/ Venus 7000
/ darktronics.iso / Software / Service Packs / Win2kSP4.exe / i386 / ifmember.ex_ / ifmember.exe ![]() |
MS-DOS/Windows or OS/2 Executable | 2003-06-19 | 5.3 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
1% | dexvert | CRYPTEXE Proterctd (archive/cryptexeProtected) | ext | Unsupported |
1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
1% | dexvert | DaRKSToP Proterctd (archive/darkstopProtected) | ext | Unsupported |
1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
100% | file | PE32 executable for MS Windows 4.00 (console), Intel i386 (stripped to external PDB), 2 sections | default | |
99% | file | data | default | |
27% | TrID | Win32 Dynamic Link Library (generic) | default | |
20% | TrID | Win16 NE executable (generic) | default | |
18% | TrID | Win32 Executable (generic) | default | |
8% | TrID | Windows Icons Library (generic) | default (weak) | |
8% | TrID | OS/2 Executable (generic) | default | |
100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
100% | binwalkID | Microsoft executable, portable (PE) | default | |
100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 c8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| f9 83 8e ae bd e2 e0 fd | bd e2 e0 fd bd e2 e0 fd |........|........|
|00000090| d7 fe e2 fd a5 e2 e0 fd | bd e2 e1 fd b4 e2 e0 fd |........|........|
|000000a0| e4 c1 f3 fd ba e2 e0 fd | bd e2 e0 fd b3 e2 e0 fd |........|........|
|000000b0| 52 69 63 68 bd e2 e0 fd | 00 00 00 00 00 00 00 00 |Rich....|........|
|000000c0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 02 00 |........|PE..L...|
|000000d0| b0 8a 61 3d 00 00 00 00 | 00 00 00 00 e0 00 0f 03 |..a=....|........|
|000000e0| 0b 01 05 0c 00 0c 00 00 | 00 02 00 00 00 00 00 00 |........|........|
|000000f0| d0 16 00 00 00 10 00 00 | 00 20 00 00 00 00 00 01 |........|. ......|
|00000100| 00 10 00 00 00 02 00 00 | 05 00 00 00 05 00 00 00 |........|........|
|00000110| 04 00 00 00 00 00 00 00 | 00 30 00 00 00 06 00 00 |........|.0......|
|00000120| c5 24 00 00 03 00 00 80 | 00 00 04 00 00 10 00 00 |.$......|........|
|00000130| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | ac 18 00 00 64 00 00 00 |........|....d...|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 90 10 00 00 1c 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 10 00 00 84 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 2e 74 65 78 74 00 00 00 | 6a 0b 00 00 00 10 00 00 |.text...|j.......|
|000001d0| 00 0c 00 00 00 06 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 20 00 00 60 | 2e 64 61 74 61 00 00 00 |.... ..`|.data...|
