Chip 2002 May

home *** CD-ROM | disk | FTP | other *** search

/ Chip 2002 May / 05_02.iso / start.exe / start.exe

MS-DOS/Windows or OS/2 Executable | 2001-05-08 | 4.0 KB

open in:

MacOS 8.1 |

Win98 |

DOS

view JSON data |

view as text

This file was processed as: MS-DOS/Windows or OS/2 Executable (executable/exe).

Confidence	Program	Detection	Match Type	Support
`100%`	dexvert	MS-DOS/Windows or OS/2 Executable `(executable/exe)`	magic	Supported
`1%`	dexvert	Ady's GLUE Packed `(archive/adysGLUEPacked)`	ext	Unsupported
`1%`	dexvert	BlacK FiST Packed `(archive/blackFiSTPacked)`	ext	Unsupported
`1%`	dexvert	CauseWay Compressor Packed `(archive/causeWayCompressorPacked)`	ext	Unsupported
`1%`	dexvert	CExe Packed `(archive/cExePacked)`	ext	Unsupported
`1%`	dexvert	cIPHATOR Protected `(archive/ciphatorProtected)`	ext	Unsupported
`1%`	dexvert	CRYPACK Protected `(archive/crypackProtected)`	ext	Unsupported
`1%`	dexvert	CRYPTEXE Protected `(archive/cryptexeProtected)`	ext	Unsupported
`1%`	dexvert	Crypt Light Show Protected `(archive/cryptLightShowProtected)`	ext	Unsupported
`1%`	dexvert	DaRKSToP Protected `(archive/darkstopProtected)`	ext	Unsupported
`1%`	dexvert	DiskImager SFX Image `(archive/diskImagerSFXImage)`	ext	Unsupported
`1%`	dexvert	Dismember EXE CRYPT Protected `(archive/dismemberProtected)`	ext	Unsupported
`1%`	dexvert	DJP Packed `(archive/djpPacked)`	ext	Unsupported
`1%`	dexvert	.NETZ Packed `(archive/dotNETZPacked)`	ext	Unsupported
`1%`	dexvert	DSHIELD Protected `(archive/dshieldProtected)`	ext	Unsupported
`1%`	dexvert	Exe32Pack Packed `(archive/exe32PackPacked)`	ext	Unsupported
`1%`	dexvert	EXE Manager Protected `(archive/exeManagerProtected)`	ext	Unsupported
`1%`	dexvert	EXETOOLS Protected `(archive/exetoolsProtected)`	ext	Unsupported
`1%`	dexvert	EZip Packed `(archive/ezipPacked)`	ext	Unsupported
`1%`	dexvert	FSG Packed `(archive/fsgPacked)`	ext	Unsupported
`1%`	dexvert	HackStop Protected `(archive/hackStopProtected)`	ext	Unsupported
`1%`	dexvert	JMCryptExe Protected `(archive/jmCryptExeProtected)`	ext	Unsupported
`1%`	dexvert	kkrunchy Packed `(archive/kkcrunchPacked)`	ext	Unsupported
`1%`	dexvert	mbp SHRINK Packed `(archive/mbpSHRINKPacked)`	ext	Unsupported
`1%`	dexvert	MEGALITE Packed `(archive/megalitePacked)`	ext	Unsupported
`1%`	dexvert	Mess Protected `(archive/messProtected)`	ext	Unsupported
`1%`	dexvert	Mew Packed `(archive/mewPacked)`	ext	Unsupported
`1%`	dexvert	MPRESS Packed `(archive/mpressPacked)`	ext	Unsupported
`1%`	dexvert	NOS Packer Packed `(archive/nosPackerPacked)`	ext	Unsupported
