| / InterCD 2000 October
/ november_2000.iso / intercd / root / Utilities / ^HotrbarEX / setup.exe / REBOOTNT.EXE
| < prev | next > |
| MS-DOS/Windows or OS/2 Executable | 1998-12-04 | 4.5 KB |
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | ExeHigh Packed (archive/exeHighPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | RERP Packed (archive/rerpPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386, 5 sections | default | |
| 99% | file | data | default | |
| 83% | TrID | Win32 Executable MS Visual C++ 4.x | default | |
| 4% | TrID | Win32 Dynamic Link Library (generic) | default (weak) | |
| 3% | TrID | Win16 NE executable (generic) | default (weak) | |
| 2% | TrID | Win32 Executable (generic) | default (weak) | |
| 1% | TrID | Win16/32 Executable Delphi generic | default (weak) | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 05 00 | 09 61 68 36 00 00 00 00 |PE..L...|.ah6....|
|00000090| 00 00 00 00 e0 00 0e 01 | 0b 01 04 14 00 04 00 00 |........|........|
|000000a0| 00 0a 00 00 00 00 00 00 | 00 10 00 00 00 10 00 00 |........|........|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 60 00 00 00 04 00 00 | 00 00 00 00 02 00 00 00 |.`......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 10 00 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 20 00 00 35 00 00 00 |........|. ..5...|
|00000100| 00 40 00 00 50 00 00 00 | 00 00 00 00 00 00 00 00 |.@..P...|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 50 00 00 5c 00 00 00 | 00 00 00 00 00 00 00 00 |.P..\...|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | d4 40 00 00 84 00 00 00 |........|.@......|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| e3 02 00 00 00 10 00 00 | 00 04 00 00 00 04 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 72 64 61 74 61 00 00 | 35 00 00 00 00 20 00 00 |.rdata..|5.... ..|
|000001b0| 00 02 00 00 00 08 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 40 | 2e 64 61 74 61 00 00 00 |....@..@|.data...|
|000001d0| 2e 00 00 00 00 30 00 00 | 00 02 00 00 00 0a 00 00 |.....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 2e 69 64 61 74 61 00 00 | cc 03 00 00 00 40 00 00 |.idata..|.....@..|
|00000200| 00 04 00 00 00 0c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 c0 | 2e 72 65 6c 6f 63 00 00 |....@...|.reloc..|
|00000220| b6 00 00 00 00 50 00 00 | 00 02 00 00 00 10 00 00 |.....P..|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 55 8b ec 81 ec 18 01 00 | 00 56 e8 88 00 00 00 68 |U.......|.V.....h|