|000001f0| 3c 00 00 00 00 20 00 00 | 00 02 00 00 00 12 00 00 |<.... ..|........|
|00000200| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| d6 1a 00 00 ec 1a 00 00 | c2 1a 00 00 00 00 00 00 |........|........|
|00000610| 2a 1b 00 00 48 1b 00 00 | 0e 1b 00 00 36 1b 00 00 |*...H...|....6...|
|00000620| 1e 1b 00 00 00 00 00 00 | fe 19 00 00 f6 19 00 00 |........|........|
|00000630| 24 1a 00 00 34 1a 00 00 | ea 19 00 00 0c 1a 00 00 |$...4...|........|
|00000640| 14 1a 00 00 d4 19 00 00 | de 19 00 00 82 1a 00 00 |........|........|
|00000650| 94 1a 00 00 b4 1a 00 00 | ca 19 00 00 be 19 00 00 |........|........|
|00000660| b4 19 00 00 ac 19 00 00 | 74 1a 00 00 40 1a 00 00 |........|t...@...|
|00000670| 54 1a 00 00 64 1a 00 00 | 00 00 00 00 94 19 00 00 |T...d...|........|
|00000680| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000690| 00 00 00 00 b0 8a 61 3d | 00 00 00 00 04 00 00 00 |......a=|........|
|000006a0| 10 01 00 00 00 00 00 00 | 00 14 00 00 00 00 00 00 |........|........|
|000006b0| b0 8a 61 3d 00 00 00 00 | 03 00 00 00 50 00 00 00 |..a=....|....P...|
|000006c0| 00 00 00 00 10 15 00 00 | 00 00 00 00 b0 8a 61 3d |........|......a=|
|000006d0| 00 00 00 00 06 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006e0| 60 15 00 00 00 00 00 00 | b0 8a 61 3d 00 00 00 00 |`.......|..a=....|
|000006f0| 02 00 00 00 1d 00 00 00 | 00 00 00 00 e0 fe a2 ff |........|........|
|00000700| 09 20 74 79 70 69 6e 67 | 20 22 4e 45 54 20 48 45 |. typing| "NET HE|
|00000710| 4c 50 4d 53 47 20 78 78 | 78 22 2c 20 77 68 65 72 |LPMSG xx|x", wher|
|00000720| 65 20 78 78 78 20 69 73 | 20 74 68 65 20 65 72 72 |e xxx is| the err|
|00000730| 6f 72 20 63 6f 64 65 20 | 61 62 6f 76 65 2e 0a 00 |or code |above...|
|00000740| 09 4d 6f 72 65 20 69 6e | 66 6f 72 6d 61 74 69 6f |.More in|formatio|
|00000750| 6e 20 61 62 6f 75 74 20 | 74 68 69 73 20 65 72 72 |n about |this err|
|00000760| 6f 72 20 63 6f 64 65 20 | 63 61 6e 20 62 65 20 6f |or code |can be o|
|00000770| 62 74 61 69 6e 65 64 20 | 62 79 0a 00 09 45 72 72 |btained |by...Err|
|00000780| 6f 72 20 63 6f 64 65 20 | 72 65 74 75 72 6e 65 64 |or code |returned|
|00000790| 20 62 79 20 73 79 73 74 | 65 6d 20 77 61 73 20 25 | by syst|em was %|
|000007a0| 6c 64 2e 0a 00 00 00 00 | 47 00 72 00 6f 00 75 00 |ld......|G.r.o.u.|
|000007b0| 70 00 20 00 25 00 73 00 | 20 00 6d 00 61 00 74 00 |p. .%.s.| .m.a.t.|
|000007c0| 63 00 68 00 65 00 73 00 | 20 00 6c 00 69 00 73 00 |c.h.e.s.| .l.i.s.|
|000007d0| 74 00 2e 00 0a 00 00 00 | 55 00 73 00 65 00 72 00 |t.......|U.s.e.r.|
