| / PC World 2002 October
/ PCWorld_2002-10_cd.bin / Software / Topware / pkzip50 / pkzw500.exe / pkzs / instmsia.exe / msiinst.exe
| < prev | next > |
| MS-DOS/Windows or OS/2 Executable | 1999-12-02 | 6.3 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386 (stripped to external PDB), 3 sections | default | |
| 99% | file | data | default | |
| 27% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 20% | TrID | Win16 NE executable (generic) | default | |
| 18% | TrID | Win32 Executable (generic) | default | |
| 8% | TrID | Windows Icons Library (generic) | default (weak) | |
| 8% | TrID | OS/2 Executable (generic) | default | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 b0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 65 55 21 db 21 34 4f 88 | 21 34 4f 88 21 34 4f 88 |eU!.!4O.|!4O.!4O.|
|00000090| 21 34 4f 88 11 34 4f 88 | 52 69 63 68 21 34 4f 88 |!4O..4O.|Rich!4O.|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 50 45 00 00 4c 01 03 00 | d4 33 3c 38 00 00 00 00 |PE..L...|.3<8....|
|000000c0| 7d 00 00 00 e0 00 07 03 | 0b 01 05 0c 00 0a 00 00 |}.......|........|
|000000d0| 00 0c 00 00 00 00 00 00 | 00 10 00 00 00 10 00 00 |........|........|
|000000e0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000f0| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000100| 00 40 00 00 00 04 00 00 | 71 1d 00 00 02 00 00 00 |.@......|q.......|
|00000110| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000120| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 28 25 00 00 64 00 00 00 | 00 00 00 00 00 00 00 00 |(%..d...|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | b0 20 00 00 1c 00 00 00 |........|. ......|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 20 00 00 a4 00 00 00 |........|. ......|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001b0| de 09 00 00 00 10 00 00 | 00 0a 00 00 00 04 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001d0| 2e 72 64 61 74 61 00 00 | ee 08 00 00 00 20 00 00 |.rdata..|..... ..|
|000001e0| 00 0a 00 00 00 0e 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 40 00 00 40 | 2e 64 61 74 61 00 00 00 |....@..@|.data...|
|00000200| 04 00 00 00 00 30 00 00 | 00 00 00 00 00 00 00 00 |.....0..|........|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 81 ec 10 0d 00 00 53 8b | 1d 54 20 40 00 55 56 57 |......S.|.T @.UVW|
|00000410| 68 d4 23 40 00 ff d3 8d | 44 24 40 c7 44 24 40 94 |h.#@....|D$@.D$@.|
|00000420| 00 00 00 50 ff 15 3c 20 | 40 00 8b 44 24 50 be 01 |...P..< |@..D$P..|
|00000430| 00 00 00 3b c6 75 06 89 | 35 00 30 40 00 a1 00 30 |...;.u..|5.0@...0|
|00000440| 40 00 85 c0 74 07 68 c4 | 23 40 00 eb 05 68 b0 23 |@...t.h.|#@...h.#|
|00000450| 40 00 ff d3 8b 0d 00 30 | 40 00 33 c0 85 c9 89 74 |@......0|@.3....t|
|00000460| 24 14 75 23 83 7c 24 44 | 04 73 09 68 38 23 40 00 |$.u#.|$D|.s.h8#@.|
|00000470| ff d3 8b c6 8b 0d 00 30 | 40 00 85 c9 75 09 68 e4 |.......0|@...u.h.|
|00000480| 22 40 00 ff d3 8b c6 85 | c0 74 44 6a 00 8d 4c 24 |"@......|.tDj..L$|
|00000490| 1c 6a 00 51 6a 00 68 fa | 01 04 80 6a 00 68 00 11 |.j.Qj.h.|...j.h..|
|000004a0| 00 00 ff 15 5c 20 40 00 | 8b 54 24 18 6a 00 6a 00 |....\ @.|.T$.j.j.|
|000004b0| 52 6a 00 ff 15 90 20 40 | 00 8b 44 24 18 50 ff 15 |Rj.... @|..D$.P..|
|000004c0| 60 20 40 00 8b 4c 24 14 | 51 ff 15 58 20 40 00 ff |` @..L$.|Q..X @..|
|000004d0| 15 68 20 40 00 8a 15 e0 | 22 40 00 8b e8 b9 ff 00 |.h @....|"@......|