|00000410| 04 01 00 00 8d 85 e8 fe | ff ff 50 ff 75 08 ff 15 |........|..P.u...|
|00000420| 18 41 40 00 85 c0 74 11 | 6a 05 8d 85 e8 fe ff ff |.A@...t.|j.......|
|00000430| 6a 00 50 ff 15 48 41 40 | 00 8d 45 fc 50 6a 28 ff |j.P..HA@|..E.Pj(.|
|00000440| 15 44 41 40 00 50 ff 15 | 0c 41 40 00 85 c0 74 3e |.DA@.P..|.A@...t>|
|00000450| 8d 45 f0 33 f6 50 68 00 | 30 40 00 56 ff 15 d8 40 |.E.3.Ph.|0@.V...@|
|00000460| 40 00 56 8d 4d ec c7 45 | ec 01 00 00 00 c7 45 f8 |@.V.M..E|......E.|
|00000470| 02 00 00 00 56 56 51 56 | ff 75 fc ff 15 d4 40 40 |....VVQV|.u....@@|
|00000480| 00 85 c0 74 09 56 6a 02 | ff 15 50 41 40 00 33 c0 |...t.Vj.|..PA@.3.|
|00000490| 5e 8b e5 5d c2 10 00 55 | 8b ec 81 ec e4 00 00 00 |^..]...U|........|
|000004a0| 53 56 57 33 db 88 5d f0 | 88 5d f1 88 5d f2 88 5d |SVW3..].|.]..]..]|
|000004b0| f3 8d 85 1c ff ff ff 88 | 5d f4 50 89 5d e8 c6 45 |........|].P.]..E|
|000004c0| f5 05 c7 85 1c ff ff ff | 94 00 00 00 ff 15 1c 41 |........|.......A|
|000004d0| 40 00 83 bd 2c ff ff ff | 02 0f 85 fd 01 00 00 8d |@...,...|........|
|000004e0| 45 ec 50 53 53 53 53 8d | 4d f0 53 53 53 6a 04 6a |E.PSSSS.|M.SSSj.j|
|000004f0| 01 51 ff 15 dc 40 40 00 | 85 c0 0f 84 a3 01 00 00 |.Q...@@.|........|
|00000500| 8d 45 dc 50 53 53 53 53 | 8d 4d f0 53 53 53 6a 12 |.E.PSSSS|.M.SSSj.|
|00000510| 6a 01 51 ff 15 dc 40 40 | 00 85 c0 0f 84 82 01 00 |j.Q...@@|........|
|00000520| 00 ff 75 dc ff 15 e0 40 | 40 00 ff 75 ec 8b f0 ff |..u....@|@..u....|
|00000530| 15 e0 40 40 00 8d 74 06 | 18 56 53 ff 15 2c 41 40 |..@@..t.|.VS..,A@|
|00000540| 00 50 ff 15 20 41 40 00 | 89 45 f8 3b c3 0f 84 50 |.P.. A@.|.E.;...P|
|00000550| 01 00 00 6a 02 56 50 ff | 15 e4 40 40 00 85 c0 0f |...j.VP.|..@@....|
|00000560| 84 2c 01 00 00 ff 75 ec | be 00 00 10 00 56 6a 02 |.,....u.|.....Vj.|
|00000570| ff 75 f8 ff 15 e8 40 40 | 00 85 c0 0f 84 10 01 00 |.u....@@|........|
|00000580| 00 ff 75 dc 56 6a 02 ff | 75 f8 ff 15 e8 40 40 00 |..u.Vj..|u....@@.|
|00000590| 85 c0 0f 84 f9 00 00 00 | 6a 14 53 ff 15 2c 41 40 |........|j.S..,A@|
|000005a0| 00 50 ff 15 20 41 40 00 | 89 45 fc 3b c3 0f 84 de |.P.. A@.|.E.;....|
|000005b0| 00 00 00 6a 01 50 ff 15 | ec 40 40 00 85 c0 0f 84 |...j.P..|.@@.....|
|000005c0| bb 00 00 00 53 ff 75 f8 | 6a 01 ff 75 fc ff 15 f0 |....S.u.|j..u....|
|000005d0| 40 40 00 85 c0 0f 84 a4 | 00 00 00 53 ff 75 ec ff |@@......|...S.u..|
|000005e0| 75 fc ff 15 f4 40 40 00 | 53 ff 75 ec ff 75 fc ff |u....@@.|S.u..u..|
|000005f0| 15 f8 40 40 00 6a 02 ff | 15 fc 40 40 00 8d 4d e4 |..@@.j..|..@@..M.|
