/ Out-Of-The-Net
/ Out-Of-The-Net.iso / eng / packages / msn12isk.exe ![]() | < prev | next > |
MS-DOS/Windows or OS/2 Executable | 1996-05-22 | 3.5 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
1% | dexvert | CExe compressed Win32 executable (archive/cExeCompressedWin32Executable) | ext | Unsupported |
1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
1% | dexvert | CRYPTEXE Proterctd (archive/cryptexeProtected) | ext | Unsupported |
1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
1% | dexvert | DaRKSToP Proterctd (archive/darkstopProtected) | ext | Unsupported |
1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
1% | dexvert | Pack MasterPacked (archive/packMasterPacked) | ext | Unsupported |
1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
100% | file | PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections | default | |
99% | file | data | default | |
25% | TrID | Win32 Dynamic Link Library (generic) | default | |
19% | TrID | Win16 NE executable (generic) | default | |
17% | TrID | Win32 Executable (generic) | default | |
7% | TrID | Win16/32 Executable Delphi generic | default (weak) | |
7% | TrID | Windows Icons Library (generic) | default (weak) | |
100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
100% | binwalkID | Microsoft executable, portable (PE) | default | |
100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 04 00 | 77 fe 34 31 00 00 00 00 |PE..L...|w.41....|
|00000090| 00 00 00 00 e0 00 0e 01 | 0b 01 02 32 00 04 00 00 |........|...2....|
|000000a0| 00 06 00 00 00 00 00 00 | 62 12 00 00 00 10 00 00 |........|b.......|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 01 00 00 00 00 00 00 00 | 03 00 0a 00 00 00 00 00 |........|........|
|000000d0| 00 50 00 00 00 04 00 00 | 00 00 00 00 02 00 00 00 |.P......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 30 00 00 c6 01 00 00 | 00 00 00 00 00 00 00 00 |.0......|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 40 00 00 70 00 00 00 | 00 00 00 00 00 00 00 00 |.@..p...|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| 20 03 00 00 00 10 00 00 | 00 04 00 00 00 04 00 00 | .......|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 64 61 74 61 00 00 00 | 26 01 00 00 00 20 00 00 |.data...|&.... ..|
|000001b0| 00 02 00 00 00 08 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 c0 | 2e 69 64 61 74 61 00 00 |....@...|.idata..|
|000001d0| c6 01 00 00 00 30 00 00 | 00 02 00 00 00 0a 00 00 |.....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 2e 72 65 6c 6f 63 00 00 | 98 00 00 00 00 40 00 00 |.reloc..|.....@..|
|00000200| 00 02 00 00 00 0c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 55 8b ec 81 ec 10 02 00 | 00 56 8d 8d f0 fd ff ff |U.......|.V......|
|00000410| ff 75 08 51 ff 15 b0 30 | 40 00 68 1c 21 40 00 8d |.u.Q...0|@.h.!@..|