`1%`	dexvert	NTShell Protected `(archive/ntShellProtected)`	ext	Unsupported
`1%`	dexvert	Pack Master Packed `(archive/packMasterPacked)`	ext	Unsupported
`1%`	dexvert	PE Diminisher Packed `(archive/peDiminisherPacked)`	ext	Unsupported
`1%`	dexvert	Petite Packed `(archive/petitePacked)`	ext	Unsupported
`1%`	dexvert	PeX Packed `(archive/pexPacked)`	ext	Unsupported
`1%`	dexvert	PKLITE32 Packed `(archive/pklite32Packed)`	ext	Unsupported
`1%`	dexvert	PowerBatch Packed `(archive/powerBatchPacked)`	ext	Unsupported
`1%`	dexvert	protector Protected `(archive/protectorProtected)`	ext	Unsupported
`1%`	dexvert	py2exe Packed `(archive/py2exePacked)`	ext	Unsupported
`1%`	dexvert	PyInstaller Packed `(archive/pyInstallerPacked)`	ext	Unsupported
`1%`	dexvert	Scramb Packed `(archive/scrambPacked)`	ext	Unsupported
`1%`	dexvert	SECURE Protected `(archive/secureProtected)`	ext	Unsupported
`1%`	dexvert	Shrinker Packed (Windows) `(archive/shrinkerWindowsPacked)`	ext	Unsupported
`1%`	dexvert	Spoon Studio Packed `(archive/spoonStudioPacked)`	ext	Unsupported
`1%`	dexvert	tElock Packed `(archive/telockPacked)`	ext	Unsupported
`1%`	dexvert	The Builder Packed `(archive/theBuilderPacked)`	ext	Unsupported
`1%`	dexvert	The Patcher Packed `(archive/thePatcherPacked)`	ext	Unsupported
`1%`	dexvert	32Lite Packed `(archive/thirtyTwoLitePacked)`	ext	Unsupported
`1%`	dexvert	TinyProt Protected `(archive/tinyProtProtected)`	ext	Unsupported
`1%`	dexvert	(Win)Upack Packed `(archive/winUpackPacked)`	ext	Unsupported
`1%`	dexvert	Yoda's Crypte Protected `(archive/yodasCrypterProtected)`	ext	Unsupported
`1%`	dexvert	MS-DOS PMODE extender executable `(executable/msdosPMODEExtenderExecutable)`	ext	Unsupported
`1%`	dexvert	Sony Playstation Executable `(executable/sonyPlaystationExe)`	ext	Unsupported
`1%`	dexvert	Novell Netware Virtual Loadable Module `(other/novellNetwareVirtualLoadableModule)`	ext	Unsupported
`100%`	file	PE32 executable for MS Windows 4.00 (GUI), Intel i386, 3 sections	default
`99%`	file	data	default
`25%`	TrID	Win32 Dynamic Link Library (generic)	default
`19%`	TrID	Win16 NE executable (generic)	default
`17%`	TrID	Win32 Executable (generic)	default
`7%`	TrID	Win16/32 Executable Delphi generic	default (weak)
`7%`	TrID	Windows Icons Library (generic)	default (weak)
`100%`	siegfried	fmt/899 Windows Portable Executable (32 bit)	default
`100%`	gt2	Ist eine ausf�hrbare Win32 Datei	default
`100%`	binwalkID	Microsoft executable, portable (PE)	default
`100%`	xdgMime	application/vnd.microsoft.portable-executable	default (weak)

