| / Australian Personal Computer 1999 July
/ APC47-1.ISO / workshop / win95 / pws / ws2setup.exe / DELW2REG.EXE
| < prev | next > |
| MS-DOS/Windows or OS/2 Executable | 1997-06-06 | 11.0 KB |
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | ExeHigh Packed (archive/exeHighPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | RERP Packed (archive/rerpPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386, 4 sections | default | |
| 99% | file | data | default | |
| 38% | TrID | Microsoft Visual C++ compiled executable (generic) | default | |
| 15% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 11% | TrID | Win16 NE executable (generic) | default | |
| 10% | TrID | Win32 Executable (generic) | default | |
| 4% | TrID | Win16/32 Executable Delphi generic | default (weak) | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 04 00 | be 94 f2 32 20 1e 00 00 |PE..L...|...2 ...|
|00000090| 4e 00 00 00 e0 00 06 01 | 0b 01 03 0a 00 08 00 00 |N.......|........|
|000000a0| 00 06 00 00 00 00 00 00 | 70 12 00 00 00 10 00 00 |........|p.......|
|000000b0| 00 20 00 00 00 00 00 01 | 00 10 00 00 00 02 00 00 |. ......|........|
|000000c0| 04 00 00 00 04 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 50 00 00 00 04 00 00 | cb fa 00 00 02 00 00 00 |.P......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 6e 14 00 00 50 00 00 00 | 00 30 00 00 10 00 00 00 |n...P...|.0......|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 40 00 00 6c 00 00 00 | 60 10 00 00 54 00 00 00 |.@..l...|`...T...|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 10 00 00 60 00 00 00 |........|....`...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| 86 06 00 00 00 10 00 00 | 00 08 00 00 00 10 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 64 61 74 61 00 00 00 | 38 00 00 00 00 20 00 00 |.data...|8.... ..|
|000001b0| 00 02 00 00 00 18 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 c0 | 2e 72 73 72 63 00 00 00 |....@...|.rsrc...|
|000001d0| 10 00 00 00 00 30 00 00 | 00 02 00 00 00 1a 00 00 |.....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|000001f0| 2e 72 65 6c 6f 63 00 00 | c6 00 00 00 00 40 00 00 |.reloc..|.....@..|
|00000200| 00 02 00 00 00 1c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000610| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000660| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000670| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000680| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000690| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000810| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000820| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 26 16 00 00 14 16 00 00 | 02 16 00 00 f4 15 00 00 |&.......|........|
|00001010| 00 00 00 00 52 16 00 00 | 44 16 00 00 66 16 00 00 |....R...|D...f...|
|00001020| 00 00 00 00 b4 15 00 00 | a6 15 00 00 96 15 00 00 |........|........|
|00001030| 62 15 00 00 72 15 00 00 | 86 15 00 00 56 15 00 00 |b...r...|....V...|
|00001040| 48 15 00 00 40 15 00 00 | 32 15 00 00 2a 15 00 00 |H...@...|2...*...|
|00001050| c6 15 00 00 20 15 00 00 | e6 15 00 00 00 00 00 00 |.... ...|........|
|00001060| 00 00 00 00 be 94 f2 32 | 00 00 00 00 01 00 00 00 |.......2|........|
|00001070| 53 0b 00 00 00 00 00 00 | 00 1e 00 00 00 00 00 00 |S.......|........|
|00001080| be 94 f2 32 00 00 00 00 | 04 00 00 00 10 01 00 00 |...2....|........|
|00001090| 00 00 00 00 54 29 00 00 | 00 00 00 00 be 94 f2 32 |....T)..|.......2|
