Exame Informatica 142

home *** CD-ROM | disk | FTP | other *** search

/ Exame Informatica 142 / Exame Informatica 142.iso / Internet / Fillezilla / FileZilla_3.0.0-beta6_win32-setup.exe / $R2 / NSIS.Library.RegTool.v2.$_8_.exe

MS-DOS/Windows or OS/2 Executable | 2007-01-27 | 4.0 KB

open in:

MacOS 8.1 |

Win98 |

DOS

view JSON data |

view as text

This file was processed as: MS-DOS/Windows or OS/2 Executable (executable/exe).

Confidence	Program	Detection	Match Type	Support
`100%`	dexvert	MS-DOS/Windows or OS/2 Executable `(executable/exe)`	magic	Supported
`1%`	dexvert	Ady's GLUE Packed `(archive/adysGLUEPacked)`	ext	Unsupported
`1%`	dexvert	BlacK FiST Packed `(archive/blackFiSTPacked)`	ext	Unsupported
`1%`	dexvert	CauseWay Compressor Packed `(archive/causeWayCompressorPacked)`	ext	Unsupported
`1%`	dexvert	CExe Packed `(archive/cExePacked)`	ext	Unsupported
`1%`	dexvert	cIPHATOR Protected `(archive/ciphatorProtected)`	ext	Unsupported
`1%`	dexvert	CRYPACK Protected `(archive/crypackProtected)`	ext	Unsupported
`1%`	dexvert	CRYPTEXE Protected `(archive/cryptexeProtected)`	ext	Unsupported
`1%`	dexvert	Crypt Light Show Protected `(archive/cryptLightShowProtected)`	ext	Unsupported
`1%`	dexvert	DaRKSToP Protected `(archive/darkstopProtected)`	ext	Unsupported
`1%`	dexvert	DiskImager SFX Image `(archive/diskImagerSFXImage)`	ext	Unsupported
`1%`	dexvert	Dismember EXE CRYPT Protected `(archive/dismemberProtected)`	ext	Unsupported
`1%`	dexvert	DJP Packed `(archive/djpPacked)`	ext	Unsupported
`1%`	dexvert	.NETZ Packed `(archive/dotNETZPacked)`	ext	Unsupported
`1%`	dexvert	DSHIELD Protected `(archive/dshieldProtected)`	ext	Unsupported
`1%`	dexvert	Exe32Pack Packed `(archive/exe32PackPacked)`	ext	Unsupported
`1%`	dexvert	EXE Manager Protected `(archive/exeManagerProtected)`	ext	Unsupported
`1%`	dexvert	EXETOOLS Protected `(archive/exetoolsProtected)`	ext	Unsupported
`1%`	dexvert	EZip Packed `(archive/ezipPacked)`	ext	Unsupported
`1%`	dexvert	FSG Packed `(archive/fsgPacked)`	ext	Unsupported
`1%`	dexvert	HackStop Protected `(archive/hackStopProtected)`	ext	Unsupported
`1%`	dexvert	JMCryptExe Protected `(archive/jmCryptExeProtected)`	ext	Unsupported
`1%`	dexvert	kkrunchy Packed `(archive/kkcrunchPacked)`	ext	Unsupported
`1%`	dexvert	mbp SHRINK Packed `(archive/mbpSHRINKPacked)`	ext	Unsupported
`1%`	dexvert	MEGALITE Packed `(archive/megalitePacked)`	ext	Unsupported
`1%`	dexvert	Mess Protected `(archive/messProtected)`	ext	Unsupported
`1%`	dexvert	Mew Packed `(archive/mewPacked)`	ext	Unsupported
`1%`	dexvert	MPRESS Packed `(archive/mpressPacked)`	ext	Unsupported