hex view

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 03 00 | 7b 5f f8 3a 00 00 00 00 |PE..L...|{_.:....|
|00000090| 00 00 00 00 e0 00 0f 01 | 0b 01 01 03 00 06 00 00 |........|........|
|000000a0| 00 06 00 00 00 00 00 00 | cb 11 00 00 00 10 00 00 |........|........|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 01 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 40 00 00 00 02 00 00 | 00 00 00 00 02 00 00 00 |.@......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 30 00 00 1c 02 00 00 | 00 00 00 00 00 00 00 00 |.0......|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| 20 04 00 00 00 10 00 00 | 20 04 00 00 00 04 00 00 | .......| .......|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 64 61 74 61 00 00 00 | 38 00 00 00 00 20 00 00 |.data...|8.... ..|
|000001b0| 38 00 00 00 00 0a 00 00 | 00 00 00 00 00 00 00 00 |8.......|........|
|000001c0| 00 00 00 00 40 00 00 c0 | 2e 69 64 61 74 61 00 00 |....@...|.idata..|
|000001d0| 1c 02 00 00 00 30 00 00 | 1c 02 00 00 00 0c 00 00 |.....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 60 00 00 c0 |........|....`...|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 31 c0 40 8b 4c 24 04 f7 | 41 04 06 00 00 00 74 0f |1.@.L$..|A.....t.|
|00000410| 8b 44 24 08 8b 54 24 10 | 89 02 b8 03 00 00 00 c3 |.D$..T$.|........|
|00000420| 53 56 57 8b 44 24 10 50 | 6a fe 68 00 10 40 00 64 |SVW.D$.P|j.h..@.d|
|00000430| ff 35 00 00 00 00 64 89 | 25 00 00 00 00 8b 44 24 |.5....d.|%.....D$|
|00000440| 20 8b 58 08 8b 70 0c 83 | fe ff 74 20 3b 74 24 24 | .X..p..|..t ;t$$|
|00000450| 74 1a 8d 34 76 8b 0c b3 | 8b 4c 24 08 8b 48 0c 83 |t..4v...|.L$..H..|
|00000460| 7c b3 04 00 75 d7 ff 54 | b3 08 eb d1 64 8f 05 00 ||...u..T|....d...|
|00000470| 00 00 00 83 c4 0c 5f 5e | 5b c3 55 89 e5 53 56 57 |......_^|[.U..SVW|
|00000480| 55 6a 00 6a 00 68 92 10 | 40 00 ff 75 08 e8 3a 03 |Uj.j.h..|@..u..:.|
|00000490| 00 00 5d 5f 5e 5b 89 ec | 5d c3 fc 55 89 e5 83 ec |..]_^[..|]..U....|
|000004a0| 08 53 56 57 55 8b 5d 0c | 8b 45 08 a3 30 20 40 00 |.SVWU.].|.E..0 @.|
|000004b0| 89 1d 34 20 40 00 f7 40 | 04 06 00 00 00 75 72 89 |..4 @..@|.....ur.|
|000004c0| 45 f8 8b 45 10 89 45 fc | a3 34 20 40 00 8d 45 f8 |E..E..E.|.4 @..E.|
|000004d0| 89 43 fc 8b 73 0c 8b 7b | 08 83 fe ff 74 62 8d 0c |.C..s..{|....tb..|
|000004e0| 76 83 7c 8f 04 00 74 3a | 56 55 8d 6b 10 ff 54 8f |v.|...t:|VU.k..T.|
|000004f0| 04 5d 5e 8b 5d 0c 09 c0 | 74 28 78 31 8b 7b 08 53 |.]^.]...|t(x1.{.S|
|00000500| e8 75 ff ff ff 83 c4 04 | 8d 6b 10 56 53 e8 0e ff |.u......|.k.VS...|
|00000510| ff ff 83 c4 08 8d 0c 76 | 8b 04 8f 8b 43 0c ff 54 |.......v|....C..T|
|00000520| 8f 08 8b 7b 08 8d 0c 76 | 8b 34 8f eb ac 31 c0 eb |...{...v|.4...1..|
|00000530| 71 55 8d 6b 10 6a ff 53 | e8 e3 fe ff ff 83 c4 0c |qU.k.j.S|........|
|00000540| 6a 00 c7 05 10 20 40 00 | 0b 00 00 00 6a 0b e8 b5 |j.... @.|....j...|
|00000550| 02 00 00 83 c4 08 09 c0 | 75 21 6a 00 c7 05 10 20 |........|u!j.... |
|00000560| 40 00 08 00 00 00 6a 08 | e8 9b 02 00 00 83 c4 08 |@.....j.|........|
|00000570| 09 c0 75 07 b8 01 00 00 | 00 eb 27 83 f8 ff 74 2a |..u.....|..'...t*|