|000004e0| 00 00 33 c0 8d bc 24 19 | 07 00 00 88 94 24 18 07 |..3...$.|.....$..|
|000004f0| 00 00 f3 ab 66 ab aa 8d | 84 24 d8 01 00 00 50 68 |....f...|.$....Ph|
|00000500| d4 22 40 00 ff 15 6c 20 | 40 00 8b f0 83 fe ff 75 |."@...l |@......u|
|00000510| 0b 8b 4c 24 14 51 ff 15 | 58 20 40 00 56 ff 15 64 |..L$.Q..|X @.V..d|
|00000520| 20 40 00 8d 94 24 04 02 | 00 00 52 ff d3 8d 84 24 | @...$..|..R....$|
|00000530| 18 0b 00 00 68 04 01 00 | 00 50 8d 8c 24 0c 02 00 |....h...|.P..$...|
|00000540| 00 6a ff 51 6a 00 6a 00 | c7 44 24 28 00 00 00 00 |.j.Qj.j.|.D$(....|
|00000550| ff 15 74 20 40 00 8d 54 | 24 10 8d 84 24 18 0b 00 |..t @..T|$...$...|
|00000560| 00 52 6a 00 6a 00 6a 10 | 6a 00 50 ff 15 9c 20 40 |.Rj.j.j.|j.P... @|
|00000570| 00 85 c0 0f 85 da 00 00 | 00 8b 3d 78 20 40 00 ff |........|..=x @..|
|00000580| d7 8b f0 66 81 fe 04 10 | 75 05 be 04 08 00 00 8b |...f....|u.......|
|00000590| 4c 24 10 56 51 e8 16 03 | 00 00 83 c4 08 85 c0 0f |L$.VQ...|........|
|000005a0| 85 84 00 00 00 ff d7 8b | 54 24 10 8b f0 56 52 e8 |........|T$...VR.|
|000005b0| fc 02 00 00 83 c4 08 85 | c0 75 6e ff 15 70 20 40 |........|.un..p @|
|000005c0| 00 8b f0 8b 44 24 10 56 | 50 e8 e2 02 00 00 83 c4 |....D$.V|P.......|
|000005d0| 08 85 c0 75 54 8b 4c 24 | 10 be 09 00 00 00 56 51 |...uT.L$|......VQ|
|000005e0| e8 cb 02 00 00 83 c4 08 | 85 c0 75 3d 8b 54 24 10 |........|..u=.T$.|
|000005f0| 33 f6 56 52 e8 b7 02 00 | 00 83 c4 08 85 c0 75 29 |3.VR....|......u)|
|00000600| 68 00 04 00 00 8d 84 24 | 1c 07 00 00 55 50 e8 cd |h......$|....UP..|
|00000610| 06 00 00 83 c4 0c 68 a8 | 22 40 00 ff d3 8b 44 24 |......h.|"@....D$|
|00000620| 10 50 8b 10 ff 52 08 eb | 35 81 e6 ff ff 00 00 8d |.P...R..|5.......|
|00000630| 8c 24 18 07 00 00 56 55 | 68 90 22 40 00 51 ff 15 |.$....VU|h."@.Q..|
|00000640| 8c 20 40 00 8b 44 24 20 | 83 c4 10 8b 10 50 ff 52 |. @..D$ |.....P.R|
|00000650| 08 eb 0b 8b 44 24 14 50 | ff 15 58 20 40 00 bd 01 |....D$.P|..X @...|
|00000660| 00 00 00 e8 e8 02 00 00 | 25 ff 00 00 00 8b d8 a1 |........|%.......|
|00000670| 00 30 40 00 85 c0 0f 85 | 4d 01 00 00 85 db 0f 85 |.0@.....|M.......|
|00000680| 45 01 00 00 8d 4c 24 20 | c7 44 24 18 00 04 00 00 |E....L$ |.D$.....|
|00000690| 51 55 53 68 64 22 40 00 | 68 02 00 00 80 ff 15 14 |QUShd"@.|h.......|
|000006a0| 20 40 00 85 c0 0f 85 13 | 01 00 00 8d 54 24 18 8d | @......|....T$..|
|000006b0| 84 24 18 03 00 00 52 8b | 54 24 24 8d 4c 24 20 50 |.$....R.|T$$.L$ P|
|000006c0| 51 53 68 58 22 40 00 52 | ff 15 18 20 40 00 85 c0 |QShX"@.R|... @...|
|000006d0| 0f 85 f3 00 00 00 8b 44 | 24 1c 3b c5 74 09 83 f8 |.......D|$.;.t...|
|000006e0| 02 0f 85 e2 00 00 00 8d | 84 24 18 03 00 00 50 ff |........|.$....P.|
|000006f0| 15 50 20 40 00 8a 8c 04 | 18 03 00 00 8d 84 04 18 |.P @....|........|
|00000700| 03 00 00 80 f9 20 74 2a | 8b 35 94 20 40 00 8d 8c |..... t*|.5. @...|
|00000710| 24 18 03 00 00 3b c1 74 | 10 8d 94 24 18 03 00 00 |$....;.t|...$....|
|00000720| 50 52 ff d6 80 38 20 75 | e5 80 38 20 0f 85 97 00 |PR...8 u|..8 ....|
|00000730| 00 00 8a 15 e0 22 40 00 | 8d 8c 24 18 03 00 00 2b |....."@.|..$....+|
|00000740| c1 b9 40 00 00 00 8b f0 | 33 c0 8d bc 24 d5 00 00 |..@.....|3...$...|
|00000750| 00 88 94 24 d4 00 00 00 | f3 ab 66 ab aa 8d 84 24 |...$....|..f....$|
|00000760| 18 03 00 00 56 8d 8c 24 | d8 00 00 00 50 51 e8 6d |....V..$|....PQ.m|
