/ PC World 1999 May
/ PCWorld_1999-05_cd.bin / Komunik / MSIE5 / ieak5cd.exe / runisp32.exe ![]() | < prev | next > |
MS-DOS/Windows or OS/2 Executable | 1999-02-24 | 4.3 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386 (stripped to external PDB), 2 sections | default | |
99% | file | data | default | |
27% | TrID | Win32 Dynamic Link Library (generic) | default | |
20% | TrID | Win16 NE executable (generic) | default | |
18% | TrID | Win32 Executable (generic) | default | |
8% | TrID | Windows Icons Library (generic) | default (weak) | |
8% | TrID | OS/2 Executable (generic) | default | |
100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
100% | binwalkID | Microsoft executable, portable (PE) | default | |
100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 69 92 f4 7d 2d f3 9a 2e | 2d f3 9a 2e 2d f3 9a 2e |i..}-...|-...-...|
|00000090| 2d f3 9b 2e 22 f3 9a 2e | f5 ec 89 2e 24 f3 9a 2e |-..."...|....$...|
|000000a0| ab f4 9c 2e 2c f3 9a 2e | 2d f3 9a 2e 2c f3 9a 2e |....,...|-...,...|
|000000b0| 52 69 63 68 2d f3 9a 2e | 00 00 00 00 00 00 00 00 |Rich-...|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 50 45 00 00 4c 01 02 00 | 2e 2d c2 36 00 00 00 00 |PE..L...|.-.6....|
|000000e0| 4b 00 00 00 e0 00 07 03 | 0b 01 05 0c 00 06 00 00 |K.......|........|
|000000f0| 00 04 00 00 00 00 00 00 | 32 13 00 00 00 10 00 00 |........|2.......|
|00000100| 00 20 00 00 00 00 00 01 | 00 10 00 00 00 02 00 00 |. ......|........|
|00000110| 05 00 00 00 05 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000120| 00 30 00 00 00 06 00 00 | b2 25 00 00 02 00 00 00 |.0......|.%......|
|00000130| 00 00 04 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000140| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| b0 13 00 00 64 00 00 00 | 00 20 00 00 e8 03 00 00 |....d...|. ......|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 50 10 00 00 38 00 00 00 |........|P...8...|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 10 00 00 4c 00 00 00 |........|....L...|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001d0| 8c 05 00 00 00 10 00 00 | 00 06 00 00 00 06 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001f0| 2e 72 73 72 63 00 00 00 | e8 03 00 00 00 20 00 00 |.rsrc...|..... ..|
|00000200| 00 04 00 00 00 0c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 40 | 00 00 00 00 00 00 00 00 |....@..@|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 6e 14 00 00 82 14 00 00 | 60 14 00 00 00 00 00 00 |n.......|`.......|
|00000610| a0 14 00 00 ac 14 00 00 | b8 14 00 00 c6 14 00 00 |........|........|