|00000600| 51 6a 01 6a 08 ff 15 24 | 41 40 00 50 ff 15 00 41 |Qj.j...$|A@.P...A|
|00000610| 40 00 85 c0 74 63 8d 7d | c8 b8 ff ff ff ff c7 45 |@...tc.}|.......E|
|00000620| d8 14 00 00 00 89 75 e0 | ab ab ab ab 8d 45 c8 89 |......u.|.....E..|
|00000630| 75 c8 50 8d 4d e0 51 89 | 75 cc 89 75 d0 89 75 d4 |u.P.M.Q.|u..u..u.|
|00000640| ff 15 08 41 40 00 8d 4d | e8 8d 55 c4 51 8d 45 d8 |...A@..M|..U.Q.E.|
|00000650| 52 8d 4d b0 50 8d 55 c8 | 51 52 ff 75 e0 ff 75 e4 |R.M.P.U.|QR.u..u.|
|00000660| ff 75 fc ff 15 10 41 40 | 00 85 c0 75 03 89 5d e8 |.u....A@|...u..].|
|00000670| ff 75 e4 ff 15 28 41 40 | 00 ff 15 04 41 40 00 ff |.u...(A@|....A@..|
|00000680| 75 fc 6a 00 ff 15 2c 41 | 40 00 50 ff 15 30 41 40 |u.j...,A|@.P..0A@|
|00000690| 00 ff 75 f8 6a 00 ff 15 | 2c 41 40 00 50 ff 15 30 |..u.j...|,A@.P..0|
|000006a0| 41 40 00 83 7d e8 00 75 | 33 68 24 30 40 00 ff 15 |A@..}..u|3h$0@...|
|000006b0| 34 41 40 00 8b f8 85 ff | 74 22 68 14 30 40 00 57 |4A@.....|t"h.0@.W|
|000006c0| ff 15 38 41 40 00 8b f0 | 85 f6 74 09 ff 15 3c 41 |..8A@...|..t...<A|
|000006d0| 40 00 50 ff d6 57 ff 15 | 40 41 40 00 5f 5e 5b 8b |@.P..W..|@A@._^[.|
|000006e0| e5 5d c3 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.]......|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 00 00 00 00 09 61 68 36 | 00 00 00 00 28 20 00 00 |.....ah6|....( ..|
|00000810| 01 00 00 00 00 00 00 00 | 00 00 00 00 28 20 00 00 |........|....( ..|
|00000820| 28 20 00 00 28 20 00 00 | 52 45 42 4f 4f 54 4e 54 |( ..( ..|REBOOTNT|
|00000830| 2e 45 58 45 00 00 00 00 | 00 00 00 00 00 00 00 00 |.EXE....|........|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 53 65 53 68 75 74 64 6f | 77 6e 50 72 69 76 69 6c |SeShutdo|wnPrivil|
|00000a10| 65 67 65 00 49 6d 6d 44 | 69 73 61 62 6c 65 49 6d |ege.ImmD|isableIm|
|00000a20| 65 00 00 00 49 4d 4d 33 | 32 2e 64 6c 6c 00 00 00 |e...IMM3|2.dll...|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 94 40 00 00 00 00 00 00 | 00 00 00 00 32 42 00 00 |.@......|....2B..|
|00000c10| 18 41 00 00 cc 40 00 00 | 00 00 00 00 00 00 00 00 |.A...@..|........|
|00000c20| 50 42 00 00 50 41 00 00 | 50 40 00 00 00 00 00 00 |PB..PA..|P@......|
|00000c30| 00 00 00 00 be 43 00 00 | d4 40 00 00 00 00 00 00 |.....C..|.@......|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 5c 42 00 00 74 42 00 00 | a2 43 00 00 92 43 00 00 |\B..tB..|.C...C..|
|00000c60| 82 43 00 00 6c 43 00 00 | 4c 43 00 00 30 43 00 00 |.C..lC..|LC..0C..|