|00000770| 05 00 00 83 c4 0c 8d 94 | 24 d4 00 00 00 c6 84 34 |........|$......4|
|00000780| d4 00 00 00 00 52 e8 15 | 04 00 00 83 c4 04 85 c0 |.....R..|........|
|00000790| 74 37 68 34 22 40 00 ff | 15 54 20 40 00 8d 44 24 |t7h4"@..|.T @..D$|
|000007a0| 14 8d 8c 24 18 07 00 00 | 50 8d 94 24 d8 00 00 00 |...$....|P..$....|
|000007b0| 51 52 33 ed e8 c7 02 00 | 00 83 c4 0c eb 0b 68 f8 |QR3.....|......h.|
|000007c0| 21 40 00 ff 15 54 20 40 | 00 85 ed 0f 84 b4 00 00 |!@...T @|........|
|000007d0| 00 85 db 74 2b a1 00 30 | 40 00 85 c0 75 22 68 d4 |...t+..0|@...u"h.|
|000007e0| 21 40 00 ff 15 54 20 40 | 00 8d 44 24 1c 50 68 50 |!@...T @|..D$.PhP|
|000007f0| 21 40 00 68 40 21 40 00 | e8 83 02 00 00 83 c4 0c |!@.h@!@.|........|
|00000800| 68 a0 21 40 00 ff 15 54 | 20 40 00 8d 4c 24 14 8d |h.!@...T| @..L$..|
|00000810| 94 24 18 07 00 00 51 52 | 68 40 21 40 00 e8 5e 02 |.$....QR|h@!@..^.|
|00000820| 00 00 83 c4 0c 85 db 74 | 5c a1 00 30 40 00 85 c0 |.......t|\..0@...|
|00000830| 75 53 68 3f 00 0f 00 68 | 90 21 40 00 6a 00 ff 15 |uSh?...h|.!@.j...|
|00000840| 28 20 40 00 8b f8 85 ff | 74 3b 6a 24 68 68 21 40 |( @.....|t;j$hh!@|
|00000850| 00 57 ff 15 20 20 40 00 | 57 8b 3d 24 20 40 00 8b |.W.. @.|W.=$ @..|
|00000860| f0 ff d7 85 f6 74 1e 8d | 44 24 24 50 6a 01 56 ff |.....t..|D$$Pj.V.|
|00000870| 15 2c 20 40 00 6a 04 6a | 01 56 e8 91 03 00 00 83 |., @.j.j|.V......|
|00000880| c4 0c 56 ff d7 68 74 21 | 40 00 ff 15 54 20 40 00 |..V..ht!|@...T @.|
|00000890| 8b 4c 24 14 51 ff 15 58 | 20 40 00 5f 5e 5d 5b 81 |.L$.Q..X| @._^][.|
|000008a0| c4 10 0d 00 00 c3 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000008b0| 81 ec 10 03 00 00 8b 84 | 24 18 03 00 00 8d 4c 24 |........|$.....L$|
|000008c0| 04 25 ff ff 00 00 c7 44 | 24 00 00 00 00 00 50 68 |.%.....D|$.....Ph|
|000008d0| ec 23 40 00 51 ff 15 8c | 20 40 00 83 c4 0c 8d 94 |.#@.Q...| @......|
|000008e0| 24 08 01 00 00 8d 44 24 | 04 68 04 01 00 00 52 6a |$.....D$|.h....Rj|
|000008f0| ff 50 6a 00 6a 00 ff 15 | 74 20 40 00 8b 84 24 14 |.Pj.j...|t @...$.|
|00000900| 03 00 00 8d 54 24 00 52 | 6a 00 8b 08 6a 00 6a 10 |....T$.R|j...j.j.|
|00000910| 8d 94 24 18 01 00 00 6a | 00 52 50 ff 51 18 85 c0 |..$....j|.RP.Q...|
|00000920| 75 21 8d 44 24 04 50 ff | 15 54 20 40 00 8b 44 24 |u!.D$.P.|.T @..D$|
|00000930| 00 50 8b 08 ff 51 08 b8 | 01 00 00 00 81 c4 10 03 |.P...Q..|........|
|00000940| 00 00 c3 33 c0 81 c4 10 | 03 00 00 c3 90 90 90 90 |...3....|........|
|00000950| a1 00 30 40 00 81 ec 14 | 04 00 00 85 c0 53 55 56 |..0@....|.....SUV|
|00000960| 57 74 0d b0 01 5f 5e 5d | 5b 81 c4 14 04 00 00 c3 |Wt..._^]|[.......|
|00000970| 8d 44 24 1c c6 44 24 10 | 00 50 68 08 00 02 00 c6 |.D$..D$.|.Ph.....|
|00000980| 44 24 19 00 c6 44 24 1a | 00 c6 44 24 1b 00 c6 44 |D$...D$.|..D$...D|
|00000990| 24 1c 00 c6 44 24 1d 05 | ff 15 40 20 40 00 50 ff |$...D$..|..@ @.P.|
|000009a0| 15 04 20 40 00 85 c0 75 | 0d 32 c0 5f 5e 5d 5b 81 |.. @...u|.2._^][.|
|000009b0| c4 14 04 00 00 c3 8b 44 | 24 1c 8d 4c 24 20 51 8d |.......D|$..L$ Q.|
|000009c0| 54 24 28 68 00 04 00 00 | 52 6a 02 50 ff 15 10 20 |T$(h....|Rj.P... |
|000009d0| 40 00 8b 4c 24 1c 8b d8 | 4b 51 f7 db 1b db 43 ff |@..L$...|KQ....C.|
|000009e0| 15 44 20 40 00 84 db 75 | 0d 32 c0 5f 5e 5d 5b 81 |.D @...u|.2._^][.|
|000009f0| c4 14 04 00 00 c3 8d 54 | 24 18 8d 44 24 10 52 6a |.......T|$..D$.Rj|
|00000a00| 00 6a 00 6a 00 6a 00 6a | 00 6a 00 68 20 02 00 00 |.j.j.j.j|.j.h ...|