|00000620| da 14 00 00 ec 14 00 00 | 00 00 00 00 6e 15 00 00 |........|....n...|
|00000630| 00 00 00 00 3a 15 00 00 | 56 15 00 00 2a 15 00 00 |....:...|V...*...|
|00000640| 18 15 00 00 0c 15 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000650| 00 00 00 00 2e 2d c2 36 | 00 00 00 00 04 00 00 00 |.....-.6|........|
|00000660| 10 01 00 00 00 00 00 00 | 00 10 00 00 00 00 00 00 |........|........|
|00000670| 2e 2d c2 36 00 00 00 00 | 03 00 00 00 40 00 00 00 |.-.6....|....@...|
|00000680| 00 00 00 00 10 11 00 00 | 00 00 00 00 2e 2d c2 36 |........|.....-.6|
|00000690| 00 00 00 00 03 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|000006a0| ec 1a 00 00 00 00 00 00 | 2e 2d c2 36 00 00 00 00 |........|.-.6....|
|000006b0| 06 00 00 00 00 00 00 00 | 00 00 00 00 2c 1b 00 00 |........|....,...|
|000006c0| 00 00 00 00 2e 2d c2 36 | 00 00 00 00 02 00 00 00 |.....-.6|........|
|000006d0| 1d 00 00 00 00 00 00 00 | c0 e5 44 ff 4f 70 65 6e |........|..D.Open|
|000006e0| 00 00 00 00 49 53 49 47 | 4e 55 50 2e 45 58 45 00 |....ISIG|NUP.EXE.|
|000006f0| 2d 68 20 25 73 00 00 00 | 5c 73 69 67 6e 75 70 2e |-h %s...|\signup.|
|00000700| 68 74 6d 00 5c 73 69 67 | 6e 75 70 00 00 00 00 00 |htm.\sig|nup.....|
|00000710| 53 6f 66 74 77 61 72 65 | 5c 4d 69 63 72 6f 73 6f |Software|\Microso|
|00000720| 66 74 5c 57 69 6e 64 6f | 77 73 5c 43 75 72 72 65 |ft\Windo|ws\Curre|
|00000730| 6e 74 56 65 72 73 69 6f | 6e 5c 41 70 70 20 50 61 |ntVersio|n\App Pa|
|00000740| 74 68 73 5c 49 45 58 50 | 4c 4f 52 45 2e 45 58 45 |ths\IEXP|LORE.EXE|
|00000750| 00 00 53 56 57 8b 7c 24 | 10 32 db 8b c7 38 1f 8b |..SVW.|$|.2...8..|
|00000760| f7 74 29 8a 08 80 f9 5c | 75 04 8b f0 eb 13 80 f9 |.t)....\|u.......|
|00000770| 3a 75 0e 80 78 01 5c 8d | 48 01 75 02 8b c1 8d 70 |:u..x.\.|H.u....p|
|00000780| 01 50 ff 15 44 10 00 01 | 38 18 75 d7 8a 06 3a c3 |.P..D...|8.u...:.|
|00000790| 74 12 3b f7 75 12 3c 5c | 75 0e 38 5e 01 74 05 88 |t.;.u.<\|u.8^.t..|
|000007a0| 5e 01 eb 06 33 c0 eb 05 | 88 1e 6a 01 58 5f 5e 5b |^...3...|..j.X_^[|
|000007b0| c2 04 00 55 8b ec 83 ec | 3c 8b 45 08 83 65 cc 00 |...U....|<.E..e..|
|000007c0| 89 45 d4 8b 45 0c 89 45 | d8 8b 45 10 89 45 dc 8b |.E..E..E|..E..E..|
|000007d0| 45 14 89 45 e0 8d 45 c4 | 50 c7 45 c8 40 00 00 00 |E..E..E.|P.E.@...|
|000007e0| c7 45 d0 dc 10 00 01 c7 | 45 c4 3c 00 00 00 ff 15 |.E......|E.<.....|
|000007f0| 2c 10 00 01 85 c0 74 03 | 8b 45 fc c9 c2 10 00 55 |,.....t.|.E.....U|
|00000800| 8b ec 81 ec 38 03 00 00 | 53 56 8d 45 f8 57 50 33 |....8...|SV.E.WP3|