`1%`	dexvert	NOS Packer Packed `(archive/nosPackerPacked)`	ext	Unsupported
`1%`	dexvert	NTShell Protected `(archive/ntShellProtected)`	ext	Unsupported
`1%`	dexvert	Pack Master Packed `(archive/packMasterPacked)`	ext	Unsupported
`1%`	dexvert	PE Diminisher Packed `(archive/peDiminisherPacked)`	ext	Unsupported
`1%`	dexvert	Petite Packed `(archive/petitePacked)`	ext	Unsupported
`1%`	dexvert	PeX Packed `(archive/pexPacked)`	ext	Unsupported
`1%`	dexvert	PKLITE32 Packed `(archive/pklite32Packed)`	ext	Unsupported
`1%`	dexvert	PowerBatch Packed `(archive/powerBatchPacked)`	ext	Unsupported
`1%`	dexvert	protector Protected `(archive/protectorProtected)`	ext	Unsupported
`1%`	dexvert	py2exe Packed `(archive/py2exePacked)`	ext	Unsupported
`1%`	dexvert	PyInstaller Packed `(archive/pyInstallerPacked)`	ext	Unsupported
`1%`	dexvert	Scramb Packed `(archive/scrambPacked)`	ext	Unsupported
`1%`	dexvert	SECURE Protected `(archive/secureProtected)`	ext	Unsupported
`1%`	dexvert	Shrinker Packed (Windows) `(archive/shrinkerWindowsPacked)`	ext	Unsupported
`1%`	dexvert	Spoon Studio Packed `(archive/spoonStudioPacked)`	ext	Unsupported
`1%`	dexvert	tElock Packed `(archive/telockPacked)`	ext	Unsupported
`1%`	dexvert	The Builder Packed `(archive/theBuilderPacked)`	ext	Unsupported
`1%`	dexvert	The Patcher Packed `(archive/thePatcherPacked)`	ext	Unsupported
`1%`	dexvert	32Lite Packed `(archive/thirtyTwoLitePacked)`	ext	Unsupported
`1%`	dexvert	TinyProt Protected `(archive/tinyProtProtected)`	ext	Unsupported
`1%`	dexvert	(Win)Upack Packed `(archive/winUpackPacked)`	ext	Unsupported
`1%`	dexvert	Yoda's Crypte Protected `(archive/yodasCrypterProtected)`	ext	Unsupported
`1%`	dexvert	MS-DOS PMODE extender executable `(executable/msdosPMODEExtenderExecutable)`	ext	Unsupported
`1%`	dexvert	Sony Playstation Executable `(executable/sonyPlaystationExe)`	ext	Unsupported
`1%`	dexvert	Novell Netware Virtual Loadable Module `(other/novellNetwareVirtualLoadableModule)`	ext	Unsupported
`100%`	file	PE32 executable for MS Windows 4.00 (GUI), Intel i386, 3 sections	default
`99%`	file	data	default
`27%`	TrID	Win32 Dynamic Link Library (generic)	default
`20%`	TrID	Win16 NE executable (generic)	default
`18%`	TrID	Win32 Executable (generic)	default
`8%`	TrID	Windows Icons Library (generic)	default (weak)
`8%`	TrID	OS/2 Executable (generic)	default
`100%`	gt2	Ist eine ausf�hrbare Win32 Datei	default
`100%`	binwalkID	Microsoft executable, portable (PE)	default
`100%`	xdgMime	application/vnd.microsoft.portable-executable	default (weak)

hex view

