| / PC World 2001 July
/ PCWorld_2001-07_cd.bin / Software / Topware / w2ksp2en / w2ksp2.exe / i386 / csrss.ex_ / csrss.exe
|
| MS-DOS/Windows or OS/2 Executable | 2001-05-04 | 5.3 KB |
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 5.00 (native), Intel i386 (stripped to external PDB), 3 sections | default | |
| 99% | file | data | default | |
| 34% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 23% | TrID | Win32 Executable (generic) | default | |
| 10% | TrID | Windows Icons Library (generic) | default (weak) | |
| 10% | TrID | OS/2 Executable (generic) | default | |
| 10% | TrID | Generic Win/DOS Executable | default | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| a9 ce d1 df ed af bf 8c | ed af bf 8c ed af bf 8c |........|........|
|00000090| ed af be 8c e4 af bf 8c | b4 8c ac 8c e8 af bf 8c |........|........|
|000000a0| ed af bf 8c ef af bf 8c | bb a7 b9 8c ec af bf 8c |........|........|
|000000b0| 52 69 63 68 ed af bf 8c | 00 00 00 00 00 00 00 00 |Rich....|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 50 45 00 00 4c 01 03 00 | ae 20 f3 3a 00 00 00 00 |PE..L...|. .:....|
|000000e0| 00 00 00 00 e0 00 1e 03 | 0b 01 05 0c 00 06 00 00 |........|........|
|000000f0| 00 08 00 00 00 00 00 00 | 30 11 00 00 00 10 00 00 |........|0.......|
|00000100| 00 20 00 00 00 00 ff 5f | 00 10 00 00 00 02 00 00 |. ....._|........|
|00000110| 05 00 00 00 05 00 00 00 | 05 00 00 00 00 00 00 00 |........|........|
|00000120| 00 40 00 00 00 06 00 00 | 31 1d 00 00 01 00 00 00 |.@......|1.......|
|00000130| 00 00 04 00 00 20 00 00 | 00 00 10 00 00 10 00 00 |..... ..|........|
|00000140| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| dc 12 00 00 3c 00 00 00 | 00 20 00 00 18 04 00 00 |....<...|. ......|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 30 00 00 24 00 00 00 | 30 10 00 00 1c 00 00 00 |.0..$...|0.......|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 40 02 00 00 30 00 00 00 | 00 10 00 00 2c 00 00 00 |@...0...|....,...|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001d0| 2a 04 00 00 00 10 00 00 | 00 06 00 00 00 06 00 00 |*.......|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001f0| 2e 72 73 72 63 00 00 00 | 18 04 00 00 00 20 00 00 |.rsrc...|..... ..|
|00000200| 00 06 00 00 00 0c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 42 | 2e 72 65 6c 6f 63 00 00 |....@..B|.reloc..|
|00000220| 3c 00 00 00 00 30 00 00 | 00 02 00 00 00 12 00 00 |<....0..|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000240| 67 20 f3 3a 18 00 00 00 | 50 20 f3 3a 23 00 00 00 |g .:....|P .:#...|
|00000250| 00 00 00 00 00 00 00 00 | 43 53 52 53 52 56 2e 64 |........|CSRSRV.d|
|00000260| 6c 6c 00 6e 74 64 6c 6c | 2e 64 6c 6c 00 00 00 00 |ll.ntdll|.dll....|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 38 1f f9 5f 00 00 00 00 | 99 46 f8 77 10 dd f8 77 |8.._....|.F.w...w|