|000010a0| 00 00 00 00 03 00 00 00 | 50 00 00 00 00 00 00 00 |........|P.......|
|000010b0| 64 2a 00 00 41 6e 63 69 | 6c 6c 61 72 79 20 46 75 |d*..Anci|llary Fu|
|000010c0| 6e 63 74 69 6f 6e 20 44 | 72 69 76 65 72 20 66 6f |nction D|river fo|
|000010d0| 72 20 57 69 6e 73 6f 63 | 6b 00 00 00 61 66 76 78 |r Winsoc|k...afvx|
|000010e0| 64 2e 76 78 64 00 00 00 | 53 79 73 74 65 6d 5c 43 |d.vxd...|System\C|
|000010f0| 75 72 72 65 6e 74 43 6f | 6e 74 72 6f 6c 53 65 74 |urrentCo|ntrolSet|
|00001100| 5c 53 65 72 76 69 63 65 | 73 5c 56 78 44 5c 57 69 |\Service|s\VxD\Wi|
|00001110| 6e 73 6f 63 6b 00 00 00 | 53 79 73 74 65 6d 5c 43 |nsock...|System\C|
|00001120| 75 72 72 65 6e 74 43 6f | 6e 74 72 6f 6c 53 65 74 |urrentCo|ntrolSet|
|00001130| 5c 53 65 72 76 69 63 65 | 73 5c 56 78 44 5c 57 69 |\Service|s\VxD\Wi|
|00001140| 6e 73 6f 63 6b 32 00 00 | 53 79 73 74 65 6d 5c 43 |nsock2..|System\C|
|00001150| 75 72 72 65 6e 74 43 6f | 6e 74 72 6f 6c 53 65 74 |urrentCo|ntrolSet|
|00001160| 5c 53 65 72 76 69 63 65 | 73 5c 57 69 6e 73 6f 63 |\Service|s\Winsoc|
|00001170| 6b 32 00 00 61 64 64 61 | 66 76 78 64 00 00 00 00 |k2..adda|fvxd....|
|00001180| 64 6f 69 74 00 00 00 00 | ff ff ff ff d0 13 00 01 |doit....|........|
|00001190| eb 13 00 01 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011a0| 55 8b ec 83 ec 08 53 56 | 57 8b 5d 10 68 80 11 00 |U.....SV|W.].h...|
|000011b0| 01 8b 3d 54 10 00 01 53 | ff d7 83 c4 08 85 c0 75 |..=T...S|.......u|
|000011c0| 13 68 74 11 00 01 53 ff | d7 83 c4 08 85 c0 0f 84 |.ht...S.|........|
|000011d0| 89 00 00 00 ff 15 18 10 | 00 01 a9 00 00 00 80 74 |........|.......t|
|000011e0| 7c ff 15 18 10 00 01 24 | 03 3c 03 74 70 68 48 11 ||......$|.<.tphH.|
|000011f0| 00 01 be 02 00 00 80 56 | ff 15 00 10 00 01 68 18 |.......V|......h.|
|00001200| 11 00 01 56 ff 15 00 10 | 00 01 68 74 11 00 01 53 |...V....|..ht...S|
|00001210| ff d7 83 c4 08 85 c0 74 | 44 8d 45 f8 8d 4d fc 50 |.......t|D.E..M.P|
|00001220| 33 ff 51 57 68 3f 00 0f | 00 57 57 57 68 e8 10 00 |3.QWh?..|.WWWh...|
|00001230| 01 56 ff 15 04 10 00 01 | 85 c0 75 21 6a 0a 68 dc |.V......|..u!j.h.|
|00001240| 10 00 01 6a 01 57 68 b4 | 10 00 01 ff 75 fc ff 15 |...j.Wh.|....u...|
|00001250| 08 10 00 01 ff 75 fc ff | 15 0c 10 00 01 33 c0 5f |.....u..|.....3._|
|00001260| 5e 5b 8b e5 5d c2 10 00 | cc cc cc cc cc cc cc cc |^[..]...|........|
|00001270| 64 a1 00 00 00 00 55 8b | ec 6a ff 68 88 11 00 01 |d.....U.|.j.h....|
|00001280| 68 62 14 00 01 50 64 89 | 25 00 00 00 00 83 ec 78 |hb...Pd.|%......x|
|00001290| 53 56 57 89 65 e8 c7 45 | fc 00 00 00 00 6a 02 ff |SVW.e..E|.....j..|
|000012a0| 15 24 10 00 01 83 c4 04 | c7 05 2c 20 00 01 ff ff |.$......|.., ....|
|000012b0| ff ff a1 2c 20 00 01 a3 | 30 20 00 01 ff 15 28 10 |..., ...|0 ....(.|
|000012c0| 00 01 8b 0d 20 20 00 01 | 89 08 ff 15 2c 10 00 01 |.... ..|....,...|
|000012d0| 8b 0d 1c 20 00 01 89 08 | a1 38 10 00 01 8b 00 a3 |... ....|.8......|
|000012e0| 34 20 00 01 e8 77 01 00 | 00 83 3d 18 20 00 01 00 |4 ...w..|..=. ...|
|000012f0| 75 0e 68 50 14 00 01 ff | 15 34 10 00 01 83 c4 04 |u.hP....|.4......|
|00001300| e8 2b 01 00 00 68 0c 20 | 00 01 68 08 20 00 01 e8 |.+...h. |..h. ...|
|00001310| 12 01 00 00 83 c4 08 a1 | 14 20 00 01 89 45 d8 8d |........|. ...E..|
|00001320| 45 d8 50 a1 10 20 00 01 | 50 8d 45 cc 50 8d 45 c8 |E.P.. ..|P.E.P.E.|
|00001330| 50 8d 45 c4 50 ff 15 30 | 10 00 01 83 c4 14 68 04 |P.E.P..0|......h.|
|00001340| 20 00 01 68 00 20 00 01 | e8 d9 00 00 00 83 c4 08 | ..h. ..|........|