|00000810| f6 68 3f 00 0f 00 56 68 | 10 11 00 01 68 02 00 00 |.h?...Vh|....h...|
|00000820| 80 c7 45 f4 04 01 00 00 | ff 15 04 10 00 01 8d 45 |..E.....|.......E|
|00000830| f4 50 8d 85 d0 fe ff ff | 50 8d 45 f0 50 56 68 0c |.P......|P.E.PVh.|
|00000840| 11 00 01 ff 75 f8 ff 15 | 00 10 00 01 ff 75 f8 ff |....u...|.....u..|
|00000850| 15 08 10 00 01 8d 85 d0 | fe ff ff 50 e8 f1 fe ff |........|...P....|
|00000860| ff 8b 3d 14 10 00 01 8d | 85 d0 fe ff ff 68 04 11 |..=.....|.....h..|
|00000870| 00 01 50 ff d7 8d 85 d0 | fe ff ff 50 8d 85 cc fd |..P.....|...P....|
|00000880| ff ff 50 ff 15 10 10 00 | 01 8d 85 d0 fe ff ff 68 |..P.....|.......h|
|00000890| f8 10 00 01 50 ff d7 8d | 85 d0 fe ff ff 50 8d 85 |....P...|.....P..|
|000008a0| c8 fc ff ff 68 f0 10 00 | 01 50 ff 15 38 10 00 01 |....h...|.P..8...|
|000008b0| 83 c4 0c 8d 85 cc fd ff | ff 6a 01 50 8d 85 c8 fc |........|.j.P....|
|000008c0| ff ff 50 68 e4 10 00 01 | e8 e6 fe ff ff 3b c6 89 |..Ph....|.....;..|
|000008d0| 45 fc 74 55 8b 3d 34 10 | 00 01 bb ff 00 00 00 53 |E.tU.=4.|.......S|
|000008e0| 6a ff 8d 45 fc 56 50 6a | 01 ff d7 83 f8 01 75 39 |j..E.VPj|......u9|
|000008f0| 6a 01 56 56 8d 45 d4 56 | 50 ff 15 3c 10 00 01 85 |j.VV.E.V|P..<....|
|00000900| c0 74 1a 83 7d d8 12 74 | 20 ff 75 e0 ff 75 dc ff |.t..}..t| .u..u..|
|00000910| 75 d8 ff 75 d4 ff 15 40 | 10 00 01 eb d3 53 6a ff |u..u...@|.....Sj.|
|00000920| 8d 45 fc 56 50 6a 01 eb | c0 5f 5e 33 c0 5b c9 c2 |.E.VPj..|._^3.[..|
|00000930| 10 00 55 8b ec 83 ec 44 | 56 ff 15 24 10 00 01 8b |..U....D|V..$....|
|00000940| f0 8a 06 3c 22 75 14 8a | 46 01 46 84 c0 74 04 3c |...<"u..|F.F..t.<|
|00000950| 22 75 f4 80 3e 22 75 0d | 46 eb 0a 3c 20 7e 06 46 |"u..>"u.|F..< ~.F|
|00000960| 80 3e 20 7f fa 8a 06 84 | c0 74 07 3c 20 7f 03 46 |.> .....|.t.< ..F|
|00000970| eb f3 83 65 e8 00 8d 45 | bc 50 ff 15 20 10 00 01 |...e...E|.P.. ...|
|00000980| f6 45 e8 01 74 06 0f b7 | 45 ec eb 03 6a 0a 58 50 |.E..t...|E...j.XP|
|00000990| 56 6a 00 6a 00 ff 15 1c | 10 00 01 50 e8 5e fe ff |Vj.j....|...P.^..|
|000009a0| ff 8b f0 56 ff 15 18 10 | 00 01 8b c6 5e c9 c3 cc |...V....|....^...|
|000009b0| 14 14 00 00 00 00 00 00 | 00 00 00 00 92 14 00 00 |........|........|
|000009c0| 00 10 00 00 24 14 00 00 | 00 00 00 00 00 00 00 00 |....$...|........|
|000009d0| fe 14 00 00 10 10 00 00 | 48 14 00 00 00 00 00 00 |........|H.......|
|000009e0| 00 00 00 00 62 15 00 00 | 34 10 00 00 40 14 00 00 |....b...|4...@...|
|000009f0| 00 00 00 00 00 00 00 00 | 80 15 00 00 2c 10 00 00 |........|....,...|