|00000610| 5b 30 f8 77 6c 9f f9 77 | 8c 01 fa 77 0f b1 fc 77 |[0.wl..w|...w...w|
|00000620| c6 3e f8 77 d4 12 f9 77 | 00 00 00 00 00 00 00 00 |.>.w...w|........|
|00000630| 00 00 00 00 f3 ae f8 39 | 00 00 00 00 04 00 00 00 |.......9|........|
|00000640| 10 01 00 00 00 00 00 00 | 00 14 00 00 00 00 00 00 |........|........|
|00000650| f3 ae f8 39 00 00 00 00 | 03 00 00 00 30 00 00 00 |...9....|....0...|
|00000660| 00 00 00 00 10 15 00 00 | 00 00 00 00 f3 ae f8 39 |........|.......9|
|00000670| 00 00 00 00 06 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000680| 40 15 00 00 00 00 00 00 | f3 ae f8 39 00 00 00 00 |@.......|...9....|
|00000690| 02 00 00 00 1a 00 00 00 | 00 00 00 00 90 fe a2 ff |........|........|
|000006a0| 55 8b ec 51 83 65 fc 00 | 8d 45 fc 6a 04 50 6a 0c |U..Q.e..|.E.j.Pj.|
|000006b0| 6a ff ff 15 10 10 ff 5f | c9 c3 55 8b ec 51 51 56 |j......_|..U..QQV|
|000006c0| 8b 35 10 10 ff 5f 57 8d | 45 fc 6a 04 50 6a 05 6a |.5..._W.|E.j.Pj.j|
|000006d0| ff c7 45 fc 0d 00 00 00 | ff d6 33 ff 57 57 6a 10 |..E.....|..3.WWj.|
|000006e0| 6a ff ff d6 3b c7 7d 14 | 8d 45 f8 50 6a 01 57 57 |j...;.}.|.E.Pj.WW|
|000006f0| 57 68 37 01 00 c0 ff 15 | 14 10 ff 5f ff 75 0c ff |Wh7.....|..._.u..|
|00000700| 75 08 e8 23 00 00 00 8b | f0 3b f7 7d 09 56 6a ff |u..#....|.;.}.Vj.|
|00000710| ff 15 0c 10 ff 5f e8 85 | ff ff ff 56 6a fe ff 15 |....._..|...Vj...|
|00000720| 08 10 ff 5f 5f 33 c0 5e | c9 c3 ff 25 00 10 ff 5f |...__3.^|...%..._|
|00000730| 55 8b ec 83 ec 1c 8b 45 | 08 53 56 57 ff 70 10 33 |U......E|.SVW.p.3|
|00000740| f6 89 75 f4 ff 15 24 10 | ff 5f 8b d8 8d 45 f4 89 |..u...$.|._...E..|
|00000750| 45 ec 8d 45 f4 3b de 89 | 75 fc 89 75 f8 89 45 f0 |E..E.;..|u..u..E.|
|00000760| 74 77 39 73 44 8d 43 40 | 6a 01 5f 74 05 66 39 30 |tw9sD.C@|j._t.f90|
|00000770| 75 03 8d 43 38 57 50 8d | 45 e4 50 ff 15 20 10 ff |u..C8WP.|E.P.. ..|
|00000780| 5f 8b 45 e8 3b c6 74 27 | 80 38 00 74 22 8a 08 84 |_.E.;.t'|.8.t"...|
|00000790| c9 74 08 80 f9 20 7f 03 | 40 eb f2 8a 08 84 c9 74 |.t... ..|@......t|
|000007a0| e7 47 80 f9 20 7e e1 40 | 80 38 20 7f fa eb d9 8b |.G.. ~.@|.8 .....|
|000007b0| 43 48 47 6a 01 3b c6 5a | 74 1c 66 8b 08 66 3b ce |CHGj.;.Z|t.f..f;.|
|000007c0| 74 14 42 40 40 66 3b ce | 74 f0 66 8b 08 40 40 66 |t.B@@f;.|t.f..@@f|
|000007d0| 85 c9 75 f6 eb e4 42 eb | 06 8b 7d 08 8b 55 08 3b |..u...B.|..}..U.;|
|000007e0| de 8d 44 3a 04 0f 84 b7 | 00 00 00 8b 4b 0c c1 e0 |..D:....|....K...|
|000007f0| 02 50 8b 45 08 56 89 4d | fc ff 70 18 ff 15 1c 10 |.P.E.V.M|..p.....|
|00000800| ff 5f 8b f8 8d 43 40 89 | 7d ec 89 37 39 70 04 74 |._...C@.|}..79p.t|
|00000810| 05 66 39 30 75 03 8d 43 | 38 6a 01 50 8d 45 e4 50 |.f90u..C|8j.P.E.P|
