home *** CD-ROM | disk | FTP | other *** search
| Microsoft Visual C/Basic Library | 1996-02-21 | 303.0 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: Microsoft Visual C/Basic Library
(other/visualCLibrary).
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 1%
| dexvert
| Microsoft Visual C/Basic Library (other/visualCLibrary)
| magic
| Unsupported |
| 1%
| dexvert
| Sibelius Music / Score (music/sibeliusMusicScore)
| ext
| Unsupported |
| 1%
| dexvert
| IntelliFont Font (font/intelliFont)
| ext
| Unsupported |
| 1%
| dexvert
| Amiga Hunk Library/Object (other/amigaLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| Amiga Shared Library (other/amigaSharedLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| Chess Assistant File (other/chessAssistant)
| ext
| Unsupported |
| 1%
| dexvert
| COFF Library (other/coffLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| Maple Library (other/mapleLibrary)
| ext
| Unsupported |
| 1%
| dexvert
| TopSpeed Modula-2 Library (other/topSpeedModula2Library)
| ext
| Unsupported |
| 100%
| file
| Microsoft Visual C/OMF library, page size 16, at 0x29200 dictionary with 277 blocks (FFLAG=0x98) 1st entry GetSystemTime in page 786, 2nd record "advapi32", 3rd record COMMENT class=0xa0 OMF extensions IMPDEF AbortSystemShutdownA exported by ADVAPI32.dll
| default
| |
| 99%
| file
| data
| default
| |
| 100%
| TrID
| Microsoft Visual C Library
| default
| |
| 100%
| gt2
| C++ Bibliotheks Datei
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| f0 0d 00 00 92 02 00 15 | 01 00 00 00 00 00 00 00 |........|........|
|00000010| 80 0a 00 08 61 64 76 61 | 70 69 33 32 00 88 28 00 |....adva|pi32..(.|
|00000020| 00 a0 01 00 14 41 62 6f | 72 74 53 79 73 74 65 6d |.....Abo|rtSystem|
|00000030| 53 68 75 74 64 6f 77 6e | 41 0c 41 44 56 41 50 49 |Shutdown|A.ADVAPI|
|00000040| 33 32 2e 64 6c 6c 00 f1 | 88 28 00 00 a0 01 00 14 |32.dll..|.(......|
|00000050| 41 62 6f 72 74 53 79 73 | 74 65 6d 53 68 75 74 64 |AbortSys|temShutd|
|00000060| 6f 77 6e 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ownW.ADV|API32.dl|
|00000070| 6c 00 db 88 1f 00 00 a0 | 01 00 0b 41 63 63 65 73 |l.......|...Acces|
|00000080| 73 43 68 65 63 6b 0c 41 | 44 56 41 50 49 33 32 2e |sCheck.A|DVAPI32.|
|00000090| 64 6c 6c 00 ed 88 2d 00 | 00 a0 01 00 19 41 63 63 |dll...-.|.....Acc|
|000000a0| 65 73 73 43 68 65 63 6b | 41 6e 64 41 75 64 69 74 |essCheck|AndAudit|
|000000b0| 41 6c 61 72 6d 41 0c 41 | 44 56 41 50 49 33 32 2e |AlarmA.A|DVAPI32.|
|000000c0| 64 6c 6c 00 99 88 2d 00 | 00 a0 01 00 19 41 63 63 |dll...-.|.....Acc|
|000000d0| 65 73 73 43 68 65 63 6b | 41 6e 64 41 75 64 69 74 |essCheck|AndAudit|
|000000e0| 41 6c 61 72 6d 57 0c 41 | 44 56 41 50 49 33 32 2e |AlarmW.A|DVAPI32.|
|000000f0| 64 6c 6c 00 83 88 27 00 | 00 a0 01 00 13 41 64 64 |dll...'.|.....Add|
|00000100| 41 63 63 65 73 73 41 6c | 6c 6f 77 65 64 41 63 65 |AccessAl|lowedAce|
|00000110| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 e1 88 |.ADVAPI3|2.dll...|
|00000120| 26 00 00 a0 01 00 12 41 | 64 64 41 63 63 65 73 73 |&......A|ddAccess|
|00000130| 44 65 6e 69 65 64 41 63 | 65 0c 41 44 56 41 50 49 |DeniedAc|e.ADVAPI|
|00000140| 33 32 2e 64 6c 6c 00 62 | 88 1a 00 00 a0 01 00 06 |32.dll.b|........|
|00000150| 41 64 64 41 63 65 0c 41 | 44 56 41 50 49 33 32 2e |AddAce.A|DVAPI32.|
|00000160| 64 6c 6c 00 15 88 25 00 | 00 a0 01 00 11 41 64 64 |dll...%.|.....Add|
|00000170| 41 75 64 69 74 41 63 63 | 65 73 73 41 63 65 0c 41 |AuditAcc|essAce.A|
|00000180| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 b6 88 25 00 |DVAPI32.|dll...%.|
|00000190| 00 a0 01 00 11 41 64 6a | 75 73 74 54 6f 6b 65 6e |.....Adj|ustToken|
|000001a0| 47 72 6f 75 70 73 0c 41 | 44 56 41 50 49 33 32 2e |Groups.A|DVAPI32.|
|000001b0| 64 6c 6c 00 25 88 29 00 | 00 a0 01 00 15 41 64 6a |dll.%.).|.....Adj|
|000001c0| 75 73 74 54 6f 6b 65 6e | 50 72 69 76 69 6c 65 67 |ustToken|Privileg|
|000001d0| 65 73 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |es.ADVAP|I32.dll.|
|000001e0| 83 88 2c 00 00 a0 01 00 | 18 41 6c 6c 6f 63 61 74 |..,.....|.Allocat|
|000001f0| 65 41 6e 64 49 6e 69 74 | 69 61 6c 69 7a 65 53 69 |eAndInit|ializeSi|
|00000200| 64 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 99 |d.ADVAPI|32.dll..|
|00000210| 88 2b 00 00 a0 01 00 17 | 41 6c 6c 6f 63 61 74 65 |.+......|Allocate|
|00000220| 4c 6f 63 61 6c 6c 79 55 | 6e 69 71 75 65 49 64 0c |LocallyU|niqueId.|
|00000230| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 ec 88 29 |ADVAPI32|.dll...)|
|00000240| 00 00 a0 01 00 15 41 72 | 65 41 6c 6c 41 63 63 65 |......Ar|eAllAcce|
|00000250| 73 73 65 73 47 72 61 6e | 74 65 64 0c 41 44 56 41 |ssesGran|ted.ADVA|
|00000260| 50 49 33 32 2e 64 6c 6c | 00 e9 88 29 00 00 a0 01 |PI32.dll|...)....|
|00000270| 00 15 41 72 65 41 6e 79 | 41 63 63 65 73 73 65 73 |..AreAny|Accesses|
|00000280| 47 72 61 6e 74 65 64 0c | 41 44 56 41 50 49 33 32 |Granted.|ADVAPI32|
|00000290| 2e 64 6c 6c 00 da 88 23 | 00 00 a0 01 00 0f 42 61 |.dll...#|......Ba|
|000002a0| 63 6b 75 70 45 76 65 6e | 74 4c 6f 67 41 0c 41 44 |ckupEven|tLogA.AD|
|000002b0| 56 41 50 49 33 32 2e 64 | 6c 6c 00 5a 88 23 00 00 |VAPI32.d|ll.Z.#..|
|000002c0| a0 01 00 0f 42 61 63 6b | 75 70 45 76 65 6e 74 4c |....Back|upEventL|
|000002d0| 6f 67 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ogW.ADVA|PI32.dll|
|000002e0| 00 44 88 28 00 00 a0 01 | 00 14 43 68 61 6e 67 65 |.D.(....|..Change|
|000002f0| 53 65 72 76 69 63 65 43 | 6f 6e 66 69 67 41 0c 41 |ServiceC|onfigA.A|
|00000300| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 5d 88 28 00 |DVAPI32.|dll.].(.|
|00000310| 00 a0 01 00 14 43 68 61 | 6e 67 65 53 65 72 76 69 |.....Cha|ngeServi|
|00000320| 63 65 43 6f 6e 66 69 67 | 57 0c 41 44 56 41 50 49 |ceConfig|W.ADVAPI|
|00000330| 33 32 2e 64 6c 6c 00 47 | 88 22 00 00 a0 01 00 0e |32.dll.G|."......|
|00000340| 43 6c 65 61 72 45 76 65 | 6e 74 4c 6f 67 41 0c 41 |ClearEve|ntLogA.A|
|00000350| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 cb 88 22 00 |DVAPI32.|dll...".|
|00000360| 00 a0 01 00 0e 43 6c 65 | 61 72 45 76 65 6e 74 4c |.....Cle|arEventL|
|00000370| 6f 67 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ogW.ADVA|PI32.dll|
|00000380| 00 b5 88 21 00 00 a0 01 | 00 0d 43 6c 6f 73 65 45 |...!....|..CloseE|
|00000390| 76 65 6e 74 4c 6f 67 0c | 41 44 56 41 50 49 33 32 |ventLog.|ADVAPI32|
|000003a0| 2e 64 6c 6c 00 ff 88 26 | 00 00 a0 01 00 12 43 6c |.dll...&|......Cl|
|000003b0| 6f 73 65 53 65 72 76 69 | 63 65 48 61 6e 64 6c 65 |oseServi|ceHandle|
|000003c0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 fc 88 |.ADVAPI3|2.dll...|
|000003d0| 22 00 00 a0 01 00 0e 43 | 6f 6e 74 72 6f 6c 53 65 |"......C|ontrolSe|
|000003e0| 72 76 69 63 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |rvice.AD|VAPI32.d|
|000003f0| 6c 6c 00 65 88 1b 00 00 | a0 01 00 07 43 6f 70 79 |ll.e....|....Copy|
|00000400| 53 69 64 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |Sid.ADVA|PI32.dll|
|00000410| 00 6a 88 2f 00 00 a0 01 | 00 1b 43 72 65 61 74 65 |.j./....|..Create|
|00000420| 50 72 69 76 61 74 65 4f | 62 6a 65 63 74 53 65 63 |PrivateO|bjectSec|
|00000430| 75 72 69 74 79 0c 41 44 | 56 41 50 49 33 32 2e 64 |urity.AD|VAPI32.d|
|00000440| 6c 6c 00 1f 88 28 00 00 | a0 01 00 14 43 72 65 61 |ll...(..|....Crea|
|00000450| 74 65 50 72 6f 63 65 73 | 73 41 73 55 73 65 72 41 |teProces|sAsUserA|
|00000460| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 44 88 |.ADVAPI3|2.dll.D.|
|00000470| 28 00 00 a0 01 00 14 43 | 72 65 61 74 65 50 72 6f |(......C|reatePro|
|00000480| 63 65 73 73 41 73 55 73 | 65 72 57 0c 41 44 56 41 |cessAsUs|erW.ADVA|
|00000490| 50 49 33 32 2e 64 6c 6c | 00 2e 88 22 00 00 a0 01 |PI32.dll|..."....|
|000004a0| 00 0e 43 72 65 61 74 65 | 53 65 72 76 69 63 65 41 |..Create|ServiceA|
|000004b0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b1 88 |.ADVAPI3|2.dll...|
|000004c0| 22 00 00 a0 01 00 0e 43 | 72 65 61 74 65 53 65 72 |"......C|reateSer|
|000004d0| 76 69 63 65 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |viceW.AD|VAPI32.d|
|000004e0| 6c 6c 00 9b 88 1d 00 00 | a0 01 00 09 44 65 6c 65 |ll......|....Dele|
|000004f0| 74 65 41 63 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |teAce.AD|VAPI32.d|
|00000500| 6c 6c 00 c5 88 21 00 00 | a0 01 00 0d 44 65 6c 65 |ll...!..|....Dele|
|00000510| 74 65 53 65 72 76 69 63 | 65 0c 41 44 56 41 50 49 |teServic|e.ADVAPI|
|00000520| 33 32 2e 64 6c 6c 00 f5 | 88 29 00 00 a0 01 00 15 |32.dll..|.)......|
|00000530| 44 65 72 65 67 69 73 74 | 65 72 45 76 65 6e 74 53 |Deregist|erEventS|
|00000540| 6f 75 72 63 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |ource.AD|VAPI32.d|
|00000550| 6c 6c 00 88 88 30 00 00 | a0 01 00 1c 44 65 73 74 |ll...0..|....Dest|
|00000560| 72 6f 79 50 72 69 76 61 | 74 65 4f 62 6a 65 63 74 |royPriva|teObject|
|00000570| 53 65 63 75 72 69 74 79 | 0c 41 44 56 41 50 49 33 |Security|.ADVAPI3|
|00000580| 32 2e 64 6c 6c 00 87 88 | 22 00 00 a0 01 00 0e 44 |2.dll...|"......D|
|00000590| 75 70 6c 69 63 61 74 65 | 54 6f 6b 65 6e 0c 41 44 |uplicate|Token.AD|
|000005a0| 56 41 50 49 33 32 2e 64 | 6c 6c 00 7b 88 2a 00 00 |VAPI32.d|ll.{.*..|
|000005b0| a0 01 00 16 45 6c 66 42 | 61 63 6b 75 70 45 76 65 |....ElfB|ackupEve|
|000005c0| 6e 74 4c 6f 67 46 69 6c | 65 41 0c 41 44 56 41 50 |ntLogFil|eA.ADVAP|
|000005d0| 49 33 32 2e 64 6c 6c 00 | b5 88 2a 00 00 a0 01 00 |I32.dll.|..*.....|
|000005e0| 16 45 6c 66 42 61 63 6b | 75 70 45 76 65 6e 74 4c |.ElfBack|upEventL|
|000005f0| 6f 67 46 69 6c 65 57 0c | 41 44 56 41 50 49 33 32 |ogFileW.|ADVAPI32|
|00000600| 2e 64 6c 6c 00 9f 88 23 | 00 00 a0 01 00 0f 45 6c |.dll...#|......El|
|00000610| 66 43 68 61 6e 67 65 4e | 6f 74 69 66 79 0c 41 44 |fChangeN|otify.AD|
|00000620| 56 41 50 49 33 32 2e 64 | 6c 6c 00 3f 88 29 00 00 |VAPI32.d|ll.?.)..|
|00000630| a0 01 00 15 45 6c 66 43 | 6c 65 61 72 45 76 65 6e |....ElfC|learEven|
|00000640| 74 4c 6f 67 46 69 6c 65 | 41 0c 41 44 56 41 50 49 |tLogFile|A.ADVAPI|
|00000650| 33 32 2e 64 6c 6c 00 26 | 88 29 00 00 a0 01 00 15 |32.dll.&|.)......|
|00000660| 45 6c 66 43 6c 65 61 72 | 45 76 65 6e 74 4c 6f 67 |ElfClear|EventLog|
|00000670| 46 69 6c 65 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |FileW.AD|VAPI32.d|
|00000680| 6c 6c 00 10 88 24 00 00 | a0 01 00 10 45 6c 66 43 |ll...$..|....ElfC|
|00000690| 6c 6f 73 65 45 76 65 6e | 74 4c 6f 67 0c 41 44 56 |loseEven|tLog.ADV|
|000006a0| 41 50 49 33 32 2e 64 6c | 6c 00 e2 88 2c 00 00 a0 |API32.dl|l...,...|
|000006b0| 01 00 18 45 6c 66 44 65 | 72 65 67 69 73 74 65 72 |...ElfDe|register|
|000006c0| 45 76 65 6e 74 53 6f 75 | 72 63 65 0c 41 44 56 41 |EventSou|rce.ADVA|
|000006d0| 50 49 33 32 2e 64 6c 6c | 00 6b 88 26 00 00 a0 01 |PI32.dll|.k.&....|
|000006e0| 00 12 45 6c 66 4e 75 6d | 62 65 72 4f 66 52 65 63 |..ElfNum|berOfRec|
|000006f0| 6f 72 64 73 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ords.ADV|API32.dl|
|00000700| 6c 00 08 88 23 00 00 a0 | 01 00 0f 45 6c 66 4f 6c |l...#...|...ElfOl|
|00000710| 64 65 73 74 52 65 63 6f | 72 64 0c 41 44 56 41 50 |destReco|rd.ADVAP|
|00000720| 49 33 32 2e 64 6c 6c 00 | 34 88 2a 00 00 a0 01 00 |I32.dll.|4.*.....|
|00000730| 16 45 6c 66 4f 70 65 6e | 42 61 63 6b 75 70 45 76 |.ElfOpen|BackupEv|
|00000740| 65 6e 74 4c 6f 67 41 0c | 41 44 56 41 50 49 33 32 |entLogA.|ADVAPI32|
|00000750| 2e 64 6c 6c 00 a3 88 2a | 00 00 a0 01 00 16 45 6c |.dll...*|......El|
|00000760| 66 4f 70 65 6e 42 61 63 | 6b 75 70 45 76 65 6e 74 |fOpenBac|kupEvent|
|00000770| 4c 6f 67 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |LogW.ADV|API32.dl|
|00000780| 6c 00 8d 88 24 00 00 a0 | 01 00 10 45 6c 66 4f 70 |l...$...|...ElfOp|
|00000790| 65 6e 45 76 65 6e 74 4c | 6f 67 41 0c 41 44 56 41 |enEventL|ogA.ADVA|
|000007a0| 50 49 33 32 2e 64 6c 6c | 00 05 88 24 00 00 a0 01 |PI32.dll|...$....|
|000007b0| 00 10 45 6c 66 4f 70 65 | 6e 45 76 65 6e 74 4c 6f |..ElfOpe|nEventLo|
|000007c0| 67 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |gW.ADVAP|I32.dll.|
|000007d0| ef 88 24 00 00 a0 01 00 | 10 45 6c 66 52 65 61 64 |..$.....|.ElfRead|
|000007e0| 45 76 65 6e 74 4c 6f 67 | 41 0c 41 44 56 41 50 49 |EventLog|A.ADVAPI|
|000007f0| 33 32 2e 64 6c 6c 00 1b | 88 24 00 00 a0 01 00 10 |32.dll..|.$......|
|00000800| 45 6c 66 52 65 61 64 45 | 76 65 6e 74 4c 6f 67 57 |ElfReadE|ventLogW|
|00000810| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 05 88 |.ADVAPI3|2.dll...|
|00000820| 2b 00 00 a0 01 00 17 45 | 6c 66 52 65 67 69 73 74 |+......E|lfRegist|
|00000830| 65 72 45 76 65 6e 74 53 | 6f 75 72 63 65 41 0c 41 |erEventS|ourceA.A|
|00000840| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 f5 88 2b 00 |DVAPI32.|dll...+.|
|00000850| 00 a0 01 00 17 45 6c 66 | 52 65 67 69 73 74 65 72 |.....Elf|Register|
|00000860| 45 76 65 6e 74 53 6f 75 | 72 63 65 57 0c 41 44 56 |EventSou|rceW.ADV|
|00000870| 41 50 49 33 32 2e 64 6c | 6c 00 df 88 23 00 00 a0 |API32.dl|l...#...|
|00000880| 01 00 0f 45 6c 66 52 65 | 70 6f 72 74 45 76 65 6e |...ElfRe|portEven|
|00000890| 74 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |tA.ADVAP|I32.dll.|
|000008a0| 3f 88 23 00 00 a0 01 00 | 0f 45 6c 66 52 65 70 6f |?.#.....|.ElfRepo|
|000008b0| 72 74 45 76 65 6e 74 57 | 0c 41 44 56 41 50 49 33 |rtEventW|.ADVAPI3|
|000008c0| 32 2e 64 6c 6c 00 29 88 | 2a 00 00 a0 01 00 16 45 |2.dll.).|*......E|
|000008d0| 6e 75 6d 44 65 70 65 6e | 64 65 6e 74 53 65 72 76 |numDepen|dentServ|
|000008e0| 69 63 65 73 41 0c 41 44 | 56 41 50 49 33 32 2e 64 |icesA.AD|VAPI32.d|
|000008f0| 6c 6c 00 56 88 2a 00 00 | a0 01 00 16 45 6e 75 6d |ll.V.*..|....Enum|
|00000900| 44 65 70 65 6e 64 65 6e | 74 53 65 72 76 69 63 65 |Dependen|tService|
|00000910| 73 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |sW.ADVAP|I32.dll.|
|00000920| 40 88 27 00 00 a0 01 00 | 13 45 6e 75 6d 53 65 72 |@.'.....|.EnumSer|
|00000930| 76 69 63 65 73 53 74 61 | 74 75 73 41 0c 41 44 56 |vicesSta|tusA.ADV|
|00000940| 41 50 49 33 32 2e 64 6c | 6c 00 6f 88 27 00 00 a0 |API32.dl|l.o.'...|
|00000950| 01 00 13 45 6e 75 6d 53 | 65 72 76 69 63 65 73 53 |...EnumS|ervicesS|
|00000960| 74 61 74 75 73 57 0c 41 | 44 56 41 50 49 33 32 2e |tatusW.A|DVAPI32.|
|00000970| 64 6c 6c 00 59 88 22 00 | 00 a0 01 00 0e 45 71 75 |dll.Y.".|.....Equ|
|00000980| 61 6c 50 72 65 66 69 78 | 53 69 64 0c 41 44 56 41 |alPrefix|Sid.ADVA|
|00000990| 50 49 33 32 2e 64 6c 6c | 00 91 88 1c 00 00 a0 01 |PI32.dll|........|
|000009a0| 00 08 45 71 75 61 6c 53 | 69 64 0c 41 44 56 41 50 |..EqualS|id.ADVAP|
|000009b0| 49 33 32 2e 64 6c 6c 00 | 0b 88 24 00 00 a0 01 00 |I32.dll.|..$.....|
|000009c0| 10 46 69 6e 64 46 69 72 | 73 74 46 72 65 65 41 63 |.FindFir|stFreeAc|
|000009d0| 65 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 ff |e.ADVAPI|32.dll..|
|000009e0| 88 1b 00 00 a0 01 00 07 | 46 72 65 65 53 69 64 0c |........|FreeSid.|
|000009f0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 83 88 1a |ADVAPI32|.dll....|
|00000a00| 00 00 a0 01 00 06 47 65 | 74 41 63 65 0c 41 44 56 |......Ge|tAce.ADV|
|00000a10| 41 50 49 33 32 2e 64 6c | 6c 00 fe 88 25 00 00 a0 |API32.dl|l...%...|
|00000a20| 01 00 11 47 65 74 41 63 | 6c 49 6e 66 6f 72 6d 61 |...GetAc|lInforma|
|00000a30| 74 69 6f 6e 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |tion.ADV|API32.dl|
|00000a40| 6c 00 5b 88 24 00 00 a0 | 01 00 10 47 65 74 46 69 |l.[.$...|...GetFi|
|00000a50| 6c 65 53 65 63 75 72 69 | 74 79 41 0c 41 44 56 41 |leSecuri|tyA.ADVA|
|00000a60| 50 49 33 32 2e 64 6c 6c | 00 da 88 24 00 00 a0 01 |PI32.dll|...$....|
|00000a70| 00 10 47 65 74 46 69 6c | 65 53 65 63 75 72 69 74 |..GetFil|eSecurit|
|00000a80| 79 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |yW.ADVAP|I32.dll.|
|00000a90| c4 88 2b 00 00 a0 01 00 | 17 47 65 74 4b 65 72 6e |..+.....|.GetKern|
|00000aa0| 65 6c 4f 62 6a 65 63 74 | 53 65 63 75 72 69 74 79 |elObject|Security|
|00000ab0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 d5 88 |.ADVAPI3|2.dll...|
|00000ac0| 20 00 00 a0 01 00 0c 47 | 65 74 4c 65 6e 67 74 68 | ......G|etLength|
|00000ad0| 53 69 64 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |Sid.ADVA|PI32.dll|
|00000ae0| 00 79 88 2e 00 00 a0 01 | 00 1a 47 65 74 4e 75 6d |.y......|..GetNum|
|00000af0| 62 65 72 4f 66 45 76 65 | 6e 74 4c 6f 67 52 65 63 |berOfEve|ntLogRec|
|00000b00| 6f 72 64 73 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ords.ADV|API32.dl|
|00000b10| 6c 00 cb 88 2b 00 00 a0 | 01 00 17 47 65 74 4f 6c |l...+...|...GetOl|
|00000b20| 64 65 73 74 45 76 65 6e | 74 4c 6f 67 52 65 63 6f |destEven|tLogReco|
|00000b30| 72 64 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |rd.ADVAP|I32.dll.|
|00000b40| f7 88 2c 00 00 a0 01 00 | 18 47 65 74 50 72 69 76 |..,.....|.GetPriv|
|00000b50| 61 74 65 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |ateObjec|tSecurit|
|00000b60| 79 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 59 |y.ADVAPI|32.dll.Y|
|00000b70| 88 30 00 00 a0 01 00 1c | 47 65 74 53 65 63 75 72 |.0......|GetSecur|