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| c5 eb 38 16 81 8a 56 45 | 81 8a 56 45 81 8a 56 45 |..8...VE|..VE..VE|
|00000090| 92 82 0b 45 83 8a 56 45 | 02 82 0b 45 88 8a 56 45 |...E..VE|...E..VE|
|000000a0| 81 8a 57 45 a5 8a 56 45 | 84 86 09 45 80 8a 56 45 |..WE..VE|...E..VE|
|000000b0| 84 86 0c 45 80 8a 56 45 | 52 69 63 68 81 8a 56 45 |...E..VE|Rich..VE|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 03 00 |........|PE..L...|
|000000e0| 3f 27 bb 45 00 00 00 00 | 00 00 00 00 e0 00 0f 01 |?'.E....|........|
|000000f0| 0b 01 07 0a 00 06 00 00 | 00 0e 00 00 00 00 00 00 |........|........|
|00000100| 40 13 00 00 00 10 00 00 | 00 20 00 00 00 00 40 00 |@.......|. ....@.|
|00000110| 00 10 00 00 00 02 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000120| 04 00 00 00 00 00 00 00 | 00 40 00 00 00 04 00 00 |........|.@......|
|00000130| 00 00 00 00 02 00 00 04 | 00 00 10 00 00 10 00 00 |........|........|
|00000140| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 48 21 00 00 78 00 00 00 |........|H!..x...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 20 00 00 a4 00 00 00 | 00 00 00 00 00 00 00 00 |. ......|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 2e 74 65 78 74 00 00 00 | 95 05 00 00 00 10 00 00 |.text...|........|
|000001e0| 00 06 00 00 00 04 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 20 00 00 60 | 2e 72 64 61 74 61 00 00 |.... ..`|.rdata..|
|00000200| d8 04 00 00 00 20 00 00 | 00 06 00 00 00 0a 00 00 |..... ..|........|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|00000220| 2e 64 61 74 61 00 00 00 | 00 08 00 00 00 30 00 00 |.data...|.....0..|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 40 00 00 c0 | 00 00 00 00 00 00 00 00 |....@...|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 55 8b ec 81 ec 54 08 00 | 00 53 56 8b 75 0c 33 db |U....T..|.SV.u.3.|
|00000410| 38 1e 0f 84 9e 00 00 00 | 80 7d 08 44 74 0a 80 7d |8.......|.}.Dt..}|
|00000420| 08 54 0f 85 8e 00 00 00 | 68 00 04 00 00 8d 85 ac |.T......|h.......|
|00000430| fb ff ff 50 53 ff 15 64 | 20 40 00 50 ff 15 68 20 |...PS..d| @.P..h |
|00000440| 40 00 85 c0 74 70 57 6a | 10 59 33 c0 c7 45 ac 44 |@...tpWj|.Y3..E.D|
|00000450| 00 00 00 8d 7d b0 f3 ab | 0f be 45 08 56 50 8d 85 |....}...|..E.VP..|
|00000460| ac fb ff ff 50 8d 85 ac | f7 ff ff 68 a4 20 40 00 |....P...|...h. @.|
|00000470| 50 ff 15 8c 20 40 00 83 | c4 14 8d 45 f0 50 8d 45 |P... @..|...E.P.E|
|00000480| ac 50 53 53 53 53 53 53 | 8d 85 ac f7 ff ff 50 53 |.PSSSSSS|......PS|
|00000490| ff 15 6c 20 40 00 85 c0 | 5f 74 1b ff 75 f4 8b 35 |..l @...|_t..u..5|
