/ PC World 2002 December (Special)
/ PCWorld_2002-12_Special_cd.bin / Special_komplet / special_komplet.exe / atm30.exe / setup.exe ![]() | < prev |
UPX Packed | 2001-08-02 | 3.0 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | UPX Packed (archive/upxPacked) | magic | Supported |
100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | magic | Unsupported |
1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386, UPX compressed, 3 sections | default | |
99% | file | data | default | |
34% | TrID | UPX compressed Win32 Executable | default | |
34% | TrID | Win32 EXE Yoda's Crypter | default | |
8% | TrID | Win32 Dynamic Link Library (generic) | default | |
6% | TrID | Win16 NE executable (generic) | default | |
5% | TrID | Win32 Executable (generic) | default | |
100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
100% | detectItEasy | Packer: UPX(0.89+)[modified] | default | |
100% | binwalkID | Microsoft executable, portable (PE) | default | |
100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 4b 3b 75 b0 0f 5a 1b e3 | 0f 5a 1b e3 0f 5a 1b e3 |K;u..Z..|.Z...Z..|
|00000090| 60 45 11 e3 04 5a 1b e3 | 8c 46 15 e3 0e 5a 1b e3 |`E...Z..|.F...Z..|
|000000a0| 60 45 1f e3 0d 5a 1b e3 | 0f 5a 1a e3 1a 5a 1b e3 |`E...Z..|.Z...Z..|
|000000b0| 6d 45 08 e3 08 5a 1b e3 | 09 79 11 e3 0e 5a 1b e3 |mE...Z..|.y...Z..|
|000000c0| 52 69 63 68 0f 5a 1b e3 | 00 00 00 00 00 00 00 00 |Rich.Z..|........|
|000000d0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 03 00 |........|PE..L...|
|000000e0| 82 64 69 3b 00 00 00 00 | 00 00 00 00 e0 00 0f 01 |.di;....|........|
|000000f0| 0b 01 06 00 00 10 00 00 | 00 10 00 00 00 40 00 00 |........|.....@..|
|00000100| 40 53 00 00 00 50 00 00 | 00 60 00 00 00 00 40 00 |@S...P..|.`....@.|
|00000110| 00 10 00 00 00 02 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000120| 04 00 00 00 00 00 00 00 | 00 70 00 00 00 10 00 00 |........|.p......|
|00000130| 00 00 00 00 02 00 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000140| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 60 00 00 0c 01 00 00 |........|.`......|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 55 50 58 30 00 00 00 00 | 00 40 00 00 00 10 00 00 |UPX0....|.@......|
|000001e0| 00 00 00 00 00 04 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 80 00 00 e0 | 55 50 58 31 00 00 00 00 |........|UPX1....|
|00000200| 00 10 00 00 00 50 00 00 | 00 06 00 00 00 04 00 00 |.....P..|........|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 e0 |........|....@...|
|00000220| 55 50 58 32 00 00 00 00 | 00 10 00 00 00 60 00 00 |UPX2....|.....`..|
