| Current Path : C:/Windows/System32/ |
| Current File : C:/Windows/System32/shimeng.dll |
MZ @ !L!This program cannot be run in DOS mode.
$ mĪ)ͪ)ͪ)ͪL,ͪ)ͫ"ͪL/ͪL(ͪL(ͪLU(ͪL(ͪRich)ͪ PE L !
` x
` @E 0 | 0 ( @ P , T 0 .text `.data $
@ .idata 0 @ @.rsrc @ @ @.reloc , P @ B x 0x x u ` $
0 ( ( RSDSE 2܆ri ShimEng.pdb GCTL .rdata$brc .gfids T .rdata \ .rdata$zzzdbg ` .text$mn 0 | .edata .data .bss 0 .idata$5 0 .00cfg 0 .idata$2 00 .idata$3 D0 .idata$4 \0 ~ .idata$6 @ ` .rsrc$01 `@ .rsrc$02 U} u
uju 3@] U} u 3@] Ue e
xVN@t;uUEP0xE3EE 0x1E0x1E 0x3EM3EEP0xE3EM3uΉ
xщ
x^] X ) O y E o @ f 0 b
ShimEng.dll SE_DllLoaded APPHELP.SE_DllLoaded SE_DllUnloaded APPHELP.SE_DllUnloaded SE_DynamicShim APPHELP.SE_DynamicShim SE_GetHookAPIs APPHELP.SE_GetHookAPIs SE_GetMaxShimCount APPHELP.SE_GetMaxShimCount SE_GetProcAddressIgnoreIncExc APPHELP.SE_GetProcAddressIgnoreIncExc SE_GetShimCount APPHELP.SE_GetShimCount SE_InstallAfterInit APPHELP.SE_InstallAfterInit SE_InstallBeforeInit APPHELP.SE_InstallBeforeInit SE_IsShimDll APPHELP.SE_IsShimDll SE_ProcessDying APPHELP.SE_ProcessDying N@D 0 0 \0 v0 0 xD0 0 0 0 0 \0 v0 0 IQueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount KERNEL32.dll 0 H `@ 4 V S _ V E R S I O N _ I N F O
cE
cE? S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n H F i l e D e s c r i p t i o n S h i m E n g i n e D L L h $ F i l e V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) L I n t e r n a l N a m e S h i m E n g i n e D L L ( I A T ) . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . T O r i g i n a l F i l e n a m e S h i m E n g i n e D L L ( I A T ) j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m >
P r o d u c t V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n <0H0P0222222 33 0 0