The Hacker Report - Inside Secrets to PC Security

home *** CD-ROM | disk | FTP | other *** search

/ The Hacker Report - Inside Secrets to PC Security / The Hacker Report - Inside Secrets to PC Security.iso / Programs / CookiePal.exe / KBOrders.exe < prev next >

MS-DOS/Windows or OS/2 Executable | 1997-08-17 | 5.0 KB

open in:

MacOS 8.1 extracted |

Win98 extracted |

DOS extracted

view JSON data |

view as text

This file was processed as: MS-DOS/Windows or OS/2 Executable (executable/exe).

You can browse this item here: KBOrders.exe

Confidence	Program	Detection	Match Type	Support
`100%`	dexvert	MS-DOS/Windows or OS/2 Executable `(executable/exe)`	magic	Supported
`1%`	dexvert	Ady's GLUE Packed `(archive/adysGLUEPacked)`	ext	Unsupported
`1%`	dexvert	BlacK FiST Packed `(archive/blackFiSTPacked)`	ext	Unsupported
`1%`	dexvert	CauseWay Compressor Packed `(archive/causeWayCompressorPacked)`	ext	Unsupported
`1%`	dexvert	CExe Packed `(archive/cExePacked)`	ext	Unsupported
`1%`	dexvert	cIPHATOR Protected `(archive/ciphatorProtected)`	ext	Unsupported
`1%`	dexvert	CRYPACK Protected `(archive/crypackProtected)`	ext	Unsupported
`1%`	dexvert	CRYPTEXE Protected `(archive/cryptexeProtected)`	ext	Unsupported
`1%`	dexvert	Crypt Light Show Protected `(archive/cryptLightShowProtected)`	ext	Unsupported
`1%`	dexvert	DaRKSToP Protected `(archive/darkstopProtected)`	ext	Unsupported
`1%`	dexvert	DiskImager SFX Image `(archive/diskImagerSFXImage)`	ext	Unsupported
`1%`	dexvert	Dismember EXE CRYPT Protected `(archive/dismemberProtected)`	ext	Unsupported
`1%`	dexvert	DJP Packed `(archive/djpPacked)`	ext	Unsupported
`1%`	dexvert	.NETZ Packed `(archive/dotNETZPacked)`	ext	Unsupported
`1%`	dexvert	DSHIELD Protected `(archive/dshieldProtected)`	ext	Unsupported
`1%`	dexvert	Exe32Pack Packed `(archive/exe32PackPacked)`	ext	Unsupported
`1%`	dexvert	ExeHigh Packed `(archive/exeHighPacked)`	ext	Unsupported
`1%`	dexvert	EXE Manager Protected `(archive/exeManagerProtected)`	ext	Unsupported
`1%`	dexvert	EXETOOLS Protected `(archive/exetoolsProtected)`	ext	Unsupported
`1%`	dexvert	EZip Packed `(archive/ezipPacked)`	ext	Unsupported
`1%`	dexvert	FSG Packed `(archive/fsgPacked)`	ext	Unsupported
`1%`	dexvert	HackStop Protected `(archive/hackStopProtected)`	ext	Unsupported
`1%`	dexvert	JMCryptExe Protected `(archive/jmCryptExeProtected)`	ext	Unsupported
`1%`	dexvert	JDPack Packed `(archive/kdPackPacked)`	ext	Unsupported
`1%`	dexvert	kkrunchy Packed `(archive/kkcrunchPacked)`	ext	Unsupported
`1%`	dexvert	mbp SHRINK Packed `(archive/mbpSHRINKPacked)`	ext	Unsupported
`1%`	dexvert	MEGALITE Packed `(archive/megalitePacked)`	ext	Unsupported
`1%`	dexvert	Mess Protected `(archive/messProtected)`	ext	Unsupported
`1%`	dexvert	Mew Packed `(archive/mewPacked)`	ext	Unsupported
