home *** CD-ROM | disk | FTP | other *** search
/ Chip 2003 May / CHIPCD200305.iso / virus / DubaV / data1.cab / KAV5MainProgram / KWatch2.SYS < prev    next >
Microsoft Windows Dynamic Link Library  |  2003-04-15  |  25.8 KB
view JSON data     |     view as text     |     open on a Mac     |     open on a PC

This file was processed as: Microsoft Windows Dynamic Link Library (executable/dll).

You can browse this item here: KWatch2.SYS

ConfidenceProgramDetectionMatch TypeSupport
100% dexvert Microsoft Windows Dynamic Link Library (executable/dll) magic Supported
100% dexvert MS-DOS/Windows or OS/2 Executable (executable/exe) magic Supported
1% dexvert MS-DOS Driver (executable/msDOSDriver) ext Unsupported
1% dexvert OS/2 Device Driver (other/os2DeviceDriver) ext Unsupported
1% dexvert SYSLINUX loader (other/syslinuxLoader) ext Unsupported
1% dexvert FreeDOS KEYBoard layout collection (other/freeDOSKEYBoardLayoutCollection) ext Unsupported
1% dexvert MS-DOS KEYBoard Layout file (other/msDOSKEYBoardLayoutFile) ext Unsupported
100% file PE32 executable for MS Windows 1.10 (native), Intel i386, 4 sections default
99% file data default
34% TrID Win32 Dynamic Link Library (generic) default
23% TrID Win32 Executable (generic) default
10% TrID Windows Icons Library (generic) default (weak)
10% TrID OS/2 Executable (generic) default
10% TrID Generic Win/DOS Executable default
100% siegfried fmt/899 Windows Portable Executable (32 bit) default
100% gt2 Ist eine ausf�hrbare Win32 Datei default
100% binwalkID Microsoft executable, portable (PE) default
100% xdgMime application/vnd.microsoft.portable-executable default (weak)


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 c0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 55 8a 63 fa 11 eb 0d a9 | 11 eb 0d a9 11 eb 0d a9 |U.c.....|........|
|00000090| f9 f4 07 a9 10 eb 0d a9 | 48 c8 1e a9 14 eb 0d a9 |........|H.......|
|000000a0| 11 eb 0c a9 3a eb 0d a9 | 17 c8 06 a9 18 eb 0d a9 |....:...|........|
|000000b0| 52 69 63 68 11 eb 0d a9 | 00 00 00 00 00 00 00 00 |Rich....|........|
|000000c0| 50 45 00 00 4c 01 04 00 | a3 1f 8b 3e 00 00 00 00 |PE..L...|...>....|
|000000d0| 00 00 00 00 e0 00 0e 01 | 0b 01 06 00 00 1c 00 00 |........|........|
|000000e0| 80 03 00 00 00 00 00 00 | 25 0f 00 00 80 02 00 00 |........|%.......|
|000000f0| 80 1a 00 00 00 00 01 00 | 80 00 00 00 80 00 00 00 |........|........|
|00000100| 05 00 00 00 05 00 00 00 | 01 00 0a 00 00 00 00 00 |........|........|
|00000110| 00 22 00 00 80 02 00 00 | 6a 5f 01 00 01 00 00 00 |."......|j_......|
|00000120| 00 00 04 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000130| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 80 1b 00 00 3c 00 00 00 | 00 00 00 00 00 00 00 00 |....<...|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 80 1f 00 00 c4 01 00 00 | 30 03 00 00 54 00 00 00 |........|0...T...|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 80 02 00 00 ac 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001c0| e6 17 00 00 80 02 00 00 | 00 18 00 00 80 02 00 00 |........|........|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|000001e0| 2e 64 61 74 61 00 00 00 | d8 00 00 00 80 1a 00 00 |.data...|........|
|000001f0| 00 01 00 00 80 1a 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 00 00 00 00 40 00 00 c8 | 49 4e 49 54 00 00 00 00 |....@...|INIT....|
|00000210| dc 03 00 00 80 1b 00 00 | 00 04 00 00 80 1b 00 00 |........|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 e2 |........|.... ...|
|00000230| 2e 72 65 6c 6f 63 00 00 | 0c 02 00 00 80 1f 00 00 |.reloc..|........|
|00000240| 80 02 00 00 80 1f 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| d0 1e 00 00 bc 1e 00 00 | 00 00 00 00 a2 1c 00 00 |........|........|
|00000290| ae 1c 00 00 bc 1c 00 00 | ca 1c 00 00 de 1c 00 00 |........|........|
|000002a0| 8a 1c 00 00 ea 1c 00 00 | 0a 1d 00 00 16 1d 00 00 |........|........|
|000002b0| 20 1d 00 00 2a 1d 00 00 | 34 1d 00 00 3e 1d 00 00 | ...*...|4...>...|
|000002c0| 4c 1d 00 00 62 1d 00 00 | 72 1c 00 00 9c 1d 00 00 |L...b...|r.......|
|000002d0| 68 1c 00 00 c4 1d 00 00 | dc 1d 00 00 f0 1d 00 00 |h.......|........|
|000002e0| 08 1e 00 00 20 1e 00 00 | 2e 1e 00 00 48 1e 00 00 |.... ...|....H...|
|000002f0| 60 1e 00 00 70 1e 00 00 | 7a 1e 00 00 90 1e 00 00 |`...p...|z.......|
|00000300| 9a 1e 00 00 a4 1e 00 00 | 84 1d 00 00 72 1d 00 00 |........|....r...|
|00000310| ae 1d 00 00 ec 1e 00 00 | 02 1f 00 00 16 1f 00 00 |........|........|
|00000320| 32 1f 00 00 40 1f 00 00 | 00 00 00 00 00 00 00 00 |2...@...|........|
|00000330| 00 00 00 00 a3 1f 8b 3e | 00 00 00 00 04 00 00 00 |.......>|........|
|00000340| 10 01 00 00 00 00 00 00 | 00 22 00 00 00 00 00 00 |........|."......|
|00000350| a3 1f 8b 3e 00 00 00 00 | 03 00 00 00 00 02 00 00 |...>....|........|
|00000360| 00 00 00 00 10 23 00 00 | 00 00 00 00 a3 1f 8b 3e |.....#..|.......>|
|00000370| 00 00 00 00 02 00 00 00 | 10 42 00 00 00 00 00 00 |........|.B......|
|00000380| 10 25 00 00 6b 61 76 73 | 76 63 75 69 2e 65 78 65 |.%..kavs|vcui.exe|
|00000390| 00 00 00 00 6b 77 61 74 | 63 68 73 76 63 2e 65 78 |....kwat|chsvc.ex|
|000003a0| 65 00 00 00 6b 61 76 33 | 32 2e 65 78 65 00 00 00 |e...kav3|2.exe...|
|000003b0| 73 65 72 76 69 63 65 73 | 2e 65 78 65 00 00 00 00 |services|.exe....|
|000003c0| 63 73 72 73 73 2e 65 78 | 65 00 00 00 6b 61 76 73 |csrss.ex|e...kavs|
|000003d0| 76 63 2e 65 78 65 00 00 | 6b 77 61 74 63 68 66 6e |vc.exe..|kwatchfn|
|000003e0| 74 65 73 74 2e 65 78 65 | 00 00 00 00 6d 73 64 65 |test.exe|....msde|
|000003f0| 76 2e 65 78 65 00 00 00 | 64 65 6c 70 68 69 33 32 |v.exe...|delphi32|
|00000400| 2e 65 78 65 00 00 00 00 | 00 00 00 00 00 00 00 00 |.exe....|........|
|00000410| 00 00 00 00 4b 57 61 74 | 63 68 53 79 73 3a 3a 20 |....KWat|chSys:: |
|00000420| 25 73 0a 00 a1 b8 1a 01 | 00 81 ec 00 01 00 00 85 |%s......|........|
|00000430| c0 74 4f a0 10 04 01 00 | 57 88 44 24 04 b9 3f 00 |.tO.....|W.D$..?.|
|00000440| 00 00 33 c0 8d 7c 24 05 | f3 ab 8b 94 24 08 01 00 |..3..|$.|....$...|
|00000450| 00 8d 8c 24 0c 01 00 00 | 66 ab aa 51 52 8d 44 24 |...$....|f..QR.D$|
|00000460| 0c 68 fe 00 00 00 50 e8 | 0c 15 00 00 83 c4 10 8d |.h....P.|........|
|00000470| 4c 24 04 51 68 14 04 01 | 00 e8 f4 14 00 00 83 c4 |L$.Qh...|........|
|00000480| 08 5f 81 c4 00 01 00 00 | c3 90 90 90 90 90 90 90 |._......|........|
|00000490| 90 90 90 90 cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000004a0| 33 c0 a3 c0 1a 01 00 a3 | c4 1a 01 00 b8 c8 1a 01 |3.......|........|
|000004b0| 00 a3 cc 1a 01 00 a3 c8 | 1a 01 00 b8 01 00 00 00 |........|........|
|000004c0| c3 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000004d0| a1 c8 1a 01 00 3d c8 1a | 01 00 74 37 56 8b 35 94 |.....=..|..t7V.5.|
|000004e0| 02 01 00 8b 08 8b d0 8b | 40 04 85 d2 89 08 89 41 |........|@......A|
|000004f0| 04 74 0d 8d 82 f4 fe ff | ff 85 c0 74 03 50 ff d6 |.t......|...t.P..|
|00000500| a1 c8 1a 01 00 3d c8 1a | 01 00 75 d7 b8 01 00 00 |.....=..|..u.....|
|00000510| 00 5e c3 b8 01 00 00 00 | c3 90 90 90 90 90 90 90 |.^......|........|
|00000520| 8b 44 24 04 83 ec 08 8b | 48 04 53 33 db 57 8b 3d |.D$.....|H.S3.W.=|
|00000530| c8 1a 01 00 85 c9 74 74 | 81 ff c8 1a 01 00 74 6c |......tt|......tl|
|00000540| 56 6a 01 50 8d 44 24 14 | 50 ff 15 a4 02 01 00 8d |Vj.P.D$.|P.......|
|00000550| b7 f4 fe ff ff 85 f6 74 | 25 80 3e 01 75 20 8b 4c |.......t|%.>.u .L|
|00000560| 24 0c 8b 44 24 10 81 e1 | ff ff 00 00 8d 56 08 51 |$..D$...|.....V.Q|
|00000570| 52 50 e8 07 14 00 00 83 | c4 0c 85 c0 74 0c 8b 3f |RP......|....t..?|
|00000580| 81 ff c8 1a 01 00 75 c7 | eb 0c 8b 46 04 bb 01 00 |......u.|...F....|
|00000590| 00 00 40 89 46 04 8d 4c | 24 0c 51 ff 15 98 02 01 |..@.F..L|$.Q.....|
|000005a0| 00 5e 8b c3 5f 5b 83 c4 | 08 c2 08 00 8b c3 5f 5b |.^.._[..|......_[|
|000005b0| 83 c4 08 c2 08 00 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000005c0| 49 6e 73 65 72 74 46 69 | 6c 65 4e 61 6d 65 3a 20 |InsertFi|leName: |
|000005d0| 46 69 6c 65 4c 69 73 74 | 49 74 65 6d 43 6f 75 6e |FileList|ItemCoun|
|000005e0| 74 20 3d 20 25 64 2c 20 | 46 69 6c 65 4c 69 73 74 |t = %d, |FileList|
|000005f0| 4d 65 6d 6f 72 79 53 69 | 7a 65 20 3d 20 25 64 42 |MemorySi|ze = %dB|
|00000600| 79 74 65 00 e8 9c 00 00 | 00 8b 44 24 04 8b 50 04 |yte.....|..D$..P.|
|00000610| 8d 88 0c 01 00 00 42 89 | 50 04 8b 15 cc 1a 01 00 |......B.|P.......|
|00000620| c7 01 c8 1a 01 00 89 90 | 10 01 00 00 89 0a a1 c0 |........|........|
|00000630| 1a 01 00 89 0d cc 1a 01 | 00 8b 0d c4 1a 01 00 81 |........|........|
|00000640| c1 14 01 00 00 40 51 50 | 68 c0 05 01 00 a3 c0 1a |.....@QP|h.......|
|00000650| 01 00 89 0d c4 1a 01 00 | e8 c7 fd ff ff 83 c4 0c |........|........|
|00000660| b8 01 00 00 00 c2 04 00 | 90 90 90 90 90 90 90 90 |........|........|
|00000670| 90 90 90 90 cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000680| 54 72 79 54 6f 43 6c 65 | 61 72 46 69 6c 65 4c 69 |TryToCle|arFileLi|
|00000690| 73 74 3a 20 52 65 6d 6f | 76 65 20 46 69 6c 65 20 |st: Remo|ve File |
|000006a0| 3d 20 25 73 00 a1 c4 1a | 01 00 57 8b 3d c8 1a 01 |= %s....|..W.=...|
|000006b0| 00 3d 00 40 01 00 7c 62 | 81 ff c8 1a 01 00 74 5a |.=.@..|b|......tZ|
|000006c0| 56 8d b7 f4 fe ff ff 85 | f6 74 3d 83 7e 04 0a 7d |V.......|.t=.~..}|
|000006d0| 37 8d 46 08 50 68 80 06 | 01 00 e8 45 fd ff ff 8b |7.F.Ph..|...E....|
|000006e0| 0d c0 1a 01 00 a1 c4 1a | 01 00 83 c4 08 49 2d 14 |........|.....I-.|
|000006f0| 01 00 00 89 0d c0 1a 01 | 00 a3 c4 1a 01 00 c6 06 |........|........|
|00000700| 00 c7 46 04 00 00 00 00 | 8b 3f 81 ff c8 1a 01 00 |..F.....|.?......|
|00000710| 75 af 5e b8 01 00 00 00 | 5f c3 b8 01 00 00 00 5f |u.^.....|_......_|
|00000720| c3 90 90 90 90 cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000730| 47 65 74 4e 6f 55 73 65 | 46 69 6c 65 4c 69 73 74 |GetNoUse|FileList|
|00000740| 49 74 65 6d 3a 20 25 73 | 00 8b 0d c4 1a 01 00 a1 |Item: %s|........|
|00000750| c8 1a 01 00 81 f9 00 40 | 01 00 56 7c 1f 3d c8 1a |.......@|..V|.=..|
|00000760| 01 00 74 18 8d b0 f4 fe | ff ff 85 f6 74 05 80 3e |..t.....|....t..>|
|00000770| 00 74 0d 8b 00 3d c8 1a | 01 00 75 e8 33 c0 5e c3 |.t...=..|..u.3.^.|
|00000780| 8d 46 08 50 68 30 07 01 | 00 e8 96 fc ff ff 83 c4 |.F.Ph0..|........|
|00000790| 08 8b c6 5e c3 90 90 90 | 90 cc cc cc cc cc cc cc |...^....|........|
|000007a0| 41 6c 6c 6f 63 46 69 6c | 65 4c 69 73 74 49 74 65 |AllocFil|eListIte|
|000007b0| 6d 20 2d 20 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |m - ExAl|locatePo|
|000007c0| 6f 6c 20 46 61 69 6c 65 | 64 2c 20 70 54 65 6d 70 |ol Faile|d, pTemp|
|000007d0| 46 69 6c 65 4c 69 73 74 | 49 74 65 6d 20 3d 20 25 |FileList|Item = %|
|000007e0| 78 00 56 e8 61 ff ff ff | 8b f0 85 f6 75 2f 68 44 |x.V.a...|....u/hD|
|000007f0| 64 6b 20 68 14 01 00 00 | 50 ff 15 c8 02 01 00 8b |dk h....|P.......|
|00000800| f0 85 f6 75 12 50 68 a0 | 07 01 00 e8 14 fc ff ff |...u.Ph.|........|
|00000810| 83 c4 08 8b c6 5e c3 56 | e8 e7 fd ff ff c6 06 01 |.....^.V|........|
|00000820| 8b c6 5e c3 90 90 90 90 | 90 90 90 90 90 90 90 90 |..^.....|........|
|00000830| 90 90 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000840| 77 00 61 00 76 00 00 00 | 69 00 6e 00 69 00 00 00 |w.a.v...|i.n.i...|
|00000850| 6c 00 6e 00 6b 00 00 00 | 75 00 72 00 6c 00 00 00 |l.n.k...|u.r.l...|
|00000860| 69 00 6e 00 66 00 00 00 | 83 ec 14 8b 44 24 18 53 |i.n.f...|....D$.S|
|00000870| 55 56 8b 48 04 57 6a 2e | 51 33 f6 c7 44 24 18 40 |UV.H.Wj.|Q3..D$.@|
|00000880| 08 01 00 c7 44 24 1c 48 | 08 01 00 c7 44 24 20 50 |....D$.H|....D$ P|
|00000890| 08 01 00 c7 44 24 24 58 | 08 01 00 c7 44 24 28 60 |....D$$X|....D$(`|
|000008a0| 08 01 00 e8 e8 10 00 00 | 8b e8 83 c4 08 85 ed 74 |........|.......t|