|00000a10| 6a 20 6a 02 50 ff 15 08 | 20 40 00 85 c0 75 0d 32 |j j.P...| @...u.2|
|00000a20| c0 5f 5e 5d 5b 81 c4 14 | 04 00 00 c3 8b 44 24 24 |._^][...|.....D$$|
|00000a30| 32 db 33 f6 85 c0 76 28 | 8b 2d 0c 20 40 00 8d 7c |2.3...v(|.-. @..||
|00000a40| 24 28 8b 0f 8b 54 24 18 | 51 52 ff d5 85 c0 75 0e |$(...T$.|QR....u.|
|00000a50| 8b 44 24 24 46 83 c7 08 | 3b f0 72 e6 eb 02 b3 01 |.D$$F...|;.r.....|
|00000a60| 8b 44 24 18 50 ff 15 1c | 20 40 00 5f 5e 8a c3 5d |.D$.P...| @._^..]|
|00000a70| 5b 81 c4 14 04 00 00 c3 | 90 90 90 90 90 90 90 90 |[.......|........|
|00000a80| 81 ec 54 04 00 00 53 55 | 8b ac 24 60 04 00 00 56 |..T...SU|..$`...V|
|00000a90| 57 8b bc 24 6c 04 00 00 | 57 55 8d 44 24 6c 33 f6 |W..$l...|WU.D$l3.|
|00000aa0| 68 40 24 40 00 50 c7 44 | 24 30 44 00 00 00 89 74 |h@$@.P.D|$0D....t|
|00000ab0| 24 34 89 74 24 38 89 74 | 24 3c 89 74 24 40 89 74 |$4.t$8.t|$<.t$@.t|
|00000ac0| 24 44 89 74 24 48 89 74 | 24 4c 89 74 24 50 89 74 |$D.t$H.t|$L.t$P.t|
|00000ad0| 24 54 89 74 24 58 c7 44 | 24 5c 41 00 00 00 66 c7 |$T.t$X.D|$\A...f.|
|00000ae0| 44 24 60 01 00 66 89 74 | 24 62 89 74 24 64 ff 15 |D$`..f.t|$b.t$d..|
|00000af0| 8c 20 40 00 8b 1d 54 20 | 40 00 83 c4 10 8d 4c 24 |. @...T |@.....L$|
|00000b00| 64 51 ff d3 8d 54 24 10 | 8d 44 24 20 52 50 56 56 |dQ...T$.|.D$ RPVV|
|00000b10| 6a 20 56 56 56 57 55 ff | 15 7c 20 40 00 3b c6 75 |j VVVWU.|.| @.;.u|
|00000b20| 0d 33 c0 5f 5e 5d 5b 81 | c4 54 04 00 00 c3 8b 4c |.3._^][.|.T.....L|
|00000b30| 24 10 6a ff 51 ff 15 38 | 20 40 00 8b 54 24 14 8b |$.j.Q..8| @..T$..|
|00000b40| f8 52 ff 15 44 20 40 00 | 83 ff ff 75 09 68 1c 24 |.R..D @.|...u.h.$|
|00000b50| 40 00 ff d3 eb 25 8b ac | 24 70 04 00 00 8b 44 24 |@....%..|$p....D$|
|00000b60| 10 55 50 ff 15 34 20 40 | 00 68 f4 23 40 00 8b f8 |.UP..4 @|.h.#@...|
|00000b70| ff d3 3b fe 74 07 39 75 | 00 74 02 33 ff 8b 4c 24 |..;.t.9u|.t.3..L$|
|00000b80| 10 51 ff 15 44 20 40 00 | 8b c7 5f 5e 5d 5b 81 c4 |.Q..D @.|.._^][..|
|00000b90| 54 04 00 00 c3 90 90 90 | 90 90 90 90 90 90 90 90 |T.......|........|
|00000ba0| 53 56 be 01 00 00 00 57 | 8b 3d 48 20 40 00 56 ff |SV.....W|.=H @.V.|
|00000bb0| d7 8b d8 8b 44 24 10 50 | ff 15 80 20 40 00 a8 10 |....D$.P|... @...|
|00000bc0| 74 02 33 f6 53 ff d7 8b | c6 5f 5e 5b c3 90 90 90 |t.3.S...|._^[....|
|00000bd0| 83 ec 1c 8d 44 24 00 56 | 8b 74 24 24 50 6a 04 56 |....D$.V|.t$$Pj.V|
|00000be0| ff 15 2c 20 40 00 8d 4c | 24 04 51 56 ff 15 00 20 |.., @..L|$.QV... |
|00000bf0| 40 00 8b 4c 24 08 5e f7 | d8 1b c0 23 c1 83 c4 1c |@..L$.^.|...#....|
|00000c00| c3 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000c10| 8b 44 24 08 81 ec 00 04 | 00 00 53 55 56 57 33 ff |.D$.....|..SUVW3.|
|00000c20| 85 c0 74 3b 8b ac 24 14 | 04 00 00 8b 1d 84 20 40 |..t;..$.|...... @|
|00000c30| 00 55 e8 99 ff ff ff 8b | f0 83 c4 04 85 f6 74 37 |.U......|......t7|
|00000c40| 39 b4 24 1c 04 00 00 74 | 60 68 f4 01 00 00 ff d3 |9.$....t|`h......|
|00000c50| 47 83 ff 3c 7f 6b 39 b4 | 24 18 04 00 00 75 d2 68 |G..<.k9.|$....u.h|
|00000c60| 00 25 40 00 ff 15 54 20 | 40 00 b0 01 5f 5e 5d 5b |.%@...T |@..._^][|
|00000c70| 81 c4 00 04 00 00 c3 ff | 15 4c 20 40 00 50 8d 44 |........|.L @.P.D|
|00000c80| 24 14 68 bc 24 40 00 50 | ff 15 8c 20 40 00 83 c4 |$.h.$@.P|... @...|
|00000c90| 0c 8d 4c 24 10 51 ff 15 | 54 20 40 00 32 c0 5f 5e |..L$.Q..|T @.2._^|
|00000ca0| 5d 5b 81 c4 00 04 00 00 | c3 68 90 24 40 00 ff 15 |][......|.h.$@...|