`1%`	dexvert	MPRESS Packed `(archive/mpressPacked)`	ext	Unsupported
`1%`	dexvert	NOS Packer Packed `(archive/nosPackerPacked)`	ext	Unsupported
`1%`	dexvert	NTShell Protected `(archive/ntShellProtected)`	ext	Unsupported
`1%`	dexvert	Pack Master Packed `(archive/packMasterPacked)`	ext	Unsupported
`1%`	dexvert	PE Diminisher Packed `(archive/peDiminisherPacked)`	ext	Unsupported
`1%`	dexvert	Petite Packed `(archive/petitePacked)`	ext	Unsupported
`1%`	dexvert	PeX Packed `(archive/pexPacked)`	ext	Unsupported
`1%`	dexvert	PKLITE32 Packed `(archive/pklite32Packed)`	ext	Unsupported
`1%`	dexvert	PowerBatch Packed `(archive/powerBatchPacked)`	ext	Unsupported
`1%`	dexvert	protector Protected `(archive/protectorProtected)`	ext	Unsupported
`1%`	dexvert	py2exe Packed `(archive/py2exePacked)`	ext	Unsupported
`1%`	dexvert	PyInstaller Packed `(archive/pyInstallerPacked)`	ext	Unsupported
`1%`	dexvert	RERP Packed `(archive/rerpPacked)`	ext	Unsupported
`1%`	dexvert	Scramb Packed `(archive/scrambPacked)`	ext	Unsupported
`1%`	dexvert	SECURE Protected `(archive/secureProtected)`	ext	Unsupported
`1%`	dexvert	Shrinker Packed (Windows) `(archive/shrinkerWindowsPacked)`	ext	Unsupported
`1%`	dexvert	Spoon Studio Packed `(archive/spoonStudioPacked)`	ext	Unsupported
`1%`	dexvert	tElock Packed `(archive/telockPacked)`	ext	Unsupported
`1%`	dexvert	The Builder Packed `(archive/theBuilderPacked)`	ext	Unsupported
`1%`	dexvert	The Patcher Packed `(archive/thePatcherPacked)`	ext	Unsupported
`1%`	dexvert	32Lite Packed `(archive/thirtyTwoLitePacked)`	ext	Unsupported
`1%`	dexvert	TinyProt Protected `(archive/tinyProtProtected)`	ext	Unsupported
`1%`	dexvert	(Win)Upack Packed `(archive/winUpackPacked)`	ext	Unsupported
`1%`	dexvert	Yoda's Crypte Protected `(archive/yodasCrypterProtected)`	ext	Unsupported
`1%`	dexvert	MS-DOS PMODE extender executable `(executable/msdosPMODEExtenderExecutable)`	ext	Unsupported
`1%`	dexvert	Sony Playstation Executable `(executable/sonyPlaystationExe)`	ext	Unsupported
`1%`	dexvert	Novell Netware Virtual Loadable Module `(other/novellNetwareVirtualLoadableModule)`	ext	Unsupported
`100%`	file	PE32 executable for MS Windows 4.00 (GUI), Intel i386, 4 sections	default
`99%`	file	data	default
`83%`	TrID	Win32 Executable MS Visual C++ 4.x	default
`4%`	TrID	Win32 Dynamic Link Library (generic)	default (weak)
`3%`	TrID	Win16 NE executable (generic)	default (weak)
`2%`	TrID	Win32 Executable (generic)	default (weak)
`1%`	TrID	Win16/32 Executable Delphi generic	default (weak)
`100%`	siegfried	fmt/899 Windows Portable Executable (32 bit)	default
`100%`	gt2	Ist eine ausf�hrbare Win32 Datei	default
`100%`	binwalkID	Microsoft executable, portable (PE)	default
`100%`	xdgMime	application/vnd.microsoft.portable-executable	default (weak)

hex view