|00000b80| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 43 6f 6e |ityDescr|iptorCon|
|00000b90| 74 72 6f 6c 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |trol.ADV|API32.dl|
|00000ba0| 6c 00 83 88 2d 00 00 a0 | 01 00 19 47 65 74 53 65 |l...-...|...GetSe|
|00000bb0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00000bc0| 44 61 63 6c 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |Dacl.ADV|API32.dl|
|00000bd0| 6c 00 f6 88 2e 00 00 a0 | 01 00 1a 47 65 74 53 65 |l.......|...GetSe|
|00000be0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00000bf0| 47 72 6f 75 70 0c 41 44 | 56 41 50 49 33 32 2e 64 |Group.AD|VAPI32.d|
|00000c00| 6c 6c 00 5b 88 2f 00 00 | a0 01 00 1b 47 65 74 53 |ll.[./..|....GetS|
|00000c10| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000c20| 72 4c 65 6e 67 74 68 0c | 41 44 56 41 50 49 33 32 |rLength.|ADVAPI32|
|00000c30| 2e 64 6c 6c 00 04 88 2e | 00 00 a0 01 00 1a 47 65 |.dll....|......Ge|
|00000c40| 74 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |tSecurit|yDescrip|
|00000c50| 74 6f 72 4f 77 6e 65 72 | 0c 41 44 56 41 50 49 33 |torOwner|.ADVAPI3|
|00000c60| 32 2e 64 6c 6c 00 5d 88 | 2d 00 00 a0 01 00 19 47 |2.dll.].|-......G|
|00000c70| 65 74 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |etSecuri|tyDescri|
|00000c80| 70 74 6f 72 53 61 63 6c | 0c 41 44 56 41 50 49 33 |ptorSacl|.ADVAPI3|
|00000c90| 32 2e 64 6c 6c 00 e7 88 | 2a 00 00 a0 01 00 16 47 |2.dll...|*......G|
|00000ca0| 65 74 53 65 72 76 69 63 | 65 44 69 73 70 6c 61 79 |etServic|eDisplay|
|00000cb0| 4e 61 6d 65 41 0c 41 44 | 56 41 50 49 33 32 2e 64 |NameA.AD|VAPI32.d|
|00000cc0| 6c 6c 00 7e 88 2a 00 00 | a0 01 00 16 47 65 74 53 |ll.~.*..|....GetS|
|00000cd0| 65 72 76 69 63 65 44 69 | 73 70 6c 61 79 4e 61 6d |erviceDi|splayNam|
|00000ce0| 65 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |eW.ADVAP|I32.dll.|
|00000cf0| 68 88 26 00 00 a0 01 00 | 12 47 65 74 53 65 72 76 |h.&.....|.GetServ|
|00000d00| 69 63 65 4b 65 79 4e 61 | 6d 65 41 0c 41 44 56 41 |iceKeyNa|meA.ADVA|
|00000d10| 50 49 33 32 2e 64 6c 6c | 00 33 88 26 00 00 a0 01 |PI32.dll|.3.&....|
|00000d20| 00 12 47 65 74 53 65 72 | 76 69 63 65 4b 65 79 4e |..GetSer|viceKeyN|
|00000d30| 61 6d 65 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ameW.ADV|API32.dl|
|00000d40| 6c 00 1d 88 2d 00 00 a0 | 01 00 19 47 65 74 53 69 |l...-...|...GetSi|
|00000d50| 64 49 64 65 6e 74 69 66 | 69 65 72 41 75 74 68 6f |dIdentif|ierAutho|
|00000d60| 72 69 74 79 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |rity.ADV|API32.dl|
|00000d70| 6c 00 f5 88 28 00 00 a0 | 01 00 14 47 65 74 53 69 |l...(...|...GetSi|
|00000d80| 64 4c 65 6e 67 74 68 52 | 65 71 75 69 72 65 64 0c |dLengthR|equired.|
|00000d90| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 28 88 26 |ADVAPI32|.dll.(.&|
|00000da0| 00 00 a0 01 00 12 47 65 | 74 53 69 64 53 75 62 41 |......Ge|tSidSubA|
|00000db0| 75 74 68 6f 72 69 74 79 | 0c 41 44 56 41 50 49 33 |uthority|.ADVAPI3|
|00000dc0| 32 2e 64 6c 6c 00 dc 88 | 2b 00 00 a0 01 00 17 47 |2.dll...|+......G|
|00000dd0| 65 74 53 69 64 53 75 62 | 41 75 74 68 6f 72 69 74 |etSidSub|Authorit|
|00000de0| 79 43 6f 75 6e 74 0c 41 | 44 56 41 50 49 33 32 2e |yCount.A|DVAPI32.|
|00000df0| 64 6c 6c 00 c9 88 27 00 | 00 a0 01 00 13 47 65 74 |dll...'.|.....Get|
|00000e00| 54 6f 6b 65 6e 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |TokenInf|ormation|
|00000e10| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 66 88 |.ADVAPI3|2.dll.f.|
|00000e20| 20 00 00 a0 01 00 0c 47 | 65 74 55 73 65 72 4e 61 | ......G|etUserNa|
|00000e30| 6d 65 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |meA.ADVA|PI32.dll|
|00000e40| 00 9a 88 20 00 00 a0 01 | 00 0c 47 65 74 55 73 65 |... ....|..GetUse|
|00000e50| 72 4e 61 6d 65 57 0c 41 | 44 56 41 50 49 33 32 2e |rNameW.A|DVAPI32.|
|00000e60| 64 6c 6c 00 84 88 27 00 | 00 a0 01 00 13 49 5f 53 |dll...'.|.....I_S|
|00000e70| 63 53 65 74 53 65 72 76 | 69 63 65 42 69 74 73 41 |cSetServ|iceBitsA|
|00000e80| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 df 88 |.ADVAPI3|2.dll...|
|00000e90| 27 00 00 a0 01 00 13 49 | 5f 53 63 53 65 74 53 65 |'......I|_ScSetSe|
|00000ea0| 72 76 69 63 65 42 69 74 | 73 57 0c 41 44 56 41 50 |rviceBit|sW.ADVAP|
|00000eb0| 49 33 32 2e 64 6c 6c 00 | c9 88 2b 00 00 a0 01 00 |I32.dll.|..+.....|
|00000ec0| 17 49 6d 70 65 72 73 6f | 6e 61 74 65 4c 6f 67 67 |.Imperso|nateLogg|
|00000ed0| 65 64 4f 6e 55 73 65 72 | 0c 41 44 56 41 50 49 33 |edOnUser|.ADVAPI3|
|00000ee0| 32 2e 64 6c 6c 00 d0 88 | 2e 00 00 a0 01 00 1a 49 |2.dll...|.......I|
|00000ef0| 6d 70 65 72 73 6f 6e 61 | 74 65 4e 61 6d 65 64 50 |mpersona|teNamedP|
|00000f00| 69 70 65 43 6c 69 65 6e | 74 0c 41 44 56 41 50 49 |ipeClien|t.ADVAPI|
|00000f10| 33 32 2e 64 6c 6c 00 a6 | 88 23 00 00 a0 01 00 0f |32.dll..|.#......|
|00000f20| 49 6d 70 65 72 73 6f 6e | 61 74 65 53 65 6c 66 0c |Imperson|ateSelf.|
|00000f30| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 04 88 21 |ADVAPI32|.dll...!|
|00000f40| 00 00 a0 01 00 0d 49 6e | 69 74 69 61 6c 69 7a 65 |......In|itialize|
|00000f50| 41 63 6c 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |Acl.ADVA|PI32.dll|
|00000f60| 00 f7 88 30 00 00 a0 01 | 00 1c 49 6e 69 74 69 61 |...0....|..Initia|
|00000f70| 6c 69 7a 65 53 65 63 75 | 72 69 74 79 44 65 73 63 |lizeSecu|rityDesc|
|00000f80| 72 69 70 74 6f 72 0c 41 | 44 56 41 50 49 33 32 2e |riptor.A|DVAPI32.|
|00000f90| 64 6c 6c 00 72 88 21 00 | 00 a0 01 00 0d 49 6e 69 |dll.r.!.|.....Ini|
|00000fa0| 74 69 61 6c 69 7a 65 53 | 69 64 0c 41 44 56 41 50 |tializeS|id.ADVAP|
|00000fb0| 49 33 32 2e 64 6c 6c 00 | e7 88 2b 00 00 a0 01 00 |I32.dll.|..+.....|
|00000fc0| 17 49 6e 69 74 69 61 74 | 65 53 79 73 74 65 6d 53 |.Initiat|eSystemS|
|00000fd0| 68 75 74 64 6f 77 6e 41 | 0c 41 44 56 41 50 49 33 |hutdownA|.ADVAPI3|
|00000fe0| 32 2e 64 6c 6c 00 ac 88 | 2b 00 00 a0 01 00 17 49 |2.dll...|+......I|
|00000ff0| 6e 69 74 69 61 74 65 53 | 79 73 74 65 6d 53 68 75 |nitiateS|ystemShu|
|00001000| 74 64 6f 77 6e 57 0c 41 | 44 56 41 50 49 33 32 2e |tdownW.A|DVAPI32.|
|00001010| 64 6c 6c 00 96 88 21 00 | 00 a0 01 00 0d 49 73 54 |dll...!.|.....IsT|
|00001020| 65 78 74 55 6e 69 63 6f | 64 65 0c 41 44 56 41 50 |extUnico|de.ADVAP|
|00001030| 49 33 32 2e 64 6c 6c 00 | f1 88 1e 00 00 a0 01 00 |I32.dll.|........|
|00001040| 0a 49 73 56 61 6c 69 64 | 41 63 6c 0c 41 44 56 41 |.IsValid|Acl.ADVA|
|00001050| 50 49 33 32 2e 64 6c 6c | 00 63 88 2d 00 00 a0 01 |PI32.dll|.c.-....|
|00001060| 00 19 49 73 56 61 6c 69 | 64 53 65 63 75 72 69 74 |..IsVali|dSecurit|
|00001070| 79 44 65 73 63 72 69 70 | 74 6f 72 0c 41 44 56 41 |yDescrip|tor.ADVA|
|00001080| 50 49 33 32 2e 64 6c 6c | 00 de 88 1e 00 00 a0 01 |PI32.dll|........|
|00001090| 00 0a 49 73 56 61 6c 69 | 64 53 69 64 0c 41 44 56 |..IsVali|dSid.ADV|
|000010a0| 41 50 49 33 32 2e 64 6c | 6c 00 53 88 27 00 00 a0 |API32.dl|l.S.'...|
|000010b0| 01 00 13 4c 6f 63 6b 53 | 65 72 76 69 63 65 44 61 |...LockS|erviceDa|
|000010c0| 74 61 62 61 73 65 0c 41 | 44 56 41 50 49 33 32 2e |tabase.A|DVAPI32.|
|000010d0| 64 6c 6c 00 9e 88 1e 00 | 00 a0 01 00 0a 4c 6f 67 |dll.....|.....Log|
|000010e0| 6f 6e 55 73 65 72 41 0c | 41 44 56 41 50 49 33 32 |onUserA.|ADVAPI32|
|000010f0| 2e 64 6c 6c 00 40 88 1e | 00 00 a0 01 00 0a 4c 6f |.dll.@..|......Lo|
|00001100| 67 6f 6e 55 73 65 72 57 | 0c 41 44 56 41 50 49 33 |gonUserW|.ADVAPI3|
|00001110| 32 2e 64 6c 6c 00 2a 88 | 26 00 00 a0 01 00 12 4c |2.dll.*.|&......L|
|00001120| 6f 6f 6b 75 70 41 63 63 | 6f 75 6e 74 4e 61 6d 65 |ookupAcc|ountName|
|00001130| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 06 |A.ADVAPI|32.dll..|
|00001140| 88 26 00 00 a0 01 00 12 | 4c 6f 6f 6b 75 70 41 63 |.&......|LookupAc|
|00001150| 63 6f 75 6e 74 4e 61 6d | 65 57 0c 41 44 56 41 50 |countNam|eW.ADVAP|
|00001160| 49 33 32 2e 64 6c 6c 00 | f0 88 25 00 00 a0 01 00 |I32.dll.|..%.....|
|00001170| 11 4c 6f 6f 6b 75 70 41 | 63 63 6f 75 6e 74 53 69 |.LookupA|ccountSi|
|00001180| 64 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |dA.ADVAP|I32.dll.|
|00001190| 69 88 25 00 00 a0 01 00 | 11 4c 6f 6f 6b 75 70 41 |i.%.....|.LookupA|
|000011a0| 63 63 6f 75 6e 74 53 69 | 64 57 0c 41 44 56 41 50 |ccountSi|dW.ADVAP|
|000011b0| 49 33 32 2e 64 6c 6c 00 | 53 88 2f 00 00 a0 01 00 |I32.dll.|S./.....|
|000011c0| 1b 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |.LookupP|rivilege|
|000011d0| 44 69 73 70 6c 61 79 4e | 61 6d 65 41 0c 41 44 56 |DisplayN|ameA.ADV|
|000011e0| 41 50 49 33 32 2e 64 6c | 6c 00 44 88 2f 00 00 a0 |API32.dl|l.D./...|
|000011f0| 01 00 1b 4c 6f 6f 6b 75 | 70 50 72 69 76 69 6c 65 |...Looku|pPrivile|
|00001200| 67 65 44 69 73 70 6c 61 | 79 4e 61 6d 65 57 0c 41 |geDispla|yNameW.A|
|00001210| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 2e 88 28 00 |DVAPI32.|dll...(.|
|00001220| 00 a0 01 00 14 4c 6f 6f | 6b 75 70 50 72 69 76 69 |.....Loo|kupPrivi|
|00001230| 6c 65 67 65 4e 61 6d 65 | 41 0c 41 44 56 41 50 49 |legeName|A.ADVAPI|
|00001240| 33 32 2e 64 6c 6c 00 28 | 88 28 00 00 a0 01 00 14 |32.dll.(|.(......|
|00001250| 4c 6f 6f 6b 75 70 50 72 | 69 76 69 6c 65 67 65 4e |LookupPr|ivilegeN|
|00001260| 61 6d 65 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ameW.ADV|API32.dl|
|00001270| 6c 00 12 88 29 00 00 a0 | 01 00 15 4c 6f 6f 6b 75 |l...)...|...Looku|
|00001280| 70 50 72 69 76 69 6c 65 | 67 65 56 61 6c 75 65 41 |pPrivile|geValueA|
|00001290| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 aa 88 |.ADVAPI3|2.dll...|
|000012a0| 29 00 00 a0 01 00 15 4c | 6f 6f 6b 75 70 50 72 69 |)......L|ookupPri|
|000012b0| 76 69 6c 65 67 65 56 61 | 6c 75 65 57 0c 41 44 56 |vilegeVa|lueW.ADV|
|000012c0| 41 50 49 33 32 2e 64 6c | 6c 00 94 88 27 00 00 a0 |API32.dl|l...'...|
|000012d0| 01 00 13 4c 73 61 41 64 | 64 41 63 63 6f 75 6e 74 |...LsaAd|dAccount|
|000012e0| 52 69 67 68 74 73 0c 41 | 44 56 41 50 49 33 32 2e |Rights.A|DVAPI32.|
|000012f0| 64 6c 6c 00 a6 88 2d 00 | 00 a0 01 00 19 4c 73 61 |dll...-.|.....Lsa|
|00001300| 41 64 64 50 72 69 76 69 | 6c 65 67 65 73 54 6f 41 |AddPrivi|legesToA|
|00001310| 63 63 6f 75 6e 74 0c 41 | 44 56 41 50 49 33 32 2e |ccount.A|DVAPI32.|
|00001320| 64 6c 6c 00 2e 88 24 00 | 00 a0 01 00 10 4c 73 61 |dll...$.|.....Lsa|
|00001330| 43 6c 65 61 72 41 75 64 | 69 74 4c 6f 67 0c 41 44 |ClearAud|itLog.AD|
|00001340| 56 41 50 49 33 32 2e 64 | 6c 6c 00 f3 88 1c 00 00 |VAPI32.d|ll......|
|00001350| a0 01 00 08 4c 73 61 43 | 6c 6f 73 65 0c 41 44 56 |....LsaC|lose.ADV|
|00001360| 41 50 49 33 32 2e 64 6c | 6c 00 0d 88 24 00 00 a0 |API32.dl|l...$...|
|00001370| 01 00 10 4c 73 61 43 72 | 65 61 74 65 41 63 63 6f |...LsaCr|eateAcco|
|00001380| 75 6e 74 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |unt.ADVA|PI32.dll|
|00001390| 00 d2 88 23 00 00 a0 01 | 00 0f 4c 73 61 43 72 65 |...#....|..LsaCre|
|000013a0| 61 74 65 53 65 63 72 65 | 74 0c 41 44 56 41 50 49 |ateSecre|t.ADVAPI|
|000013b0| 33 32 2e 64 6c 6c 00 3b | 88 2a 00 00 a0 01 00 16 |32.dll.;|.*......|
|000013c0| 4c 73 61 43 72 65 61 74 | 65 54 72 75 73 74 65 64 |LsaCreat|eTrusted|
|000013d0| 44 6f 6d 61 69 6e 0c 41 | 44 56 41 50 49 33 32 2e |Domain.A|DVAPI32.|
|000013e0| 64 6c 6c 00 50 88 1d 00 | 00 a0 01 00 09 4c 73 61 |dll.P...|.....Lsa|
|000013f0| 44 65 6c 65 74 65 0c 41 | 44 56 41 50 49 33 32 2e |Delete.A|DVAPI32.|
|00001400| 64 6c 6c 00 ae 88 2a 00 | 00 a0 01 00 16 4c 73 61 |dll...*.|.....Lsa|
|00001410| 44 65 6c 65 74 65 54 72 | 75 73 74 65 64 44 6f 6d |DeleteTr|ustedDom|
|00001420| 61 69 6e 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ain.ADVA|PI32.dll|
|00001430| 00 51 88 2d 00 00 a0 01 | 00 19 4c 73 61 45 6e 75 |.Q.-....|..LsaEnu|
|00001440| 6d 65 72 61 74 65 41 63 | 63 6f 75 6e 74 52 69 67 |merateAc|countRig|
|00001450| 68 74 73 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |hts.ADVA|PI32.dll|
|00001460| 00 fd 88 28 00 00 a0 01 | 00 14 4c 73 61 45 6e 75 |...(....|..LsaEnu|
|00001470| 6d 65 72 61 74 65 41 63 | 63 6f 75 6e 74 73 0c 41 |merateAc|counts.A|
|00001480| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 05 88 35 00 |DVAPI32.|dll...5.|
|00001490| 00 a0 01 00 21 4c 73 61 | 45 6e 75 6d 65 72 61 74 |....!Lsa|Enumerat|
|000014a0| 65 41 63 63 6f 75 6e 74 | 73 57 69 74 68 55 73 65 |eAccount|sWithUse|
|000014b0| 72 52 69 67 68 74 0c 41 | 44 56 41 50 49 33 32 2e |rRight.A|DVAPI32.|
|000014c0| 64 6c 6c 00 b2 88 2a 00 | 00 a0 01 00 16 4c 73 61 |dll...*.|.....Lsa|
|000014d0| 45 6e 75 6d 65 72 61 74 | 65 50 72 69 76 69 6c 65 |Enumerat|ePrivile|
|000014e0| 67 65 73 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ges.ADVA|PI32.dll|
|000014f0| 00 27 88 33 00 00 a0 01 | 00 1f 4c 73 61 45 6e 75 |.'.3....|..LsaEnu|
|00001500| 6d 65 72 61 74 65 50 72 | 69 76 69 6c 65 67 65 73 |meratePr|ivileges|
|00001510| 4f 66 41 63 63 6f 75 6e | 74 0c 41 44 56 41 50 49 |OfAccoun|t.ADVAPI|
|00001520| 33 32 2e 64 6c 6c 00 93 | 88 2e 00 00 a0 01 00 1a |32.dll..|........|
|00001530| 4c 73 61 45 6e 75 6d 65 | 72 61 74 65 54 72 75 73 |LsaEnume|rateTrus|
|00001540| 74 65 64 44 6f 6d 61 69 | 6e 73 0c 41 44 56 41 50 |tedDomai|ns.ADVAP|
|00001550| 49 33 32 2e 64 6c 6c 00 | 83 88 21 00 00 a0 01 00 |I32.dll.|..!.....|
|00001560| 0d 4c 73 61 46 72 65 65 | 4d 65 6d 6f 72 79 0c 41 |.LsaFree|Memory.A|
|00001570| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 fe 88 2a 00 |DVAPI32.|dll...*.|
|00001580| 00 a0 01 00 16 4c 73 61 | 47 65 74 51 75 6f 74 61 |.....Lsa|GetQuota|
|00001590| 73 46 6f 72 41 63 63 6f | 75 6e 74 0c 41 44 56 41 |sForAcco|unt.ADVA|
|000015a0| 50 49 33 32 2e 64 6c 6c | 00 56 88 2d 00 00 a0 01 |PI32.dll|.V.-....|
|000015b0| 00 19 4c 73 61 47 65 74 | 53 79 73 74 65 6d 41 63 |..LsaGet|SystemAc|
|000015c0| 63 65 73 73 41 63 63 6f | 75 6e 74 0c 41 44 56 41 |cessAcco|unt.ADVA|
|000015d0| 50 49 33 32 2e 64 6c 6c | 00 1d 88 24 00 00 a0 01 |PI32.dll|...$....|
|000015e0| 00 10 4c 73 61 49 43 4c | 6f 6f 6b 75 70 4e 61 6d |..LsaICL|ookupNam|
|000015f0| 65 73 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |es.ADVAP|I32.dll.|
|00001600| f9 88 23 00 00 a0 01 00 | 0f 4c 73 61 49 43 4c 6f |..#.....|.LsaICLo|
|00001610| 6f 6b 75 70 53 69 64 73 | 0c 41 44 56 41 50 49 33 |okupSids|.ADVAPI3|
|00001620| 32 2e 64 6c 6c 00 5c 88 | 22 00 00 a0 01 00 0e 4c |2.dll.\.|"......L|
|00001630| 73 61 4c 6f 6f 6b 75 70 | 4e 61 6d 65 73 0c 41 44 |saLookup|Names.AD|
|00001640| 56 41 50 49 33 32 2e 64 | 6c 6c 00 89 88 31 00 00 |VAPI32.d|ll...1..|
|00001650| a0 01 00 1d 4c 73 61 4c | 6f 6f 6b 75 70 50 72 69 |....LsaL|ookupPri|
|00001660| 76 69 6c 65 67 65 44 69 | 73 70 6c 61 79 4e 61 6d |vilegeDi|splayNam|
|00001670| 65 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 61 |e.ADVAPI|32.dll.a|
|00001680| 88 2a 00 00 a0 01 00 16 | 4c 73 61 4c 6f 6f 6b 75 |.*......|LsaLooku|
|00001690| 70 50 72 69 76 69 6c 65 | 67 65 4e 61 6d 65 0c 41 |pPrivile|geName.A|
|000016a0| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 45 88 2b 00 |DVAPI32.|dll.E.+.|
|000016b0| 00 a0 01 00 17 4c 73 61 | 4c 6f 6f 6b 75 70 50 72 |.....Lsa|LookupPr|
|000016c0| 69 76 69 6c 65 67 65 56 | 61 6c 75 65 0c 41 44 56 |ivilegeV|alue.ADV|
|000016d0| 41 50 49 33 32 2e 64 6c | 6c 00 c7 88 21 00 00 a0 |API32.dl|l...!...|
|000016e0| 01 00 0d 4c 73 61 4c 6f | 6f 6b 75 70 53 69 64 73 |...LsaLo|okupSids|
|000016f0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 ec 88 |.ADVAPI3|2.dll...|
|00001700| 29 00 00 a0 01 00 15 4c | 73 61 4e 74 53 74 61 74 |)......L|saNtStat|
|00001710| 75 73 54 6f 57 69 6e 45 | 72 72 6f 72 0c 41 44 56 |usToWinE|rror.ADV|
|00001720| 41 50 49 33 32 2e 64 6c | 6c 00 a8 88 22 00 00 a0 |API32.dl|l..."...|
|00001730| 01 00 0e 4c 73 61 4f 70 | 65 6e 41 63 63 6f 75 6e |...LsaOp|enAccoun|
|00001740| 74 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 98 |t.ADVAPI|32.dll..|
|00001750| 88 21 00 00 a0 01 00 0d | 4c 73 61 4f 70 65 6e 50 |.!......|LsaOpenP|
|00001760| 6f 6c 69 63 79 0c 41 44 | 56 41 50 49 33 32 2e 64 |olicy.AD|VAPI32.d|
|00001770| 6c 6c 00 f7 88 21 00 00 | a0 01 00 0d 4c 73 61 4f |ll...!..|....LsaO|
|00001780| 70 65 6e 53 65 63 72 65 | 74 0c 41 44 56 41 50 49 |penSecre|t.ADVAPI|
|00001790| 33 32 2e 64 6c 6c 00 01 | 88 28 00 00 a0 01 00 14 |32.dll..|.(......|
|000017a0| 4c 73 61 4f 70 65 6e 54 | 72 75 73 74 65 64 44 6f |LsaOpenT|rustedDo|
|000017b0| 6d 61 69 6e 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |main.ADV|API32.dl|
|000017c0| 6c 00 16 88 2d 00 00 a0 | 01 00 19 4c 73 61 51 75 |l...-...|...LsaQu|
|000017d0| 65 72 79 49 6e 66 6f 54 | 72 75 73 74 65 64 44 6f |eryInfoT|rustedDo|
|000017e0| 6d 61 69 6e 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |main.ADV|API32.dl|
|000017f0| 6c 00 fc 88 2d 00 00 a0 | 01 00 19 4c 73 61 51 75 |l...-...|...LsaQu|
|00001800| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 6f |eryInfor|mationPo|
|00001810| 6c 69 63 79 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |licy.ADV|API32.dl|
|00001820| 6c 00 d5 88 22 00 00 a0 | 01 00 0e 4c 73 61 51 75 |l..."...|...LsaQu|
|00001830| 65 72 79 53 65 63 72 65 | 74 0c 41 44 56 41 50 49 |erySecre|t.ADVAPI|