|000008b0| 44 83 c5 02 33 db 8d 7c | 24 10 8b 37 56 e8 c8 10 |D...3..||$..7V...|
|000008c0| 00 00 50 56 55 e8 ba 10 | 00 00 83 c4 10 85 c0 74 |..PVU...|.......t|
|000008d0| 15 43 83 c7 04 83 fb 05 | 7c e0 5f 5e 5d 33 c0 5b |.C......||._^]3.[|
|000008e0| 83 c4 14 c2 04 00 5f 5e | 5d b8 01 00 00 00 5b 83 |......_^|].....[.|
|000008f0| c4 14 c2 04 00 8b c6 5f | 5e 5d 5b 83 c4 14 c2 04 |......._|^][.....|
|00000900| 00 90 90 90 90 90 90 90 | cc cc cc cc cc cc cc cc |........|........|
|00000910| 5c 00 3f 00 3f 00 5c 00 | 00 00 00 00 3a 00 00 00 |\.?.?.\.|....:...|
|00000920| 5c 00 3f 00 3f 00 5c 00 | 55 00 4e 00 43 00 5c 00 |\.?.?.\.|U.N.C.\.|
|00000930| 00 00 00 00 50 00 49 00 | 50 00 45 00 00 00 00 00 |....P.I.|P.E.....|
|00000940| 5c 00 00 00 5c 00 00 00 | 53 56 8b 74 24 0c 57 bb |\...\...|SV.t$.W.|
|00000950| 01 00 00 00 8b 46 04 85 | c0 0f 84 f4 00 00 00 50 |.....F..|.......P|
|00000960| e8 25 10 00 00 83 c4 04 | 3d 04 01 00 00 0f 8f e0 |.%......|=.......|
|00000970| 00 00 00 8b 4e 04 68 40 | 09 01 00 8d 7c 41 fe e8 |....N.h@|....|A..|
|00000980| 06 10 00 00 50 68 40 09 | 01 00 57 e8 0c 10 00 00 |....Ph@.|..W.....|
|00000990| 83 c4 10 85 c0 0f 84 b8 | 00 00 00 56 e8 c7 fe ff |........|...V....|
|000009a0| ff 3b c3 0f 84 aa 00 00 | 00 68 10 09 01 00 e8 d7 |.;......|.h......|
|000009b0| 0f 00 00 8b 56 04 50 68 | 10 09 01 00 52 e8 da 0f |....V.Ph|....R...|
|000009c0| 00 00 83 c4 10 85 c0 0f | 85 86 00 00 00 8b 7e 04 |........|......~.|
|000009d0| 68 1c 09 01 00 83 c7 0a | e8 ad 0f 00 00 50 68 1c |h.......|.....Ph.|
|000009e0| 09 01 00 57 e8 b3 0f 00 | 00 83 c4 10 85 c0 74 61 |...W....|......ta|
|000009f0| 8b 76 04 68 20 09 01 00 | e8 8d 0f 00 00 50 68 20 |.v.h ...|.....Ph |
|00000a00| 09 01 00 56 e8 7b 0f 00 | 00 83 c4 10 85 c0 75 43 |...V.{..|......uC|
|00000a10| 68 20 09 01 00 e8 70 0f | 00 00 8d 04 46 68 44 09 |h ....p.|....FhD.|
|00000a20| 01 00 50 e8 6e 0f 00 00 | 8b f0 83 c4 0c 85 f6 74 |..P.n...|.......t|
|00000a30| 22 68 34 09 01 00 e8 4f | 0f 00 00 50 83 c6 02 68 |"h4....O|...P...h|
|00000a40| 34 09 01 00 56 e8 3a 0f | 00 00 83 c4 10 85 c0 74 |4...V.:.|.......t|
|00000a50| 02 33 db 5f 8b c3 5e 5b | c2 04 00 90 90 90 90 90 |.3._..^[|........|
|00000a60| 90 90 90 90 90 90 90 90 | cc cc cc cc cc cc cc cc |........|........|
|00000a70| 8b 44 24 04 83 f8 01 74 | 0d 83 f8 03 74 08 b8 01 |.D$....t|....t...|
|00000a80| 00 00 00 c2 04 00 33 c0 | c2 04 00 90 90 90 90 90 |......3.|........|
|00000a90| 5c 00 3f 00 3f 00 5c 00 | 55 00 4e 00 43 00 5c 00 |\.?.?.\.|U.N.C.\.|
|00000aa0| 00 00 83 ec 14 a1 90 0a | 01 00 8b 0d 94 0a 01 00 |........|........|
|00000ab0| 8b 15 98 0a 01 00 56 8b | 74 24 1c 89 44 24 04 a1 |......V.|t$..D$..|
|00000ac0| 9c 0a 01 00 57 89 44 24 | 14 8b 46 04 89 4c 24 0c |....W.D$|..F..L$.|
|00000ad0| 66 8b 0d a0 0a 01 00 33 | ff 89 54 24 10 85 c0 66 |f......3|..T$...f|
|00000ae0| 89 4c 24 18 75 0d 5f b8 | 01 00 00 00 5e 83 c4 14 |.L$.u._.|....^...|
|00000af0| c2 04 00 50 e8 91 0e 00 | 00 83 c4 04 83 f8 12 72 |...P....|.......r|
|00000b00| 1c 8b 46 04 8d 54 24 08 | 6a 12 52 50 e8 73 0e 00 |..F..T$.|j.RP.s..|
|00000b10| 00 83 c4 0c 85 c0 b8 01 | 00 00 00 74 02 8b c7 5f |........|...t..._|
|00000b20| 5e 83 c4 14 c2 04 00 90 | 90 90 90 90 90 90 90 90 |^.......|........|
|00000b30| 90 90 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000b40| 44 65 62 75 67 50 72 6f | 63 65 73 73 46 69 6c 65 |DebugPro|cessFile|
|00000b50| 3a 25 73 2c 20 25 73 2c | 20 25 64 00 83 ec 14 33 |:%s, %s,| %d....3|
|00000b60| c0 8d 4c 24 00 89 44 24 | 01 51 89 44 24 09 c6 44 |..L$..D$|.Q.D$..D|
|00000b70| 24 04 00 89 44 24 0d 89 | 44 24 11 66 89 44 24 15 |$...D$..|D$.f.D$.|
|00000b80| 88 44 24 17 e8 87 0c 00 | 00 84 c0 74 2f 8b 4c 24 |.D$.....|...t/.L$|
|00000b90| 18 66 8b 01 66 3d 01 00 | 76 22 66 3d 04 01 73 1c |.f..f=..|v"f=..s.|
|00000ba0| 8b 51 04 25 ff ff 00 00 | 50 8d 44 24 04 52 50 68 |.Q.%....|P.D$.RPh|
|00000bb0| 40 0b 01 00 e8 6b f8 ff | ff 83 c4 10 83 c4 14 c2 |@....k..|........|
|00000bc0| 04 00 90 90 90 90 90 90 | 90 90 90 90 cc cc cc cc |........|........|
|00000bd0| 56 57 68 d0 1a 01 00 e8 | 14 0e 00 00 8b 35 c4 02 |VWh.....|.....5..|
|00000be0| 01 00 8b 15 d0 1a 01 00 | 8b 3d c0 02 01 00 a3 d4 |........|.=......|
|00000bf0| 1a 01 00 8b 4e 01 80 3c | 11 00 75 21 ba 10 0d 01 |....N..<|..u!....|
|00000c00| 00 8d 0c 88 ff d7 8b 0d | d0 1a 01 00 a3 dc 1a 01 |........|........|
|00000c10| 00 8b 46 01 c6 04 01 01 | a1 d4 1a 01 00 8b 35 bc |..F.....|......5.|
|00000c20| 02 01 00 8b 15 d0 1a 01 | 00 8b 4e 01 80 3c 11 00 |........|..N..<..|
|00000c30| 75 1c ba d0 0d 01 00 8d | 0c 88 ff d7 8b 0d d0 1a |u.......|........|
|00000c40| 01 00 a3 e0 1a 01 00 8b | 46 01 c6 04 08 01 5f c6 |........|F....._.|
|00000c50| 05 d8 1a 01 00 01 b8 01 | 00 00 00 5e c3 90 90 90 |........|...^....|
|00000c60| 8b 0d d0 1a 01 00 56 8b | 35 c4 02 01 00 57 8b 3d |......V.|5....W.=|
|00000c70| c0 02 01 00 8b 46 01 80 | 3c 08 00 74 28 8b 15 d4 |.....F..|<..t(...|
|00000c80| 1a 01 00 8d 0c 82 8b 04 | 82 3d 10 0d 01 00 75 15 |........|.=....u.|
|00000c90| 8b 15 dc 1a 01 00 ff d7 | 8b 46 01 8b 0d d0 1a 01 |........|.F......|
|00000ca0| 00 c6 04 01 00 8b 35 bc | 02 01 00 8b 15 d0 1a 01 |......5.|........|
|00000cb0| 00 c7 05 dc 1a 01 00 00 | 00 00 00 8b 46 01 80 3c |........|....F..<|
|00000cc0| 10 00 74 25 8b 0d d4 1a | 01 00 8d 0c 81 81 39 d0 |..t%....|......9.|
|00000cd0| 0d 01 00 75 14 8b 15 e0 | 1a 01 00 ff d7 8b 56 01 |...u....|......V.|
|00000ce0| a1 d0 1a 01 00 c6 04 10 | 00 8b 0d d4 1a 01 00 c7 |........|........|
|00000cf0| 05 e0 1a 01 00 00 00 00 | 00 51 e8 cd 0c 00 00 5f |........|.Q....._|
|00000d00| c6 05 d8 1a 01 00 00 b8 | 01 00 00 00 5e c3 90 90 |........|....^...|
|00000d10| a0 f8 1a 01 00 56 8b 74 | 24 10 57 8b 7c 24 28 84 |.....V.t|$.W.|$(.|
|00000d20| c0 74 5d 57 e8 47 fd ff | ff 83 f8 01 74 52 8b 46 |.t]W.G..|....tR.F|
|00000d30| 08 50 e8 6b fd ff ff 83 | f8 01 74 44 e8 80 0b 00 |.P.k....|..tD....|
|00000d40| 00 83 f8 01 74 3a 8b 4e | 08 51 e8 f9 fb ff ff 83 |....t:.N|.Q......|
|00000d50| f8 01 74 2c 8b 56 08 6a | 00 52 e8 c1 f7 ff ff 83 |..t,.V.j|.R......|
|00000d60| f8 01 74 1c 8b 46 08 50 | e8 8b 07 00 00 85 c0 74 |..t..F.P|.......t|
|00000d70| 0f 83 f8 04 74 0a 5f b8 | 22 00 00 c0 5e c2 2c 00 |....t._.|"...^.,.|
|00000d80| a1 dc 1a 01 00 85 c0 75 | 0a 5f b8 22 00 00 c0 5e |.......u|._."...^|
|00000d90| c2 2c 00 8b 4c 24 34 8b | 54 24 30 51 8b 4c 24 30 |.,..L$4.|T$0Q.L$0|
|00000da0| 52 8b 54 24 2c 51 8b 4c | 24 2c 57 52 8b 54 24 30 |R.T$,Q.L|$,WR.T$0|
|00000db0| 51 8b 4c 24 30 52 8b 54 | 24 2c 51 8b 4c 24 2c 56 |Q.L$0R.T|$,Q.L$,V|
|00000dc0| 52 51 ff d0 5f 5e c2 2c | 00 90 90 90 90 90 90 90 |RQ.._^.,|........|
|00000dd0| a0 f8 1a 01 00 56 8b 74 | 24 10 84 c0 74 51 e8 de |.....V.t|$...tQ..|
|00000de0| 0a 00 00 83 f8 01 74 47 | 8b 46 08 50 e8 b1 fc ff |......tG|.F.P....|
|00000df0| ff 83 f8 01 74 39 8b 4e | 08 51 e8 49 fb ff ff 83 |....t9.N|.Q.I....|
|00000e00| f8 01 74 2b 8b 56 08 6a | 01 52 e8 11 f7 ff ff 83 |..t+.V.j|.R......|
|00000e10| f8 01 74 1b 8b 46 08 50 | e8 db 06 00 00 85 c0 74 |..t..F.P|.......t|
|00000e20| 0e 83 f8 04 74 09 b8 22 | 00 00 c0 5e c2 18 00 a1 |....t.."|...^....|
|00000e30| e0 1a 01 00 85 c0 75 09 | b8 22 00 00 c0 5e c2 18 |......u.|."...^..|
|00000e40| 00 8b 4c 24 1c 8b 54 24 | 18 51 8b 4c 24 18 52 8b |..L$..T$|.Q.L$.R.|
|00000e50| 54 24 14 51 8b 4c 24 14 | 56 52 51 ff d0 5e c2 18 |T$.Q.L$.|VRQ..^..|
|00000e60| 00 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000e70| 5c 00 44 00 65 00 76 00 | 69 00 63 00 65 00 5c 00 |\.D.e.v.|i.c.e.\.|
|00000e80| 4b 00 57 00 61 00 74 00 | 63 00 68 00 32 00 00 00 |K.W.a.t.|c.h.2...|
|00000e90| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|00000ea0| 63 00 65 00 73 00 5c 00 | 4b 00 57 00 61 00 74 00 |c.e.s.\.|K.W.a.t.|
|00000eb0| 63 00 68 00 32 00 00 00 | 44 72 69 76 65 72 45 6e |c.h.2...|DriverEn|
|00000ec0| 74 72 79 20 2d 20 49 6f | 43 72 65 61 74 65 44 65 |try - Io|CreateDe|
|00000ed0| 76 69 63 65 20 46 61 69 | 6c 65 64 2c 20 6e 74 53 |vice Fai|led, ntS|
|00000ee0| 74 61 74 75 73 20 3d 20 | 25 78 00 00 44 72 69 76 |tatus = |%x..Driv|
|00000ef0| 65 72 45 6e 74 72 79 20 | 2d 20 49 6f 43 72 65 61 |erEntry |- IoCrea|
|00000f00| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 20 46 |teSymbol|icLink F|
|00000f10| 61 69 6c 65 64 2c 20 6e | 74 53 74 61 74 75 73 20 |ailed, n|tStatus |
|00000f20| 3d 20 25 78 00 83 ec 5c | b9 08 00 00 00 8d 44 24 |= %x...\|......D$|
|00000f30| 14 53 56 57 be 70 0e 01 | 00 8d 7c 24 20 50 f3 a5 |.SVW.p..|..|$ P..|
|00000f40| b9 0a 00 00 00 be 90 0e | 01 00 8d 7c 24 44 f3 a5 |........|...|$D..|
|00000f50| 8b 3d a0 02 01 00 8d 4c | 24 14 51 ff d7 8d 54 24 |.=.....L|$.Q...T$|
|00000f60| 0c 8d 44 24 10 8b 5c 24 | 6c 52 6a 00 6a 00 68 00 |..D$..\$|lRj.j.h.|
|00000f70| 87 00 00 50 6a 00 53 ff | 15 cc 02 01 00 8b f0 85 |...Pj.S.|........|
|00000f80| f6 74 19 56 68 b8 0e 01 | 00 e8 96 f4 ff ff 83 c4 |.t.Vh...|........|
|00000f90| 08 8b c6 5f 5e 5b 83 c4 | 5c c2 08 00 8b 44 24 0c |..._^[..|\....D$.|
|00000fa0| 8d 4c 24 40 8d 54 24 18 | 51 8b 70 1c 52 83 ce 04 |.L$@.T$.|Q.p.R...|
|00000fb0| 89 70 1c ff d7 8d 44 24 | 10 8d 4c 24 18 50 51 ff |.p....D$|..L$.PQ.|
|00000fc0| 15 08 03 01 00 8b f0 85 | f6 74 24 8b 54 24 0c 52 |........|.t$.T$.R|
|00000fd0| ff 15 0c 03 01 00 56 68 | ec 0e 01 00 e8 43 f4 ff |......Vh|.....C..|
|00000fe0| ff 83 c4 08 8b c6 5f 5e | 5b 83 c4 5c c2 08 00 8d |......_^|[..\....|
|00000ff0| 7b 38 b9 1b 00 00 00 b8 | 30 10 01 00 f3 ab c7 43 |{8......|0......C|
|00001000| 34 08 11 01 00 e8 b5 07 | 00 00 e8 c1 fb ff ff 8b |4.......|........|
|00001010| c6 5f 5e 5b 83 c4 5c c2 | 08 00 90 90 90 90 90 90 |._^[..\.|........|
|00001020| 90 90 90 90 90 cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00001030| 53 56 8b 74 24 10 33 c0 | 57 8b 7e 0c 89 46 18 89 |SV.t$.3.|W.~..F..|
|00001040| 46 1c 8b 46 60 8a 08 8b | 58 04 80 f9 0e 75 4a 8b |F..F`...|X....uJ.|
|00001050| 40 0c 05 00 00 00 79 83 | f8 0c 77 3d 33 c9 8a 88 |@.....y.|..w=3...|
|00001060| c4 10 01 00 ff 24 8d b0 | 10 01 00 e8 9b 01 00 00 |.....$..|........|
|00001070| 89 07 bb 04 00 00 00 eb | 20 e8 fe 02 00 00 89 07 |........| .......|
|00001080| bb 04 00 00 00 eb 12 8b | 17 52 e8 c1 07 00 00 eb |........|.R......|
|00001090| 08 8b 07 50 e8 e7 07 00 | 00 32 d2 8b ce 89 5e 1c |...P....|.2....^.|
|000010a0| ff 15 10 03 01 00 8b 46 | 18 5f 5e 5b c2 08 00 90 |.......F|._^[....|
|000010b0| 6b 10 01 00 79 10 01 00 | 87 10 01 00 91 10 01 00 |k...y...|........|
|000010c0| 99 10 01 00 00 04 04 04 | 01 04 04 04 02 04 04 04 |........|........|
|000010d0| 03 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000010e0| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|000010f0| 63 00 65 00 73 00 5c 00 | 4b 00 57 00 61 00 74 00 |c.e.s.\.|K.W.a.t.|
|00001100| 63 00 68 00 32 00 00 00 | 83 ec 30 b9 0a 00 00 00 |c.h.2...|..0.....|
|00001110| 8d 44 24 08 56 57 be e0 | 10 01 00 8d 7c 24 10 f3 |.D$.VW..|....|$..|
|00001120| a5 8d 4c 24 08 50 51 ff | 15 a0 02 01 00 8d 54 24 |..L$.PQ.|......T$|
|00001130| 08 52 ff 15 d4 02 01 00 | 8b 44 24 3c 8b 48 04 51 |.R......|.D$<.H.Q|
|00001140| ff 15 0c 03 01 00 e8 15 | fb ff ff 5f 5e 83 c4 30 |........|..._^..0|
|00001150| c2 04 00 90 90 90 90 90 | cc cc cc cc cc cc cc cc |........|........|
|00001160| 4b 57 61 74 63 68 49 6e | 69 74 20 2d 20 41 64 64 |KWatchIn|it - Add|
|00001170| 50 72 6f 63 65 73 73 20 | 43 75 72 72 65 6e 74 50 |Process |CurrentP|
|00001180| 72 6f 63 65 73 73 20 46 | 61 69 6c 65 64 2c 20 6e |rocess F|ailed, n|
|00001190| 52 65 74 43 6f 64 65 20 | 3d 20 25 64 00 00 00 00 |RetCode |= %d....|
|000011a0| 4b 57 61 74 63 68 49 6e | 69 74 20 2d 20 41 64 64 |KWatchIn|it - Add|