|00001350| ff 15 40 10 00 01 8b 30 | 8a 06 3c 22 75 16 8a 45 |..@....0|..<"u..E|
|00001360| c0 46 8a 06 84 c0 74 04 | 3c 22 75 f5 80 3e 22 75 |.F....t.|<"u..>"u|
|00001370| 0d 46 eb 0a 3c 20 76 06 | 46 80 3e 20 77 fa 80 3e |.F..< v.|F.> w..>|
|00001380| 00 74 0b 80 3e 20 77 06 | 46 80 3e 00 75 f5 c7 45 |.t..> w.|F.>.u..E|
|00001390| a4 00 00 00 00 8d 85 78 | ff ff ff 50 ff 15 1c 10 |.......x|...P....|
|000013a0| 00 01 f6 45 a4 01 b8 0a | 00 00 00 74 08 8b 45 a8 |...E....|...t..E.|
|000013b0| 25 ff ff 00 00 50 56 6a | 00 6a 00 ff 15 14 10 00 |%....PVj|.j......|
|000013c0| 01 50 e8 d9 fd ff ff 50 | ff 15 44 10 00 01 eb 28 |.P.....P|..D....(|
|000013d0| 8b 45 ec 8b 00 8b 00 89 | 45 e0 8b 45 ec 50 8b 45 |.E......|E..E.P.E|
|000013e0| e0 50 e8 39 00 00 00 83 | c4 08 c3 8b 65 e8 8b 45 |.P.9....|....e..E|
|000013f0| e0 50 ff 15 4c 10 00 01 | 83 c4 04 c7 45 fc ff ff |.P..L...|....E...|
|00001400| ff ff 8b 45 f0 5f 64 a3 | 00 00 00 00 5e 5b 8b e5 |...E._d.|....^[..|
|00001410| 5d c3 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |].......|........|
|00001420| ff 25 48 10 00 01 ff 25 | 3c 10 00 01 cc cc cc cc |.%H....%|<.......|
|00001430| 68 00 00 03 00 68 00 00 | 01 00 e8 29 00 00 00 83 |h....h..|...)....|
|00001440| c4 08 c3 cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00001450| 33 c0 c3 cc cc cc cc cc | cc cc cc cc cc cc cc cc |3.......|........|
|00001460| c3 cc ff 25 50 10 00 01 | ff 25 58 10 00 01 e4 14 |...%P...|.%X.....|
|00001470| 00 00 00 00 00 00 00 00 | 00 00 da 15 00 00 24 10 |........|......$.|
|00001480| 00 00 c0 14 00 00 00 00 | 00 00 00 00 00 00 36 16 |........|......6.|
|00001490| 00 00 00 10 00 00 d4 14 | 00 00 00 00 00 00 00 00 |........|........|
|000014a0| 00 00 78 16 00 00 14 10 | 00 00 00 00 00 00 00 00 |..x.....|........|
|000014b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014c0| 26 16 00 00 14 16 00 00 | 02 16 00 00 f4 15 00 00 |&.......|........|
|000014d0| 00 00 00 00 52 16 00 00 | 44 16 00 00 66 16 00 00 |....R...|D...f...|
|000014e0| 00 00 00 00 b4 15 00 00 | a6 15 00 00 96 15 00 00 |........|........|
|000014f0| 62 15 00 00 72 15 00 00 | 86 15 00 00 56 15 00 00 |b...r...|....V...|
|00001500| 48 15 00 00 40 15 00 00 | 32 15 00 00 2a 15 00 00 |H...@...|2...*...|
|00001510| c6 15 00 00 20 15 00 00 | e6 15 00 00 00 00 00 00 |.... ...|........|
|00001520| c0 02 73 74 72 73 74 72 | 00 00 cf 00 5f 65 78 69 |..strstr|...._exi|
|00001530| 74 00 48 00 5f 58 63 70 | 74 46 69 6c 74 65 72 00 |t.H._Xcp|tFilter.|
|00001540| 44 02 65 78 69 74 00 00 | 67 00 5f 5f 70 5f 5f 61 |D.exit..|g.__p__a|
|00001550| 63 6d 64 6c 6e 00 0b 01 | 5f 69 6e 69 74 74 65 72 |cmdln...|_initter|
|00001560| 6d 00 58 00 5f 5f 67 65 | 74 6d 61 69 6e 61 72 67 |m.X.__ge|tmainarg|
|00001570| 73 00 81 00 5f 5f 73 65 | 74 75 73 65 72 6d 61 74 |s...__se|tusermat|
|00001580| 68 65 72 72 00 00 9a 00 | 5f 61 64 6a 75 73 74 5f |herr....|_adjust_|
|00001590| 66 64 69 76 00 00 69 00 | 5f 5f 70 5f 5f 63 6f 6d |fdiv..i.|__p__com|
|000015a0| 6d 6f 64 65 00 00 6e 00 | 5f 5f 70 5f 5f 66 6d 6f |mode..n.|__p__fmo|
|000015b0| 64 65 00 00 7f 00 5f 5f | 73 65 74 5f 61 70 70 5f |de....__|set_app_|
|000015c0| 74 79 70 65 00 00 c6 00 | 5f 65 78 63 65 70 74 5f |type....|_except_|
|000015d0| 68 61 6e 64 6c 65 72 33 | 00 00 4d 53 56 43 52 54 |handler3|..MSVCRT|
|000015e0| 2e 64 6c 6c 00 00 b3 00 | 5f 63 6f 6e 74 72 6f 6c |.dll....|_control|
|000015f0| 66 70 00 00 17 01 52 65 | 67 43 6c 6f 73 65 4b 65 |fp....Re|gCloseKe|