|00000420| 8d f0 fd ff ff 51 8b 35 | a8 30 40 00 ff d6 ff 35 |.....Q.5|.0@....5|
|00000430| 18 20 40 00 8d 85 f0 fd | ff ff 50 ff d6 8d 4d fc |. @.....|..P...M.|
|00000440| 51 ff 35 10 20 40 00 68 | 02 00 00 80 ff 15 94 30 |Q.5. @.h|.......0|
|00000450| 40 00 85 c0 74 07 33 c0 | e9 82 00 00 00 8d 45 f8 |@...t.3.|......E.|
|00000460| 8d 8d f4 fe ff ff c7 45 | f8 04 01 00 00 50 51 6a |.......E|.....PQj|
|00000470| 00 6a 00 ff 35 14 20 40 | 00 ff 75 fc ff 15 90 30 |.j..5. @|..u....0|
|00000480| 40 00 ff 75 fc 85 c0 74 | 0a ff 15 9c 30 40 00 33 |@..u...t|....0@.3|
|00000490| c0 eb 4c ff 15 9c 30 40 | 00 68 04 21 40 00 8d 8d |..L...0@|.h.!@...|
|000004a0| f4 fe ff ff 51 ff d6 ff | 35 18 20 40 00 8d 95 f4 |....Q...|5. @....|
|000004b0| fe ff ff 52 ff d6 68 04 | 01 00 00 8d 8d f4 fe ff |...R..h.|........|
|000004c0| ff 51 51 ff 15 a4 30 40 | 00 6a 00 8d 8d f4 fe ff |.QQ...0@|.j......|
|000004d0| ff 51 8d 95 f0 fd ff ff | 52 ff 15 ac 30 40 00 5e |.Q......|R...0@.^|
|000004e0| 8b e5 5d c3 55 8b ec 83 | ec 04 53 8d 45 fc 56 57 |..].U...|..S.E.VW|
|000004f0| 50 ff 35 00 20 40 00 68 | 02 00 00 80 ff 15 94 30 |P.5. @.h|.......0|
|00000500| 40 00 85 c0 75 6a 8b 35 | 0c 20 40 00 8b 3d b4 30 |@...uj.5|. @..=.0|
|00000510| 40 00 56 ff d7 40 50 56 | 6a 01 8b 35 98 30 40 00 |@.V..@PV|j..5.0@.|
|00000520| 6a 00 ff 35 04 20 40 00 | ff 75 fc ff d6 85 c0 74 |j..5. @.|.u.....t|
|00000530| 0d ff 75 fc ff 15 9c 30 | 40 00 33 c0 eb 37 8b 1d |..u....0|@.3..7..|
|00000540| 20 20 40 00 53 ff d7 40 | 50 53 6a 01 6a 00 ff 35 | @.S..@|PSj.j..5|
|00000550| 08 20 40 00 ff 75 fc ff | d6 ff 75 fc 85 c0 74 0a |. @..u..|..u...t.|
|00000560| ff 15 9c 30 40 00 33 c0 | eb 0b ff 15 9c 30 40 00 |...0@.3.|.....0@.|
|00000570| b8 01 00 00 00 5f 5e 5b | 8b e5 5d c3 55 8b ec 81 |....._^[|..].U...|
|00000580| ec 08 02 00 00 53 8d 85 | fc fe ff ff 56 57 68 04 |.....S..|....VWh.|
|00000590| 01 00 00 50 ff 15 b8 30 | 40 00 68 20 21 40 00 8d |...P...0|@.h !@..|
|000005a0| 8d fc fe ff ff 51 8b 35 | a8 30 40 00 ff d6 8d 8d |.....Q.5|.0@.....|
|000005b0| fc fe ff ff 8d 85 f8 fd | ff ff 51 8b 1d b0 30 40 |........|..Q...0@|
|000005c0| 00 50 ff d3 ff 35 20 20 | 40 00 8d 85 fc fe ff ff |.P...5 |@.......|
|000005d0| 50 ff d6 ff 35 24 20 40 | 00 8d 95 f8 fd ff ff 52 |P...5$ @|.......R|
|000005e0| ff d6 6a 00 8d 8d f8 fd | ff ff 51 8d 95 fc fe ff |..j.....|..Q.....|
|000005f0| ff 52 8b 3d ac 30 40 00 | ff d7 8d 8d fc fe ff ff |.R.=.0@.|........|
|00000600| 8d 85 f8 fd ff ff 51 50 | ff d3 ff 75 08 8d 95 fc |......QP|...u....|
|00000610| fe ff ff 52 ff d3 68 1c | 21 40 00 8d 8d fc fe ff |...R..h.|!@......|
|00000620| ff 51 ff d6 ff 35 1c 20 | 40 00 8d 95 fc fe ff ff |.Q...5. |@.......|
|00000630| 52 ff d6 6a 00 8d 8d f8 | fd ff ff 51 8d 95 fc fe |R..j....|...Q....|
|00000640| ff ff 52 ff d7 83 f8 01 | 1b c0 40 5f 5e 5b 8b e5 |..R.....|..@_^[..|
