/ QBasic & Borland Pascal & C
/ Delphi5.iso / Basic / Visual Basic.60 / COMMON / TOOLS / VB / MSAGENT / INSTALL / ACE.EXE / aceinst.exe ![]() | < prev | next > |
MS-DOS/Windows or OS/2 Executable | 1997-10-29 | 3.0 KB |
Confidence | Program | Detection | Match Type | Support |
---|---|---|---|---|
100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
1% | dexvert | CRYPTEXE Proterctd (archive/cryptexeProtected) | ext | Unsupported |
1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
1% | dexvert | DaRKSToP Proterctd (archive/darkstopProtected) | ext | Unsupported |
1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
1% | dexvert | Pack MasterPacked (archive/packMasterPacked) | ext | Unsupported |
1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
1% | dexvert | Shrinker Packed (archive/shrinkerPacked) | ext | Unsupported |
1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
100% | file | PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections | default | |
99% | file | data | default | |
27% | TrID | Win32 Dynamic Link Library (generic) | default | |
20% | TrID | Win16 NE executable (generic) | default | |
18% | TrID | Win32 Executable (generic) | default | |
8% | TrID | Windows Icons Library (generic) | default (weak) | |
8% | TrID | OS/2 Executable (generic) | default | |
100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
100% | binwalkID | Microsoft executable, portable (PE) | default | |
100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 03 00 | 5c 3f 82 33 00 00 00 00 |PE..L...|\?.3....|
|00000090| 00 00 00 00 e0 00 0f 01 | 0b 01 05 00 00 06 00 00 |........|........|
|000000a0| 00 04 00 00 00 00 00 00 | 47 10 00 00 00 10 00 00 |........|G.......|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 40 00 00 00 02 00 00 | 00 00 00 00 02 00 00 00 |.@......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 30 00 00 3c 00 00 00 | 00 00 00 00 00 00 00 00 |.0..<...|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 5c 30 00 00 20 00 00 00 |........|\0.. ...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| 28 05 00 00 00 10 00 00 | 00 06 00 00 00 02 00 00 |(.......|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 64 61 74 61 00 00 00 | 80 00 00 00 00 20 00 00 |.data...|..... ..|
|000001b0| 00 02 00 00 00 08 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 c0 | 2e 69 64 61 74 61 00 00 |....@...|.idata..|
|000001d0| 00 01 00 00 00 30 00 00 | 00 02 00 00 00 0a 00 00 |.....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 55 8b ec 81 ec 40 01 00 | 00 8d 85 c0 fe ff ff 50 |U....@..|.......P|
|00000210| ff 75 08 ff 15 74 30 40 | 00 83 f8 ff 74 25 8d 85 |.u...t0@|....t%..|
|00000220| ec fe ff ff 50 ff 75 0c | e8 03 02 00 00 59 59 68 |....P.u.|.....YYh|
|00000230| 00 20 40 00 ff 75 0c e8 | f4 01 00 00 59 59 6a 01 |. @..u..|....YYj.|
