/ Chip 2000 February
/ Chip_2000-02_cd.bin / servis / SPIE45 / IE501_q246094.exe / verinst.exe ![]() | < prev | next > |
MS-DOS/Windows or OS/2 Executable | 1998-11-23 | 3.0 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386, 3 sections | default | |
99% | file | data | default | |
27% | TrID | Win32 Dynamic Link Library (generic) | default | |
20% | TrID | Win16 NE executable (generic) | default | |
18% | TrID | Win32 Executable (generic) | default | |
8% | TrID | Windows Icons Library (generic) | default (weak) | |
8% | TrID | OS/2 Executable (generic) | default | |
100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
100% | binwalkID | Microsoft executable, portable (PE) | default | |
100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 03 00 | 3d 61 57 36 00 00 00 00 |PE..L...|=aW6....|
|00000090| 00 00 00 00 e0 00 0f 01 | 0b 01 05 00 00 04 00 00 |........|........|
|000000a0| 00 06 00 00 00 00 00 00 | 00 10 00 00 00 10 00 00 |........|........|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 40 00 00 00 02 00 00 | 00 00 00 00 02 00 00 00 |.@......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 30 00 00 64 00 00 00 | 00 00 00 00 00 00 00 00 |.0..d...|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | b4 30 00 00 50 00 00 00 |........|.0..P...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| 9c 03 00 00 00 10 00 00 | 00 04 00 00 00 02 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 64 61 74 61 00 00 00 | 24 01 00 00 00 20 00 00 |.data...|$.... ..|
|000001b0| 00 02 00 00 00 06 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 c0 | 2e 69 64 61 74 61 00 00 |....@...|.idata..|
|000001d0| 14 02 00 00 00 30 00 00 | 00 04 00 00 00 08 00 00 |.....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 83 ec 1c 53 55 56 33 f6 | 57 89 74 24 1c 89 74 24 |...SUV3.|W.t$..t$|
|00000210| 18 89 74 24 24 ff 15 e4 | 30 40 00 8b d8 3b de 0f |..t$$...|0@...;..|
|00000220| 84 92 02 00 00 8a 03 3c | 22 75 21 8b 3d fc 30 40 |.......<|"u!.=.0@|
|00000230| 00 53 ff d7 8b d8 8a 03 | 3c 22 74 04 84 c0 75 eb |.S......|<"t...u.|
|00000240| 80 3b 22 75 19 53 ff d7 | 8b d8 eb 12 3c 20 7e 0e |.;"u.S..|....< ~.|
|00000250| 53 ff 15 fc 30 40 00 8b | d8 80 3b 20 7f f2 8a 03 |S...0@..|..; ....|
|00000260| 84 c0 74 0f 3c 20 7f 0b | 53 ff 15 fc 30 40 00 8b |..t.< ..|S...0@..|
|00000270| d8 eb eb 3b de 0f 84 3c | 02 00 00 8b 3d e0 30 40 |...;...<|....=.0@|
|00000280| 00 53 ff d7 85 c0 0f 84 | 2b 02 00 00 8d 44 24 14 |.S......|+....D$.|
|00000290| 50 68 3f 00 0f 00 56 68 | e8 20 40 00 68 02 00 00 |Ph?...Vh|. @.h...|
|000002a0| 80 ff 15 bc 30 40 00 85 | c0 0f 85 1a 02 00 00 8d |....0@..|........|
|000002b0| 44 24 1c 50 56 56 56 8b | 35 c0 30 40 00 68 d8 20 |D$.PVVV.|5.0@.h. |