|000007e0| 20 00 69 00 73 00 20 00 | 61 00 20 00 6d 00 65 00 | .i.s. .|a. .m.e.|
|000007f0| 6d 00 62 00 65 00 72 00 | 20 00 6f 00 66 00 20 00 |m.b.e.r.| .o.f. .|
|00000800| 67 00 72 00 6f 00 75 00 | 70 00 20 00 25 00 73 00 |g.r.o.u.|p. .%.s.|
|00000810| 2e 00 0a 00 00 00 00 00 | 25 00 6c 00 73 00 5c 00 |........|%.l.s.\.|
|00000820| 25 00 6c 00 73 00 00 00 | 25 73 3a 20 47 65 74 54 |%.l.s...|%s: GetT|
|00000830| 6f 6b 65 6e 49 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |okenInfo|rmation |
|00000840| 66 61 69 6c 65 64 2e 00 | 25 73 3a 20 48 65 61 70 |failed..|%s: Heap|
|00000850| 41 6c 6c 6f 63 66 61 69 | 6c 65 64 2e 00 00 00 00 |Allocfai|led.....|
|00000860| 25 73 3a 20 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |%s: Open|ProcessT|
|00000870| 6f 6b 65 6e 20 66 61 69 | 6c 65 64 2e 00 00 00 00 |oken fai|led.....|
|00000880| 2f 6c 00 00 2f 76 00 00 | 09 45 78 61 6d 70 6c 65 |/l../v..|.Example|
|00000890| 3a 20 25 73 20 2f 76 20 | 2f 6c 20 22 4d 79 44 6f |: %s /v |/l "MyDo|
|000008a0| 6d 61 69 6e 5c 44 6f 6d | 61 69 6e 20 55 73 65 72 |main\Dom|ain User|
|000008b0| 73 22 20 55 73 65 72 73 | 20 45 76 65 72 79 6f 6e |s" Users| Everyon|
|000008c0| 65 0a 00 00 09 52 65 74 | 75 72 6e 20 43 6f 64 65 |e....Ret|urn Code|
|000008d0| 20 73 68 6f 77 73 20 6e | 75 6d 62 65 72 20 6f 66 | shows n|umber of|
|000008e0| 20 67 72 6f 75 70 73 20 | 74 68 69 73 20 75 73 65 | groups |this use|
|000008f0| 72 20 69 73 20 61 20 6d | 65 6d 62 65 72 20 6f 66 |r is a m|ember of|
|00000900| 2e 0a 00 00 09 2f 6c 69 | 73 74 20 77 69 6c 6c 20 |...../li|st will |
|00000910| 70 72 69 6e 74 20 6f 75 | 74 20 61 6c 6c 20 67 72 |print ou|t all gr|
|00000920| 6f 75 70 73 20 75 73 65 | 72 20 69 73 20 61 20 6d |oups use|r is a m|
|00000930| 65 6d 62 65 72 20 6f 66 | 2e 0a 00 00 09 2f 76 65 |ember of|...../ve|
|00000940| 72 62 6f 73 65 20 77 69 | 6c 6c 20 70 72 69 6e 74 |rbose wi|ll print|
|00000950| 20 6f 75 74 20 61 6c 6c | 20 6d 61 74 63 68 65 73 | out all| matches|
|00000960| 2e 0a 00 00 75 73 61 67 | 65 3a 20 25 73 20 5b 2f |....usag|e: %s [/|
|00000970| 76 65 72 62 6f 73 65 5d | 20 5b 2f 6c 69 73 74 5d |verbose]| [/list]|
|00000980| 20 67 72 6f 75 70 6e 61 | 6d 65 20 2e 2e 2e 0a 00 | groupna|me .....|
|00000990| ff ff ff ff de 17 00 01 | f3 17 00 01 00 00 00 00 |........|........|
|000009a0| 56 ff 15 18 10 00 01 8b | 35 60 10 00 01 50 a1 64 |V.......|5`...P.d|
|000009b0| 10 00 01 68 7c 11 00 01 | 83 c0 40 50 ff d6 a1 64 |...h|...|..@P...d|
|000009c0| 10 00 01 83 c4 0c 83 c0 | 40 68 40 11 00 01 50 ff |........|@h@...P.|
|000009d0| d6 a1 64 10 00 01 59 59 | 83 c0 40 68 00 11 00 01 |..d...YY|..@h....|