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 04 00 | ce c5 f7 33 00 00 00 00 |PE..L...|...3....|
|00000090| 00 00 00 00 e0 00 0f 01 | 0b 01 05 02 00 02 00 00 |........|........|
|000000a0| 00 0e 00 00 00 00 00 00 | 55 10 00 00 00 10 00 00 |........|U.......|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 50 00 00 00 04 00 00 | 00 00 00 00 02 00 00 00 |.P......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 30 00 00 50 00 00 00 | 00 40 00 00 30 08 00 00 |.0..P...|.@..0...|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 8c 30 00 00 3c 00 00 00 |........|.0..<...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| 6e 01 00 00 00 10 00 00 | 00 02 00 00 00 04 00 00 |n.......|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 64 61 74 61 00 00 00 | 42 00 00 00 00 20 00 00 |.data...|B.... ..|
|000001b0| 00 02 00 00 00 06 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 c0 | 2e 69 64 61 74 61 00 00 |....@...|.idata..|
|000001d0| a8 01 00 00 00 30 00 00 | 00 02 00 00 00 08 00 00 |.....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 2e 72 73 72 63 00 00 00 | 30 08 00 00 00 40 00 00 |.rsrc...|0....@..|
|00000200| 00 0a 00 00 00 0a 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 40 | 00 00 00 00 00 00 00 00 |....@..@|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 55 8b ec 81 ec cc 00 00 | 00 8d 45 fc 56 50 8d 85 |U.......|..E.VP..|
|00000410| 34 ff ff ff 50 8d 45 0c | 50 6a 00 ff 75 0c c7 45 |4...P.E.|Pj..u..E|
|00000420| fc c8 00 00 00 ff 75 08 | ff 15 90 30 40 00 8b f0 |......u.|...0@...|
|00000430| 85 f6 75 15 8b 45 14 40 | 50 8d 85 34 ff ff ff 50 |..u..E.@|P..4...P|
|00000440| ff 75 10 ff 15 ac 30 40 | 00 33 c0 85 f6 0f 94 c0 |.u....0@|.3......|
|00000450| 5e c9 c2 10 00 55 8b ec | 81 ec a8 02 00 00 56 8d |^....U..|......V.|
|00000460| 45 ac 57 50 8d 85 5c ff | ff ff 50 ff 15 a8 30 40 |E.WP..\.|..P...0@|
|00000470| 00 50 e8 b6 00 00 00 33 | f6 8d 85 5c ff ff ff 56 |.P.....3|...\...V|
|00000480| 50 ff 15 b4 30 40 00 8b | f8 3b fe 75 7e 8d 45 ac |P...0@..|.;.u~.E.|
|00000490| 50 8d 85 58 fd ff ff 68 | 24 20 40 00 50 ff 15 b8 |P..X...h|$ @.P...|
|000004a0| 30 40 00 83 c4 0c 8d 45 | fc 50 68 3f 00 0f 00 8d |0@.....E|.Ph?....|
|000004b0| 85 58 fd ff ff 56 50 68 | 02 00 00 80 ff 15 8c 30 |.X...VPh|.......0|
|000004c0| 40 00 3b c6 75 22 8d 85 | 58 fe ff ff 68 04 01 00 |@.;.u"..|X...h...|
|000004d0| 00 50 68 18 20 40 00 ff | 75 fc e8 21 ff ff ff ff |.Ph. @..|u..!....|
|000004e0| 75 fc ff 15 94 30 40 00 | 8d 85 58 fe ff ff 68 14 |u....0@.|..X...h.|
|000004f0| 20 40 00 50 ff 15 9c 30 | 40 00 8d 85 58 fe ff ff | @.P...0|@...X...|
|00000500| 6a 05 50 ff 15 a0 30 40 | 00 eb 15 68 00 20 40 00 |j.P...0@|...h. @.|
|00000510| ff 15 c0 30 40 00 56 56 | 50 57 ff 15 bc 30 40 00 |...0@.VV|PW...0@.|
