| / Windows 95 Secrets
/ Secrets2.iso / Graphics / Image / WinImage / Ntdll.dll
| < prev | next > |
| Microsoft Windows Dynamic Link Library | 1995-07-11 | 5.5 KB |
MacOS 8.1
|
Win98
|
DOS
browse contents |
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | Microsoft Windows Dynamic Link Library (executable/dll) | magic | Supported |
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Quest PowerGUI Packed (archive/questPowerGUIPacked) | ext | Unsupported |
| 1% | dexvert | OS/2 Dynamic Link Library (other/os2DLL) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (DLL), Intel i386, 5 sections | default | |
| 99% | file | data | default | |
| 25% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 19% | TrID | Win16 NE executable (generic) | default | |
| 17% | TrID | Win32 Executable (generic) | default | |
| 7% | TrID | Win16/32 Executable Delphi generic | default (weak) | |
| 7% | TrID | Windows Icons Library (generic) | default (weak) | |
| 1% | dearkID | deark: exe (PE32) | default (weak) | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 05 00 | c2 6c f3 2f 00 00 00 00 |PE..L...|.l./....|
|00000090| 00 00 00 00 e0 00 0e 21 | 0b 01 02 32 00 04 00 00 |.......!|...2....|
|000000a0| 00 0e 00 00 00 00 00 00 | 54 11 00 00 00 10 00 00 |........|T.......|
|000000b0| 00 20 00 00 00 00 ee bf | 00 10 00 00 00 02 00 00 |. ......|........|
|000000c0| 01 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 60 00 00 00 04 00 00 | ee 85 00 00 02 00 00 00 |.`......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 30 00 00 23 05 00 00 |........|.0..#...|
|00000100| 00 20 00 00 26 01 00 00 | 00 40 00 00 98 03 00 00 |. ..&...|.@......|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 50 00 00 30 00 00 00 | 00 00 00 00 00 00 00 00 |.P..0...|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| c8 02 00 00 00 10 00 00 | 00 04 00 00 00 04 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 69 64 61 74 61 00 00 | 26 01 00 00 00 20 00 00 |.idata..|&.... ..|
|000001b0| 00 02 00 00 00 08 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 50 | 2e 65 64 61 74 61 00 00 |....@..P|.edata..|
|000001d0| 23 05 00 00 00 30 00 00 | 00 06 00 00 00 0a 00 00 |#....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|000001f0| 2e 72 73 72 63 00 00 00 | 98 03 00 00 00 40 00 00 |.rsrc...|.....@..|
|00000200| 00 04 00 00 00 10 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 40 | 2e 72 65 6c 6f 63 00 00 |....@..@|.reloc..|