|000009e0| 50 ff d6 59 59 5e c3 55 | 8b ec b8 28 24 00 00 e8 |P..YY^.U|...($...|
|000009f0| 2c 04 00 00 8b 45 08 53 | 56 57 6a 01 33 f6 5b 89 |,....E.S|VWj.3.[.|
|00000a00| 75 f8 3b c3 89 75 ec 89 | 75 e4 75 6e 8b 7d 0c a1 |u.;..u..|u.un.}..|
|00000a10| 64 10 00 01 8b 35 60 10 | 00 01 83 c0 40 ff 37 68 |d....5`.|....@.7h|
|00000a20| 64 13 00 01 50 ff d6 a1 | 64 10 00 01 83 c4 0c 83 |d...P...|d.......|
|00000a30| c0 40 68 3c 13 00 01 50 | ff d6 a1 64 10 00 01 59 |.@h<...P|...d...Y|
|00000a40| 59 83 c0 40 68 04 13 00 | 01 50 ff d6 a1 64 10 00 |Y..@h...|.P...d..|
|00000a50| 01 59 59 83 c0 40 68 c4 | 12 00 01 50 ff d6 a1 64 |.YY..@h.|...P...d|
|00000a60| 10 00 01 59 59 83 c0 40 | ff 37 68 88 12 00 01 50 |...YY..@|.7h....P|
|00000a70| ff d6 83 c4 0c e9 ec 00 | 00 00 7e 4e 8b 4d 0c 8b |........|..~N.M..|
|00000a80| 3d 38 10 00 01 48 8d 71 | 04 89 45 fc 6a 02 68 84 |=8...H.q|..E.j.h.|
|00000a90| 12 00 01 ff 36 ff d7 83 | c4 0c 85 c0 75 08 8b 06 |....6...|....u...|
|00000aa0| 89 5d ec 80 20 00 6a 02 | 68 80 12 00 01 ff 36 ff |.].. .j.|h.....6.|
|00000ab0| d7 83 c4 0c 85 c0 75 08 | 8b 06 89 5d e4 80 20 00 |......u.|...].. .|
|00000ac0| 83 c6 04 ff 4d fc 75 c4 | 33 f6 8d 45 e8 50 68 08 |....M.u.|3..E.Ph.|
|00000ad0| 00 02 00 ff 15 14 10 00 | 01 50 ff 15 04 10 00 01 |........|.P......|
|00000ae0| 85 c0 75 0c 8b 45 0c ff | 30 68 60 12 00 01 eb 5f |..u..E..|0h`...._|
|00000af0| 8d 45 f4 50 56 56 8b 35 | 00 10 00 01 6a 02 ff 75 |.E.PVV.5|....j..u|
|00000b00| e8 ff d6 ff 15 18 10 00 | 01 83 f8 7a 75 37 ff 75 |........|...zu7.u|
|00000b10| f4 6a 08 ff 15 1c 10 00 | 01 50 ff 15 10 10 00 01 |.j......|.P......|
|00000b20| 8b d8 85 db 75 0c 8b 45 | 0c ff 30 68 48 12 00 01 |....u..E|..0hH...|
|00000b30| eb 1d 8d 45 f4 50 ff 75 | f4 53 6a 02 ff 75 e8 ff |...E.P.u|.Sj..u..|
|00000b40| d6 85 c0 75 29 8b 45 0c | ff 30 68 28 12 00 01 a1 |...u).E.|.0h(....|
|00000b50| 64 10 00 01 83 c0 40 50 | ff 15 60 10 00 01 83 c4 |d.....@P|..`.....|
|00000b60| 0c e8 3a fe ff ff 83 c8 | ff e9 54 01 00 00 83 65 |..:.....|..T....e|
|00000b70| fc 00 83 3b 00 0f 86 34 | 01 00 00 8d 43 04 89 45 |...;...4|....C..E|
|00000b80| f0 b8 00 10 00 00 89 45 | dc 89 45 e0 8d 45 d8 50 |.......E|..E..E.P|
|00000b90| 8d 45 e0 50 8d 85 d8 db | ff ff 50 8d 45 dc 50 8d |.E.P....|..P.E.P.|
|00000ba0| 85 d8 eb ff ff 50 8b 45 | f0 ff 30 6a 00 ff 15 08 |.....P.E|..0j....|
|00000bb0| 10 00 01 85 c0 0f 84 e2 | 00 00 00 6a 01 5e 39 75 |........|...j.^9u|
|00000bc0| 08 0f 8e d6 00 00 00 8b | 45 0c 83 c9 ff 8b 14 b0 |........|E.......|