|00000a00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a10| 00 00 00 00 6e 14 00 00 | 82 14 00 00 60 14 00 00 |....n...|....`...|
|00000a20| 00 00 00 00 a0 14 00 00 | ac 14 00 00 b8 14 00 00 |........|........|
|00000a30| c6 14 00 00 da 14 00 00 | ec 14 00 00 00 00 00 00 |........|........|
|00000a40| 6e 15 00 00 00 00 00 00 | 3a 15 00 00 56 15 00 00 |n.......|:...V...|
|00000a50| 2a 15 00 00 18 15 00 00 | 0c 15 00 00 00 00 00 00 |*.......|........|
|00000a60| 78 01 52 65 67 43 6c 6f | 73 65 4b 65 79 00 9a 01 |x.RegClo|seKey...|
|00000a70| 52 65 67 51 75 65 72 79 | 56 61 6c 75 65 45 78 41 |RegQuery|ValueExA|
|00000a80| 00 00 90 01 52 65 67 4f | 70 65 6e 4b 65 79 45 78 |....RegO|penKeyEx|
|00000a90| 41 00 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 00 |A.ADVAPI|32.dll..|
|00000aa0| 32 03 6c 73 74 72 63 70 | 79 41 00 00 29 03 6c 73 |2.lstrcp|yA..).ls|
|00000ab0| 74 72 63 61 74 41 00 00 | 8b 00 45 78 69 74 50 72 |trcatA..|..ExitPr|
|00000ac0| 6f 63 65 73 73 00 38 01 | 47 65 74 4d 6f 64 75 6c |ocess.8.|GetModul|
|00000ad0| 65 48 61 6e 64 6c 65 41 | 00 00 64 01 47 65 74 53 |eHandleA|..d.GetS|
|00000ae0| 74 61 72 74 75 70 49 6e | 66 6f 41 00 d8 00 47 65 |tartupIn|foA...Ge|
|00000af0| 74 43 6f 6d 6d 61 6e 64 | 4c 69 6e 65 41 00 4b 45 |tCommand|LineA.KE|
|00000b00| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 00 25 00 43 68 |RNEL32.d|ll..%.Ch|
|00000b10| 61 72 4e 65 78 74 41 00 | 86 00 44 65 66 57 69 6e |arNextA.|..DefWin|
|00000b20| 64 6f 77 50 72 6f 63 41 | 00 00 e1 01 50 65 65 6b |dowProcA|....Peek|
|00000b30| 4d 65 73 73 61 67 65 41 | 00 00 cf 01 4d 73 67 57 |MessageA|....MsgW|
|00000b40| 61 69 74 46 6f 72 4d 75 | 6c 74 69 70 6c 65 4f 62 |aitForMu|ltipleOb|
|00000b50| 6a 65 63 74 73 00 b2 02 | 77 73 70 72 69 6e 74 66 |jects...|wsprintf|
|00000b60| 41 00 55 53 45 52 33 32 | 2e 64 6c 6c 00 00 7d 00 |A.USER32|.dll..}.|
|00000b70| 53 68 65 6c 6c 45 78 65 | 63 75 74 65 45 78 41 00 |ShellExe|cuteExA.|
|00000b80| 53 48 45 4c 4c 33 32 2e | 64 6c 6c 00 00 00 00 00 |SHELL32.|dll.....|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00000c10| 10 00 00 00 18 00 00 80 | 00 00 00 00 00 00 00 00 |........|........|
|00000c20| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00000c40| 09 04 00 00 48 00 00 00 | 60 20 00 00 84 03 00 00 |....H...|` ......|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 84 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |..4...V.|S._.V.E.|
|00000c70| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00000c80| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00000c90| 00 00 05 00 cf 00 de 07 | 00 00 05 00 cf 00 de 07 |........|........|