|00000240| 58 c9 c3 33 c0 c9 c3 55 | 8b ec 81 ec a8 02 00 00 |X..3...U|........|
|00000250| 53 56 57 6a 0b 59 be 44 | 20 40 00 8d bd 58 ff ff |SVWj.Y.D| @...X..|
|00000260| ff 8d 45 fc f3 a5 a4 be | 30 20 40 00 8d 7d cc a5 |..E.....|0 @..}..|
|00000270| a5 a5 a5 a4 8b 35 5c 30 | 40 00 bf 3f 00 0f 00 33 |.....5\0|@..?...3|
|00000280| db 50 57 8d 85 58 ff ff | ff 53 50 68 00 00 00 80 |.PW..X..|.SPh....|
|00000290| 89 5d fc ff d6 85 c0 74 | 3f 6a 10 8d 45 e0 53 50 |.].....t|?j..E.SP|
|000002a0| e8 2b 04 00 00 83 c4 0c | 8d 45 88 6a 44 53 50 e8 |.+......|.E.jDSP.|
|000002b0| 1c 04 00 00 83 c4 0c 8d | 45 e0 c7 45 88 44 00 00 |........|E..E.D..|
|000002c0| 00 50 8d 45 88 50 53 53 | 6a 20 53 53 8d 45 cc 53 |.P.E.PSS|j SS.E.S|
|000002d0| 50 53 ff 15 70 30 40 00 | 39 5d fc 74 09 ff 75 fc |PS..p0@.|9].t..u.|
|000002e0| ff 15 60 30 40 00 8d 45 | fc 50 57 53 68 14 20 40 |..`0@..E|.PWSh. @|
|000002f0| 00 68 02 00 00 80 ff d6 | 85 c0 0f 85 07 01 00 00 |.h......|........|
|00000300| 8d 45 f4 c7 45 f4 00 01 | 00 00 50 8d 85 58 fe ff |.E..E...|..P..X..|
|00000310| ff 50 8d 45 f0 50 53 68 | 08 20 40 00 ff 75 fc ff |.P.E.PSh|. @..u..|
|00000320| 15 68 30 40 00 85 c0 0f | 85 da 00 00 00 6a 02 8d |.h0@....|.....j..|
|00000330| 85 59 fe ff ff 68 04 20 | 40 00 50 e8 50 03 00 00 |.Y...h. |@.P.P...|
|00000340| 83 c4 0c 85 c0 0f 85 bc | 00 00 00 6a 03 58 89 45 |........|...j.X.E|
|00000350| f4 50 8d 85 58 fe ff ff | 50 8d 85 58 fd ff ff 50 |.P..X...|P..X...P|
|00000360| e8 2b 02 00 00 8b 45 f4 | 83 c4 0c bf ff 00 00 00 |.+....E.|........|
|00000370| 8d b4 05 58 fe ff ff 88 | 9c 05 58 fd ff ff 38 1e |...X....|..X...8.|
|00000380| 74 56 89 5d f8 8a 06 3c | 5c 75 25 8d 85 58 fd ff |tV.]...<|\u%..X..|
|00000390| ff 88 1e 50 8d 85 58 fe | ff ff 50 e8 60 fe ff ff |...P..X.|..P.`...|
|000003a0| 59 85 c0 59 74 61 38 5e | 01 c6 06 5c 74 2a eb 04 |Y..Yta8^|...\t*..|
|000003b0| 3a c3 74 0b 46 ff 45 f8 | 39 7d f8 72 c8 eb 19 8d |:.t.F.E.|9}.r....|
|000003c0| 85 58 fd ff ff 50 8d 85 | 58 fe ff ff 50 e8 2e fe |.X...P..|X...P...|
|000003d0| ff ff 59 85 c0 59 74 2f | 39 7d f8 74 2a 8d 85 58 |..Y..Yt/|9}.t*..X|
|000003e0| fd ff ff 50 e8 27 01 00 | 00 59 40 89 45 f4 50 8d |...P.'..|.Y@.E.P.|
|000003f0| 85 58 fd ff ff 50 6a 01 | 53 68 08 20 40 00 ff 75 |.X...Pj.|Sh. @..u|
|00000400| fc ff 15 64 30 40 00 39 | 5d fc 74 09 ff 75 fc ff |...d0@.9|].t..u..|
|00000410| 15 60 30 40 00 6a 01 58 | 5f 5e 5b c9 c2 10 00 cc |.`0@.j.X|_^[.....|
|00000420| 57 8b 7c 24 08 eb 6a 2e | 8b c0 2e 8b c0 2e 8b c0 |W.|$..j.|........|
|00000430| 8b 4c 24 04 57 f7 c1 03 | 00 00 00 74 0f 8a 01 41 |.L$.W...|...t...A|
|00000440| 84 c0 74 3b f7 c1 03 00 | 00 00 75 f1 8b 01 ba ff |..t;....|..u.....|
|00000450| fe fe 7e 03 d0 83 f0 ff | 33 c2 83 c1 04 a9 00 01 |..~.....|3.......|
|00000460| 01 81 74 e8 8b 41 fc 84 | c0 74 23 84 e4 74 1a a9 |..t..A..|.t#..t..|