|00000220| 58 00 00 00 00 50 00 00 | 00 02 00 00 00 14 00 00 |X....P..|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| e9 63 02 00 00 ff 74 24 | 0c ff 74 24 0c ff 74 24 |.c....t$|..t$..t$|
|00000410| 0c ff 15 80 20 ee bf c2 | 0c 00 55 8b ec ff 74 24 |.... ...|..U...t$|
|00000420| 14 ff 75 10 ff 75 0c ff | 75 08 ff 15 84 20 ee bf |..u..u..|u.... ..|
|00000430| 5d c2 10 00 ff 74 24 0c | 6a 00 ff 74 24 0c ff 15 |]....t$.|j..t$...|
|00000440| 88 20 ee bf c2 0c 00 ff | 74 24 0c 6a 00 ff 74 24 |. ......|t$.j..t$|
|00000450| 0c ff 15 8c 20 ee bf c2 | 0c 00 55 8b ec 53 56 57 |.... ...|..U..SVW|
|00000460| 80 7d 10 00 74 08 cc b8 | f0 00 00 c0 eb 4a 8b 4d |.}..t...|.....J.M|
|00000470| 0c 66 8b 39 0f b7 c7 03 | c0 3d ff ff 00 00 76 07 |.f.9....|.=....v.|
|00000480| b8 f0 00 00 c0 eb 31 8b | 55 08 0f b7 32 3b f0 73 |......1.|U...2;.s|
|00000490| 07 b8 05 00 00 80 eb 20 | 33 f6 66 85 ff 74 17 8b |....... |3.f..t..|
|000004a0| 41 04 66 0f be 3c 30 8b | 42 04 66 89 3c 70 46 0f |A.f..<0.|B.f.<pF.|
|000004b0| b7 39 3b fe 77 e9 33 c0 | 5f 5e 5b 5d c2 0c 00 55 |.9;.w.3.|_^[]...U|
|000004c0| 8b ec 53 56 57 80 7d 10 | 00 74 08 cc b8 f0 00 00 |..SVW.}.|.t......|
|000004d0| c0 eb 41 8b 75 0c 66 8b | 06 a8 01 74 07 b8 f0 00 |..A.u.f.|...t....|
|000004e0| 00 c0 eb 30 66 d1 e8 8b | 4d 08 0f b7 d0 0f b7 01 |...0f...|M.......|
|000004f0| 3b c2 73 07 b8 05 00 00 | 80 eb 19 33 ff 85 d2 74 |;.s.....|...3...t|
|00000500| 11 8b 46 04 8b 59 04 8a | 04 78 88 04 3b 47 3b fa |..F..Y..|.x..;G;.|
|00000510| 72 ef 33 c0 5f 5e 5b 5d | c2 0c 00 cc 64 a1 18 00 |r.3._^[]|....d...|
|00000520| 00 00 c3 e9 46 01 00 00 | cc c2 0c 00 c2 08 00 c2 |....F...|........|
|00000530| 10 00 c2 10 00 c2 04 00 | c2 18 00 c2 08 00 c2 04 |........|........|
|00000540| 00 c2 08 00 c2 0c 00 c2 | 08 00 c2 0c 00 c2 08 00 |........|........|
|00000550| c2 08 00 c3 55 8b ec 2b | c0 40 c9 c2 0c 00 cc cc |....U..+|.@......|
|00000560| e9 15 01 00 00 e9 40 01 | 00 00 e9 4d 01 00 00 e9 |......@.|...M....|
|00000570| 3c 01 00 00 e9 07 01 00 | 00 e9 14 01 00 00 e9 09 |<.......|........|
|00000580| 01 00 00 e9 10 01 00 00 | e9 11 01 00 00 e9 e2 00 |........|........|
|00000590| 00 00 e9 ef 00 00 00 e9 | 08 01 00 00 e9 21 01 00 |........|.....!..|
|000005a0| 00 e9 10 01 00 00 55 ba | 40 00 00 00 8b ec 33 c0 |......U.|@.....3.|
|000005b0| 83 ec 10 8b 4d 14 89 45 | f8 89 45 fc 56 57 8b 75 |....M..E|..E.VW.u|