|00001840| 33 32 2e 64 6c 6c 00 7b | 88 2a 00 00 a0 01 00 16 |32.dll.{|.*......|
|00001850| 4c 73 61 51 75 65 72 79 | 53 65 63 75 72 69 74 79 |LsaQuery|Security|
|00001860| 4f 62 6a 65 63 74 0c 41 | 44 56 41 50 49 33 32 2e |Object.A|DVAPI32.|
|00001870| 64 6c 6c 00 22 88 2d 00 | 00 a0 01 00 19 4c 73 61 |dll.".-.|.....Lsa|
|00001880| 51 75 65 72 79 54 72 75 | 73 74 65 64 44 6f 6d 61 |QueryTru|stedDoma|
|00001890| 69 6e 49 6e 66 6f 0c 41 | 44 56 41 50 49 33 32 2e |inInfo.A|DVAPI32.|
|000018a0| 64 6c 6c 00 fc 88 2a 00 | 00 a0 01 00 16 4c 73 61 |dll...*.|.....Lsa|
|000018b0| 52 65 6d 6f 76 65 41 63 | 63 6f 75 6e 74 52 69 67 |RemoveAc|countRig|
|000018c0| 68 74 73 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |hts.ADVA|PI32.dll|
|000018d0| 00 3b 88 32 00 00 a0 01 | 00 1e 4c 73 61 52 65 6d |.;.2....|..LsaRem|
|000018e0| 6f 76 65 50 72 69 76 69 | 6c 65 67 65 73 46 72 6f |ovePrivi|legesFro|
|000018f0| 6d 41 63 63 6f 75 6e 74 | 0c 41 44 56 41 50 49 33 |mAccount|.ADVAPI3|
|00001900| 32 2e 64 6c 6c 00 ee 88 | 2a 00 00 a0 01 00 16 4c |2.dll...|*......L|
|00001910| 73 61 52 65 74 72 69 65 | 76 65 50 72 69 76 61 74 |saRetrie|vePrivat|
|00001920| 65 44 61 74 61 0c 41 44 | 56 41 50 49 33 32 2e 64 |eData.AD|VAPI32.d|
|00001930| 6c 6c 00 4c 88 2b 00 00 | a0 01 00 17 4c 73 61 53 |ll.L.+..|....LsaS|
|00001940| 65 74 49 6e 66 6f 72 6d | 61 74 69 6f 6e 50 6f 6c |etInform|ationPol|
|00001950| 69 63 79 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |icy.ADVA|PI32.dll|
|00001960| 00 c3 88 32 00 00 a0 01 | 00 1e 4c 73 61 53 65 74 |...2....|..LsaSet|
|00001970| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 54 72 75 73 74 |Informat|ionTrust|
|00001980| 65 64 44 6f 6d 61 69 6e | 0c 41 44 56 41 50 49 33 |edDomain|.ADVAPI3|
|00001990| 32 2e 64 6c 6c 00 e2 88 | 2a 00 00 a0 01 00 16 4c |2.dll...|*......L|
|000019a0| 73 61 53 65 74 51 75 6f | 74 61 73 46 6f 72 41 63 |saSetQuo|tasForAc|
|000019b0| 63 6f 75 6e 74 0c 41 44 | 56 41 50 49 33 32 2e 64 |count.AD|VAPI32.d|
|000019c0| 6c 6c 00 4a 88 20 00 00 | a0 01 00 0c 4c 73 61 53 |ll.J. ..|....LsaS|
|000019d0| 65 74 53 65 63 72 65 74 | 0c 41 44 56 41 50 49 33 |etSecret|.ADVAPI3|
|000019e0| 32 2e 64 6c 6c 00 69 88 | 28 00 00 a0 01 00 14 4c |2.dll.i.|(......L|
|000019f0| 73 61 53 65 74 53 65 63 | 75 72 69 74 79 4f 62 6a |saSetSec|urityObj|
|00001a00| 65 63 74 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ect.ADVA|PI32.dll|
|00001a10| 00 10 88 2d 00 00 a0 01 | 00 19 4c 73 61 53 65 74 |...-....|..LsaSet|
|00001a20| 53 79 73 74 65 6d 41 63 | 63 65 73 73 41 63 63 6f |SystemAc|cessAcco|
|00001a30| 75 6e 74 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |unt.ADVA|PI32.dll|
|00001a40| 00 11 88 32 00 00 a0 01 | 00 1e 4c 73 61 53 65 74 |...2....|..LsaSet|
|00001a50| 54 72 75 73 74 65 64 44 | 6f 6d 61 69 6e 49 6e 66 |TrustedD|omainInf|
|00001a60| 6f 72 6d 61 74 69 6f 6e | 0c 41 44 56 41 50 49 33 |ormation|.ADVAPI3|
|00001a70| 32 2e 64 6c 6c 00 e2 88 | 27 00 00 a0 01 00 13 4c |2.dll...|'......L|
|00001a80| 73 61 53 74 6f 72 65 50 | 72 69 76 61 74 65 44 61 |saStoreP|rivateDa|
|00001a90| 74 61 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |ta.ADVAP|I32.dll.|
|00001aa0| 8b 88 22 00 00 a0 01 00 | 0e 4d 61 6b 65 41 62 73 |..".....|.MakeAbs|
|00001ab0| 6f 6c 75 74 65 53 44 0c | 41 44 56 41 50 49 33 32 |oluteSD.|ADVAPI32|
|00001ac0| 2e 64 6c 6c 00 c3 88 26 | 00 00 a0 01 00 12 4d 61 |.dll...&|......Ma|
|00001ad0| 6b 65 53 65 6c 66 52 65 | 6c 61 74 69 76 65 53 44 |keSelfRe|lativeSD|
|00001ae0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 34 88 |.ADVAPI3|2.dll.4.|
|00001af0| 22 00 00 a0 01 00 0e 4d | 61 70 47 65 6e 65 72 69 |"......M|apGeneri|
|00001b00| 63 4d 61 73 6b 0c 41 44 | 56 41 50 49 33 32 2e 64 |cMask.AD|VAPI32.d|
|00001b10| 6c 6c 00 b0 88 2a 00 00 | a0 01 00 16 4e 6f 74 69 |ll...*..|....Noti|
|00001b20| 66 79 42 6f 6f 74 43 6f | 6e 66 69 67 53 74 61 74 |fyBootCo|nfigStat|
|00001b30| 75 73 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |us.ADVAP|I32.dll.|
|00001b40| 20 88 28 00 00 a0 01 00 | 14 4e 6f 74 69 66 79 43 | .(.....|.NotifyC|
|00001b50| 68 61 6e 67 65 45 76 65 | 6e 74 4c 6f 67 0c 41 44 |hangeEve|ntLog.AD|
|00001b60| 56 41 50 49 33 32 2e 64 | 6c 6c 00 28 88 2a 00 00 |VAPI32.d|ll.(.*..|
|00001b70| a0 01 00 16 4f 62 6a 65 | 63 74 43 6c 6f 73 65 41 |....Obje|ctCloseA|
|00001b80| 75 64 69 74 41 6c 61 72 | 6d 41 0c 41 44 56 41 50 |uditAlar|mA.ADVAP|
|00001b90| 49 33 32 2e 64 6c 6c 00 | 95 88 2a 00 00 a0 01 00 |I32.dll.|..*.....|
|00001ba0| 16 4f 62 6a 65 63 74 43 | 6c 6f 73 65 41 75 64 69 |.ObjectC|loseAudi|
|00001bb0| 74 41 6c 61 72 6d 57 0c | 41 44 56 41 50 49 33 32 |tAlarmW.|ADVAPI32|
|00001bc0| 2e 64 6c 6c 00 7f 88 29 | 00 00 a0 01 00 15 4f 62 |.dll...)|......Ob|
|00001bd0| 6a 65 63 74 4f 70 65 6e | 41 75 64 69 74 41 6c 61 |jectOpen|AuditAla|
|00001be0| 72 6d 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |rmA.ADVA|PI32.dll|
|00001bf0| 00 fb 88 29 00 00 a0 01 | 00 15 4f 62 6a 65 63 74 |...)....|..Object|
|00001c00| 4f 70 65 6e 41 75 64 69 | 74 41 6c 61 72 6d 57 0c |OpenAudi|tAlarmW.|
|00001c10| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 e5 88 2e |ADVAPI32|.dll....|
|00001c20| 00 00 a0 01 00 1a 4f 62 | 6a 65 63 74 50 72 69 76 |......Ob|jectPriv|
|00001c30| 69 6c 65 67 65 41 75 64 | 69 74 41 6c 61 72 6d 41 |ilegeAud|itAlarmA|
|00001c40| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 dc 88 |.ADVAPI3|2.dll...|
|00001c50| 2e 00 00 a0 01 00 1a 4f | 62 6a 65 63 74 50 72 69 |.......O|bjectPri|
|00001c60| 76 69 6c 65 67 65 41 75 | 64 69 74 41 6c 61 72 6d |vilegeAu|ditAlarm|
|00001c70| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 c6 |W.ADVAPI|32.dll..|
|00001c80| 88 27 00 00 a0 01 00 13 | 4f 70 65 6e 42 61 63 6b |.'......|OpenBack|
|00001c90| 75 70 45 76 65 6e 74 4c | 6f 67 41 0c 41 44 56 41 |upEventL|ogA.ADVA|
|00001ca0| 50 49 33 32 2e 64 6c 6c | 00 c0 88 27 00 00 a0 01 |PI32.dll|...'....|
|00001cb0| 00 13 4f 70 65 6e 42 61 | 63 6b 75 70 45 76 65 6e |..OpenBa|ckupEven|
|00001cc0| 74 4c 6f 67 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |tLogW.AD|VAPI32.d|
|00001cd0| 6c 6c 00 aa 88 21 00 00 | a0 01 00 0d 4f 70 65 6e |ll...!..|....Open|
|00001ce0| 45 76 65 6e 74 4c 6f 67 | 41 0c 41 44 56 41 50 49 |EventLog|A.ADVAPI|
|00001cf0| 33 32 2e 64 6c 6c 00 22 | 88 21 00 00 a0 01 00 0d |32.dll."|.!......|
|00001d00| 4f 70 65 6e 45 76 65 6e | 74 4c 6f 67 57 0c 41 44 |OpenEven|tLogW.AD|
|00001d10| 56 41 50 49 33 32 2e 64 | 6c 6c 00 0c 88 24 00 00 |VAPI32.d|ll...$..|
|00001d20| a0 01 00 10 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |....Open|ProcessT|
|00001d30| 6f 6b 65 6e 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |oken.ADV|API32.dl|
|00001d40| 6c 00 a1 88 22 00 00 a0 | 01 00 0e 4f 70 65 6e 53 |l..."...|...OpenS|
|00001d50| 43 4d 61 6e 61 67 65 72 | 41 0c 41 44 56 41 50 49 |CManager|A.ADVAPI|
|00001d60| 33 32 2e 64 6c 6c 00 f3 | 88 22 00 00 a0 01 00 0e |32.dll..|."......|
|00001d70| 4f 70 65 6e 53 43 4d 61 | 6e 61 67 65 72 57 0c 41 |OpenSCMa|nagerW.A|
|00001d80| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 dd 88 20 00 |DVAPI32.|dll... .|
|00001d90| 00 a0 01 00 0c 4f 70 65 | 6e 53 65 72 76 69 63 65 |.....Ope|nService|
|00001da0| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 77 |A.ADVAPI|32.dll.w|
|00001db0| 88 20 00 00 a0 01 00 0c | 4f 70 65 6e 53 65 72 76 |. ......|OpenServ|
|00001dc0| 69 63 65 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |iceW.ADV|API32.dl|
|00001dd0| 6c 00 61 88 23 00 00 a0 | 01 00 0f 4f 70 65 6e 54 |l.a.#...|...OpenT|
|00001de0| 68 72 65 61 64 54 6f 6b | 65 6e 0c 41 44 56 41 50 |hreadTok|en.ADVAP|
|00001df0| 49 33 32 2e 64 6c 6c 00 | 2a 88 22 00 00 a0 01 00 |I32.dll.|*.".....|
|00001e00| 0e 50 72 69 76 69 6c 65 | 67 65 43 68 65 63 6b 0c |.Privile|geCheck.|
|00001e10| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 92 88 30 |ADVAPI32|.dll...0|
|00001e20| 00 00 a0 01 00 1c 50 72 | 69 76 69 6c 65 67 65 64 |......Pr|ivileged|
|00001e30| 53 65 72 76 69 63 65 41 | 75 64 69 74 41 6c 61 72 |ServiceA|uditAlar|
|00001e40| 6d 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |mA.ADVAP|I32.dll.|
|00001e50| fa 88 30 00 00 a0 01 00 | 1c 50 72 69 76 69 6c 65 |..0.....|.Privile|
|00001e60| 67 65 64 53 65 72 76 69 | 63 65 41 75 64 69 74 41 |gedServi|ceAuditA|
|00001e70| 6c 61 72 6d 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |larmW.AD|VAPI32.d|
|00001e80| 6c 6c 00 e4 88 27 00 00 | a0 01 00 13 51 75 65 72 |ll...'..|....Quer|
|00001e90| 79 53 65 72 76 69 63 65 | 43 6f 6e 66 69 67 41 0c |yService|ConfigA.|
|00001ea0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 8f 88 27 |ADVAPI32|.dll...'|
|00001eb0| 00 00 a0 01 00 13 51 75 | 65 72 79 53 65 72 76 69 |......Qu|eryServi|
|00001ec0| 63 65 43 6f 6e 66 69 67 | 57 0c 41 44 56 41 50 49 |ceConfig|W.ADVAPI|
|00001ed0| 33 32 2e 64 6c 6c 00 79 | 88 2b 00 00 a0 01 00 17 |32.dll.y|.+......|
|00001ee0| 51 75 65 72 79 53 65 72 | 76 69 63 65 4c 6f 63 6b |QuerySer|viceLock|
|00001ef0| 53 74 61 74 75 73 41 0c | 41 44 56 41 50 49 33 32 |StatusA.|ADVAPI32|
|00001f00| 2e 64 6c 6c 00 d0 88 2b | 00 00 a0 01 00 17 51 75 |.dll...+|......Qu|
|00001f10| 65 72 79 53 65 72 76 69 | 63 65 4c 6f 63 6b 53 74 |eryServi|ceLockSt|
|00001f20| 61 74 75 73 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |atusW.AD|VAPI32.d|
|00001f30| 6c 6c 00 ba 88 2e 00 00 | a0 01 00 1a 51 75 65 72 |ll......|....Quer|
|00001f40| 79 53 65 72 76 69 63 65 | 4f 62 6a 65 63 74 53 65 |yService|ObjectSe|
|00001f50| 63 75 72 69 74 79 0c 41 | 44 56 41 50 49 33 32 2e |curity.A|DVAPI32.|
|00001f60| 64 6c 6c 00 69 88 26 00 | 00 a0 01 00 12 51 75 65 |dll.i.&.|.....Que|
|00001f70| 72 79 53 65 72 76 69 63 | 65 53 74 61 74 75 73 0c |ryServic|eStatus.|
|00001f80| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 00 a4 88 30 |ADVAPI32|.dll...0|
|00001f90| 00 00 a0 01 00 1c 51 75 | 65 72 79 57 69 6e 64 6f |......Qu|eryWindo|
|00001fa0| 77 73 33 31 46 69 6c 65 | 73 4d 69 67 72 61 74 69 |ws31File|sMigrati|
|00001fb0| 6f 6e 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |on.ADVAP|I32.dll.|
|00001fc0| f9 88 21 00 00 a0 01 00 | 0d 52 65 61 64 45 76 65 |..!.....|.ReadEve|
|00001fd0| 6e 74 4c 6f 67 41 0c 41 | 44 56 41 50 49 33 32 2e |ntLogA.A|DVAPI32.|
|00001fe0| 64 6c 6c 00 38 88 21 00 | 00 a0 01 00 0d 52 65 61 |dll.8.!.|.....Rea|
|00001ff0| 64 45 76 65 6e 74 4c 6f | 67 57 0c 41 44 56 41 50 |dEventLo|gW.ADVAP|
|00002000| 49 33 32 2e 64 6c 6c 00 | 22 88 1f 00 00 a0 01 00 |I32.dll.|".......|
|00002010| 0b 52 65 67 43 6c 6f 73 | 65 4b 65 79 0c 41 44 56 |.RegClos|eKey.ADV|
|00002020| 41 50 49 33 32 2e 64 6c | 6c 00 e0 88 27 00 00 a0 |API32.dl|l...'...|
|00002030| 01 00 13 52 65 67 43 6f | 6e 6e 65 63 74 52 65 67 |...RegCo|nnectReg|
|00002040| 69 73 74 72 79 41 0c 41 | 44 56 41 50 49 33 32 2e |istryA.A|DVAPI32.|
|00002050| 64 6c 6c 00 8b 88 27 00 | 00 a0 01 00 13 52 65 67 |dll...'.|.....Reg|
|00002060| 43 6f 6e 6e 65 63 74 52 | 65 67 69 73 74 72 79 57 |ConnectR|egistryW|
|00002070| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 75 88 |.ADVAPI3|2.dll.u.|
|00002080| 21 00 00 a0 01 00 0d 52 | 65 67 43 72 65 61 74 65 |!......R|egCreate|
|00002090| 4b 65 79 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyA.ADV|API32.dl|
|000020a0| 6c 00 3d 88 23 00 00 a0 | 01 00 0f 52 65 67 43 72 |l.=.#...|...RegCr|
|000020b0| 65 61 74 65 4b 65 79 45 | 78 41 0c 41 44 56 41 50 |eateKeyE|xA.ADVAP|
|000020c0| 49 33 32 2e 64 6c 6c 00 | 7c 88 23 00 00 a0 01 00 |I32.dll.||.#.....|
|000020d0| 0f 52 65 67 43 72 65 61 | 74 65 4b 65 79 45 78 57 |.RegCrea|teKeyExW|
|000020e0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 66 88 |.ADVAPI3|2.dll.f.|
|000020f0| 21 00 00 a0 01 00 0d 52 | 65 67 43 72 65 61 74 65 |!......R|egCreate|
|00002100| 4b 65 79 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyW.ADV|API32.dl|
|00002110| 6c 00 27 88 21 00 00 a0 | 01 00 0d 52 65 67 44 65 |l.'.!...|...RegDe|
|00002120| 6c 65 74 65 4b 65 79 41 | 0c 41 44 56 41 50 49 33 |leteKeyA|.ADVAPI3|
|00002130| 32 2e 64 6c 6c 00 3e 88 | 21 00 00 a0 01 00 0d 52 |2.dll.>.|!......R|
|00002140| 65 67 44 65 6c 65 74 65 | 4b 65 79 57 0c 41 44 56 |egDelete|KeyW.ADV|
|00002150| 41 50 49 33 32 2e 64 6c | 6c 00 28 88 23 00 00 a0 |API32.dl|l.(.#...|
|00002160| 01 00 0f 52 65 67 44 65 | 6c 65 74 65 56 61 6c 75 |...RegDe|leteValu|
|00002170| 65 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |eA.ADVAP|I32.dll.|
|00002180| 66 88 23 00 00 a0 01 00 | 0f 52 65 67 44 65 6c 65 |f.#.....|.RegDele|
|00002190| 74 65 56 61 6c 75 65 57 | 0c 41 44 56 41 50 49 33 |teValueW|.ADVAPI3|
|000021a0| 32 2e 64 6c 6c 00 50 88 | 1f 00 00 a0 01 00 0b 52 |2.dll.P.|.......R|
|000021b0| 65 67 45 6e 75 6d 4b 65 | 79 41 0c 41 44 56 41 50 |egEnumKe|yA.ADVAP|
|000021c0| 49 33 32 2e 64 6c 6c 00 | 00 88 21 00 00 a0 01 00 |I32.dll.|..!.....|
|000021d0| 0d 52 65 67 45 6e 75 6d | 4b 65 79 45 78 41 0c 41 |.RegEnum|KeyExA.A|
|000021e0| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 3f 88 21 00 |DVAPI32.|dll.?.!.|
|000021f0| 00 a0 01 00 0d 52 65 67 | 45 6e 75 6d 4b 65 79 45 |.....Reg|EnumKeyE|
|00002200| 78 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |xW.ADVAP|I32.dll.|
|00002210| 29 88 1f 00 00 a0 01 00 | 0b 52 65 67 45 6e 75 6d |).......|.RegEnum|
|00002220| 4b 65 79 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyW.ADV|API32.dl|
|00002230| 6c 00 ea 88 21 00 00 a0 | 01 00 0d 52 65 67 45 6e |l...!...|...RegEn|
|00002240| 75 6d 56 61 6c 75 65 41 | 0c 41 44 56 41 50 49 33 |umValueA|.ADVAPI3|
|00002250| 32 2e 64 6c 6c 00 28 88 | 21 00 00 a0 01 00 0d 52 |2.dll.(.|!......R|
|00002260| 65 67 45 6e 75 6d 56 61 | 6c 75 65 57 0c 41 44 56 |egEnumVa|lueW.ADV|
|00002270| 41 50 49 33 32 2e 64 6c | 6c 00 12 88 1f 00 00 a0 |API32.dl|l.......|
|00002280| 01 00 0b 52 65 67 46 6c | 75 73 68 4b 65 79 0c 41 |...RegFl|ushKey.A|
|00002290| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 d4 88 25 00 |DVAPI32.|dll...%.|
|000022a0| 00 a0 01 00 11 52 65 67 | 47 65 74 4b 65 79 53 65 |.....Reg|GetKeySe|
|000022b0| 63 75 72 69 74 79 0c 41 | 44 56 41 50 49 33 32 2e |curity.A|DVAPI32.|
|000022c0| 64 6c 6c 00 52 88 1f 00 | 00 a0 01 00 0b 52 65 67 |dll.R...|.....Reg|
|000022d0| 4c 6f 61 64 4b 65 79 41 | 0c 41 44 56 41 50 49 33 |LoadKeyA|.ADVAPI3|
|000022e0| 32 2e 64 6c 6c 00 15 88 | 1f 00 00 a0 01 00 0b 52 |2.dll...|.......R|
|000022f0| 65 67 4c 6f 61 64 4b 65 | 79 57 0c 41 44 56 41 50 |egLoadKe|yW.ADVAP|
|00002300| 49 33 32 2e 64 6c 6c 00 | ff 88 2b 00 00 a0 01 00 |I32.dll.|..+.....|
|00002310| 17 52 65 67 4e 6f 74 69 | 66 79 43 68 61 6e 67 65 |.RegNoti|fyChange|
|00002320| 4b 65 79 56 61 6c 75 65 | 0c 41 44 56 41 50 49 33 |KeyValue|.ADVAPI3|
|00002330| 32 2e 64 6c 6c 00 02 88 | 1f 00 00 a0 01 00 0b 52 |2.dll...|.......R|
|00002340| 65 67 4f 70 65 6e 4b 65 | 79 41 0c 41 44 56 41 50 |egOpenKe|yA.ADVAP|
|00002350| 49 33 32 2e 64 6c 6c 00 | 03 88 21 00 00 a0 01 00 |I32.dll.|..!.....|
|00002360| 0d 52 65 67 4f 70 65 6e | 4b 65 79 45 78 41 0c 41 |.RegOpen|KeyExA.A|
|00002370| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 42 88 21 00 |DVAPI32.|dll.B.!.|
|00002380| 00 a0 01 00 0d 52 65 67 | 4f 70 65 6e 4b 65 79 45 |.....Reg|OpenKeyE|
|00002390| 78 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |xW.ADVAP|I32.dll.|
|000023a0| 2c 88 1f 00 00 a0 01 00 | 0b 52 65 67 4f 70 65 6e |,.......|.RegOpen|
|000023b0| 4b 65 79 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyW.ADV|API32.dl|
|000023c0| 6c 00 ed 88 24 00 00 a0 | 01 00 10 52 65 67 51 75 |l...$...|...RegQu|
|000023d0| 65 72 79 49 6e 66 6f 4b | 65 79 41 0c 41 44 56 41 |eryInfoK|eyA.ADVA|
|000023e0| 50 49 33 32 2e 64 6c 6c | 00 e9 88 24 00 00 a0 01 |PI32.dll|...$....|
|000023f0| 00 10 52 65 67 51 75 65 | 72 79 49 6e 66 6f 4b 65 |..RegQue|ryInfoKe|
|00002400| 79 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |yW.ADVAP|I32.dll.|
|00002410| d3 88 2b 00 00 a0 01 00 | 17 52 65 67 51 75 65 72 |..+.....|.RegQuer|
|00002420| 79 4d 75 6c 74 69 70 6c | 65 56 61 6c 75 65 73 41 |yMultipl|eValuesA|
|00002430| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 d4 88 |.ADVAPI3|2.dll...|
|00002440| 2b 00 00 a0 01 00 17 52 | 65 67 51 75 65 72 79 4d |+......R|egQueryM|
|00002450| 75 6c 74 69 70 6c 65 56 | 61 6c 75 65 73 57 0c 41 |ultipleV|aluesW.A|
|00002460| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 be 88 22 00 |DVAPI32.|dll...".|
|00002470| 00 a0 01 00 0e 52 65 67 | 51 75 65 72 79 56 61 6c |.....Reg|QueryVal|
|00002480| 75 65 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ueA.ADVA|PI32.dll|
|00002490| 00 a5 88 24 00 00 a0 01 | 00 10 52 65 67 51 75 65 |...$....|..RegQue|
|000024a0| 72 79 56 61 6c 75 65 45 | 78 41 0c 41 44 56 41 50 |ryValueE|xA.ADVAP|
|000024b0| 49 33 32 2e 64 6c 6c 00 | e4 88 24 00 00 a0 01 00 |I32.dll.|..$.....|
|000024c0| 10 52 65 67 51 75 65 72 | 79 56 61 6c 75 65 45 78 |.RegQuer|yValueEx|
|000024d0| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 ce |W.ADVAPI|32.dll..|