|00001600| 79 00 41 01 52 65 67 53 | 65 74 56 61 6c 75 65 45 |y.A.RegS|etValueE|
|00001610| 78 41 00 00 1b 01 52 65 | 67 43 72 65 61 74 65 4b |xA....Re|gCreateK|
|00001620| 65 79 45 78 41 00 1e 01 | 52 65 67 44 65 6c 65 74 |eyExA...|RegDelet|
|00001630| 65 4b 65 79 41 00 41 44 | 56 41 50 49 33 32 2e 64 |eKeyA.AD|VAPI32.d|
|00001640| 6c 6c 00 00 4c 01 47 65 | 74 56 65 72 73 69 6f 6e |ll..L.Ge|tVersion|
|00001650| 00 00 fe 00 47 65 74 4d | 6f 64 75 6c 65 48 61 6e |....GetM|oduleHan|
|00001660| 64 6c 65 41 00 00 28 01 | 47 65 74 53 74 61 72 74 |dleA..(.|GetStart|
|00001670| 75 70 49 6e 66 6f 41 00 | 4b 45 52 4e 45 4c 33 32 |upInfoA.|KERNEL32|
|00001680| 2e 64 6c 6c 00 00 00 00 | 00 00 00 00 00 00 00 00 |.dll....|........|
|00001690| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000016f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001700| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001800| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001810| 00 00 00 00 00 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00001820| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000019f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a00| 00 00 00 00 97 8b f2 32 | 00 00 00 00 00 00 00 00 |.......2|........|
|00001a10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c00| 00 10 00 00 6c 00 00 00 | 8c 31 90 31 ad 31 b3 31 |....l...|.1.1.1.1|
|00001c10| c2 31 d6 31 e3 31 ee 31 | fa 31 ff 31 06 32 0b 32 |.1.1.1.1|.1.1.2.2|
|00001c20| 2d 32 34 32 3f 32 47 32 | 50 32 59 32 7c 32 81 32 |-242?2G2|P2Y2|2.2|
|00001c30| a1 32 aa 32 b3 32 b8 32 | be 32 c4 32 cc 32 d2 32 |.2.2.2.2|.2.2.2.2|
|00001c40| d9 32 e0 32 eb 32 f3 32 | f9 32 06 33 0b 33 18 33 |.2.2.2.2|.2.3.3.3|
|00001c50| 24 33 37 33 3f 33 44 33 | 52 33 9e 33 bd 33 ca 33 |$373?3D3|R3.3.3.3|
|00001c60| f4 33 22 34 28 34 64 34 | 6a 34 00 00 00 00 00 00 |.3"4(4d4|j4......|
|00001c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001e00| 4e 00 00 00 20 00 00 00 | 00 00 00 00 20 00 00 00 |N... ...|.... ...|
|00001e10| 00 10 00 00 00 18 00 00 | 00 20 00 00 00 16 00 00 |........|. ......|
|00001e20| 2e 74 65 78 74 00 00 00 | a0 11 00 00 01 00 00 00 |.text...|........|
|00001e30| 03 01 c8 00 00 00 10 00 | 0b 00 00 00 00 00 00 00 |........|........|
|00001e40| 01 00 00 00 2e 72 73 72 | 63 24 30 32 10 30 00 00 |.....rsr|c$02.0..|
|00001e50| 03 00 00 00 03 00 2e 69 | 64 61 74 61 24 36 da 15 |.......i|data$6..|
|00001e60| 00 00 01 00 00 00 03 00 | 00 00 00 00 a5 05 00 00 |........|........|
|00001e70| 28 20 00 00 02 00 00 00 | 03 00 2e 74 65 78 74 00 |( ......|...text.|
|00001e80| 00 00 60 14 00 00 01 00 | 00 00 03 01 01 00 00 00 |..`.....|........|
|00001e90| 00 00 01 00 00 00 00 00 | 00 00 01 00 00 00 2e 74 |........|.......t|
|00001ea0| 65 78 74 00 00 00 50 14 | 00 00 01 00 00 00 03 01 |ext...P.|........|
|00001eb0| 03 00 00 00 00 00 02 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001ec0| 00 00 2e 74 65 78 74 00 | 00 00 30 14 00 00 01 00 |...text.|..0.....|
|00001ed0| 00 00 03 01 13 00 00 00 | 01 00 02 00 00 00 00 00 |........|........|
|00001ee0| 00 00 01 00 00 00 2e 74 | 65 78 74 00 00 00 70 12 |.......t|ext...p.|
|00001ef0| 00 00 01 00 00 00 03 01 | a2 01 00 00 24 00 22 00 |........|....$.".|
|00001f00| 00 00 00 00 00 00 01 00 | 00 00 24 54 38 30 30 32 |........|..$T8002|
|00001f10| 00 00 88 11 00 00 01 00 | 00 00 03 00 2e 69 64 61 |........|.....ida|
|00001f20| 74 61 24 36 36 16 00 00 | 01 00 00 00 03 00 2e 69 |ta$66...|.......i|