|00000650| 5d c3 56 8b 74 24 08 56 | ff 15 bc 30 40 00 8b c6 |].V.t$.V|...0@...|
|00000660| 5e c3 55 8b ec 81 ec 04 | 01 00 00 56 8d 85 fc fe |^.U.....|...V....|
|00000670| ff ff 68 04 01 00 00 50 | 6a 00 ff 15 c0 30 40 00 |..h....P|j....0@.|
|00000680| 85 c0 75 07 6a 01 e9 86 | 00 00 00 8d 85 fc fe ff |..u.j...|........|
|00000690| ff 50 ff 15 b4 30 40 00 | 8d 84 05 fb fe ff ff 8d |.P...0@.|........|
|000006a0| 8d fc fe ff ff 3b c1 76 | 1f 8b 35 c8 30 40 00 80 |.....;.v|..5.0@..|
|000006b0| 38 5c 74 1d 50 8d 8d fc | fe ff ff 51 ff d6 8d 8d |8\t.P...|...Q....|
|000006c0| fc fe ff ff 3b c1 77 e7 | 80 38 5c 74 04 6a 02 eb |....;.w.|.8\t.j..|
|000006d0| 40 c6 00 00 8d 85 fc fe | ff ff 50 e8 20 fd ff ff |@.......|..P. ...|
|000006e0| 83 c4 04 85 c0 75 04 6a | 03 eb 26 e8 f4 fd ff ff |.....u.j|..&.....|
|000006f0| 85 c0 75 04 6a 04 eb 19 | 8d 85 fc fe ff ff 50 e8 |..u.j...|......P.|
|00000700| 78 fe ff ff 83 c4 04 85 | c0 75 04 6a 05 eb 02 6a |x.......|.u.j...j|
|00000710| 00 e8 3c ff ff ff 83 c4 | 04 5e 8b e5 5d c2 10 00 |..<.....|.^..]...|
|00000720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| b4 20 40 00 a8 20 40 00 | a4 20 40 00 a0 20 40 00 |. @.. @.|. @.. @.|
|00000810| 74 20 40 00 64 20 40 00 | 54 20 40 00 44 20 40 00 |t @.d @.|T @.D @.|
|00000820| 38 20 40 00 28 20 40 00 | 4d 4f 53 31 30 35 2d 53 |8 @.( @.|MOS105-S|
|00000830| 2e 49 4e 46 00 00 00 00 | 4d 4f 53 31 30 35 2e 49 |.INF....|MOS105.I|
|00000840| 4e 46 00 00 4d 53 4e 31 | 32 49 53 4b 2e 49 4e 46 |NF..MSN1|2ISK.INF|
|00000850| 00 00 00 00 4d 53 4e 31 | 32 49 53 4b 2e 43 41 42 |....MSN1|2ISK.CAB|
|00000860| 00 00 00 00 50 72 6f 67 | 72 61 6d 46 69 6c 65 73 |....Prog|ramFiles|
|00000870| 44 69 72 00 53 4f 46 54 | 57 41 52 45 5c 4d 69 63 |Dir.SOFT|WARE\Mic|
|00000880| 72 6f 73 6f 66 74 5c 57 | 69 6e 64 6f 77 73 5c 43 |rosoft\W|indows\C|
|00000890| 75 72 72 65 6e 74 56 65 | 72 73 69 6f 6e 00 00 00 |urrentVe|rsion...|
|000008a0| 30 00 00 00 49 4e 46 00 | 49 6e 73 74 61 6c 6c 65 |0...INF.|Installe|
|000008b0| 64 00 00 00 53 4f 46 54 | 57 41 52 45 5c 4d 69 63 |d...SOFT|WARE\Mic|
|000008c0| 72 6f 73 6f 66 74 5c 57 | 69 6e 64 6f 77 73 5c 43 |rosoft\W|indows\C|
|000008d0| 75 72 72 65 6e 74 56 65 | 72 73 69 6f 6e 5c 53 65 |urrentVe|rsion\Se|
|000008e0| 74 75 70 5c 4f 70 74 69 | 6f 6e 61 6c 43 6f 6d 70 |tup\Opti|onalComp|
|000008f0| 6f 6e 65 6e 74 73 5c 4d | 53 4e 65 74 77 6f 72 6b |onents\M|SNetwork|
|00000900| 31 30 35 00 5c 54 68 65 | 20 4d 69 63 72 6f 73 6f |105.\The| Microso|
|00000910| 66 74 20 4e 65 74 77 6f | 72 6b 5c 00 5c 00 00 00 |ft Netwo|rk\.\...|
|00000920| 5c 49 4e 46 5c 00 00 00 | 00 00 00 00 00 00 00 00 |\INF\...|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 50 30 00 00 00 00 00 00 | 00 00 00 00 12 31 00 00 |P0......|.....1..|
|00000a10| 90 30 00 00 64 30 00 00 | 00 00 00 00 00 00 00 00 |.0..d0..|........|