|000024e0| 88 22 00 00 a0 01 00 0e | 52 65 67 51 75 65 72 79 |."......|RegQuery|
|000024f0| 56 61 6c 75 65 57 0c 41 | 44 56 41 50 49 33 32 2e |ValueW.A|DVAPI32.|
|00002500| 64 6c 6c 00 8f 88 22 00 | 00 a0 01 00 0e 52 65 67 |dll...".|.....Reg|
|00002510| 52 65 70 6c 61 63 65 4b | 65 79 41 0c 41 44 56 41 |ReplaceK|eyA.ADVA|
|00002520| 50 49 33 32 2e 64 6c 6c | 00 d3 88 22 00 00 a0 01 |PI32.dll|..."....|
|00002530| 00 0e 52 65 67 52 65 70 | 6c 61 63 65 4b 65 79 57 |..RegRep|laceKeyW|
|00002540| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 bd 88 |.ADVAPI3|2.dll...|
|00002550| 22 00 00 a0 01 00 0e 52 | 65 67 52 65 73 74 6f 72 |"......R|egRestor|
|00002560| 65 4b 65 79 41 0c 41 44 | 56 41 50 49 33 32 2e 64 |eKeyA.AD|VAPI32.d|
|00002570| 6c 6c 00 ab 88 22 00 00 | a0 01 00 0e 52 65 67 52 |ll..."..|....RegR|
|00002580| 65 73 74 6f 72 65 4b 65 | 79 57 0c 41 44 56 41 50 |estoreKe|yW.ADVAP|
|00002590| 49 33 32 2e 64 6c 6c 00 | 95 88 1f 00 00 a0 01 00 |I32.dll.|........|
|000025a0| 0b 52 65 67 53 61 76 65 | 4b 65 79 41 0c 41 44 56 |.RegSave|KeyA.ADV|
|000025b0| 41 50 49 33 32 2e 64 6c | 6c 00 06 88 1f 00 00 a0 |API32.dl|l.......|
|000025c0| 01 00 0b 52 65 67 53 61 | 76 65 4b 65 79 57 0c 41 |...RegSa|veKeyW.A|
|000025d0| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 f0 88 25 00 |DVAPI32.|dll...%.|
|000025e0| 00 a0 01 00 11 52 65 67 | 53 65 74 4b 65 79 53 65 |.....Reg|SetKeySe|
|000025f0| 63 75 72 69 74 79 0c 41 | 44 56 41 50 49 33 32 2e |curity.A|DVAPI32.|
|00002600| 64 6c 6c 00 46 88 20 00 | 00 a0 01 00 0c 52 65 67 |dll.F. .|.....Reg|
|00002610| 53 65 74 56 61 6c 75 65 | 41 0c 41 44 56 41 50 49 |SetValue|A.ADVAPI|
|00002620| 33 32 2e 64 6c 6c 00 93 | 88 22 00 00 a0 01 00 0e |32.dll..|."......|
|00002630| 52 65 67 53 65 74 56 61 | 6c 75 65 45 78 41 0c 41 |RegSetVa|lueExA.A|
|00002640| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 d2 88 22 00 |DVAPI32.|dll...".|
|00002650| 00 a0 01 00 0e 52 65 67 | 53 65 74 56 61 6c 75 65 |.....Reg|SetValue|
|00002660| 45 78 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ExW.ADVA|PI32.dll|
|00002670| 00 bc 88 20 00 00 a0 01 | 00 0c 52 65 67 53 65 74 |... ....|..RegSet|
|00002680| 56 61 6c 75 65 57 0c 41 | 44 56 41 50 49 33 32 2e |ValueW.A|DVAPI32.|
|00002690| 64 6c 6c 00 7d 88 21 00 | 00 a0 01 00 0d 52 65 67 |dll.}.!.|.....Reg|
|000026a0| 55 6e 4c 6f 61 64 4b 65 | 79 41 0c 41 44 56 41 50 |UnLoadKe|yA.ADVAP|
|000026b0| 49 33 32 2e 64 6c 6c 00 | 4e 88 21 00 00 a0 01 00 |I32.dll.|N.!.....|
|000026c0| 0d 52 65 67 55 6e 4c 6f | 61 64 4b 65 79 57 0c 41 |.RegUnLo|adKeyW.A|
|000026d0| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 38 88 28 00 |DVAPI32.|dll.8.(.|
|000026e0| 00 a0 01 00 14 52 65 67 | 69 73 74 65 72 45 76 65 |.....Reg|isterEve|
|000026f0| 6e 74 53 6f 75 72 63 65 | 41 0c 41 44 56 41 50 49 |ntSource|A.ADVAPI|
|00002700| 33 32 2e 64 6c 6c 00 12 | 88 28 00 00 a0 01 00 14 |32.dll..|.(......|
|00002710| 52 65 67 69 73 74 65 72 | 45 76 65 6e 74 53 6f 75 |Register|EventSou|
|00002720| 72 63 65 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |rceW.ADV|API32.dl|
|00002730| 6c 00 fc 88 2f 00 00 a0 | 01 00 1b 52 65 67 69 73 |l.../...|...Regis|
|00002740| 74 65 72 53 65 72 76 69 | 63 65 43 74 72 6c 48 61 |terServi|ceCtrlHa|
|00002750| 6e 64 6c 65 72 41 0c 41 | 44 56 41 50 49 33 32 2e |ndlerA.A|DVAPI32.|
|00002760| 64 6c 6c 00 53 88 2f 00 | 00 a0 01 00 1b 52 65 67 |dll.S./.|.....Reg|
|00002770| 69 73 74 65 72 53 65 72 | 76 69 63 65 43 74 72 6c |isterSer|viceCtrl|
|00002780| 48 61 6e 64 6c 65 72 57 | 0c 41 44 56 41 50 49 33 |HandlerW|.ADVAPI3|
|00002790| 32 2e 64 6c 6c 00 3d 88 | 20 00 00 a0 01 00 0c 52 |2.dll.=.| ......R|
|000027a0| 65 70 6f 72 74 45 76 65 | 6e 74 41 0c 41 44 56 41 |eportEve|ntA.ADVA|
|000027b0| 50 49 33 32 2e 64 6c 6c | 00 5c 88 20 00 00 a0 01 |PI32.dll|.\. ....|
|000027c0| 00 0c 52 65 70 6f 72 74 | 45 76 65 6e 74 57 0c 41 |..Report|EventW.A|
|000027d0| 44 56 41 50 49 33 32 2e | 64 6c 6c 00 46 88 20 00 |DVAPI32.|dll.F. .|
|000027e0| 00 a0 01 00 0c 52 65 76 | 65 72 74 54 6f 53 65 6c |.....Rev|ertToSel|
|000027f0| 66 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 56 |f.ADVAPI|32.dll.V|
|00002800| 88 25 00 00 a0 01 00 11 | 53 65 74 41 63 6c 49 6e |.%......|SetAclIn|
|00002810| 66 6f 72 6d 61 74 69 6f | 6e 0c 41 44 56 41 50 49 |formatio|n.ADVAPI|
|00002820| 33 32 2e 64 6c 6c 00 4f | 88 24 00 00 a0 01 00 10 |32.dll.O|.$......|
|00002830| 53 65 74 46 69 6c 65 53 | 65 63 75 72 69 74 79 41 |SetFileS|ecurityA|
|00002840| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 ce 88 |.ADVAPI3|2.dll...|
|00002850| 24 00 00 a0 01 00 10 53 | 65 74 46 69 6c 65 53 65 |$......S|etFileSe|
|00002860| 63 75 72 69 74 79 57 0c | 41 44 56 41 50 49 33 32 |curityW.|ADVAPI32|
|00002870| 2e 64 6c 6c 00 b8 88 2b | 00 00 a0 01 00 17 53 65 |.dll...+|......Se|
|00002880| 74 4b 65 72 6e 65 6c 4f | 62 6a 65 63 74 53 65 63 |tKernelO|bjectSec|
|00002890| 75 72 69 74 79 0c 41 44 | 56 41 50 49 33 32 2e 64 |urity.AD|VAPI32.d|
|000028a0| 6c 6c 00 c9 88 2c 00 00 | a0 01 00 18 53 65 74 50 |ll...,..|....SetP|
|000028b0| 72 69 76 61 74 65 4f 62 | 6a 65 63 74 53 65 63 75 |rivateOb|jectSecu|
|000028c0| 72 69 74 79 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |rity.ADV|API32.dl|
|000028d0| 6c 00 4d 88 2d 00 00 a0 | 01 00 19 53 65 74 53 65 |l.M.-...|...SetSe|
|000028e0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|000028f0| 44 61 63 6c 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |Dacl.ADV|API32.dl|
|00002900| 6c 00 ea 88 2e 00 00 a0 | 01 00 1a 53 65 74 53 65 |l.......|...SetSe|
|00002910| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00002920| 47 72 6f 75 70 0c 41 44 | 56 41 50 49 33 32 2e 64 |Group.AD|VAPI32.d|
|00002930| 6c 6c 00 4f 88 2e 00 00 | a0 01 00 1a 53 65 74 53 |ll.O....|....SetS|
|00002940| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00002950| 72 4f 77 6e 65 72 0c 41 | 44 56 41 50 49 33 32 2e |rOwner.A|DVAPI32.|
|00002960| 64 6c 6c 00 51 88 2d 00 | 00 a0 01 00 19 53 65 74 |dll.Q.-.|.....Set|
|00002970| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00002980| 6f 72 53 61 63 6c 0c 41 | 44 56 41 50 49 33 32 2e |orSacl.A|DVAPI32.|
|00002990| 64 6c 6c 00 db 88 22 00 | 00 a0 01 00 0e 53 65 74 |dll...".|.....Set|
|000029a0| 53 65 72 76 69 63 65 42 | 69 74 73 0c 41 44 56 41 |ServiceB|its.ADVA|
|000029b0| 50 49 33 32 2e 64 6c 6c | 00 88 88 2c 00 00 a0 01 |PI32.dll|...,....|
|000029c0| 00 18 53 65 74 53 65 72 | 76 69 63 65 4f 62 6a 65 |..SetSer|viceObje|
|000029d0| 63 74 53 65 63 75 72 69 | 74 79 0c 41 44 56 41 50 |ctSecuri|ty.ADVAP|
|000029e0| 49 33 32 2e 64 6c 6c 00 | 57 88 24 00 00 a0 01 00 |I32.dll.|W.$.....|
|000029f0| 10 53 65 74 53 65 72 76 | 69 63 65 53 74 61 74 75 |.SetServ|iceStatu|
|00002a00| 73 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 92 |s.ADVAPI|32.dll..|
|00002a10| 88 22 00 00 a0 01 00 0e | 53 65 74 54 68 72 65 61 |."......|SetThrea|
|00002a20| 64 54 6f 6b 65 6e 0c 41 | 44 56 41 50 49 33 32 2e |dToken.A|DVAPI32.|
|00002a30| 64 6c 6c 00 92 88 27 00 | 00 a0 01 00 13 53 65 74 |dll...'.|.....Set|
|00002a40| 54 6f 6b 65 6e 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |TokenInf|ormation|
|00002a50| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 5a 88 |.ADVAPI3|2.dll.Z.|
|00002a60| 21 00 00 a0 01 00 0d 53 | 74 61 72 74 53 65 72 76 |!......S|tartServ|
|00002a70| 69 63 65 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |iceA.ADV|API32.dl|
|00002a80| 6c 00 f9 88 2f 00 00 a0 | 01 00 1b 53 74 61 72 74 |l.../...|...Start|
|00002a90| 53 65 72 76 69 63 65 43 | 74 72 6c 44 69 73 70 61 |ServiceC|trlDispa|
|00002aa0| 74 63 68 65 72 41 0c 41 | 44 56 41 50 49 33 32 2e |tcherA.A|DVAPI32.|
|00002ab0| 64 6c 6c 00 41 88 2f 00 | 00 a0 01 00 1b 53 74 61 |dll.A./.|.....Sta|
|00002ac0| 72 74 53 65 72 76 69 63 | 65 43 74 72 6c 44 69 73 |rtServic|eCtrlDis|
|00002ad0| 70 61 74 63 68 65 72 57 | 0c 41 44 56 41 50 49 33 |patcherW|.ADVAPI3|
|00002ae0| 32 2e 64 6c 6c 00 2b 88 | 21 00 00 a0 01 00 0d 53 |2.dll.+.|!......S|
|00002af0| 74 61 72 74 53 65 72 76 | 69 63 65 57 0c 41 44 56 |tartServ|iceW.ADV|
|00002b00| 41 50 49 33 32 2e 64 6c | 6c 00 e3 88 41 00 00 a0 |API32.dl|l...A...|
|00002b10| 01 00 2d 53 79 6e 63 68 | 72 6f 6e 69 7a 65 57 69 |..-Synch|ronizeWi|
|00002b20| 6e 64 6f 77 73 33 31 46 | 69 6c 65 73 41 6e 64 57 |ndows31F|ilesAndW|
|00002b30| 69 6e 64 6f 77 73 4e 54 | 52 65 67 69 73 74 72 79 |indowsNT|Registry|
|00002b40| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 02 88 |.ADVAPI3|2.dll...|
|00002b50| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002b60| 63 74 69 6f 6e 30 30 31 | 0c 41 44 56 41 50 49 33 |ction001|.ADVAPI3|
|00002b70| 32 2e 64 6c 6c 00 b5 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002b80| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 30 32 |ystemFun|ction002|
|00002b90| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b4 88 |.ADVAPI3|2.dll...|
|00002ba0| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002bb0| 63 74 69 6f 6e 30 30 33 | 0c 41 44 56 41 50 49 33 |ction003|.ADVAPI3|
|00002bc0| 32 2e 64 6c 6c 00 b3 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002bd0| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 30 34 |ystemFun|ction004|
|00002be0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b2 88 |.ADVAPI3|2.dll...|
|00002bf0| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002c00| 63 74 69 6f 6e 30 30 35 | 0c 41 44 56 41 50 49 33 |ction005|.ADVAPI3|
|00002c10| 32 2e 64 6c 6c 00 b1 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002c20| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 30 36 |ystemFun|ction006|
|00002c30| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b0 88 |.ADVAPI3|2.dll...|
|00002c40| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002c50| 63 74 69 6f 6e 30 30 37 | 0c 41 44 56 41 50 49 33 |ction007|.ADVAPI3|
|00002c60| 32 2e 64 6c 6c 00 af 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002c70| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 30 38 |ystemFun|ction008|
|00002c80| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 ae 88 |.ADVAPI3|2.dll...|
|00002c90| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002ca0| 63 74 69 6f 6e 30 30 39 | 0c 41 44 56 41 50 49 33 |ction009|.ADVAPI3|
|00002cb0| 32 2e 64 6c 6c 00 ad 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002cc0| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 31 30 |ystemFun|ction010|
|00002cd0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b5 88 |.ADVAPI3|2.dll...|
|00002ce0| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002cf0| 63 74 69 6f 6e 30 31 31 | 0c 41 44 56 41 50 49 33 |ction011|.ADVAPI3|
|00002d00| 32 2e 64 6c 6c 00 b4 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002d10| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 31 32 |ystemFun|ction012|
|00002d20| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b3 88 |.ADVAPI3|2.dll...|
|00002d30| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002d40| 63 74 69 6f 6e 30 31 33 | 0c 41 44 56 41 50 49 33 |ction013|.ADVAPI3|
|00002d50| 32 2e 64 6c 6c 00 b2 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002d60| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 31 34 |ystemFun|ction014|
|00002d70| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b1 88 |.ADVAPI3|2.dll...|
|00002d80| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002d90| 63 74 69 6f 6e 30 31 35 | 0c 41 44 56 41 50 49 33 |ction015|.ADVAPI3|
|00002da0| 32 2e 64 6c 6c 00 b0 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002db0| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 31 36 |ystemFun|ction016|
|00002dc0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 af 88 |.ADVAPI3|2.dll...|
|00002dd0| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002de0| 63 74 69 6f 6e 30 31 37 | 0c 41 44 56 41 50 49 33 |ction017|.ADVAPI3|
|00002df0| 32 2e 64 6c 6c 00 ae 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002e00| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 31 38 |ystemFun|ction018|
|00002e10| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 ad 88 |.ADVAPI3|2.dll...|
|00002e20| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002e30| 63 74 69 6f 6e 30 31 39 | 0c 41 44 56 41 50 49 33 |ction019|.ADVAPI3|
|00002e40| 32 2e 64 6c 6c 00 ac 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002e50| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 32 30 |ystemFun|ction020|
|00002e60| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b4 88 |.ADVAPI3|2.dll...|
|00002e70| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002e80| 63 74 69 6f 6e 30 32 31 | 0c 41 44 56 41 50 49 33 |ction021|.ADVAPI3|
|00002e90| 32 2e 64 6c 6c 00 b3 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002ea0| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 32 32 |ystemFun|ction022|
|00002eb0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b2 88 |.ADVAPI3|2.dll...|
|00002ec0| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002ed0| 63 74 69 6f 6e 30 32 33 | 0c 41 44 56 41 50 49 33 |ction023|.ADVAPI3|
|00002ee0| 32 2e 64 6c 6c 00 b1 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002ef0| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 32 34 |ystemFun|ction024|
|00002f00| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b0 88 |.ADVAPI3|2.dll...|
|00002f10| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002f20| 63 74 69 6f 6e 30 32 35 | 0c 41 44 56 41 50 49 33 |ction025|.ADVAPI3|
|00002f30| 32 2e 64 6c 6c 00 af 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002f40| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 32 36 |ystemFun|ction026|
|00002f50| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 ae 88 |.ADVAPI3|2.dll...|
|00002f60| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002f70| 63 74 69 6f 6e 30 32 37 | 0c 41 44 56 41 50 49 33 |ction027|.ADVAPI3|
|00002f80| 32 2e 64 6c 6c 00 ad 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002f90| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 32 38 |ystemFun|ction028|
|00002fa0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 ac 88 |.ADVAPI3|2.dll...|
|00002fb0| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00002fc0| 63 74 69 6f 6e 30 32 39 | 0c 41 44 56 41 50 49 33 |ction029|.ADVAPI3|
|00002fd0| 32 2e 64 6c 6c 00 ab 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00002fe0| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 33 30 |ystemFun|ction030|
|00002ff0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b3 88 |.ADVAPI3|2.dll...|
|00003000| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00003010| 63 74 69 6f 6e 30 33 31 | 0c 41 44 56 41 50 49 33 |ction031|.ADVAPI3|
|00003020| 32 2e 64 6c 6c 00 b2 88 | 25 00 00 a0 01 00 11 53 |2.dll...|%......S|
|00003030| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 33 32 |ystemFun|ction032|
|00003040| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 00 b1 88 |.ADVAPI3|2.dll...|
|00003050| 25 00 00 a0 01 00 11 53 | 79 73 74 65 6d 46 75 6e |%......S|ystemFun|
|00003060| 63 74 69 6f 6e 30 33 33 | 0c 41 44 56 41 50 49 33 |ction033|.ADVAPI3|
|00003070| 32 2e 64 6c 6c 00 b0 88 | 29 00 00 a0 01 00 15 55 |2.dll...|)......U|
|00003080| 6e 6c 6f 63 6b 53 65 72 | 76 69 63 65 44 61 74 61 |nlockSer|viceData|
|00003090| 62 61 73 65 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |base.ADV|API32.dl|
|000030a0| 6c 00 b7 8a 02 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|000030b0| 80 08 00 06 64 6c 63 61 | 70 69 00 88 18 00 00 a0 |....dlca|pi......|
|000030c0| 01 00 06 41 63 73 4c 61 | 6e 0a 44 4c 43 41 50 49 |...AcsLa|n.DLCAPI|
|000030d0| 2e 64 6c 6c 00 66 88 1f | 00 00 a0 01 00 0d 44 6c |.dll.f..|......Dl|
|000030e0| 63 43 61 6c 6c 44 72 69 | 76 65 72 0a 44 4c 43 41 |cCallDri|ver.DLCA|
|000030f0| 50 49 2e 64 6c 6c 00 8f | 88 1a 00 00 a0 01 00 08 |PI.dll..|........|
|00003100| 4e 74 41 63 73 4c 61 6e | 0a 44 4c 43 41 50 49 2e |NtAcsLan|.DLCAPI.|
|00003110| 64 6c 6c 00 a0 8a 02 00 | 00 00 00 00 00 00 00 00 |dll.....|........|
|00003120| 80 0a 00 08 6b 65 72 6e | 65 6c 33 32 00 88 1c 00 |....kern|el32....|
|00003130| 00 a0 01 00 08 41 64 64 | 41 74 6f 6d 41 0c 4b 45 |.....Add|AtomA.KE|
|00003140| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 3c 88 1c 00 00 |RNEL32.d|ll.<....|
|00003150| a0 01 00 08 41 64 64 41 | 74 6f 6d 57 0c 4b 45 52 |....AddA|tomW.KER|
|00003160| 4e 45 4c 33 32 2e 64 6c | 6c 00 26 88 24 00 00 a0 |NEL32.dl|l.&.$...|
|00003170| 01 00 10 41 64 64 43 6f | 6e 73 6f 6c 65 41 6c 69 |...AddCo|nsoleAli|
|00003180| 61 73 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |asA.KERN|EL32.dll|
|00003190| 00 00 88 24 00 00 a0 01 | 00 10 41 64 64 43 6f 6e |...$....|..AddCon|
|000031a0| 73 6f 6c 65 41 6c 69 61 | 73 57 0c 4b 45 52 4e 45 |soleAlia|sW.KERNE|
|000031b0| 4c 33 32 2e 64 6c 6c 00 | ea 88 20 00 00 a0 01 00 |L32.dll.|.. .....|
|000031c0| 0c 41 6c 6c 6f 63 43 6f | 6e 73 6f 6c 65 0c 4b 45 |.AllocCo|nsole.KE|
