home *** CD-ROM | disk | FTP | other *** search
/ Draw 3 / Draw 3.iso / AOL90 / COMPS / TB / TBSETUP.EXE / $PLUGINSDIR / InstOnReboot.dll < prev    next >
Microsoft Windows Dynamic Link Library  |  2004-11-19  |  4.5 KB
open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text


This file was processed as: Microsoft Windows Dynamic Link Library (executable/dll).

ConfidenceProgramDetectionMatch TypeSupport
100% dexvert Microsoft Windows Dynamic Link Library (executable/dll) magic Supported
100% dexvert MS-DOS/Windows or OS/2 Executable (executable/exe) magic Supported
1% dexvert OS/2 Dynamic Link Library (other/os2DLL) ext Unsupported
100% file PE32 executable for MS Windows 4.00 (DLL), Intel i386, 4 sections default
99% file data default
27% TrID Win32 Dynamic Link Library (generic) default
20% TrID Win16 NE executable (generic) default
18% TrID Win32 Executable (generic) default
8% TrID Windows Icons Library (generic) default (weak)
8% TrID OS/2 Executable (generic) default
100% siegfried fmt/899 Windows Portable Executable (32 bit) default
100% gt2 Ist eine ausf�hrbare Win32 Datei default
100% binwalkID Microsoft executable, portable (PE) default
100% xdgMime application/vnd.microsoft.portable-executable default (weak)


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| a5 49 be dc e1 28 d0 8f | e1 28 d0 8f e1 28 d0 8f |.I...(..|.(...(..|
|00000090| e4 24 df 8f e3 28 d0 8f | f2 20 8d 8f e3 28 d0 8f |.$...(..|. ...(..|
|000000a0| 62 20 8d 8f e2 28 d0 8f | e1 28 d1 8f f4 28 d0 8f |b ...(..|.(...(..|
|000000b0| e4 24 8f 8f e3 28 d0 8f | e4 24 8c 8f e0 28 d0 8f |.$...(..|.$...(..|
|000000c0| e4 24 8a 8f e0 28 d0 8f | 52 69 63 68 e1 28 d0 8f |.$...(..|Rich.(..|
|000000d0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 04 00 |........|PE..L...|
|000000e0| 18 28 53 41 00 00 00 00 | 00 00 00 00 e0 00 0e 21 |.(SA....|.......!|
|000000f0| 0b 01 07 0a 00 08 00 00 | 00 14 00 00 00 00 00 00 |........|........|
|00000100| 00 10 00 00 00 10 00 00 | 00 20 00 00 00 00 00 10 |........|. ......|
|00000110| 00 10 00 00 00 02 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000120| 04 00 00 00 00 00 00 00 | 00 50 00 00 00 04 00 00 |........|.P......|
|00000130| 00 00 00 00 02 00 00 04 | 00 00 10 00 00 10 00 00 |........|........|
|00000140| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000150| b0 22 00 00 57 00 00 00 | a4 20 00 00 3c 00 00 00 |."..W...|. ..<...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 40 00 00 d0 00 00 00 |........|.@......|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 20 00 00 5c 00 00 00 | 00 00 00 00 00 00 00 00 |. ..\...|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 2e 74 65 78 74 00 00 00 | ad 07 00 00 00 10 00 00 |.text...|........|