|00000cb0| 54 20 40 00 32 c0 5f 5e | 5d 5b 81 c4 00 04 00 00 |T @.2._^|][......|
|00000cc0| c3 68 60 24 40 00 ff 15 | 54 20 40 00 5f 5e 5d 32 |.h`$@...|T @._^]2|
|00000cd0| c0 5b 81 c4 00 04 00 00 | c3 90 90 90 90 90 90 90 |.[......|........|
|00000ce0| 8b 4c 24 0c 57 85 c9 74 | 7a 56 53 8b d9 8b 74 24 |.L$.W..t|zVS...t$|
|00000cf0| 14 f7 c6 03 00 00 00 8b | 7c 24 10 75 07 c1 e9 02 |........||$.u....|
|00000d00| 75 6f eb 21 8a 06 46 88 | 07 47 49 74 25 84 c0 74 |uo.!..F.|.GIt%..t|
|00000d10| 29 f7 c6 03 00 00 00 75 | eb 8b d9 c1 e9 02 75 51 |)......u|......uQ|
|00000d20| 83 e3 03 74 0d 8a 06 46 | 88 07 47 84 c0 74 2f 4b |...t...F|..G..t/K|
|00000d30| 75 f3 8b 44 24 10 5b 5e | 5f c3 f7 c7 03 00 00 00 |u..D$.[^|_.......|
|00000d40| 74 12 88 07 47 49 0f 84 | 8a 00 00 00 f7 c7 03 00 |t...GI..|........|
|00000d50| 00 00 75 ee 8b d9 c1 e9 | 02 75 6c 88 07 47 4b 75 |..u.....|.ul..GKu|
|00000d60| fa 5b 5e 8b 44 24 08 5f | c3 89 17 83 c7 04 49 74 |.[^.D$._|......It|
|00000d70| af ba ff fe fe 7e 8b 06 | 03 d0 83 f0 ff 33 c2 8b |.....~..|.....3..|
|00000d80| 16 83 c6 04 a9 00 01 01 | 81 74 de 84 d2 74 2c 84 |........|.t...t,.|
|00000d90| f6 74 1e f7 c2 00 00 ff | 00 74 0c f7 c2 00 00 00 |.t......|.t......|
|00000da0| ff 75 c6 89 17 eb 18 81 | e2 ff ff 00 00 89 17 eb |.u......|........|
|00000db0| 0e 81 e2 ff 00 00 00 89 | 17 eb 04 33 d2 89 17 83 |........|...3....|
|00000dc0| c7 04 33 c0 49 74 0a 33 | c0 89 07 83 c7 04 49 75 |..3.It.3|......Iu|
|00000dd0| f8 83 e3 03 75 85 8b 44 | 24 10 5b 5e 5f c3 00 00 |....u..D|$.[^_...|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 7c 28 00 00 68 28 00 00 | 36 28 00 00 2a 28 00 00 ||(..h(..|6(..*(..|
|00000e10| 52 28 00 00 10 28 00 00 | fc 27 00 00 20 28 00 00 |R(...(..|.'.. (..|
|00000e20| da 27 00 00 c4 27 00 00 | ea 27 00 00 b2 27 00 00 |.'...'..|.'...'..|
|00000e30| 00 00 00 00 28 27 00 00 | 3e 27 00 00 e0 26 00 00 |....('..|>'...&..|
|00000e40| 14 27 00 00 06 27 00 00 | 7c 27 00 00 8c 27 00 00 |.'...'..||'...'..|
|00000e50| 30 26 00 00 f0 26 00 00 | b4 26 00 00 ce 26 00 00 |0&...&..|.&...&..|
|00000e60| c2 26 00 00 84 26 00 00 | a2 26 00 00 90 26 00 00 |.&...&..|.&...&..|
|00000e70| 3c 26 00 00 6e 26 00 00 | 56 26 00 00 54 27 00 00 |<&..n&..|V&..T'..|
|00000e80| 66 27 00 00 9c 27 00 00 | 00 00 00 00 ac 28 00 00 |f'...'..|.....(..|
|00000e90| b8 28 00 00 a0 28 00 00 | 00 00 00 00 d2 28 00 00 |.(...(..|.....(..|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 d4 33 3c 38 | 00 00 00 00 04 00 00 00 |.....3<8|........|
|00000ec0| 10 01 00 00 00 00 00 00 | 00 18 00 00 00 00 00 00 |........|........|
|00000ed0| d4 33 3c 38 00 00 00 00 | 04 00 00 00 10 01 00 00 |.3<8....|........|
|00000ee0| 00 00 00 00 a4 2e 00 00 | 00 00 00 00 d4 33 3c 38 |........|.....3<8|
|00000ef0| 00 00 00 00 03 00 00 00 | 80 00 00 00 00 00 00 00 |........|........|
|00000f00| b4 2f 00 00 00 00 00 00 | d4 33 3c 38 00 00 00 00 |./......|.3<8....|
|00000f10| 06 00 00 00 30 09 00 00 | 00 00 00 00 34 30 00 00 |....0...|....40..|
|00000f20| 00 00 00 00 d4 33 3c 38 | 00 00 00 00 02 00 00 00 |.....3<8|........|
|00000f30| 1c 00 00 00 00 00 00 00 | c0 f5 b6 ff 00 00 00 00 |........|........|
|00000f40| 4d 73 69 45 78 65 63 2e | 65 78 65 00 00 00 00 00 |MsiExec.|exe.....|
|00000f50| 4d 73 69 45 78 65 63 2e | 65 78 65 20 2f 72 65 67 |MsiExec.|exe /reg|
|00000f60| 73 65 72 76 65 72 00 00 | 4d 73 69 53 65 72 76 65 |server..|MsiServe|