|000031d0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 51 88 23 00 00 |RNEL32.d|ll.Q.#..|
|000031e0| a0 01 00 0f 41 6c 6c 6f | 63 4c 53 43 61 6c 6c 62 |....Allo|cLSCallb|
|000031f0| 61 63 6b 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ack.KERN|EL32.dll|
|00003200| 00 72 88 23 00 00 a0 01 | 00 0f 41 6c 6c 6f 63 53 |.r.#....|..AllocS|
|00003210| 4c 43 61 6c 6c 62 61 63 | 6b 0c 4b 45 52 4e 45 4c |LCallbac|k.KERNEL|
|00003220| 33 32 2e 64 6c 6c 00 72 | 88 23 00 00 a0 01 00 0f |32.dll.r|.#......|
|00003230| 41 72 65 46 69 6c 65 41 | 70 69 73 41 4e 53 49 0c |AreFileA|pisANSI.|
|00003240| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 b9 88 1e |KERNEL32|.dll....|
|00003250| 00 00 a0 01 00 0a 42 61 | 63 6b 75 70 52 65 61 64 |......Ba|ckupRead|
|00003260| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 41 88 |.KERNEL3|2.dll.A.|
|00003270| 1e 00 00 a0 01 00 0a 42 | 61 63 6b 75 70 53 65 65 |.......B|ackupSee|
|00003280| 6b 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 35 |k.KERNEL|32.dll.5|
|00003290| 88 1f 00 00 a0 01 00 0b | 42 61 63 6b 75 70 57 72 |........|BackupWr|
|000032a0| 69 74 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ite.KERN|EL32.dll|
|000032b0| 00 b0 88 2b 00 00 a0 01 | 00 17 42 61 73 65 41 74 |...+....|..BaseAt|
|000032c0| 74 61 63 68 43 6f 6d 70 | 6c 65 74 65 54 68 75 6e |tachComp|leteThun|
|000032d0| 6b 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 e6 |k.KERNEL|32.dll..|
|000032e0| 88 22 00 00 a0 01 00 0e | 42 61 73 65 70 44 65 62 |."......|BasepDeb|
|000032f0| 75 67 44 75 6d 70 0c 4b | 45 52 4e 45 4c 33 32 2e |ugDump.K|ERNEL32.|
|00003300| 64 6c 6c 00 a3 88 18 00 | 00 a0 01 00 04 42 65 65 |dll.....|.....Bee|
|00003310| 70 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 a3 |p.KERNEL|32.dll..|
|00003320| 88 28 00 00 a0 01 00 14 | 42 65 67 69 6e 55 70 64 |.(......|BeginUpd|
|00003330| 61 74 65 52 65 73 6f 75 | 72 63 65 41 0c 4b 45 52 |ateResou|rceA.KER|
|00003340| 4e 45 4c 33 32 2e 64 6c | 6c 00 2e 88 28 00 00 a0 |NEL32.dl|l...(...|
|00003350| 01 00 14 42 65 67 69 6e | 55 70 64 61 74 65 52 65 |...Begin|UpdateRe|
|00003360| 73 6f 75 72 63 65 57 0c | 4b 45 52 4e 45 4c 33 32 |sourceW.|KERNEL32|
|00003370| 2e 64 6c 6c 00 18 88 21 | 00 00 a0 01 00 0d 42 75 |.dll...!|......Bu|
|00003380| 69 6c 64 43 6f 6d 6d 44 | 43 42 41 0c 4b 45 52 4e |ildCommD|CBA.KERN|
|00003390| 45 4c 33 32 2e 64 6c 6c | 00 87 88 2c 00 00 a0 01 |EL32.dll|...,....|
|000033a0| 00 18 42 75 69 6c 64 43 | 6f 6d 6d 44 43 42 41 6e |..BuildC|ommDCBAn|
|000033b0| 64 54 69 6d 65 6f 75 74 | 73 41 0c 4b 45 52 4e 45 |dTimeout|sA.KERNE|
|000033c0| 4c 33 32 2e 64 6c 6c 00 | 04 88 2c 00 00 a0 01 00 |L32.dll.|..,.....|
|000033d0| 18 42 75 69 6c 64 43 6f | 6d 6d 44 43 42 41 6e 64 |.BuildCo|mmDCBAnd|
|000033e0| 54 69 6d 65 6f 75 74 73 | 57 0c 4b 45 52 4e 45 4c |Timeouts|W.KERNEL|
|000033f0| 33 32 2e 64 6c 6c 00 ee | 88 21 00 00 a0 01 00 0d |32.dll..|.!......|
|00003400| 42 75 69 6c 64 43 6f 6d | 6d 44 43 42 57 0c 4b 45 |BuildCom|mDCBW.KE|
|00003410| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 71 88 22 00 00 |RNEL32.d|ll.q."..|
|00003420| a0 01 00 0e 43 61 6c 6c | 4e 61 6d 65 64 50 69 70 |....Call|NamedPip|
|00003430| 65 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |eA.KERNE|L32.dll.|
|00003440| db 88 22 00 00 a0 01 00 | 0e 43 61 6c 6c 4e 61 6d |..".....|.CallNam|
|00003450| 65 64 50 69 70 65 57 0c | 4b 45 52 4e 45 4c 33 32 |edPipeW.|KERNEL32|
|00003460| 2e 64 6c 6c 00 c5 88 22 | 00 00 a0 01 00 0e 43 6c |.dll..."|......Cl|
|00003470| 65 61 72 43 6f 6d 6d 42 | 72 65 61 6b 0c 4b 45 52 |earCommB|reak.KER|
|00003480| 4e 45 4c 33 32 2e 64 6c | 6c 00 b3 88 22 00 00 a0 |NEL32.dl|l..."...|
|00003490| 01 00 0e 43 6c 65 61 72 | 43 6f 6d 6d 45 72 72 6f |...Clear|CommErro|
|000034a0| 72 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 8e |r.KERNEL|32.dll..|
|000034b0| 88 26 00 00 a0 01 00 12 | 43 6c 6f 73 65 43 6f 6e |.&......|CloseCon|
|000034c0| 73 6f 6c 65 48 61 6e 64 | 6c 65 0c 4b 45 52 4e 45 |soleHand|le.KERNE|
|000034d0| 4c 33 32 2e 64 6c 6c 00 | ee 88 1f 00 00 a0 01 00 |L32.dll.|........|
|000034e0| 0b 43 6c 6f 73 65 48 61 | 6e 64 6c 65 0c 4b 45 52 |.CloseHa|ndle.KER|
|000034f0| 4e 45 4c 33 32 2e 64 6c | 6c 00 cf 88 2b 00 00 a0 |NEL32.dl|l...+...|
|00003500| 01 00 17 43 6c 6f 73 65 | 50 72 6f 66 69 6c 65 55 |...Close|ProfileU|
|00003510| 73 65 72 4d 61 70 70 69 | 6e 67 0c 4b 45 52 4e 45 |serMappi|ng.KERNE|
|00003520| 4c 33 32 2e 64 6c 6c 00 | c7 88 26 00 00 a0 01 00 |L32.dll.|..&.....|
|00003530| 12 43 6d 64 42 61 74 4e | 6f 74 69 66 69 63 61 74 |.CmdBatN|otificat|
|00003540| 69 6f 6e 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ion.KERN|EL32.dll|
|00003550| 00 f1 88 25 00 00 a0 01 | 00 11 43 6c 6f 73 65 53 |...%....|..CloseS|
|00003560| 79 73 74 65 6d 48 61 6e | 64 6c 65 0c 4b 45 52 4e |ystemHan|dle.KERN|
|00003570| 45 4c 33 32 2e 64 6c 6c | 00 3e 88 25 00 00 a0 01 |EL32.dll|.>.%....|
|00003580| 00 11 43 6f 6d 6d 43 6f | 6e 66 69 67 44 69 61 6c |..CommCo|nfigDial|
|00003590| 6f 67 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ogA.KERN|EL32.dll|
|000035a0| 00 92 88 25 00 00 a0 01 | 00 11 43 6f 6d 6d 43 6f |...%....|..CommCo|
|000035b0| 6e 66 69 67 44 69 61 6c | 6f 67 57 0c 4b 45 52 4e |nfigDial|ogW.KERN|
|000035c0| 45 4c 33 32 2e 64 6c 6c | 00 7c 88 23 00 00 a0 01 |EL32.dll|.|.#....|
|000035d0| 00 0f 43 6f 6d 70 61 72 | 65 46 69 6c 65 54 69 6d |..Compar|eFileTim|
|000035e0| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 33 |e.KERNEL|32.dll.3|
|000035f0| 88 22 00 00 a0 01 00 0e | 43 6f 6d 70 61 72 65 53 |."......|CompareS|
|00003600| 74 72 69 6e 67 41 0c 4b | 45 52 4e 45 4c 33 32 2e |tringA.K|ERNEL32.|
|00003610| 64 6c 6c 00 8c 88 22 00 | 00 a0 01 00 0e 43 6f 6d |dll...".|.....Com|
|00003620| 70 61 72 65 53 74 72 69 | 6e 67 57 0c 4b 45 52 4e |pareStri|ngW.KERN|
|00003630| 45 4c 33 32 2e 64 6c 6c | 00 76 88 24 00 00 a0 01 |EL32.dll|.v.$....|
|00003640| 00 10 43 6f 6e 6e 65 63 | 74 4e 61 6d 65 64 50 69 |..Connec|tNamedPi|
|00003650| 70 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |pe.KERNE|L32.dll.|
|00003660| ca 88 26 00 00 a0 01 00 | 12 43 6f 6e 73 6f 6c 65 |..&.....|.Console|
|00003670| 4d 65 6e 75 43 6f 6e 74 | 72 6f 6c 0c 4b 45 52 4e |MenuCont|rol.KERN|
|00003680| 45 4c 33 32 2e 64 6c 6c | 00 ba 88 20 00 00 a0 01 |EL32.dll|... ....|
|00003690| 00 0c 43 6f 6e 73 6f 6c | 65 53 75 62 73 74 0c 4b |..Consol|eSubst.K|
|000036a0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 2b 88 26 00 |ERNEL32.|dll.+.&.|
|000036b0| 00 a0 01 00 12 43 6f 6e | 74 69 6e 75 65 44 65 62 |.....Con|tinueDeb|
|000036c0| 75 67 45 76 65 6e 74 0c | 4b 45 52 4e 45 4c 33 32 |ugEvent.|KERNEL32|
|000036d0| 2e 64 6c 6c 00 d5 88 28 | 00 00 a0 01 00 14 43 6f |.dll...(|......Co|
|000036e0| 6e 76 65 72 74 44 65 66 | 61 75 6c 74 4c 6f 63 61 |nvertDef|aultLoca|
|000036f0| 6c 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |le.KERNE|L32.dll.|
|00003700| 09 88 29 00 00 a0 01 00 | 15 43 6f 6e 76 65 72 74 |..).....|.Convert|
|00003710| 54 6f 47 6c 6f 62 61 6c | 48 61 6e 64 6c 65 0c 4b |ToGlobal|Handle.K|
|00003720| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 bc 88 1d 00 |ERNEL32.|dll.....|
|00003730| 00 a0 01 00 09 43 6f 70 | 79 46 69 6c 65 41 0c 4b |.....Cop|yFileA.K|
|00003740| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 b9 88 1d 00 |ERNEL32.|dll.....|
|00003750| 00 a0 01 00 09 43 6f 70 | 79 46 69 6c 65 57 0c 4b |.....Cop|yFileW.K|
|00003760| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 a3 88 2d 00 |ERNEL32.|dll...-.|
|00003770| 00 a0 01 00 19 43 72 65 | 61 74 65 43 6f 6e 73 6f |.....Cre|ateConso|
|00003780| 6c 65 53 63 72 65 65 6e | 42 75 66 66 65 72 0c 4b |leScreen|Buffer.K|
|00003790| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 14 88 24 00 |ERNEL32.|dll...$.|
|000037a0| 00 a0 01 00 10 43 72 65 | 61 74 65 44 69 72 65 63 |.....Cre|ateDirec|
|000037b0| 74 6f 72 79 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |toryA.KE|RNEL32.d|
|000037c0| 6c 6c 00 bd 88 26 00 00 | a0 01 00 12 43 72 65 61 |ll...&..|....Crea|
|000037d0| 74 65 44 69 72 65 63 74 | 6f 72 79 45 78 41 0c 4b |teDirect|oryExA.K|
|000037e0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 fc 88 26 00 |ERNEL32.|dll...&.|
|000037f0| 00 a0 01 00 12 43 72 65 | 61 74 65 44 69 72 65 63 |.....Cre|ateDirec|
|00003800| 74 6f 72 79 45 78 57 0c | 4b 45 52 4e 45 4c 33 32 |toryExW.|KERNEL32|
|00003810| 2e 64 6c 6c 00 e6 88 24 | 00 00 a0 01 00 10 43 72 |.dll...$|......Cr|
|00003820| 65 61 74 65 44 69 72 65 | 63 74 6f 72 79 57 0c 4b |eateDire|ctoryW.K|
|00003830| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 a7 88 20 00 |ERNEL32.|dll... .|
|00003840| 00 a0 01 00 0c 43 72 65 | 61 74 65 45 76 65 6e 74 |.....Cre|ateEvent|
|00003850| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 78 |A.KERNEL|32.dll.x|
|00003860| 88 20 00 00 a0 01 00 0c | 43 72 65 61 74 65 45 76 |. ......|CreateEv|
|00003870| 65 6e 74 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |entW.KER|NEL32.dl|
|00003880| 6c 00 62 88 1f 00 00 a0 | 01 00 0b 43 72 65 61 74 |l.b.....|...Creat|
|00003890| 65 46 69 6c 65 41 0c 4b | 45 52 4e 45 4c 33 32 2e |eFileA.K|ERNEL32.|
|000038a0| 64 6c 6c 00 fc 88 26 00 | 00 a0 01 00 12 43 72 65 |dll...&.|.....Cre|
|000038b0| 61 74 65 46 69 6c 65 4d | 61 70 70 69 6e 67 41 0c |ateFileM|appingA.|
|000038c0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 22 88 26 |KERNEL32|.dll.".&|
|000038d0| 00 00 a0 01 00 12 43 72 | 65 61 74 65 46 69 6c 65 |......Cr|eateFile|
|000038e0| 4d 61 70 70 69 6e 67 57 | 0c 4b 45 52 4e 45 4c 33 |MappingW|.KERNEL3|
|000038f0| 32 2e 64 6c 6c 00 0c 88 | 1f 00 00 a0 01 00 0b 43 |2.dll...|.......C|
|00003900| 72 65 61 74 65 46 69 6c | 65 57 0c 4b 45 52 4e 45 |reateFil|eW.KERNE|
|00003910| 4c 33 32 2e 64 6c 6c 00 | e6 88 2a 00 00 a0 01 00 |L32.dll.|..*.....|
|00003920| 16 43 72 65 61 74 65 49 | 6f 43 6f 6d 70 6c 65 74 |.CreateI|oComplet|
|00003930| 69 6f 6e 50 6f 72 74 0c | 4b 45 52 4e 45 4c 33 32 |ionPort.|KERNEL32|
|00003940| 2e 64 6c 6c 00 30 88 26 | 00 00 a0 01 00 12 43 72 |.dll.0.&|......Cr|
|00003950| 65 61 74 65 4b 65 72 6e | 65 6c 54 68 72 65 61 64 |eateKern|elThread|
|00003960| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 f6 88 |.KERNEL3|2.dll...|
|00003970| 23 00 00 a0 01 00 0f 43 | 72 65 61 74 65 4d 61 69 |#......C|reateMai|
|00003980| 6c 73 6c 6f 74 41 0c 4b | 45 52 4e 45 4c 33 32 2e |lslotA.K|ERNEL32.|
|00003990| 64 6c 6c 00 2f 88 23 00 | 00 a0 01 00 0f 43 72 65 |dll./.#.|.....Cre|
|000039a0| 61 74 65 4d 61 69 6c 73 | 6c 6f 74 57 0c 4b 45 52 |ateMails|lotW.KER|
|000039b0| 4e 45 4c 33 32 2e 64 6c | 6c 00 19 88 20 00 00 a0 |NEL32.dl|l... ...|
|000039c0| 01 00 0c 43 72 65 61 74 | 65 4d 75 74 65 78 41 0c |...Creat|eMutexA.|
|000039d0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 67 88 20 |KERNEL32|.dll.g. |
|000039e0| 00 00 a0 01 00 0c 43 72 | 65 61 74 65 4d 75 74 65 |......Cr|eateMute|
|000039f0| 78 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |xW.KERNE|L32.dll.|
|00003a00| 51 88 24 00 00 a0 01 00 | 10 43 72 65 61 74 65 4e |Q.$.....|.CreateN|
|00003a10| 61 6d 65 64 50 69 70 65 | 41 0c 4b 45 52 4e 45 4c |amedPipe|A.KERNEL|
|00003a20| 33 32 2e 64 6c 6c 00 ff | 88 24 00 00 a0 01 00 10 |32.dll..|.$......|
|00003a30| 43 72 65 61 74 65 4e 61 | 6d 65 64 50 69 70 65 57 |CreateNa|medPipeW|
|00003a40| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 e9 88 |.KERNEL3|2.dll...|
|00003a50| 1e 00 00 a0 01 00 0a 43 | 72 65 61 74 65 50 69 70 |.......C|reatePip|
|00003a60| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 31 |e.KERNEL|32.dll.1|
|00003a70| 88 22 00 00 a0 01 00 0e | 43 72 65 61 74 65 50 72 |."......|CreatePr|
|00003a80| 6f 63 65 73 73 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ocessA.K|ERNEL32.|
|00003a90| 64 6c 6c 00 97 88 22 00 | 00 a0 01 00 0e 43 72 65 |dll...".|.....Cre|
|00003aa0| 61 74 65 50 72 6f 63 65 | 73 73 57 0c 4b 45 52 4e |ateProce|ssW.KERN|
|00003ab0| 45 4c 33 32 2e 64 6c 6c | 00 81 88 26 00 00 a0 01 |EL32.dll|...&....|
|00003ac0| 00 12 43 72 65 61 74 65 | 52 65 6d 6f 74 65 54 68 |..Create|RemoteTh|
|00003ad0| 72 65 61 64 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |read.KER|NEL32.dl|
|00003ae0| 6c 00 eb 88 24 00 00 a0 | 01 00 10 43 72 65 61 74 |l...$...|...Creat|
|00003af0| 65 53 65 6d 61 70 68 6f | 72 65 41 0c 4b 45 52 4e |eSemapho|reA.KERN|
|00003b00| 45 4c 33 32 2e 64 6c 6c | 00 ce 88 24 00 00 a0 01 |EL32.dll|...$....|
|00003b10| 00 10 43 72 65 61 74 65 | 53 65 6d 61 70 68 6f 72 |..Create|Semaphor|
|00003b20| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |eW.KERNE|L32.dll.|
|00003b30| b8 88 26 00 00 a0 01 00 | 12 43 72 65 61 74 65 53 |..&.....|.CreateS|
|00003b40| 6f 63 6b 65 74 48 61 6e | 64 6c 65 0c 4b 45 52 4e |ocketHan|dle.KERN|
|00003b50| 45 4c 33 32 2e 64 6c 6c | 00 fa 88 27 00 00 a0 01 |EL32.dll|...'....|
|00003b60| 00 13 43 72 65 61 74 65 | 54 61 70 65 50 61 72 74 |..Create|TapePart|
|00003b70| 69 74 69 6f 6e 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ition.KE|RNEL32.d|
|00003b80| 6c 6c 00 69 88 20 00 00 | a0 01 00 0c 43 72 65 61 |ll.i. ..|....Crea|
|00003b90| 74 65 54 68 72 65 61 64 | 0c 4b 45 52 4e 45 4c 33 |teThread|.KERNEL3|
|00003ba0| 32 2e 64 6c 6c 00 63 88 | 27 00 00 a0 01 00 13 43 |2.dll.c.|'......C|
|00003bb0| 72 65 61 74 65 56 69 72 | 74 75 61 6c 42 75 66 66 |reateVir|tualBuff|
|00003bc0| 65 72 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |er.KERNE|L32.dll.|
|00003bd0| 6c 88 2c 00 00 a0 01 00 | 18 43 72 65 61 74 65 54 |l.,.....|.CreateT|
|00003be0| 6f 6f 6c 68 65 6c 70 33 | 32 53 6e 61 70 73 68 6f |oolhelp3|2Snapsho|
|00003bf0| 74 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 a7 |t.KERNEL|32.dll..|
|00003c00| 88 26 00 00 a0 01 00 12 | 44 65 62 75 67 41 63 74 |.&......|DebugAct|
|00003c10| 69 76 65 50 72 6f 63 65 | 73 73 0c 4b 45 52 4e 45 |iveProce|ss.KERNE|
|00003c20| 4c 33 32 2e 64 6c 6c 00 | e1 88 1e 00 00 a0 01 00 |L32.dll.|........|
|00003c30| 0a 44 65 62 75 67 42 72 | 65 61 6b 0c 4b 45 52 4e |.DebugBr|eak.KERN|
|00003c40| 45 4c 33 32 2e 64 6c 6c | 00 47 88 24 00 00 a0 01 |EL32.dll|.G.$....|
|00003c50| 00 10 44 65 66 69 6e 65 | 44 6f 73 44 65 76 69 63 |..Define|DosDevic|
|00003c60| 65 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |eA.KERNE|L32.dll.|
|00003c70| 05 88 24 00 00 a0 01 00 | 10 44 65 66 69 6e 65 44 |..$.....|.DefineD|
|00003c80| 6f 73 44 65 76 69 63 65 | 57 0c 4b 45 52 4e 45 4c |osDevice|W.KERNEL|
|00003c90| 33 32 2e 64 6c 6c 00 ef | 88 1e 00 00 a0 01 00 0a |32.dll..|........|
|00003ca0| 44 65 6c 65 74 65 41 74 | 6f 6d 0c 4b 45 52 4e 45 |DeleteAt|om.KERNE|
|00003cb0| 4c 33 32 2e 64 6c 6c 00 | 2f 88 29 00 00 a0 01 00 |L32.dll.|/.).....|
|00003cc0| 15 44 65 6c 65 74 65 43 | 72 69 74 69 63 61 6c 53 |.DeleteC|riticalS|
|00003cd0| 65 63 74 69 6f 6e 0c 4b | 45 52 4e 45 4c 33 32 2e |ection.K|ERNEL32.|
|00003ce0| 64 6c 6c 00 aa 88 1f 00 | 00 a0 01 00 0b 44 65 6c |dll.....|.....Del|
|00003cf0| 65 74 65 46 69 6c 65 41 | 0c 4b 45 52 4e 45 4c 33 |eteFileA|.KERNEL3|
|00003d00| 32 2e 64 6c 6c 00 fd 88 | 1f 00 00 a0 01 00 0b 44 |2.dll...|.......D|
|00003d10| 65 6c 65 74 65 46 69 6c | 65 57 0c 4b 45 52 4e 45 |eleteFil|eW.KERNE|
|00003d20| 4c 33 32 2e 64 6c 6c 00 | e7 88 23 00 00 a0 01 00 |L32.dll.|..#.....|
|00003d30| 0f 44 65 76 69 63 65 49 | 6f 43 6f 6e 74 72 6f 6c |.DeviceI|oControl|
|00003d40| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 20 88 |.KERNEL3|2.dll. .|
|00003d50| 2d 00 00 a0 01 00 19 44 | 69 73 61 62 6c 65 54 68 |-......D|isableTh|
|00003d60| 72 65 61 64 4c 69 62 72 | 61 72 79 43 61 6c 6c 73 |readLibr|aryCalls|
|00003d70| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 25 88 |.KERNEL3|2.dll.%.|
|00003d80| 27 00 00 a0 01 00 13 44 | 69 73 63 6f 6e 6e 65 63 |'......D|isconnec|
|00003d90| 74 4e 61 6d 65 64 50 69 | 70 65 0c 4b 45 52 4e 45 |tNamedPi|pe.KERNE|
|00003da0| 4c 33 32 2e 64 6c 6c 00 | 84 88 29 00 00 a0 01 00 |L32.dll.|..).....|
|00003db0| 15 44 6f 73 44 61 74 65 | 54 69 6d 65 54 6f 46 69 |.DosDate|TimeToFi|
|00003dc0| 6c 65 54 69 6d 65 0c 4b | 45 52 4e 45 4c 33 32 2e |leTime.K|ERNEL32.|
|00003dd0| 64 6c 6c 00 f8 88 2a 00 | 00 a0 01 00 16 44 75 70 |dll...*.|.....Dup|
|00003de0| 6c 69 63 61 74 65 43 6f | 6e 73 6f 6c 65 48 61 6e |licateCo|nsoleHan|
|00003df0| 64 6c 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |dle.KERN|EL32.dll|
|00003e00| 00 41 88 23 00 00 a0 01 | 00 0f 44 75 70 6c 69 63 |.A.#....|..Duplic|
|00003e10| 61 74 65 48 61 6e 64 6c | 65 0c 4b 45 52 4e 45 4c |ateHandl|e.KERNEL|
|00003e20| 33 32 2e 64 6c 6c 00 22 | 88 26 00 00 a0 01 00 12 |32.dll."|.&......|
|00003e30| 45 6e 64 55 70 64 61 74 | 65 52 65 73 6f 75 72 63 |EndUpdat|eResourc|
|00003e40| 65 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |eA.KERNE|L32.dll.|
|00003e50| 00 88 26 00 00 a0 01 00 | 12 45 6e 64 55 70 64 61 |..&.....|.EndUpda|
|00003e60| 74 65 52 65 73 6f 75 72 | 63 65 57 0c 4b 45 52 4e |teResour|ceW.KERN|