|000001e0| 00 08 00 00 00 04 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 20 00 00 60 | 2e 72 64 61 74 61 00 00 |.... ..`|.rdata..|
|00000200| 07 03 00 00 00 20 00 00 | 00 04 00 00 00 0c 00 00 |..... ..|........|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|00000220| 2e 64 61 74 61 00 00 00 | 18 0c 00 00 00 30 00 00 |.data...|.....0..|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 40 00 00 c0 | 2e 72 65 6c 6f 63 00 00 |....@...|.reloc..|
|00000250| 0e 01 00 00 00 40 00 00 | 00 02 00 00 00 10 00 00 |.....@..|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 8b 44 24 04 a3 14 3c 00 | 10 33 c0 40 c2 0c 00 a1 |.D$...<.|.3.@....|
|00000410| 00 30 00 10 85 c0 56 74 | 29 8b 30 85 f6 74 23 8d |.0....Vt|).0..t#.|
|00000420| 46 04 50 ff 74 24 0c ff | 15 04 20 00 10 8b 06 8b |F.P.t$..|.. .....|
|00000430| 0d 00 30 00 10 56 89 01 | ff 15 00 20 00 10 33 c0 |..0..V..|... ..3.|
|00000440| eb 03 33 c0 40 5e c2 04 | 00 55 8b ec 81 ec 00 08 |..3.@^..|.U......|
|00000450| 00 00 57 33 c0 ba ff 00 | 00 00 c6 85 00 f8 ff ff |..W3....|........|
|00000460| 00 8b ca 8d bd 01 f8 ff | ff f3 ab 66 ab aa 33 c0 |........|...f..3.|
|00000470| c6 85 00 fc ff ff 00 8b | ca 8d bd 01 fc ff ff f3 |........|........|
|00000480| ab 8b 4d 10 66 ab aa 8b | 45 08 a3 10 3c 00 10 8b |..M.f...|E...<...|
|00000490| 45 0c a3 04 30 00 10 8b | 45 14 85 c0 a3 00 30 00 |E...0...|E.....0.|
|000004a0| 10 89 0d 08 30 00 10 5f | 74 53 83 38 00 74 4e 8d |....0.._|tS.8.tN.|
|000004b0| 85 00 f8 ff ff 50 e8 54 | ff ff ff 85 c0 75 3e 8d |.....P.T|.....u>.|
|000004c0| 85 00 fc ff ff 50 e8 44 | ff ff ff 85 c0 75 2e 8d |.....P.D|.....u..|
|000004d0| 85 00 fc ff ff 68 5c 20 | 00 10 50 e8 00 03 00 00 |.....h\ |..P.....|
|000004e0| 85 c0 59 59 74 09 8d 85 | 00 fc ff ff 50 eb 02 6a |..YYt...|....P..j|
|000004f0| 00 8d 85 00 f8 ff ff 50 | e8 87 00 00 00 c9 c3 55 |.......P|.......U|
|00000500| 8b ec 51 53 56 57 ff 75 | 0c 8b 3d 0c 20 00 10 ff |..QSVW.u|..=. ...|
|00000510| d7 8b 75 08 89 45 fc eb | 27 8b 45 fc ff 75 0c 8a |..u..E..|'.E..u..|
|00000520| 1c 30 56 c6 04 30 00 ff | 15 08 20 00 10 85 c0 8b |.0V..0..|.. .....|
|00000530| 45 fc 88 1c 30 74 1a 56 | ff 15 54 20 00 10 8b f0 |E...0t.V|..T ....|
|00000540| 56 ff d7 3b 45 fc 7d d1 | 33 c0 5f 5e 5b c9 c2 08 |V..;E.}.|3._^[...|
|00000550| 00 8b c6 eb f5 ff 74 24 | 04 ff 15 14 20 00 10 8b |......t$|.... ...|
|00000560| c8 41 6a 00 f7 d9 1b c9 | 23 c8 51 ff 74 24 14 6a |.Aj.....|#.Q.t$.j|
|00000570| 00 6a 01 ff 74 24 1c ff | 74 24 1c ff 15 10 20 00 |.j..t$..|t$.... .|