|00001f30| 64 61 74 61 24 36 78 16 | 00 00 01 00 00 00 03 00 |data$6x.|........|
|00001f40| 68 65 61 64 65 72 00 00 | 00 00 00 00 fe ff 00 00 |header..|........|
|00001f50| 02 00 00 00 00 00 de 01 | 00 00 00 00 00 00 ff ff |........|........|
|00001f60| 00 00 02 00 00 00 00 00 | 93 01 00 00 00 10 00 00 |........|........|
|00001f70| 01 00 00 00 02 00 00 00 | 00 00 79 01 00 00 04 10 |........|..y.....|
|00001f80| 00 00 01 00 00 00 02 00 | 00 00 00 00 60 01 00 00 |........|....`...|
|00001f90| 08 10 00 00 01 00 00 00 | 02 00 00 00 00 00 4b 01 |........|......K.|
|00001fa0| 00 00 0c 10 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001fb0| 1f 05 00 00 10 10 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001fc0| 00 00 12 02 00 00 14 10 | 00 00 01 00 00 00 02 00 |........|........|
|00001fd0| 00 00 00 00 aa 01 00 00 | 18 10 00 00 01 00 00 00 |........|........|
|00001fe0| 02 00 00 00 00 00 2c 02 | 00 00 1c 10 00 00 01 00 |......,.|........|
|00001ff0| 00 00 02 00 00 00 00 00 | 8b 05 00 00 20 10 00 00 |........|.... ...|
|00002000| 01 00 00 00 02 00 00 00 | 00 00 3f 03 00 00 24 10 |........|..?...$.|
|00002010| 00 00 01 00 00 00 02 00 | 00 00 00 00 11 03 00 00 |........|........|
|00002020| 28 10 00 00 01 00 00 00 | 02 00 00 00 00 00 fd 02 |(.......|........|
|00002030| 00 00 2c 10 00 00 01 00 | 00 00 02 00 00 00 00 00 |..,.....|........|
|00002040| 63 02 00 00 30 10 00 00 | 01 00 00 00 02 00 00 00 |c...0...|........|
|00002050| 00 00 a5 02 00 00 34 10 | 00 00 01 00 00 00 02 00 |......4.|........|
|00002060| 00 00 00 00 df 02 00 00 | 38 10 00 00 01 00 00 00 |........|8.......|
|00002070| 02 00 00 00 00 00 ac 03 | 00 00 3c 10 00 00 01 00 |........|..<.....|
|00002080| 00 00 02 00 00 00 00 00 | 45 02 00 00 40 10 00 00 |........|E...@...|
|00002090| 01 00 00 00 02 00 00 00 | 00 00 06 02 00 00 44 10 |........|......D.|
|000020a0| 00 00 01 00 00 00 02 00 | 00 00 00 00 8c 03 00 00 |........|........|
|000020b0| 48 10 00 00 01 00 00 00 | 02 00 00 00 00 00 ec 01 |H.......|........|
|000020c0| 00 00 4c 10 00 00 01 00 | 00 00 02 00 00 00 00 00 |..L.....|........|
|000020d0| 4d 04 00 00 50 10 00 00 | 01 00 00 00 02 00 00 00 |M...P...|........|
|000020e0| 00 00 be 01 00 00 54 10 | 00 00 01 00 00 00 02 00 |......T.|........|
|000020f0| 00 00 00 00 96 04 00 00 | 58 10 00 00 01 00 00 00 |........|X.......|
|00002100| 02 00 00 00 00 00 7e 04 | 00 00 5c 10 00 00 01 00 |......~.|..\.....|
|00002110| 00 00 02 00 00 00 00 00 | 23 00 00 00 b4 10 00 00 |........|#.......|
|00002120| 01 00 00 00 02 00 00 00 | 00 00 58 00 00 00 dc 10 |........|..X.....|
|00002130| 00 00 01 00 00 00 02 00 | 00 00 00 00 75 00 00 00 |........|....u...|
|00002140| e8 10 00 00 01 00 00 00 | 02 00 00 00 00 00 a8 00 |........|........|
|00002150| 00 00 18 11 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00002160| db 00 00 00 48 11 00 00 | 01 00 00 00 02 00 00 00 |....H...|........|
|00002170| 00 00 0e 01 00 00 74 11 | 00 00 01 00 00 00 02 00 |......t.|........|
|00002180| 00 00 00 00 29 01 00 00 | 80 11 00 00 01 00 00 00 |....)...|........|
|00002190| 02 00 00 00 00 00 17 00 | 00 00 a0 11 00 00 01 00 |........|........|
|000021a0| 20 00 02 00 00 00 00 00 | 04 00 00 00 70 12 00 00 | .......|....p...|
|000021b0| 01 00 20 00 02 00 00 00 | 00 00 f9 01 00 00 20 14 |.. .....|...... .|
|000021c0| 00 00 01 00 20 00 02 00 | 00 00 00 00 58 02 00 00 |.... ...|....X...|
|000021d0| 26 14 00 00 01 00 20 00 | 02 00 00 00 00 00 8f 02 |&..... .|........|