|00000f70| 72 00 00 00 4d 53 49 49 | 4e 53 54 3a 20 46 69 6e |r...MSII|NST: Fin|
|00000f80| 69 73 68 65 64 20 69 6e | 73 74 61 6c 6c 2e 0a 00 |ished in|stall...|
|00000f90| 53 65 72 76 69 63 65 73 | 41 63 74 69 76 65 00 00 |Services|Active..|
|00000fa0| 4d 53 49 49 4e 53 54 3a | 20 52 75 6e 6e 69 6e 67 |MSIINST:| Running|
|00000fb0| 20 75 70 67 72 61 64 65 | 20 74 6f 20 4d 53 49 20 | upgrade| to MSI |
|00000fc0| 66 72 6f 6d 20 74 65 6d | 70 20 66 69 6c 65 73 2e |from tem|p files.|
|00000fd0| 0a 00 00 00 4d 53 49 49 | 4e 53 54 3a 20 41 64 6d |....MSII|NST: Adm|
|00000fe0| 69 6e 20 75 70 67 72 61 | 64 65 20 74 6f 20 4e 54 |in upgra|de to NT|
|00000ff0| 20 4d 53 49 2e 0a 00 00 | 4d 53 49 49 4e 53 54 3a | MSI....|MSIINST:|
|00001000| 20 43 6f 75 6c 64 20 6e | 6f 74 20 6f 70 65 6e 20 | Could n|ot open |
|00001010| 73 65 72 76 69 63 65 73 | 20 72 65 67 69 73 74 72 |services| registr|
|00001020| 61 74 69 6f 6e 20 66 6f | 72 20 72 65 61 64 2e 0a |ation fo|r read..|
|00001030| 00 00 00 00 4d 53 49 49 | 4e 53 54 3a 20 55 73 65 |....MSII|NST: Use|
|00001040| 72 20 75 70 67 72 61 64 | 65 20 74 6f 20 4e 54 20 |r upgrad|e to NT |
|00001050| 4d 53 49 2e 0a 00 00 00 | 49 6d 61 67 65 50 61 74 |MSI.....|ImagePat|
|00001060| 68 00 00 00 53 59 53 54 | 45 4d 5c 43 75 72 72 65 |h...SYST|EM\Curre|
|00001070| 6e 74 43 6f 6e 74 72 6f | 6c 53 65 74 5c 53 65 72 |ntContro|lSet\Ser|
|00001080| 76 69 63 65 73 5c 4d 53 | 49 53 65 72 76 65 72 00 |vices\MS|IServer.|
|00001090| 25 73 20 54 52 41 4e 53 | 46 4f 52 4d 53 3d 3a 25 |%s TRANS|FORMS=:%|
|000010a0| 64 2e 6d 73 74 00 00 00 | 4d 53 49 49 4e 53 54 3a |d.mst...|MSIINST:|
|000010b0| 20 4e 6f 20 6c 6f 63 61 | 6c 69 7a 65 64 20 74 72 | No loca|lized tr|
|000010c0| 61 6e 73 66 6f 72 6d 20 | 61 76 61 69 6c 61 62 6c |ansform |availabl|
|000010d0| 65 2e 0a 00 2a 6d 73 69 | 2e 6d 73 69 00 00 00 00 |e...*msi|.msi....|
|000010e0| 00 00 00 00 41 4e 53 49 | 20 76 65 72 73 69 6f 6e |....ANSI| version|
|000010f0| 20 6f 66 20 74 68 65 20 | 57 69 6e 64 6f 77 73 20 | of the |Windows |
|00001100| 69 6e 73 74 61 6c 6c 65 | 72 20 69 73 20 6e 6f 74 |installe|r is not|
|00001110| 20 73 75 70 70 6f 72 74 | 65 64 20 6f 6e 20 4d 69 | support|ed on Mi|
|00001120| 63 72 6f 73 6f 66 74 20 | 57 69 6e 64 6f 77 73 20 |crosoft |Windows |
|00001130| 4e 54 2e 0a 00 00 00 00 | 54 68 65 20 57 69 6e 64 |NT......|The Wind|
|00001140| 6f 77 73 20 69 6e 73 74 | 61 6c 6c 65 72 20 69 73 |ows inst|aller is|
|00001150| 20 6f 6e 6c 79 20 73 75 | 70 70 6f 72 74 65 64 20 | only su|pported |
|00001160| 6f 6e 20 4f 53 20 76 65 | 72 73 69 6f 6e 73 20 6f |on OS ve|rsions o|
|00001170| 66 20 4d 69 63 72 6f 73 | 6f 66 74 20 57 69 6e 64 |f Micros|oft Wind|
|00001180| 6f 77 73 20 39 78 2c 20 | 6f 72 20 4d 69 63 72 6f |ows 9x, |or Micro|
|00001190| 73 6f 66 74 20 57 69 6e | 64 6f 77 73 20 4e 54 20 |soft Win|dows NT |
|000011a0| 34 2e 30 20 6f 72 20 6c | 61 74 65 72 00 00 00 00 |4.0 or l|ater....|
|000011b0| 4d 53 49 49 4e 53 54 3a | 20 21 57 69 6e 39 58 0a |MSIINST:| !Win9X.|
|000011c0| 00 00 00 00 4d 53 49 49 | 4e 53 54 3a 20 57 69 6e |....MSII|NST: Win|
|000011d0| 39 58 0a 00 4d 53 49 49 | 4e 53 54 3a 20 41 4e 53 |9X..MSII|NST: ANS|
|000011e0| 49 20 42 55 49 4c 44 0a | 00 00 00 00 25 64 2e 6d |I BUILD.|....%d.m|
|000011f0| 73 74 00 00 4d 53 49 49 | 4e 53 54 3a 20 57 61 69 |st..MSII|NST: Wai|