|00000230| 00 02 00 00 00 0a 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 40 00 00 c0 | 00 00 00 00 00 00 00 00 |....@...|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 31 2e 32 30 00 |........|...1.20.|
|000003e0| 55 50 58 21 0c 09 02 08 | 29 38 cb 8d 1e 4e f3 7f |UPX!....|)8...N..|
|000003f0| 9a 32 00 00 36 03 00 00 | 00 40 00 00 26 00 00 3a |.2..6...|.@..&..:|
|00000400| ff 97 ff ff 8b 44 24 0c | 85 c0 74 65 56 68 48 30 |.....D$.|..teVhH0|
|00000410| 40 00 50 e8 00 82 8b f0 | 83 c4 08 85 f6 74 22 80 |@.P.....|.....t".|
|00000420| fd 3d dd 68 40 13 56 7c | 11 c0 75 10 25 cc d6 be |.=.h@.V||..u.%...|
|00000430| b9 11 28 6a 01 6a 00 01 | 3c 38 c1 76 37 df 07 ff |..(j.j..|<8.v7...|
|00000440| 15 4c 20 40 68 28 0e 68 | 10 13 84 75 ee 9b 54 33 |.L @h(.h|...u..T3|
|00000450| c0 5e c2 10 05 04 90 00 | f7 6f 36 f7 ff 25 10 1e |.^......|.o6..%..|
|00000460| 05 14 55 8b ec 6a ff 68 | 60 20 3b ff bd 99 db 12 |..U..j.h|` ;.....|
|00000470| 66 64 a1 6c 64 89 25 07 | 83 ec 68 53 56 dd 9b ed |fd.ld.%.|..hSV...|
|00000480| ff 57 89 65 e8 33 db 89 | 5d fc 6a 02 57 3c 59 83 |.W.e.3..|].j.W<Y.|
|00000490| 0d 60 66 ff bb 9b ed 6c | 06 64 14 38 8b 0d 5c 0c |.`f....l|.d.8..\.|
|000004a0| 89 08 fe 8e 8c 6c 0d 34 | 58 a1 30 0c 00 a3 68 e6 |.....l.4|X.0...h.|
|000004b0| de 7d e7 0d c0 02 07 39 | 1d 4c 0a 75 0c 68 08 6c |.}.....9|.L.u.h.l|
|000004c0| 4e 9f 7d ef ce 0c 18 01 | f2 68 0c be 08 27 01 ec |N.}.....|.h...'..|
|000004d0| a1 dd dc b7 bf 54 3f 45 | 94 8d 02 50 ff 35 50 0c |.....T?E|...P.5P.|
|000004e0| 09 9c 50 f9 be 5b b3 03 | 90 a0 11 15 28 b0 04 32 |..P..[..|....(..2|
|000004f0| 00 fe 7f 2f 0c 1b 24 a1 | 24 6e 30 89 75 8c 80 3e |.../..$.|$n0.u..>|
|00000500| 22 75 3a 46 40 be ed ef | 08 8a 06 3a c3 74 04 3c |"u:F@...|...:.t.<|
|00000510| 0d f2 12 04 6f 9a 6d 7b | 20 76 f2 d4 d0 4e a4 00 |....o.m{| v...N..|
|00000520| f6 45 d0 01 fd 3f 6f ff | 74 11 0f b7 45 d4 eb 0e |.E...?o.|t...E...|
|00000530| 2b 20 76 d8 eb f5 6a 0a | 58 50 56 53 53 ba ad 7d |+ v...j.|XPVSS..}|
|00000540| b8 23 04 20 85 40 fe f0 | 97 98 33 20 fc f7 17 fe |.#. .@..|..3 ....|
|00000550| 6b 45 ec 8b 91 09 89 4d | 88 50 51 84 e6 59 59 c3 |kE.....M|.PQ..YY.|
|00000560| 8b 63 23 6c 2f 2e ff 75 | 88 1f 18 63 1c 05 2c 6e |.c#l/..u|...c..,n|
|00000570| 84 6f 7b ae 1f 03 04 01 | 09 12 29 19 d9 dc 0b 9a |.o{.....|..).....|
|00000580| c3 c3 cc 00 25 40 44 1c | 00 41 99 00 ff 08 ca 80 |....%@D.|.A......|
|00000590| df ca 11 40 00 de 11 4f | 47 45 58 02 1b 49 7c f9 |...@...O|GEX..I|.|
|000005a0| ff ff 6e 73 74 61 6c 6c | 61 74 69 6f 6e 20 63 6f |..nstall|ation co|