|00000bd0| 33 c0 8b fa f2 ae f7 d1 | 51 8d 85 d8 fb ff ff 52 |3.......|Q......R|
|00000be0| 50 ff 15 48 10 00 01 83 | c4 0c 8d 85 d8 eb ff ff |P..H....|........|
|00000bf0| 50 8d 85 d8 db ff ff 50 | 8d 85 d8 fd ff ff 68 18 |P......P|......h.|
|00000c00| 12 00 01 50 ff 15 7c 10 | 00 01 83 c4 10 83 7d e4 |...P..|.|......}.|
|00000c10| 00 74 19 83 fe 01 75 14 | 8d 85 d8 fd ff ff 50 68 |.t....u.|......Ph|
|00000c20| d8 11 00 01 ff 15 44 10 | 00 01 59 59 8d 85 d8 fb |......D.|..YY....|
|00000c30| ff ff 6a 5c 50 ff 15 58 | 10 00 01 59 85 c0 59 75 |..j\P..X|...Y..Yu|
|00000c40| 21 8d 85 d8 eb ff ff 50 | 8d 85 d8 fb ff ff 50 ff |!......P|......P.|
|00000c50| 15 5c 10 00 01 59 85 c0 | 59 75 38 39 45 ec 74 30 |.\...Y..|Yu89E.t0|
|00000c60| eb 1a 8d 85 d8 fd ff ff | 50 8d 85 d8 fb ff ff 50 |........|P......P|
|00000c70| ff 15 5c 10 00 01 59 85 | c0 59 75 17 8d 85 d8 fd |..\...Y.|.Yu.....|
|00000c80| ff ff 50 68 a8 11 00 01 | ff 15 44 10 00 01 59 59 |..Ph....|..D...YY|
|00000c90| ff 45 f8 46 3b 75 08 0f | 8c 2a ff ff ff ff 45 fc |.E.F;u..|.*....E.|
|00000ca0| 83 45 f0 08 8b 45 fc 3b | 03 0f 82 d2 fe ff ff 53 |.E...E.;|.......S|
|00000cb0| 6a 00 ff 15 1c 10 00 01 | 50 ff 15 20 10 00 01 8b |j.......|P.. ....|
|00000cc0| 45 f8 5f 5e 5b c9 c3 cc | cc cc cc cc cc cc cc cc |E._^[...|........|
|00000cd0| 55 8b ec 6a ff 68 90 13 | 00 01 68 a0 18 00 01 64 |U..j.h..|..h....d|
|00000ce0| a1 00 00 00 00 50 64 89 | 25 00 00 00 00 83 c4 e0 |.....Pd.|%.......|
|00000cf0| 53 56 57 89 65 e8 c7 45 | fc 00 00 00 00 6a 01 ff |SVW.e..E|.....j..|
|00000d00| 15 4c 10 00 01 83 c4 04 | c7 05 30 20 00 01 ff ff |.L......|..0 ....|
|00000d10| ff ff c7 05 34 20 00 01 | ff ff ff ff ff 15 68 10 |....4 ..|......h.|
|00000d20| 00 01 8b 0d 2c 20 00 01 | 89 08 ff 15 74 10 00 01 |...., ..|....t...|
|00000d30| 8b 15 28 20 00 01 89 10 | a1 70 10 00 01 8b 08 89 |..( ....|.p......|
|00000d40| 0d 38 20 00 01 e8 46 01 | 00 00 a1 10 20 00 01 85 |.8 ...F.|.... ...|
|00000d50| c0 75 0e 68 80 18 00 01 | ff 15 6c 10 00 01 83 c4 |.u.h....|..l.....|
|00000d60| 04 e8 fa 00 00 00 68 0c | 20 00 01 68 08 20 00 01 |......h.| ..h. ..|
|00000d70| e8 e1 00 00 00 83 c4 08 | 8b 15 24 20 00 01 89 55 |........|..$ ...U|
|00000d80| d8 8d 45 d8 50 8b 0d 20 | 20 00 01 51 8d 55 e0 52 |..E.P.. | ..Q.U.R|
|00000d90| 8d 45 d4 50 8d 4d e4 51 | ff 15 30 10 00 01 83 c4 |.E.P.M.Q|..0.....|
|00000da0| 14 68 04 20 00 01 68 00 | 20 00 01 e8 a6 00 00 00 |.h. ..h.| .......|
|00000db0| 83 c4 08 ff 15 40 10 00 | 01 8b 55 e0 89 10 8b 45 |.....@..|..U....E|
|00000dc0| e0 50 8b 4d d4 51 8b 55 | e4 52 e8 18 fc ff ff 83 |.P.M.Q.U|.R......|