|000021e0| 00 00 30 14 00 00 01 00 | 20 00 02 00 00 00 00 00 |..0.....| .......|
|000021f0| bd 02 00 00 50 14 00 00 | 01 00 20 00 02 00 00 00 |....P...|.. .....|
|00002200| 00 00 c7 02 00 00 60 14 | 00 00 01 00 20 00 02 00 |......`.|.... ...|
|00002210| 00 00 00 00 55 03 00 00 | 62 14 00 00 01 00 20 00 |....U...|b..... .|
|00002220| 02 00 00 00 00 00 cc 03 | 00 00 68 14 00 00 01 00 |........|..h.....|
|00002230| 20 00 02 00 00 00 00 00 | 67 03 00 00 6e 14 00 00 | .......|g...n...|
|00002240| 01 00 00 00 02 00 00 00 | 00 00 ca 04 00 00 82 14 |........|........|
|00002250| 00 00 01 00 00 00 02 00 | 00 00 00 00 47 05 00 00 |........|....G...|
|00002260| 96 14 00 00 01 00 00 00 | 02 00 00 00 00 00 65 04 |........|......e.|
|00002270| 00 00 aa 14 00 00 01 00 | 00 00 02 00 5f 5f 5f 78 |........|....___x|
|00002280| 63 5f 61 00 00 20 00 00 | 02 00 00 00 02 00 5f 5f |c_a.. ..|......__|
|00002290| 5f 78 63 5f 7a 00 04 20 | 00 00 02 00 00 00 02 00 |_xc_z.. |........|
|000022a0| 5f 5f 5f 78 69 5f 61 00 | 08 20 00 00 02 00 00 00 |___xi_a.|. ......|
|000022b0| 02 00 5f 5f 5f 78 69 5f | 7a 00 0c 20 00 00 02 00 |..___xi_|z.. ....|
|000022c0| 00 00 02 00 00 00 00 00 | 78 02 00 00 10 20 00 00 |........|x.... ..|
|000022d0| 02 00 00 00 02 00 00 00 | 00 00 85 02 00 00 14 20 |........|....... |
|000022e0| 00 00 02 00 00 00 02 00 | 00 00 00 00 cc 01 00 00 |........|........|
|000022f0| 18 20 00 00 02 00 00 00 | 02 00 00 00 00 00 f3 02 |. ......|........|
|00002300| 00 00 1c 20 00 00 02 00 | 00 00 02 00 5f 5f 66 6d |... ....|....__fm|
|00002310| 6f 64 65 00 20 20 00 00 | 02 00 00 00 02 00 00 00 |ode. ..|........|
|00002320| 00 00 04 04 00 00 24 20 | 00 00 02 00 00 00 02 00 |......$ |........|
|00002330| 00 00 00 00 32 03 00 00 | 2c 20 00 00 02 00 00 00 |....2...|, ......|
|00002340| 02 00 00 00 00 00 23 03 | 00 00 30 20 00 00 02 00 |......#.|..0 ....|
|00002350| 00 00 02 00 00 00 00 00 | d1 02 00 00 34 20 00 00 |........|....4 ..|
|00002360| 02 00 00 00 02 00 00 00 | 00 00 82 03 00 00 76 98 |........|......v.|
|00002370| 00 00 ff ff 00 00 02 00 | 5f 5f 6c 64 75 73 65 64 |........|__ldused|
|00002380| 76 98 00 00 ff ff 00 00 | 02 00 65 6e 64 00 00 00 |v.......|..end...|
|00002390| 00 00 00 50 00 00 fe ff | 00 00 02 00 b7 05 00 00 |...P....|........|
|000023a0| 5f 57 69 6e 4d 61 69 6e | 43 52 54 53 74 61 72 74 |_WinMain|CRTStart|
|000023b0| 75 70 00 5f 57 69 6e 4d | 61 69 6e 40 31 36 00 3f |up._WinM|ain@16.?|
|000023c0| 3f 5f 43 40 5f 30 43 47 | 40 46 48 50 4a 40 41 6e |?_C@_0CG|@FHPJ@An|
|000023d0| 63 69 6c 6c 61 72 79 3f | 35 46 75 6e 63 74 69 6f |cillary?|5Functio|
|000023e0| 6e 3f 35 44 72 69 76 65 | 72 3f 35 66 6f 72 3f 35 |n?5Drive|r?5for?5|
|000023f0| 57 69 40 00 3f 3f 5f 43 | 40 5f 30 39 4e 41 47 43 |Wi@.??_C|@_09NAGC|
|00002400| 40 61 66 76 78 64 3f 34 | 76 78 64 3f 24 41 41 40 |@afvxd?4|vxd?$AA@|
|00002410| 00 3f 3f 5f 43 40 5f 30 | 43 4f 40 45 47 4c 50 40 |.??_C@_0|CO@EGLP@|
|00002420| 53 79 73 74 65 6d 3f 32 | 43 75 72 72 65 6e 74 43 |System?2|CurrentC|
|00002430| 6f 6e 74 72 6f 6c 53 65 | 74 3f 32 53 65 72 76 69 |ontrolSe|t?2Servi|
|00002440| 63 65 40 00 3f 3f 5f 43 | 40 5f 30 43 50 40 4b 42 |ce@.??_C|@_0CP@KB|
|00002450| 50 49 40 53 79 73 74 65 | 6d 3f 32 43 75 72 72 65 |PI@Syste|m?2Curre|
|00002460| 6e 74 43 6f 6e 74 72 6f | 6c 53 65 74 3f 32 53 65 |ntContro|lSet?2Se|
|00002470| 72 76 69 63 65 40 00 3f | 3f 5f 43 40 5f 30 43 4c |rvice@.?|?_C@_0CL|
|00002480| 40 42 4b 45 4e 40 53 79 | 73 74 65 6d 3f 32 43 75 |@BKEN@Sy|stem?2Cu|