|00000820| ff 15 20 10 ff 5f 8b 75 | e8 33 c9 0f b7 45 e4 3b |.. .._.u|.3...E.;|
|00000830| f1 74 46 83 c0 02 50 8b | 45 08 51 ff 70 18 ff 15 |.tF...P.|E.Q.p...|
|00000840| 1c 10 ff 5f 8a 0e 84 c9 | 74 2d 80 f9 20 7f 08 8a |..._....|t-.. ...|
|00000850| 4e 01 46 84 c9 75 f3 80 | 3e 00 74 e8 89 07 83 c7 |N.F..u..|>.t.....|
|00000860| 04 ff 45 f8 8a 0e 80 f9 | 20 7e 06 88 08 40 46 eb |..E.....| ~...@F.|
|00000870| f3 80 20 00 40 eb cd 33 | c9 89 0f 8b 43 48 83 c7 |.. .@..3|....CH..|
|00000880| 04 3b c1 89 7d f0 74 16 | 66 39 08 74 11 89 07 83 |.;..}.t.|f9.t....|
|00000890| c7 04 66 8b 10 40 40 66 | 85 d2 75 f6 eb ea 89 0f |..f..@@f|..u.....|
|000008a0| 33 f6 39 75 fc 74 05 e8 | 2a 00 00 00 ff 75 fc ff |3.9u.t..|*....u..|
|000008b0| 75 f0 ff 75 ec ff 75 f8 | e8 fd fd ff ff 83 c4 10 |u..u..u.|........|
|000008c0| 50 6a ff ff 15 0c 10 ff | 5f 6a 01 58 5f 89 30 5e |Pj......|_j.X_.0^|
|000008d0| 5b c9 c2 04 00 cc ff 25 | 18 10 ff 5f 18 13 00 00 |[......%|..._....|
|000008e0| ff ff ff ff ff ff ff ff | 5e 13 00 00 00 10 00 00 |........|^.......|
|000008f0| 20 13 00 00 ff ff ff ff | ff ff ff ff c2 13 00 00 | .......|........|
|00000900| 08 10 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 44 13 00 00 00 00 00 00 |........|D.......|
|00000920| 84 13 00 00 98 13 00 00 | 6a 13 00 00 ae 13 00 00 |........|j.......|
|00000930| cc 13 00 00 dc 13 00 00 | ee 13 00 00 0e 14 00 00 |........|........|
|00000940| 00 00 00 00 18 00 43 73 | 72 53 65 72 76 65 72 49 |......Cs|rServerI|
|00000950| 6e 69 74 69 61 6c 69 7a | 61 74 69 6f 6e 00 43 53 |nitializ|ation.CS|
|00000960| 52 53 52 56 2e 64 6c 6c | 00 00 00 01 4e 74 53 65 |RSRV.dll|....NtSe|
|00000970| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 50 72 6f 63 |tInforma|tionProc|
|00000980| 65 73 73 00 1c 01 4e 74 | 54 65 72 6d 69 6e 61 74 |ess...Nt|Terminat|
|00000990| 65 54 68 72 65 61 64 00 | 1b 01 4e 74 54 65 72 6d |eThread.|..NtTerm|
|000009a0| 69 6e 61 74 65 50 72 6f | 63 65 73 73 00 00 d8 00 |inatePro|cess....|
|000009b0| 4e 74 52 61 69 73 65 48 | 61 72 64 45 72 72 6f 72 |NtRaiseH|ardError|
|000009c0| 00 00 6e 74 64 6c 6c 2e | 64 6c 6c 00 0d 00 44 62 |..ntdll.|dll...Db|
|000009d0| 67 42 72 65 61 6b 50 6f | 69 6e 74 00 4a 01 52 74 |gBreakPo|int.J.Rt|
|000009e0| 6c 41 6c 6c 6f 63 61 74 | 65 48 65 61 70 00 8d 02 |lAllocat|eHeap...|
|000009f0| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000a00| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 30 02 |ToAnsiSt|ring..0.|
|00000a10| 52 74 6c 4e 6f 72 6d 61 | 6c 69 7a 65 50 72 6f 63 |RtlNorma|lizeProc|
|00000a20| 65 73 73 50 61 72 61 6d | 73 00 00 00 00 00 00 00 |essParam|s.......|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00000c10| 10 00 00 00 18 00 00 80 | 00 00 00 00 00 00 00 00 |........|........|