|00000470| 00 00 ff 00 74 0e a9 00 | 00 00 ff 74 02 eb cd 8d |....t...|...t....|
|00000480| 79 ff eb 0d 8d 79 fe eb | 08 8d 79 fd eb 03 8d 79 |y....y..|..y....y|
|00000490| fc 8b 4c 24 0c f7 c1 03 | 00 00 00 74 19 8a 11 41 |..L$....|...t...A|
|000004a0| 84 d2 74 64 88 17 47 f7 | c1 03 00 00 00 75 ee eb |..td..G.|.....u..|
|000004b0| 05 89 17 83 c7 04 ba ff | fe fe 7e 8b 01 03 d0 83 |........|..~.....|
|000004c0| f0 ff 33 c2 8b 11 83 c1 | 04 a9 00 01 01 81 74 e1 |..3.....|......t.|
|000004d0| 84 d2 74 34 84 f6 74 27 | f7 c2 00 00 ff 00 74 12 |..t4..t'|......t.|
|000004e0| f7 c2 00 00 00 ff 74 02 | eb c7 89 17 8b 44 24 08 |......t.|.....D$.|
|000004f0| 5f c3 66 89 17 8b 44 24 | 08 c6 47 02 00 5f c3 66 |_.f...D$|..G.._.f|
|00000500| 89 17 8b 44 24 08 5f c3 | 88 17 8b 44 24 08 5f c3 |...D$._.|...D$._.|
|00000510| 8b 4c 24 04 f7 c1 03 00 | 00 00 74 14 8a 01 41 84 |.L$.....|..t...A.|
|00000520| c0 74 40 f7 c1 03 00 00 | 00 75 f1 05 00 00 00 00 |.t@.....|.u......|
|00000530| 8b 01 ba ff fe fe 7e 03 | d0 83 f0 ff 33 c2 83 c1 |......~.|....3...|
|00000540| 04 a9 00 01 01 81 74 e8 | 8b 41 fc 84 c0 74 32 84 |......t.|.A...t2.|
|00000550| e4 74 24 a9 00 00 ff 00 | 74 13 a9 00 00 00 ff 74 |.t$.....|t......t|
|00000560| 02 eb cd 8d 41 ff 8b 4c | 24 04 2b c1 c3 8d 41 fe |....A..L|$.+...A.|
|00000570| 8b 4c 24 04 2b c1 c3 8d | 41 fd 8b 4c 24 04 2b c1 |.L$.+...|A..L$.+.|
|00000580| c3 8d 41 fc 8b 4c 24 04 | 2b c1 c3 cc cc cc cc cc |..A..L$.|+.......|
|00000590| 8b 4c 24 0c 57 85 c9 74 | 7a 56 53 8b d9 8b 74 24 |.L$.W..t|zVS...t$|
|000005a0| 14 f7 c6 03 00 00 00 8b | 7c 24 10 75 07 c1 e9 02 |........||$.u....|
|000005b0| 75 6f eb 21 8a 06 46 88 | 07 47 49 74 25 84 c0 74 |uo.!..F.|.GIt%..t|
|000005c0| 29 f7 c6 03 00 00 00 75 | eb 8b d9 c1 e9 02 75 51 |)......u|......uQ|
|000005d0| 83 e3 03 74 0d 8a 06 46 | 88 07 47 84 c0 74 2f 4b |...t...F|..G..t/K|
|000005e0| 75 f3 8b 44 24 10 5b 5e | 5f c3 f7 c7 03 00 00 00 |u..D$.[^|_.......|
|000005f0| 74 12 88 07 47 49 0f 84 | 8a 00 00 00 f7 c7 03 00 |t...GI..|........|
|00000600| 00 00 75 ee 8b d9 c1 e9 | 02 75 6c 88 07 47 4b 75 |..u.....|.ul..GKu|
|00000610| fa 5b 5e 8b 44 24 08 5f | c3 89 17 83 c7 04 49 74 |.[^.D$._|......It|
|00000620| af ba ff fe fe 7e 8b 06 | 03 d0 83 f0 ff 33 c2 8b |.....~..|.....3..|
|00000630| 16 83 c6 04 a9 00 01 01 | 81 74 de 84 d2 74 2c 84 |........|.t...t,.|
|00000640| f6 74 1e f7 c2 00 00 ff | 00 74 0c f7 c2 00 00 00 |.t......|.t......|
|00000650| ff 75 c6 89 17 eb 18 81 | e2 ff ff 00 00 89 17 eb |.u......|........|
|00000660| 0e 81 e2 ff 00 00 00 89 | 17 eb 04 33 d2 89 17 83 |........|...3....|
|00000670| c7 04 33 c0 49 74 0a 33 | c0 89 07 83 c7 04 49 75 |..3.It.3|......Iu|
|00000680| f8 83 e3 03 75 85 8b 44 | 24 10 5b 5e 5f c3 cc cc |....u..D|$.[^_...|