|00000520| 56 ff 15 a4 30 40 00 5f | 33 c0 5e c9 c3 8b 4c 24 |V...0@._|3.^...L$|
|00000530| 04 33 d2 8a 01 41 84 c0 | 74 2a 3c 23 75 06 8b 54 |.3...A..|t*<#u..T|
|00000540| 24 08 eb ef 3c 24 75 06 | 8b 54 24 0c eb e5 3c 20 |$...<$u.|.T$...< |
|00000550| 75 09 85 d2 74 dd 80 22 | 00 eb 06 85 d2 74 d4 88 |u...t.."|.....t..|
|00000560| 02 42 eb cf 85 d2 74 03 | 80 22 00 c2 0c 00 00 00 |.B....t.|."......|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 4b 42 75 72 72 61 53 68 | 6f 77 4f 72 64 65 72 46 |KBurraSh|owOrderF|
|00000610| 6f 72 6d 00 20 2f 4f 00 | 4c 6f 63 61 74 69 6f 6e |orm. /O.|Location|
|00000620| 00 00 00 00 53 6f 66 74 | 77 61 72 65 5c 4b 6f 6f |....Soft|ware\Koo|
|00000630| 6b 61 62 75 72 72 61 5c | 25 73 5c 43 6f 6e 66 69 |kaburra\|%s\Confi|
|00000640| 67 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |g.......|........|
|00000650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000660| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000670| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000680| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000690| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 60 30 00 00 00 00 00 00 | 00 00 00 00 0a 31 00 00 |`0......|.....1..|
|00000810| 9c 30 00 00 78 30 00 00 | 00 00 00 00 00 00 00 00 |.0..x0..|........|
|00000820| 5c 31 00 00 b4 30 00 00 | 50 30 00 00 00 00 00 00 |\1...0..|P0......|
|00000830| 00 00 00 00 9a 31 00 00 | 8c 30 00 00 00 00 00 00 |.....1..|.0......|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 8a 31 00 00 68 31 00 00 | 7c 31 00 00 00 00 00 00 |.1..h1..||1......|
|00000860| ec 30 00 00 e2 30 00 00 | d4 30 00 00 f8 30 00 00 |.0...0..|.0...0..|
|00000870| c8 30 00 00 00 00 00 00 | 4e 31 00 00 42 31 00 00 |.0......|N1..B1..|
|00000880| 18 31 00 00 28 31 00 00 | 00 00 00 00 8a 31 00 00 |.1..(1..|.....1..|
|00000890| 68 31 00 00 7c 31 00 00 | 00 00 00 00 ec 30 00 00 |h1..|1..|.....0..|
|000008a0| e2 30 00 00 d4 30 00 00 | f8 30 00 00 c8 30 00 00 |.0...0..|.0...0..|
|000008b0| 00 00 00 00 4e 31 00 00 | 42 31 00 00 18 31 00 00 |....N1..|B1...1..|
|000008c0| 28 31 00 00 00 00 00 00 | 9e 02 6c 73 74 72 63 70 |(1......|..lstrcp|
|000008d0| 79 6e 41 00 6b 00 45 78 | 69 74 50 72 6f 63 65 73 |ynA.k.Ex|itProces|
|000008e0| 73 00 6f 02 57 69 6e 45 | 78 65 63 00 92 02 6c 73 |s.o.WinE|xec...ls|
|000008f0| 74 72 63 61 74 41 00 00 | aa 00 47 65 74 43 6f 6d |trcatA..|..GetCom|
|00000900| 6d 61 6e 64 4c 69 6e 65 | 41 00 4b 45 52 4e 45 4c |mandLine|A.KERNEL|
|00000910| 33 32 2e 64 6c 6c 00 00 | b1 01 50 6f 73 74 4d 65 |32.dll..|..PostMe|
|00000920| 73 73 61 67 65 41 00 00 | ca 01 52 65 67 69 73 74 |ssageA..|..Regist|
|00000930| 65 72 57 69 6e 64 6f 77 | 4d 65 73 73 61 67 65 41 |erWindow|MessageA|
