| / PC World 2007 December
/ PCWorld_2007-12_cd.bin / audio-video / gom / GOMPLAYERENSETUP.exe / ShellRegister.exe
| < prev | next > |
| MS-DOS/Windows or OS/2 Executable | 2005-11-02 | 4.0 KB |
view JSON data
|
view as text
|
open on a Mac
|
open on a PC
| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386, 3 sections | default | |
| 99% | file | data | default | |
| 40% | TrID | Microsoft Visual C++ compiled executable (generic) | default | |
| 16% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 12% | TrID | Win16 NE executable (generic) | default | |
| 11% | TrID | Win32 Executable (generic) | default | |
| 5% | TrID | Windows Icons Library (generic) | default (weak) | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 8b 90 7f 5b cf f1 11 08 | cf f1 11 08 cf f1 11 08 |...[....|........|
|00000090| a0 ee 1b 08 c4 f1 11 08 | 4c ed 1f 08 ce f1 11 08 |........|L.......|
|000000a0| a0 ee 15 08 cd f1 11 08 | 4c f9 4c 08 c8 f1 11 08 |........|L.L.....|
|000000b0| cf f1 10 08 d7 f1 11 08 | f9 d7 1a 08 ce f1 11 08 |........|........|
|000000c0| 52 69 63 68 cf f1 11 08 | 00 00 00 00 00 00 00 00 |Rich....|........|
|000000d0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 03 00 |........|PE..L...|
|000000e0| 74 75 68 43 00 00 00 00 | 00 00 00 00 e0 00 0f 01 |tuhC....|........|
|000000f0| 0b 01 06 00 00 06 00 00 | 00 08 00 00 00 00 00 00 |........|........|
|00000100| 10 14 00 00 00 10 00 00 | 00 20 00 00 00 00 40 00 |........|. ....@.|
|00000110| 00 10 00 00 00 02 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000120| 04 00 00 00 00 00 00 00 | 00 40 00 00 00 04 00 00 |........|.@......|
|00000130| 00 00 00 00 02 00 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000140| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 74 20 00 00 64 00 00 00 |........|t ..d...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 20 00 00 68 00 00 00 | 00 00 00 00 00 00 00 00 |. ..h...|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 2e 74 65 78 74 00 00 00 | 9c 05 00 00 00 10 00 00 |.text...|........|
|000001e0| 00 06 00 00 00 04 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 20 00 00 60 | 2e 72 64 61 74 61 00 00 |.... ..`|.rdata..|
|00000200| c4 02 00 00 00 20 00 00 | 00 04 00 00 00 0a 00 00 |..... ..|........|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|00000220| 2e 64 61 74 61 00 00 00 | 94 02 00 00 00 30 00 00 |.data...|.....0..|
|00000230| 00 02 00 00 00 0e 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 40 00 00 c0 | 00 00 00 00 00 00 00 00 |....@...|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 51 56 8b 74 24 10 8d 44 | 24 04 57 8b 7c 24 10 50 |QV.t$..D|$.W.|$.P|