|00003e70| 45 4c 33 32 2e 64 6c 6c | 00 ea 88 28 00 00 a0 01 |EL32.dll|...(....|
|00003e80| 00 14 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 53 |..EnterC|riticalS|
|00003e90| 65 63 74 69 6f 6e 0c 4b | 45 52 4e 45 4c 33 32 2e |ection.K|ERNEL32.|
|00003ea0| 64 6c 6c 00 01 88 25 00 | 00 a0 01 00 11 45 6e 75 |dll...%.|.....Enu|
|00003eb0| 6d 43 61 6c 65 6e 64 61 | 72 49 6e 66 6f 41 0c 4b |mCalenda|rInfoA.K|
|00003ec0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 89 88 25 00 |ERNEL32.|dll...%.|
|00003ed0| 00 a0 01 00 11 45 6e 75 | 6d 43 61 6c 65 6e 64 61 |.....Enu|mCalenda|
|00003ee0| 72 49 6e 66 6f 57 0c 4b | 45 52 4e 45 4c 33 32 2e |rInfoW.K|ERNEL32.|
|00003ef0| 64 6c 6c 00 73 88 24 00 | 00 a0 01 00 10 45 6e 75 |dll.s.$.|.....Enu|
|00003f00| 6d 44 61 74 65 46 6f 72 | 6d 61 74 73 41 0c 4b 45 |mDateFor|matsA.KE|
|00003f10| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 d7 88 24 00 00 |RNEL32.d|ll...$..|
|00003f20| a0 01 00 10 45 6e 75 6d | 44 61 74 65 46 6f 72 6d |....Enum|DateForm|
|00003f30| 61 74 73 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |atsW.KER|NEL32.dl|
|00003f40| 6c 00 c1 88 2a 00 00 a0 | 01 00 16 45 6e 75 6d 52 |l...*...|...EnumR|
|00003f50| 65 73 6f 75 72 63 65 4c | 61 6e 67 75 61 67 65 73 |esourceL|anguages|
|00003f60| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 46 |A.KERNEL|32.dll.F|
|00003f70| 88 2a 00 00 a0 01 00 16 | 45 6e 75 6d 52 65 73 6f |.*......|EnumReso|
|00003f80| 75 72 63 65 4c 61 6e 67 | 75 61 67 65 73 57 0c 4b |urceLang|uagesW.K|
|00003f90| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 30 88 26 00 |ERNEL32.|dll.0.&.|
|00003fa0| 00 a0 01 00 12 45 6e 75 | 6d 52 65 73 6f 75 72 63 |.....Enu|mResourc|
|00003fb0| 65 4e 61 6d 65 73 41 0c | 4b 45 52 4e 45 4c 33 32 |eNamesA.|KERNEL32|
|00003fc0| 2e 64 6c 6c 00 f1 88 26 | 00 00 a0 01 00 12 45 6e |.dll...&|......En|
|00003fd0| 75 6d 52 65 73 6f 75 72 | 63 65 4e 61 6d 65 73 57 |umResour|ceNamesW|
|00003fe0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 db 88 |.KERNEL3|2.dll...|
|00003ff0| 26 00 00 a0 01 00 12 45 | 6e 75 6d 52 65 73 6f 75 |&......E|numResou|
|00004000| 72 63 65 54 79 70 65 73 | 41 0c 4b 45 52 4e 45 4c |rceTypes|A.KERNEL|
|00004010| 33 32 2e 64 6c 6c 00 d0 | 88 26 00 00 a0 01 00 12 |32.dll..|.&......|
|00004020| 45 6e 75 6d 52 65 73 6f | 75 72 63 65 54 79 70 65 |EnumReso|urceType|
|00004030| 73 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |sW.KERNE|L32.dll.|
|00004040| ba 88 28 00 00 a0 01 00 | 14 45 6e 75 6d 53 79 73 |..(.....|.EnumSys|
|00004050| 74 65 6d 43 6f 64 65 50 | 61 67 65 73 41 0c 4b 45 |temCodeP|agesA.KE|
|00004060| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 39 88 28 00 00 |RNEL32.d|ll.9.(..|
|00004070| a0 01 00 14 45 6e 75 6d | 53 79 73 74 65 6d 43 6f |....Enum|SystemCo|
|00004080| 64 65 50 61 67 65 73 57 | 0c 4b 45 52 4e 45 4c 33 |dePagesW|.KERNEL3|
|00004090| 32 2e 64 6c 6c 00 23 88 | 26 00 00 a0 01 00 12 45 |2.dll.#.|&......E|
|000040a0| 6e 75 6d 53 79 73 74 65 | 6d 4c 6f 63 61 6c 65 73 |numSyste|mLocales|
|000040b0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 e5 |A.KERNEL|32.dll..|
|000040c0| 88 26 00 00 a0 01 00 12 | 45 6e 75 6d 53 79 73 74 |.&......|EnumSyst|
|000040d0| 65 6d 4c 6f 63 61 6c 65 | 73 57 0c 4b 45 52 4e 45 |emLocale|sW.KERNE|
|000040e0| 4c 33 32 2e 64 6c 6c 00 | cf 88 24 00 00 a0 01 00 |L32.dll.|..$.....|
|000040f0| 10 45 6e 75 6d 54 69 6d | 65 46 6f 72 6d 61 74 73 |.EnumTim|eFormats|
|00004100| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 c6 |A.KERNEL|32.dll..|
|00004110| 88 24 00 00 a0 01 00 10 | 45 6e 75 6d 54 69 6d 65 |.$......|EnumTime|
|00004120| 46 6f 72 6d 61 74 73 57 | 0c 4b 45 52 4e 45 4c 33 |FormatsW|.KERNEL3|
|00004130| 32 2e 64 6c 6c 00 b0 88 | 1d 00 00 a0 01 00 09 45 |2.dll...|.......E|
|00004140| 72 61 73 65 54 61 70 65 | 0c 4b 45 52 4e 45 4c 33 |raseTape|.KERNEL3|
|00004150| 32 2e 64 6c 6c 00 9b 88 | 26 00 00 a0 01 00 12 45 |2.dll...|&......E|
|00004160| 73 63 61 70 65 43 6f 6d | 6d 46 75 6e 63 74 69 6f |scapeCom|mFunctio|
|00004170| 6e 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 e0 |n.KERNEL|32.dll..|
|00004180| 88 1f 00 00 a0 01 00 0b | 45 78 69 74 50 72 6f 63 |........|ExitProc|
|00004190| 65 73 73 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ess.KERN|EL32.dll|
|000041a0| 00 98 88 1e 00 00 a0 01 | 00 0a 45 78 69 74 54 68 |........|..ExitTh|
|000041b0| 72 65 61 64 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |read.KER|NEL32.dl|
|000041c0| 6c 00 21 88 1b 00 00 a0 | 01 00 07 45 78 69 74 56 |l.!.....|...ExitV|
|000041d0| 44 4d 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |DM.KERNE|L32.dll.|
|000041e0| 98 88 2d 00 00 a0 01 00 | 19 45 78 70 61 6e 64 45 |..-.....|.ExpandE|
|000041f0| 6e 76 69 72 6f 6e 6d 65 | 6e 74 53 74 72 69 6e 67 |nvironme|ntString|
|00004200| 73 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |sA.KERNE|L32.dll.|
|00004210| d5 88 2d 00 00 a0 01 00 | 19 45 78 70 61 6e 64 45 |..-.....|.ExpandE|
|00004220| 6e 76 69 72 6f 6e 6d 65 | 6e 74 53 74 72 69 6e 67 |nvironme|ntString|
|00004230| 73 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |sW.KERNE|L32.dll.|
|00004240| bf 88 31 00 00 a0 01 00 | 1d 45 78 70 75 6e 67 65 |..1.....|.Expunge|
|00004250| 43 6f 6e 73 6f 6c 65 43 | 6f 6d 6d 61 6e 64 48 69 |ConsoleC|ommandHi|
|00004260| 73 74 6f 72 79 41 0c 4b | 45 52 4e 45 4c 33 32 2e |storyA.K|ERNEL32.|
|00004270| 64 6c 6c 00 4c 88 31 00 | 00 a0 01 00 1d 45 78 70 |dll.L.1.|.....Exp|
|00004280| 75 6e 67 65 43 6f 6e 73 | 6f 6c 65 43 6f 6d 6d 61 |ungeCons|oleComma|
|00004290| 6e 64 48 69 73 74 6f 72 | 79 57 0c 4b 45 52 4e 45 |ndHistor|yW.KERNE|
|000042a0| 4c 33 32 2e 64 6c 6c 00 | 36 88 27 00 00 a0 01 00 |L32.dll.|6.'.....|
|000042b0| 13 45 78 74 65 6e 64 56 | 69 72 74 75 61 6c 42 75 |.ExtendV|irtualBu|
|000042c0| 66 66 65 72 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ffer.KER|NEL32.dl|
|000042d0| 6c 00 58 88 21 00 00 a0 | 01 00 0d 46 61 74 61 6c |l.X.!...|...Fatal|
|000042e0| 41 70 70 45 78 69 74 41 | 0c 4b 45 52 4e 45 4c 33 |AppExitA|.KERNEL3|
|000042f0| 32 2e 64 6c 6c 00 29 88 | 21 00 00 a0 01 00 0d 46 |2.dll.).|!......F|
|00004300| 61 74 61 6c 41 70 70 45 | 78 69 74 57 0c 4b 45 52 |atalAppE|xitW.KER|
|00004310| 4e 45 4c 33 32 2e 64 6c | 6c 00 13 88 1d 00 00 a0 |NEL32.dl|l.......|
|00004320| 01 00 09 46 61 74 61 6c | 45 78 69 74 0c 4b 45 52 |...Fatal|Exit.KER|
|00004330| 4e 45 4c 33 32 2e 64 6c | 6c 00 93 88 29 00 00 a0 |NEL32.dl|l...)...|
|00004340| 01 00 15 46 69 6c 65 54 | 69 6d 65 54 6f 44 6f 73 |...FileT|imeToDos|
|00004350| 44 61 74 65 54 69 6d 65 | 0c 4b 45 52 4e 45 4c 33 |DateTime|.KERNEL3|
|00004360| 32 2e 64 6c 6c 00 f8 88 | 2b 00 00 a0 01 00 17 46 |2.dll...|+......F|
|00004370| 69 6c 65 54 69 6d 65 54 | 6f 4c 6f 63 61 6c 46 69 |ileTimeT|oLocalFi|
|00004380| 6c 65 54 69 6d 65 0c 4b | 45 52 4e 45 4c 33 32 2e |leTime.K|ERNEL32.|
|00004390| 64 6c 6c 00 2d 88 28 00 | 00 a0 01 00 14 46 69 6c |dll.-.(.|.....Fil|
|000043a0| 65 54 69 6d 65 54 6f 53 | 79 73 74 65 6d 54 69 6d |eTimeToS|ystemTim|
|000043b0| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 19 |e.KERNEL|32.dll..|
|000043c0| 88 2e 00 00 a0 01 00 1a | 46 69 6c 6c 43 6f 6e 73 |........|FillCons|
|000043d0| 6f 6c 65 4f 75 74 70 75 | 74 41 74 74 72 69 62 75 |oleOutpu|tAttribu|
|000043e0| 74 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |te.KERNE|L32.dll.|
|000043f0| 54 88 2f 00 00 a0 01 00 | 1b 46 69 6c 6c 43 6f 6e |T./.....|.FillCon|
|00004400| 73 6f 6c 65 4f 75 74 70 | 75 74 43 68 61 72 61 63 |soleOutp|utCharac|
|00004410| 74 65 72 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |terA.KER|NEL32.dl|
|00004420| 6c 00 38 88 2f 00 00 a0 | 01 00 1b 46 69 6c 6c 43 |l.8./...|...FillC|
|00004430| 6f 6e 73 6f 6c 65 4f 75 | 74 70 75 74 43 68 61 72 |onsoleOu|tputChar|
|00004440| 61 63 74 65 72 57 0c 4b | 45 52 4e 45 4c 33 32 2e |acterW.K|ERNEL32.|
|00004450| 64 6c 6c 00 22 88 1d 00 | 00 a0 01 00 09 46 69 6e |dll."...|.....Fin|
|00004460| 64 41 74 6f 6d 41 0c 4b | 45 52 4e 45 4c 33 32 2e |dAtomA.K|ERNEL32.|
|00004470| 64 6c 6c 00 c2 88 1d 00 | 00 a0 01 00 09 46 69 6e |dll.....|.....Fin|
|00004480| 64 41 74 6f 6d 57 0c 4b | 45 52 4e 45 4c 33 32 2e |dAtomW.K|ERNEL32.|
|00004490| 64 6c 6c 00 ac 88 1d 00 | 00 a0 01 00 09 46 69 6e |dll.....|.....Fin|
|000044a0| 64 43 6c 6f 73 65 0c 4b | 45 52 4e 45 4c 33 32 2e |dClose.K|ERNEL32.|
|000044b0| 64 6c 6c 00 9e 88 2f 00 | 00 a0 01 00 1b 46 69 6e |dll.../.|.....Fin|
|000044c0| 64 43 6c 6f 73 65 43 68 | 61 6e 67 65 4e 6f 74 69 |dCloseCh|angeNoti|
|000044d0| 66 69 63 61 74 69 6f 6e | 0c 4b 45 52 4e 45 4c 33 |fication|.KERNEL3|
|000044e0| 32 2e 64 6c 6c 00 4d 88 | 30 00 00 a0 01 00 1c 46 |2.dll.M.|0......F|
|000044f0| 69 6e 64 46 69 72 73 74 | 43 68 61 6e 67 65 4e 6f |indFirst|ChangeNo|
|00004500| 74 69 66 69 63 61 74 69 | 6f 6e 41 0c 4b 45 52 4e |tificati|onA.KERN|
|00004510| 45 4c 33 32 2e 64 6c 6c | 00 f8 88 30 00 00 a0 01 |EL32.dll|...0....|
|00004520| 00 1c 46 69 6e 64 46 69 | 72 73 74 43 68 61 6e 67 |..FindFi|rstChang|
|00004530| 65 4e 6f 74 69 66 69 63 | 61 74 69 6f 6e 57 0c 4b |eNotific|ationW.K|
|00004540| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 e2 88 22 00 |ERNEL32.|dll...".|
|00004550| 00 a0 01 00 0e 46 69 6e | 64 46 69 72 73 74 46 69 |.....Fin|dFirstFi|
|00004560| 6c 65 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |leA.KERN|EL32.dll|
|00004570| 00 c1 88 22 00 00 a0 01 | 00 0e 46 69 6e 64 46 69 |..."....|..FindFi|
|00004580| 72 73 74 46 69 6c 65 57 | 0c 4b 45 52 4e 45 4c 33 |rstFileW|.KERNEL3|
|00004590| 32 2e 64 6c 6c 00 ab 88 | 2e 00 00 a0 01 00 1a 46 |2.dll...|.......F|
|000045a0| 69 6e 64 4e 65 78 74 43 | 68 61 6e 67 65 4e 6f 74 |indNextC|hangeNot|
|000045b0| 69 66 69 63 61 74 69 6f | 6e 0c 4b 45 52 4e 45 4c |ificatio|n.KERNEL|
|000045c0| 33 32 2e 64 6c 6c 00 a6 | 88 21 00 00 a0 01 00 0d |32.dll..|.!......|
|000045d0| 46 69 6e 64 4e 65 78 74 | 46 69 6c 65 41 0c 4b 45 |FindNext|FileA.KE|
|000045e0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 2c 88 21 00 00 |RNEL32.d|ll.,.!..|
|000045f0| a0 01 00 0d 46 69 6e 64 | 4e 65 78 74 46 69 6c 65 |....Find|NextFile|
|00004600| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 16 |W.KERNEL|32.dll..|
|00004610| 88 21 00 00 a0 01 00 0d | 46 69 6e 64 52 65 73 6f |.!......|FindReso|
|00004620| 75 72 63 65 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |urceA.KE|RNEL32.d|
|00004630| 6c 6c 00 03 88 23 00 00 | a0 01 00 0f 46 69 6e 64 |ll...#..|....Find|
|00004640| 52 65 73 6f 75 72 63 65 | 45 78 41 0c 4b 45 52 4e |Resource|ExA.KERN|
|00004650| 45 4c 33 32 2e 64 6c 6c | 00 42 88 23 00 00 a0 01 |EL32.dll|.B.#....|
|00004660| 00 0f 46 69 6e 64 52 65 | 73 6f 75 72 63 65 45 78 |..FindRe|sourceEx|
|00004670| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 2c |W.KERNEL|32.dll.,|
|00004680| 88 21 00 00 a0 01 00 0d | 46 69 6e 64 52 65 73 6f |.!......|FindReso|
|00004690| 75 72 63 65 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |urceW.KE|RNEL32.d|
|000046a0| 6c 6c 00 ed 88 2b 00 00 | a0 01 00 17 46 6c 75 73 |ll...+..|....Flus|
|000046b0| 68 43 6f 6e 73 6f 6c 65 | 49 6e 70 75 74 42 75 66 |hConsole|InputBuf|
|000046c0| 66 65 72 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |fer.KERN|EL32.dll|
|000046d0| 00 ba 88 24 00 00 a0 01 | 00 10 46 6c 75 73 68 46 |...$....|..FlushF|
|000046e0| 69 6c 65 42 75 66 66 65 | 72 73 0c 4b 45 52 4e 45 |ileBuffe|rs.KERNE|
|000046f0| 4c 33 32 2e 64 6c 6c 00 | b8 88 29 00 00 a0 01 00 |L32.dll.|..).....|
|00004700| 15 46 6c 75 73 68 49 6e | 73 74 72 75 63 74 69 6f |.FlushIn|structio|
|00004710| 6e 43 61 63 68 65 0c 4b | 45 52 4e 45 4c 33 32 2e |nCache.K|ERNEL32.|
|00004720| 64 6c 6c 00 85 88 23 00 | 00 a0 01 00 0f 46 6c 75 |dll...#.|.....Flu|
|00004730| 73 68 56 69 65 77 4f 66 | 46 69 6c 65 0c 4b 45 52 |shViewOf|File.KER|
|00004740| 4e 45 4c 33 32 2e 64 6c | 6c 00 37 88 1f 00 00 a0 |NEL32.dl|l.7.....|
|00004750| 01 00 0b 46 6f 6c 64 53 | 74 72 69 6e 67 41 0c 4b |...FoldS|tringA.K|
|00004760| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 d4 88 1f 00 |ERNEL32.|dll.....|
|00004770| 00 a0 01 00 0b 46 6f 6c | 64 53 74 72 69 6e 67 57 |.....Fol|dStringW|
|00004780| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 be 88 |.KERNEL3|2.dll...|
|00004790| 22 00 00 a0 01 00 0e 46 | 6f 72 6d 61 74 4d 65 73 |"......F|ormatMes|
|000047a0| 73 61 67 65 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |sageA.KE|RNEL32.d|
|000047b0| 6c 6c 00 9c 88 22 00 00 | a0 01 00 0e 46 6f 72 6d |ll..."..|....Form|
|000047c0| 61 74 4d 65 73 73 61 67 | 65 57 0c 4b 45 52 4e 45 |atMessag|eW.KERNE|
|000047d0| 4c 33 32 2e 64 6c 6c 00 | 86 88 1f 00 00 a0 01 00 |L32.dll.|........|
|000047e0| 0b 46 72 65 65 43 6f 6e | 73 6f 6c 65 0c 4b 45 52 |.FreeCon|sole.KER|
|000047f0| 4e 45 4c 33 32 2e 64 6c | 6c 00 bc 88 2b 00 00 a0 |NEL32.dl|l...+...|
|00004800| 01 00 17 46 72 65 65 45 | 6e 76 69 72 6f 6e 6d 65 |...FreeE|nvironme|
|00004810| 6e 74 53 74 72 69 6e 67 | 73 41 0c 4b 45 52 4e 45 |ntString|sA.KERNE|
|00004820| 4c 33 32 2e 64 6c 6c 00 | b7 88 2b 00 00 a0 01 00 |L32.dll.|..+.....|
|00004830| 17 46 72 65 65 45 6e 76 | 69 72 6f 6e 6d 65 6e 74 |.FreeEnv|ironment|
|00004840| 53 74 72 69 6e 67 73 57 | 0c 4b 45 52 4e 45 4c 33 |StringsW|.KERNEL3|
|00004850| 32 2e 64 6c 6c 00 a1 88 | 22 00 00 a0 01 00 0e 46 |2.dll...|"......F|
|00004860| 72 65 65 4c 53 43 61 6c | 6c 62 61 63 6b 0c 4b 45 |reeLSCal|lback.KE|
|00004870| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 dd 88 1f 00 00 |RNEL32.d|ll......|
|00004880| a0 01 00 0b 46 72 65 65 | 4c 69 62 72 61 72 79 0c |....Free|Library.|
|00004890| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 ba 88 2c |KERNEL32|.dll...,|
|000048a0| 00 00 a0 01 00 18 46 72 | 65 65 4c 69 62 72 61 72 |......Fr|eeLibrar|
|000048b0| 79 41 6e 64 45 78 69 74 | 54 68 72 65 61 64 0c 4b |yAndExit|Thread.K|
|000048c0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 9b 88 20 00 |ERNEL32.|dll... .|
|000048d0| 00 a0 01 00 0c 46 72 65 | 65 52 65 73 6f 75 72 63 |.....Fre|eResourc|
|000048e0| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 45 |e.KERNEL|32.dll.E|
|000048f0| 88 25 00 00 a0 01 00 11 | 46 72 65 65 56 69 72 74 |.%......|FreeVirt|
|00004900| 75 61 6c 42 75 66 66 65 | 72 0c 4b 45 52 4e 45 4c |ualBuffe|r.KERNEL|
|00004910| 33 32 2e 64 6c 6c 00 42 | 88 22 00 00 a0 01 00 0e |32.dll.B|."......|
|00004920| 46 72 65 65 53 4c 43 61 | 6c 6c 62 61 63 6b 0c 4b |FreeSLCa|llback.K|
|00004930| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 dd 88 2c 00 |ERNEL32.|dll...,.|
|00004940| 00 a0 01 00 18 47 65 6e | 65 72 61 74 65 43 6f 6e |.....Gen|erateCon|
|00004950| 73 6f 6c 65 43 74 72 6c | 45 76 65 6e 74 0c 4b 45 |soleCtrl|Event.KE|
|00004960| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 62 88 1a 00 00 |RNEL32.d|ll.b....|
|00004970| a0 01 00 06 47 65 74 41 | 43 50 0c 4b 45 52 4e 45 |....GetA|CP.KERNE|
|00004980| 4c 33 32 2e 64 6c 6c 00 | 27 88 20 00 00 a0 01 00 |L32.dll.|'. .....|
|00004990| 0c 47 65 74 41 74 6f 6d | 4e 61 6d 65 41 0c 4b 45 |.GetAtom|NameA.KE|
|000049a0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 9c 88 20 00 00 |RNEL32.d|ll... ..|
|000049b0| a0 01 00 0c 47 65 74 41 | 74 6f 6d 4e 61 6d 65 57 |....GetA|tomNameW|
|000049c0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 86 88 |.KERNEL3|2.dll...|
|000049d0| 21 00 00 a0 01 00 0d 47 | 65 74 42 69 6e 61 72 79 |!......G|etBinary|
|000049e0| 54 79 70 65 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Type.KER|NEL32.dl|
|000049f0| 6c 00 e6 88 22 00 00 a0 | 01 00 0e 47 65 74 42 69 |l..."...|...GetBi|
|00004a00| 6e 61 72 79 54 79 70 65 | 41 0c 4b 45 52 4e 45 4c |naryType|A.KERNEL|
|00004a10| 33 32 2e 64 6c 6c 00 a3 | 88 22 00 00 a0 01 00 0e |32.dll..|."......|
|00004a20| 47 65 74 42 69 6e 61 72 | 79 54 79 70 65 57 0c 4b |GetBinar|yTypeW.K|
|00004a30| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 8d 88 1d 00 |ERNEL32.|dll.....|
|00004a40| 00 a0 01 00 09 47 65 74 | 43 50 49 6e 66 6f 0c 4b |.....Get|CPInfo.K|
|00004a50| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 d6 88 21 00 |ERNEL32.|dll...!.|
|00004a60| 00 a0 01 00 0d 47 65 74 | 43 6f 6d 6d 43 6f 6e 66 |.....Get|CommConf|
|00004a70| 69 67 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |ig.KERNE|L32.dll.|
|00004a80| 0b 88 1f 00 00 a0 01 00 | 0b 47 65 74 43 6f 6d 6d |........|.GetComm|
|00004a90| 4d 61 73 6b 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Mask.KER|NEL32.dl|
|00004aa0| 6c 00 d9 88 26 00 00 a0 | 01 00 12 47 65 74 43 6f |l...&...|...GetCo|
|00004ab0| 6d 6d 4d 6f 64 65 6d 53 | 74 61 74 75 73 0c 4b 45 |mmModemS|tatus.KE|
|00004ac0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 e1 88 25 00 00 |RNEL32.d|ll...%..|
|00004ad0| a0 01 00 11 47 65 74 43 | 6f 6d 6d 50 72 6f 70 65 |....GetC|ommPrope|
|00004ae0| 72 74 69 65 73 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |rties.KE|RNEL32.d|
|00004af0| 6c 6c 00 2c 88 20 00 00 | a0 01 00 0c 47 65 74 43 |ll.,. ..|....GetC|