|000011b0| 50 72 6f 65 73 73 73 20 | 53 79 73 74 65 6d 50 72 |Proesss |SystemPr|
|000011c0| 6f 63 65 73 73 20 46 61 | 69 6c 65 64 2c 20 6e 52 |ocess Fa|iled, nR|
|000011d0| 65 74 43 6f 64 65 20 3d | 20 25 64 00 4b 57 61 74 |etCode =| %d.KWat|
|000011e0| 63 68 49 6e 69 74 20 2d | 20 49 6e 69 46 69 6c 65 |chInit -| IniFile|
|000011f0| 4c 69 73 74 20 46 61 69 | 6c 65 64 2c 20 6e 52 65 |List Fai|led, nRe|
|00001200| 74 43 6f 64 65 20 3d 20 | 25 64 00 a0 f8 1a 01 00 |tCode = |%d......|
|00001210| 56 33 f6 3c 01 0f 84 97 | 00 00 00 68 fc 1a 01 00 |V3.<....|...h....|
|00001220| ff 15 e0 02 01 00 e8 77 | 07 00 00 50 e8 1f 06 00 |.......w|...P....|
|00001230| 00 85 c0 75 12 50 68 60 | 11 01 00 e8 e4 f1 ff ff |...u.Ph`|........|
|00001240| 83 c4 08 8b c6 5e c3 6a | 08 e8 02 06 00 00 85 c0 |.....^.j|........|
|00001250| 75 12 50 68 a0 11 01 00 | e8 c7 f1 ff ff 83 c4 08 |u.Ph....|........|
|00001260| 8b c6 5e c3 e8 37 f2 ff | ff 85 c0 75 12 50 68 dc |..^..7..|...u.Ph.|
|00001270| 11 01 00 e8 ac f1 ff ff | 83 c4 08 8b c6 5e c3 6a |........|.....^.j|
|00001280| 01 6a 01 68 e8 1a 01 00 | ff 15 d8 02 01 00 b9 fc |.j.h....|........|
|00001290| 1a 01 00 be 01 00 00 00 | ff 15 80 02 01 00 8a d0 |........|........|
|000012a0| b9 fc 1a 01 00 c6 05 f8 | 1a 01 00 01 ff 15 84 02 |........|........|
|000012b0| 01 00 8b c6 5e c3 90 90 | 90 90 90 cc cc cc cc cc |....^...|........|
|000012c0| 4b 57 61 74 63 68 55 6e | 49 6e 69 74 20 2d 20 52 |KWatchUn|Init - R|
|000012d0| 65 6d 6f 76 65 50 72 6f | 63 65 73 73 20 43 75 72 |emovePro|cess Cur|
|000012e0| 72 65 6e 74 50 72 6f 63 | 65 73 73 20 46 61 69 6c |rentProc|ess Fail|
|000012f0| 65 64 2c 20 6e 52 65 74 | 43 6f 64 65 20 3d 20 25 |ed, nRet|Code = %|
|00001300| 64 00 00 00 4b 57 61 74 | 63 68 55 6e 49 6e 69 74 |d...KWat|chUnInit|
|00001310| 20 2d 20 52 65 6d 6f 76 | 65 50 72 6f 63 65 73 73 | - Remov|eProcess|
|00001320| 20 53 79 73 74 65 6d 50 | 72 6f 63 65 73 73 20 46 | SystemP|rocess F|
|00001330| 61 69 6c 65 64 2c 20 6e | 52 65 74 43 6f 64 65 20 |ailed, n|RetCode |
|00001340| 3d 20 25 64 00 00 00 00 | 4b 57 61 74 63 79 55 6e |= %d....|KWatcyUn|
|00001350| 49 6e 69 74 20 2d 20 55 | 6e 49 6e 69 74 46 69 6c |Init - U|nInitFil|
|00001360| 65 4c 69 73 74 20 46 61 | 69 6c 65 64 2c 20 6e 52 |eList Fa|iled, nR|
|00001370| 65 74 43 6f 64 65 20 3d | 20 25 64 00 a0 f8 1a 01 |etCode =| %d.....|
|00001380| 00 56 33 f6 84 c0 74 7d | e8 15 06 00 00 50 e8 ed |.V3...t}|.....P..|
|00001390| 04 00 00 85 c0 75 12 50 | 68 c0 12 01 00 e8 82 f0 |.....u.P|h.......|
|000013a0| ff ff 83 c4 08 8b c6 5e | c3 6a 08 e8 d0 04 00 00 |.......^|.j......|
|000013b0| 85 c0 75 12 50 68 04 13 | 01 00 e8 65 f0 ff ff 83 |..u.Ph..|...e....|
|000013c0| c4 08 8b c6 5e c3 e8 05 | f1 ff ff 85 c0 75 12 50 |....^...|.....u.P|
|000013d0| 68 48 13 01 00 e8 4a f0 | ff ff 83 c4 08 8b c6 5e |hH....J.|.......^|
|000013e0| c3 b9 fc 1a 01 00 be 01 | 00 00 00 ff 15 80 02 01 |........|........|
|000013f0| 00 8a d0 b9 fc 1a 01 00 | c6 05 f8 1a 01 00 00 ff |........|........|
|00001400| 15 84 02 01 00 8b c6 5e | c3 90 90 90 cc cc cc cc |.......^|........|
|00001410| 50 72 6f 63 65 73 73 46 | 69 6c 65 20 2d 20 45 6e |ProcessF|ile - En|
|00001420| 74 65 72 20 50 72 6f 63 | 65 73 73 46 69 6c 65 00 |ter Proc|essFile.|
|00001430| 50 72 6f 63 65 73 73 46 | 69 6c 65 20 2d 20 4b 65 |ProcessF|ile - Ke|
|00001440| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00001450| 65 63 74 00 50 72 6f 63 | 65 73 73 46 69 6c 65 20 |ect.Proc|essFile |
|00001460| 2d 20 43 6f 6e 6e 65 63 | 74 20 4c 50 43 20 46 61 |- Connec|t LPC Fa|
|00001470| 69 6c 65 64 2c 20 6e 74 | 53 74 61 74 75 73 20 3d |iled, nt|Status =|
|00001480| 20 25 78 00 50 72 6f 63 | 65 73 73 46 69 6c 65 3a | %x.Proc|essFile:|
|00001490| 20 41 6c 6c 6f 63 46 69 | 6c 65 4c 69 73 74 49 74 | AllocFi|leListIt|
|000014a0| 65 6d 20 2d 20 25 73 00 | 50 72 6f 63 65 73 73 46 |em - %s.|ProcessF|
|000014b0| 69 6c 65 2d 20 52 65 71 | 75 65 73 74 50 6f 72 74 |ile- Req|uestPort|
|000014c0| 20 46 61 69 6c 65 64 2c | 20 6e 74 53 74 61 74 75 | Failed,| ntStatu|
|000014d0| 73 20 3d 20 25 78 00 00 | 50 72 6f 63 65 73 73 46 |s = %x..|ProcessF|
|000014e0| 69 6c 65 20 2d 20 4c 65 | 61 76 65 20 50 72 6f 63 |ile - Le|ave Proc|
|000014f0| 65 73 73 46 69 6c 65 00 | 81 ec 5c 01 00 00 55 68 |essFile.|..\...Uh|
|00001500| 10 14 01 00 c7 44 24 08 | 00 00 00 00 33 ed e8 11 |.....D$.|....3...|
|00001510| ef ff ff a0 f8 1a 01 00 | 83 c4 04 84 c0 0f 84 61 |........|.......a|
|00001520| 01 00 00 68 30 14 01 00 | c7 44 24 14 b0 3c ff ff |...h0...|.D$..<..|
|00001530| c7 44 24 18 ff ff ff ff | e8 e7 ee ff ff 83 c4 04 |.D$.....|........|
|00001540| 8d 44 24 10 50 55 55 55 | 68 e8 1a 01 00 ff 15 ec |.D$.PUUU|h.......|
|00001550| 02 01 00 3d 02 01 00 00 | 0f 84 26 01 00 00 8d 4c |...=....|..&....L|
|00001560| 24 04 51 e8 74 01 00 00 | 85 c0 74 13 50 68 54 14 |$.Q.t...|..t.PhT.|
|00001570| 01 00 e8 ad ee ff ff 83 | c4 08 e9 f6 00 00 00 8b |........|........|
|00001580| 94 24 64 01 00 00 56 57 | 6a 01 8d 44 24 14 52 50 |.$d...VW|j..D$.RP|
|00001590| ff 15 a4 02 01 00 8d 4c | 24 10 51 e8 bc f5 ff ff |.......L|$.Q.....|
|000015a0| b9 52 00 00 00 33 c0 8d | 7c 24 20 8d 54 24 38 f3 |.R...3..||$ .T$8.|
|000015b0| ab 8b 7c 24 14 83 c9 ff | f2 ae f7 d1 2b f9 8b c1 |..|$....|....+...|
|000015c0| 8b f7 8b fa c1 e9 02 f3 | a5 8b c8 8d 44 24 20 83 |........|....D$ .|
|000015d0| e1 03 50 f3 a4 8b 4c 24 | 14 66 c7 44 24 28 00 00 |..P...L$|.f.D$(..|
|000015e0| 41 66 89 4c 24 24 8b 54 | 24 24 83 c2 18 8d 4c 24 |Af.L$$.T|$$....L$|
|000015f0| 24 66 89 54 24 26 8b 54 | 24 10 51 52 e8 a7 03 00 |$f.T$&.T|$.QR....|
|00001600| 00 85 c0 75 4b 8b 44 24 | 38 85 c0 8b e8 75 4f 8b |...uK.D$|8....uO.|
|00001610| 44 24 14 50 68 84 14 01 | 00 e8 06 ee ff ff 83 c4 |D$.Ph...|........|
|00001620| 08 e8 bc f1 ff ff 85 c0 | 74 34 8b 7c 24 14 8d 50 |........|t4.|$..P|
|00001630| 08 83 c9 ff 33 c0 f2 ae | f7 d1 2b f9 8b c1 8b f7 |....3...|..+.....|
|00001640| 8b fa c1 e9 02 f3 a5 8b | c8 83 e1 03 f3 a4 eb 0e |........|........|
|00001650| 50 68 a8 14 01 00 e8 c9 | ed ff ff 83 c4 08 8d 4c |Ph......|.......L|
|00001660| 24 10 51 ff 15 98 02 01 | 00 8d 54 24 0c 52 e8 1d |$.Q.....|..T$.R..|
|00001670| 01 00 00 5f 5e 6a 00 6a | 01 68 e8 1a 01 00 ff 15 |..._^j.j|.h......|
|00001680| e4 02 01 00 68 d8 14 01 | 00 e8 96 ed ff ff 83 c4 |....h...|........|
|00001690| 04 8b c5 5d 81 c4 5c 01 | 00 00 c2 04 00 90 90 90 |...]..\.|........|
|000016a0| 90 90 90 90 90 90 90 90 | cc cc cc cc cc cc cc cc |........|........|
|000016b0| 00 00 00 00 5c 00 57 00 | 69 00 6e 00 64 00 6f 00 |....\.W.|i.n.d.o.|
|000016c0| 77 00 73 00 5c 00 4b 00 | 57 00 61 00 74 00 63 00 |w.s.\.K.|W.a.t.c.|
|000016d0| 68 00 50 00 6f 00 72 00 | 74 00 00 00 81 ec 8c 00 |h.P.o.r.|t.......|
|000016e0| 00 00 a0 b0 16 01 00 57 | 88 44 24 2c b9 18 00 00 |.......W|.D$,....|
|000016f0| 00 33 c0 8d 7c 24 2d f3 | ab 66 ab aa 33 c9 b0 01 |.3..|$-.|.f..3...|
|00001700| 33 d2 89 4c 24 08 88 44 | 24 1c 88 44 24 1d 89 54 |3..L$..D|$..D$..T|
|00001710| 24 04 89 4c 24 0c 8d 44 | 24 20 b9 0c 00 00 00 89 |$..L$..D|$ ......|
|00001720| 54 24 08 68 b4 16 01 00 | 50 c7 44 24 18 64 00 00 |T$.h....|P.D$.d..|
|00001730| 00 89 4c 24 1c c7 44 24 | 20 02 00 00 00 89 54 24 |..L$..D$| .....T$|
|00001740| 14 89 4c 24 0c ff 15 a0 | 02 01 00 8d 4c 24 10 8d |..L$....|....L$..|
|00001750| 54 24 2c 51 8d 44 24 2c | 52 8d 4c 24 0c 50 51 8b |T$,Q.D$,|R.L$.PQ.|
|00001760| 8c 24 a4 00 00 00 8d 54 | 24 24 6a 00 8d 44 24 34 |.$.....T|$$j..D$4|
|00001770| 52 50 51 e8 36 02 00 00 | 5f 81 c4 8c 00 00 00 c2 |RPQ.6...|_.......|
|00001780| 04 00 90 90 90 90 90 90 | 90 90 90 90 cc cc cc cc |........|........|
|00001790| 8b 44 24 04 8b 00 85 c0 | 74 07 50 ff 15 d0 02 01 |.D$.....|t.P.....|
|000017a0| 00 33 c0 c2 04 00 90 90 | 90 90 90 90 90 90 90 90 |.3......|........|
|000017b0| 53 79 73 74 65 6d 00 00 | 53 79 73 74 65 6d 00 53 |System..|System.S|
|000017c0| 56 57 ff 15 f8 02 01 00 | 8b d8 33 f6 bf b0 17 01 |VW......|..3.....|
|000017d0| 00 83 c9 ff 33 c0 f2 ae | f7 d1 49 8d 04 1e 51 50 |....3...|..I...QP|
|000017e0| 68 b8 17 01 00 e8 ca 01 | 00 00 83 c4 0c 85 c0 75 |h.......|.......u|
|000017f0| 06 89 35 50 1b 01 00 46 | 81 fe 00 30 00 00 7c cc |..5P...F|...0..|.|
|00001800| 5f 5e 5b c3 90 90 90 90 | 90 90 90 90 90 90 90 cc |_^[.....|........|
|00001810| a1 50 1b 01 00 85 c0 74 | 29 56 ff 15 f8 02 01 00 |.P.....t|)V......|
|00001820| 8b 0d 50 1b 01 00 8b 74 | 24 08 03 c8 6a 10 51 56 |..P....t|$...j.QV|
|00001830| e8 85 01 00 00 83 c4 0c | c6 46 10 00 b0 01 5e c2 |........|.F....^.|
|00001840| 04 00 32 c0 c2 04 00 90 | 90 90 90 90 90 90 90 90 |..2.....|........|
|00001850| 33 c0 33 d2 b9 00 1b 01 | 00 83 39 00 74 0f 83 c1 |3.3.....|..9.t...|
|00001860| 04 42 81 f9 50 1b 01 00 | 7c ef c2 04 00 8b 44 24 |.B..P...||.....D$|
|00001870| 04 89 04 95 00 1b 01 00 | b8 01 00 00 00 c2 04 00 |........|........|
|00001880| 56 8b 74 24 08 33 c0 33 | d2 b9 00 1b 01 00 39 31 |V.t$.3.3|......91|
|00001890| 74 10 83 c1 04 42 81 f9 | 50 1b 01 00 7c f0 5e c2 |t....B..|P...|.^.|
|000018a0| 04 00 89 04 95 00 1b 01 | 00 b8 01 00 00 00 5e c2 |........|......^.|
|000018b0| 04 00 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000018c0| 00 83 ec 14 53 55 56 57 | 33 ed e8 d3 00 00 00 33 |....SUVW|3......3|
|000018d0| d2 8a 0d c0 18 01 00 89 | 54 24 11 88 4c 24 10 89 |........|T$..L$..|
|000018e0| 54 24 15 b9 00 1b 01 00 | 89 54 24 19 89 54 24 1d |T$......|.T$..T$.|
|000018f0| 66 89 54 24 21 88 54 24 | 23 39 01 74 5f 83 c1 04 |f.T$!.T$|#9.t_...|
|00001900| 81 f9 50 1b 01 00 7c f1 | 8d 44 24 10 50 e8 fe fe |..P...|.|.D$.P...|
|00001910| ff ff 84 c0 74 3c 8d 4c | 24 10 51 e8 a6 00 00 00 |....t<.L|$.Q.....|
|00001920| 8b d8 a1 80 1a 01 00 83 | c4 04 33 f6 85 c0 7e 22 |........|..3...~"|
|00001930| bf 84 1a 01 00 8b 17 52 | 53 e8 82 00 00 00 83 c4 |.......R|S.......|
|00001940| 08 85 c0 75 17 a1 80 1a | 01 00 46 83 c7 04 3b f0 |...u....|..F...;.|
|00001950| 7c e3 5f 8b c5 5e 5d 5b | 83 c4 14 c3 5f 5e 5d b8 ||._..^][|...._^].|
|00001960| 01 00 00 00 5b 83 c4 14 | c3 90 90 90 90 90 90 90 |....[...|........|
|00001970| 90 cc ff 25 8c 02 01 00 | ff 25 90 02 01 00 ff 25 |...%....|.%.....%|
|00001980| 9c 02 01 00 ff 25 a8 02 | 01 00 ff 25 ac 02 01 00 |.....%..|...%....|
|00001990| ff 25 b0 02 01 00 ff 25 | b4 02 01 00 ff 25 b8 02 |.%.....%|.....%..|
|000019a0| 01 00 ff 25 dc 02 01 00 | ff 25 e8 02 01 00 ff 25 |...%....|.%.....%|
|000019b0| f0 02 01 00 ff 25 f4 02 | 01 00 ff 25 fc 02 01 00 |.....%..|...%....|
|000019c0| ff 25 00 03 01 00 ff 25 | 04 03 01 00 a1 54 1b 01 |.%.....%|.....T..|
|000019d0| 00 85 c0 74 17 50 ff 74 | 24 08 ff 15 14 03 01 00 |...t.P.t|$.......|
|000019e0| ff 35 54 1b 01 00 ff 15 | 94 02 01 00 c2 04 00 cc |.5T.....|........|
|000019f0| a1 24 03 01 00 57 68 44 | 64 6b 20 ff 70 08 6a 00 |.$...WhD|dk .p.j.|
|00001a00| ff 15 c8 02 01 00 8b f8 | 8b 44 24 08 85 ff 89 38 |........|.D$....8|
|00001a10| 74 37 a1 24 03 01 00 8b | 48 08 33 c0 8b d1 c1 e9 |t7.$....|H.3.....|
|00001a20| 02 f3 ab 8b ca 83 e1 03 | f3 aa a1 24 03 01 00 8b |........|...$....|
|00001a30| 48 08 c1 e1 02 51 ff 30 | 6a 00 ff 15 20 03 01 00 |H....Q.0|j... ...|
|00001a40| 85 c0 a3 54 1b 01 00 75 | 04 33 c0 eb 15 50 ff 15 |...T...u|.3...P..|
|00001a50| 1c 03 01 00 6a 00 ff 35 | 54 1b 01 00 ff 15 18 03 |....j..5|T.......|
|00001a60| 01 00 5f c2 04 00 00 00 | 00 00 00 00 00 00 00 00 |.._.....|........|
|00001a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001a80| 09 00 00 00 f8 03 01 00 | ec 03 01 00 d8 03 01 00 |........|........|
|00001a90| cc 03 01 00 c0 03 01 00 | b0 03 01 00 a4 03 01 00 |........|........|
|00001aa0| 94 03 01 00 84 03 01 00 | 73 6c 61 6e 72 65 74 6e |........|slanretn|