|000002c0| 40 00 ff 74 24 28 ff d6 | 85 c0 75 36 8b 44 24 1c |@..t$(..|..u6.D$.|
|000002d0| 40 50 6a 40 ff 15 d0 30 | 40 00 8b e8 85 ed 0f 84 |@Pj@...0|@.......|
|000002e0| b6 01 00 00 8d 44 24 1c | 50 55 6a 00 6a 00 68 d8 |.....D$.|PUj.j.h.|
|000002f0| 20 40 00 ff 74 24 28 ff | d6 85 c0 74 1d e9 8d 01 | @..t$(.|...t....|
|00000300| 00 00 6a 01 6a 40 ff 15 | d0 30 40 00 8b e8 85 ed |..j.j@..|.0@.....|
|00000310| 0f 84 84 01 00 00 80 65 | 00 00 80 3b 00 8b f3 0f |.......e|...;....|
|00000320| 84 b7 00 00 00 8a 06 84 | c0 74 0f 3c 20 75 0b 56 |........|.t.< u.V|
|00000330| ff 15 fc 30 40 00 8b f0 | eb eb 8a 06 84 c0 0f 84 |...0@...|........|
|00000340| 98 00 00 00 3c 2f 74 0f | 3c 2d 74 0b 56 ff 15 fc |....</t.|<-t.V...|
|00000350| 30 40 00 8b f0 eb 7c 56 | ff 15 fc 30 40 00 8b f0 |0@....|V|...0@...|
|00000360| 8a 06 3c 52 74 19 3c 72 | 74 15 84 c0 74 65 3c 20 |..<Rt.<r|t...te< |
|00000370| 75 61 56 ff 15 fc 30 40 | 00 8b f0 8a 06 eb eb 56 |uaV...0@|.......V|
|00000380| ff 15 fc 30 40 00 8b f0 | 8a 06 3c 49 74 04 3c 69 |...0@...|..<It.<i|
|00000390| 75 11 56 c7 44 24 28 01 | 00 00 00 ff 15 fc 30 40 |u.V.D$(.|......0@|
|000003a0| 00 8b f0 80 3e 3a 75 2b | 56 ff 15 fc 30 40 00 8b |....>:u+|V...0@..|
|000003b0| f0 89 74 24 20 8a 06 84 | c0 74 0f 3c 3d 74 0b 56 |..t$ ...|.t.<=t.V|
|000003c0| ff 15 fc 30 40 00 8b f0 | eb eb 80 3e 00 0f 85 03 |...0@...|...>....|
|000003d0| 01 00 00 80 3e 00 0f 85 | 49 ff ff ff 80 3e 00 0f |....>...|I....>..|
|000003e0| 85 aa 00 00 00 53 ff d7 | 83 c0 03 50 6a 40 ff 15 |.....S..|...Pj@..|
|000003f0| d0 30 40 00 8b f0 85 f6 | 0f 84 91 00 00 00 68 d4 |.0@.....|......h.|
|00000400| 20 40 00 56 ff 15 d8 30 | 40 00 53 8b 1d cc 30 40 | @.V...0|@.S...0@|
|00000410| 00 56 ff d3 68 d4 20 40 | 00 56 ff d3 56 55 ff 15 |.V..h. @|.V..VU..|
|00000420| ec 30 40 00 85 c0 75 60 | 56 ff d7 55 8b d8 ff d7 |.0@...u`|V..U....|
|00000430| 8d 44 03 01 50 6a 40 ff | 15 d0 30 40 00 8b d8 55 |.D..Pj@.|..0@...U|
|00000440| 53 89 5c 24 20 ff 15 d8 | 30 40 00 68 d4 20 40 00 |S.\$ ...|0@.h. @.|
|00000450| 55 ff d7 8d 44 28 ff 50 | ff 15 dc 30 40 00 85 c0 |U...D(.P|...0@...|
|00000460| 74 03 56 eb 04 8d 46 01 | 50 53 ff 15 cc 30 40 00 |t.V...F.|PS...0@.|
|00000470| 53 ff d7 50 53 6a 01 6a | 00 68 d8 20 40 00 ff 74 |S..PSj.j|.h. @..t|
|00000480| 24 28 ff 15 b4 30 40 00 | 56 ff 15 c8 30 40 00 85 |$(...0@.|V...0@..|
|00000490| ed 74 07 55 ff 15 c8 30 | 40 00 83 7c 24 18 00 74 |.t.U...0|@..|$..t|
|000004a0| 0a ff 74 24 18 ff 15 c8 | 30 40 00 ff 74 24 14 ff |..t$....|0@..t$..|
|000004b0| 15 b8 30 40 00 eb 12 56 | 68 bc 20 40 00 68 00 20 |..0@...V|h. @.h. |
|000004c0| 40 00 56 ff 15 f8 30 40 | 00 6a 01 58 5f 5e 5d 5b |@.V...0@|.j.X_^][|