|00000410| 68 3f 00 0f 00 6a 00 56 | 57 c7 44 24 1c 00 00 00 |h?...j.V|W.D$....|
|00000420| 00 ff 15 04 20 40 00 85 | c0 74 11 8d 4c 24 08 51 |.... @..|.t..L$.Q|
|00000430| 56 57 ff 15 08 20 40 00 | 85 c0 75 29 8b 54 24 1c |VW... @.|..u).T$.|
|00000440| 83 c9 ff 8b fa 33 c0 f2 | ae f7 d1 49 51 52 8b 54 |.....3..|...IQR.T|
|00000450| 24 20 6a 01 50 8b 44 24 | 18 52 50 ff 15 0c 20 40 |$ j.P.D$|.RP... @|
|00000460| 00 85 c0 74 15 8b 44 24 | 08 85 c0 74 07 50 ff 15 |...t..D$|...t.P..|
|00000470| 00 20 40 00 5f 32 c0 5e | 59 c3 8b 44 24 08 85 c0 |. @._2.^|Y..D$...|
|00000480| 74 07 50 ff 15 00 20 40 | 00 5f b0 01 5e 59 c3 90 |t.P... @|._..^Y..|
|00000490| 81 ec 0c 03 00 00 8d 84 | 24 04 01 00 00 56 57 68 |........|$....VWh|
|000004a0| 04 01 00 00 50 6a 00 ff | 15 18 20 40 00 6a 00 8d |....Pj..|.. @.j..|
|000004b0| 8c 24 14 02 00 00 6a 00 | 8d 54 24 10 51 8d 84 24 |.$....j.|.T$.Q..$|
|000004c0| 18 01 00 00 52 50 ff 15 | 24 20 40 00 8d 7c 24 1c |....RP..|$ @..|$.|
|000004d0| 83 c9 ff 33 c0 83 c4 14 | f2 ae f7 d1 2b f9 8b d1 |...3....|....+...|
|000004e0| 8b f7 bf 70 31 40 00 c1 | e9 02 f3 a5 8b ca 83 e1 |...p1@..|........|
|000004f0| 03 f3 a4 8d bc 24 10 02 | 00 00 83 c9 ff f2 ae f7 |.....$..|........|
|00000500| d1 2b f9 8b f7 8b d1 bf | 70 31 40 00 83 c9 ff f2 |.+......|p1@.....|
|00000510| ae 8b ca 4f c1 e9 02 f3 | a5 8b ca b8 70 31 40 00 |...O....|....p1@.|
|00000520| 83 e1 03 f3 a4 5f 5e 81 | c4 0c 03 00 00 c3 90 90 |....._^.|........|
|00000530| 81 ec ec 04 00 00 53 56 | 57 e8 52 ff ff ff 8b f8 |......SV|W.R.....|
|00000540| 83 c9 ff 33 c0 8d 54 24 | 0c f2 ae f7 d1 2b f9 68 |...3..T$|.....+.h|
|00000550| 74 32 40 00 8b c1 8b f7 | 8b fa 8d 54 24 10 c1 e9 |t2@.....|...T$...|
|00000560| 02 f3 a5 8b c8 33 c0 83 | e1 03 68 5c 31 40 00 f3 |.....3..|..h\1@..|
|00000570| a4 bf 54 31 40 00 83 c9 | ff f2 ae f7 d1 2b f9 68 |..T1@...|.....+.h|
|00000580| 4c 31 40 00 8b f7 8b d9 | 8b fa 83 c9 ff f2 ae 8b |L1@.....|........|
|00000590| cb 4f c1 e9 02 f3 a5 8b | cb 68 00 00 00 80 83 e1 |.O......|.h......|
|000005a0| 03 f3 a4 e8 58 fe ff ff | 8b 35 60 20 40 00 83 c4 |....X...|.5` @...|
|000005b0| 10 8d 44 24 0c 8d 8c 24 | 10 01 00 00 50 68 44 31 |..D$...$|....PhD1|
|000005c0| 40 00 51 ff d6 8d 94 24 | 1c 01 00 00 52 68 74 32 |@.Q....$|....Rht2|
|000005d0| 40 00 68 30 31 40 00 68 | 00 00 00 80 e8 1f fe ff |@.h01@.h|........|
|000005e0| ff 68 20 31 40 00 68 74 | 32 40 00 68 4c 31 40 00 |.h 1@.ht|2@.hL1@.|
|000005f0| 68 00 00 00 80 e8 06 fe | ff ff 83 c4 2c 8d 44 24 |h.......|....,.D$|