|00000580| 50 ff 35 10 20 40 00 e8 | 7c 02 00 00 83 c4 08 ff |P.5. @..||.......|
|00000590| 35 10 20 40 00 e8 62 02 | 00 00 83 c4 04 b8 01 00 |5. @..b.|........|
|000005a0| 00 00 5d 5f 5e 5b 89 ec | 5d c3 83 3d 2c 20 40 00 |..]_^[..|]..=, @.|
|000005b0| 00 75 07 b8 01 00 00 00 | eb e8 a1 2c 20 40 00 6a |.u......|..., @.j|
|000005c0| 0b ff e0 58 b8 01 00 00 | 00 eb d7 64 a1 00 00 00 |...X....|...d....|
|000005d0| 00 55 89 e5 6a ff 68 1c | 20 40 00 68 9a 10 40 00 |.U..j.h.| @.h..@.|
|000005e0| 50 64 89 25 00 00 00 00 | 83 ec 10 53 56 57 89 65 |Pd.%....|...SVW.e|
|000005f0| e8 68 28 20 40 00 68 24 | 20 40 00 68 20 20 40 00 |.h( @.h$| @.h  @.|
|00000600| e8 d3 01 00 00 ff 35 28 | 20 40 00 ff 35 24 20 40 |......5(| @..5$ @|
|00000610| 00 ff 35 20 20 40 00 89 | 25 14 20 40 00 e8 22 01 |..5  @..|%. @..".|
|00000620| 00 00 83 c4 18 31 c9 89 | 4d fc 50 e8 b4 01 00 00 |.....1..|M.P.....|
|00000630| c9 c3 00 00 64 a3 00 00 | 00 00 c3 00 55 89 e5 81 |....d...|....U...|
|00000640| ec 48 01 00 00 53 56 57 | e8 5b 01 00 00 89 c6 80 |.H...SVW|.[......|
|00000650| 3e 22 75 15 46 31 ff eb | 01 47 0f be 04 3e 09 c0 |>"u.F1..|.G...>..|
|00000660| 74 05 83 f8 22 75 f2 eb | 12 31 ff eb 01 47 0f be |t..."u..|.1...G..|
|00000670| 04 3e 09 c0 74 05 83 f8 | 20 75 f2 c6 04 3e 00 47 |.>..t...| u...>.G|
|00000680| eb 01 47 80 3c 3e 20 74 | f9 89 fb 80 3c 3e 22 75 |..G.<> t|....<>"u|
|00000690| 15 47 43 eb 01 47 0f be | 04 3e 09 c0 74 05 83 f8 |.GC..G..|.>..t...|
|000006a0| 22 75 f2 eb 0e 47 0f be | 04 3e 09 c0 74 05 83 f8 |"u...G..|.>..t...|
|000006b0| 20 75 f2 89 d8 01 f0 89 | 45 fc c6 04 3e 00 8d 5c | u......|E...>..\|
|000006c0| 37 01 8d 45 f8 50 8d 85 | f4 fe ff ff 50 68 04 01 |7..E.P..|....Ph..|
|000006d0| 00 00 56 e8 dc 00 00 00 | 3d 04 01 00 00 77 4e 8b |..V.....|=....wN.|
|000006e0| 45 f8 c6 00 00 6a 3c 6a | 00 8d 85 b8 fe ff ff 50 |E....j<j|.......P|
|000006f0| e8 fb 00 00 00 83 c4 0c | c7 85 b8 fe ff ff 3c 00 |........|......<.|
|00000700| 00 00 8b 45 fc 89 85 c8 | fe ff ff 89 9d cc fe ff |...E....|........|
|00000710| ff 8d 85 f4 fe ff ff 89 | 85 d0 fe ff ff 8d 85 b8 |........|........|
|00000720| fe ff ff 50 e8 0f 00 00 | 00 31 c0 eb 03 31 c0 40 |...P....|.1...1.@|
|00000730| 5f 5e 5b c9 c2 10 00 00 | ff 25 e8 30 40 00 90 90 |_^[.....|.%.0@...|
|00000740| 00 00 00 00 55 89 e5 51 | 57 e8 5a 00 00 00 89 c7 |....U..Q|W.Z.....|
|00000750| 80 3f 22 75 23 6a 22 89 | f8 40 50 e8 b4 00 00 00 |.?"u#j".|.@P.....|
|00000760| 83 c4 08 89 45 fc 09 c0 | 74 29 89 c7 47 eb 01 47 |....E...|t)..G..G|
|00000770| 80 3f 20 74 fa eb 1c 47 | 0f be 07 09 c0 74 05 83 |.? t...G|.....t..|
|00000780| f8 20 75 f3 eb 01 47 0f | be 07 09 c0 74 05 83 f8 |. u...G.|....t...|
|00000790| 20 74 f3 6a 00 e8 26 00 | 00 00 6a 01 57 6a 00 50 | t.j..&.|..j.Wj.P|
|000007a0| e8 97 fe ff ff 5f c9 c3 | ff 25 f4 30 40 00 90 90 |....._..|.%.0@...|
|000007b0| 00 00 00 00 ff 25 f8 30 | 40 00 90 90 00 00 00 00 |.....%.0|@.......|
|000007c0| ff 25 fc 30 40 00 90 90 | 00 00 00 00 ff 25 00 31 |.%.0@...|.....%.1|
|000007d0| 40 00 90 90 00 00 00 00 | ff 25 0c 31 40 00 90 90 |@.......|.%.1@...|