|00000c20| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00000c40| 09 04 00 00 48 00 00 00 | 60 20 00 00 b4 03 00 00 |....H...|` ......|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| b4 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |..4...V.|S._.V.E.|
|00000c70| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00000c80| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00000c90| 00 00 05 00 15 0a 93 08 | 00 00 05 00 15 0a 93 08 |........|........|
|00000ca0| 3f 00 00 00 00 00 00 00 | 04 00 04 00 01 00 00 00 |?.......|........|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 12 03 00 00 |........|........|
|00000cc0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|00000cd0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|00000ce0| ee 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |......0.|4.0.9.0.|
|00000cf0| 34 00 42 00 30 00 00 00 | 4c 00 16 00 01 00 43 00 |4.B.0...|L.....C.|
|00000d00| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00000d10| 6d 00 65 00 00 00 00 00 | 4d 00 69 00 63 00 72 00 |m.e.....|M.i.c.r.|
|00000d20| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 43 00 6f 00 |o.s.o.f.|t. .C.o.|
|00000d30| 72 00 70 00 6f 00 72 00 | 61 00 74 00 69 00 6f 00 |r.p.o.r.|a.t.i.o.|
|00000d40| 6e 00 00 00 64 00 1e 00 | 01 00 46 00 69 00 6c 00 |n...d...|..F.i.l.|
|00000d50| 65 00 44 00 65 00 73 00 | 63 00 72 00 69 00 70 00 |e.D.e.s.|c.r.i.p.|
|00000d60| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 43 00 6c 00 |t.i.o.n.|....C.l.|
|00000d70| 69 00 65 00 6e 00 74 00 | 20 00 53 00 65 00 72 00 |i.e.n.t.| .S.e.r.|
|00000d80| 76 00 65 00 72 00 20 00 | 52 00 75 00 6e 00 74 00 |v.e.r. .|R.u.n.t.|
|00000d90| 69 00 6d 00 65 00 20 00 | 50 00 72 00 6f 00 63 00 |i.m.e. .|P.r.o.c.|
|00000da0| 65 00 73 00 73 00 00 00 | 3e 00 0f 00 01 00 46 00 |e.s.s...|>.....F.|
|00000db0| 69 00 6c 00 65 00 56 00 | 65 00 72 00 73 00 69 00 |i.l.e.V.|e.r.s.i.|
|00000dc0| 6f 00 6e 00 00 00 00 00 | 35 00 2e 00 30 00 30 00 |o.n.....|5...0.0.|
|00000dd0| 2e 00 32 00 31 00 39 00 | 35 00 2e 00 32 00 35 00 |..2.1.9.|5...2.5.|
|00000de0| 38 00 31 00 00 00 00 00 | 52 00 19 00 01 00 49 00 |8.1.....|R.....I.|
|00000df0| 6e 00 74 00 65 00 72 00 | 6e 00 61 00 6c 00 4e 00 |n.t.e.r.|n.a.l.N.|
|00000e00| 61 00 6d 00 65 00 00 00 | 43 00 53 00 52 00 53 00 |a.m.e...|C.S.R.S.|
|00000e10| 72 00 76 00 2e 00 44 00 | 4c 00 4c 00 20 00 61 00 |r.v...D.|L.L. .a.|
|00000e20| 6e 00 64 00 20 00 43 00 | 53 00 52 00 53 00 53 00 |n.d. .C.|S.R.S.S.|
|00000e30| 2e 00 45 00 78 00 65 00 | 00 00 00 00 74 00 28 00 |..E.x.e.|....t.(.|
|00000e40| 01 00 4c 00 65 00 67 00 | 61 00 6c 00 43 00 6f 00 |..L.e.g.|a.l.C.o.|
|00000e50| 70 00 79 00 72 00 69 00 | 67 00 68 00 74 00 00 00 |p.y.r.i.|g.h.t...|