|00000600| 0c 8d 8c 24 10 01 00 00 | 50 68 14 31 40 00 51 ff |...$....|Ph.1@.Q.|
|00000610| d6 8d 94 24 1c 01 00 00 | 52 68 74 32 40 00 68 f8 |...$....|Rht2@.h.|
|00000620| 30 40 00 68 00 00 00 80 | e8 d3 fd ff ff 68 74 32 |0@.h....|.....ht2|
|00000630| 40 00 68 5c 31 40 00 68 | f0 30 40 00 68 00 00 00 |@.h\1@.h|.0@.h...|
|00000640| 80 e8 ba fd ff ff 83 c4 | 2c 8d 44 24 0c 8d 8c 24 |........|,.D$...$|
|00000650| 10 01 00 00 50 68 44 31 | 40 00 51 ff d6 8d 94 24 |....PhD1|@.Q....$|
|00000660| 1c 01 00 00 52 68 74 32 | 40 00 68 dc 30 40 00 68 |....Rht2|@.h.0@.h|
|00000670| 00 00 00 80 e8 87 fd ff | ff 68 cc 30 40 00 68 74 |........|.h.0@.ht|
|00000680| 32 40 00 68 f0 30 40 00 | 68 00 00 00 80 e8 6e fd |2@.h.0@.|h.....n.|
|00000690| ff ff 83 c4 2c 8d 44 24 | 0c 8d 8c 24 10 01 00 00 |....,.D$|...$....|
|000006a0| 50 68 14 31 40 00 51 ff | d6 8d 94 24 1c 01 00 00 |Ph.1@.Q.|...$....|
|000006b0| 52 68 74 32 40 00 68 b0 | 30 40 00 68 00 00 00 80 |Rht2@.h.|0@.h....|
|000006c0| e8 3b fd ff ff 68 74 32 | 40 00 68 5c 31 40 00 68 |.;...ht2|@.h\1@.h|
|000006d0| a8 30 40 00 68 00 00 00 | 80 e8 22 fd ff ff 83 c4 |.0@.h...|..".....|
|000006e0| 2c 8d 44 24 0c 8d 8c 24 | 10 01 00 00 50 68 44 31 |,.D$...$|....PhD1|
|000006f0| 40 00 51 ff d6 8d 94 24 | 1c 01 00 00 52 68 74 32 |@.Q....$|....Rht2|
|00000700| 40 00 68 94 30 40 00 68 | 00 00 00 80 e8 ef fc ff |@.h.0@.h|........|
|00000710| ff 68 84 30 40 00 68 74 | 32 40 00 68 a8 30 40 00 |.h.0@.ht|2@.h.0@.|
|00000720| 68 00 00 00 80 e8 d6 fc | ff ff 83 c4 2c 8d 44 24 |h.......|....,.D$|
|00000730| 0c 8d 8c 24 10 01 00 00 | 50 68 78 30 40 00 51 ff |...$....|Phx0@.Q.|
|00000740| d6 8d 94 24 1c 01 00 00 | 52 68 74 32 40 00 68 5c |...$....|Rht2@.h\|
|00000750| 30 40 00 68 00 00 00 80 | e8 a3 fc ff ff 68 74 32 |0@.h....|.....ht2|
|00000760| 40 00 68 5c 31 40 00 68 | 54 30 40 00 68 00 00 00 |@.h\1@.h|T0@.h...|
|00000770| 80 e8 8a fc ff ff 83 c4 | 2c 8d 44 24 0c 8d 8c 24 |........|,.D$...$|
|00000780| 10 01 00 00 50 68 44 31 | 40 00 51 ff d6 8d 94 24 |....PhD1|@.Q....$|
|00000790| 1c 01 00 00 52 68 74 32 | 40 00 68 40 30 40 00 68 |....Rht2|@.h@0@.h|
|000007a0| 00 00 00 80 e8 57 fc ff | ff 68 28 30 40 00 68 74 |.....W..|.h(0@.ht|
|000007b0| 32 40 00 68 54 30 40 00 | 68 00 00 00 80 e8 3e fc |2@.hT0@.|h.....>.|
|000007c0| ff ff 83 c4 2c 8d 44 24 | 0c 8d 8c 24 10 01 00 00 |....,.D$|...$....|
|000007d0| 50 68 14 31 40 00 51 ff | d6 8d 94 24 1c 01 00 00 |Ph.1@.Q.|...$....|
|000007e0| 52 68 74 32 40 00 68 10 | 30 40 00 68 00 00 00 80 |Rht2@.h.|0@.h....|
|000007f0| e8 0b fc ff ff 83 c4 1c | 33 c0 5f 5e 5b 81 c4 ec |........|3._^[...|