|000005c0| 10 0b f1 75 0d 8b d0 89 | 45 f0 89 45 f4 e9 8e 00 |...u....|E..E....|
|000005d0| 00 00 8b 45 08 8b 75 0c | 89 45 f0 89 75 f4 be 01 |...E..u.|.E..u...|
|000005e0| 00 00 00 8b 45 f8 8b 7d | fc c1 e8 1f 03 ff 0b c7 |....E..}|........|
|000005f0| 8b 7d f8 03 ff 89 45 fc | 8b 45 f4 c1 e8 1f 0b c7 |.}....E.|.E......|
|00000600| 8b 7d f4 03 ff 89 45 f8 | 8b 45 f0 d1 65 f0 c1 e8 |.}....E.|.E..e...|
|00000610| 1f 0b c7 3b 4d fc 89 45 | f4 72 10 8b 45 fc 39 45 |...;M..E|.r..E.9E|
|00000620| 14 75 22 8b 45 f8 39 45 | 10 77 1a 8b 45 14 8b 7d |.u".E.9E|.w..E..}|
|00000630| f8 09 75 f0 29 45 fc 39 | 7d 10 76 03 ff 4d fc 8b |..u.)E.9|}.v..M..|
|00000640| 45 10 29 45 f8 4a 75 9b | 8b 45 18 85 c0 74 0b 8b |E.)E.Ju.|.E...t..|
|00000650| 4d f8 8b 55 fc 89 08 89 | 50 04 8b 45 f0 8b 55 f4 |M..U....|P..E..U.|
|00000660| 5f 5e 8b e5 5d c2 14 00 | ff 25 a4 20 ee bf ff 25 |_^..]...|.%. ...%|
|00000670| 90 20 ee bf ff 25 94 20 | ee bf ff 25 98 20 ee bf |. ...%. |...%. ..|
|00000680| ff 25 9c 20 ee bf ff 25 | a0 20 ee bf ff 25 7c 20 |.%. ...%|. ...%| |
|00000690| ee bf ff 25 a8 20 ee bf | ff 25 ac 20 ee bf ff 25 |...%. ..|.%. ...%|
|000006a0| b0 20 ee bf ff 25 b4 20 | ee bf ff 25 b8 20 ee bf |. ...%. |...%. ..|
|000006b0| ff 25 bc 20 ee bf ff 25 | c0 20 ee bf ff 25 c4 20 |.%. ...%|. ...%. |
|000006c0| ee bf ff 25 c8 20 ee bf | 00 00 00 00 00 00 00 00 |...%. ..|........|
|000006d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 28 20 00 00 37 88 f4 2f | ff ff ff ff 18 21 00 00 |( ..7../|.....!..|
|00000810| 7c 20 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 || ......|........|
|00000820| 00 00 00 00 00 00 00 00 | 4e 00 00 80 dc 20 00 00 |........|N.... ..|
|00000830| e8 20 00 00 f6 20 00 00 | 02 21 00 00 0e 21 00 00 |. ... ..|.!...!..|
|00000840| 51 00 00 80 48 00 00 80 | 4c 00 00 80 52 00 00 80 |Q...H...|L...R...|
|00000850| d0 20 00 00 4d 00 00 80 | 4f 00 00 80 50 00 00 80 |. ..M...|O...P...|
|00000860| 53 00 00 80 49 00 00 80 | 4b 00 00 80 55 00 00 80 |S...I...|K...U...|
|00000870| 4a 00 00 80 54 00 00 80 | 00 00 00 00 00 69 f7 bf |J...T...|.....i..|
|00000880| 34 6d f7 bf 55 6d f7 bf | 80 6d f7 bf ab 6d f7 bf |4m..Um..|.m...m..|
|00000890| 4d ea fa bf 48 b5 f9 bf | 50 68 f7 bf a8 b4 f9 bf |M...H...|Ph......|
|000008a0| 74 b5 f9 bf 79 5d f8 bf | 70 68 f7 bf f8 b4 f9 bf |t...y]..|ph......|
|000008b0| 20 b5 f9 bf 58 69 f7 bf | 64 68 f7 bf 88 b4 f9 bf | ...Xi..|dh......|