|00000dd0| c4 0c 89 45 dc 50 ff 15 | 3c 10 00 01 eb 22 8b 45 |...E.P..|<....".E|
|00000de0| ec 8b 08 8b 09 89 4d d0 | 50 51 e8 61 00 00 00 83 |......M.|PQ.a....|
|00000df0| c4 08 c3 8b 65 e8 8b 55 | d0 52 ff 15 2c 10 00 01 |....e..U|.R..,...|
|00000e00| 83 c4 04 c7 45 fc ff ff | ff ff 8b 4d f0 64 89 0d |....E...|...M.d..|
|00000e10| 00 00 00 00 5f 5e 5b 8b | e5 5d c3 90 90 90 90 90 |...._^[.|.]......|
|00000e20| 51 3d 00 10 00 00 8d 4c | 24 08 72 14 81 e9 00 10 |Q=.....L|$.r.....|
|00000e30| 00 00 2d 00 10 00 00 85 | 01 3d 00 10 00 00 73 ec |..-.....|.=....s.|
|00000e40| 2b c8 8b c4 85 01 8b e1 | 8b 08 8b 40 04 50 c3 cc |+.......|...@.P..|
|00000e50| ff 25 28 10 00 01 ff 25 | 34 10 00 01 cc cc cc cc |.%(....%|4.......|
|00000e60| 68 00 00 03 00 68 00 00 | 01 00 e8 37 00 00 00 83 |h....h..|...7....|
|00000e70| c4 08 c3 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000e80| 33 c0 c3 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |3.......|........|
|00000e90| c3 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000ea0| ff 25 50 10 00 01 ff 25 | 54 10 00 01 8c 19 00 00 |.%P....%|T.......|
|00000eb0| 00 00 00 00 00 00 00 00 | a0 19 00 00 7c 10 00 00 |........|....|...|
|00000ec0| 38 19 00 00 00 00 00 00 | 00 00 00 00 a8 1a 00 00 |8.......|........|
|00000ed0| 28 10 00 00 10 19 00 00 | 00 00 00 00 00 00 00 00 |(.......|........|
|00000ee0| 00 1b 00 00 00 10 00 00 | 20 19 00 00 00 00 00 00 |........| .......|
|00000ef0| 00 00 00 00 5c 1b 00 00 | 10 10 00 00 00 00 00 00 |....\...|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| d6 1a 00 00 ec 1a 00 00 | c2 1a 00 00 00 00 00 00 |........|........|
|00000f20| 2a 1b 00 00 48 1b 00 00 | 0e 1b 00 00 36 1b 00 00 |*...H...|....6...|
|00000f30| 1e 1b 00 00 00 00 00 00 | fe 19 00 00 f6 19 00 00 |........|........|
|00000f40| 24 1a 00 00 34 1a 00 00 | ea 19 00 00 0c 1a 00 00 |$...4...|........|
|00000f50| 14 1a 00 00 d4 19 00 00 | de 19 00 00 82 1a 00 00 |........|........|
|00000f60| 94 1a 00 00 b4 1a 00 00 | ca 19 00 00 be 19 00 00 |........|........|
|00000f70| b4 19 00 00 ac 19 00 00 | 74 1a 00 00 40 1a 00 00 |........|t...@...|
|00000f80| 54 1a 00 00 64 1a 00 00 | 00 00 00 00 94 19 00 00 |T...d...|........|
|00000f90| 00 00 00 00 b4 02 77 73 | 70 72 69 6e 74 66 57 00 |......ws|printfW.|
|00000fa0| 55 53 45 52 33 32 2e 64 | 6c 6c 00 00 10 01 5f 69 |USER32.d|ll...._i|
|00000fb0| 6f 62 00 00 55 02 66 70 | 72 69 6e 74 66 00 e7 01 |ob..U.fp|rintf...|
|00000fc0| 5f 77 63 73 69 63 6d 70 | 00 00 dd 02 77 63 73 63 |_wcsicmp|....wcsc|
|00000fd0| 68 72 00 00 f2 02 77 70 | 72 69 6e 74 66 00 90 02 |hr....wp|rintf...|