|00001ab0| 69 73 79 73 00 00 00 00 | 00 00 00 00 00 00 00 00 |isys....|........|
|00001ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b80| c8 1b 00 00 00 00 00 00 | 00 00 00 00 ae 1e 00 00 |........|........|
|00001b90| 8c 02 00 00 bc 1b 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ba0| e4 1e 00 00 80 02 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 d0 1e 00 00 |........|........|
|00001bc0| bc 1e 00 00 00 00 00 00 | a2 1c 00 00 ae 1c 00 00 |........|........|
|00001bd0| bc 1c 00 00 ca 1c 00 00 | de 1c 00 00 8a 1c 00 00 |........|........|
|00001be0| ea 1c 00 00 0a 1d 00 00 | 16 1d 00 00 20 1d 00 00 |........|.... ...|
|00001bf0| 2a 1d 00 00 34 1d 00 00 | 3e 1d 00 00 4c 1d 00 00 |*...4...|>...L...|
|00001c00| 62 1d 00 00 72 1c 00 00 | 9c 1d 00 00 68 1c 00 00 |b...r...|....h...|
|00001c10| c4 1d 00 00 dc 1d 00 00 | f0 1d 00 00 08 1e 00 00 |........|........|
|00001c20| 20 1e 00 00 2e 1e 00 00 | 48 1e 00 00 60 1e 00 00 | .......|H...`...|
|00001c30| 70 1e 00 00 7a 1e 00 00 | 90 1e 00 00 9a 1e 00 00 |p...z...|........|
|00001c40| a4 1e 00 00 84 1d 00 00 | 72 1d 00 00 ae 1d 00 00 |........|r.......|
|00001c50| ec 1e 00 00 02 1f 00 00 | 16 1f 00 00 32 1f 00 00 |........|....2...|
|00001c60| 40 1f 00 00 00 00 00 00 | 10 04 5a 77 43 6c 6f 73 |@.......|..ZwClos|
|00001c70| 65 00 3a 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |e.:.ExAl|locatePo|
|00001c80| 6f 6c 57 69 74 68 54 61 | 67 00 64 03 52 74 6c 49 |olWithTa|g.d.RtlI|
|00001c90| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00001ca0| 00 00 2d 00 44 62 67 50 | 72 69 6e 74 00 00 81 04 |..-.DbgP|rint....|
|00001cb0| 5f 76 73 6e 70 72 69 6e | 74 66 00 00 47 00 45 78 |_vsnprin|tf..G.Ex|
|00001cc0| 46 72 65 65 50 6f 6f 6c | 00 00 4c 03 52 74 6c 46 |FreePool|..L.RtlF|
|00001cd0| 72 65 65 41 6e 73 69 53 | 74 72 69 6e 67 00 7c 04 |reeAnsiS|tring.|.|
|00001ce0| 5f 73 74 72 6e 69 63 6d | 70 00 b5 03 52 74 6c 55 |_strnicm|p...RtlU|
|00001cf0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|00001d00| 73 69 53 74 72 69 6e 67 | 00 00 84 04 5f 77 63 73 |siString|...._wcs|
|00001d10| 6e 69 63 6d 70 00 b0 04 | 77 63 73 6c 65 6e 00 00 |nicmp...|wcslen..|
|00001d20| b4 04 77 63 73 72 63 68 | 72 00 b6 04 77 63 73 73 |..wcsrch|r...wcss|
|00001d30| 74 72 00 00 b2 04 77 63 | 73 6e 63 6d 70 00 30 04 |tr....wc|sncmp.0.|
|00001d40| 5a 77 4f 70 65 6e 46 69 | 6c 65 00 00 f8 00 49 6e |ZwOpenFi|le....In|
|00001d50| 74 65 72 6c 6f 63 6b 65 | 64 45 78 63 68 61 6e 67 |terlocke|dExchang|
|00001d60| 65 00 15 04 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |e...ZwCr|eateFile|
|00001d70| 00 00 25 01 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |..%.IoDe|leteDevi|
|00001d80| 63 65 00 00 21 01 49 6f | 43 72 65 61 74 65 53 79 |ce..!.Io|CreateSy|
|00001d90| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 1b 01 49 6f |mbolicLi|nk....Io|
|00001da0| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 95 01 |CreateDe|vice....|
|00001db0| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00001dc0| 73 74 00 00 27 01 49 6f | 44 65 6c 65 74 65 53 79 |st..'.Io|DeleteSy|
|00001dd0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 c2 01 4b 65 |mbolicLi|nk....Ke|
|00001de0| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00001df0| d4 02 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..PsGetC|urrentPr|
|00001e00| 6f 63 65 73 73 49 64 00 | c8 01 4b 65 49 6e 69 74 |ocessId.|..KeInit|
|00001e10| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00001e20| f9 01 4b 65 53 65 74 45 | 76 65 6e 74 00 00 4e 04 |..KeSetE|vent..N.|
|00001e30| 5a 77 52 65 71 75 65 73 | 74 57 61 69 74 52 65 70 |ZwReques|tWaitRep|
|00001e40| 6c 79 50 6f 72 74 00 00 | 12 02 4b 65 57 61 69 74 |lyPort..|..KeWait|
|00001e50| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00001e60| 12 04 5a 77 43 6f 6e 6e | 65 63 74 50 6f 72 74 00 |..ZwConn|ectPort.|
|00001e70| a0 04 73 74 72 6e 63 6d | 70 00 3a 01 49 6f 47 65 |..strncm|p.:.IoGe|
|00001e80| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 00 |tCurrent|Process.|
|00001e90| a1 04 73 74 72 6e 63 70 | 79 00 a4 04 73 74 72 73 |..strncp|y...strs|
|00001ea0| 74 72 00 00 7b 04 5f 73 | 74 72 6c 77 72 00 6e 74 |tr..{._s|trlwr.nt|
|00001eb0| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 52 00 4b 66 |oskrnl.e|xe..R.Kf|
|00001ec0| 52 65 6c 65 61 73 65 53 | 70 69 6e 4c 6f 63 6b 00 |ReleaseS|pinLock.|
|00001ed0| 4f 00 4b 66 41 63 71 75 | 69 72 65 53 70 69 6e 4c |O.KfAcqu|ireSpinL|
|00001ee0| 6f 63 6b 00 48 41 4c 2e | 64 6c 6c 00 67 02 4d 6d |ock.HAL.|dll.g.Mm|
|00001ef0| 55 6e 6d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |UnmapLoc|kedPages|
|00001f00| 00 00 4e 02 4d 6d 4d 61 | 70 4c 6f 63 6b 65 64 50 |..N.MmMa|pLockedP|
|00001f10| 61 67 65 73 00 00 34 02 | 4d 6d 42 75 69 6c 64 4d |ages..4.|MmBuildM|
|00001f20| 64 6c 46 6f 72 4e 6f 6e | 50 61 67 65 64 50 6f 6f |dlForNon|PagedPoo|
|00001f30| 6c 00 36 02 4d 6d 43 72 | 65 61 74 65 4d 64 6c 00 |l.6.MmCr|eateMdl.|
|00001f40| f5 01 4b 65 53 65 72 76 | 69 63 65 44 65 73 63 72 |..KeServ|iceDescr|
|00001f50| 69 70 74 6f 72 54 61 62 | 6c 65 00 00 00 00 00 00 |iptorTab|le......|
|00001f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f80| 00 00 00 00 e4 00 00 00 | 25 34 34 34 75 34 a3 34 |........|%444u4.4|
|00001f90| a8 34 ad 34 b2 34 b7 34 | d1 34 d6 34 df 34 01 35 |.4.4.4.4|.4.4.4.5|
|00001fa0| 06 35 30 35 3a 35 4b 35 | 82 35 9d 35 1c 36 22 36 |.505:5K5|.5.5.6"6|
|00001fb0| 2f 36 35 36 3b 36 49 36 | 4e 36 54 36 a6 36 ad 36 |/656;6I6|N6T6.6.6|
|00001fc0| ba 36 d6 36 e1 36 e6 36 | f5 36 fa 36 0c 37 4b 37 |.6.6.6.6|.6.6.7K7|
|00001fd0| 50 37 5e 37 76 37 85 37 | fb 37 07 38 7f 38 87 38 |P7^7v7.7|.7.8.8.8|
|00001fe0| 8f 38 97 38 9f 38 77 39 | 86 39 aa 39 b8 39 d1 39 |.8.8.8w9|.9.9.9.9|
|00001ff0| df 39 f4 39 ff 39 11 3a | 1e 3a 32 3a 40 3a a6 3a |.9.9.9.:|.:2:@:.:|
|00002000| ac 3a b2 3a c0 3a d3 3a | b0 3b d3 3b de 3b e4 3b |.:.:.:.:|.;.;.;.;|
|00002010| ea 3b ef 3b fd 3b 08 3c | 0d 3c 19 3c 1f 3c 25 3c |.;.;.;.<|.<.<.<%<|
|00002020| 33 3c 3e 3c 43 3c 51 3c | 62 3c 69 3c 70 3c 7f 3c |3<><C<Q<|b<i<p<.<|
|00002030| 8a 3c 92 3c 9d 3c a7 3c | ad 3c b3 3c c6 3c cf 3c |.<.<.<.<|.<.<.<.<|
|00002040| d7 3c e1 3c eb 3c f1 3c | 02 3d 11 3d 81 3d d1 3d |.<.<.<.<|.=.=.=.=|
|00002050| 30 3e 35 3f 46 3f 52 3f | 79 3f 85 3f c1 3f d2 3f |0>5?F?R?|y?.?.?.?|
|00002060| d8 3f f8 3f 00 10 00 00 | e0 00 00 00 01 30 60 30 |.?.?....|.....0`0|
|00002070| 67 30 a2 30 b0 30 b4 30 | b8 30 bc 30 c0 30 17 31 |g0.0.0.0|.0.0.0.1|
|00002080| 29 31 34 31 42 31 0c 32 | 1c 32 22 32 37 32 54 32 |)141B1.2|.2"272T2|
|00002090| 6f 32 84 32 8a 32 8f 32 | 9a 32 a1 32 a7 32 ae 32 |o2.2.2.2|.2.2.2.2|
|000020a0| 7d 33 99 33 b6 33 d1 33 | e2 33 ed 33 f4 33 fa 33 |}3.3.3.3|.3.3.3.3|
|000020b0| 01 34 00 35 14 35 24 35 | 49 35 4f 35 6e 35 92 35 |.4.5.5$5|I5O5n5.5|
|000020c0| 15 36 52 36 65 36 7a 36 | 80 36 85 36 e3 36 24 37 |.6R6e6z6|.6.6.6$7|
|000020d0| 47 37 9d 37 c4 37 cd 37 | e1 37 f3 37 11 38 1c 38 |G7.7.7.7|.7.7.8.8|
|000020e0| 22 38 55 38 64 38 74 38 | 8a 38 98 38 a5 38 d3 38 |"8U8d8t8|.8.8.8.8|
|000020f0| e4 38 02 39 23 39 31 39 | 46 39 74 39 7a 39 80 39 |.8.9#919|F9t9z9.9|
|00002100| 86 39 8c 39 92 39 98 39 | 9e 39 a4 39 aa 39 b0 39 |.9.9.9.9|.9.9.9.9|
|00002110| b6 39 bc 39 c2 39 c8 39 | cd 39 dc 39 e2 39 e8 39 |.9.9.9.9|.9.9.9.9|
|00002120| f1 39 02 3a 13 3a 2b 3a | 3c 3a 43 3a 50 3a 58 3a |.9.:.:+:|<:C:P:X:|
|00002130| 5e 3a 84 3a 88 3a 8c 3a | 90 3a 94 3a 98 3a 9c 3a |^:.:.:.:|.:.:.:.:|
|00002140| a0 3a a4 3a 00 00 00 00 | 00 00 00 00 00 00 00 00 |.:.:....|........|
|00002150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000021f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002200| 01 00 00 00 10 01 00 00 | 00 00 00 00 2e 2e 2f 4b |........|....../K|
|00002210| 41 56 35 2f 42 69 6e 2f | 4b 57 61 74 63 68 32 2e |AV5/Bin/|KWatch2.|
|00002220| 73 79 73 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |sys.....|........|
|00002230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002310| 24 04 00 00 65 00 00 00 | 40 00 00 00 01 00 00 01 |$...e...|@.......|
|00002320| a0 04 00 00 21 00 00 00 | 00 00 00 00 00 00 00 00 |....!...|........|
|00002330| d0 04 00 00 49 00 00 00 | 00 00 00 00 00 00 00 01 |....I...|........|
|00002340| 20 05 00 00 96 00 00 00 | 02 00 00 00 02 00 00 03 | .......|........|
|00002350| 04 06 00 00 64 00 00 00 | 00 00 00 00 01 00 00 00 |....d...|........|
|00002360| a5 06 00 00 7c 00 00 00 | 00 00 00 00 00 00 00 02 |....|...|........|
|00002370| 49 07 00 00 4c 00 00 00 | 00 00 00 00 00 00 00 01 |I...L...|........|
|00002380| e2 07 00 00 42 00 00 00 | 00 00 00 00 00 00 00 01 |....B...|........|
|00002390| 68 08 00 00 99 00 00 00 | 05 00 00 00 01 00 00 14 |h.......|........|
|000023a0| 48 09 00 00 13 01 00 00 | 00 00 00 00 01 00 00 03 |H.......|........|
|000023b0| 70 0a 00 00 1b 00 00 00 | 00 00 00 00 01 00 00 00 |p.......|........|
|000023c0| a2 0a 00 00 85 00 00 00 | 05 00 00 00 01 00 00 02 |........|........|
|000023d0| 5c 0b 00 00 66 00 00 00 | 05 00 00 00 01 00 00 00 |\...f...|........|
|000023e0| d0 0b 00 00 8d 00 00 00 | 00 00 00 00 00 00 00 02 |........|........|
|000023f0| 60 0c 00 00 ae 00 00 00 | 00 00 00 00 00 00 00 02 |`.......|........|
|00002400| 10 0d 00 00 b9 00 00 00 | 00 00 00 00 0b 00 00 02 |........|........|
|00002410| d0 0d 00 00 91 00 00 00 | 00 00 00 00 06 00 00 01 |........|........|
|00002420| 25 0f 00 00 f5 00 00 00 | 17 00 00 00 02 00 00 03 |%.......|........|
|00002430| 30 10 00 00 a1 00 00 00 | 00 00 00 00 02 00 00 03 |0.......|........|
|00002440| 08 11 00 00 4b 00 00 00 | 0c 00 00 00 01 00 00 02 |....K...|........|
|00002450| 0b 12 00 00 ab 00 00 00 | 00 00 00 00 00 00 00 01 |........|........|
|00002460| 7c 13 00 00 8d 00 00 00 | 00 00 00 00 00 00 00 01 ||.......|........|
|00002470| f8 14 00 00 a5 01 00 00 | 57 00 00 00 01 00 00 13 |........|W.......|
|00002480| dc 16 00 00 a6 00 00 00 | 23 00 00 00 01 00 00 01 |........|#.......|
|00002490| 90 17 00 00 16 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|000024a0| bf 17 00 00 45 00 00 00 | 00 00 00 00 00 00 00 03 |....E...|........|
|000024b0| 10 18 00 00 37 00 00 00 | 00 00 00 00 01 00 00 01 |....7...|........|
|000024c0| 50 18 00 00 30 00 00 00 | 00 00 00 00 01 00 00 00 |P...0...|........|
|000024d0| 80 18 00 00 32 00 00 00 | 00 00 00 00 01 00 00 01 |....2...|........|
|000024e0| c1 18 00 00 a8 00 00 00 | 05 00 00 00 00 00 00 14 |........|........|
|000024f0| cc 19 00 00 23 00 00 00 | 00 00 00 00 01 00 00 00 |....#...|........|
|00002500| f0 19 00 00 76 00 00 00 | 00 00 00 00 01 00 00 01 |....v...|........|
|00002510| 4e 42 31 31 b8 3c 00 00 | 00 00 00 00 04 00 43 56 |NB11.<..|......CV|
|00002520| 01 00 00 00 04 01 00 00 | 8c 00 00 00 01 00 00 00 |........|........|
|00002530| 30 15 00 00 c2 01 00 00 | 02 00 00 00 00 00 00 00 |0.......|........|
|00002540| 28 00 00 00 02 00 00 00 | 80 00 00 00 54 00 00 00 |(.......|....T...|
|00002550| 1d 2e 5c 6f 62 6a 63 68 | 6b 5c 69 33 38 36 5c 50 |..\objch|k\i386\P|
|00002560| 72 6f 63 65 73 73 46 75 | 6e 63 2e 6f 62 6a 00 00 |rocessFu|nc.obj..|
|00002570| 00 00 00 00 01 00 43 56 | 01 00 00 00 30 14 00 00 |......CV|....0...|
|00002580| 00 01 00 00 19 2e 5c 6f | 62 6a 63 68 6b 5c 69 33 |......\o|bjchk\i3|
|00002590| 38 36 5c 4c 50 43 46 75 | 6e 63 2e 6f 62 6a 00 00 |86\LPCFu|nc.obj..|
|000025a0| 00 00 00 00 02 00 43 56 | 01 00 00 00 e0 0e 00 00 |......CV|........|
|000025b0| 50 05 00 00 02 00 00 00 | 68 00 00 00 18 00 00 00 |P.......|h.......|
|000025c0| 1c 2e 5c 6f 62 6a 63 68 | 6b 5c 69 33 38 36 5c 4b |..\objch|k\i386\K|
|000025d0| 57 61 74 63 68 46 75 6e | 63 2e 6f 62 6a 00 00 00 |WatchFun|c.obj...|