|00000940| 00 00 64 02 77 73 70 72 | 69 6e 74 66 41 00 cd 00 |..d.wspr|intfA...|
|00000950| 46 69 6e 64 57 69 6e 64 | 6f 77 41 00 55 53 45 52 |FindWind|owA.USER|
|00000960| 33 32 2e 64 6c 6c 00 00 | 36 01 52 65 67 51 75 65 |32.dll..|6.RegQue|
|00000970| 72 79 56 61 6c 75 65 45 | 78 41 00 00 17 01 52 65 |ryValueE|xA....Re|
|00000980| 67 43 6c 6f 73 65 4b 65 | 79 00 2e 01 52 65 67 4f |gCloseKe|y...RegO|
|00000990| 70 65 6e 4b 65 79 45 78 | 41 00 41 44 56 41 50 49 |penKeyEx|A.ADVAPI|
|000009a0| 33 32 2e 64 6c 6c 00 00 | 00 00 00 00 00 00 00 00 |32.dll..|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 00 00 00 00 cd c5 f7 33 | 00 00 00 00 00 00 03 00 |.......3|........|
|00000a10| 03 00 00 00 28 00 00 80 | 0e 00 00 00 48 00 00 80 |....(...|....H...|
|00000a20| 10 00 00 00 60 00 00 80 | 00 00 00 00 cd c5 f7 33 |....`...|.......3|
|00000a30| 00 00 00 00 00 00 02 00 | 01 00 00 00 78 00 00 80 |........|....x...|
|00000a40| 02 00 00 00 90 00 00 80 | 00 00 00 00 cd c5 f7 33 |........|.......3|
|00000a50| 00 00 00 00 00 00 01 00 | 64 00 00 00 a8 00 00 80 |........|d.......|
|00000a60| 00 00 00 00 cd c5 f7 33 | 00 00 00 00 00 00 01 00 |.......3|........|
|00000a70| 01 00 00 00 c0 00 00 80 | 00 00 00 00 cd c5 f7 33 |........|.......3|
|00000a80| 00 00 00 00 00 00 01 00 | 09 04 00 00 d8 00 00 00 |........|........|
|00000a90| 00 00 00 00 cd c5 f7 33 | 00 00 00 00 00 00 01 00 |.......3|........|
|00000aa0| 09 04 00 00 e8 00 00 00 | 00 00 00 00 cd c5 f7 33 |........|.......3|
|00000ab0| 00 00 00 00 00 00 01 00 | 09 04 00 00 f8 00 00 00 |........|........|
|00000ac0| 00 00 00 00 cd c5 f7 33 | 00 00 00 00 00 00 01 00 |.......3|........|
|00000ad0| 09 04 00 00 08 01 00 00 | fc 43 00 00 e8 02 00 00 |........|.C......|
|00000ae0| 00 00 00 00 00 00 00 00 | e4 46 00 00 28 01 00 00 |........|.F..(...|
|00000af0| 00 00 00 00 00 00 00 00 | 0c 48 00 00 22 00 00 00 |........|.H.."...|
|00000b00| 00 00 00 00 00 00 00 00 | 20 41 00 00 dc 02 00 00 |........| A......|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| dc 02 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |..4...V.|S._.V.E.|
|00000b30| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00000b40| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00000b50| 00 00 01 00 01 00 00 00 | 00 00 01 00 01 00 00 00 |........|........|
|00000b60| 3f 00 00 00 00 00 00 00 | 04 00 04 00 01 00 00 00 |?.......|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 3a 02 00 00 |........|....:...|
|00000b80| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|00000b90| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|00000ba0| 16 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |......0.|4.0.9.0.|
|00000bb0| 34 00 62 00 30 00 00 00 | 48 00 14 00 01 00 43 00 |4.b.0...|H.....C.|