|00004b00| 6f 6d 6d 53 74 61 74 65 | 0c 4b 45 52 4e 45 4c 33 |ommState|.KERNEL3|
|00004b10| 32 2e 64 6c 6c 00 62 88 | 23 00 00 a0 01 00 0f 47 |2.dll.b.|#......G|
|00004b20| 65 74 43 6f 6d 6d 54 69 | 6d 65 6f 75 74 73 0c 4b |etCommTi|meouts.K|
|00004b30| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 03 88 23 00 |ERNEL32.|dll...#.|
|00004b40| 00 a0 01 00 0f 47 65 74 | 43 6f 6d 6d 61 6e 64 4c |.....Get|CommandL|
|00004b50| 69 6e 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ineA.KER|NEL32.dl|
|00004b60| 6c 00 61 88 23 00 00 a0 | 01 00 0f 47 65 74 43 6f |l.a.#...|...GetCo|
|00004b70| 6d 6d 61 6e 64 4c 69 6e | 65 57 0c 4b 45 52 4e 45 |mmandLin|eW.KERNE|
|00004b80| 4c 33 32 2e 64 6c 6c 00 | 4b 88 2a 00 00 a0 01 00 |L32.dll.|K.*.....|
|00004b90| 16 47 65 74 43 6f 6d 70 | 72 65 73 73 65 64 46 69 |.GetComp|ressedFi|
|00004ba0| 6c 65 53 69 7a 65 41 0c | 4b 45 52 4e 45 4c 33 32 |leSizeA.|KERNEL32|
|00004bb0| 2e 64 6c 6c 00 6a 88 2a | 00 00 a0 01 00 16 47 65 |.dll.j.*|......Ge|
|00004bc0| 74 43 6f 6d 70 72 65 73 | 73 65 64 46 69 6c 65 53 |tCompres|sedFileS|
|00004bd0| 69 7a 65 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |izeW.KER|NEL32.dl|
|00004be0| 6c 00 54 88 24 00 00 a0 | 01 00 10 47 65 74 43 6f |l.T.$...|...GetCo|
|00004bf0| 6d 70 75 74 65 72 4e 61 | 6d 65 41 0c 4b 45 52 4e |mputerNa|meA.KERN|
|00004c00| 45 4c 33 32 2e 64 6c 6c | 00 d6 88 24 00 00 a0 01 |EL32.dll|...$....|
|00004c10| 00 10 47 65 74 43 6f 6d | 70 75 74 65 72 4e 61 6d |..GetCom|puterNam|
|00004c20| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |eW.KERNE|L32.dll.|
|00004c30| c0 88 24 00 00 a0 01 00 | 10 47 65 74 43 6f 6e 73 |..$.....|.GetCons|
|00004c40| 6f 6c 65 41 6c 69 61 73 | 41 0c 4b 45 52 4e 45 4c |oleAlias|A.KERNEL|
|00004c50| 33 32 2e 64 6c 6c 00 e9 | 88 28 00 00 a0 01 00 14 |32.dll..|.(......|
|00004c60| 47 65 74 43 6f 6e 73 6f | 6c 65 41 6c 69 61 73 45 |GetConso|leAliasE|
|00004c70| 78 65 73 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |xesA.KER|NEL32.dl|
|00004c80| 6c 00 4c 88 2e 00 00 a0 | 01 00 1a 47 65 74 43 6f |l.L.....|...GetCo|
|00004c90| 6e 73 6f 6c 65 41 6c 69 | 61 73 45 78 65 73 4c 65 |nsoleAli|asExesLe|
|00004ca0| 6e 67 74 68 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ngthA.KE|RNEL32.d|
|00004cb0| 6c 6c 00 de 88 2e 00 00 | a0 01 00 1a 47 65 74 43 |ll......|....GetC|
|00004cc0| 6f 6e 73 6f 6c 65 41 6c | 69 61 73 45 78 65 73 4c |onsoleAl|iasExesL|
|00004cd0| 65 6e 67 74 68 57 0c 4b | 45 52 4e 45 4c 33 32 2e |engthW.K|ERNEL32.|
|00004ce0| 64 6c 6c 00 c8 88 28 00 | 00 a0 01 00 14 47 65 74 |dll...(.|.....Get|
|00004cf0| 43 6f 6e 73 6f 6c 65 41 | 6c 69 61 73 45 78 65 73 |ConsoleA|liasExes|
|00004d00| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 36 |W.KERNEL|32.dll.6|
|00004d10| 88 24 00 00 a0 01 00 10 | 47 65 74 43 6f 6e 73 6f |.$......|GetConso|
|00004d20| 6c 65 41 6c 69 61 73 57 | 0c 4b 45 52 4e 45 4c 33 |leAliasW|.KERNEL3|
|00004d30| 32 2e 64 6c 6c 00 d3 88 | 26 00 00 a0 01 00 12 47 |2.dll...|&......G|
|00004d40| 65 74 43 6f 6e 73 6f 6c | 65 41 6c 69 61 73 65 73 |etConsol|eAliases|
|00004d50| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 0d |A.KERNEL|32.dll..|
|00004d60| 88 2c 00 00 a0 01 00 18 | 47 65 74 43 6f 6e 73 6f |.,......|GetConso|
|00004d70| 6c 65 41 6c 69 61 73 65 | 73 4c 65 6e 67 74 68 41 |leAliase|sLengthA|
|00004d80| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 9f 88 |.KERNEL3|2.dll...|
|00004d90| 2c 00 00 a0 01 00 18 47 | 65 74 43 6f 6e 73 6f 6c |,......G|etConsol|
|00004da0| 65 41 6c 69 61 73 65 73 | 4c 65 6e 67 74 68 57 0c |eAliases|LengthW.|
|00004db0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 89 88 26 |KERNEL32|.dll...&|
|00004dc0| 00 00 a0 01 00 12 47 65 | 74 43 6f 6e 73 6f 6c 65 |......Ge|tConsole|
|00004dd0| 41 6c 69 61 73 65 73 57 | 0c 4b 45 52 4e 45 4c 33 |AliasesW|.KERNEL3|
|00004de0| 32 2e 64 6c 6c 00 f7 88 | 20 00 00 a0 01 00 0c 47 |2.dll...| ......G|
|00004df0| 65 74 43 6f 6e 73 6f 6c | 65 43 50 0c 4b 45 52 4e |etConsol|eCP.KERN|
|00004e00| 45 4c 33 32 2e 64 6c 6c | 00 89 88 2d 00 00 a0 01 |EL32.dll|...-....|
|00004e10| 00 19 47 65 74 43 6f 6e | 73 6f 6c 65 43 6f 6d 6d |..GetCon|soleComm|
|00004e20| 61 6e 64 48 69 73 74 6f | 72 79 41 0c 4b 45 52 4e |andHisto|ryA.KERN|
|00004e30| 45 4c 33 32 2e 64 6c 6c | 00 10 88 33 00 00 a0 01 |EL32.dll|...3....|
|00004e40| 00 1f 47 65 74 43 6f 6e | 73 6f 6c 65 43 6f 6d 6d |..GetCon|soleComm|
|00004e50| 61 6e 64 48 69 73 74 6f | 72 79 4c 65 6e 67 74 68 |andHisto|ryLength|
|00004e60| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 a2 |A.KERNEL|32.dll..|
|00004e70| 88 33 00 00 a0 01 00 1f | 47 65 74 43 6f 6e 73 6f |.3......|GetConso|
|00004e80| 6c 65 43 6f 6d 6d 61 6e | 64 48 69 73 74 6f 72 79 |leComman|dHistory|
|00004e90| 4c 65 6e 67 74 68 57 0c | 4b 45 52 4e 45 4c 33 32 |LengthW.|KERNEL32|
|00004ea0| 2e 64 6c 6c 00 8c 88 2d | 00 00 a0 01 00 19 47 65 |.dll...-|......Ge|
|00004eb0| 74 43 6f 6e 73 6f 6c 65 | 43 6f 6d 6d 61 6e 64 48 |tConsole|CommandH|
|00004ec0| 69 73 74 6f 72 79 57 0c | 4b 45 52 4e 45 4c 33 32 |istoryW.|KERNEL32|
|00004ed0| 2e 64 6c 6c 00 fa 88 28 | 00 00 a0 01 00 14 47 65 |.dll...(|......Ge|
|00004ee0| 74 43 6f 6e 73 6f 6c 65 | 43 75 72 73 6f 72 49 6e |tConsole|CursorIn|
|00004ef0| 66 6f 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |fo.KERNE|L32.dll.|
|00004f00| 02 88 29 00 00 a0 01 00 | 15 47 65 74 43 6f 6e 73 |..).....|.GetCons|
|00004f10| 6f 6c 65 44 69 73 70 6c | 61 79 4d 6f 64 65 0c 4b |oleDispl|ayMode.K|
|00004f20| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 af 88 26 00 |ERNEL32.|dll...&.|
|00004f30| 00 a0 01 00 12 47 65 74 | 43 6f 6e 73 6f 6c 65 46 |.....Get|ConsoleF|
|00004f40| 6f 6e 74 49 6e 66 6f 0c | 4b 45 52 4e 45 4c 33 32 |ontInfo.|KERNEL32|
|00004f50| 2e 64 6c 6c 00 ed 88 26 | 00 00 a0 01 00 12 47 65 |.dll...&|......Ge|
|00004f60| 74 43 6f 6e 73 6f 6c 65 | 46 6f 6e 74 53 69 7a 65 |tConsole|FontSize|
|00004f70| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 de 88 |.KERNEL3|2.dll...|
|00004f80| 2b 00 00 a0 01 00 17 47 | 65 74 43 6f 6e 73 6f 6c |+......G|etConsol|
|00004f90| 65 48 61 72 64 77 61 72 | 65 53 74 61 74 65 0c 4b |eHardwar|eState.K|
|00004fa0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 d7 88 2d 00 |ERNEL32.|dll...-.|
|00004fb0| 00 a0 01 00 19 47 65 74 | 43 6f 6e 73 6f 6c 65 49 |.....Get|ConsoleI|
|00004fc0| 6e 70 75 74 57 61 69 74 | 48 61 6e 64 6c 65 0c 4b |nputWait|Handle.K|
|00004fd0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 11 88 22 00 |ERNEL32.|dll...".|
|00004fe0| 00 a0 01 00 0e 47 65 74 | 43 6f 6e 73 6f 6c 65 4d |.....Get|ConsoleM|
|00004ff0| 6f 64 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ode.KERN|EL32.dll|
|00005000| 00 93 88 26 00 00 a0 01 | 00 12 47 65 74 43 6f 6e |...&....|..GetCon|
|00005010| 73 6f 6c 65 4f 75 74 70 | 75 74 43 50 0c 4b 45 52 |soleOutp|utCP.KER|
|00005020| 4e 45 4c 33 32 2e 64 6c | 6c 00 ec 88 2e 00 00 a0 |NEL32.dl|l.......|
|00005030| 01 00 1a 47 65 74 43 6f | 6e 73 6f 6c 65 53 63 72 |...GetCo|nsoleScr|
|00005040| 65 65 6e 42 75 66 66 65 | 72 49 6e 66 6f 0c 4b 45 |eenBuffe|rInfo.KE|
|00005050| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 ba 88 24 00 00 |RNEL32.d|ll...$..|
|00005060| a0 01 00 10 47 65 74 43 | 6f 6e 73 6f 6c 65 54 69 |....GetC|onsoleTi|
|00005070| 74 6c 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |tleA.KER|NEL32.dl|
|00005080| 6c 00 d1 88 24 00 00 a0 | 01 00 10 47 65 74 43 6f |l...$...|...GetCo|
|00005090| 6e 73 6f 6c 65 54 69 74 | 6c 65 57 0c 4b 45 52 4e |nsoleTit|leW.KERN|
|000050a0| 45 4c 33 32 2e 64 6c 6c | 00 bb 88 26 00 00 a0 01 |EL32.dll|...&....|
|000050b0| 00 12 47 65 74 43 75 72 | 72 65 6e 63 79 46 6f 72 |..GetCur|rencyFor|
|000050c0| 6d 61 74 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |matA.KER|NEL32.dl|
|000050d0| 6c 00 ee 88 26 00 00 a0 | 01 00 12 47 65 74 43 75 |l...&...|...GetCu|
|000050e0| 72 72 65 6e 63 79 46 6f | 72 6d 61 74 57 0c 4b 45 |rrencyFo|rmatW.KE|
|000050f0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 d8 88 29 00 00 |RNEL32.d|ll...)..|
|00005100| a0 01 00 15 47 65 74 43 | 75 72 72 65 6e 74 43 6f |....GetC|urrentCo|
|00005110| 6e 73 6f 6c 65 46 6f 6e | 74 0c 4b 45 52 4e 45 4c |nsoleFon|t.KERNEL|
|00005120| 33 32 2e 64 6c 6c 00 90 | 88 28 00 00 a0 01 00 14 |32.dll..|.(......|
|00005130| 47 65 74 43 75 72 72 65 | 6e 74 44 69 72 65 63 74 |GetCurre|ntDirect|
|00005140| 6f 72 79 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |oryA.KER|NEL32.dl|
|00005150| 6c 00 06 88 28 00 00 a0 | 01 00 14 47 65 74 43 75 |l...(...|...GetCu|
|00005160| 72 72 65 6e 74 44 69 72 | 65 63 74 6f 72 79 57 0c |rrentDir|ectoryW.|
|00005170| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 f0 88 25 |KERNEL32|.dll...%|
|00005180| 00 00 a0 01 00 11 47 65 | 74 43 75 72 72 65 6e 74 |......Ge|tCurrent|
|00005190| 50 72 6f 63 65 73 73 0c | 4b 45 52 4e 45 4c 33 32 |Process.|KERNEL32|
|000051a0| 2e 64 6c 6c 00 23 88 27 | 00 00 a0 01 00 13 47 65 |.dll.#.'|......Ge|
|000051b0| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 49 |tCurrent|ProcessI|
|000051c0| 64 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 72 |d.KERNEL|32.dll.r|
|000051d0| 88 24 00 00 a0 01 00 10 | 47 65 74 43 75 72 72 65 |.$......|GetCurre|
|000051e0| 6e 74 54 68 72 65 61 64 | 0c 4b 45 52 4e 45 4c 33 |ntThread|.KERNEL3|
|000051f0| 32 2e 64 6c 6c 00 ac 88 | 26 00 00 a0 01 00 12 47 |2.dll...|&......G|
|00005200| 65 74 43 75 72 72 65 6e | 74 54 68 72 65 61 64 49 |etCurren|tThreadI|
|00005210| 64 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 fb |d.KERNEL|32.dll..|
|00005220| 88 22 00 00 a0 01 00 0e | 47 65 74 44 61 74 65 46 |."......|GetDateF|
|00005230| 6f 72 6d 61 74 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ormatA.K|ERNEL32.|
|00005240| 64 6c 6c 00 c3 88 22 00 | 00 a0 01 00 0e 47 65 74 |dll...".|.....Get|
|00005250| 44 61 74 65 46 6f 72 6d | 61 74 57 0c 4b 45 52 4e |DateForm|atW.KERN|
|00005260| 45 4c 33 32 2e 64 6c 6c | 00 ad 88 23 00 00 a0 01 |EL32.dll|...#....|
|00005270| 00 0f 47 65 74 44 61 79 | 6c 69 67 68 74 46 6c 61 |..GetDay|lightFla|
|00005280| 67 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 39 |g.KERNEL|32.dll.9|
|00005290| 88 29 00 00 a0 01 00 15 | 47 65 74 44 65 66 61 75 |.)......|GetDefau|
|000052a0| 6c 74 43 6f 6d 6d 43 6f | 6e 66 69 67 41 0c 4b 45 |ltCommCo|nfigA.KE|
|000052b0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 f5 88 29 00 00 |RNEL32.d|ll...)..|
|000052c0| a0 01 00 15 47 65 74 44 | 65 66 61 75 6c 74 43 6f |....GetD|efaultCo|
|000052d0| 6d 6d 43 6f 6e 66 69 67 | 57 0c 4b 45 52 4e 45 4c |mmConfig|W.KERNEL|
|000052e0| 33 32 2e 64 6c 6c 00 df | 88 25 00 00 a0 01 00 11 |32.dll..|.%......|
|000052f0| 47 65 74 44 69 73 6b 46 | 72 65 65 53 70 61 63 65 |GetDiskF|reeSpace|
|00005300| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 ab |A.KERNEL|32.dll..|
|00005310| 88 25 00 00 a0 01 00 11 | 47 65 74 44 69 73 6b 46 |.%......|GetDiskF|
|00005320| 72 65 65 53 70 61 63 65 | 57 0c 4b 45 52 4e 45 4c |reeSpace|W.KERNEL|
|00005330| 33 32 2e 64 6c 6c 00 95 | 88 21 00 00 a0 01 00 0d |32.dll..|.!......|
|00005340| 47 65 74 44 72 69 76 65 | 54 79 70 65 41 0c 4b 45 |GetDrive|TypeA.KE|
|00005350| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 10 88 21 00 00 |RNEL32.d|ll...!..|
|00005360| a0 01 00 0d 47 65 74 44 | 72 69 76 65 54 79 70 65 |....GetD|riveType|
|00005370| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 fa |W.KERNEL|32.dll..|
|00005380| 88 29 00 00 a0 01 00 15 | 47 65 74 45 6e 76 69 72 |.)......|GetEnvir|
|00005390| 6f 6e 6d 65 6e 74 53 74 | 72 69 6e 67 73 0c 4b 45 |onmentSt|rings.KE|
|000053a0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 5e 88 2a 00 00 |RNEL32.d|ll.^.*..|
|000053b0| a0 01 00 16 47 65 74 45 | 6e 76 69 72 6f 6e 6d 65 |....GetE|nvironme|
|000053c0| 6e 74 53 74 72 69 6e 67 | 73 41 0c 4b 45 52 4e 45 |ntString|sA.KERNE|
|000053d0| 4c 33 32 2e 64 6c 6c 00 | 1b 88 2a 00 00 a0 01 00 |L32.dll.|..*.....|
|000053e0| 16 47 65 74 45 6e 76 69 | 72 6f 6e 6d 65 6e 74 53 |.GetEnvi|ronmentS|
|000053f0| 74 72 69 6e 67 73 57 0c | 4b 45 52 4e 45 4c 33 32 |tringsW.|KERNEL32|
|00005400| 2e 64 6c 6c 00 05 88 2b | 00 00 a0 01 00 17 47 65 |.dll...+|......Ge|
|00005410| 74 45 6e 76 69 72 6f 6e | 6d 65 6e 74 56 61 72 69 |tEnviron|mentVari|
|00005420| 61 62 6c 65 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ableA.KE|RNEL32.d|
|00005430| 6c 6c 00 dd 88 2b 00 00 | a0 01 00 17 47 65 74 45 |ll...+..|....GetE|
|00005440| 6e 76 69 72 6f 6e 6d 65 | 6e 74 56 61 72 69 61 62 |nvironme|ntVariab|
|00005450| 6c 65 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |leW.KERN|EL32.dll|
|00005460| 00 c7 88 20 00 00 a0 01 | 00 0c 47 65 74 45 72 72 |... ....|..GetErr|
|00005470| 6f 72 4d 6f 64 65 0c 4b | 45 52 4e 45 4c 33 32 2e |orMode.K|ERNEL32.|
|00005480| 64 6c 6c 00 60 88 26 00 | 00 a0 01 00 12 47 65 74 |dll.`.&.|.....Get|
|00005490| 45 78 69 74 43 6f 64 65 | 50 72 6f 63 65 73 73 0c |ExitCode|Process.|
|000054a0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 ef 88 25 |KERNEL32|.dll...%|
|000054b0| 00 00 a0 01 00 11 47 65 | 74 45 78 69 74 43 6f 64 |......Ge|tExitCod|
|000054c0| 65 54 68 72 65 61 64 0c | 4b 45 52 4e 45 4c 33 32 |eThread.|KERNEL32|
|000054d0| 2e 64 6c 6c 00 78 88 26 | 00 00 a0 01 00 12 47 65 |.dll.x.&|......Ge|
|000054e0| 74 46 69 6c 65 41 74 74 | 72 69 62 75 74 65 73 41 |tFileAtt|ributesA|
|000054f0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 fb 88 |.KERNEL3|2.dll...|
|00005500| 26 00 00 a0 01 00 12 47 | 65 74 46 69 6c 65 41 74 |&......G|etFileAt|
|00005510| 74 72 69 62 75 74 65 73 | 57 0c 4b 45 52 4e 45 4c |tributes|W.KERNEL|
|00005520| 33 32 2e 64 6c 6c 00 e5 | 88 2e 00 00 a0 01 00 1a |32.dll..|........|
|00005530| 47 65 74 46 69 6c 65 49 | 6e 66 6f 72 6d 61 74 69 |GetFileI|nformati|
|00005540| 6f 6e 42 79 48 61 6e 64 | 6c 65 0c 4b 45 52 4e 45 |onByHand|le.KERNE|
|00005550| 4c 33 32 2e 64 6c 6c 00 | c6 88 1f 00 00 a0 01 00 |L32.dll.|........|
|00005560| 0b 47 65 74 46 69 6c 65 | 53 69 7a 65 0c 4b 45 52 |.GetFile|Size.KER|
|00005570| 4e 45 4c 33 32 2e 64 6c | 6c 00 d6 88 1f 00 00 a0 |NEL32.dl|l.......|
|00005580| 01 00 0b 47 65 74 46 69 | 6c 65 54 69 6d 65 0c 4b |...GetFi|leTime.K|
|00005590| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 e2 88 1f 00 |ERNEL32.|dll.....|
|000055a0| 00 a0 01 00 0b 47 65 74 | 46 69 6c 65 54 79 70 65 |.....Get|FileType|
|000055b0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 cf 88 |.KERNEL3|2.dll...|
|000055c0| 24 00 00 a0 01 00 10 47 | 65 74 46 75 6c 6c 50 61 |$......G|etFullPa|
|000055d0| 74 68 4e 61 6d 65 41 0c | 4b 45 52 4e 45 4c 33 32 |thNameA.|KERNEL32|
|000055e0| 2e 64 6c 6c 00 05 88 24 | 00 00 a0 01 00 10 47 65 |.dll...$|......Ge|
|000055f0| 74 46 75 6c 6c 50 61 74 | 68 4e 61 6d 65 57 0c 4b |tFullPat|hNameW.K|
|00005600| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 ef 88 24 00 |ERNEL32.|dll...$.|
|00005610| 00 a0 01 00 10 47 65 74 | 48 61 6e 64 6c 65 43 6f |.....Get|HandleCo|
|00005620| 6e 74 65 78 74 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ntext.KE|RNEL32.d|
|00005630| 6c 6c 00 b6 88 28 00 00 | a0 01 00 14 47 65 74 48 |ll...(..|....GetH|
|00005640| 61 6e 64 6c 65 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |andleInf|ormation|
|00005650| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 0d 88 |.KERNEL3|2.dll...|
|00005660| 27 00 00 a0 01 00 13 47 | 65 74 4c 53 43 61 6c 6c |'......G|etLSCall|
|00005670| 62 61 63 6b 54 61 72 67 | 65 74 0c 4b 45 52 4e 45 |backTarg|et.KERNE|
|00005680| 4c 33 32 2e 64 6c 6c 00 | ce 88 29 00 00 a0 01 00 |L32.dll.|..).....|
|00005690| 15 47 65 74 4c 53 43 61 | 6c 6c 62 61 63 6b 54 65 |.GetLSCa|llbackTe|
|000056a0| 6d 70 6c 61 74 65 0c 4b | 45 52 4e 45 4c 33 32 2e |mplate.K|ERNEL32.|
|000056b0| 64 6c 6c 00 f5 88 2f 00 | 00 a0 01 00 1b 47 65 74 |dll.../.|.....Get|
|000056c0| 4c 61 72 67 65 73 74 43 | 6f 6e 73 6f 6c 65 57 69 |LargestC|onsoleWi|
|000056d0| 6e 64 6f 77 53 69 7a 65 | 0c 4b 45 52 4e 45 4c 33 |ndowSize|.KERNEL3|
|000056e0| 32 2e 64 6c 6c 00 19 88 | 20 00 00 a0 01 00 0c 47 |2.dll...| ......G|
|000056f0| 65 74 4c 61 73 74 45 72 | 72 6f 72 0c 4b 45 52 4e |etLastEr|ror.KERN|
|00005700| 45 4c 33 32 2e 64 6c 6c | 00 51 88 20 00 00 a0 01 |EL32.dll|.Q. ....|
|00005710| 00 0c 47 65 74 4c 6f 63 | 61 6c 54 69 6d 65 0c 4b |..GetLoc|alTime.K|
|00005720| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 75 88 22 00 |ERNEL32.|dll.u.".|
|00005730| 00 a0 01 00 0e 47 65 74 | 4c 6f 63 61 6c 65 49 6e |.....Get|LocaleIn|
|00005740| 66 6f 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |foA.KERN|EL32.dll|
|00005750| 00 ce 88 22 00 00 a0 01 | 00 0e 47 65 74 4c 6f 63 |..."....|..GetLoc|
|00005760| 61 6c 65 49 6e 66 6f 57 | 0c 4b 45 52 4e 45 4c 33 |aleInfoW|.KERNEL3|
|00005770| 32 2e 64 6c 6c 00 b8 88 | 2b 00 00 a0 01 00 17 47 |2.dll...|+......G|
|00005780| 65 74 4c 6f 67 69 63 61 | 6c 44 72 69 76 65 53 74 |etLogica|lDriveSt|