|00000580| 10 c2 0c 00 83 ec 10 56 | 68 94 20 00 10 ff 15 48 |.......V|h. ....H|
|00000590| 20 00 10 85 c0 8b 74 24 | 1c 74 21 68 88 20 00 10 | .....t$|.t!h. ..|
|000005a0| 50 ff 15 44 20 00 10 85 | c0 74 11 6a 05 56 ff 74 |P..D ...|.t.j.V.t|
|000005b0| 24 20 ff d0 85 c0 0f 85 | 1b 02 00 00 85 f6 53 55 |$ ......|......SU|
|000005c0| 8b 2d 40 20 00 10 57 bf | 00 04 00 00 74 2d 6a 01 |.-@ ..W.|....t-j.|
|000005d0| 6a 00 56 e8 7d ff ff ff | 50 ff 15 3c 20 00 10 57 |j.V.}...|P..< ..W|
|000005e0| bb 10 38 00 10 53 56 ff | d5 85 c0 0f 84 e3 01 00 |..8..SV.|........|
|000005f0| 00 3b c7 0f 8f db 01 00 | 00 eb 11 68 5c 20 00 10 |.;......|...h\ ..|
|00000600| bb 10 38 00 10 53 ff 15 | 04 20 00 10 57 be 10 34 |..8..S..|. ..W..4|
|00000610| 00 10 56 ff 74 24 2c ff | d5 33 ed 3b c5 0f 84 b1 |..V.t$,.|.3.;....|
|00000620| 01 00 00 3b c7 0f 8f a9 | 01 00 00 56 53 68 80 20 |...;....|...VSh. |
|00000630| 00 10 68 10 30 00 10 ff | 15 50 20 00 10 83 c4 10 |..h.0...|.P .....|
|00000640| 68 f0 03 00 00 56 8b d8 | ff 15 38 20 00 10 68 70 |h....V..|..8 ..hp|
|00000650| 20 00 10 56 ff 15 34 20 | 00 10 55 68 80 00 00 08 | ..V..4 |..Uh....|
|00000660| 6a 04 55 55 68 00 00 00 | c0 56 ff 15 10 20 00 10 |j.UUh...|.V... ..|
|00000670| 8b f8 83 ff ff 89 7c 24 | 10 0f 84 55 01 00 00 55 |......|$|...U...U|
|00000680| 57 ff 15 30 20 00 10 8b | f0 33 c9 51 8d 2c 1e 8d |W..0 ...|.3.Q.,..|
|00000690| 45 0a 50 51 6a 04 51 57 | 89 6c 24 34 89 44 24 2c |E.PQj.QW|.l$4.D$,|
|000006a0| ff 15 2c 20 00 10 33 c9 | 3b c1 89 44 24 28 0f 84 |.., ..3.|;..D$(..|
|000006b0| 08 01 00 00 51 51 51 6a | 02 50 ff 15 28 20 00 10 |....QQQj|.P..( ..|
|000006c0| 8b f8 85 ff 0f 84 e2 00 | 00 00 68 64 20 00 10 57 |........|..hd ..W|
|000006d0| e8 2a fe ff ff 85 c0 75 | 2b 68 64 20 00 10 8d 04 |.*.....u|+hd ....|
|000006e0| 37 50 ff 15 04 20 00 10 | 53 83 c6 0a 8d 04 37 68 |7P... ..|S.....7h|
|000006f0| 10 30 00 10 50 e8 76 01 | 00 00 83 c4 0c 03 f3 e9 |.0..P.v.|........|
|00000700| a1 00 00 00 68 60 20 00 | 10 83 c0 0a 50 e8 ed fd |....h` .|....P...|
|00000710| ff ff 85 c0 74 7b ff 74 | 24 14 40 6a 40 89 44 24 |....t{.t|$.@j@.D$|
|00000720| 20 89 44 24 2c ff 15 24 | 20 00 10 8b e8 85 ed 74 | .D$,..$| ......t|
|00000730| 45 68 10 30 00 10 55 ff | 15 04 20 00 10 8d 0c 37 |Eh.0..U.|.. ....7|
|00000740| 8b 74 24 18 03 dd 2b de | 8b 44 24 24 3b c1 73 0c |.t$...+.|.D$$;.s.|
|00000750| 8a 10 88 14 03 40 89 44 | 24 24 eb ec 2b c6 50 55 |.....@.D|$$..+.PU|
|00000760| 56 e8 0a 01 00 00 8b 74 | 24 28 83 c4 0c 55 ff 15 |V......t|$(...U..|
|00000770| 00 20 00 10 eb 2f 57 ff | 15 20 20 00 10 ff 74 24 |. .../W.|.  ...t$|