|00000c70| 12 43 00 00 f4 42 00 00 | e2 42 00 00 d0 42 00 00 |.C...B..|.B...B..|
|00000c80| a0 42 00 00 be 42 00 00 | 8c 42 00 00 b0 42 00 00 |.B...B..|.B...B..|
|00000c90| 00 00 00 00 7a 41 00 00 | 22 42 00 00 16 42 00 00 |....zA..|"B...B..|
|00000ca0| 02 42 00 00 f4 41 00 00 | e2 41 00 00 d6 41 00 00 |.B...A..|.A...A..|
|00000cb0| c6 41 00 00 b4 41 00 00 | 9e 41 00 00 90 41 00 00 |.A...A..|.A...A..|
|00000cc0| 58 41 00 00 6c 41 00 00 | 00 00 00 00 40 42 00 00 |XA..lA..|....@B..|
|00000cd0| 00 00 00 00 5c 42 00 00 | 74 42 00 00 a2 43 00 00 |....\B..|tB...C..|
|00000ce0| 92 43 00 00 82 43 00 00 | 6c 43 00 00 4c 43 00 00 |.C...C..|lC..LC..|
|00000cf0| 30 43 00 00 12 43 00 00 | f4 42 00 00 e2 42 00 00 |0C...C..|.B...B..|
|00000d00| d0 42 00 00 a0 42 00 00 | be 42 00 00 8c 42 00 00 |.B...B..|.B...B..|
|00000d10| b0 42 00 00 00 00 00 00 | 7a 41 00 00 22 42 00 00 |.B......|zA.."B..|
|00000d20| 16 42 00 00 02 42 00 00 | f4 41 00 00 e2 41 00 00 |.B...B..|.A...A..|
|00000d30| d6 41 00 00 c6 41 00 00 | b4 41 00 00 9e 41 00 00 |.A...A..|.A...A..|
|00000d40| 90 41 00 00 58 41 00 00 | 6c 41 00 00 00 00 00 00 |.A..XA..|lA......|
|00000d50| 40 42 00 00 00 00 00 00 | d3 00 47 65 74 43 75 72 |@B......|..GetCur|
|00000d60| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 a7 01 4d 6f |rentProc|ess...Mo|
|00000d70| 76 65 46 69 6c 65 45 78 | 41 00 fc 00 47 65 74 4d |veFileEx|A...GetM|
|00000d80| 6f 64 75 6c 65 46 69 6c | 65 4e 61 6d 65 41 00 00 |oduleFil|eNameA..|
|00000d90| 98 00 46 72 65 65 4c 69 | 62 72 61 72 79 00 d6 00 |..FreeLi|brary...|
|00000da0| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000db0| 49 64 00 00 16 01 47 65 | 74 50 72 6f 63 41 64 64 |Id....Ge|tProcAdd|
|00000dc0| 72 65 73 73 00 00 90 01 | 4c 6f 61 64 4c 69 62 72 |ress....|LoadLibr|
|00000dd0| 61 72 79 41 00 00 6e 01 | 48 65 61 70 46 72 65 65 |aryA..n.|HeapFree|
|00000de0| 00 00 18 01 47 65 74 50 | 72 6f 63 65 73 73 48 65 |....GetP|rocessHe|
|00000df0| 61 70 00 00 18 00 43 6c | 6f 73 65 48 61 6e 64 6c |ap....Cl|oseHandl|
|00000e00| 65 00 d5 00 47 65 74 43 | 75 72 72 65 6e 74 54 68 |e...GetC|urrentTh|
|00000e10| 72 65 61 64 00 00 68 01 | 48 65 61 70 41 6c 6c 6f |read..h.|HeapAllo|
|00000e20| 63 00 4d 01 47 65 74 56 | 65 72 73 69 6f 6e 45 78 |c.M.GetV|ersionEx|
|00000e30| 41 00 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 00 |A.KERNEL|32.dll..|
|00000e40| cb 00 45 78 69 74 57 69 | 6e 64 6f 77 73 45 78 00 |..ExitWi|ndowsEx.|
|00000e50| 55 53 45 52 33 32 2e 64 | 6c 6c 00 00 0a 00 41 64 |USER32.d|ll....Ad|