|000008c0| 90 b5 f9 bf 7c b4 f9 bf | 88 b5 f9 bf 00 00 00 00 |....|...|........|
|000008d0| e8 01 52 74 6c 55 6e 77 | 69 6e 64 00 66 01 48 65 |..RtlUnw|ind.f.He|
|000008e0| 61 70 41 6c 6c 6f 63 00 | 6c 01 48 65 61 70 52 65 |apAlloc.|l.HeapRe|
|000008f0| 41 6c 6c 6f 63 00 6a 01 | 48 65 61 70 46 72 65 65 |Alloc.j.|HeapFree|
|00000900| 00 00 6d 01 48 65 61 70 | 53 69 7a 65 00 00 94 02 |..m.Heap|Size....|
|00000910| 64 70 72 69 6e 74 66 00 | 4b 45 52 4e 45 4c 33 32 |dprintf.|KERNEL32|
|00000920| 2e 64 6c 6c 00 00 00 00 | 00 00 00 00 00 00 00 00 |.dll....|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 00 00 00 00 c0 6c f3 2f | 00 00 00 00 e8 31 00 00 |.....l./|.....1..|
|00000a10| 01 00 00 00 34 00 00 00 | 28 00 00 00 28 30 00 00 |....4...|(...(0..|
|00000a20| f8 30 00 00 98 31 00 00 | 28 11 00 00 23 11 00 00 |.0...1..|(...#...|
|00000a30| 29 11 00 00 41 11 00 00 | 5a 10 00 00 9c 11 00 00 |)...A...|Z.......|
|00000a40| a1 11 00 00 38 11 00 00 | 3e 11 00 00 2c 11 00 00 |....8...|>...,...|
|00000a50| 7e 11 00 00 74 11 00 00 | 97 11 00 00 65 11 00 00 |~...t...|....e...|
|00000a60| 6f 11 00 00 6a 11 00 00 | 05 10 00 00 34 10 00 00 |o...j...|....4...|
|00000a70| 1a 10 00 00 47 10 00 00 | 79 11 00 00 47 11 00 00 |....G...|y...G...|
|00000a80| 4d 11 00 00 3b 11 00 00 | 53 11 00 00 60 11 00 00 |M...;...|S...`...|
|00000a90| 8d 11 00 00 a6 11 00 00 | 92 11 00 00 83 11 00 00 |........|........|
|00000aa0| 88 11 00 00 2f 11 00 00 | 44 11 00 00 4a 11 00 00 |..../...|D...J...|
|00000ab0| 50 11 00 00 bf 10 00 00 | 32 11 00 00 00 10 00 00 |P.......|2.......|
|00000ac0| 35 11 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |5.......|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 1c 11 00 00 | f2 31 00 00 00 32 00 00 |........|.1...2..|
|00000b00| 09 32 00 00 13 32 00 00 | 20 32 00 00 3a 32 00 00 |.2...2..| 2..:2..|
|00000b10| 4a 32 00 00 67 32 00 00 | 84 32 00 00 a2 32 00 00 |J2..g2..|.2...2..|
|00000b20| b0 32 00 00 bf 32 00 00 | da 32 00 00 f4 32 00 00 |.2...2..|.2...2..|
|00000b30| 10 33 00 00 22 33 00 00 | 30 33 00 00 44 33 00 00 |.3.."3..|03..D3..|
|00000b40| 52 33 00 00 6d 33 00 00 | 8b 33 00 00 a2 33 00 00 |R3..m3..|.3...3..|
|00000b50| ae 33 00 00 c4 33 00 00 | d0 33 00 00 e1 33 00 00 |.3...3..|.3...3..|
|00000b60| f4 33 00 00 13 34 00 00 | 29 34 00 00 3f 34 00 00 |.3...4..|)4..?4..|
|00000b70| 58 34 00 00 72 34 00 00 | 8a 34 00 00 a1 34 00 00 |X4..r4..|.4...4..|
|00000b80| b3 34 00 00 c9 34 00 00 | d5 34 00 00 f2 34 00 00 |.4...4..|.4...4..|