|00000bc0| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00000bd0| 6d 00 65 00 00 00 00 00 | 4b 00 6f 00 6f 00 6b 00 |m.e.....|K.o.o.k.|
|00000be0| 61 00 62 00 75 00 72 00 | 72 00 61 00 20 00 53 00 |a.b.u.r.|r.a. .S.|
|00000bf0| 6f 00 66 00 74 00 77 00 | 61 00 72 00 65 00 00 00 |o.f.t.w.|a.r.e...|
|00000c00| 4a 00 11 00 01 00 46 00 | 69 00 6c 00 65 00 44 00 |J.....F.|i.l.e.D.|
|00000c10| 65 00 73 00 63 00 72 00 | 69 00 70 00 74 00 69 00 |e.s.c.r.|i.p.t.i.|
|00000c20| 6f 00 6e 00 00 00 00 00 | 4f 00 72 00 64 00 65 00 |o.n.....|O.r.d.e.|
|00000c30| 72 00 20 00 46 00 6f 00 | 72 00 6d 00 20 00 45 00 |r. .F.o.|r.m. .E.|
|00000c40| 6e 00 74 00 72 00 79 00 | 00 00 00 00 36 00 0b 00 |n.t.r.y.|....6...|
|00000c50| 01 00 46 00 69 00 6c 00 | 65 00 56 00 65 00 72 00 |..F.i.l.|e.V.e.r.|
|00000c60| 73 00 69 00 6f 00 6e 00 | 00 00 00 00 31 00 2c 00 |s.i.o.n.|....1.,.|
|00000c70| 20 00 30 00 2c 00 20 00 | 30 00 2c 00 20 00 31 00 | .0.,. .|0.,. .1.|
|00000c80| 00 00 00 00 32 00 09 00 | 01 00 49 00 6e 00 74 00 |....2...|..I.n.t.|
|00000c90| 65 00 72 00 6e 00 61 00 | 6c 00 4e 00 61 00 6d 00 |e.r.n.a.|l.N.a.m.|
|00000ca0| 65 00 00 00 4b 00 42 00 | 4f 00 72 00 64 00 65 00 |e...K.B.|O.r.d.e.|
|00000cb0| 72 00 73 00 00 00 00 00 | 46 00 11 00 01 00 4c 00 |r.s.....|F.....L.|
|00000cc0| 65 00 67 00 61 00 6c 00 | 43 00 6f 00 70 00 79 00 |e.g.a.l.|C.o.p.y.|
|00000cd0| 72 00 69 00 67 00 68 00 | 74 00 00 00 43 00 6f 00 |r.i.g.h.|t...C.o.|
|00000ce0| 70 00 79 00 72 00 69 00 | 67 00 68 00 74 00 20 00 |p.y.r.i.|g.h.t. .|
|00000cf0| a9 00 20 00 31 00 39 00 | 39 00 37 00 00 00 00 00 |.. .1.9.|9.7.....|
|00000d00| 42 00 0d 00 01 00 4f 00 | 72 00 69 00 67 00 69 00 |B.....O.|r.i.g.i.|
|00000d10| 6e 00 61 00 6c 00 46 00 | 69 00 6c 00 65 00 6e 00 |n.a.l.F.|i.l.e.n.|
|00000d20| 61 00 6d 00 65 00 00 00 | 4b 00 42 00 4f 00 72 00 |a.m.e...|K.B.O.r.|
|00000d30| 64 00 65 00 72 00 73 00 | 2e 00 65 00 78 00 65 00 |d.e.r.s.|..e.x.e.|
|00000d40| 00 00 00 00 36 00 0b 00 | 01 00 50 00 72 00 6f 00 |....6...|..P.r.o.|
|00000d50| 64 00 75 00 63 00 74 00 | 4e 00 61 00 6d 00 65 00 |d.u.c.t.|N.a.m.e.|
|00000d60| 00 00 00 00 20 00 20 00 | 4b 00 42 00 4f 00 72 00 |.... . .|K.B.O.r.|
|00000d70| 64 00 65 00 72 00 73 00 | 00 00 00 00 3a 00 0b 00 |d.e.r.s.|....:...|
|00000d80| 01 00 50 00 72 00 6f 00 | 64 00 75 00 63 00 74 00 |..P.r.o.|d.u.c.t.|
|00000d90| 56 00 65 00 72 00 73 00 | 69 00 6f 00 6e 00 00 00 |V.e.r.s.|i.o.n...|
|00000da0| 31 00 2c 00 20 00 30 00 | 2c 00 20 00 30 00 2c 00 |1.,. .0.|,. .0.,.|
|00000db0| 20 00 31 00 00 00 00 00 | 44 00 00 00 01 00 56 00 | .1.....|D.....V.|
|00000dc0| 61 00 72 00 46 00 69 00 | 6c 00 65 00 49 00 6e 00 |a.r.F.i.|l.e.I.n.|
|00000dd0| 66 00 6f 00 00 00 00 00 | 24 00 04 00 00 00 54 00 |f.o.....|$.....T.|
|00000de0| 72 00 61 00 6e 00 73 00 | 6c 00 61 00 74 00 69 00 |r.a.n.s.|l.a.t.i.|