|000004a0| 70 20 40 00 ff d6 6a ff | ff 75 f0 ff 15 78 20 40 |p @...j.|.u...x @|
|000004b0| 00 ff 75 f0 ff d6 5e 5b | c9 c3 56 6a 08 6a 00 ff |..u...^[|..Vj.j..|
|000004c0| 74 24 10 ff 15 1c 20 40 | 00 8b f0 85 f6 74 19 68 |t$.... @|.....t.h|
|000004d0| b0 20 40 00 56 ff 15 18 | 20 40 00 85 c0 74 02 ff |. @.V...| @...t..|
|000004e0| d0 56 ff 15 3c 20 40 00 | 5e c3 55 8b ec 81 ec 04 |.V..< @.|^.U.....|
|000004f0| 08 00 00 68 00 04 00 00 | 8d 85 fc f7 ff ff 50 6a |...h....|......Pj|
|00000500| ff ff 75 08 6a 00 6a 00 | ff 15 20 20 40 00 85 c0 |..u.j.j.|..  @...|
|00000510| 74 30 8d 45 fc 50 8d 85 | fc f7 ff ff 50 ff 15 80 |t0.E.P..|....P...|
|00000520| 20 40 00 85 c0 7c 1b 6a | 00 8d 85 fc f7 ff ff 50 | @...|.j|.......P|
|00000530| ff 75 fc ff 15 84 20 40 | 00 8b 45 fc 8b 08 50 ff |.u.... @|..E...P.|
|00000540| 51 08 c9 c3 55 8b ec 51 | 53 56 57 ff 75 0c 8b 3d |Q...U..Q|SVW.u..=|
|00000550| 28 20 40 00 ff d7 8b 75 | 08 89 45 fc eb 27 8b 45 |( @....u|..E..'.E|
|00000560| fc ff 75 0c 8a 1c 30 56 | c6 04 30 00 ff 15 24 20 |..u...0V|..0...$ |
|00000570| 40 00 85 c0 8b 45 fc 88 | 1c 30 74 18 56 ff 15 90 |@....E..|.0t.V...|
|00000580| 20 40 00 8b f0 56 ff d7 | 3b 45 fc 7d d1 33 c0 5f | @...V..|;E.}.3._|
|00000590| 5e 5b c9 c3 8b c6 eb f7 | 8b 4c 24 04 56 8b 74 24 |^[......|.L$.V.t$|
|000005a0| 10 85 f6 7e 0f 8b 44 24 | 0c 2b c1 8a 14 08 88 11 |...~..D$|.+......|
|000005b0| 41 4e 75 f7 5e c3 55 8b | ec 83 ec 10 53 68 fc 20 |ANu.^.U.|....Sh. |
|000005c0| 40 00 ff 15 64 20 40 00 | 33 db 3b c3 74 20 68 f0 |@...d @.|3.;.t h.|
|000005d0| 20 40 00 50 ff 15 18 20 | 40 00 3b c3 74 10 6a 04 | @.P... |@.;.t.j.|
|000005e0| 53 ff 75 08 ff d0 3b c3 | 0f 85 19 01 00 00 56 57 |S.u...;.|......VW|
|000005f0| bf 00 04 00 00 57 be 00 | 34 40 00 56 ff 75 08 ff |.....W..|4@.V.u..|
|00000600| 15 54 20 40 00 3b c3 0f | 84 f8 00 00 00 3b c7 0f |.T @.;..|.....;..|
|00000610| 8f f0 00 00 00 56 68 e4 | 20 40 00 68 00 30 40 00 |.....Vh.| @.h.0@.|
|00000620| ff 15 8c 20 40 00 83 c4 | 0c 68 f0 03 00 00 56 89 |... @...|.h....V.|
|00000630| 45 fc ff 15 50 20 40 00 | 68 d4 20 40 00 56 ff 15 |E...P @.|h. @.V..|
|00000640| 4c 20 40 00 53 68 80 00 | 00 08 6a 04 53 53 68 00 |L @.Sh..|..j.SSh.|
|00000650| 00 00 c0 56 ff 15 48 20 | 40 00 8b f8 83 ff ff 89 |...V..H |@.......|
|00000660| 7d f0 0f 84 9d 00 00 00 | 53 57 ff 15 44 20 40 00 |}.......|SW..D @.|
|00000670| 8b f0 8b 45 fc 53 8d 44 | 06 0a 50 53 6a 04 53 57 |...E.S.D|..PSj.SW|
|00000680| ff 15 40 20 40 00 3b c3 | 89 45 f4 74 60 53 53 53 |..@ @.;.|.E.t`SSS|
|00000690| 6a 02 50 ff 15 74 20 40 | 00 8b f8 3b fb 74 42 68 |j.P..t @|...;.tBh|