|000004d0| 83 c4 1c c2 10 00 8a 06 | 80 26 00 8d 5e 01 88 44 |........|.&..^..D|
|000004e0| 24 13 53 ff d7 83 7c 24 | 24 00 89 44 24 28 74 1f |$.S...|$|$..D$(t.|
|000004f0| ff 74 24 20 55 ff 15 f0 | 30 40 00 85 c0 89 44 24 |.t$ U...|0@....D$|
|00000500| 24 74 0c 53 55 ff 15 f0 | 30 40 00 85 c0 74 1f ff |$t.SU...|0@...t..|
|00000510| 74 24 20 55 ff 15 ec 30 | 40 00 85 c0 89 44 24 24 |t$ U...0|@....D$$|
|00000520| 74 6f 53 55 ff 15 ec 30 | 40 00 85 c0 75 63 55 ff |toSU...0|@...ucU.|
|00000530| d7 8b 4c 24 28 8d 44 08 | 01 50 6a 40 ff 15 d0 30 |..L$(.D.|.Pj@...0|
|00000540| 40 00 8b d8 85 db 89 5c | 24 18 74 45 8b 44 24 24 |@......\|$.tE.D$$|
|00000550| 2b c5 40 50 55 53 ff 15 | d4 30 40 00 8d 46 01 50 |+.@PUS..|.0@..F.P|
|00000560| 53 ff 15 cc 30 40 00 ff | 74 24 20 ff d7 03 44 24 |S...0@..|t$ ...D$|
|00000570| 24 50 53 ff 15 cc 30 40 | 00 53 ff d7 50 53 6a 01 |$PS...0@|.S..PSj.|
|00000580| 6a 00 68 d8 20 40 00 ff | 74 24 28 ff 15 b4 30 40 |j.h. @..|t$(...0@|
|00000590| 00 8a 44 24 13 88 06 e9 | f3 fe ff ff 00 00 00 00 |..D$....|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 43 6f 6d 6d 61 6e 64 20 | 6c 69 6e 65 20 6f 70 74 |Command |line opt|
|00000610| 69 6f 6e 73 3a 0d 0a 0d | 0a 2f 52 5b 49 5d 3a 4f |ions:...|./R[I]:O|
|00000620| 4c 44 3d 4e 45 57 20 72 | 65 70 6c 61 63 65 73 20 |LD=NEW r|eplaces |
|00000630| 4f 4c 44 20 77 69 74 68 | 20 4e 45 57 20 69 66 20 |OLD with| NEW if |
|00000640| 4e 45 57 20 64 6f 65 73 | 20 6e 6f 74 20 65 78 69 |NEW does| not exi|
|00000650| 73 74 20 69 6e 20 4f 4c | 44 2e 20 20 27 49 27 20 |st in OL|D. 'I' |
|00000660| 69 6e 64 69 63 61 74 65 | 73 20 61 20 63 61 73 65 |indicate|s a case|
|00000670| 2d 69 6e 73 65 6e 73 69 | 74 69 76 65 20 73 65 61 |-insensi|tive sea|
|00000680| 72 63 68 20 6f 66 20 4f | 4c 44 20 73 68 6f 75 6c |rch of O|LD shoul|
|00000690| 64 20 62 65 20 75 73 65 | 64 2e 0d 0a 0d 0a 51 46 |d be use|d.....QF|
|000006a0| 45 4e 55 4d 20 61 70 70 | 65 6e 64 73 20 3b 51 46 |ENUM app|ends ;QF|
|000006b0| 45 4e 55 4d 3b 2e 0d 0a | 00 00 00 00 41 70 70 4d |ENUM;...|....AppM|
|000006c0| 69 6e 6f 72 56 65 72 73 | 69 6f 6e 20 55 70 64 61 |inorVers|ion Upda|
|000006d0| 74 65 00 00 3b 00 00 00 | 4d 69 6e 6f 72 56 65 72 |te..;...|MinorVer|
|000006e0| 73 69 6f 6e 00 00 00 00 | 53 4f 46 54 57 41 52 45 |sion....|SOFTWARE|
|000006f0| 5c 4d 69 63 72 6f 73 6f | 66 74 5c 57 69 6e 64 6f |\Microso|ft\Windo|
|00000700| 77 73 5c 43 75 72 72 65 | 6e 74 56 65 72 73 69 6f |ws\Curre|ntVersio|
|00000710| 6e 5c 49 6e 74 65 72 6e | 65 74 20 53 65 74 74 69 |n\Intern|et Setti|
|00000720| 6e 67 73 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ngs.....|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 78 30 00 00 00 00 00 00 | 00 00 00 00 6c 31 00 00 |x0......|....l1..|