|00000780| 28 8b 35 3c 20 00 10 ff | d6 ff 74 24 10 ff d6 eb |(.5< ...|..t$....|
|00000790| 43 53 8d 04 37 68 10 30 | 00 10 50 e8 d0 00 00 00 |CS..7h.0|..P.....|
|000007a0| 83 c4 0c 8b f5 57 ff 15 | 20 20 00 10 ff 74 24 28 |.....W..|  ...t$(|
|000007b0| ff 15 3c 20 00 10 8b 7c | 24 10 33 c9 51 51 56 57 |..< ...||$.3.QQVW|
|000007c0| ff 15 1c 20 00 10 57 ff | 15 18 20 00 10 57 ff 15 |... ..W.|.. ..W..|
|000007d0| 3c 20 00 10 5f 5d 5b 5e | 83 c4 10 c2 08 00 cc cc |< .._][^|........|
|000007e0| 8b 54 24 04 8b 4c 24 08 | f7 c2 03 00 00 00 75 3c |.T$..L$.|......u<|
|000007f0| 8b 02 3a 01 75 2e 0a c0 | 74 26 3a 61 01 75 25 0a |..:.u...|t&:a.u%.|
|00000800| e4 74 1d c1 e8 10 3a 41 | 02 75 19 0a c0 74 11 3a |.t....:A|.u...t.:|
|00000810| 61 03 75 10 83 c1 04 83 | c2 04 0a e4 75 d2 8b ff |a.u.....|....u...|
|00000820| 33 c0 c3 90 1b c0 d1 e0 | 83 c0 01 c3 f7 c2 01 00 |3.......|........|
|00000830| 00 00 74 18 8a 02 83 c2 | 01 3a 01 75 e7 83 c1 01 |..t.....|.:.u....|
|00000840| 0a c0 74 dc f7 c2 02 00 | 00 00 74 a4 66 8b 02 83 |..t.....|..t.f...|
|00000850| c2 02 3a 01 75 ce 0a c0 | 74 c6 3a 61 01 75 c5 0a |..:.u...|t.:a.u..|
|00000860| e4 74 bd 83 c1 02 eb 88 | cc cc cc cc cc cc cc cc |.t......|........|
|00000870| 55 8b ec 57 56 8b 75 0c | 8b 4d 10 8b 7d 08 8b c1 |U..WV.u.|.M..}...|
|00000880| 8b d1 03 c6 3b fe 76 08 | 3b f8 0f 82 7c 01 00 00 |....;.v.|;...|...|
|00000890| f7 c7 03 00 00 00 75 14 | c1 e9 02 83 e2 03 83 f9 |......u.|........|
|000008a0| 08 72 29 f3 a5 ff 24 95 | bc 15 00 10 8b c7 ba 03 |.r)...$.|........|
|000008b0| 00 00 00 83 e9 04 72 0c | 83 e0 03 03 c8 ff 24 85 |......r.|......$.|
|000008c0| d0 14 00 10 ff 24 8d cc | 15 00 10 90 ff 24 8d 50 |.....$..|.....$.P|
|000008d0| 15 00 10 90 e0 14 00 10 | 0c 15 00 10 30 15 00 10 |........|....0...|
|000008e0| 23 d1 8a 06 88 07 8a 46 | 01 88 47 01 8a 46 02 c1 |#......F|..G..F..|
|000008f0| e9 02 88 47 02 83 c6 03 | 83 c7 03 83 f9 08 72 cc |...G....|......r.|
|00000900| f3 a5 ff 24 95 bc 15 00 | 10 8d 49 00 23 d1 8a 06 |...$....|..I.#...|
|00000910| 88 07 8a 46 01 c1 e9 02 | 88 47 01 83 c6 02 83 c7 |...F....|.G......|
|00000920| 02 83 f9 08 72 a6 f3 a5 | ff 24 95 bc 15 00 10 90 |....r...|.$......|
|00000930| 23 d1 8a 06 88 07 83 c6 | 01 c1 e9 02 83 c7 01 83 |#.......|........|
|00000940| f9 08 72 88 f3 a5 ff 24 | 95 bc 15 00 10 8d 49 00 |..r....$|......I.|
|00000950| b3 15 00 10 a0 15 00 10 | 98 15 00 10 90 15 00 10 |........|........|
|00000960| 88 15 00 10 80 15 00 10 | 78 15 00 10 70 15 00 10 |........|x...p...|
|00000970| 8b 44 8e e4 89 44 8f e4 | 8b 44 8e e8 89 44 8f e8 |.D...D..|.D...D..|
|00000980| 8b 44 8e ec 89 44 8f ec | 8b 44 8e f0 89 44 8f f0 |.D...D..|.D...D..|