|00000800| 04 00 00 c2 10 00 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000810| 55 8b ec 6a ff 68 68 20 | 40 00 68 90 15 40 00 64 |U..j.hh |@.h..@.d|
|00000820| a1 00 00 00 00 50 64 89 | 25 00 00 00 00 83 ec 68 |.....Pd.|%......h|
|00000830| 53 56 57 89 65 e8 33 db | 89 5d fc 6a 02 ff 15 4c |SVW.e.3.|.].j...L|
|00000840| 20 40 00 59 83 0d 88 32 | 40 00 ff 83 0d 8c 32 40 | @.Y...2|@.....2@|
|00000850| 00 ff ff 15 48 20 40 00 | 8b 0d 84 32 40 00 89 08 |....H @.|...2@...|
|00000860| ff 15 44 20 40 00 8b 0d | 80 32 40 00 89 08 a1 40 |..D @...|.2@....@|
|00000870| 20 40 00 8b 00 a3 90 32 | 40 00 e8 10 01 00 00 39 | @.....2|@......9|
|00000880| 1d 6c 31 40 00 75 0c 68 | 8c 15 40 00 ff 15 3c 20 |.l1@.u.h|..@...< |
|00000890| 40 00 59 e8 e2 00 00 00 | 68 0c 30 40 00 68 08 30 |@.Y.....|h.0@.h.0|
|000008a0| 40 00 e8 cd 00 00 00 a1 | 7c 32 40 00 89 45 94 8d |@.......||2@..E..|
|000008b0| 45 94 50 ff 35 78 32 40 | 00 8d 45 9c 50 8d 45 90 |E.P.5x2@|..E.P.E.|
|000008c0| 50 8d 45 a0 50 ff 15 58 | 20 40 00 68 04 30 40 00 |P.E.P..X| @.h.0@.|
|000008d0| 68 00 30 40 00 e8 9a 00 | 00 00 83 c4 24 a1 34 20 |h.0@....|....$.4 |
|000008e0| 40 00 8b 30 89 75 8c 80 | 3e 22 75 3a 46 89 75 8c |@..0.u..|>"u:F.u.|
|000008f0| 8a 06 3a c3 74 04 3c 22 | 75 f2 80 3e 22 75 04 46 |..:.t.<"|u..>"u.F|
|00000900| 89 75 8c 8a 06 3a c3 74 | 04 3c 20 76 f2 89 5d d0 |.u...:.t|.< v..].|
|00000910| 8d 45 a4 50 ff 15 1c 20 | 40 00 f6 45 d0 01 74 11 |.E.P... |@..E..t.|
|00000920| 0f b7 45 d4 eb 0e 80 3e | 20 76 d8 46 89 75 8c eb |..E....>| v.F.u..|
|00000930| f5 6a 0a 58 50 56 53 53 | ff 15 14 20 40 00 50 e8 |.j.XPVSS|... @.P.|
|00000940| ec fb ff ff 89 45 98 50 | ff 15 30 20 40 00 8b 45 |.....E.P|..0 @..E|
|00000950| ec 8b 08 8b 09 89 4d 88 | 50 51 e8 0f 00 00 00 59 |......M.|PQ.....Y|
|00000960| 59 c3 8b 65 e8 ff 75 88 | ff 15 28 20 40 00 ff 25 |Y..e..u.|..( @..%|
|00000970| 2c 20 40 00 ff 25 38 20 | 40 00 68 00 00 03 00 68 |, @..%8 |@.h....h|
|00000980| 00 00 01 00 e8 0d 00 00 | 00 59 59 c3 33 c0 c3 c3 |........|.YY.3...|
|00000990| ff 25 50 20 40 00 ff 25 | 54 20 40 00 00 00 00 00 |.%P @..%|T @.....|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 7c 21 00 00 ac 21 00 00 | 9c 21 00 00 8a 21 00 00 ||!...!..|.!...!..|
|00000a10| 00 00 00 00 9e 22 00 00 | 40 21 00 00 b2 22 00 00 |....."..|@!..."..|
|00000a20| 00 00 00 00 ca 21 00 00 | e4 21 00 00 ec 21 00 00 |.....!..|.!...!..|
|00000a30| fa 21 00 00 02 22 00 00 | 1c 22 00 00 28 22 00 00 |.!..."..|."..("..|
|00000a40| 3c 22 00 00 4c 22 00 00 | 5c 22 00 00 6a 22 00 00 |<"..L"..|\"..j"..|