|000025e0| 00 00 00 00 01 00 43 56 | 01 00 00 00 f0 0b 00 00 |......CV|........|
|000025f0| f0 02 00 00 18 2e 5c 6f | 62 6a 63 68 6b 5c 69 33 |......\o|bjchk\i3|
|00002600| 38 36 5c 4b 57 61 74 63 | 68 2e 6f 62 6a 00 00 00 |86\KWatc|h.obj...|
|00002610| 00 00 00 00 02 00 43 56 | 01 00 00 00 50 09 00 00 |......CV|....P...|
|00002620| a0 02 00 00 02 00 00 00 | 50 00 00 00 18 00 00 00 |........|P.......|
|00002630| 19 2e 5c 6f 62 6a 63 68 | 6b 5c 69 33 38 36 5c 48 |..\objch|k\i386\H|
|00002640| 6f 6f 6b 53 79 73 2e 6f | 62 6a 00 00 00 00 00 00 |ookSys.o|bj......|
|00002650| 01 00 43 56 01 00 00 00 | c0 08 00 00 90 00 00 00 |..CV....|........|
|00002660| 18 2e 5c 6f 62 6a 63 68 | 6b 5c 69 33 38 36 5c 47 |..\objch|k\i386\G|
|00002670| 6c 6f 62 61 6c 2e 6f 62 | 6a 00 00 00 00 00 00 00 |lobal.ob|j.......|
|00002680| 01 00 43 56 01 00 00 00 | c0 05 00 00 00 03 00 00 |..CV....|........|
|00002690| 1e 2e 5c 6f 62 6a 63 68 | 6b 5c 69 33 38 36 5c 46 |..\objch|k\i386\F|
|000026a0| 69 6c 65 4e 61 6d 65 46 | 75 6e 63 2e 6f 62 6a 00 |ileNameF|unc.obj.|
|000026b0| 00 00 00 00 02 00 43 56 | 01 00 00 00 20 02 00 00 |......CV|.... ...|
|000026c0| a0 03 00 00 02 00 00 00 | 40 00 00 00 10 00 00 00 |........|@.......|
|000026d0| 1e 2e 5c 6f 62 6a 63 68 | 6b 5c 69 33 38 36 5c 46 |..\objch|k\i386\F|
|000026e0| 69 6c 65 4c 69 73 74 46 | 75 6e 63 2e 6f 62 6a 00 |ileListF|unc.obj.|
|000026f0| 00 00 00 00 02 00 43 56 | 01 00 00 00 90 01 00 00 |......CV|........|
|00002700| 90 00 00 00 02 00 00 00 | 38 00 00 00 08 00 00 00 |........|8.......|
|00002710| 1b 2e 5c 6f 62 6a 63 68 | 6b 5c 69 33 38 36 5c 44 |..\objch|k\i386\D|
|00002720| 65 62 75 67 46 75 6e 63 | 2e 6f 62 6a 00 00 01 00 |ebugFunc|.obj....|
|00002730| 03 00 43 56 01 00 00 00 | a4 00 00 00 04 00 00 00 |..CV....|........|
|00002740| 03 00 00 00 e0 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00002750| c0 03 00 00 1c 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002760| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 03 00 43 56 |l.exe...|......CV|
|00002770| 01 00 00 00 a0 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00002780| dc 00 00 00 04 00 00 00 | 03 00 00 00 b2 03 00 00 |........|........|
|00002790| 0e 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000027a0| 65 00 00 00 00 00 01 00 | 03 00 43 56 01 00 00 00 |e.......|..CV....|
|000027b0| 9c 00 00 00 04 00 00 00 | 03 00 00 00 d8 00 00 00 |........|........|
|000027c0| 04 00 00 00 03 00 00 00 | 96 03 00 00 1c 00 00 00 |........|........|
|000027d0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|000027e0| 00 00 01 00 03 00 43 56 | 01 00 00 00 98 00 00 00 |......CV|........|
|000027f0| 04 00 00 00 03 00 00 00 | d4 00 00 00 04 00 00 00 |........|........|
|00002800| 03 00 00 00 82 03 00 00 | 14 00 00 00 0c 6e 74 6f |........|.....nto|
|00002810| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00002820| 03 00 43 56 01 00 00 00 | 94 00 00 00 04 00 00 00 |..CV....|........|
|00002830| 03 00 00 00 d0 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00002840| 6c 03 00 00 16 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |l.......|.ntoskrn|
|00002850| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 02 00 43 56 |l.exe...|......CV|
|00002860| 01 00 00 00 a8 00 00 00 | 08 00 00 00 03 00 00 00 |........|........|
|00002870| e4 00 00 00 04 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002880| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 01 00 43 56 |l.exe...|......CV|
|00002890| 03 00 00 00 28 00 00 00 | 14 00 00 00 0c 6e 74 6f |....(...|.....nto|
|000028a0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|000028b0| 02 00 43 56 03 00 00 00 | 00 00 00 00 14 00 00 00 |..CV....|........|
|000028c0| 03 00 00 00 2e 03 00 00 | 0e 00 00 00 0c 6e 74 6f |........|.....nto|
|000028d0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|000028e0| 04 00 43 56 01 00 00 00 | 84 00 00 00 04 00 00 00 |..CV....|........|
|000028f0| 01 00 00 00 46 17 00 00 | 06 00 00 00 03 00 00 00 |....F...|........|
|00002900| c0 00 00 00 04 00 00 00 | 03 00 00 00 24 03 00 00 |........|....$...|
|00002910| 0a 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00002920| 65 00 00 00 00 00 01 00 | 04 00 43 56 01 00 00 00 |e.......|..CV....|
|00002930| 80 00 00 00 04 00 00 00 | 01 00 00 00 40 17 00 00 |........|....@...|
|00002940| 06 00 00 00 03 00 00 00 | bc 00 00 00 04 00 00 00 |........|........|
|00002950| 03 00 00 00 1a 03 00 00 | 0a 00 00 00 0c 6e 74 6f |........|.....nto|
|00002960| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00002970| 04 00 43 56 01 00 00 00 | 7c 00 00 00 04 00 00 00 |..CV....||.......|
|00002980| 01 00 00 00 3a 17 00 00 | 06 00 00 00 03 00 00 00 |....:...|........|
|00002990| b8 00 00 00 04 00 00 00 | 03 00 00 00 10 03 00 00 |........|........|
|000029a0| 0a 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000029b0| 65 00 00 00 00 00 01 00 | 03 00 43 56 01 00 00 00 |e.......|..CV....|
|000029c0| 78 00 00 00 04 00 00 00 | 03 00 00 00 b4 00 00 00 |x.......|........|
|000029d0| 04 00 00 00 03 00 00 00 | fa 02 00 00 16 00 00 00 |........|........|
|000029e0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|000029f0| 00 00 01 00 04 00 43 56 | 01 00 00 00 74 00 00 00 |......CV|....t...|
|00002a00| 04 00 00 00 01 00 00 00 | 34 17 00 00 06 00 00 00 |........|4.......|
|00002a10| 03 00 00 00 b0 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00002a20| f0 02 00 00 0a 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002a30| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 04 00 43 56 |l.exe...|......CV|
|00002a40| 01 00 00 00 70 00 00 00 | 04 00 00 00 01 00 00 00 |....p...|........|
|00002a50| 2e 17 00 00 06 00 00 00 | 03 00 00 00 ac 00 00 00 |........|........|
|00002a60| 04 00 00 00 03 00 00 00 | e0 02 00 00 10 00 00 00 |........|........|
|00002a70| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00002a80| 00 00 01 00 03 00 43 56 | 01 00 00 00 6c 00 00 00 |......CV|....l...|
|00002a90| 04 00 00 00 03 00 00 00 | a8 00 00 00 04 00 00 00 |........|........|
|00002aa0| 03 00 00 00 c8 02 00 00 | 18 00 00 00 0c 6e 74 6f |........|.....nto|
|00002ab0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00002ac0| 04 00 43 56 01 00 00 00 | 68 00 00 00 04 00 00 00 |..CV....|h.......|
|00002ad0| 01 00 00 00 28 17 00 00 | 06 00 00 00 03 00 00 00 |....(...|........|
|00002ae0| a4 00 00 00 04 00 00 00 | 03 00 00 00 ae 02 00 00 |........|........|
|00002af0| 1a 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00002b00| 65 00 00 00 00 00 01 00 | 03 00 43 56 01 00 00 00 |e.......|..CV....|
|00002b10| 64 00 00 00 04 00 00 00 | 03 00 00 00 a0 00 00 00 |d.......|........|
|00002b20| 04 00 00 00 03 00 00 00 | a0 02 00 00 0e 00 00 00 |........|........|
|00002b30| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00002b40| 00 00 01 00 03 00 43 56 | 01 00 00 00 60 00 00 00 |......CV|....`...|
|00002b50| 04 00 00 00 03 00 00 00 | 9c 00 00 00 04 00 00 00 |........|........|
|00002b60| 03 00 00 00 88 02 00 00 | 18 00 00 00 0c 6e 74 6f |........|.....nto|
|00002b70| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00002b80| 04 00 43 56 01 00 00 00 | 5c 00 00 00 04 00 00 00 |..CV....|\.......|
|00002b90| 01 00 00 00 22 17 00 00 | 06 00 00 00 03 00 00 00 |...."...|........|
|00002ba0| 98 00 00 00 04 00 00 00 | 03 00 00 00 70 02 00 00 |........|....p...|
|00002bb0| 18 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00002bc0| 65 00 00 00 00 00 01 00 | 03 00 43 56 01 00 00 00 |e.......|..CV....|
|00002bd0| 58 00 00 00 04 00 00 00 | 03 00 00 00 94 00 00 00 |X.......|........|
|00002be0| 04 00 00 00 03 00 00 00 | 5c 02 00 00 14 00 00 00 |........|\.......|
|00002bf0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00002c00| 00 00 01 00 03 00 43 56 | 01 00 00 00 54 00 00 00 |......CV|....T...|
|00002c10| 04 00 00 00 03 00 00 00 | 90 00 00 00 04 00 00 00 |........|........|
|00002c20| 03 00 00 00 44 02 00 00 | 18 00 00 00 0c 6e 74 6f |....D...|.....nto|
|00002c30| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00002c40| 03 00 43 56 01 00 00 00 | 90 00 00 00 04 00 00 00 |..CV....|........|
|00002c50| 03 00 00 00 cc 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00002c60| 2e 02 00 00 16 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002c70| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 03 00 43 56 |l.exe...|......CV|
|00002c80| 01 00 00 00 4c 00 00 00 | 04 00 00 00 03 00 00 00 |....L...|........|
|00002c90| 88 00 00 00 04 00 00 00 | 03 00 00 00 1c 02 00 00 |........|........|
|00002ca0| 12 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00002cb0| 65 00 00 00 00 00 01 00 | 03 00 43 56 01 00 00 00 |e.......|..CV....|
|00002cc0| 88 00 00 00 04 00 00 00 | 03 00 00 00 c4 00 00 00 |........|........|
|00002cd0| 04 00 00 00 03 00 00 00 | 04 02 00 00 18 00 00 00 |........|........|
|00002ce0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00002cf0| 00 00 01 00 03 00 43 56 | 01 00 00 00 8c 00 00 00 |......CV|........|
|00002d00| 04 00 00 00 03 00 00 00 | c8 00 00 00 04 00 00 00 |........|........|
|00002d10| 03 00 00 00 f2 01 00 00 | 12 00 00 00 0c 6e 74 6f |........|.....nto|
|00002d20| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00002d30| 03 00 43 56 01 00 00 00 | 44 00 00 00 04 00 00 00 |..CV....|D.......|
|00002d40| 03 00 00 00 80 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00002d50| e2 01 00 00 10 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002d60| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 03 00 43 56 |l.exe...|......CV|
|00002d70| 01 00 00 00 40 00 00 00 | 04 00 00 00 03 00 00 00 |....@...|........|
|00002d80| 7c 00 00 00 04 00 00 00 | 03 00 00 00 cc 01 00 00 ||.......|........|
|00002d90| 16 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00002da0| 65 00 00 00 00 00 01 00 | 03 00 43 56 01 00 00 00 |e.......|..CV....|
|00002db0| 3c 00 00 00 04 00 00 00 | 03 00 00 00 78 00 00 00 |<.......|....x...|
|00002dc0| 04 00 00 00 03 00 00 00 | be 01 00 00 0e 00 00 00 |........|........|
|00002dd0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00002de0| 00 00 01 00 04 00 43 56 | 01 00 00 00 38 00 00 00 |......CV|....8...|
|00002df0| 04 00 00 00 01 00 00 00 | 1c 17 00 00 06 00 00 00 |........|........|
|00002e00| 03 00 00 00 74 00 00 00 | 04 00 00 00 03 00 00 00 |....t...|........|
|00002e10| b4 01 00 00 0a 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002e20| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 04 00 43 56 |l.exe...|......CV|
|00002e30| 01 00 00 00 34 00 00 00 | 04 00 00 00 01 00 00 00 |....4...|........|
|00002e40| 16 17 00 00 06 00 00 00 | 03 00 00 00 70 00 00 00 |........|....p...|
|00002e50| 04 00 00 00 03 00 00 00 | aa 01 00 00 0a 00 00 00 |........|........|
|00002e60| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00002e70| 00 00 01 00 04 00 43 56 | 01 00 00 00 30 00 00 00 |......CV|....0...|
|00002e80| 04 00 00 00 01 00 00 00 | 10 17 00 00 06 00 00 00 |........|........|
|00002e90| 03 00 00 00 6c 00 00 00 | 04 00 00 00 03 00 00 00 |....l...|........|
|00002ea0| a0 01 00 00 0a 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002eb0| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 04 00 43 56 |l.exe...|......CV|
|00002ec0| 01 00 00 00 2c 00 00 00 | 04 00 00 00 01 00 00 00 |....,...|........|
|00002ed0| 0a 17 00 00 06 00 00 00 | 03 00 00 00 68 00 00 00 |........|....h...|
|00002ee0| 04 00 00 00 03 00 00 00 | 96 01 00 00 0a 00 00 00 |........|........|
|00002ef0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00002f00| 00 00 01 00 04 00 43 56 | 01 00 00 00 28 00 00 00 |......CV|....(...|
|00002f10| 04 00 00 00 01 00 00 00 | 04 17 00 00 06 00 00 00 |........|........|