|000006a0| c8 20 40 00 57 e8 9a fe | ff ff 3b c3 59 59 75 5a |. @.W...|..;.YYuZ|
|000006b0| 68 c8 20 40 00 8d 04 37 | 50 ff 15 38 20 40 00 83 |h. @...7|P..8 @..|
|000006c0| c6 0a 8b c6 ff 75 fc 03 | c7 68 00 30 40 00 50 e8 |.....u..|.h.0@.P.|
|000006d0| c4 fe ff ff 03 75 fc 83 | c4 0c 57 ff 15 34 20 40 |.....u..|..W..4 @|
|000006e0| 00 ff 75 f4 ff 15 70 20 | 40 00 8b 7d f0 53 53 56 |..u...p |@..}.SSV|
|000006f0| 57 ff 15 30 20 40 00 57 | ff 15 2c 20 40 00 57 ff |W..0 @.W|.., @.W.|
|00000700| 15 70 20 40 00 5f 5e 5b | c9 c3 83 c0 0a 68 c4 20 |.p @._^[|.....h. |
|00000710| 40 00 50 e8 2c fe ff ff | 3b c3 59 59 74 a4 40 8d |@.P.,...|;.YYt.@.|
|00000720| 0c 37 3b c1 89 45 f8 73 | 13 8a 08 8b 55 fc 88 0c |.7;..E.s|....U...|
|00000730| 10 40 8d 0c 37 3b c1 72 | f0 8b 45 f8 2b c7 eb 84 |.@..7;.r|..E.+...|
|00000740| 55 8d 6c 24 98 81 ec 9c | 08 00 00 53 56 57 b3 20 |U.l$....|...SVW. |
|00000750| ff 15 60 20 40 00 80 38 | 22 75 04 80 c3 02 40 8b |..` @..8|"u....@.|
|00000760| 35 90 20 40 00 eb 07 3a | cb 74 09 50 ff d6 8a 08 |5. @...:|.t.P....|
|00000770| 84 c9 75 f3 50 ff d6 8b | f0 eb 01 46 80 3e 20 74 |..u.P...|...F.> t|
|00000780| fa 8a 06 46 3c 2f 74 07 | 6a 01 e9 ff 01 00 00 80 |...F</t.|j.......|
|00000790| 3e 53 0f 85 ba 01 00 00 | 8d 45 58 50 68 19 00 02 |>S......|.EXPh...|
|000007a0| 00 6a 00 68 24 21 40 00 | 68 02 00 00 80 ff 15 0c |.j.h$!@.|h.......|
|000007b0| 20 40 00 85 c0 bf 00 04 | 00 00 0f 8c 68 01 00 00 | @......|....h...|
|000007c0| 57 8d 85 cc fb ff ff 50 | 6a 00 ff 75 58 ff 15 08 |W......P|j..uX...|
|000007d0| 20 40 00 85 c0 0f 85 34 | 01 00 00 8b 35 00 20 40 | @.....4|....5. @|
|000007e0| 00 8b 1d 8c 20 40 00 8d | 45 54 50 68 19 00 02 00 |.... @..|ETPh....|
|000007f0| 6a 00 8d 85 cc fb ff ff | 50 ff 75 58 ff 15 0c 20 |j.......|P.uX... |
|00000800| 40 00 85 c0 0f 8c ea 00 | 00 00 8d 45 5c 50 8d 45 |@.......|...E\P.E|
|00000810| 50 50 8d 45 64 50 6a 00 | 68 1c 21 40 00 ff 75 54 |PP.EdPj.|h.!@..uT|
|00000820| c7 45 5c 04 00 00 00 ff | d6 85 c0 0f 8c aa 00 00 |.E\.....|........|
|00000830| 00 83 7d 64 04 0f 85 a0 | 00 00 00 33 c0 40 39 45 |..}d....|...3.@9E|
|00000840| 50 89 45 60 0f 82 91 00 | 00 00 ff 75 60 8d 45 cc |P.E`....|...u`.E.|
|00000850| 68 14 21 40 00 50 ff d3 | 83 c4 0c 8d 45 5c 50 8d |h.!@.P..|....E\P.|
|00000860| 45 4c 50 8d 45 64 50 6a | 00 8d 45 cc 50 ff 75 54 |ELP.EdPj|..E.P.uT|
|00000870| c7 45 5c 02 00 00 00 ff | d6 85 c0 7c 4f 83 7d 64 |.E\.....|...|O.}d|
|00000880| 01 75 49 ff 75 60 8d 45 | cc 68 0c 21 40 00 50 ff |.uI.u`.E|.h.!@.P.|
|00000890| d3 83 c4 0c 8d 45 5c 50 | 8d 85 cc f7 ff ff 50 8d |.....E\P|......P.|