|00000e60| 6a 75 73 74 54 6f 6b 65 | 6e 50 72 69 76 69 6c 65 |justToke|nPrivile|
|00000e70| 67 65 73 00 bf 00 4c 6f | 6f 6b 75 70 50 72 69 76 |ges...Lo|okupPriv|
|00000e80| 69 6c 65 67 65 56 61 6c | 75 65 41 00 04 01 4f 70 |ilegeVal|ueA...Op|
|00000e90| 65 6e 50 72 6f 63 65 73 | 73 54 6f 6b 65 6e 00 00 |enProces|sToken..|
|00000ea0| 4e 01 52 65 76 65 72 74 | 54 6f 53 65 6c 66 00 00 |N.Revert|ToSelf..|
|00000eb0| 02 00 41 63 63 65 73 73 | 43 68 65 63 6b 00 f4 00 |..Access|Check...|
|00000ec0| 4d 61 70 47 65 6e 65 72 | 69 63 4d 61 73 6b 00 00 |MapGener|icMask..|
|00000ed0| 09 01 4f 70 65 6e 54 68 | 72 65 61 64 54 6f 6b 65 |..OpenTh|readToke|
|00000ee0| 6e 00 a8 00 49 6d 70 65 | 72 73 6f 6e 61 74 65 53 |n...Impe|rsonateS|
|00000ef0| 65 6c 66 00 5d 01 53 65 | 74 53 65 63 75 72 69 74 |elf.].Se|tSecurit|
|00000f00| 79 44 65 73 63 72 69 70 | 74 6f 72 47 72 6f 75 70 |yDescrip|torGroup|
|00000f10| 00 00 5e 01 53 65 74 53 | 65 63 75 72 69 74 79 44 |..^.SetS|ecurityD|
|00000f20| 65 73 63 72 69 70 74 6f | 72 4f 77 6e 65 72 00 00 |escripto|rOwner..|
|00000f30| 5c 01 53 65 74 53 65 63 | 75 72 69 74 79 44 65 73 |\.SetSec|urityDes|
|00000f40| 63 72 69 70 74 6f 72 44 | 61 63 6c 00 aa 00 49 6e |criptorD|acl...In|
|00000f50| 69 74 69 61 6c 69 7a 65 | 53 65 63 75 72 69 74 79 |itialize|Security|
|00000f60| 44 65 73 63 72 69 70 74 | 6f 72 00 00 05 00 41 64 |Descript|or....Ad|
|00000f70| 64 41 63 63 65 73 73 41 | 6c 6c 6f 77 65 64 41 63 |dAccessA|llowedAc|
|00000f80| 65 00 a9 00 49 6e 69 74 | 69 61 6c 69 7a 65 41 63 |e...Init|ializeAc|
|00000f90| 6c 00 81 00 47 65 74 4c | 65 6e 67 74 68 53 69 64 |l...GetL|engthSid|
|00000fa0| 00 00 0b 00 41 6c 6c 6f | 63 61 74 65 41 6e 64 49 |....Allo|cateAndI|
|00000fb0| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 00 00 41 44 |nitializ|eSid..AD|
|00000fc0| 56 41 50 49 33 32 2e 64 | 6c 6c 00 00 00 00 00 00 |VAPI32.d|ll......|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 10 00 00 5c 00 00 00 | 20 30 35 30 41 30 48 30 |....\...| 050A0H0|
|00001010| 57 30 5e 30 7d 30 8a 30 | ce 30 f4 30 15 31 26 31 |W0^0}0.0|.0.0.1&1|
|00001020| 31 31 3d 31 44 31 59 31 | 75 31 8c 31 9d 31 a4 31 |11=1D1Y1|u1.1.1.1|
|00001030| b8 31 cf 31 e4 31 f1 31 | f9 31 07 32 0e 32 42 32 |.1.1.1.1|.1.2.2B2|
|00001040| 65 32 75 32 7b 32 86 32 | 8d 32 98 32 9f 32 aa 32 |e2u2{2.2|.2.2.2.2|
|00001050| b0 32 bb 32 c2 32 ce 32 | d8 32 00 00 00 00 00 00 |.2.2.2.2|.2......|
|00001060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+