|00002f20| 03 00 00 00 64 00 00 00 | 04 00 00 00 03 00 00 00 |....d...|........|
|00002f30| 8a 01 00 00 0c 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00002f40| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 03 00 43 56 |l.exe...|......CV|
|00002f50| 01 00 00 00 24 00 00 00 | 04 00 00 00 03 00 00 00 |....$...|........|
|00002f60| 60 00 00 00 04 00 00 00 | 03 00 00 00 6a 01 00 00 |`.......|....j...|
|00002f70| 20 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 | ....nto|skrnl.ex|
|00002f80| 65 00 00 00 00 00 01 00 | 04 00 43 56 01 00 00 00 |e.......|..CV....|
|00002f90| 1c 00 00 00 04 00 00 00 | 01 00 00 00 fe 16 00 00 |........|........|
|00002fa0| 06 00 00 00 03 00 00 00 | 58 00 00 00 04 00 00 00 |........|X.......|
|00002fb0| 03 00 00 00 5e 01 00 00 | 0c 00 00 00 0c 6e 74 6f |....^...|.....nto|
|00002fc0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00002fd0| 03 00 43 56 01 00 00 00 | 18 00 00 00 04 00 00 00 |..CV....|........|
|00002fe0| 03 00 00 00 54 00 00 00 | 04 00 00 00 03 00 00 00 |....T...|........|
|00002ff0| 4a 01 00 00 14 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |J.......|.ntoskrn|
|00003000| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 03 00 43 56 |l.exe...|......CV|
|00003010| 01 00 00 00 14 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00003020| 50 00 00 00 04 00 00 00 | 03 00 00 00 3c 01 00 00 |P.......|....<...|
|00003030| 0e 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003040| 65 00 00 00 00 00 01 00 | 04 00 43 56 01 00 00 00 |e.......|..CV....|
|00003050| 10 00 00 00 04 00 00 00 | 01 00 00 00 f8 16 00 00 |........|........|
|00003060| 06 00 00 00 03 00 00 00 | 4c 00 00 00 04 00 00 00 |........|L.......|
|00003070| 03 00 00 00 2e 01 00 00 | 0e 00 00 00 0c 6e 74 6f |........|.....nto|
|00003080| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00003090| 04 00 43 56 01 00 00 00 | 0c 00 00 00 04 00 00 00 |..CV....|........|
|000030a0| 01 00 00 00 f2 16 00 00 | 06 00 00 00 03 00 00 00 |........|........|
|000030b0| 48 00 00 00 04 00 00 00 | 03 00 00 00 22 01 00 00 |H.......|...."...|
|000030c0| 0c 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000030d0| 65 00 00 00 00 00 01 00 | 00 00 43 56 0c 6e 74 6f |e.......|..CV.nto|
|000030e0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|000030f0| 03 00 43 56 01 00 00 00 | 20 00 00 00 04 00 00 00 |..CV....| .......|
|00003100| 03 00 00 00 5c 00 00 00 | 04 00 00 00 03 00 00 00 |....\...|........|
|00003110| 0a 01 00 00 18 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00003120| 6c 2e 65 78 65 00 00 00 | 00 00 01 00 03 00 43 56 |l.exe...|......CV|
|00003130| 01 00 00 00 48 00 00 00 | 04 00 00 00 03 00 00 00 |....H...|........|
|00003140| 84 00 00 00 04 00 00 00 | 03 00 00 00 f2 00 00 00 |........|........|
|00003150| 18 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003160| 65 00 00 00 00 00 01 00 | 00 00 43 56 0c 6e 74 6f |e.......|..CV.nto|
|00003170| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 00 00 01 00 |skrnl.ex|e.......|
|00003180| 03 00 43 56 01 00 00 00 | 50 00 00 00 04 00 00 00 |..CV....|P.......|
|00003190| 03 00 00 00 8c 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|000031a0| e8 00 00 00 0a 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|000031b0| 6c 2e 65 78 65 00 00 00 | 00 00 02 00 02 00 43 56 |l.exe...|......CV|
|000031c0| 01 00 00 00 08 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|000031d0| 44 00 00 00 04 00 00 00 | 07 48 41 4c 2e 64 6c 6c |D.......|.HAL.dll|
|000031e0| 00 00 02 00 02 00 43 56 | 03 00 00 00 14 00 00 00 |......CV|........|
|000031f0| 14 00 00 00 03 00 00 00 | 64 03 00 00 08 00 00 00 |........|d.......|
|00003200| 07 48 41 4c 2e 64 6c 6c | 00 00 02 00 03 00 43 56 |.HAL.dll|......CV|
|00003210| 01 00 00 00 00 00 00 00 | 04 00 00 00 03 00 00 00 |........|........|
|00003220| 3c 00 00 00 04 00 00 00 | 03 00 00 00 50 03 00 00 |<.......|....P...|
|00003230| 14 00 00 00 07 48 41 4c | 2e 64 6c 6c 00 00 02 00 |.....HAL|.dll....|
|00003240| 03 00 43 56 01 00 00 00 | 04 00 00 00 04 00 00 00 |..CV....|........|
|00003250| 03 00 00 00 40 00 00 00 | 04 00 00 00 03 00 00 00 |....@...|........|
|00003260| 3c 03 00 00 14 00 00 00 | 07 48 41 4c 2e 64 6c 6c |<.......|.HAL.dll|
|00003270| 00 00 04 00 03 00 43 56 | 01 00 00 00 4c 17 00 00 |......CV|....L...|
|00003280| 9a 00 00 00 02 00 00 00 | 28 00 00 00 10 00 00 00 |........|(.......|
|00003290| 02 00 00 00 d4 00 00 00 | 04 00 00 00 13 6f 62 6a |........|.....obj|
|000032a0| 5c 69 33 38 36 5c 72 65 | 67 6c 69 62 2e 6f 62 6a |\i386\re|glib.obj|
|000032b0| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|000032c0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|000032d0| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|000032e0| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|000032f0| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003300| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003310| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003320| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003330| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003340| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003350| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003360| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003370| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003380| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003390| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000033a0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|000033b0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|000033c0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|000033d0| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|000033e0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|000033f0| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003400| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003410| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003420| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003430| 65 00 00 00 22 00 01 00 | 03 07 00 08 18 4d 69 63 |e..."...|.....Mic|
|00003440| 72 6f 73 6f 66 74 20 4c | 49 4e 4b 20 35 2e 31 32 |rosoft L|INK 5.12|
|00003450| 2e 39 30 34 39 00 00 00 | 02 00 00 00 16 00 09 00 |.9049...|........|
|00003460| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003470| 65 00 00 00 22 00 01 00 | 03 07 00 08 18 4d 69 63 |e..."...|.....Mic|
|00003480| 72 6f 73 6f 66 74 20 4c | 49 4e 4b 20 35 2e 31 32 |rosoft L|INK 5.12|
|00003490| 2e 39 30 34 39 00 00 00 | 02 00 00 00 16 00 09 00 |.9049...|........|
|000034a0| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000034b0| 65 00 00 00 22 00 01 00 | 03 07 00 08 18 4d 69 63 |e..."...|.....Mic|
|000034c0| 72 6f 73 6f 66 74 20 4c | 49 4e 4b 20 35 2e 31 32 |rosoft L|INK 5.12|
|000034d0| 2e 39 30 34 39 00 00 00 | 02 00 00 00 16 00 09 00 |.9049...|........|
|000034e0| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000034f0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003500| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003510| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003520| 22 00 06 02 00 00 00 00 | 6c 00 00 00 00 00 00 00 |".......|l.......|
|00003530| 46 17 00 00 01 00 06 00 | 00 07 5f 73 74 72 6c 77 |F.......|.._strlw|
|00003540| 72 00 00 00 02 00 06 00 | 02 00 00 00 16 00 09 00 |r.......|........|
|00003550| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003560| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003570| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003580| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003590| 1e 00 06 02 00 00 00 00 | 68 00 00 00 00 00 00 00 |........|h.......|
|000035a0| 40 17 00 00 01 00 06 00 | 00 06 73 74 72 73 74 72 |@.......|..strstr|
|000035b0| 02 00 06 00 02 00 00 00 | 16 00 09 00 00 00 00 00 |........|........|
|000035c0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|000035d0| 2a 00 13 10 07 00 00 00 | 03 00 00 00 00 00 00 00 |*.......|........|
|000035e0| 06 00 00 00 ff 20 12 4d | 69 63 72 6f 73 6f 66 74 |..... .M|icrosoft|
|000035f0| 20 28 52 29 20 4c 49 4e | 4b 00 00 00 22 00 06 02 | (R) LIN|K..."...|
|00003600| 00 00 00 00 6c 00 00 00 | 00 00 00 00 3a 17 00 00 |....l...|....:...|
|00003610| 01 00 06 00 00 07 73 74 | 72 6e 63 70 79 00 00 00 |......st|rncpy...|
|00003620| 02 00 06 00 02 00 00 00 | 16 00 09 00 00 00 00 00 |........|........|
|00003630| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00003640| 2a 00 13 10 07 00 00 00 | 03 00 00 00 00 00 00 00 |*.......|........|
|00003650| 06 00 00 00 ff 20 12 4d | 69 63 72 6f 73 6f 66 74 |..... .M|icrosoft|
|00003660| 20 28 52 29 20 4c 49 4e | 4b 00 00 00 02 00 00 00 | (R) LIN|K.......|
|00003670| 16 00 09 00 00 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00003680| 6c 2e 65 78 65 00 00 00 | 2a 00 13 10 07 00 00 00 |l.exe...|*.......|
|00003690| 03 00 00 00 00 00 00 00 | 06 00 00 00 ff 20 12 4d |........|..... .M|
|000036a0| 69 63 72 6f 73 6f 66 74 | 20 28 52 29 20 4c 49 4e |icrosoft| (R) LIN|
|000036b0| 4b 00 00 00 22 00 06 02 | 00 00 00 00 6c 00 00 00 |K..."...|....l...|
|000036c0| 00 00 00 00 34 17 00 00 | 01 00 06 00 00 07 73 74 |....4...|......st|
|000036d0| 72 6e 63 6d 70 00 00 00 | 02 00 06 00 02 00 00 00 |rncmp...|........|
|000036e0| 16 00 09 00 00 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|000036f0| 6c 2e 65 78 65 00 00 00 | 2a 00 13 10 07 00 00 00 |l.exe...|*.......|
|00003700| 03 00 00 00 00 00 00 00 | 06 00 00 00 ff 20 12 4d |........|..... .M|
|00003710| 69 63 72 6f 73 6f 66 74 | 20 28 52 29 20 4c 49 4e |icrosoft| (R) LIN|
|00003720| 4b 00 00 00 26 00 06 02 | 00 00 00 00 70 00 00 00 |K...&...|....p...|
|00003730| 00 00 00 00 2e 17 00 00 | 01 00 06 00 00 0d 5a 77 |........|......Zw|
|00003740| 43 6f 6e 6e 65 63 74 50 | 6f 72 74 00 02 00 06 00 |ConnectP|ort.....|
|00003750| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003760| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003770| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003780| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003790| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|000037a0| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000037b0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|000037c0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|000037d0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|000037e0| 2e 00 06 02 00 00 00 00 | 78 00 00 00 00 00 00 00 |........|x.......|
|000037f0| 28 17 00 00 01 00 06 00 | 00 16 5a 77 52 65 71 75 |(.......|..ZwRequ|
|00003800| 65 73 74 57 61 69 74 52 | 65 70 6c 79 50 6f 72 74 |estWaitR|eplyPort|
|00003810| 02 00 06 00 02 00 00 00 | 16 00 09 00 00 00 00 00 |........|........|
|00003820| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00003830| 2a 00 13 10 07 00 00 00 | 03 00 00 00 00 00 00 00 |*.......|........|
|00003840| 06 00 00 00 ff 20 12 4d | 69 63 72 6f 73 6f 66 74 |..... .M|icrosoft|
|00003850| 20 28 52 29 20 4c 49 4e | 4b 00 00 00 02 00 00 00 | (R) LIN|K.......|
|00003860| 16 00 09 00 00 00 00 00 | 0c 6e 74 6f 73 6b 72 6e |........|.ntoskrn|
|00003870| 6c 2e 65 78 65 00 00 00 | 2a 00 13 10 07 00 00 00 |l.exe...|*.......|
|00003880| 03 00 00 00 00 00 00 00 | 06 00 00 00 ff 20 12 4d |........|..... .M|
|00003890| 69 63 72 6f 73 6f 66 74 | 20 28 52 29 20 4c 49 4e |icrosoft| (R) LIN|
|000038a0| 4b 00 00 00 02 00 00 00 | 16 00 09 00 00 00 00 00 |K.......|........|
|000038b0| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|000038c0| 2a 00 13 10 07 00 00 00 | 03 00 00 00 00 00 00 00 |*.......|........|
|000038d0| 06 00 00 00 ff 20 12 4d | 69 63 72 6f 73 6f 66 74 |..... .M|icrosoft|