|00000a50| 7c 22 00 00 90 22 00 00 | 0c 22 00 00 00 00 00 00 ||"..."..|."......|
|00000a60| 64 21 00 00 00 00 00 00 | ff ff ff ff 4e 15 40 00 |d!......|....N.@.|
|00000a70| 62 15 40 00 ec 20 00 00 | 00 00 00 00 00 00 00 00 |b.@.. ..|........|
|00000a80| 56 21 00 00 14 20 00 00 | 38 21 00 00 00 00 00 00 |V!... ..|8!......|
|00000a90| 00 00 00 00 70 21 00 00 | 60 20 00 00 d8 20 00 00 |....p!..|` ... ..|
|00000aa0| 00 00 00 00 00 00 00 00 | bc 21 00 00 00 20 00 00 |........|.!... ..|
|00000ab0| fc 20 00 00 00 00 00 00 | 00 00 00 00 d8 21 00 00 |. ......|.....!..|
|00000ac0| 24 20 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |$ ......|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 7c 21 00 00 ac 21 00 00 |........||!...!..|
|00000ae0| 9c 21 00 00 8a 21 00 00 | 00 00 00 00 9e 22 00 00 |.!...!..|....."..|
|00000af0| 40 21 00 00 b2 22 00 00 | 00 00 00 00 ca 21 00 00 |@!..."..|.....!..|
|00000b00| e4 21 00 00 ec 21 00 00 | fa 21 00 00 02 22 00 00 |.!...!..|.!..."..|
|00000b10| 1c 22 00 00 28 22 00 00 | 3c 22 00 00 4c 22 00 00 |."..("..|<"..L"..|
|00000b20| 5c 22 00 00 6a 22 00 00 | 7c 22 00 00 90 22 00 00 |\"..j"..||"..."..|
|00000b30| 0c 22 00 00 00 00 00 00 | 64 21 00 00 00 00 00 00 |."......|d!......|
|00000b40| 75 01 47 65 74 4d 6f 64 | 75 6c 65 46 69 6c 65 4e |u.GetMod|uleFileN|
|00000b50| 61 6d 65 41 00 00 4b 45 | 52 4e 45 4c 33 32 2e 64 |ameA..KE|RNEL32.d|
|00000b60| 6c 6c 00 00 d5 02 77 73 | 70 72 69 6e 74 66 41 00 |ll....ws|printfA.|
|00000b70| 55 53 45 52 33 32 2e 64 | 6c 6c 00 00 c9 01 52 65 |USER32.d|ll....Re|
|00000b80| 67 43 6c 6f 73 65 4b 65 | 79 00 f9 01 52 65 67 53 |gCloseKe|y...RegS|
|00000b90| 65 74 56 61 6c 75 65 45 | 78 41 00 00 cc 01 52 65 |etValueE|xA....Re|
|00000ba0| 67 43 72 65 61 74 65 4b | 65 79 41 00 e2 01 52 65 |gCreateK|eyA...Re|
|00000bb0| 67 4f 70 65 6e 4b 65 79 | 45 78 41 00 41 44 56 41 |gOpenKey|ExA.ADVA|
|00000bc0| 50 49 33 32 2e 64 6c 6c | 00 00 b9 01 5f 73 70 6c |PI32.dll|...._spl|
|00000bd0| 69 74 70 61 74 68 00 00 | 4d 53 56 43 52 54 2e 64 |itpath..|MSVCRT.d|
|00000be0| 6c 6c 00 00 d3 00 5f 65 | 78 69 74 00 48 00 5f 58 |ll...._e|xit.H._X|
|00000bf0| 63 70 74 46 69 6c 74 65 | 72 00 49 02 65 78 69 74 |cptFilte|r.I.exit|
|00000c00| 00 00 8f 00 5f 61 63 6d | 64 6c 6e 00 58 00 5f 5f |...._acm|dln.X.__|
|00000c10| 67 65 74 6d 61 69 6e 61 | 72 67 73 00 0f 01 5f 69 |getmaina|rgs..._i|
|00000c20| 6e 69 74 74 65 72 6d 00 | 83 00 5f 5f 73 65 74 75 |nitterm.|..__setu|
|00000c30| 73 65 72 6d 61 74 68 65 | 72 72 00 00 9d 00 5f 61 |sermathe|rr...._a|