|00000690| 55 8b ec 57 56 53 8b 4d | 10 e3 26 8b d9 8b 7d 08 |U..WVS.M|..&...}.|
|000006a0| 8b f7 33 c0 f2 ae f7 d9 | 03 cb 8b fe 8b 75 0c f3 |..3.....|.....u..|
|000006b0| a6 8a 46 ff 33 c9 3a 47 | ff 77 04 74 04 49 49 f7 |..F.3.:G|.w.t.II.|
|000006c0| d1 8b c1 5b 5e 5f c9 c3 | cc cc cc cc cc cc cc cc |...[^_..|........|
|000006d0| 8b 54 24 0c 8b 4c 24 04 | 85 d2 74 47 33 c0 8a 44 |.T$..L$.|..tG3..D|
|000006e0| 24 08 57 8b f9 83 fa 04 | 72 2d f7 d9 83 e1 03 74 |$.W.....|r-.....t|
|000006f0| 08 2b d1 88 07 47 49 75 | fa 8b c8 c1 e0 08 03 c1 |.+...GIu|........|
|00000700| 8b c8 c1 e0 10 03 c1 8b | ca 83 e2 03 c1 e9 02 74 |........|.......t|
|00000710| 06 f3 ab 85 d2 74 06 88 | 07 47 4a 75 fa 8b 44 24 |.....t..|.GJu..D$|
|00000720| 08 5f c3 8b 44 24 04 c3 | 00 00 00 00 00 00 00 00 |._..D$..|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 5c 00 00 00 3a 5c 00 00 | 49 6e 73 74 61 6c 6c 44 |\...:\..|InstallD|
|00000810| 69 72 00 00 53 4f 46 54 | 57 41 52 45 5c 4d 69 63 |ir..SOFT|WARE\Mic|
|00000820| 72 6f 73 6f 66 74 5c 41 | 67 65 6e 74 00 00 00 00 |rosoft\A|gent....|
|00000830| 73 70 63 68 61 70 69 2e | 65 78 65 20 2f 52 3a 4e |spchapi.|exe /R:N|
|00000840| 00 00 00 00 43 4c 53 49 | 44 5c 7b 43 42 39 36 42 |....CLSI|D\{CB96B|
|00000850| 34 30 30 2d 43 37 34 33 | 2d 31 31 43 44 2d 38 30 |400-C743|-11CD-80|
|00000860| 45 35 2d 30 30 41 41 30 | 30 33 45 34 42 35 30 7d |E5-00AA0|03E4B50}|
|00000870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 50 30 00 00 00 00 00 00 | 00 00 00 00 a0 30 00 00 |P0......|.....0..|
|00000a10| 70 30 00 00 3c 30 00 00 | 00 00 00 00 00 00 00 00 |p0..<0..|........|
|00000a20| f2 30 00 00 5c 30 00 00 | 00 00 00 00 00 00 00 00 |.0..\0..|........|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 e2 30 00 00 |........|.....0..|
|00000a40| d4 30 00 00 ae 30 00 00 | c0 30 00 00 00 00 00 00 |.0...0..|.0......|
|00000a50| 8e 30 00 00 7c 30 00 00 | 00 00 00 00 e2 30 00 00 |.0..|0..|.....0..|
|00000a60| d4 30 00 00 ae 30 00 00 | c0 30 00 00 00 00 00 00 |.0...0..|.0......|
|00000a70| 8e 30 00 00 7c 30 00 00 | 00 00 00 00 82 00 46 69 |.0..|0..|......Fi|
|00000a80| 6e 64 46 69 72 73 74 46 | 69 6c 65 41 00 00 3d 00 |ndFirstF|ileA..=.|
|00000a90| 43 72 65 61 74 65 50 72 | 6f 63 65 73 73 41 00 00 |CreatePr|ocessA..|
|00000aa0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 00 41 01 |KERNEL32|.dll..A.|
|00000ab0| 52 65 67 53 65 74 56 61 | 6c 75 65 45 78 41 00 00 |RegSetVa|lueExA..|
|00000ac0| 36 01 52 65 67 51 75 65 | 72 79 56 61 6c 75 65 45 |6.RegQue|ryValueE|
|00000ad0| 78 41 00 00 17 01 52 65 | 67 43 6c 6f 73 65 4b 65 |xA....Re|gCloseKe|
|00000ae0| 79 00 2e 01 52 65 67 4f | 70 65 6e 4b 65 79 45 78 |y...RegO|penKeyEx|
|00000af0| 41 00 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 00 |A.ADVAPI|32.dll..|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+