|000008a0| 45 64 50 6a 00 8d 45 cc | 50 ff 75 54 89 7d 5c ff |EdPj..E.|P.uT.}\.|
|000008b0| d6 85 c0 7c 17 83 7d 64 | 01 75 11 8d 85 cc f7 ff |...|..}d|.u......|
|000008c0| ff 50 ff 75 4c e8 36 fb | ff ff 59 59 ff 45 60 8b |.P.uL.6.|..YY.E`.|
|000008d0| 45 60 3b 45 50 0f 86 6f | ff ff ff ff 75 54 ff 15 |E`;EP..o|....uT..|
|000008e0| 10 20 40 00 8d 85 cc fb | ff ff 50 ff 75 58 ff 15 |. @.....|..P.uX..|
|000008f0| 04 20 40 00 57 8d 85 cc | fb ff ff 50 6a 00 ff 75 |. @.W...|...Pj..u|
|00000900| 58 ff 15 08 20 40 00 85 | c0 0f 84 d8 fe ff ff ff |X... @..|........|
|00000910| 75 58 ff 15 10 20 40 00 | 68 24 21 40 00 68 02 00 |uX... @.|h$!@.h..|
|00000920| 00 80 ff 15 04 20 40 00 | 57 8d 85 cc f7 ff ff 50 |..... @.|W......P|
|00000930| 6a 00 ff 15 64 20 40 00 | 50 ff 15 68 20 40 00 85 |j...d @.|P..h @..|
|00000940| c0 74 49 8d 85 cc f7 ff | ff 50 e8 67 fc ff ff 59 |.tI.....|.P.g...Y|
|00000950| eb 3a 8b 3d 5c 20 40 00 | 68 01 80 00 00 ff d7 6a |.:.=\ @.|h......j|
|00000960| 00 ff 15 98 20 40 00 8a | 06 3c 44 75 09 46 56 e8 |.... @..|.<Du.FV.|
|00000970| 46 fb ff ff eb 0b 3c 54 | 75 08 46 56 e8 69 fb ff |F.....<T|u.FV.i..|
|00000980| ff 59 ff 15 9c 20 40 00 | 6a 00 ff d7 6a 00 ff 15 |.Y... @.|j...j...|
|00000990| 58 20 40 00 cc 00 00 00 | 00 00 00 00 00 00 00 00 |X @.....|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 48 24 00 00 2a 24 00 00 | 5c 24 00 00 6a 24 00 00 |H$..*$..|\$..j$..|
|00000a10| 3a 24 00 00 00 00 00 00 | d2 22 00 00 e4 22 00 00 |:$......|."..."..|
|00000a20| f6 22 00 00 0c 23 00 00 | 18 23 00 00 24 23 00 00 |."...#..|.#..$#..|
|00000a30| 34 23 00 00 46 23 00 00 | 58 23 00 00 c4 22 00 00 |4#..F#..|X#..."..|
|00000a40| 74 23 00 00 8a 23 00 00 | 98 23 00 00 a6 23 00 00 |t#...#..|.#...#..|
|00000a50| b2 23 00 00 ca 23 00 00 | de 23 00 00 ec 23 00 00 |.#...#..|.#...#..|
|00000a60| fc 23 00 00 b0 22 00 00 | 9a 22 00 00 88 22 00 00 |.#..."..|."..."..|
|00000a70| 7a 22 00 00 64 23 00 00 | 64 22 00 00 00 00 00 00 |z"..d#..|d"......|
|00000a80| a1 00 00 80 a3 00 00 80 | 00 00 00 00 88 24 00 00 |........|.....$..|
|00000a90| 94 24 00 00 00 00 00 00 | be 24 00 00 ac 24 00 00 |.$......|.$...$..|
|00000aa0| 00 00 00 00 22 25 73 22 | 20 2f 25 63 25 73 00 00 |...."%s"| /%c%s..|
|00000ab0| 44 6c 6c 52 65 67 69 73 | 74 65 72 53 65 72 76 65 |DllRegis|terServe|
|00000ac0| 72 00 00 00 0a 5b 00 00 | 5b 52 65 6e 61 6d 65 5d |r....[..|[Rename]|
|00000ad0| 0d 0a 00 00 5c 77 69 6e | 69 6e 69 74 2e 69 6e 69 |....\win|init.ini|
|00000ae0| 00 00 00 00 4e 55 4c 3d | 25 73 0d 0a 00 00 00 00 |....NUL=|%s......|