|00002490| 72 72 65 6e 74 43 6f 6e | 74 72 6f 6c 53 65 74 3f |rrentCon|trolSet?|
|000024a0| 32 53 65 72 76 69 63 65 | 40 00 3f 3f 5f 43 40 5f |2Service|@.??_C@_|
|000024b0| 30 38 48 4b 4c 4b 40 61 | 64 64 61 66 76 78 64 3f |08HKLK@a|ddafvxd?|
|000024c0| 24 41 41 40 00 3f 3f 5f | 43 40 5f 30 34 4b 4b 43 |$AA@.??_|C@_04KKC|
|000024d0| 42 40 64 6f 69 74 3f 24 | 41 41 40 00 5f 67 68 77 |B@doit?$|AA@._ghw|
|000024e0| 6e 64 45 64 69 74 00 5f | 5f 69 6d 70 5f 5f 52 65 |ndEdit._|_imp__Re|
|000024f0| 67 43 6c 6f 73 65 4b 65 | 79 40 34 00 5f 5f 69 6d |gCloseKe|y@4.__im|
|00002500| 70 5f 5f 52 65 67 53 65 | 74 56 61 6c 75 65 45 78 |p__RegSe|tValueEx|
|00002510| 41 40 32 34 00 5f 5f 69 | 6d 70 5f 5f 52 65 67 43 |A@24.__i|mp__RegC|
|00002520| 72 65 61 74 65 4b 65 79 | 45 78 41 40 33 36 00 5f |reateKey|ExA@36._|
|00002530| 5f 69 6d 70 5f 5f 52 65 | 67 44 65 6c 65 74 65 4b |_imp__Re|gDeleteK|
|00002540| 65 79 41 40 38 00 5f 5f | 69 6d 70 5f 5f 47 65 74 |eyA@8.__|imp__Get|
|00002550| 56 65 72 73 69 6f 6e 40 | 30 00 5f 5f 69 6d 70 5f |Version@|0.__imp_|
|00002560| 5f 73 74 72 73 74 72 00 | 5f 5f 5f 64 65 66 61 75 |_strstr.|___defau|
|00002570| 6c 74 6d 61 74 68 65 72 | 72 00 5f 5f 65 78 63 65 |ltmather|r.__exce|
|00002580| 70 74 5f 6c 69 73 74 00 | 5f 5f 69 6d 70 5f 5f 5f |pt_list.|__imp___|
|00002590| 65 78 69 74 00 5f 5f 58 | 63 70 74 46 69 6c 74 65 |exit.__X|cptFilte|
|000025a0| 72 00 5f 5f 69 6d 70 5f | 5f 65 78 69 74 00 5f 5f |r.__imp_|_exit.__|
|000025b0| 69 6d 70 5f 5f 47 65 74 | 4d 6f 64 75 6c 65 48 61 |imp__Get|ModuleHa|
|000025c0| 6e 64 6c 65 41 40 34 00 | 5f 5f 69 6d 70 5f 5f 47 |ndleA@4.|__imp__G|
|000025d0| 65 74 53 74 61 72 74 75 | 70 49 6e 66 6f 41 40 34 |etStartu|pInfoA@4|
|000025e0| 00 5f 5f 69 6d 70 5f 5f | 5f 5f 70 5f 5f 61 63 6d |.__imp__|__p__acm|
|000025f0| 64 6c 6e 00 5f 5f 69 6e | 69 74 74 65 72 6d 00 5f |dln.__in|itterm._|
|00002600| 5f 69 6d 70 5f 5f 5f 5f | 67 65 74 6d 61 69 6e 61 |_imp____|getmaina|
|00002610| 72 67 73 00 5f 5f 64 6f | 77 69 6c 64 63 61 72 64 |rgs.__do|wildcard|
|00002620| 00 5f 5f 6e 65 77 6d 6f | 64 65 00 5f 5f 73 65 74 |.__newmo|de.__set|
|00002630| 64 65 66 61 75 6c 74 70 | 72 65 63 69 73 69 6f 6e |defaultp|recision|
|00002640| 00 5f 5f 69 6d 70 5f 5f | 5f 5f 73 65 74 75 73 65 |.__imp__|__setuse|
|00002650| 72 6d 61 74 68 65 72 72 | 00 5f 5f 6d 61 74 68 65 |rmatherr|.__mathe|
|00002660| 72 72 00 5f 5f 73 65 74 | 61 72 67 76 00 5f 5f 61 |rr.__set|argv.__a|
|00002670| 64 6a 75 73 74 5f 66 64 | 69 76 00 5f 5f 69 6d 70 |djust_fd|iv.__imp|
|00002680| 5f 5f 5f 61 64 6a 75 73 | 74 5f 66 64 69 76 00 5f |___adjus|t_fdiv._|
|00002690| 5f 63 6f 6d 6d 6f 64 65 | 00 5f 5f 69 6d 70 5f 5f |_commode|.__imp__|
|000026a0| 5f 5f 70 5f 5f 63 6f 6d | 6d 6f 64 65 00 5f 5f 69 |__p__com|mode.__i|
|000026b0| 6d 70 5f 5f 5f 5f 70 5f | 5f 66 6d 6f 64 65 00 5f |mp____p_|_fmode._|
|000026c0| 5f 5f 6f 6e 65 78 69 74 | 62 65 67 69 6e 00 5f 5f |__onexit|begin.__|
|000026d0| 5f 6f 6e 65 78 69 74 65 | 6e 64 00 5f 5f 69 6d 70 |_onexite|nd.__imp|
|000026e0| 5f 5f 5f 5f 73 65 74 5f | 61 70 70 5f 74 79 70 65 |____set_|app_type|
|000026f0| 00 5f 5f 65 78 63 65 70 | 74 5f 68 61 6e 64 6c 65 |.__excep|t_handle|
|00002700| 72 33 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |r3.__IMP|ORT_DESC|
|00002710| 52 49 50 54 4f 52 5f 4d | 53 56 43 52 54 00 5f 5f |RIPTOR_M|SVCRT.__|
|00002720| 66 6c 74 75 73 65 64 00 | 5f 5f 69 6d 70 5f 5f 5f |fltused.|__imp___|
|00002730| 58 63 70 74 46 69 6c 74 | 65 72 00 5f 5f 5f 70 5f |XcptFilt|er.___p_|