|00001200| 74 20 73 75 63 63 65 65 | 64 65 64 20 66 6f 72 20 |t succee|ded for |
|00001210| 70 72 6f 63 65 73 73 2e | 0a 00 00 00 4d 53 49 49 |process.|....MSII|
|00001220| 4e 53 54 3a 20 57 61 69 | 74 20 66 61 69 6c 65 64 |NST: Wai|t failed|
|00001230| 20 66 6f 72 20 70 72 6f | 63 65 73 73 2e 0a 00 00 | for pro|cess....|
|00001240| 4d 53 49 49 4e 53 54 3a | 20 52 75 6e 50 72 6f 63 |MSIINST:| RunProc|
|00001250| 65 73 73 28 25 73 2c 20 | 25 73 29 0a 00 00 00 00 |ess(%s, |%s).....|
|00001260| 4d 53 49 49 4e 53 54 3a | 20 20 57 61 69 74 46 6f |MSIINST:| WaitFo|
|00001270| 72 53 65 72 76 69 63 65 | 20 72 65 74 72 79 20 6c |rService| retry l|
|00001280| 69 6d 69 74 20 65 78 63 | 65 65 64 65 64 2e 0a 00 |imit exc|eeded...|
|00001290| 4d 53 49 49 4e 53 54 3a | 20 20 57 61 69 74 46 6f |MSIINST:| WaitFo|
|000012a0| 72 53 65 72 76 69 63 65 | 20 69 6e 20 66 61 69 6c |rService| in fail|
|000012b0| 75 72 65 20 73 74 61 74 | 65 2e 0a 00 4d 53 49 49 |ure stat|e...MSII|
|000012c0| 4e 53 54 3a 20 20 57 61 | 69 74 46 6f 72 53 65 72 |NST: Wa|itForSer|
|000012d0| 76 69 63 65 20 63 6f 75 | 6c 64 20 6e 6f 74 20 47 |vice cou|ld not G|
|000012e0| 65 74 53 65 72 76 69 63 | 65 53 74 61 74 65 2e 20 |etServic|eState. |
|000012f0| 4c 61 73 74 45 72 72 6f | 72 3a 20 25 64 2e 0a 00 |LastErro|r: %d...|
|00001300| 4d 53 49 49 4e 53 54 3a | 20 20 57 61 69 74 46 6f |MSIINST:| WaitFo|
|00001310| 72 53 65 72 76 69 63 65 | 20 73 75 63 63 65 65 64 |rService| succeed|
|00001320| 65 64 2e 0a 00 00 00 00 | c0 25 00 00 00 00 00 00 |ed......|.%......|
|00001330| 00 00 00 00 a4 27 00 00 | 34 20 00 00 8c 25 00 00 |.....'..|4 ...%..|
|00001340| 00 00 00 00 00 00 00 00 | 92 28 00 00 00 20 00 00 |........|.(... ..|
|00001350| 18 26 00 00 00 00 00 00 | 00 00 00 00 c6 28 00 00 |.&......|.....(..|
|00001360| 8c 20 00 00 28 26 00 00 | 00 00 00 00 00 00 00 00 |. ..(&..|........|
|00001370| e4 28 00 00 9c 20 00 00 | 00 00 00 00 00 00 00 00 |.(... ..|........|
|00001380| 00 00 00 00 00 00 00 00 | 00 00 00 00 7c 28 00 00 |........|....|(..|
|00001390| 68 28 00 00 36 28 00 00 | 2a 28 00 00 52 28 00 00 |h(..6(..|*(..R(..|
|000013a0| 10 28 00 00 fc 27 00 00 | 20 28 00 00 da 27 00 00 |.(...'..| (...'..|
|000013b0| c4 27 00 00 ea 27 00 00 | b2 27 00 00 00 00 00 00 |.'...'..|.'......|
|000013c0| 28 27 00 00 3e 27 00 00 | e0 26 00 00 14 27 00 00 |('..>'..|.&...'..|
|000013d0| 06 27 00 00 7c 27 00 00 | 8c 27 00 00 30 26 00 00 |.'..|'..|.'..0&..|
|000013e0| f0 26 00 00 b4 26 00 00 | ce 26 00 00 c2 26 00 00 |.&...&..|.&...&..|
|000013f0| 84 26 00 00 a2 26 00 00 | 90 26 00 00 3c 26 00 00 |.&...&..|.&..<&..|
|00001400| 6e 26 00 00 56 26 00 00 | 54 27 00 00 66 27 00 00 |n&..V&..|T'..f'..|
|00001410| 9c 27 00 00 00 00 00 00 | ac 28 00 00 b8 28 00 00 |.'......|.(...(..|
|00001420| a0 28 00 00 00 00 00 00 | d2 28 00 00 00 00 00 00 |.(......|.(......|
|00001430| a1 02 6c 73 74 72 6c 65 | 6e 41 00 00 30 01 47 65 |..lstrle|nA..0.Ge|
|00001440| 74 53 79 73 74 65 6d 44 | 65 66 61 75 6c 74 4c 61 |tSystemD|efaultLa|
|00001450| 6e 67 49 44 00 00 4a 01 | 47 65 74 55 73 65 72 44 |ngID..J.|GetUserD|
|00001460| 65 66 61 75 6c 74 4c 61 | 6e 67 49 44 00 00 ab 01 |efaultLa|ngID....|
|00001470| 4d 75 6c 74 69 42 79 74 | 65 54 6f 57 69 64 65 43 |MultiByt|eToWideC|
|00001480| 68 61 72 00 7e 00 46 69 | 6e 64 43 6c 6f 73 65 00 |har.~.Fi|ndClose.|
|00001490| 82 00 46 69 6e 64 46 69 | 72 73 74 46 69 6c 65 41 |..FindFi|rstFileA|
