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 20% | TrID | Win16 NE executable (generic) | default | |
| 18% | TrID | Win32 Executable (generic) | default | |
| 8% | TrID | Windows Icons Library (generic) | default (weak) | |
| 8% | TrID | OS/2 Executable (generic) | default | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 08 00 | 9a 8d da 30 00 00 00 00 |PE..L...|...0....|
|00000090| 00 00 00 00 e0 00 0e 21 | 0b 01 02 37 00 04 00 00 |.......!|...7....|
|000000a0| 00 0c 00 00 00 02 00 00 | 35 12 00 00 00 10 00 00 |........|5.......|
|000000b0| 00 20 00 00 00 00 00 10 | 00 10 00 00 00 02 00 00 |. ......|........|
|000000c0| 01 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 90 00 00 00 04 00 00 | 00 00 00 00 02 00 00 00 |........|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 60 00 00 65 00 00 00 |........|.`..e...|
|00000100| 00 40 00 00 d0 01 00 00 | 00 70 00 00 10 00 00 00 |.@......|.p......|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 80 00 00 74 00 00 00 | 00 00 00 00 00 00 00 00 |....t...|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| d8 02 00 00 00 10 00 00 | 00 04 00 00 00 04 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 62 73 73 00 00 00 00 | 10 00 00 00 00 20 00 00 |.bss....|..... ..|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 80 00 00 c0 | 2e 64 61 74 61 00 00 00 |........|.data...|
|000001d0| 24 00 00 00 00 30 00 00 | 00 02 00 00 00 08 00 00 |$....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 2e 69 64 61 74 61 00 00 | d0 01 00 00 00 40 00 00 |.idata..|.....@..|
|00000200| 00 02 00 00 00 0a 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 c0 | 53 68 61 72 65 64 00 00 |....@...|Shared..|
|00000220| 08 00 00 00 00 50 00 00 | 00 02 00 00 00 0c 00 00 |.....P..|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 d0 |........|....@...|
|00000240| 2e 65 64 61 74 61 00 00 | 65 00 00 00 00 60 00 00 |.edata..|e....`..|
|00000250| 00 02 00 00 00 0e 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 40 00 00 40 | 2e 72 73 72 63 00 00 00 |....@..@|.rsrc...|
|00000270| 10 00 00 00 00 70 00 00 | 00 02 00 00 00 10 00 00 |.....p..|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|00000290| 2e 72 65 6c 6f 63 00 00 | e6 00 00 00 00 80 00 00 |.reloc..|........|
|000002a0| 00 02 00 00 00 12 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 83 7c 24 08 01 75 09 8b | 44 24 04 a3 04 30 00 10 |.|$..u..|D$...0..|
|00000410| b8 01 00 00 00 c2 0c 00 | cc cc cc cc cc cc cc cc |........|........|
|00000420| c7 05 00 30 00 10 00 00 | 00 00 8b 44 24 04 50 a3 |...0....|...D$.P.|
|00000430| 04 50 00 10 ff 15 d0 40 | 00 10 85 c0 75 06 b8 01 |.P.....@|....u...|
|00000440| 00 00 00 c3 6a 00 a1 04 | 50 00 10 50 ff 15 d4 40 |....j...|P..P...@|
|00000450| 00 10 50 8b 0d 04 30 00 | 10 51 68 a0 10 00 10 6a |..P...0.|.Qh....j|
|00000460| 03 ff 15 d8 40 00 10 a3 | 00 30 00 10 85 c0 75 03 |....@...|.0....u.|
|00000470| 33 c0 c3 6a 00 a1 04 50 | 00 10 6a 00 6a 00 50 ff |3..j...P|..j.j.P.|
|00000480| 15 dc 40 00 10 8b 4c 24 | 08 b8 01 00 00 00 89 0d |..@...L$|........|
|00000490| 00 50 00 10 c3 cc cc cc | cc cc cc cc cc cc cc cc |.P......|........|
|000004a0| 6a 00 ff 15 b0 40 00 10 | 8b 44 24 0c 8b 4c 24 08 |j....@..|.D$..L$.|
|000004b0| 8b 54 24 04 50 51 a1 00 | 30 00 10 52 50 ff 15 cc |.T$.PQ..|0..RP...|