|00000a20| a0 31 00 00 a4 30 00 00 | 88 30 00 00 00 00 00 00 |.1...0..|.0......|
|00000a30| 00 00 00 00 ba 31 00 00 | c8 30 00 00 00 00 00 00 |.....1..|.0......|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| de 30 00 00 f2 30 00 00 | 00 31 00 00 d0 30 00 00 |.0...0..|.1...0..|
|00000a60| 00 00 00 00 2c 31 00 00 | 40 31 00 00 20 31 00 00 |....,1..|@1.. 1..|
|00000a70| 4c 31 00 00 58 31 00 00 | 64 31 00 00 7c 31 00 00 |L1..X1..|d1..|1..|
|00000a80| 8a 31 00 00 00 00 00 00 | ae 31 00 00 00 00 00 00 |.1......|.1......|
|00000a90| de 30 00 00 f2 30 00 00 | 00 31 00 00 d0 30 00 00 |.0...0..|.1...0..|
|00000aa0| 00 00 00 00 2c 31 00 00 | 40 31 00 00 20 31 00 00 |....,1..|@1.. 1..|
|00000ab0| 4c 31 00 00 58 31 00 00 | 64 31 00 00 7c 31 00 00 |L1..X1..|d1..|1..|
|00000ac0| 8a 31 00 00 00 00 00 00 | ae 31 00 00 00 00 00 00 |.1......|.1......|
|00000ad0| c2 00 52 65 67 43 6c 6f | 73 65 4b 65 79 00 e1 00 |..RegClo|seKey...|
|00000ae0| 52 65 67 51 75 65 72 79 | 56 61 6c 75 65 45 78 41 |RegQuery|ValueExA|
|00000af0| 00 00 d8 00 52 65 67 4f | 70 65 6e 4b 65 79 41 00 |....RegO|penKeyA.|
|00000b00| ec 00 52 65 67 53 65 74 | 56 61 6c 75 65 45 78 41 |..RegSet|ValueExA|
|00000b10| 00 00 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 00 |..ADVAPI|32.dll..|
|00000b20| 22 00 43 6f 70 79 46 69 | 6c 65 41 00 12 01 47 65 |".CopyFi|leA...Ge|
|00000b30| 74 53 68 6f 72 74 50 61 | 74 68 4e 61 6d 65 41 00 |tShortPa|thNameA.|
|00000b40| 66 02 6c 73 74 72 63 61 | 74 41 00 00 6f 02 6c 73 |f.lstrca|tA..o.ls|
|00000b50| 74 72 63 70 79 41 00 00 | 75 02 6c 73 74 72 6c 65 |trcpyA..|u.lstrle|
|00000b60| 6e 41 00 00 3c 01 47 65 | 74 57 69 6e 64 6f 77 73 |nA..<.Ge|tWindows|
|00000b70| 44 69 72 65 63 74 6f 72 | 79 41 00 00 62 00 45 78 |Director|yA..b.Ex|
|00000b80| 69 74 50 72 6f 63 65 73 | 73 00 e9 00 47 65 74 4d |itProces|s...GetM|
|00000b90| 6f 64 75 6c 65 46 69 6c | 65 4e 61 6d 65 41 00 00 |oduleFil|eNameA..|
|00000ba0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 00 21 00 |KERNEL32|.dll..!.|
|00000bb0| 43 68 61 72 50 72 65 76 | 41 00 55 53 45 52 33 32 |CharPrev|A.USER32|
|00000bc0| 2e 64 6c 6c 00 00 00 00 | 00 00 00 00 00 00 00 00 |.dll....|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 10 00 00 54 00 00 00 | 16 30 1b 30 28 30 30 30 |....T...|.0.0(000|
|00000c10| 43 30 4e 30 75 30 7e 30 | 8b 30 95 30 9a 30 a9 30 |C0N0u0~0|.0.0.0.0|
|00000c20| c5 30 db 30 f3 30 fe 30 | 08 31 0e 31 1c 31 24 31 |.0.0.0.0|.1.1.1$1|
|00000c30| 36 31 40 31 50 31 62 31 | 6c 31 96 31 9b 31 a8 31 |61@1P1b1|l1.1.1.1|
|00000c40| bd 31 c6 31 d5 31 f4 31 | 17 32 26 32 5a 32 7c 32 |.1.1.1.1|.2&2Z2|2|
|00000c50| 94 32 ab 32 00 20 00 00 | 1c 00 00 00 00 30 04 30 |.2.2. ..|.....0.0|
|00000c60| 08 30 0c 30 10 30 14 30 | 18 30 1c 30 20 30 24 30 |.0.0.0.0|.0.0 0$0|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+