|000038e0| 20 28 52 29 20 4c 49 4e | 4b 00 00 00 2e 00 06 02 | (R) LIN|K.......|
|000038f0| 00 00 00 00 78 00 00 00 | 00 00 00 00 22 17 00 00 |....x...|...."...|
|00003900| 01 00 06 00 00 15 50 73 | 47 65 74 43 75 72 72 65 |......Ps|GetCurre|
|00003910| 6e 74 50 72 6f 63 65 73 | 73 49 64 00 02 00 06 00 |ntProces|sId.....|
|00003920| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003930| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003940| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003950| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003960| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003970| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003980| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003990| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|000039a0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|000039b0| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|000039c0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|000039d0| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|000039e0| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|000039f0| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003a00| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003a10| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003a20| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003a30| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003a40| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003a50| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003a60| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003a70| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003a80| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003a90| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003aa0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003ab0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003ac0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003ad0| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003ae0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003af0| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003b00| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003b10| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003b20| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003b30| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003b40| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003b50| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003b60| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003b70| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003b80| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003b90| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003ba0| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003bb0| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003bc0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003bd0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003be0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003bf0| 22 00 06 02 00 00 00 00 | 6c 00 00 00 00 00 00 00 |".......|l.......|
|00003c00| 1c 17 00 00 01 00 06 00 | 00 07 77 63 73 6e 63 6d |........|..wcsncm|
|00003c10| 70 00 00 00 02 00 06 00 | 02 00 00 00 16 00 09 00 |p.......|........|
|00003c20| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003c30| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003c40| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003c50| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003c60| 1e 00 06 02 00 00 00 00 | 68 00 00 00 00 00 00 00 |........|h.......|
|00003c70| 16 17 00 00 01 00 06 00 | 00 06 77 63 73 73 74 72 |........|..wcsstr|
|00003c80| 02 00 06 00 02 00 00 00 | 16 00 09 00 00 00 00 00 |........|........|
|00003c90| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00003ca0| 2a 00 13 10 07 00 00 00 | 03 00 00 00 00 00 00 00 |*.......|........|
|00003cb0| 06 00 00 00 ff 20 12 4d | 69 63 72 6f 73 6f 66 74 |..... .M|icrosoft|
|00003cc0| 20 28 52 29 20 4c 49 4e | 4b 00 00 00 22 00 06 02 | (R) LIN|K..."...|
|00003cd0| 00 00 00 00 6c 00 00 00 | 00 00 00 00 10 17 00 00 |....l...|........|
|00003ce0| 01 00 06 00 00 07 77 63 | 73 72 63 68 72 00 00 00 |......wc|srchr...|
|00003cf0| 02 00 06 00 02 00 00 00 | 16 00 09 00 00 00 00 00 |........|........|
|00003d00| 0c 6e 74 6f 73 6b 72 6e | 6c 2e 65 78 65 00 00 00 |.ntoskrn|l.exe...|
|00003d10| 2a 00 13 10 07 00 00 00 | 03 00 00 00 00 00 00 00 |*.......|........|
|00003d20| 06 00 00 00 ff 20 12 4d | 69 63 72 6f 73 6f 66 74 |..... .M|icrosoft|
|00003d30| 20 28 52 29 20 4c 49 4e | 4b 00 00 00 1e 00 06 02 | (R) LIN|K.......|
|00003d40| 00 00 00 00 68 00 00 00 | 00 00 00 00 0a 17 00 00 |....h...|........|
|00003d50| 01 00 06 00 00 06 77 63 | 73 6c 65 6e 02 00 06 00 |......wc|slen....|
|00003d60| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003d70| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003d80| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003d90| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003da0| 20 4c 49 4e 4b 00 00 00 | 22 00 06 02 00 00 00 00 | LINK...|".......|
|00003db0| 6c 00 00 00 00 00 00 00 | 04 17 00 00 01 00 06 00 |l.......|........|
|00003dc0| 00 09 5f 77 63 73 6e 69 | 63 6d 70 00 02 00 06 00 |.._wcsni|cmp.....|
|00003dd0| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003de0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003df0| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003e00| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003e10| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003e20| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003e30| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003e40| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003e50| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003e60| 22 00 06 02 00 00 00 00 | 6c 00 00 00 00 00 00 00 |".......|l.......|
|00003e70| fe 16 00 00 01 00 06 00 | 00 09 5f 73 74 72 6e 69 |........|.._strni|
|00003e80| 63 6d 70 00 02 00 06 00 | 02 00 00 00 16 00 09 00 |cmp.....|........|
|00003e90| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003ea0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003eb0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003ec0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003ed0| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00003ee0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00003ef0| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00003f00| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00003f10| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00003f20| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003f30| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003f40| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003f50| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003f60| 22 00 06 02 00 00 00 00 | 6c 00 00 00 00 00 00 00 |".......|l.......|
|00003f70| f8 16 00 00 01 00 06 00 | 00 0a 5f 76 73 6e 70 72 |........|.._vsnpr|
|00003f80| 69 6e 74 66 02 00 06 00 | 02 00 00 00 16 00 09 00 |intf....|........|
|00003f90| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00003fa0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00003fb0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00003fc0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00003fd0| 22 00 06 02 00 00 00 00 | 6c 00 00 00 00 00 00 00 |".......|l.......|
|00003fe0| f2 16 00 00 01 00 06 00 | 00 08 44 62 67 50 72 69 |........|..DbgPri|
|00003ff0| 6e 74 00 00 02 00 06 00 | 02 00 00 00 16 00 09 00 |nt......|........|
|00004000| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00004010| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00004020| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00004030| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00004040| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|00004050| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|00004060| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00004070| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00004080| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00004090| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|000040a0| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|000040b0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|000040c0| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|000040d0| 02 00 00 00 16 00 09 00 | 00 00 00 00 0c 6e 74 6f |........|.....nto|
|000040e0| 73 6b 72 6e 6c 2e 65 78 | 65 00 00 00 2a 00 13 10 |skrnl.ex|e...*...|
|000040f0| 07 00 00 00 03 00 00 00 | 00 00 00 00 06 00 00 00 |........|........|
|00004100| ff 20 12 4d 69 63 72 6f | 73 6f 66 74 20 28 52 29 |. .Micro|soft (R)|
|00004110| 20 4c 49 4e 4b 00 00 00 | 02 00 00 00 16 00 09 00 | LINK...|........|
|00004120| 00 00 00 00 0c 6e 74 6f | 73 6b 72 6e 6c 2e 65 78 |.....nto|skrnl.ex|
|00004130| 65 00 00 00 2a 00 13 10 | 07 00 00 00 03 00 00 00 |e...*...|........|
|00004140| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00004150| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00004160| 02 00 00 00 0e 00 09 00 | 00 00 00 00 07 48 41 4c |........|.....HAL|
|00004170| 2e 64 6c 6c 22 00 01 00 | 03 07 00 08 18 4d 69 63 |.dll"...|.....Mic|
|00004180| 72 6f 73 6f 66 74 20 4c | 49 4e 4b 20 35 2e 31 32 |rosoft L|INK 5.12|
|00004190| 2e 39 30 34 39 00 00 00 | 02 00 00 00 0e 00 09 00 |.9049...|........|
|000041a0| 00 00 00 00 07 48 41 4c | 2e 64 6c 6c 22 00 01 00 |.....HAL|.dll"...|
|000041b0| 03 07 00 08 18 4d 69 63 | 72 6f 73 6f 66 74 20 4c |.....Mic|rosoft L|
|000041c0| 49 4e 4b 20 35 2e 31 32 | 2e 39 30 34 39 00 00 00 |INK 5.12|.9049...|
|000041d0| 02 00 00 00 0e 00 09 00 | 00 00 00 00 07 48 41 4c |........|.....HAL|
|000041e0| 2e 64 6c 6c 2a 00 13 10 | 07 00 00 00 03 00 00 00 |.dll*...|........|
|000041f0| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00004200| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00004210| 02 00 00 00 0e 00 09 00 | 00 00 00 00 07 48 41 4c |........|.....HAL|
|00004220| 2e 64 6c 6c 2a 00 13 10 | 07 00 00 00 03 00 00 00 |.dll*...|........|
|00004230| 00 00 00 00 06 00 00 00 | ff 20 12 4d 69 63 72 6f |........|. .Micro|
|00004240| 73 6f 66 74 20 28 52 29 | 20 4c 49 4e 4b 00 00 00 |soft (R)| LINK...|
|00004250| 0a 00 0c 00 24 14 00 00 | 2c 04 00 00 e4 03 00 00 |....$...|,.......|
|00004260| 26 00 09 10 00 00 00 00 | a4 01 00 00 01 00 17 3f |&.......|.......?|
|00004270| 44 65 62 75 67 4d 65 73 | 73 61 67 65 40 40 59 41 |DebugMes|sage@@YA|
|00004280| 58 50 41 44 5a 5a 00 00 | 2a 00 09 10 00 00 00 00 |XPADZZ..|*.......|
|00004290| 94 00 00 00 01 00 1b 5f | 5f 69 6d 70 5f 5f 4d 6d |......._|_imp__Mm|
|000042a0| 55 6e 6d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |UnmapLoc|kedPages|
|000042b0| 40 38 00 00 2e 00 09 10 | 00 00 00 00 6c 00 00 00 |@8......|....l...|
|000042c0| 01 00 1f 5f 5f 69 6d 70 | 5f 5f 4b 65 57 61 69 74 |...__imp|__KeWait|
|000042d0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 40 |ForSingl|eObject@|
|000042e0| 32 30 00 00 22 00 09 10 | 00 00 00 00 e0 09 00 00 |20.."...|........|
|000042f0| 01 00 15 3f 55 6e 48 6f | 6f 6b 53 79 73 43 61 6c |...?UnHo|okSysCal|
|00004300| 6c 40 40 59 47 48 58 5a | 22 00 09 10 00 00 00 00 |l@@YGHXZ|".......|
|00004310| 3c 00 00 00 01 00 14 5f | 5f 69 6d 70 5f 5f 5a 77 |<......_|_imp__Zw|
|00004320| 4f 70 65 6e 46 69 6c 65 | 40 32 34 00 4a 00 09 10 |OpenFile|@24.J...|
|00004330| 00 00 00 00 a5 0c 00 00 | 01 00 3a 3f 44 72 69 76 |........|..:?Driv|
|00004340| 65 72 45 6e 74 72 79 40 | 40 59 47 4a 50 41 55 5f |erEntry@|@YGJPAU_|
|00004350| 44 52 49 56 45 52 5f 4f | 42 4a 45 43 54 40 40 50 |DRIVER_O|BJECT@@P|