|00000990| 8b 44 8e f4 89 44 8f f4 | 8b 44 8e f8 89 44 8f f8 |.D...D..|.D...D..|
|000009a0| 8b 44 8e fc 89 44 8f fc | 8d 04 8d 00 00 00 00 03 |.D...D..|........|
|000009b0| f0 03 f8 ff 24 95 bc 15 | 00 10 8b ff cc 15 00 10 |....$...|........|
|000009c0| d4 15 00 10 e0 15 00 10 | f4 15 00 10 8b 45 08 5e |........|.....E.^|
|000009d0| 5f c9 c3 90 8a 06 88 07 | 8b 45 08 5e 5f c9 c3 90 |_.......|.E.^_...|
|000009e0| 8a 06 88 07 8a 46 01 88 | 47 01 8b 45 08 5e 5f c9 |.....F..|G..E.^_.|
|000009f0| c3 8d 49 00 8a 06 88 07 | 8a 46 01 88 47 01 8a 46 |..I.....|.F..G..F|
|00000a00| 02 88 47 02 8b 45 08 5e | 5f c9 c3 90 8d 74 31 fc |..G..E.^|_....t1.|
|00000a10| 8d 7c 39 fc f7 c7 03 00 | 00 00 75 24 c1 e9 02 83 |.|9.....|..u$....|
|00000a20| e2 03 83 f9 08 72 0d fd | f3 a5 fc ff 24 95 58 17 |.....r..|....$.X.|
|00000a30| 00 10 8b ff f7 d9 ff 24 | 8d 08 17 00 10 8d 49 00 |.......$|......I.|
|00000a40| 8b c7 ba 03 00 00 00 83 | f9 04 72 0c 83 e0 03 2b |........|..r....+|
|00000a50| c8 ff 24 85 5c 16 00 10 | ff 24 8d 58 17 00 10 90 |..$.\...|.$.X....|
|00000a60| 6c 16 00 10 90 16 00 10 | b8 16 00 10 8a 46 03 23 |l.......|.....F.#|
|00000a70| d1 88 47 03 83 ee 01 c1 | e9 02 83 ef 01 83 f9 08 |..G.....|........|
|00000a80| 72 b2 fd f3 a5 fc ff 24 | 95 58 17 00 10 8d 49 00 |r......$|.X....I.|
|00000a90| 8a 46 03 23 d1 88 47 03 | 8a 46 02 c1 e9 02 88 47 |.F.#..G.|.F.....G|
|00000aa0| 02 83 ee 02 83 ef 02 83 | f9 08 72 88 fd f3 a5 fc |........|..r.....|
|00000ab0| ff 24 95 58 17 00 10 90 | 8a 46 03 23 d1 88 47 03 |.$.X....|.F.#..G.|
|00000ac0| 8a 46 02 88 47 02 8a 46 | 01 c1 e9 02 88 47 01 83 |.F..G..F|.....G..|
|00000ad0| ee 03 83 ef 03 83 f9 08 | 0f 82 56 ff ff ff fd f3 |........|..V.....|
|00000ae0| a5 fc ff 24 95 58 17 00 | 10 8d 49 00 0c 17 00 10 |...$.X..|..I.....|
|00000af0| 14 17 00 10 1c 17 00 10 | 24 17 00 10 2c 17 00 10 |........|$...,...|
|00000b00| 34 17 00 10 3c 17 00 10 | 4f 17 00 10 8b 44 8e 1c |4...<...|O....D..|
|00000b10| 89 44 8f 1c 8b 44 8e 18 | 89 44 8f 18 8b 44 8e 14 |.D...D..|.D...D..|
|00000b20| 89 44 8f 14 8b 44 8e 10 | 89 44 8f 10 8b 44 8e 0c |.D...D..|.D...D..|
|00000b30| 89 44 8f 0c 8b 44 8e 08 | 89 44 8f 08 8b 44 8e 04 |.D...D..|.D...D..|
|00000b40| 89 44 8f 04 8d 04 8d 00 | 00 00 00 03 f0 03 f8 ff |.D......|........|
|00000b50| 24 95 58 17 00 10 8b ff | 68 17 00 10 70 17 00 10 |$.X.....|h...p...|
|00000b60| 80 17 00 10 94 17 00 10 | 8b 45 08 5e 5f c9 c3 90 |........|.E.^_...|
|00000b70| 8a 46 03 88 47 03 8b 45 | 08 5e 5f c9 c3 8d 49 00 |.F..G..E|.^_...I.|
|00000b80| 8a 46 03 88 47 03 8a 46 | 02 88 47 02 8b 45 08 5e |.F..G..F|..G..E.^|