|00000af0| 4d 6f 76 65 46 69 6c 65 | 45 78 41 00 4b 45 52 4e |MoveFile|ExA.KERN|
|00000b00| 45 4c 33 32 2e 64 6c 6c | 00 00 00 00 25 75 2e 66 |EL32.dll|....%u.f|
|00000b10| 69 6c 65 00 25 75 2e 6d | 6f 64 65 00 63 6f 75 6e |ile.%u.m|ode.coun|
|00000b20| 74 00 00 00 53 6f 66 74 | 77 61 72 65 5c 4e 53 49 |t...Soft|ware\NSI|
|00000b30| 53 2e 4c 69 62 72 61 72 | 79 2e 52 65 67 54 6f 6f |S.Librar|y.RegToo|
|00000b40| 6c 2e 76 32 00 00 00 00 | d8 21 00 00 00 00 00 00 |l.v2....|.!......|
|00000b50| 00 00 00 00 0e 24 00 00 | 18 20 00 00 40 22 00 00 |.....$..|. ..@"..|
|00000b60| 00 00 00 00 00 00 00 00 | 1c 24 00 00 80 20 00 00 |........|.$... ..|
|00000b70| c0 21 00 00 00 00 00 00 | 00 00 00 00 7a 24 00 00 |.!......|....z$..|
|00000b80| 00 20 00 00 4c 22 00 00 | 00 00 00 00 00 00 00 00 |. ..L"..|........|
|00000b90| a0 24 00 00 8c 20 00 00 | 58 22 00 00 00 00 00 00 |.$... ..|X"......|
|00000ba0| 00 00 00 00 ce 24 00 00 | 98 20 00 00 00 00 00 00 |.....$..|. ......|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 48 24 00 00 2a 24 00 00 | 5c 24 00 00 6a 24 00 00 |H$..*$..|\$..j$..|
|00000bd0| 3a 24 00 00 00 00 00 00 | d2 22 00 00 e4 22 00 00 |:$......|."..."..|
|00000be0| f6 22 00 00 0c 23 00 00 | 18 23 00 00 24 23 00 00 |."...#..|.#..$#..|
|00000bf0| 34 23 00 00 46 23 00 00 | 58 23 00 00 c4 22 00 00 |4#..F#..|X#..."..|
|00000c00| 74 23 00 00 8a 23 00 00 | 98 23 00 00 a6 23 00 00 |t#...#..|.#...#..|
|00000c10| b2 23 00 00 ca 23 00 00 | de 23 00 00 ec 23 00 00 |.#...#..|.#...#..|
|00000c20| fc 23 00 00 b0 22 00 00 | 9a 22 00 00 88 22 00 00 |.#..."..|."..."..|
|00000c30| 7a 22 00 00 64 23 00 00 | 64 22 00 00 00 00 00 00 |z"..d#..|d"......|
|00000c40| a1 00 00 80 a3 00 00 80 | 00 00 00 00 88 24 00 00 |........|.....$..|
|00000c50| 94 24 00 00 00 00 00 00 | be 24 00 00 ac 24 00 00 |.$......|.$...$..|
|00000c60| 00 00 00 00 83 03 57 61 | 69 74 46 6f 72 53 69 6e |......Wa|itForSin|
|00000c70| 67 6c 65 4f 62 6a 65 63 | 74 00 2e 00 43 6c 6f 73 |gleObjec|t...Clos|
|00000c80| 65 48 61 6e 64 6c 65 00 | 60 00 43 72 65 61 74 65 |eHandle.|`.Create|
|00000c90| 50 72 6f 63 65 73 73 41 | 00 00 75 01 47 65 74 4d |ProcessA|..u.GetM|
|00000ca0| 6f 64 75 6c 65 46 69 6c | 65 4e 61 6d 65 41 00 00 |oduleFil|eNameA..|
|00000cb0| 77 01 47 65 74 4d 6f 64 | 75 6c 65 48 61 6e 64 6c |w.GetMod|uleHandl|
|00000cc0| 65 41 00 00 ef 00 46 72 | 65 65 4c 69 62 72 61 72 |eA....Fr|eeLibrar|
|00000cd0| 79 00 98 01 47 65 74 50 | 72 6f 63 41 64 64 72 65 |y...GetP|rocAddre|
|00000ce0| 73 73 00 00 49 02 4c 6f | 61 64 4c 69 62 72 61 72 |ss..I.Lo|adLibrar|