|00000c40| 64 6a 75 73 74 5f 66 64 | 69 76 00 00 6a 00 5f 5f |djust_fd|iv..j.__|
|00000c50| 70 5f 5f 63 6f 6d 6d 6f | 64 65 00 00 6f 00 5f 5f |p__commo|de..o.__|
|00000c60| 70 5f 5f 66 6d 6f 64 65 | 00 00 81 00 5f 5f 73 65 |p__fmode|....__se|
|00000c70| 74 5f 61 70 70 5f 74 79 | 70 65 00 00 ca 00 5f 65 |t_app_ty|pe...._e|
|00000c80| 78 63 65 70 74 5f 68 61 | 6e 64 6c 65 72 33 00 00 |xcept_ha|ndler3..|
|00000c90| b7 00 5f 63 6f 6e 74 72 | 6f 6c 66 70 00 00 77 01 |.._contr|olfp..w.|
|00000ca0| 47 65 74 4d 6f 64 75 6c | 65 48 61 6e 64 6c 65 41 |GetModul|eHandleA|
|00000cb0| 00 00 af 01 47 65 74 53 | 74 61 72 74 75 70 49 6e |....GetS|tartupIn|
|00000cc0| 66 6f 41 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |foA.....|........|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e10| 61 76 69 73 5c 73 68 65 | 6c 6c 5c 6f 70 65 6e 5c |avis\she|ll\open\|
|00000e20| 63 6f 6d 6d 61 6e 64 00 | 55 52 4c 3a 47 4f 4d 20 |command.|URL:GOM |
|00000e30| 41 56 49 20 53 54 52 45 | 41 4d 49 4e 47 00 00 00 |AVI STRE|AMING...|
|00000e40| 61 76 69 73 5c 44 65 66 | 61 75 6c 74 49 63 6f 6e |avis\Def|aultIcon|
|00000e50| 00 00 00 00 61 76 69 73 | 00 00 00 00 67 6f 6d 63 |....avis|....gomc|
|00000e60| 6d 64 5c 73 68 65 6c 6c | 5c 6f 70 65 6e 5c 63 6f |md\shell|\open\co|
|00000e70| 6d 6d 61 6e 64 00 00 00 | 22 25 73 22 20 25 25 31 |mmand...|"%s" %%1|
|00000e80| 00 00 00 00 55 52 4c 3a | 47 4f 4d 20 43 4f 4d 4d |....URL:|GOM COMM|
|00000e90| 41 4e 44 00 67 6f 6d 63 | 6d 64 5c 44 65 66 61 75 |AND.gomc|md\Defau|
|00000ea0| 6c 74 49 63 6f 6e 00 00 | 67 6f 6d 63 6d 64 00 00 |ltIcon..|gomcmd..|
|00000eb0| 67 6f 6d 6c 6f 67 6f 5c | 73 68 65 6c 6c 5c 6f 70 |gomlogo\|shell\op|
|00000ec0| 65 6e 5c 63 6f 6d 6d 61 | 6e 64 00 00 55 52 4c 3a |en\comma|nd..URL:|
|00000ed0| 47 4f 4d 20 4c 4f 47 4f | 00 00 00 00 67 6f 6d 6c |GOM LOGO|....goml|
|00000ee0| 6f 67 6f 5c 44 65 66 61 | 75 6c 74 49 63 6f 6e 00 |ogo\Defa|ultIcon.|
|00000ef0| 67 6f 6d 6c 6f 67 6f 00 | 6a 61 6d 61 6b 5c 73 68 |gomlogo.|jamak\sh|
|00000f00| 65 6c 6c 5c 6f 70 65 6e | 5c 63 6f 6d 6d 61 6e 64 |ell\open|\command|
|00000f10| 00 00 00 00 22 25 73 22 | 20 22 25 25 31 22 00 00 |...."%s"| "%%1"..|
|00000f20| 55 52 4c 3a 47 4f 4d 20 | 4a 41 4d 41 4b 00 00 00 |URL:GOM |JAMAK...|
|00000f30| 6a 61 6d 61 6b 5c 44 65 | 66 61 75 6c 74 49 63 6f |jamak\De|faultIco|
|00000f40| 6e 00 00 00 22 25 73 22 | 2c 30 00 00 6a 61 6d 61 |n..."%s"|,0..jama|
|00000f50| 6b 00 00 00 47 4f 4d 2e | 65 78 65 00 55 52 4c 20 |k...GOM.|exe.URL |
|00000f60| 50 72 6f 74 6f 63 6f 6c | 00 00 00 00 01 00 00 00 |Protocol|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+