|00000b90| 09 35 00 00 13 35 00 00 | 00 00 01 00 02 00 33 00 |.5...5..|......3.|
|00000ba0| 09 00 03 00 04 00 05 00 | 06 00 07 00 08 00 0d 00 |........|........|
|00000bb0| 0e 00 0f 00 10 00 11 00 | 12 00 13 00 0a 00 0b 00 |........|........|
|00000bc0| 14 00 15 00 16 00 17 00 | 18 00 19 00 1a 00 1b 00 |........|........|
|00000bd0| 1c 00 1d 00 1e 00 0c 00 | 1f 00 20 00 21 00 22 00 |........|.. .!.".|
|00000be0| 23 00 24 00 25 00 26 00 | 4e 54 44 4c 4c 2e 64 6c |#.$.%.&.|NTDLL.dl|
|00000bf0| 6c 00 44 62 67 42 72 65 | 61 6b 50 6f 69 6e 74 00 |l.DbgBre|akPoint.|
|00000c00| 44 62 67 50 72 69 6e 74 | 00 44 62 67 50 72 6f 6d |DbgPrint|.DbgProm|
|00000c10| 70 74 00 4e 74 43 75 72 | 72 65 6e 74 54 65 62 00 |pt.NtCur|rentTeb.|
|00000c20| 4e 74 51 75 65 72 79 50 | 65 72 66 6f 72 6d 61 6e |NtQueryP|erforman|
|00000c30| 63 65 43 6f 75 6e 74 65 | 72 00 52 74 6c 41 6c 6c |ceCounte|r.RtlAll|
|00000c40| 6f 63 61 74 65 48 65 61 | 70 00 52 74 6c 41 6e 73 |ocateHea|p.RtlAns|
|00000c50| 69 53 74 72 69 6e 67 54 | 6f 55 6e 69 63 6f 64 65 |iStringT|oUnicode|
|00000c60| 53 74 72 69 6e 67 00 52 | 74 6c 43 6f 6e 76 65 72 |String.R|tlConver|
|00000c70| 74 4c 6f 6e 67 54 6f 4c | 61 72 67 65 49 6e 74 65 |tLongToL|argeInte|
|00000c80| 67 65 72 00 52 74 6c 43 | 6f 6e 76 65 72 74 55 6c |ger.RtlC|onvertUl|
|00000c90| 6f 6e 67 54 6f 4c 61 72 | 67 65 49 6e 74 65 67 65 |ongToLar|geIntege|
|00000ca0| 72 00 52 74 6c 43 72 65 | 61 74 65 48 65 61 70 00 |r.RtlCre|ateHeap.|
|00000cb0| 52 74 6c 44 65 73 74 72 | 6f 79 48 65 61 70 00 52 |RtlDestr|oyHeap.R|
|00000cc0| 74 6c 45 6e 6c 61 72 67 | 65 64 49 6e 74 65 67 65 |tlEnlarg|edIntege|
|00000cd0| 72 4d 75 6c 74 69 70 6c | 79 00 52 74 6c 45 6e 6c |rMultipl|y.RtlEnl|
|00000ce0| 61 72 67 65 64 55 6e 73 | 69 67 6e 65 64 44 69 76 |argedUns|ignedDiv|
|00000cf0| 69 64 65 00 52 74 6c 45 | 6e 6c 61 72 67 65 64 55 |ide.RtlE|nlargedU|
|00000d00| 6e 73 69 67 6e 65 64 4d | 75 6c 74 69 70 6c 79 00 |nsignedM|ultiply.|
|00000d10| 52 74 6c 45 78 41 6c 6c | 6f 63 61 74 65 48 65 61 |RtlExAll|ocateHea|
|00000d20| 70 00 52 74 6c 45 78 46 | 72 65 65 48 65 61 70 00 |p.RtlExF|reeHeap.|
|00000d30| 52 74 6c 45 78 52 65 41 | 6c 6c 6f 63 61 74 65 48 |RtlExReA|llocateH|
|00000d40| 65 61 70 00 52 74 6c 45 | 78 53 69 7a 65 48 65 61 |eap.RtlE|xSizeHea|
|00000d50| 70 00 52 74 6c 45 78 74 | 65 6e 64 65 64 49 6e 74 |p.RtlExt|endedInt|
|00000d60| 65 67 65 72 4d 75 6c 74 | 69 70 6c 79 00 52 74 6c |egerMult|iply.Rtl|