|00005790| 72 69 6e 67 73 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ringsA.K|ERNEL32.|
|000057a0| 64 6c 6c 00 f9 88 2b 00 | 00 a0 01 00 17 47 65 74 |dll...+.|.....Get|
|000057b0| 4c 6f 67 69 63 61 6c 44 | 72 69 76 65 53 74 72 69 |LogicalD|riveStri|
|000057c0| 6e 67 73 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ngsW.KER|NEL32.dl|
|000057d0| 6c 00 e3 88 24 00 00 a0 | 01 00 10 47 65 74 4c 6f |l...$...|...GetLo|
|000057e0| 67 69 63 61 6c 44 72 69 | 76 65 73 0c 4b 45 52 4e |gicalDri|ves.KERN|
|000057f0| 45 4c 33 32 2e 64 6c 6c | 00 bf 88 23 00 00 a0 01 |EL32.dll|...#....|
|00005800| 00 0f 47 65 74 4d 61 69 | 6c 73 6c 6f 74 49 6e 66 |..GetMai|lslotInf|
|00005810| 6f 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 18 |o.KERNEL|32.dll..|
|00005820| 88 26 00 00 a0 01 00 12 | 47 65 74 4d 6f 64 75 6c |.&......|GetModul|
|00005830| 65 46 69 6c 65 4e 61 6d | 65 41 0c 4b 45 52 4e 45 |eFileNam|eA.KERNE|
|00005840| 4c 33 32 2e 64 6c 6c 00 | 3b 88 26 00 00 a0 01 00 |L32.dll.|;.&.....|
|00005850| 12 47 65 74 4d 6f 64 75 | 6c 65 46 69 6c 65 4e 61 |.GetModu|leFileNa|
|00005860| 6d 65 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |meW.KERN|EL32.dll|
|00005870| 00 25 88 24 00 00 a0 01 | 00 10 47 65 74 4d 6f 64 |.%.$....|..GetMod|
|00005880| 75 6c 65 48 61 6e 64 6c | 65 41 0c 4b 45 52 4e 45 |uleHandl|eA.KERNE|
|00005890| 4c 33 32 2e 64 6c 6c 00 | f4 88 24 00 00 a0 01 00 |L32.dll.|..$.....|
|000058a0| 10 47 65 74 4d 6f 64 75 | 6c 65 48 61 6e 64 6c 65 |.GetModu|leHandle|
|000058b0| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 de |W.KERNEL|32.dll..|
|000058c0| 88 2c 00 00 a0 01 00 18 | 47 65 74 4e 61 6d 65 64 |.,......|GetNamed|
|000058d0| 50 69 70 65 48 61 6e 64 | 6c 65 53 74 61 74 65 41 |PipeHand|leStateA|
|000058e0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 d6 88 |.KERNEL3|2.dll...|
|000058f0| 2c 00 00 a0 01 00 18 47 | 65 74 4e 61 6d 65 64 50 |,......G|etNamedP|
|00005900| 69 70 65 48 61 6e 64 6c | 65 53 74 61 74 65 57 0c |ipeHandl|eStateW.|
|00005910| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 c0 88 24 |KERNEL32|.dll...$|
|00005920| 00 00 a0 01 00 10 47 65 | 74 4e 61 6d 65 64 50 69 |......Ge|tNamedPi|
|00005930| 70 65 49 6e 66 6f 0c 4b | 45 52 4e 45 4c 33 32 2e |peInfo.K|ERNEL32.|
|00005940| 64 6c 6c 00 e8 88 25 00 | 00 a0 01 00 11 47 65 74 |dll...%.|.....Get|
|00005950| 4e 65 78 74 56 44 4d 43 | 6f 6d 6d 61 6e 64 0c 4b |NextVDMC|ommand.K|
|00005960| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 a0 88 24 00 |ERNEL32.|dll...$.|
|00005970| 00 a0 01 00 10 47 65 74 | 4e 75 6d 62 65 72 46 6f |.....Get|NumberFo|
|00005980| 72 6d 61 74 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |rmatA.KE|RNEL32.d|
|00005990| 6c 6c 00 d4 88 24 00 00 | a0 01 00 10 47 65 74 4e |ll...$..|....GetN|
|000059a0| 75 6d 62 65 72 46 6f 72 | 6d 61 74 57 0c 4b 45 52 |umberFor|matW.KER|
|000059b0| 4e 45 4c 33 32 2e 64 6c | 6c 00 be 88 2b 00 00 a0 |NEL32.dl|l...+...|
|000059c0| 01 00 17 47 65 74 4e 75 | 6d 62 65 72 4f 66 43 6f |...GetNu|mberOfCo|
|000059d0| 6e 73 6f 6c 65 46 6f 6e | 74 73 0c 4b 45 52 4e 45 |nsoleFon|ts.KERNE|
|000059e0| 4c 33 32 2e 64 6c 6c 00 | de 88 31 00 00 a0 01 00 |L32.dll.|..1.....|
|000059f0| 1d 47 65 74 4e 75 6d 62 | 65 72 4f 66 43 6f 6e 73 |.GetNumb|erOfCons|
|00005a00| 6f 6c 65 49 6e 70 75 74 | 45 76 65 6e 74 73 0c 4b |oleInput|Events.K|
|00005a10| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 57 88 32 00 |ERNEL32.|dll.W.2.|
|00005a20| 00 a0 01 00 1e 47 65 74 | 4e 75 6d 62 65 72 4f 66 |.....Get|NumberOf|
|00005a30| 43 6f 6e 73 6f 6c 65 4d | 6f 75 73 65 42 75 74 74 |ConsoleM|ouseButt|
|00005a40| 6f 6e 73 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ons.KERN|EL32.dll|
|00005a50| 00 e2 88 1c 00 00 a0 01 | 00 08 47 65 74 4f 45 4d |........|..GetOEM|
|00005a60| 43 50 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |CP.KERNE|L32.dll.|
|00005a70| 83 88 27 00 00 a0 01 00 | 13 47 65 74 4f 76 65 72 |..'.....|.GetOver|
|00005a80| 6c 61 70 70 65 64 52 65 | 73 75 6c 74 0c 4b 45 52 |lappedRe|sult.KER|
|00005a90| 4e 45 4c 33 32 2e 64 6c | 6c 00 50 88 24 00 00 a0 |NEL32.dl|l.P.$...|
|00005aa0| 01 00 10 47 65 74 50 72 | 69 6f 72 69 74 79 43 6c |...GetPr|iorityCl|
|00005ab0| 61 73 73 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ass.KERN|EL32.dll|
|00005ac0| 00 8f 88 29 00 00 a0 01 | 00 15 47 65 74 50 72 69 |...)....|..GetPri|
|00005ad0| 76 61 74 65 50 72 6f 66 | 69 6c 65 49 6e 74 41 0c |vateProf|ileIntA.|
|00005ae0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 c5 88 29 |KERNEL32|.dll...)|
|00005af0| 00 00 a0 01 00 15 47 65 | 74 50 72 69 76 61 74 65 |......Ge|tPrivate|
|00005b00| 50 72 6f 66 69 6c 65 49 | 6e 74 57 0c 4b 45 52 4e |ProfileI|ntW.KERN|
|00005b10| 45 4c 33 32 2e 64 6c 6c | 00 af 88 2d 00 00 a0 01 |EL32.dll|...-....|
|00005b20| 00 19 47 65 74 50 72 69 | 76 61 74 65 50 72 6f 66 |..GetPri|vateProf|
|00005b30| 69 6c 65 53 65 63 74 69 | 6f 6e 41 0c 4b 45 52 4e |ileSecti|onA.KERN|
|00005b40| 45 4c 33 32 2e 64 6c 6c | 00 13 88 32 00 00 a0 01 |EL32.dll|...2....|
|00005b50| 00 1e 47 65 74 50 72 69 | 76 61 74 65 50 72 6f 66 |..GetPri|vateProf|
|00005b60| 69 6c 65 53 65 63 74 69 | 6f 6e 4e 61 6d 65 73 41 |ileSecti|onNamesA|
|00005b70| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 15 88 |.KERNEL3|2.dll...|
|00005b80| 32 00 00 a0 01 00 1e 47 | 65 74 50 72 69 76 61 74 |2......G|etPrivat|
|00005b90| 65 50 72 6f 66 69 6c 65 | 53 65 63 74 69 6f 6e 4e |eProfile|SectionN|
|00005ba0| 61 6d 65 73 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |amesW.KE|RNEL32.d|
|00005bb0| 6c 6c 00 ff 88 2d 00 00 | a0 01 00 19 47 65 74 50 |ll...-..|....GetP|
|00005bc0| 72 69 76 61 74 65 50 72 | 6f 66 69 6c 65 53 65 63 |rivatePr|ofileSec|
|00005bd0| 74 69 6f 6e 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |tionW.KE|RNEL32.d|
|00005be0| 6c 6c 00 fd 88 2c 00 00 | a0 01 00 18 47 65 74 50 |ll...,..|....GetP|
|00005bf0| 72 69 76 61 74 65 50 72 | 6f 66 69 6c 65 53 74 72 |rivatePr|ofileStr|
|00005c00| 69 6e 67 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ingA.KER|NEL32.dl|
|00005c10| 6c 00 73 88 2c 00 00 a0 | 01 00 18 47 65 74 50 72 |l.s.,...|...GetPr|
|00005c20| 69 76 61 74 65 50 72 6f | 66 69 6c 65 53 74 72 69 |ivatePro|fileStri|
|00005c30| 6e 67 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ngW.KERN|EL32.dll|
|00005c40| 00 5d 88 2c 00 00 a0 01 | 00 18 47 65 74 50 72 69 |.].,....|..GetPri|
|00005c50| 76 61 74 65 50 72 6f 66 | 69 6c 65 53 74 72 75 63 |vateProf|ileStruc|
|00005c60| 74 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |tA.KERNE|L32.dll.|
|00005c70| 65 88 2c 00 00 a0 01 00 | 18 47 65 74 50 72 69 76 |e.,.....|.GetPriv|
|00005c80| 61 74 65 50 72 6f 66 69 | 6c 65 53 74 72 75 63 74 |ateProfi|leStruct|
|00005c90| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 4f |W.KERNEL|32.dll.O|
|00005ca0| 88 22 00 00 a0 01 00 0e | 47 65 74 50 72 6f 63 41 |."......|GetProcA|
|00005cb0| 64 64 72 65 73 73 0c 4b | 45 52 4e 45 4c 33 32 2e |ddress.K|ERNEL32.|
|00005cc0| 64 6c 6c 00 91 88 2a 00 | 00 a0 01 00 16 47 65 74 |dll...*.|.....Get|
|00005cd0| 50 72 6f 63 65 73 73 41 | 66 66 69 6e 69 74 79 4d |ProcessA|ffinityM|
|00005ce0| 61 73 6b 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ask.KERN|EL32.dll|
|00005cf0| 00 36 88 23 00 00 a0 01 | 00 0f 47 65 74 50 72 6f |.6.#....|..GetPro|
|00005d00| 63 65 73 73 46 6c 61 67 | 73 0c 4b 45 52 4e 45 4c |cessFlag|s.KERNEL|
|00005d10| 33 32 2e 64 6c 6c 00 1d | 88 22 00 00 a0 01 00 0e |32.dll..|."......|
|00005d20| 47 65 74 50 72 6f 63 65 | 73 73 48 65 61 70 0c 4b |GetProce|ssHeap.K|
|00005d30| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 8e 88 23 00 |ERNEL32.|dll...#.|
|00005d40| 00 a0 01 00 0f 47 65 74 | 50 72 6f 63 65 73 73 48 |.....Get|ProcessH|
|00005d50| 65 61 70 73 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |eaps.KER|NEL32.dl|
|00005d60| 6c 00 19 88 30 00 00 a0 | 01 00 1c 47 65 74 50 72 |l...0...|...GetPr|
|00005d70| 6f 63 65 73 73 53 68 75 | 74 64 6f 77 6e 50 61 72 |ocessShu|tdownPar|
|00005d80| 61 6d 65 74 65 72 73 0c | 4b 45 52 4e 45 4c 33 32 |ameters.|KERNEL32|
|00005d90| 2e 64 6c 6c 00 80 88 23 | 00 00 a0 01 00 0f 47 65 |.dll...#|......Ge|
|00005da0| 74 50 72 6f 63 65 73 73 | 54 69 6d 65 73 0c 4b 45 |tProcess|Times.KE|
|00005db0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 08 88 25 00 00 |RNEL32.d|ll...%..|
|00005dc0| a0 01 00 11 47 65 74 50 | 72 6f 63 65 73 73 56 65 |....GetP|rocessVe|
|00005dd0| 72 73 69 6f 6e 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |rsion.KE|RNEL32.d|
|00005de0| 6c 6c 00 20 88 2c 00 00 | a0 01 00 18 47 65 74 50 |ll. .,..|....GetP|
|00005df0| 72 6f 63 65 73 73 57 6f | 72 6b 69 6e 67 53 65 74 |rocessWo|rkingSet|
|00005e00| 53 69 7a 65 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Size.KER|NEL32.dl|
|00005e10| 6c 00 50 88 22 00 00 a0 | 01 00 0e 47 65 74 50 72 |l.P."...|...GetPr|
|00005e20| 6f 64 75 63 74 4e 61 6d | 65 0c 4b 45 52 4e 45 4c |oductNam|e.KERNEL|
|00005e30| 33 32 2e 64 6c 6c 00 89 | 88 22 00 00 a0 01 00 0e |32.dll..|."......|
|00005e40| 47 65 74 50 72 6f 66 69 | 6c 65 49 6e 74 41 0c 4b |GetProfi|leIntA.K|
|00005e50| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 ae 88 22 00 |ERNEL32.|dll...".|
|00005e60| 00 a0 01 00 0e 47 65 74 | 50 72 6f 66 69 6c 65 49 |.....Get|ProfileI|
|00005e70| 6e 74 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ntW.KERN|EL32.dll|
|00005e80| 00 98 88 26 00 00 a0 01 | 00 12 47 65 74 50 72 6f |...&....|..GetPro|
|00005e90| 66 69 6c 65 53 65 63 74 | 69 6f 6e 41 0c 4b 45 52 |fileSect|ionA.KER|
|00005ea0| 4e 45 4c 33 32 2e 64 6c | 6c 00 fc 88 26 00 00 a0 |NEL32.dl|l...&...|
|00005eb0| 01 00 12 47 65 74 50 72 | 6f 66 69 6c 65 53 65 63 |...GetPr|ofileSec|
|00005ec0| 74 69 6f 6e 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |tionW.KE|RNEL32.d|
|00005ed0| 6c 6c 00 e6 88 25 00 00 | a0 01 00 11 47 65 74 50 |ll...%..|....GetP|
|00005ee0| 72 6f 66 69 6c 65 53 74 | 72 69 6e 67 41 0c 4b 45 |rofileSt|ringA.KE|
|00005ef0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 5c 88 25 00 00 |RNEL32.d|ll.\.%..|
|00005f00| a0 01 00 11 47 65 74 50 | 72 6f 66 69 6c 65 53 74 |....GetP|rofileSt|
|00005f10| 72 69 6e 67 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ringW.KE|RNEL32.d|
|00005f20| 6c 6c 00 46 88 2d 00 00 | a0 01 00 19 47 65 74 51 |ll.F.-..|....GetQ|
|00005f30| 75 65 75 65 64 43 6f 6d | 70 6c 65 74 69 6f 6e 53 |ueuedCom|pletionS|
|00005f40| 74 61 74 75 73 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |tatus.KE|RNEL32.d|
|00005f50| 6c 6c 00 ce 88 27 00 00 | a0 01 00 13 47 65 74 53 |ll...'..|....GetS|
|00005f60| 4c 43 61 6c 6c 62 61 63 | 6b 54 61 72 67 65 74 0c |LCallbac|kTarget.|
|00005f70| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 ce 88 29 |KERNEL32|.dll...)|
|00005f80| 00 00 a0 01 00 15 47 65 | 74 53 4c 43 61 6c 6c 62 |......Ge|tSLCallb|
|00005f90| 61 63 6b 54 65 6d 70 6c | 61 74 65 0c 4b 45 52 4e |ackTempl|ate.KERN|
|00005fa0| 45 4c 33 32 2e 64 6c 6c | 00 f5 88 25 00 00 a0 01 |EL32.dll|...%....|
|00005fb0| 00 11 47 65 74 53 68 6f | 72 74 50 61 74 68 4e 61 |..GetSho|rtPathNa|
|00005fc0| 6d 65 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |meA.KERN|EL32.dll|
|00005fd0| 00 86 88 25 00 00 a0 01 | 00 11 47 65 74 53 68 6f |...%....|..GetSho|
|00005fe0| 72 74 50 61 74 68 4e 61 | 6d 65 57 0c 4b 45 52 4e |rtPathNa|meW.KERN|
|00005ff0| 45 4c 33 32 2e 64 6c 6c | 00 70 88 23 00 00 a0 01 |EL32.dll|.p.#....|
|00006000| 00 0f 47 65 74 53 74 61 | 72 74 75 70 49 6e 66 6f |..GetSta|rtupInfo|
|00006010| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 29 |A.KERNEL|32.dll.)|
|00006020| 88 23 00 00 a0 01 00 0f | 47 65 74 53 74 61 72 74 |.#......|GetStart|
|00006030| 75 70 49 6e 66 6f 57 0c | 4b 45 52 4e 45 4c 33 32 |upInfoW.|KERNEL32|
|00006040| 2e 64 6c 6c 00 13 88 20 | 00 00 a0 01 00 0c 47 65 |.dll... |......Ge|
|00006050| 74 53 74 64 48 61 6e 64 | 6c 65 0c 4b 45 52 4e 45 |tStdHand|le.KERNE|
|00006060| 4c 33 32 2e 64 6c 6c 00 | 78 88 22 00 00 a0 01 00 |L32.dll.|x.".....|
|00006070| 0e 47 65 74 53 74 72 69 | 6e 67 54 79 70 65 41 0c |.GetStri|ngTypeA.|
|00006080| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 91 88 24 |KERNEL32|.dll...$|
|00006090| 00 00 a0 01 00 10 47 65 | 74 53 74 72 69 6e 67 54 |......Ge|tStringT|
|000060a0| 79 70 65 45 78 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ypeExA.K|ERNEL32.|
|000060b0| 64 6c 6c 00 d0 88 24 00 | 00 a0 01 00 10 47 65 74 |dll...$.|.....Get|
|000060c0| 53 74 72 69 6e 67 54 79 | 70 65 45 78 57 0c 4b 45 |StringTy|peExW.KE|
|000060d0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 ba 88 22 00 00 |RNEL32.d|ll..."..|
|000060e0| a0 01 00 0e 47 65 74 53 | 74 72 69 6e 67 54 79 70 |....GetS|tringTyp|
|000060f0| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |eW.KERNE|L32.dll.|
|00006100| 7b 88 28 00 00 a0 01 00 | 14 47 65 74 53 79 73 74 |{.(.....|.GetSyst|
|00006110| 65 6d 44 65 66 61 75 6c | 74 4c 43 49 44 0c 4b 45 |emDefaul|tLCID.KE|
|00006120| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 79 88 2a 00 00 |RNEL32.d|ll.y.*..|
|00006130| a0 01 00 16 47 65 74 53 | 79 73 74 65 6d 44 65 66 |....GetS|ystemDef|
|00006140| 61 75 6c 74 4c 61 6e 67 | 49 44 0c 4b 45 52 4e 45 |aultLang|ID.KERNE|
|00006150| 4c 33 32 2e 64 6c 6c 00 | 82 88 27 00 00 a0 01 00 |L32.dll.|..'.....|
|00006160| 13 47 65 74 53 79 73 74 | 65 6d 44 69 72 65 63 74 |.GetSyst|emDirect|
|00006170| 6f 72 79 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |oryA.KER|NEL32.dl|
|00006180| 6c 00 66 88 27 00 00 a0 | 01 00 13 47 65 74 53 79 |l.f.'...|...GetSy|
|00006190| 73 74 65 6d 44 69 72 65 | 63 74 6f 72 79 57 0c 4b |stemDire|ctoryW.K|
|000061a0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 00 50 88 21 00 |ERNEL32.|dll.P.!.|
|000061b0| 00 a0 01 00 0d 47 65 74 | 53 79 73 74 65 6d 49 6e |.....Get|SystemIn|
|000061c0| 66 6f 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 00 |fo.KERNE|L32.dll.|
|000061d0| dc 88 28 00 00 a0 01 00 | 14 47 65 74 53 79 73 74 |..(.....|.GetSyst|
|000061e0| 65 6d 50 6f 77 65 72 53 | 74 61 74 75 73 0c 4b 45 |emPowerS|tatus.KE|
|000061f0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 c9 88 21 00 00 |RNEL32.d|ll...!..|
|00006200| a0 01 00 0d 47 65 74 53 | 79 73 74 65 6d 54 69 6d |....GetS|ystemTim|
|00006210| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 00 d9 |e.KERNEL|32.dll..|
|00006220| 88 2b 00 00 a0 01 00 17 | 47 65 74 53 79 73 74 65 |.+......|GetSyste|
|00006230| 6d 54 69 6d 65 41 64 6a | 75 73 74 6d 65 6e 74 0c |mTimeAdj|ustment.|
|00006240| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 a6 88 2b |KERNEL32|.dll...+|
|00006250| 00 00 a0 01 00 17 47 65 | 74 53 79 73 74 65 6d 54 |......Ge|tSystemT|
|00006260| 69 6d 65 41 73 46 69 6c | 65 54 69 6d 65 0c 4b 45 |imeAsFil|eTime.KE|
|00006270| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 02 88 25 00 00 |RNEL32.d|ll...%..|
|00006280| a0 01 00 11 47 65 74 54 | 61 70 65 50 61 72 61 6d |....GetT|apeParam|
|00006290| 65 74 65 72 73 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |eters.KE|RNEL32.d|
|000062a0| 6c 6c 00 47 88 23 00 00 | a0 01 00 0f 47 65 74 54 |ll.G.#..|....GetT|
|000062b0| 61 70 65 50 6f 73 69 74 | 69 6f 6e 0c 4b 45 52 4e |apePosit|ion.KERN|
|000062c0| 45 4c 33 32 2e 64 6c 6c | 00 0a 88 21 00 00 a0 01 |EL32.dll|...!....|
|000062d0| 00 0d 47 65 74 54 61 70 | 65 53 74 61 74 75 73 0c |..GetTap|eStatus.|
|000062e0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 df 88 24 |KERNEL32|.dll...$|
|000062f0| 00 00 a0 01 00 10 47 65 | 74 54 65 6d 70 46 69 6c |......Ge|tTempFil|
|00006300| 65 4e 61 6d 65 41 0c 4b | 45 52 4e 45 4c 33 32 2e |eNameA.K|ERNEL32.|
|00006310| 64 6c 6c 00 0f 88 24 00 | 00 a0 01 00 10 47 65 74 |dll...$.|.....Get|
|00006320| 54 65 6d 70 46 69 6c 65 | 4e 61 6d 65 57 0c 4b 45 |TempFile|NameW.KE|
|00006330| 52 4e 45 4c 33 32 2e 64 | 6c 6c 00 f9 88 20 00 00 |RNEL32.d|ll... ..|
|00006340| a0 01 00 0c 47 65 74 54 | 65 6d 70 50 61 74 68 41 |....GetT|empPathA|
|00006350| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 8b 88 |.KERNEL3|2.dll...|
|00006360| 20 00 00 a0 01 00 0c 47 | 65 74 54 65 6d 70 50 61 | ......G|etTempPa|
|00006370| 74 68 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |thW.KERN|EL32.dll|
|00006380| 00 75 88 24 00 00 a0 01 | 00 10 47 65 74 54 68 72 |.u.$....|..GetThr|
|00006390| 65 61 64 43 6f 6e 74 65 | 78 74 0c 4b 45 52 4e 45 |eadConte|xt.KERNE|
|000063a0| 4c 33 32 2e 64 6c 6c 00 | aa 88 23 00 00 a0 01 00 |L32.dll.|..#.....|
|000063b0| 0f 47 65 74 54 68 72 65 | 61 64 4c 6f 63 61 6c 65 |.GetThre|adLocale|
|000063c0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 00 41 88 |.KERNEL3|2.dll.A.|
|000063d0| 25 00 00 a0 01 00 11 47 | 65 74 54 68 72 65 61 64 |%......G|etThread|
|000063e0| 50 72 69 6f 72 69 74 79 | 0c 4b 45 52 4e 45 4c 33 |Priority|.KERNEL3|
|000063f0| 32 2e 64 6c 6c 00 2b 88 | 2a 00 00 a0 01 00 16 47 |2.dll.+.|*......G|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.