|00000df0| 6f 00 6e 00 00 00 00 00 | 09 04 b0 04 28 00 00 00 |o.n.....|....(...|
|00000e00| 20 00 00 00 40 00 00 00 | 01 00 04 00 00 00 00 00 | ...@...|........|
|00000e10| 00 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e20| 00 00 00 00 00 00 00 00 | 00 00 80 00 00 80 00 00 |........|........|
|00000e30| 00 80 80 00 80 00 00 00 | 80 00 80 00 80 80 00 00 |........|........|
|00000e40| c0 c0 c0 00 80 80 80 00 | 00 00 ff 00 00 ff 00 00 |........|........|
|00000e50| 00 ff ff 00 ff 00 00 00 | ff 00 ff 00 ff ff 00 00 |........|........|
|00000e60| ff ff ff 00 00 00 87 77 | 77 78 08 78 80 00 00 00 |.......w|wx.x....|
|00000e70| 00 00 00 00 00 00 08 77 | 77 77 00 78 00 00 00 00 |.......w|ww.x....|
|00000e80| 00 00 00 00 00 00 00 87 | 77 77 80 77 00 00 00 00 |........|ww.w....|
|00000e90| 00 00 00 00 00 00 00 08 | 77 77 78 87 00 00 00 00 |........|wwx.....|
|00000ea0| 00 00 00 00 00 00 00 00 | 87 77 78 87 00 00 00 00 |........|.wx.....|
|00000eb0| 00 00 00 00 00 00 00 00 | 07 77 78 87 00 00 00 00 |........|.wx.....|
|00000ec0| 00 00 00 00 00 00 00 00 | 08 77 78 08 00 00 00 00 |........|.wx.....|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 77 77 07 00 00 00 00 |........|.ww.....|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 87 77 08 80 00 00 00 |........|..w.....|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 87 77 08 80 00 00 00 |........|..w.....|
|00000f00| 00 00 00 00 00 00 00 00 | 00 87 77 88 00 00 00 00 |........|..w.....|
|00000f10| 00 00 00 00 00 00 00 00 | 00 87 77 78 00 00 00 00 |........|..wx....|
|00000f20| 00 00 00 00 00 00 00 00 | 00 87 77 78 00 00 00 00 |........|..wx....|
|00000f30| 00 00 00 00 00 00 00 00 | 00 87 77 78 08 88 88 88 |........|..wx....|
|00000f40| 88 88 80 00 00 00 00 00 | 08 77 77 77 00 88 80 00 |........|.www....|
|00000f50| 00 00 00 80 08 00 00 08 | 77 77 77 77 08 77 80 00 |........|wwww.w..|
|00000f60| 00 00 00 80 08 77 77 77 | 77 77 77 77 00 00 00 08 |.....www|wwww....|
|00000f70| 87 88 08 00 80 87 77 77 | 77 77 77 88 00 08 87 77 |......ww|www....w|
|00000f80| 88 08 80 00 08 87 77 77 | 77 77 78 00 00 00 08 80 |......ww|wwx.....|
|00000f90| 00 80 00 00 08 07 77 77 | 77 80 00 00 00 00 00 08 |......ww|w.......|
|00000fa0| 80 00 00 00 00 88 77 77 | 80 00 00 80 00 00 08 00 |......ww|........|
|00000fb0| 00 00 00 00 00 80 77 77 | 88 88 80 00 00 00 80 00 |......ww|........|
|00000fc0| 00 00 80 00 00 80 87 77 | 77 77 77 80 88 80 80 00 |.......w|www.....|
|00000fd0| 80 00 28 00 00 00 08 77 | 77 77 77 77 77 80 00 08 |..(....w|wwwww...|
|00000fe0| 28 00 28 00 00 08 00 08 | 77 77 77 77 77 08 00 08 |(.(.....|wwwww...|
|00000ff0| 28 02 22 88 00 00 88 00 | 00 88 88 77 80 80 00 02 |(.".....|...w....|
|00001000| 22 82 88 22 00 00 00 08 | 00 00 00 80 08 00 00 82 |".."....|........|