|00000ca0| 3f 00 00 00 00 00 00 00 | 04 00 04 00 01 00 00 00 |?.......|........|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 e4 02 00 00 |........|........|
|00000cc0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|00000cd0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|00000ce0| c0 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |......0.|4.0.9.0.|
|00000cf0| 34 00 42 00 30 00 00 00 | 4c 00 16 00 01 00 43 00 |4.B.0...|L.....C.|
|00000d00| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00000d10| 6d 00 65 00 00 00 00 00 | 4d 00 69 00 63 00 72 00 |m.e.....|M.i.c.r.|
|00000d20| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 43 00 6f 00 |o.s.o.f.|t. .C.o.|
|00000d30| 72 00 70 00 6f 00 72 00 | 61 00 74 00 69 00 6f 00 |r.p.o.r.|a.t.i.o.|
|00000d40| 6e 00 00 00 74 00 26 00 | 01 00 46 00 69 00 6c 00 |n...t.&.|..F.i.l.|
|00000d50| 65 00 44 00 65 00 73 00 | 63 00 72 00 69 00 70 00 |e.D.e.s.|c.r.i.p.|
|00000d60| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 52 00 75 00 |t.i.o.n.|....R.u.|
|00000d70| 6e 00 20 00 49 00 6e 00 | 74 00 65 00 72 00 6e 00 |n. .I.n.|t.e.r.n.|
|00000d80| 65 00 74 00 20 00 53 00 | 65 00 72 00 76 00 69 00 |e.t. .S.|e.r.v.i.|
|00000d90| 63 00 65 00 20 00 50 00 | 72 00 6f 00 76 00 69 00 |c.e. .P.|r.o.v.i.|
|00000da0| 64 00 65 00 72 00 20 00 | 50 00 72 00 6f 00 67 00 |d.e.r. .|P.r.o.g.|
|00000db0| 72 00 61 00 6d 00 00 00 | 3c 00 0e 00 01 00 46 00 |r.a.m...|<.....F.|
|00000dc0| 69 00 6c 00 65 00 56 00 | 65 00 72 00 73 00 69 00 |i.l.e.V.|e.r.s.i.|
|00000dd0| 6f 00 6e 00 00 00 00 00 | 35 00 2e 00 30 00 30 00 |o.n.....|5...0.0.|
|00000de0| 2e 00 32 00 30 00 31 00 | 34 00 2e 00 32 00 30 00 |..2.0.1.|4...2.0.|
|00000df0| 37 00 00 00 32 00 09 00 | 01 00 49 00 6e 00 74 00 |7...2...|..I.n.t.|
|00000e00| 65 00 72 00 6e 00 61 00 | 6c 00 4e 00 61 00 6d 00 |e.r.n.a.|l.N.a.m.|
|00000e10| 65 00 00 00 52 00 55 00 | 4e 00 49 00 53 00 50 00 |e...R.U.|N.I.S.P.|
|00000e20| 33 00 32 00 00 00 00 00 | 74 00 28 00 01 00 4c 00 |3.2.....|t.(...L.|
|00000e30| 65 00 67 00 61 00 6c 00 | 43 00 6f 00 70 00 79 00 |e.g.a.l.|C.o.p.y.|
|00000e40| 72 00 69 00 67 00 68 00 | 74 00 00 00 43 00 6f 00 |r.i.g.h.|t...C.o.|
|00000e50| 70 00 79 00 72 00 69 00 | 67 00 68 00 74 00 20 00 |p.y.r.i.|g.h.t. .|
|00000e60| 28 00 43 00 29 00 20 00 | 4d 00 69 00 63 00 72 00 |(.C.). .|M.i.c.r.|
|00000e70| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 43 00 6f 00 |o.s.o.f.|t. .C.o.|