|00000cf0| 79 45 78 41 00 00 6b 02 | 4d 75 6c 74 69 42 79 74 |yExA..k.|MultiByt|
|00000d00| 65 54 6f 57 69 64 65 43 | 68 61 72 00 b3 03 6c 73 |eToWideC|har...ls|
|00000d10| 74 72 63 6d 70 69 41 00 | bc 03 6c 73 74 72 6c 65 |trcmpiA.|..lstrle|
|00000d20| 6e 41 00 00 03 03 53 65 | 74 45 6e 64 4f 66 46 69 |nA....Se|tEndOfFi|
|00000d30| 6c 65 00 00 0e 03 53 65 | 74 46 69 6c 65 50 6f 69 |le....Se|tFilePoi|
|00000d40| 6e 74 65 72 00 00 63 03 | 55 6e 6d 61 70 56 69 65 |nter..c.|UnmapVie|
|00000d50| 77 4f 66 46 69 6c 65 00 | b6 03 6c 73 74 72 63 70 |wOfFile.|..lstrcp|
|00000d60| 79 41 00 00 5e 02 4d 61 | 70 56 69 65 77 4f 66 46 |yA..^.Ma|pViewOfF|
|00000d70| 69 6c 65 00 4e 00 43 72 | 65 61 74 65 46 69 6c 65 |ile.N.Cr|eateFile|
|00000d80| 4d 61 70 70 69 6e 67 41 | 00 00 5b 01 47 65 74 46 |MappingA|..[.GetF|
|00000d90| 69 6c 65 53 69 7a 65 00 | 4d 00 43 72 65 61 74 65 |ileSize.|M.Create|
|00000da0| 46 69 6c 65 41 00 ad 03 | 6c 73 74 72 63 61 74 41 |FileA...|lstrcatA|
|00000db0| 00 00 e9 01 47 65 74 57 | 69 6e 64 6f 77 73 44 69 |....GetW|indowsDi|
|00000dc0| 72 65 63 74 6f 72 79 41 | 00 00 ad 01 47 65 74 53 |rectoryA|....GetS|
|00000dd0| 68 6f 72 74 50 61 74 68 | 4e 61 6d 65 41 00 af 00 |hortPath|NameA...|
|00000de0| 45 78 69 74 50 72 6f 63 | 65 73 73 00 08 03 53 65 |ExitProc|ess...Se|
|00000df0| 74 45 72 72 6f 72 4d 6f | 64 65 00 00 08 01 47 65 |tErrorMo|de....Ge|
|00000e00| 74 43 6f 6d 6d 61 6e 64 | 4c 69 6e 65 41 00 4b 45 |tCommand|LineA.KE|
|00000e10| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 00 4f 4c 45 41 |RNEL32.d|ll..OLEA|
|00000e20| 55 54 33 32 2e 64 6c 6c | 00 00 d0 01 52 65 67 44 |UT32.dll|....RegD|
|00000e30| 65 6c 65 74 65 4b 65 79 | 41 00 c9 01 52 65 67 43 |eleteKey|A...RegC|
|00000e40| 6c 6f 73 65 4b 65 79 00 | ec 01 52 65 67 51 75 65 |loseKey.|..RegQue|
|00000e50| 72 79 56 61 6c 75 65 45 | 78 41 00 00 d5 01 52 65 |ryValueE|xA....Re|
|00000e60| 67 45 6e 75 6d 4b 65 79 | 41 00 e2 01 52 65 67 4f |gEnumKey|A...RegO|
|00000e70| 70 65 6e 4b 65 79 45 78 | 41 00 41 44 56 41 50 49 |penKeyEx|A.ADVAPI|
|00000e80| 33 32 2e 64 6c 6c 00 00 | d6 02 77 73 70 72 69 6e |32.dll..|..wsprin|
|00000e90| 74 66 41 00 2a 00 43 68 | 61 72 4e 65 78 74 41 00 |tfA.*.Ch|arNextA.|
|00000ea0| 55 53 45 52 33 32 2e 64 | 6c 6c 00 00 04 01 4f 6c |USER32.d|ll....Ol|
|00000eb0| 65 55 6e 69 6e 69 74 69 | 61 6c 69 7a 65 00 ed 00 |eUniniti|alize...|
|00000ec0| 4f 6c 65 49 6e 69 74 69 | 61 6c 69 7a 65 00 6f 6c |OleIniti|alize.ol|
|00000ed0| 65 33 32 2e 64 6c 6c 00 | 00 00 00 00 00 00 00 00 |e32.dll.|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+