|000005b0| 6d 70 6c 65 74 65 21 41 | 54 4d 20 f8 b3 86 83 65 |mplete!A|TM ....e|
|000005c0| 72 84 69 0b 00 2f 53 4d | 53 a8 08 69 78 93 20 9c |r.i../SM|S..ix. .|
|000005d0| 01 24 00 45 d8 10 79 8e | a2 02 8c 10 ff c8 ff 7f |.$.E..y.|........|
|000005e0| 01 47 65 74 53 74 61 72 | 74 75 70 49 6e 66 6f 41 |.GetStar|tupInfoA|
|000005f0| 4d 6f 64 75 6c 65 48 fb | 69 b6 ed 61 6e 64 05 41 |ModuleH.|i..and.A|
|00000600| 2b 99 0c 5f 5f 73 1c fe | 6e fb 6d 75 03 72 6d 61 |+..__s..|n.mu.rma|
|00000610| 74 68 05 72 11 73 74 72 | 69 63 6d 70 bf 7b 77 d7 |th.r.str|icmp.{w.|
|00000620| 09 08 74 6f 6b 11 65 78 | 69 74 06 58 63 70 74 46 |..tok.ex|it.XcptF|
|00000630| 69 db da 60 ee 6c 74 65 | 25 12 61 28 50 6e 46 cd |i..`.lte|%.a(PnF.|
|00000640| dd 6e e5 67 42 69 6e 76 | 67 73 0e 08 fb db af 6b |.n.gBinv|gs.....k|
|00000650| 1e 27 6d 22 64 6a 5f 74 | 5f 66 64 69 76 27 d8 b6 |.'m"dj_t|_fdiv'..|
|00000660| 05 ed 70 02 8b 6d 8e 65 | 0d 6f 9b 1b 36 66 0b 88 |..p..m.e|.o..6f..|
|00000670| 2c 70 11 74 79 70 b3 bd | db b1 65 74 63 65 6f 5f |,p.typ..|..etceo_|
|00000680| 68 b2 49 33 d3 6c df 36 | 37 6e 91 6f 6c 66 70 bf |h.I3.l.6|7n.olfp.|
|00000690| a4 4c a7 fb fe db 53 b4 | 6c 6c 45 78 65 63 75 74 |.L....S.|llExecut|
|000006a0| d7 b0 17 54 bb 9f 7b fb | 4d 65 73 73 61 93 42 6f |...T..{.|Messa.Bo|
|000006b0| 78 15 00 50 45 31 01 03 | ce 7f 08 db 00 82 87 3b |x..PE1..|.......;|
|000006c0| 35 e0 00 0f 01 0b 01 06 | 27 7b df 0b f6 00 8c 0b |5.......|'{......|
|000006d0| 0f 40 00 de b2 73 90 00 | 04 00 07 1a c0 06 f9 f0 |.@...s..|........|
|000006e0| 17 7a 02 00 10 07 b2 bc | 8c de 06 92 6c 20 64 81 |.z......|....l d.|
|000006f0| a4 1b 10 57 5c 0e 3b dd | 85 2e 17 78 74 a4 1c db |...W\.;.|...xt...|
|00000700| 10 b9 6d 7c ca 42 60 2e | 72 64 01 61 10 72 02 1d |..m|.B`.|rd.a.r..|
|00000710| b0 81 30 13 f2 40 2e 25 | 83 7d ef 26 cf 10 30 27 |..0..@.%|.}.&..0'|
|00000720| 30 00 f0 e5 37 c0 13 2c | 21 1e 31 00 00 00 00 00 |0...7..,|!.1.....|
|00000730| 00 00 00 00 48 ff 00 00 | 00 00 00 00 00 00 00 00 |....H...|........|
|00000740| 60 be 00 50 40 00 8d be | 00 c0 ff ff 57 83 cd ff |`..P@...|....W...|
|00000750| eb 10 90 90 90 90 90 90 | 8a 06 46 88 07 47 01 db |........|..F..G..|
|00000760| 75 07 8b 1e 83 ee fc 11 | db 72 ed b8 01 00 00 00 |u.......|.r......|
|00000770| 01 db 75 07 8b 1e 83 ee | fc 11 db 11 c0 01 db 73 |..u.....|.......s|
|00000780| ef 75 09 8b 1e 83 ee fc | 11 db 73 e4 31 c9 83 e8 |.u......|..s.1...|
|00000790| 03 72 0d c1 e0 08 8a 06 | 46 83 f0 ff 74 74 89 c5 |.r......|F...tt..|
|000007a0| 01 db 75 07 8b 1e 83 ee | fc 11 db 11 c9 01 db 75 |..u.....|.......u|