|00000d70| 45 78 74 65 6e 64 65 64 | 4c 61 72 67 65 49 6e 74 |Extended|LargeInt|
|00000d80| 65 67 65 72 44 69 76 69 | 64 65 00 52 74 6c 45 78 |egerDivi|de.RtlEx|
|00000d90| 74 65 6e 64 65 64 4d 61 | 67 69 63 44 69 76 69 64 |tendedMa|gicDivid|
|00000da0| 65 00 52 74 6c 46 72 65 | 65 48 65 61 70 00 52 74 |e.RtlFre|eHeap.Rt|
|00000db0| 6c 47 65 74 48 61 6e 64 | 6c 65 56 61 6c 75 65 48 |lGetHand|leValueH|
|00000dc0| 65 61 70 00 52 74 6c 47 | 72 6f 77 48 65 61 70 00 |eap.RtlG|rowHeap.|
|00000dd0| 52 74 6c 49 6d 61 67 65 | 4e 74 48 65 61 64 65 72 |RtlImage|NtHeader|
|00000de0| 00 52 74 6c 4c 61 72 67 | 65 49 6e 74 65 67 65 72 |.RtlLarg|eInteger|
|00000df0| 41 64 64 00 52 74 6c 4c | 61 72 67 65 49 6e 74 65 |Add.RtlL|argeInte|
|00000e00| 67 65 72 41 72 69 74 68 | 6d 65 74 69 63 53 68 69 |gerArith|meticShi|
|00000e10| 66 74 00 52 74 6c 4c 61 | 72 67 65 49 6e 74 65 67 |ft.RtlLa|rgeInteg|
|00000e20| 65 72 44 69 76 69 64 65 | 00 52 74 6c 4c 61 72 67 |erDivide|.RtlLarg|
|00000e30| 65 49 6e 74 65 67 65 72 | 4e 65 67 61 74 65 00 52 |eInteger|Negate.R|
|00000e40| 74 6c 4c 61 72 67 65 49 | 6e 74 65 67 65 72 53 68 |tlLargeI|ntegerSh|
|00000e50| 69 66 74 4c 65 66 74 00 | 52 74 6c 4c 61 72 67 65 |iftLeft.|RtlLarge|
|00000e60| 49 6e 74 65 67 65 72 53 | 68 69 66 74 52 69 67 68 |IntegerS|hiftRigh|
|00000e70| 74 00 52 74 6c 4c 61 72 | 67 65 49 6e 74 65 67 65 |t.RtlLar|geIntege|
|00000e80| 72 53 75 62 74 72 61 63 | 74 00 52 74 6c 4d 75 6c |rSubtrac|t.RtlMul|
|00000e90| 74 69 42 79 74 65 54 6f | 55 6e 69 63 6f 64 65 4e |tiByteTo|UnicodeN|
|00000ea0| 00 52 74 6c 52 65 41 6c | 6c 6f 63 61 74 65 48 65 |.RtlReAl|locateHe|
|00000eb0| 61 70 00 52 74 6c 53 65 | 74 48 61 6e 64 6c 65 56 |ap.RtlSe|tHandleV|
|00000ec0| 61 6c 75 65 48 65 61 70 | 00 52 74 6c 53 69 7a 65 |alueHeap|.RtlSize|
|00000ed0| 48 65 61 70 00 52 74 6c | 55 6e 69 63 6f 64 65 53 |Heap.Rtl|UnicodeS|
|00000ee0| 74 72 69 6e 67 54 6f 41 | 6e 73 69 53 74 72 69 6e |tringToA|nsiStrin|
|00000ef0| 67 00 52 74 6c 55 6e 69 | 63 6f 64 65 54 6f 4d 75 |g.RtlUni|codeToMu|
|00000f00| 6c 74 69 42 79 74 65 4e | 00 52 74 6c 55 6e 77 69 |ltiByteN|.RtlUnwi|
|00000f10| 6e 64 00 52 74 6c 56 61 | 6c 69 64 61 74 65 48 65 |nd.RtlVa|lidateHe|
|00000f20| 61 70 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ap......|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 00 00 00 c2 6c f3 2f | 00 00 00 00 00 00 01 00 |.....l./|........|