|00000810| c8 30 00 00 a8 30 00 00 | 00 00 00 00 00 00 00 00 |.0...0..|........|
|00000820| 94 31 00 00 f8 30 00 00 | 64 30 00 00 00 00 00 00 |.1...0..|d0......|
|00000830| 00 00 00 00 e4 31 00 00 | b4 30 00 00 9c 30 00 00 |.....1..|.0...0..|
|00000840| 00 00 00 00 00 00 00 00 | 08 32 00 00 ec 30 00 00 |........|.2...0..|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 00 00 00 00 ae 31 00 00 | a0 31 00 00 d4 31 00 00 |.....1..|.1...1..|
|00000870| c0 31 00 00 00 00 00 00 | 10 31 00 00 28 31 00 00 |.1......|.1..(1..|
|00000880| 40 31 00 00 04 31 00 00 | 34 31 00 00 1c 31 00 00 |@1...1..|41...1..|
|00000890| 4e 31 00 00 5a 31 00 00 | 00 00 00 00 fe 31 00 00 |N1..Z1..|.....1..|
|000008a0| f2 31 00 00 00 00 00 00 | 7a 31 00 00 88 31 00 00 |.1......|z1...1..|
|000008b0| 00 00 00 00 ae 31 00 00 | a0 31 00 00 d4 31 00 00 |.....1..|.1...1..|
|000008c0| c0 31 00 00 00 00 00 00 | 10 31 00 00 28 31 00 00 |.1......|.1..(1..|
|000008d0| 40 31 00 00 04 31 00 00 | 34 31 00 00 1c 31 00 00 |@1...1..|41...1..|
|000008e0| 4e 31 00 00 5a 31 00 00 | 00 00 00 00 fe 31 00 00 |N1..Z1..|.....1..|
|000008f0| f2 31 00 00 00 00 00 00 | 7a 31 00 00 88 31 00 00 |.1......|z1...1..|
|00000900| 00 00 00 00 9e 02 6c 73 | 74 72 63 70 79 6e 41 00 |......ls|trcpynA.|
|00000910| 9a 01 4c 6f 63 61 6c 46 | 72 65 65 00 95 02 6c 73 |..LocalF|ree...ls|
|00000920| 74 72 63 6d 70 41 00 00 | 92 02 6c 73 74 72 63 61 |trcmpA..|..lstrca|
|00000930| 74 41 00 00 9b 02 6c 73 | 74 72 63 70 79 41 00 00 |tA....ls|trcpyA..|
|00000940| 96 01 4c 6f 63 61 6c 41 | 6c 6c 6f 63 00 00 a1 02 |..LocalA|lloc....|
|00000950| 6c 73 74 72 6c 65 6e 41 | 00 00 aa 00 47 65 74 43 |lstrlenA|....GetC|
|00000960| 6f 6d 6d 61 6e 64 4c 69 | 6e 65 41 00 4b 45 52 4e |ommandLi|neA.KERN|
|00000970| 45 4c 33 32 2e 64 6c 6c | 00 00 95 01 4d 65 73 73 |EL32.dll|....Mess|
|00000980| 61 67 65 42 6f 78 41 00 | 21 00 43 68 61 72 4e 65 |ageBoxA.|!.CharNe|
|00000990| 78 74 41 00 55 53 45 52 | 33 32 2e 64 6c 6c 00 00 |xtA.USER|32.dll..|
|000009a0| 17 01 52 65 67 43 6c 6f | 73 65 4b 65 79 00 41 01 |..RegClo|seKey.A.|
|000009b0| 52 65 67 53 65 74 56 61 | 6c 75 65 45 78 41 00 00 |RegSetVa|lueExA..|
|000009c0| 36 01 52 65 67 51 75 65 | 72 79 56 61 6c 75 65 45 |6.RegQue|ryValueE|
|000009d0| 78 41 00 00 2e 01 52 65 | 67 4f 70 65 6e 4b 65 79 |xA....Re|gOpenKey|
|000009e0| 45 78 41 00 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ExA.ADVA|PI32.dll|
|000009f0| 00 00 c1 00 53 74 72 53 | 74 72 49 41 00 00 c0 00 |....StrS|trIA....|
|00000a00| 53 74 72 53 74 72 41 00 | 53 48 4c 57 41 50 49 2e |StrStrA.|SHLWAPI.|
|00000a10| 64 6c 6c 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |dll.....|........|
|00000a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+