|000004c0| 40 00 10 c2 0c 00 56 8b | 74 24 0c 83 fe 01 75 28 |@.....V.|t$....u(|
|000004d0| ff 05 08 30 00 10 83 3d | 0c 30 00 10 00 75 3b ff |...0...=|.0...u;.|
|000004e0| 15 a4 40 00 10 3c 03 75 | 2b a9 00 00 00 80 74 24 |..@..<.u|+.....t$|
|000004f0| ff 05 0c 30 00 10 eb 22 | 85 f6 75 da 83 3d 08 30 |...0..."|..u..=.0|
|00000500| 00 10 00 7e 08 ff 0d 08 | 30 00 10 eb c9 33 c0 e9 |...~....|0....3..|
|00000510| 1d 01 00 00 ff 0d 0c 30 | 00 10 a1 c4 40 00 10 83 |.......0|....@...|
|00000520| fe 01 8b 08 89 0d 00 20 | 00 10 0f 85 8f 00 00 00 |....... |........|
|00000530| 83 3d 0c 30 00 10 00 7c | 16 83 3d 08 30 00 10 01 |.=.0...||..=.0...|
|00000540| 0f 85 e6 00 00 00 83 3d | 0c 30 00 10 00 7d 1e 68 |.......=|.0...}.h|
|00000550| 80 00 00 00 ff 15 c0 40 | 00 10 83 c4 04 a3 08 20 |.......@|....... |
|00000560| 00 10 85 c0 75 30 33 c0 | e9 c4 00 00 00 83 3d 08 |....u03.|......=.|
|00000570| 30 00 10 01 75 20 68 80 | 00 00 00 68 00 20 00 00 |0...u h.|...h. ..|
|00000580| ff 15 a8 40 00 10 a3 08 | 20 00 10 85 c0 75 07 33 |...@....| ....u.3|
|00000590| c0 e9 9b 00 00 00 a1 08 | 20 00 10 68 18 30 00 10 |........| ..h.0..|
|000005a0| 68 14 30 00 10 c7 00 00 | 00 00 00 a1 08 20 00 10 |h.0.....|..... ..|
|000005b0| a3 04 20 00 10 e8 18 01 | 00 00 83 c4 08 eb 6d 85 |.. .....|......m.|
|000005c0| f6 75 69 83 3d 0c 30 00 | 10 00 7c 09 83 3d 08 30 |.ui.=.0.|..|..=.0|
|000005d0| 00 10 00 75 57 83 3d 08 | 20 00 10 00 74 4e 8b 35 |...uW.=.| ...tN.5|
|000005e0| 04 20 00 10 83 ee 04 3b | 35 08 20 00 10 72 13 8b |. .....;|5. ..r..|
|000005f0| 06 85 c0 74 02 ff d0 83 | ee 04 3b 35 08 20 00 10 |...t....|..;5. ..|
|00000600| 73 ed 83 3d 0c 30 00 10 | 00 a1 08 20 00 10 50 7d |s..=.0..|... ..P}|
|00000610| 0b ff 15 bc 40 00 10 83 | c4 04 eb 06 ff 15 ac 40 |....@...|.......@|
|00000620| 00 10 c7 05 08 20 00 10 | 00 00 00 00 b8 01 00 00 |..... ..|........|
|00000630| 00 5e c2 0c 00 55 8b ec | 56 57 bf 01 00 00 00 8b |.^...U..|VW......|
|00000640| 75 0c 85 f6 75 0d 83 3d | 08 30 00 10 00 75 04 33 |u...u..=|.0...u.3|
|00000650| c0 eb 79 83 fe 01 74 05 | 83 fe 02 75 27 8b 0d 0c |..y...t.|...u'...|
|00000660| 20 00 10 85 c9 74 0b ff | 75 10 56 ff 75 08 ff d1 | ....t..|u.V.u...|
|00000670| 8b f8 85 ff 74 20 ff 75 | 10 56 ff 75 08 e8 44 fe |....t .u|.V.u..D.|
|00000680| ff ff 8b f8 85 ff 74 0e | ff 75 10 56 ff 75 08 e8 |......t.|.u.V.u..|
|00000690| 6c fd ff ff 8b f8 85 f6 | 74 05 83 fe 03 75 2b ff |l.......|t....u+.|
|000006a0| 75 10 56 ff 75 08 e8 1b | fe ff ff 85 c0 75 02 33 |u.V.u...|.....u.3|
|000006b0| ff 85 ff 74 15 8b 0d 0c | 20 00 10 85 c9 74 0b ff |...t....| ....t..|
|000006c0| 75 10 56 ff 75 08 ff d1 | 8b f8 8b c7 5f 5e 5d c2 |u.V.u...|...._^].|
|000006d0| 0c 00 ff 25 b8 40 00 10 | 00 00 00 00 00 00 00 00 |...%.@..|........|
|000006e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000810| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000820| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 64 40 00 00 00 00 00 00 | 00 00 00 00 f2 40 00 00 |d@......|.....@..|
|00000a10| a4 40 00 00 8c 40 00 00 | 00 00 00 00 00 00 00 00 |.@...@..|........|
|00000a20| 5e 41 00 00 cc 40 00 00 | 78 40 00 00 00 00 00 00 |^A...@..|x@......|
|00000a30| 00 00 00 00 98 41 00 00 | b8 40 00 00 00 00 00 00 |.....A..|.@......|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 c2 41 00 00 | b4 41 00 00 a6 41 00 00 |.....A..|.A...A..|