|000007e0| 00 00 00 00 ff 25 10 31 | 40 00 90 90 00 00 00 00 |.....%.1|@.......|
|000007f0| ff 25 14 31 40 00 90 90 | 00 00 00 00 ff 25 18 31 |.%.1@...|.....%.1|
|00000800| 40 00 90 90 00 00 00 00 | ff 25 1c 31 40 00 90 90 |@.......|.%.1@...|
|00000810| 00 00 00 00 ff 25 20 31 | 40 00 90 90 00 00 00 00 |.....% 1|@.......|
|00000820| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 00 20 40 00 00 20 40 00 | 00 80 00 00 00 00 00 00 |. @.. @.|........|
|00000a10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 00 00 00 00 00 | 00 00 00 00 d8 31 00 00 |........|.....1..|
|00000c10| f4 30 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.0......|........|
|00000c20| f8 31 00 00 0c 31 00 00 | 00 00 00 00 00 00 00 00 |.1...1..|........|
|00000c30| 00 00 00 00 c8 31 00 00 | e8 30 00 00 00 00 00 00 |.....1..|.0......|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ca0| 00 00 00 00 28 31 00 00 | 00 00 00 00 00 00 00 00 |....(1..|........|
|00000cb0| 3c 31 00 00 50 31 00 00 | 64 31 00 00 78 31 00 00 |<1..P1..|d1..x1..|
|00000cc0| 00 00 00 00 00 00 00 00 | 84 31 00 00 94 31 00 00 |........|.1...1..|
|00000cd0| 9c 31 00 00 a8 31 00 00 | b0 31 00 00 bc 31 00 00 |.1...1..|.1...1..|
|00000ce0| 00 00 00 00 00 00 00 00 | 28 31 00 00 00 00 00 00 |........|(1......|
|00000cf0| 00 00 00 00 3c 31 00 00 | 50 31 00 00 64 31 00 00 |....<1..|P1..d1..|
|00000d00| 78 31 00 00 00 00 00 00 | 00 00 00 00 84 31 00 00 |x1......|.....1..|
|00000d10| 94 31 00 00 9c 31 00 00 | a8 31 00 00 b0 31 00 00 |.1...1..|.1...1..|
|00000d20| bc 31 00 00 00 00 00 00 | 00 00 53 68 65 6c 6c 45 |.1......|..ShellE|
|00000d30| 78 65 63 75 74 65 45 78 | 41 00 00 00 00 00 47 65 |xecuteEx|A.....Ge|
|00000d40| 74 43 6f 6d 6d 61 6e 64 | 4c 69 6e 65 41 00 00 00 |tCommand|LineA...|
|00000d50| 00 00 47 65 74 46 75 6c | 6c 50 61 74 68 4e 61 6d |..GetFul|lPathNam|
|00000d60| 65 41 00 00 00 00 47 65 | 74 4d 6f 64 75 6c 65 48 |eA....Ge|tModuleH|
|00000d70| 61 6e 64 6c 65 41 00 00 | 00 00 52 74 6c 55 6e 77 |andleA..|..RtlUnw|
|00000d80| 69 6e 64 00 00 00 5f 5f | 47 65 74 4d 61 69 6e 41 |ind...__|GetMainA|
|00000d90| 72 67 73 00 00 00 65 78 | 69 74 00 00 00 00 6d 65 |rgs...ex|it....me|
|00000da0| 6d 73 65 74 00 00 00 00 | 00 00 72 61 69 73 65 00 |mset....|..raise.|
|00000db0| 00 00 73 69 67 6e 61 6c | 00 00 00 00 00 00 73 74 |..signal|......st|
|00000dc0| 72 63 68 72 00 00 00 00 | 53 48 45 4c 4c 33 32 2e |rchr....|SHELL32.|
|00000dd0| 44 4c 4c 00 00 30 40 00 | 4b 45 52 4e 45 4c 33 32 |DLL..0@.|KERNEL32|
|00000de0| 2e 44 4c 4c 00 00 00 00 | 14 30 40 00 14 30 40 00 |.DLL....|.0@..0@.|
|00000df0| 14 30 40 00 14 30 40 00 | 43 52 54 44 4c 4c 2e 44 |.0@..0@.|CRTDLL.D|
|00000e00| 4c 4c 00 00 28 30 40 00 | 28 30 40 00 28 30 40 00 |LL..(0@.|(0@.(0@.|
|00000e10| 28 30 40 00 28 30 40 00 | 28 30 40 00 00 00 00 00 |(0@.(0@.|(0@.....|
|00000e20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 00 00 00 20 00 00 00 | 00 00 00 00 20 00 00 00 |.... ...|.... ...|
|00001010| 00 10 00 00 00 16 00 00 | 00 20 00 00 00 26 00 00 |........|. ...&..|
+--------+-------------------------+-------------------------+--------+--------+