|00000b90| 5f c9 c3 90 8a 46 03 88 | 47 03 8a 46 02 88 47 02 |_....F..|G..F..G.|
|00000ba0| 8a 46 01 88 47 01 8b 45 | 08 5e 5f c9 c3 00 00 00 |.F..G..E|.^_.....|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 3c 21 00 00 4a 21 00 00 | 56 21 00 00 62 21 00 00 |<!..J!..|V!..b!..|
|00000c10| 6e 21 00 00 7c 21 00 00 | 92 21 00 00 a2 21 00 00 |n!..|!..|.!...!..|
|00000c20| b4 21 00 00 c6 21 00 00 | d4 21 00 00 e4 21 00 00 |.!...!..|.!...!..|
|00000c30| fa 21 00 00 08 22 00 00 | 14 22 00 00 2c 22 00 00 |.!..."..|."..,"..|
|00000c40| 3a 22 00 00 4e 22 00 00 | 60 22 00 00 00 00 00 00 |:"..N"..|`"......|
|00000c50| 8e 22 00 00 82 22 00 00 | 00 00 00 00 4e 55 4c 00 |."..."..|....NUL.|
|00000c60| 0a 5b 00 00 5b 52 65 6e | 61 6d 65 5d 0d 0a 00 00 |.[..[Ren|ame]....|
|00000c70| 5c 77 69 6e 69 6e 69 74 | 2e 69 6e 69 00 00 00 00 |\wininit|.ini....|
|00000c80| 25 73 3d 25 73 0d 0a 00 | 4d 6f 76 65 46 69 6c 65 |%s=%s...|MoveFile|
|00000c90| 45 78 41 00 6b 65 72 6e | 65 6c 33 32 2e 64 6c 6c |ExA.kern|el32.dll|
|00000ca0| 00 00 00 00 e0 20 00 00 | 00 00 00 00 00 00 00 00 |..... ..|........|
|00000cb0| 74 22 00 00 00 20 00 00 | 30 21 00 00 00 00 00 00 |t"... ..|0!......|
|00000cc0| 00 00 00 00 9a 22 00 00 | 50 20 00 00 00 00 00 00 |....."..|P ......|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 3c 21 00 00 4a 21 00 00 | 56 21 00 00 62 21 00 00 |<!..J!..|V!..b!..|
|00000cf0| 6e 21 00 00 7c 21 00 00 | 92 21 00 00 a2 21 00 00 |n!..|!..|.!...!..|
|00000d00| b4 21 00 00 c6 21 00 00 | d4 21 00 00 e4 21 00 00 |.!...!..|.!...!..|
|00000d10| fa 21 00 00 08 22 00 00 | 14 22 00 00 2c 22 00 00 |.!..."..|."..,"..|
|00000d20| 3a 22 00 00 4e 22 00 00 | 60 22 00 00 00 00 00 00 |:"..N"..|`"......|
|00000d30| 8e 22 00 00 82 22 00 00 | 00 00 00 00 f5 01 47 6c |."..."..|......Gl|
|00000d40| 6f 62 61 6c 46 72 65 65 | 00 00 b6 03 6c 73 74 72 |obalFree|....lstr|
|00000d50| 63 70 79 41 00 00 b3 03 | 6c 73 74 72 63 6d 70 69 |cpyA....|lstrcmpi|
|00000d60| 41 00 bc 03 6c 73 74 72 | 6c 65 6e 41 00 00 4d 00 |A...lstr|lenA..M.|
|00000d70| 43 72 65 61 74 65 46 69 | 6c 65 41 00 56 01 47 65 |CreateFi|leA.V.Ge|
|00000d80| 74 46 69 6c 65 41 74 74 | 72 69 62 75 74 65 73 41 |tFileAtt|ributesA|
|00000d90| 00 00 03 03 53 65 74 45 | 6e 64 4f 66 46 69 6c 65 |....SetE|ndOfFile|
|00000da0| 00 00 0e 03 53 65 74 46 | 69 6c 65 50 6f 69 6e 74 |....SetF|ilePoint|
|00000db0| 65 72 00 00 63 03 55 6e | 6d 61 70 56 69 65 77 4f |er..c.Un|mapViewO|
|00000dc0| 66 46 69 6c 65 00 ee 01 | 47 6c 6f 62 61 6c 41 6c |fFile...|GlobalAl|
|00000dd0| 6c 6f 63 00 5e 02 4d 61 | 70 56 69 65 77 4f 66 46 |loc.^.Ma|pViewOfF|
|00000de0| 69 6c 65 00 4e 00 43 72 | 65 61 74 65 46 69 6c 65 |ile.N.Cr|eateFile|