|00002740| 5f 61 63 6d 64 6c 6e 00 | 5f 5f 69 6d 70 5f 5f 5f |_acmdln.|__imp___|
|00002750| 69 6e 69 74 74 65 72 6d | 00 5f 5f 5f 67 65 74 6d |initterm|.___getm|
|00002760| 61 69 6e 61 72 67 73 00 | 5f 5f 63 6f 6e 74 72 6f |ainargs.|__contro|
|00002770| 6c 66 70 00 5f 5f 5f 73 | 65 74 75 73 65 72 6d 61 |lfp.___s|etuserma|
|00002780| 74 68 65 72 72 00 5f 5f | 5f 70 5f 5f 63 6f 6d 6d |therr.__|_p__comm|
|00002790| 6f 64 65 00 5f 5f 5f 70 | 5f 5f 66 6d 6f 64 65 00 |ode.___p|__fmode.|
|000027a0| 5f 5f 5f 77 69 6e 33 32 | 73 66 6c 61 67 00 5f 5f |___win32|sflag.__|
|000027b0| 5f 64 6c 6c 6f 6e 65 78 | 69 74 00 5f 5f 69 6d 70 |_dllonex|it.__imp|
|000027c0| 5f 5f 5f 6f 6e 65 78 69 | 74 00 5f 5f 69 6d 70 5f |___onexi|t.__imp_|
|000027d0| 5f 53 6c 65 65 70 40 34 | 00 5f 5f 5f 73 65 74 5f |_Sleep@4|.___set_|
|000027e0| 61 70 70 5f 74 79 70 65 | 00 5f 5f 69 6d 70 5f 5f |app_type|.__imp__|
|000027f0| 5f 65 78 63 65 70 74 5f | 68 61 6e 64 6c 65 72 33 |_except_|handler3|
|00002800| 00 5f 5f 4e 55 4c 4c 5f | 49 4d 50 4f 52 54 5f 44 |.__NULL_|IMPORT_D|
|00002810| 45 53 43 52 49 50 54 4f | 52 00 7f 4d 53 56 43 52 |ESCRIPTO|R..MSVCR|
|00002820| 54 5f 4e 55 4c 4c 5f 54 | 48 55 4e 4b 5f 44 41 54 |T_NULL_T|HUNK_DAT|
|00002830| 41 00 5f 5f 69 6d 70 5f | 5f 5f 63 6f 6e 74 72 6f |A.__imp_|__contro|
|00002840| 6c 66 70 00 5f 5f 69 6d | 70 5f 5f 5f 5f 64 6c 6c |lfp.__im|p____dll|
|00002850| 6f 6e 65 78 69 74 00 5f | 52 65 67 43 6c 6f 73 65 |onexit._|RegClose|
|00002860| 4b 65 79 40 34 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |Key@4.__|IMPORT_D|
|00002870| 45 53 43 52 49 50 54 4f | 52 5f 41 44 56 41 50 49 |ESCRIPTO|R_ADVAPI|
|00002880| 33 32 00 5f 52 65 67 53 | 65 74 56 61 6c 75 65 45 |32._RegS|etValueE|
|00002890| 78 41 40 32 34 00 5f 52 | 65 67 43 72 65 61 74 65 |xA@24._R|egCreate|
|000028a0| 4b 65 79 45 78 41 40 33 | 36 00 5f 52 65 67 44 65 |KeyExA@3|6._RegDe|
|000028b0| 6c 65 74 65 4b 65 79 41 | 40 38 00 7f 41 44 56 41 |leteKeyA|@8..ADVA|
|000028c0| 50 49 33 32 5f 4e 55 4c | 4c 5f 54 48 55 4e 4b 5f |PI32_NUL|L_THUNK_|
|000028d0| 44 41 54 41 00 5f 47 65 | 74 56 65 72 73 69 6f 6e |DATA._Ge|tVersion|
|000028e0| 40 30 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |@0.__IMP|ORT_DESC|
|000028f0| 52 49 50 54 4f 52 5f 4b | 45 52 4e 45 4c 33 32 00 |RIPTOR_K|ERNEL32.|
|00002900| 5f 47 65 74 4d 6f 64 75 | 6c 65 48 61 6e 64 6c 65 |_GetModu|leHandle|
|00002910| 41 40 34 00 5f 47 65 74 | 53 74 61 72 74 75 70 49 |A@4._Get|StartupI|
|00002920| 6e 66 6f 41 40 34 00 7f | 4b 45 52 4e 45 4c 33 32 |nfoA@4..|KERNEL32|
|00002930| 5f 4e 55 4c 4c 5f 54 48 | 55 4e 4b 5f 44 41 54 41 |_NULL_TH|UNK_DATA|
|00002940| 00 5f 6f 6e 65 78 69 74 | 66 6c 61 67 24 53 37 38 |._onexit|flag$S78|
|00002950| 33 30 00 00 01 00 00 00 | 10 01 00 00 00 00 00 00 |30......|........|
|00002960| 2e 5c 69 33 38 36 5c 73 | 69 6d 70 6c 65 2e 65 78 |.\i386\s|imple.ex|
|00002970| 65 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |e.......|........|
|00002980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002a60| 00 00 00 00 a0 11 00 00 | c8 00 00 00 03 00 00 00 |........|........|
|00002a70| 04 00 0c d3 d0 13 00 00 | 1b 00 00 00 00 00 00 00 |........|........|
|00002a80| 00 00 00 08 30 14 00 00 | 13 00 00 00 00 00 00 00 |....0...|........|
|00002a90| 00 00 00 00 50 14 00 00 | 03 00 00 00 00 00 00 00 |....P...|........|
|00002aa0| 01 00 00 00 60 14 00 00 | 01 00 00 00 00 00 00 00 |....`...|........|
|00002ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+