|00001010| 10 00 00 00 18 00 00 80 | 00 00 00 00 c2 6c f3 2f |........|.....l./|
|00001020| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00001030| 00 00 00 00 c2 6c f3 2f | 00 00 00 00 00 00 01 00 |.....l./|........|
|00001040| 09 04 00 00 48 00 00 00 | 60 40 00 00 38 03 00 00 |....H...|`@..8...|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001060| 38 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |8.4...V.|S._.V.E.|
|00001070| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00001080| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00001090| 00 00 04 00 b6 03 00 00 | 00 00 04 00 b6 03 00 00 |........|........|
|000010a0| 3f 00 00 00 00 00 00 00 | 01 00 01 00 02 00 00 00 |?.......|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 96 02 00 00 |........|........|
|000010c0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|000010d0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|000010e0| 72 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |r.....0.|4.0.9.0.|
|000010f0| 34 00 45 00 34 00 00 00 | 4c 00 16 00 01 00 43 00 |4.E.4...|L.....C.|
|00001100| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00001110| 6d 00 65 00 00 00 00 00 | 4d 00 69 00 63 00 72 00 |m.e.....|M.i.c.r.|
|00001120| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 43 00 6f 00 |o.s.o.f.|t. .C.o.|
|00001130| 72 00 70 00 6f 00 72 00 | 61 00 74 00 69 00 6f 00 |r.p.o.r.|a.t.i.o.|
|00001140| 6e 00 00 00 5e 00 1b 00 | 01 00 46 00 69 00 6c 00 |n...^...|..F.i.l.|
|00001150| 65 00 44 00 65 00 73 00 | 63 00 72 00 69 00 70 00 |e.D.e.s.|c.r.i.p.|
|00001160| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 57 00 69 00 |t.i.o.n.|....W.i.|
|00001170| 6e 00 33 00 32 00 20 00 | 4e 00 54 00 44 00 4c 00 |n.3.2. .|N.T.D.L.|
|00001180| 4c 00 20 00 63 00 6f 00 | 72 00 65 00 20 00 63 00 |L. .c.o.|r.e. .c.|
|00001190| 6f 00 6d 00 70 00 6f 00 | 6e 00 65 00 6e 00 74 00 |o.m.p.o.|n.e.n.t.|
|000011a0| 00 00 00 00 32 00 09 00 | 01 00 46 00 69 00 6c 00 |....2...|..F.i.l.|
|000011b0| 65 00 56 00 65 00 72 00 | 73 00 69 00 6f 00 6e 00 |e.V.e.r.|s.i.o.n.|
|000011c0| 00 00 00 00 34 00 2e 00 | 30 00 30 00 2e 00 39 00 |....4...|0.0...9.|
|000011d0| 35 00 30 00 00 00 00 00 | 2c 00 06 00 01 00 49 00 |5.0.....|,.....I.|
|000011e0| 6e 00 74 00 65 00 72 00 | 6e 00 61 00 6c 00 4e 00 |n.t.e.r.|n.a.l.N.|
|000011f0| 61 00 6d 00 65 00 00 00 | 4e 00 54 00 44 00 4c 00 |a.m.e...|N.T.D.L.|