|000007b0| 07 8b 1e 83 ee fc 11 db | 11 c9 75 20 41 01 db 75 |........|..u A..u|
|000007c0| 07 8b 1e 83 ee fc 11 db | 11 c9 01 db 73 ef 75 09 |........|....s.u.|
|000007d0| 8b 1e 83 ee fc 11 db 73 | e4 83 c1 02 81 fd 00 f3 |.......s|........|
|000007e0| ff ff 83 d1 01 8d 14 2f | 83 fd fc 76 0f 8a 02 42 |......./|...v...B|
|000007f0| 88 07 47 49 75 f7 e9 63 | ff ff ff 90 8b 02 83 c2 |..GIu..c|........|
|00000800| 04 89 07 83 c7 04 83 e9 | 04 77 f1 01 cf e9 4c ff |........|.w....L.|
|00000810| ff ff 5e 89 f7 b9 09 00 | 00 00 8a 07 47 2c e8 3c |..^.....|....G,.<|
|00000820| 01 77 f7 80 3f 00 75 f2 | 8b 07 8a 5f 04 66 c1 e8 |.w..?.u.|..._.f..|
|00000830| 08 c1 c0 10 86 c4 29 f8 | 80 eb e8 01 f0 89 07 83 |......).|........|
|00000840| c7 05 89 d8 e2 d9 8d be | 00 30 00 00 8b 07 09 c0 |........|.0......|
|00000850| 74 3c 8b 5f 04 8d 84 30 | 00 50 00 00 01 f3 50 83 |t<._...0|.P....P.|
|00000860| c7 08 ff 96 64 50 00 00 | 95 8a 07 47 08 c0 74 dc |....dP..|...G..t.|
|00000870| 89 f9 57 48 f2 ae 55 ff | 96 68 50 00 00 09 c0 74 |..WH..U.|.hP....t|
|00000880| 07 89 03 83 c3 04 eb e1 | ff 96 6c 50 00 00 61 e9 |........|..lP..a.|
|00000890| f8 bb ff ff 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 00 00 00 00 00 00 00 00 | 00 00 00 00 8c 60 00 00 |........|.....`..|
|00000a10| 64 60 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |d`......|........|
|00000a20| 99 60 00 00 74 60 00 00 | 00 00 00 00 00 00 00 00 |.`..t`..|........|
|00000a30| 00 00 00 00 a4 60 00 00 | 7c 60 00 00 00 00 00 00 |.....`..||`......|
|00000a40| 00 00 00 00 00 00 00 00 | b0 60 00 00 84 60 00 00 |........|.`...`..|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 ba 60 00 00 | c8 60 00 00 d8 60 00 00 |.....`..|.`...`..|
|00000a70| 00 00 00 00 e6 60 00 00 | 00 00 00 00 ec 60 00 00 |.....`..|.....`..|
|00000a80| 00 00 00 00 fc 60 00 00 | 00 00 00 00 4b 45 52 4e |.....`..|....KERN|
|00000a90| 45 4c 33 32 2e 44 4c 4c | 00 4d 53 56 43 52 54 2e |EL32.DLL|.MSVCRT.|
|00000aa0| 64 6c 6c 00 53 48 45 4c | 4c 33 32 2e 64 6c 6c 00 |dll.SHEL|L32.dll.|
|00000ab0| 55 53 45 52 33 32 2e 64 | 6c 6c 00 00 4c 6f 61 64 |USER32.d|ll..Load|
|00000ac0| 4c 69 62 72 61 72 79 41 | 00 00 47 65 74 50 72 6f |LibraryA|..GetPro|
|00000ad0| 63 41 64 64 72 65 73 73 | 00 00 45 78 69 74 50 72 |cAddress|..ExitPr|
|00000ae0| 6f 63 65 73 73 00 00 00 | 65 78 69 74 00 00 53 68 |ocess...|exit..Sh|
|00000af0| 65 6c 6c 45 78 65 63 75 | 74 65 41 00 00 00 4d 65 |ellExecu|teA...Me|
|00000b00| 73 73 61 67 65 42 6f 78 | 41 00 00 00 00 00 00 00 |ssageBox|A.......|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+