|00000a70| e4 40 00 00 00 00 00 00 | 72 41 00 00 6a 41 00 00 |.@......|rA..jA..|
|00000a80| 7e 41 00 00 88 41 00 00 | 00 00 00 00 4c 41 00 00 |~A...A..|....LA..|
|00000a90| 40 41 00 00 24 41 00 00 | 10 41 00 00 00 41 00 00 |@A..$A..|.A...A..|
|00000aa0| 00 00 00 00 c2 41 00 00 | b4 41 00 00 a6 41 00 00 |.....A..|.A...A..|
|00000ab0| e4 40 00 00 00 00 00 00 | 72 41 00 00 6a 41 00 00 |.@......|rA..jA..|
|00000ac0| 7e 41 00 00 88 41 00 00 | 00 00 00 00 4c 41 00 00 |~A...A..|....LA..|
|00000ad0| 40 41 00 00 24 41 00 00 | 10 41 00 00 00 41 00 00 |@A..$A..|.A...A..|
|00000ae0| 00 00 00 00 62 00 45 78 | 69 74 50 72 6f 63 65 73 |....b.Ex|itProces|
|00000af0| 73 00 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 00 |s.KERNEL|32.dll..|
|00000b00| a3 01 50 6f 73 74 4d 65 | 73 73 61 67 65 41 00 00 |..PostMe|ssageA..|
|00000b10| 0e 02 53 65 74 57 69 6e | 64 6f 77 73 48 6f 6f 6b |..SetWin|dowsHook|
|00000b20| 45 78 41 00 39 01 47 65 | 74 57 69 6e 64 6f 77 54 |ExA.9.Ge|tWindowT|
|00000b30| 68 72 65 61 64 50 72 6f | 63 65 73 73 49 64 00 00 |hreadPro|cessId..|
|00000b40| 5c 01 49 73 57 69 6e 64 | 6f 77 00 00 10 00 43 61 |\.IsWind|ow....Ca|
|00000b50| 6c 6c 4e 65 78 74 48 6f | 6f 6b 45 78 00 00 55 53 |llNextHo|okEx..US|
|00000b60| 45 52 33 32 2e 64 6c 6c | 00 00 cd 03 66 72 65 65 |ER32.dll|....free|
|00000b70| 00 00 70 02 5f 69 6e 69 | 74 74 65 72 6d 00 00 04 |..p._ini|tterm...|
|00000b80| 6d 61 6c 6c 6f 63 00 00 | 0a 02 5f 61 64 6a 75 73 |malloc..|.._adjus|
|00000b90| 74 5f 66 64 69 76 00 00 | 4d 53 56 43 52 54 32 30 |t_fdiv..|MSVCRT20|
|00000ba0| 2e 64 6c 6c 00 00 47 01 | 47 6c 6f 62 61 6c 46 72 |.dll..G.|GlobalFr|
|00000bb0| 65 65 00 00 40 01 47 6c | 6f 62 61 6c 41 6c 6c 6f |ee..@.Gl|obalAllo|
|00000bc0| 63 00 37 01 47 65 74 56 | 65 72 73 69 6f 6e 00 00 |c.7.GetV|ersion..|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 00 00 00 00 99 8d da 30 | 00 00 00 00 3c 60 00 00 |.......0|....<`..|
|00000e10| 01 00 00 00 02 00 00 00 | 02 00 00 00 28 60 00 00 |........|....(`..|
|00000e20| 30 60 00 00 38 60 00 00 | 20 10 00 00 00 30 00 00 |0`..8`..| ....0..|
|00000e30| 46 60 00 00 5d 60 00 00 | 00 00 01 00 77 69 6e 75 |F`..]`..|....winu|
|00000e40| 33 2e 65 78 65 00 53 75 | 62 63 6c 61 73 73 41 70 |3.exe.Su|bclassAp|
|00000e50| 70 45 78 69 74 50 72 6f | 63 65 73 73 00 67 5f 68 |pExitPro|cess.g_h|
|00000e60| 48 6f 6f 6b 00 00 00 00 | 00 00 00 00 00 00 00 00 |Hook....|........|
|00000e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 00 00 00 98 8d da 30 | 00 00 00 00 00 00 00 00 |.......0|........|
|00001010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001200| 00 10 00 00 74 00 00 00 | 0c 30 22 30 30 30 36 30 |....t...|.0"00060|
|00001210| 47 30 4e 30 55 30 5b 30 | 63 30 68 30 76 30 81 30 |G0N0U0[0|c0h0v0.0|
|00001220| 90 30 a4 30 b7 30 bf 30 | d2 30 d8 30 e1 30 f2 30 |.0.0.0.0|.0.0.0.0|
|00001230| fe 30 07 31 16 31 1b 31 | 26 31 32 31 3b 31 48 31 |.0.1.1.1|&121;1H1|
|00001240| 56 31 5e 31 6f 31 82 31 | 87 31 97 31 9c 31 a1 31 |V1^1o1.1|.1.1.1.1|
|00001250| ac 31 b1 31 c5 31 ce 31 | d7 31 e0 31 e9 31 fc 31 |.1.1.1.1|.1.1.1.1|
|00001260| 04 32 0a 32 13 32 1e 32 | 24 32 48 32 5f 32 b7 32 |.2.2.2.2|$2H2_2.2|
|00001270| d4 32 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.2......|........|
|00001280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+