|00001200| 4c 00 00 00 70 00 26 00 | 01 00 4c 00 65 00 67 00 |L...p.&.|..L.e.g.|
|00001210| 61 00 6c 00 43 00 6f 00 | 70 00 79 00 72 00 69 00 |a.l.C.o.|p.y.r.i.|
|00001220| 67 00 68 00 74 00 00 00 | 43 00 6f 00 70 00 79 00 |g.h.t...|C.o.p.y.|
|00001230| 72 00 69 00 67 00 68 00 | 74 00 20 00 a9 00 20 00 |r.i.g.h.|t. ... .|
|00001240| 4d 00 69 00 63 00 72 00 | 6f 00 73 00 6f 00 66 00 |M.i.c.r.|o.s.o.f.|
|00001250| 74 00 20 00 43 00 6f 00 | 72 00 70 00 2e 00 20 00 |t. .C.o.|r.p... .|
|00001260| 31 00 39 00 39 00 31 00 | 2d 00 31 00 39 00 39 00 |1.9.9.1.|-.1.9.9.|
|00001270| 35 00 00 00 3c 00 0a 00 | 01 00 4f 00 72 00 69 00 |5...<...|..O.r.i.|
|00001280| 67 00 69 00 6e 00 61 00 | 6c 00 46 00 69 00 6c 00 |g.i.n.a.|l.F.i.l.|
|00001290| 65 00 6e 00 61 00 6d 00 | 65 00 00 00 4e 00 54 00 |e.n.a.m.|e...N.T.|
|000012a0| 44 00 4c 00 4c 00 2e 00 | 44 00 4c 00 4c 00 00 00 |D.L.L...|D.L.L...|
|000012b0| 6a 00 25 00 01 00 50 00 | 72 00 6f 00 64 00 75 00 |j.%...P.|r.o.d.u.|
|000012c0| 63 00 74 00 4e 00 61 00 | 6d 00 65 00 00 00 00 00 |c.t.N.a.|m.e.....|
|000012d0| 4d 00 69 00 63 00 72 00 | 6f 00 73 00 6f 00 66 00 |M.i.c.r.|o.s.o.f.|
|000012e0| 74 00 ae 00 20 00 57 00 | 69 00 6e 00 64 00 6f 00 |t... .W.|i.n.d.o.|
|000012f0| 77 00 73 00 ae 00 20 00 | 4f 00 70 00 65 00 72 00 |w.s... .|O.p.e.r.|
|00001300| 61 00 74 00 69 00 6e 00 | 67 00 20 00 53 00 79 00 |a.t.i.n.|g. .S.y.|
|00001310| 73 00 74 00 65 00 6d 00 | 00 00 00 00 36 00 09 00 |s.t.e.m.|....6...|
|00001320| 01 00 50 00 72 00 6f 00 | 64 00 75 00 63 00 74 00 |..P.r.o.|d.u.c.t.|
|00001330| 56 00 65 00 72 00 73 00 | 69 00 6f 00 6e 00 00 00 |V.e.r.s.|i.o.n...|
|00001340| 34 00 2e 00 30 00 30 00 | 2e 00 39 00 35 00 30 00 |4...0.0.|..9.5.0.|
|00001350| 00 00 00 00 44 00 00 00 | 01 00 56 00 61 00 72 00 |....D...|..V.a.r.|
|00001360| 46 00 69 00 6c 00 65 00 | 49 00 6e 00 66 00 6f 00 |F.i.l.e.|I.n.f.o.|
|00001370| 00 00 00 00 24 00 04 00 | 00 00 54 00 72 00 61 00 |....$...|..T.r.a.|
|00001380| 6e 00 73 00 6c 00 61 00 | 74 00 69 00 6f 00 6e 00 |n.s.l.a.|t.i.o.n.|
|00001390| 00 00 00 00 09 04 e4 04 | 00 00 00 00 00 00 00 00 |........|........|
|000013a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001400| 00 10 00 00 30 00 00 00 | 13 30 2c 30 40 30 53 30 |....0...|.0,0@0S0|
|00001410| 6a 32 70 32 76 32 7c 32 | 82 32 88 32 8e 32 94 32 |j2p2v2|2|.2.2.2.2|
|00001420| 9a 32 a0 32 a6 32 ac 32 | b2 32 b8 32 be 32 c4 32 |.2.2.2.2|.2.2.2.2|
|00001430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+