|00001010| 82 22 88 28 00 00 00 00 | 00 08 00 88 80 08 80 82 |.".(....|........|
|00001020| 88 28 88 27 00 00 00 00 | 00 00 00 00 00 08 22 22 |.(.'....|......""|
|00001030| 88 27 88 28 00 00 00 00 | 00 00 00 00 00 08 22 28 |.'.(....|......"(|
|00001040| 88 27 88 28 00 00 00 00 | 00 00 00 00 00 08 28 28 |.'.(....|......((|
|00001050| 77 27 88 28 00 00 00 00 | 00 00 00 00 00 00 28 88 |w'.(....|......(.|
|00001060| 88 28 22 22 00 00 7f ff | 00 00 7f ff 00 00 7f ff |.(""....|........|
|00001070| 00 00 7f ff 00 00 7f ff | 00 00 7f ff 00 00 7f ff |........|........|
|00001080| 00 00 7f ff 00 00 7f ff | 00 00 7f ff 00 00 7f ff |........|........|
|00001090| 00 00 7f ff 00 00 7f ff | 00 00 00 07 00 00 00 01 |........|........|
|000010a0| 00 00 00 01 00 00 00 03 | 00 00 00 07 80 00 00 1f |........|........|
|000010b0| 80 00 00 7f c0 00 03 ff | c0 00 07 f7 c0 00 07 73 |........|.......s|
|000010c0| e0 00 0e 33 e0 00 0e 20 | f0 00 1e 00 fe 00 3c 00 |...3... |......<.|
|000010d0| ff e0 64 00 ff ff e0 00 | ff ff e0 00 ff ff e0 00 |..d.....|........|
|000010e0| ff ff f0 00 28 00 00 00 | 10 00 00 00 20 00 00 00 |....(...|.... ...|
|000010f0| 01 00 04 00 00 00 00 00 | 80 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001110| 00 00 80 00 00 80 00 00 | 00 80 80 00 80 00 00 00 |........|........|
|00001120| 80 00 80 00 80 80 00 00 | c0 c0 c0 00 80 80 80 00 |........|........|
|00001130| 00 00 ff 00 00 ff 00 00 | 00 ff ff 00 ff 00 00 00 |........|........|
|00001140| ff 00 ff 00 ff ff 00 00 | ff ff ff 00 00 87 77 07 |........|......w.|
|00001150| 00 00 00 00 00 08 77 07 | 00 00 00 00 00 00 87 78 |......w.|.......x|
|00001160| 00 00 00 00 00 00 07 70 | 00 00 00 00 00 00 08 70 |.......p|.......p|
|00001170| 80 00 00 00 00 00 08 78 | 00 00 00 00 00 00 08 77 |.......x|.......w|
|00001180| 00 00 00 00 00 00 07 77 | 00 00 00 80 07 77 77 77 |.......w|.....www|
|00001190| 70 88 80 00 07 77 77 00 | 00 88 00 00 00 77 80 00 |p....ww.|.....w..|
|000011a0| 00 00 00 00 00 87 77 00 | 00 00 20 20 00 00 77 77 |......w.|..  ..ww|
|000011b0| 70 00 20 22 00 00 00 00 | 00 02 22 22 00 00 00 00 |p. "....|..""....|
|000011c0| 00 22 22 22 00 00 00 00 | 00 22 72 22 00 7f 00 00 |."""....|."r"....|
|000011d0| 00 7f 00 00 00 7f 00 00 | 00 7f 00 00 00 7f 00 00 |........|........|
|000011e0| 00 7f 00 00 00 7f 00 00 | 00 01 00 00 00 00 00 00 |........|........|
|000011f0| 00 03 00 00 80 0f 00 00 | 80 35 00 00 c0 34 00 00 |........|.5...4..|
|00001200| f0 60 00 00 ff c0 00 00 | ff c0 00 00 00 00 01 00 |.`......|........|
|00001210| 02 00 20 20 10 00 01 00 | 04 00 e8 02 00 00 01 00 |..  ....|........|
|00001220| 10 10 10 00 01 00 04 00 | 28 01 00 00 02 00 00 00 |........|(.......|
|00001230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+