|00000e60| 43 00 6f 00 70 00 79 00 | 72 00 69 00 67 00 68 00 |C.o.p.y.|r.i.g.h.|
|00000e70| 74 00 20 00 28 00 43 00 | 29 00 20 00 4d 00 69 00 |t. .(.C.|). .M.i.|
|00000e80| 63 00 72 00 6f 00 73 00 | 6f 00 66 00 74 00 20 00 |c.r.o.s.|o.f.t. .|
|00000e90| 43 00 6f 00 72 00 70 00 | 2e 00 20 00 31 00 39 00 |C.o.r.p.|.. .1.9.|
|00000ea0| 38 00 31 00 2d 00 31 00 | 39 00 39 00 39 00 00 00 |8.1.-.1.|9.9.9...|
|00000eb0| 5a 00 19 00 01 00 4f 00 | 72 00 69 00 67 00 69 00 |Z.....O.|r.i.g.i.|
|00000ec0| 6e 00 61 00 6c 00 46 00 | 69 00 6c 00 65 00 6e 00 |n.a.l.F.|i.l.e.n.|
|00000ed0| 61 00 6d 00 65 00 00 00 | 43 00 53 00 52 00 53 00 |a.m.e...|C.S.R.S.|
|00000ee0| 72 00 76 00 2e 00 44 00 | 4c 00 4c 00 20 00 61 00 |r.v...D.|L.L. .a.|
|00000ef0| 6e 00 64 00 20 00 43 00 | 53 00 52 00 53 00 53 00 |n.d. .C.|S.R.S.S.|
|00000f00| 2e 00 45 00 78 00 65 00 | 00 00 00 00 7e 00 2f 00 |..E.x.e.|....~./.|
|00000f10| 01 00 50 00 72 00 6f 00 | 64 00 75 00 63 00 74 00 |..P.r.o.|d.u.c.t.|
|00000f20| 4e 00 61 00 6d 00 65 00 | 00 00 00 00 4d 00 69 00 |N.a.m.e.|....M.i.|
|00000f30| 63 00 72 00 6f 00 73 00 | 6f 00 66 00 74 00 28 00 |c.r.o.s.|o.f.t.(.|
|00000f40| 52 00 29 00 20 00 57 00 | 69 00 6e 00 64 00 6f 00 |R.). .W.|i.n.d.o.|
|00000f50| 77 00 73 00 20 00 28 00 | 52 00 29 00 20 00 32 00 |w.s. .(.|R.). .2.|
|00000f60| 30 00 30 00 30 00 20 00 | 4f 00 70 00 65 00 72 00 |0.0.0. .|O.p.e.r.|
|00000f70| 61 00 74 00 69 00 6e 00 | 67 00 20 00 53 00 79 00 |a.t.i.n.|g. .S.y.|
|00000f80| 73 00 74 00 65 00 6d 00 | 00 00 00 00 42 00 0f 00 |s.t.e.m.|....B...|
|00000f90| 01 00 50 00 72 00 6f 00 | 64 00 75 00 63 00 74 00 |..P.r.o.|d.u.c.t.|
|00000fa0| 56 00 65 00 72 00 73 00 | 69 00 6f 00 6e 00 00 00 |V.e.r.s.|i.o.n...|
|00000fb0| 35 00 2e 00 30 00 30 00 | 2e 00 32 00 31 00 39 00 |5...0.0.|..2.1.9.|
|00000fc0| 35 00 2e 00 32 00 35 00 | 38 00 31 00 00 00 00 00 |5...2.5.|8.1.....|
|00000fd0| 44 00 00 00 01 00 56 00 | 61 00 72 00 46 00 69 00 |D.....V.|a.r.F.i.|
|00000fe0| 6c 00 65 00 49 00 6e 00 | 66 00 6f 00 00 00 00 00 |l.e.I.n.|f.o.....|
|00000ff0| 24 00 04 00 00 00 54 00 | 72 00 61 00 6e 00 73 00 |$.....T.|r.a.n.s.|
|00001000| 6c 00 61 00 74 00 69 00 | 6f 00 6e 00 00 00 00 00 |l.a.t.i.|o.n.....|
|00001010| 09 04 b0 04 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001200| 00 10 00 00 24 00 00 00 | b4 30 c2 30 f8 30 12 31 |....$...|.0.0.0.1|
|00001210| 20 31 2c 31 46 31 7d 31 | fe 31 22 32 40 32 c5 32 | 1,1F1}1|.1"2@2.2|
|00001220| d8 32 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.2......|........|
|00001230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001400| 01 00 00 00 10 01 00 00 | 00 00 00 00 65 78 65 5c |........|....exe\|
|00001410| 63 73 72 73 73 2e 64 62 | 67 00 2e 65 78 65 00 00 |csrss.db|g..exe..|
|00001420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+