|00000e80| 72 00 70 00 2e 00 20 00 | 31 00 39 00 38 00 31 00 |r.p... .|1.9.8.1.|
|00000e90| 2d 00 31 00 39 00 39 00 | 39 00 00 00 42 00 0d 00 |-.1.9.9.|9...B...|
|00000ea0| 01 00 4f 00 72 00 69 00 | 67 00 69 00 6e 00 61 00 |..O.r.i.|g.i.n.a.|
|00000eb0| 6c 00 46 00 69 00 6c 00 | 65 00 6e 00 61 00 6d 00 |l.F.i.l.|e.n.a.m.|
|00000ec0| 65 00 00 00 52 00 55 00 | 4e 00 49 00 53 00 50 00 |e...R.U.|N.I.S.P.|
|00000ed0| 33 00 32 00 2e 00 45 00 | 58 00 45 00 00 00 00 00 |3.2...E.|X.E.....|
|00000ee0| 7e 00 2f 00 01 00 50 00 | 72 00 6f 00 64 00 75 00 |~./...P.|r.o.d.u.|
|00000ef0| 63 00 74 00 4e 00 61 00 | 6d 00 65 00 00 00 00 00 |c.t.N.a.|m.e.....|
|00000f00| 4d 00 69 00 63 00 72 00 | 6f 00 73 00 6f 00 66 00 |M.i.c.r.|o.s.o.f.|
|00000f10| 74 00 28 00 52 00 29 00 | 20 00 57 00 69 00 6e 00 |t.(.R.).| .W.i.n.|
|00000f20| 64 00 6f 00 77 00 73 00 | 20 00 28 00 52 00 29 00 |d.o.w.s.| .(.R.).|
|00000f30| 20 00 32 00 30 00 30 00 | 30 00 20 00 4f 00 70 00 | .2.0.0.|0. .O.p.|
|00000f40| 65 00 72 00 61 00 74 00 | 69 00 6e 00 67 00 20 00 |e.r.a.t.|i.n.g. .|
|00000f50| 53 00 79 00 73 00 74 00 | 65 00 6d 00 00 00 00 00 |S.y.s.t.|e.m.....|
|00000f60| 40 00 0e 00 01 00 50 00 | 72 00 6f 00 64 00 75 00 |@.....P.|r.o.d.u.|
|00000f70| 63 00 74 00 56 00 65 00 | 72 00 73 00 69 00 6f 00 |c.t.V.e.|r.s.i.o.|
|00000f80| 6e 00 00 00 35 00 2e 00 | 30 00 30 00 2e 00 32 00 |n...5...|0.0...2.|
|00000f90| 30 00 31 00 34 00 2e 00 | 32 00 30 00 37 00 00 00 |0.1.4...|2.0.7...|
|00000fa0| 44 00 00 00 01 00 56 00 | 61 00 72 00 46 00 69 00 |D.....V.|a.r.F.i.|
|00000fb0| 6c 00 65 00 49 00 6e 00 | 66 00 6f 00 00 00 00 00 |l.e.I.n.|f.o.....|
|00000fc0| 24 00 04 00 00 00 54 00 | 72 00 61 00 6e 00 73 00 |$.....T.|r.a.n.s.|
|00000fd0| 6c 00 61 00 74 00 69 00 | 6f 00 6e 00 00 00 00 00 |l.a.t.i.|o.n.....|
|00000fe0| 09 04 b0 04 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 01 00 00 00 10 01 00 00 | 00 00 00 00 65 78 65 5c |........|....exe\|
|00001010| 72 75 6e 69 73 70 33 32 | 2e 64 62 67 00 2e 65 78 |runisp32|.dbg..ex|
|00001020| 65 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |e.......|........|
|00001030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001110| 52 11 00 00 61 00 00 00 | 00 00 00 00 01 00 00 03 |R...a...|........|
|00001120| b3 11 00 00 4c 00 00 00 | 10 00 00 00 04 00 06 d0 |....L...|........|
|00001130| ff 11 00 00 33 01 00 00 | cf 00 00 00 04 00 0f d3 |....3...|........|
|00001140| 32 13 00 00 7d 00 00 00 | 12 00 00 00 00 00 07 d1 |2...}...|........|
+--------+-------------------------+-------------------------+--------+--------+