|000014a0| 00 00 aa 00 47 65 74 43 | 6f 6d 6d 61 6e 64 4c 69 |....GetC|ommandLi|
|000014b0| 6e 65 41 00 6b 00 45 78 | 69 74 50 72 6f 63 65 73 |neA.k.Ex|itProces|
|000014c0| 73 00 9a 01 4c 6f 63 61 | 6c 46 72 65 65 00 93 00 |s...Loca|lFree...|
|000014d0| 46 6f 72 6d 61 74 4d 65 | 73 73 61 67 65 41 00 00 |FormatMe|ssageA..|
|000014e0| 4d 01 47 65 74 56 65 72 | 73 69 6f 6e 45 78 41 00 |M.GetVer|sionExA.|
|000014f0| ba 01 4f 75 74 70 75 74 | 44 65 62 75 67 53 74 72 |..Output|DebugStr|
|00001500| 69 6e 67 41 00 00 18 00 | 43 6c 6f 73 65 48 61 6e |ingA....|CloseHan|
|00001510| 64 6c 65 00 d3 00 47 65 | 74 43 75 72 72 65 6e 74 |dle...Ge|tCurrent|
|00001520| 50 72 6f 63 65 73 73 00 | e6 00 47 65 74 45 78 69 |Process.|..GetExi|
|00001530| 74 43 6f 64 65 50 72 6f | 63 65 73 73 00 00 6a 02 |tCodePro|cess..j.|
|00001540| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00001550| 65 63 74 00 3d 00 43 72 | 65 61 74 65 50 72 6f 63 |ect.=.Cr|eateProc|
|00001560| 65 73 73 41 00 00 e8 00 | 47 65 74 46 69 6c 65 41 |essA....|GetFileA|
|00001570| 74 74 72 69 62 75 74 65 | 73 41 00 00 13 02 53 65 |ttribute|sA....Se|
|00001580| 74 45 72 72 6f 72 4d 6f | 64 65 00 00 f4 00 47 65 |tErrorMo|de....Ge|
|00001590| 74 4c 61 73 74 45 72 72 | 6f 72 00 00 3f 02 53 6c |tLastErr|or..?.Sl|
|000015a0| 65 65 70 00 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |eep.KERN|EL32.dll|
|000015b0| 00 00 25 00 43 6f 6e 74 | 72 6f 6c 53 65 72 76 69 |..%.Cont|rolServi|
|000015c0| 63 65 00 00 24 00 43 6c | 6f 73 65 53 65 72 76 69 |ce..$.Cl|oseServi|
|000015d0| 63 65 48 61 6e 64 6c 65 | 00 00 07 01 4f 70 65 6e |ceHandle|....Open|
|000015e0| 53 65 72 76 69 63 65 41 | 00 00 05 01 4f 70 65 6e |ServiceA|....Open|
|000015f0| 53 43 4d 61 6e 61 67 65 | 72 41 00 00 36 01 52 65 |SCManage|rA..6.Re|
|00001600| 67 51 75 65 72 79 56 61 | 6c 75 65 45 78 41 00 00 |gQueryVa|lueExA..|
|00001610| 2e 01 52 65 67 4f 70 65 | 6e 4b 65 79 45 78 41 00 |..RegOpe|nKeyExA.|
|00001620| 6b 00 46 72 65 65 53 69 | 64 00 69 00 45 71 75 61 |k.FreeSi|d.i.Equa|
|00001630| 6c 53 69 64 00 00 0b 00 | 41 6c 6c 6f 63 61 74 65 |lSid....|Allocate|
|00001640| 41 6e 64 49 6e 69 74 69 | 61 6c 69 7a 65 53 69 64 |AndIniti|alizeSid|
|00001650| 00 00 9a 00 47 65 74 54 | 6f 6b 65 6e 49 6e 66 6f |....GetT|okenInfo|
|00001660| 72 6d 61 74 69 6f 6e 00 | 04 01 4f 70 65 6e 50 72 |rmation.|..OpenPr|
|00001670| 6f 63 65 73 73 54 6f 6b | 65 6e 00 00 13 01 51 75 |ocessTok|en....Qu|
|00001680| 65 72 79 53 65 72 76 69 | 63 65 53 74 61 74 75 73 |eryServi|ceStatus|
|00001690| 00 00 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 00 |..ADVAPI|32.dll..|
|000016a0| 24 00 43 68 61 72 50 72 | 65 76 41 00 64 02 77 73 |$.CharPr|evA.d.ws|
|000016b0| 70 72 69 6e 74 66 41 00 | 95 01 4d 65 73 73 61 67 |printfA.|..Messag|
|000016c0| 65 42 6f 78 41 00 55 53 | 45 52 33 32 2e 64 6c 6c |eBoxA.US|ER32.dll|
|000016d0| 00 00 ef 00 53 74 67 4f | 70 65 6e 53 74 6f 72 61 |....StgO|penStora|
|000016e0| 67 65 00 00 6f 6c 65 33 | 32 2e 64 6c 6c 00 00 00 |ge..ole3|2.dll...|
|000016f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001800| 01 00 00 00 10 01 00 00 | 00 00 00 00 6d 73 69 69 |........|....msii|
|00001810| 6e 73 74 2e 64 62 67 00 | 69 6c 64 5c 53 48 49 50 |nst.dbg.|ild\SHIP|
|00001820| 5c 4d 73 69 49 6e 73 74 | 2e 65 78 65 00 00 00 00 |\MsiInst|.exe....|
|00001830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+