|00000df0| 4d 61 70 70 69 6e 67 41 | 00 00 5b 01 47 65 74 46 |MappingA|..[.GetF|
|00000e00| 69 6c 65 53 69 7a 65 00 | ad 03 6c 73 74 72 63 61 |ileSize.|..lstrca|
|00000e10| 74 41 00 00 e9 01 47 65 | 74 57 69 6e 64 6f 77 73 |tA....Ge|tWindows|
|00000e20| 44 69 72 65 63 74 6f 72 | 79 41 00 00 2e 00 43 6c |Director|yA....Cl|
|00000e30| 6f 73 65 48 61 6e 64 6c | 65 00 ad 01 47 65 74 53 |oseHandl|e...GetS|
|00000e40| 68 6f 72 74 50 61 74 68 | 4e 61 6d 65 41 00 98 01 |hortPath|NameA...|
|00000e50| 47 65 74 50 72 6f 63 41 | 64 64 72 65 73 73 00 00 |GetProcA|ddress..|
|00000e60| 77 01 47 65 74 4d 6f 64 | 75 6c 65 48 61 6e 64 6c |w.GetMod|uleHandl|
|00000e70| 65 41 00 00 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |eA..KERN|EL32.dll|
|00000e80| 00 00 2a 00 43 68 61 72 | 4e 65 78 74 41 00 d6 02 |..*.Char|NextA...|
|00000e90| 77 73 70 72 69 6e 74 66 | 41 00 55 53 45 52 33 32 |wsprintf|A.USER32|
|00000ea0| 2e 64 6c 6c 00 00 00 00 | 00 00 00 00 00 00 00 00 |.dll....|........|
|00000eb0| 00 00 00 00 18 28 53 41 | 00 00 00 00 e2 22 00 00 |.....(SA|....."..|
|00000ec0| 01 00 00 00 01 00 00 00 | 01 00 00 00 d8 22 00 00 |........|....."..|
|00000ed0| dc 22 00 00 e0 22 00 00 | 49 10 00 00 f3 22 00 00 |."..."..|I...."..|
|00000ee0| 00 00 49 6e 73 74 4f 6e | 52 65 62 6f 6f 74 2e 64 |..InstOn|Reboot.d|
|00000ef0| 6c 6c 00 49 6e 73 74 61 | 6c 6c 46 69 6c 65 4f 6e |ll.Insta|llFileOn|
|00000f00| 52 65 62 6f 6f 74 00 00 | 00 00 00 00 00 00 00 00 |Reboot..|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 10 00 00 d0 00 00 00 | 05 30 10 30 29 30 31 30 |........|.0.0)010|
|00001010| 3a 30 8b 30 93 30 9d 30 | a3 30 d6 30 0b 31 29 31 |:0.0.0.0|.0.0.1)1|
|00001020| 3a 31 5b 31 7d 31 89 31 | 8f 31 9c 31 a3 31 c2 31 |:1[1}1.1|.1.1.1.1|
|00001030| db 31 e1 31 fc 31 01 32 | 08 32 0e 32 2e 32 33 32 |.1.1.1.2|.2.2.232|
|00001040| 39 32 4a 32 4f 32 56 32 | 6c 32 83 32 a2 32 bc 32 |92J2O2V2|l2.2.2.2|
|00001050| cb 32 da 32 e4 32 f0 32 | 05 33 27 33 32 33 39 33 |.2.2.2.2|.3'32393|
|00001060| 70 33 79 33 83 33 96 33 | a8 33 b2 33 c2 33 c9 33 |p3y3.3.3|.3.3.3.3|
|00001070| d0 33 a8 34 c0 34 c7 34 | cf 34 d4 34 d8 34 dc 34 |.3.4.4.4|.4.4.4.4|
|00001080| 05 35 2b 35 49 35 50 35 | 54 35 58 35 5c 35 60 35 |.5+5I5P5|T5X5\5`5|
|00001090| 64 35 68 35 6c 35 b6 35 | bc 35 c0 35 c4 35 c8 35 |d5h5l5.5|.5.5.5.5|
|000010a0| 2e 36 39 36 54 36 5b 36 | 60 36 64 36 68 36 89 36 |.696T6[6|`6d6h6.6|
|000010b0| b3 36 e5 36 ec 36 f0 36 | f4 36 f8 36 fc 36 00 37 |.6.6.6.6|.6.6.6.7|
|000010c0| 04 37 08 37 52 37 58 37 | 5c 37 60 37 64 37 00 00 |.7.7R7X7|\7`7d7..|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+