|00000fe0| 6d 62 73 74 6f 77 63 73 | 00 00 c2 01 5f 73 74 72 |mbstowcs|...._str|
|00000ff0| 6e 69 63 6d 70 00 d0 00 | 5f 65 78 69 74 00 48 00 |nicmp...|_exit.H.|
|00001000| 5f 58 63 70 74 46 69 6c | 74 65 72 00 46 02 65 78 |_XcptFil|ter.F.ex|
|00001010| 69 74 00 00 63 00 5f 5f | 70 5f 5f 5f 69 6e 69 74 |it..c.__|p___init|
|00001020| 65 6e 76 00 58 00 5f 5f | 67 65 74 6d 61 69 6e 61 |env.X.__|getmaina|
|00001030| 72 67 73 00 0c 01 5f 69 | 6e 69 74 74 65 72 6d 00 |rgs..._i|nitterm.|
|00001040| 82 00 5f 5f 73 65 74 75 | 73 65 72 6d 61 74 68 65 |..__setu|sermathe|
|00001050| 72 72 00 00 9b 00 5f 61 | 64 6a 75 73 74 5f 66 64 |rr...._a|djust_fd|
|00001060| 69 76 00 00 69 00 5f 5f | 70 5f 5f 63 6f 6d 6d 6f |iv..i.__|p__commo|
|00001070| 64 65 00 00 6e 00 5f 5f | 70 5f 5f 66 6d 6f 64 65 |de..n.__|p__fmode|
|00001080| 00 00 80 00 5f 5f 73 65 | 74 5f 61 70 70 5f 74 79 |....__se|t_app_ty|
|00001090| 70 65 00 00 c7 00 5f 65 | 78 63 65 70 74 5f 68 61 |pe...._e|xcept_ha|
|000010a0| 6e 64 6c 65 72 33 00 00 | 4d 53 56 43 52 54 2e 64 |ndler3..|MSVCRT.d|
|000010b0| 6c 6c 00 00 b4 00 5f 63 | 6f 6e 74 72 6f 6c 66 70 |ll...._c|ontrolfp|
|000010c0| 00 00 18 01 4c 6f 6f 6b | 75 70 41 63 63 6f 75 6e |....Look|upAccoun|
|000010d0| 74 53 69 64 57 00 ec 00 | 47 65 74 54 6f 6b 65 6e |tSidW...|GetToken|
|000010e0| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 00 6d 01 4f 70 |Informat|ion.m.Op|
|000010f0| 65 6e 50 72 6f 63 65 73 | 73 54 6f 6b 65 6e 00 00 |enProces|sToken..|
|00001100| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 00 30 01 |ADVAPI32|.dll..0.|
|00001110| 47 65 74 4c 61 73 74 45 | 72 72 6f 72 00 00 bd 01 |GetLastE|rror....|
|00001120| 48 65 61 70 46 72 65 65 | 00 00 b7 01 48 65 61 70 |HeapFree|....Heap|
|00001130| 41 6c 6c 6f 63 00 58 01 | 47 65 74 50 72 6f 63 65 |Alloc.X.|GetProce|
|00001140| 73 73 48 65 61 70 00 00 | 0c 01 47 65 74 43 75 72 |ssHeap..|..GetCur|
|00001150| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 4b 45 52 4e |rentProc|ess.KERN|
|00001160| 45 4c 33 32 2e 64 6c 6c | 00 00 00 00 00 00 00 00 |EL32.dll|........|
|00001170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001200| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001210| 01 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001400| 01 00 00 00 10 01 00 00 | 00 09 0a 0b 65 78 65 5c |........|....exe\|
|00001410| 69 66 6d 65 6d 62 65 72 | 2e 64 62 67 00 2e 65 78 |ifmember|.dbg..ex|
|00001420| 65 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |e.......|........|
|00001430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+