|00004360| 41 55 5f 55 4e 49 43 4f | 44 45 5f 53 54 52 49 4e |AU_UNICO|DE_STRIN|
|00004370| 47 40 40 40 5a 00 00 00 | 26 00 09 10 00 00 00 00 |G@@@Z...|&.......|
|00004380| 04 00 00 00 02 00 16 3f | 67 5f 70 73 7a 50 72 6f |.......?|g_pszPro|
|00004390| 63 65 73 73 40 40 33 50 | 41 50 41 44 41 00 00 00 |cess@@3P|APADA...|
|000043a0| 26 00 09 10 00 00 00 00 | 70 17 00 00 01 00 18 5f |&.......|p......_|
|000043b0| 52 65 67 6d 6f 6e 4d 61 | 70 53 65 72 76 69 63 65 |RegmonMa|pService|
|000043c0| 54 61 62 6c 65 40 34 00 | 26 00 09 10 00 00 00 00 |Table@4.|&.......|
|000043d0| 98 00 00 00 01 00 19 5f | 5f 69 6d 70 5f 5f 4d 6d |......._|_imp__Mm|
|000043e0| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 40 38 |MapLocke|dPages@8|
|000043f0| 26 00 09 10 00 00 00 00 | 70 00 00 00 01 00 17 5f |&.......|p......_|
|00004400| 5f 69 6d 70 5f 5f 5a 77 | 43 6f 6e 6e 65 63 74 50 |_imp__Zw|ConnectP|
|00004410| 6f 72 74 40 33 32 00 00 | 2a 00 09 10 00 00 00 00 |ort@32..|*.......|
|00004420| 25 04 00 00 01 00 1a 3f | 54 72 79 54 6f 43 6c 65 |%......?|TryToCle|
|00004430| 61 72 46 69 6c 65 4c 69 | 73 74 40 40 59 47 48 58 |arFileLi|st@@YGHX|
|00004440| 5a 00 00 00 1e 00 09 10 | 00 00 00 00 7c 00 00 00 |Z.......|....|...|
|00004450| 01 00 0e 5f 5f 69 6d 70 | 5f 5f 73 74 72 6e 63 70 |...__imp|__strncp|
|00004460| 79 00 00 00 26 00 09 10 | 00 00 00 00 a4 00 00 00 |y...&...|........|
|00004470| 01 00 19 5f 4b 65 53 65 | 72 76 69 63 65 44 65 73 |..._KeSe|rviceDes|
|00004480| 63 72 69 70 74 6f 72 54 | 61 62 6c 65 2a 00 09 10 |criptorT|able*...|
|00004490| 00 00 00 00 28 17 00 00 | 01 00 1a 5f 5a 77 52 65 |....(...|..._ZwRe|
|000044a0| 71 75 65 73 74 57 61 69 | 74 52 65 70 6c 79 50 6f |questWai|tReplyPo|
|000044b0| 72 74 40 31 32 00 00 00 | 1a 00 09 10 00 00 00 00 |rt@12...|........|
|000044c0| 34 00 00 00 01 00 0d 5f | 5f 69 6d 70 5f 5f 77 63 |4......_|_imp__wc|
|000044d0| 73 73 74 72 2a 00 09 10 | 00 00 00 00 04 00 00 00 |sstr*...|........|
|000044e0| 01 00 1a 5f 5f 69 6d 70 | 5f 40 4b 66 52 65 6c 65 |...__imp|_@KfRele|
|000044f0| 61 73 65 53 70 69 6e 4c | 6f 63 6b 40 38 00 00 00 |aseSpinL|ock@8...|
|00004500| 42 00 09 10 00 00 00 00 | e8 05 00 00 01 00 32 3f |B.......|......2?|
|00004510| 43 68 65 63 6b 46 69 6c | 65 45 78 74 49 6e 56 61 |CheckFil|eExtInVa|
|00004520| 6c 69 64 61 74 65 40 40 | 59 47 48 50 41 55 5f 55 |lidate@@|YGHPAU_U|
|00004530| 4e 49 43 4f 44 45 5f 53 | 54 52 49 4e 47 40 40 40 |NICODE_S|TRING@@@|
|00004540| 5a 00 00 00 2a 00 09 10 | 00 00 00 00 90 00 00 00 |Z...*...|........|
|00004550| 01 00 1b 5f 5f 69 6d 70 | 5f 40 49 6f 66 43 6f 6d |...__imp|_@IofCom|
|00004560| 70 6c 65 74 65 52 65 71 | 75 65 73 74 40 38 00 00 |pleteReq|uest@8..|
|00004570| 26 00 09 10 00 00 00 00 | 50 02 00 00 01 00 16 3f |&.......|P......?|
|00004580| 55 6e 49 6e 69 74 46 69 | 6c 65 4c 69 73 74 40 40 |UnInitFi|leList@@|
|00004590| 59 47 48 58 5a 00 00 00 | 1e 00 09 10 00 00 00 00 |YGHXZ...|........|
|000045a0| 2e 17 00 00 01 00 11 5f | 5a 77 43 6f 6e 6e 65 63 |......._|ZwConnec|
|000045b0| 74 50 6f 72 74 40 33 32 | 32 00 09 10 00 00 00 00 |tPort@32|2.......|
|000045c0| 48 00 00 00 02 00 22 3f | 67 5f 46 69 6c 65 4c 69 |H....."?|g_FileLi|
|000045d0| 73 74 45 6e 74 72 79 40 | 40 33 55 5f 4c 49 53 54 |stEntry@|@3U_LIST|
|000045e0| 5f 45 4e 54 52 59 40 40 | 41 00 00 00 22 00 09 10 |_ENTRY@@|A..."...|
|000045f0| 00 00 00 00 78 00 00 00 | 02 00 13 3f 67 5f 62 4b |....x...|...?g_bK|
|00004600| 57 61 74 63 68 49 6e 69 | 74 40 40 33 45 41 00 00 |WatchIni|t@@3EA..|
|00004610| 1a 00 09 10 00 00 00 00 | 80 00 00 00 01 00 0d 5f |........|......._|
|00004620| 5f 69 6d 70 5f 5f 73 74 | 72 73 74 72 22 00 09 10 |_imp__st|rstr"...|
|00004630| 00 00 00 00 fc 10 00 00 | 01 00 14 3f 4b 57 61 74 |........|...?KWat|
|00004640| 63 68 55 6e 49 6e 69 74 | 40 40 59 47 48 58 5a 00 |chUnInit|@@YGHXZ.|
|00004650| 26 00 09 10 00 00 00 00 | 90 15 00 00 01 00 19 3f |&.......|.......?|
|00004660| 47 65 74 50 72 6f 63 65 | 73 73 4e 61 6d 65 40 40 |GetProce|ssName@@|
|00004670| 59 47 45 50 41 44 40 5a | 22 00 09 10 00 00 00 00 |YGEPAD@Z|".......|
|00004680| d4 00 00 00 02 00 12 5f | 4b 65 53 65 72 76 69 63 |......._|KeServic|
|00004690| 65 54 61 62 6c 65 4d 64 | 6c 00 00 00 22 00 09 10 |eTableMd|l..."...|
|000046a0| 00 00 00 00 41 16 00 00 | 01 00 14 3f 43 68 65 63 |....A...|...?Chec|
|000046b0| 6b 50 72 6f 63 65 73 73 | 40 40 59 47 48 58 5a 00 |kProcess|@@YGHXZ.|
|000046c0| 2a 00 09 10 00 00 00 00 | 6c 01 00 00 01 00 1c 3f |*.......|l......?|
|000046d0| 3f 5f 43 40 5f 30 39 4a | 4f 50 46 40 6d 73 64 65 |?_C@_09J|OPF@msde|
|000046e0| 76 3f 34 65 78 65 3f 24 | 41 41 40 00 2a 00 09 10 |v?4exe?$|AA@.*...|
|000046f0| 00 00 00 00 40 00 00 00 | 02 00 1a 3f 67 5f 6e 46 |....@...|...?g_nF|
|00004700| 69 6c 65 4c 69 73 74 49 | 74 65 6d 43 6f 75 6e 74 |ileListI|temCount|
|00004710| 40 40 33 48 41 00 00 00 | 22 00 09 10 00 00 00 00 |@@3HA...|".......|
|00004720| 50 09 00 00 01 00 13 3f | 48 6f 6f 6b 53 79 73 43 |P......?|HookSysC|
|00004730| 61 6c 6c 40 40 59 47 48 | 58 5a 00 00 2a 00 09 10 |all@@YGH|XZ..*...|
|00004740| 00 00 00 00 54 00 00 00 | 01 00 1d 5f 5f 69 6d 70 |....T...|...__imp|
|00004750| 5f 5f 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |__IoDele|teSymbol|
|00004760| 69 63 4c 69 6e 6b 40 34 | 2e 00 09 10 00 00 00 00 |icLink@4|........|
|00004770| 78 01 00 00 01 00 20 3f | 3f 5f 43 40 5f 30 4e 40 |x..... ?|?_C@_0N@|
|00004780| 4e 46 50 45 40 64 65 6c | 70 68 69 33 32 3f 34 65 |NFPE@del|phi32?4e|
|00004790| 78 65 3f 24 41 41 40 00 | 1a 00 09 10 00 00 00 00 |xe?$AA@.|........|
|000047a0| f8 16 00 00 01 00 0b 5f | 5f 76 73 6e 70 72 69 6e |......._|_vsnprin|
|000047b0| 74 66 00 00 2e 00 09 10 | 00 00 00 00 48 00 00 00 |tf......|....H...|
|000047c0| 01 00 1f 5f 5f 69 6d 70 | 5f 5f 45 78 41 6c 6c 6f |...__imp|__ExAllo|
|000047d0| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 40 |catePool|WithTag@|
|000047e0| 31 32 00 00 2e 00 09 10 | 00 00 00 00 68 00 00 00 |12......|....h...|
|000047f0| 01 00 20 5f 5f 69 6d 70 | 5f 5f 5a 77 52 65 71 75 |.. __imp|__ZwRequ|
|00004800| 65 73 74 57 61 69 74 52 | 65 70 6c 79 50 6f 72 74 |estWaitR|eplyPort|
|00004810| 40 31 32 00 4a 00 09 10 | 00 00 00 00 78 12 00 00 |@12.J...|....x...|
|00004820| 01 00 3c 3f 50 72 6f 63 | 65 73 73 46 69 6c 65 40 |..<?Proc|essFile@|
|00004830| 40 59 47 3f 41 57 34 5f | 4b 41 45 5f 53 43 41 4e |@YG?AW4_|KAE_SCAN|
|00004840| 5f 53 54 41 54 55 53 40 | 40 50 41 55 5f 55 4e 49 |_STATUS@|@PAU_UNI|
|00004850| 43 4f 44 45 5f 53 54 52 | 49 4e 47 40 40 40 5a 00 |CODE_STR|ING@@@Z.|
|00004860| 36 00 09 10 00 00 00 00 | 88 0e 00 00 01 00 29 3f |6.......|......)?|
|00004870| 4f 6e 44 72 69 76 65 72 | 55 6e 6c 6f 61 64 40 40 |OnDriver|Unload@@|
|00004880| 59 47 58 50 41 55 5f 44 | 52 49 56 45 52 5f 4f 42 |YGXPAU_D|RIVER_OB|
|00004890| 4a 45 43 54 40 40 40 5a | 26 00 09 10 00 00 00 00 |JECT@@@Z|&.......|
|000048a0| 00 16 00 00 01 00 16 3f | 52 65 6d 6f 76 65 50 72 |.......?|RemovePr|
|000048b0| 6f 63 65 73 73 40 40 59 | 47 48 48 40 5a 00 00 00 |ocess@@Y|GHH@Z...|
|000048c0| 3e 00 09 10 00 00 00 00 | a0 02 00 00 01 00 30 3f |>.......|......0?|
|000048d0| 43 68 65 63 6b 46 69 6c | 65 4e 61 6d 65 45 78 69 |CheckFil|eNameExi|
|000048e0| 73 74 73 40 40 59 47 48 | 50 41 55 5f 55 4e 49 43 |sts@@YGH|PAU_UNIC|
|000048f0| 4f 44 45 5f 53 54 52 49 | 4e 47 40 40 48 40 5a 00 |ODE_STRI|NG@@H@Z.|
|00004900| 1e 00 09 10 00 00 00 00 | 84 00 00 00 01 00 0e 5f |........|......._|
|00004910| 5f 69 6d 70 5f 5f 5f 73 | 74 72 6c 77 72 00 00 00 |_imp___s|trlwr...|
|00004920| 42 00 09 10 00 00 00 00 | b0 0d 00 00 01 00 34 3f |B.......|......4?|
|00004930| 4f 6e 44 72 69 76 65 72 | 44 69 73 70 61 74 63 68 |OnDriver|Dispatch|
|00004940| 40 40 59 47 4a 50 41 55 | 5f 44 45 56 49 43 45 5f |@@YGJPAU|_DEVICE_|
|00004950| 4f 42 4a 45 43 54 40 40 | 50 41 55 5f 49 52 50 40 |OBJECT@@|PAU_IRP@|
|00004960| 40 40 5a 00 3a 00 09 10 | 00 00 00 00 62 05 00 00 |@@Z.:...|....b...|
|00004970| 01 00 2c 3f 41 6c 6c 6f | 63 46 69 6c 65 4c 69 73 |..,?Allo|cFileLis|
|00004980| 74 49 74 65 6d 40 40 59 | 47 50 41 55 74 61 67 46 |tItem@@Y|GPAUtagF|
|00004990| 69 6c 65 4c 69 73 74 49 | 74 65 6d 40 40 58 5a 00 |ileListI|tem@@XZ.|
|000049a0| 1e 00 09 10 00 00 00 00 | 7c 00 00 00 02 00 11 3f |........||......?|
|000049b0| 67 5f 4b 53 50 69 6e 4c | 6f 63 6b 40 40 33 4b 41 |g_KSPinL|ock@@3KA|
|000049c0| 16 00 09 10 00 00 00 00 | 16 17 00 00 01 00 07 5f |........|......._|
|000049d0| 77 63 73 73 74 72 00 00 | 16 00 09 10 00 00 00 00 |wcsstr..|........|
|000049e0| 40 17 00 00 01 00 07 5f | 73 74 72 73 74 72 00 00 |@......_|strstr..|
|000049f0| 2a 00 09 10 00 00 00 00 | 24 01 00 00 01 00 1c 3f |*.......|$......?|
|00004a00| 3f 5f 43 40 5f 30 39 48 | 44 49 4b 40 6b 61 76 33 |?_C@_09H|DIK@kav3|
|00004a10| 32 3f 34 65 78 65 3f 24 | 41 41 40 00 1a 00 09 10 |2?4exe?$|AA@.....|
|00004a20| 00 00 00 00 fe 16 00 00 | 01 00 0a 5f 5f 73 74 72 |........|...__str|
|00004a30| 6e 69 63 6d 70 00 00 00 | 1a 00 09 10 00 00 00 00 |nicmp...|........|
|00004a40| 04 17 00 00 01 00 0a 5f | 5f 77 63 73 6e 69 63 6d |......._|_wcsnicm|
|00004a50| 70 00 00 00 42 00 09 10 | 00 00 00 00 c8 06 00 00 |p...B...|........|
|00004a60| 01 00 33 3f 43 68 65 63 | 6b 46 69 6c 65 4e 61 6d |..3?Chec|kFileNam|
|00004a70| 65 49 6e 56 61 6c 69 64 | 61 74 65 40 40 59 47 48 |eInValid|ate@@YGH|
|00004a80| 50 41 55 5f 55 4e 49 43 | 4f 44 45 5f 53 54 52 49 |PAU_UNIC|ODE_STRI|
|00004a90| 4e 47 40 40 40 5a 00 00 | 2a 00 09 10 00 00 00 00 |NG@@@Z..|*.......|
|00004aa0| 60 00 00 00 01 00 1d 5f | 5f 69 6d 70 5f 5f 4b 65 |`......_|_imp__Ke|
|00004ab0| 49 6e 69 74 69 61 6c 69 | 7a 65 53 70 69 6e 4c 6f |Initiali|zeSpinLo|
|00004ac0| 63 6b 40 34 22 00 09 10 | 00 00 00 00 8b 0f 00 00 |ck@4"...|........|
|00004ad0| 01 00 12 3f 4b 57 61 74 | 63 68 49 6e 69 74 40 40 |...?KWat|chInit@@|
|00004ae0| 59 47 48 58 5a 00 00 00 | 2a 00 09 10 00 00 00 00 |YGHXZ...|*.......|
|00004af0| 60 00 00 00 02 00 1a 3f | 67 5f 70 66 6e 4f 6c 64 |`......?|g_pfnOld|
|00004b00| 4e 74 4f 70 65 6e 46 69 | 6c 65 40 40 33 50 41 4a |NtOpenFi|le@@3PAJ|
|00004b10| 41 00 00 00 72 00 09 10 | 00 00 00 00 90 0a 00 00 |A...r...|........|
|00004b20| 01 00 64 3f 4e 65 77 4e | 74 43 72 65 61 74 65 46 |..d?NewN|tCreateF|
|00004b30| 69 6c 65 40 40 59 47 4a | 50 41 50 41 58 4b 50 41 |ile@@YGJ|PAPAXKPA|
|00004b40| 55 5f 4f 42 4a 45 43 54 | 5f 41 54 54 52 49 42 55 |U_OBJECT|_ATTRIBU|
|00004b50| 54 45 53 40 40 50 41 55 | 5f 49 4f 5f 53 54 41 54 |TES@@PAU|_IO_STAT|
|00004b60| 55 53 5f 42 4c 4f 43 4b | 40 40 50 41 54 5f 4c 41 |US_BLOCK|@@PAT_LA|
|00004b70| 52 47 45 5f 49 4e 54 45 | 47 45 52 40 40 4b 4b 4b |RGE_INTE|GER@@KKK|
|00004b80| 4b 50 41 58 4b 40 5a 00 | 2a 00 09 10 00 00 00 00 |KPAXK@Z.|*.......|
|00004b90| 40 00 00 00 01 00 1c 5f | 5f 69 6d 70 5f 40 49 6e |@......_|_imp_@In|
|00004ba0| 74 65 72 6c 6f 63 6b 65 | 64 45 78 63 68 61 6e 67 |terlocke|dExchang|
|00004bb0| 65 40 38 00 2e 00 09 10 | 00 00 00 00 14 01 00 00 |e@8.....|........|
|00004bc0| 01 00 21 3f 3f 5f 43 40 | 5f 30 4f 40 44 4a 50 50 |..!??_C@|_0O@DJPP|
|00004bd0| 40 6b 77 61 74 63 68 73 | 76 63 3f 34 65 78 65 3f |@kwatchs|vc?4exe?|
|00004be0| 24 41 41 40 32 00 09 10 | 00 00 00 00 9c 00 00 00 |$AA@2...|........|
|00004bf0| 01 00 22 5f 5f 69 6d 70 | 5f 5f 4d 6d 42 75 69 6c |.."__imp|__MmBuil|
|00004c00| 64 4d 64 6c 46 6f 72 4e | 6f 6e 50 61 67 65 64 50 |dMdlForN|onPagedP|
|00004c10| 6f 6f 6c 40 34 00 00 00 | 56 00 09 10 00 00 00 00 |ool@4...|V.......|
|00004c20| 50 0b 00 00 01 00 49 3f | 4e 65 77 4e 74 4f 70 65 |P.....I?|NewNtOpe|
|00004c30| 6e 46 69 6c 65 40 40 59 | 47 4a 50 41 50 41 58 4b |nFile@@Y|GJPAPAXK|
|00004c40| 50 41 55 5f 4f 42 4a 45 | 43 54 5f 41 54 54 52 49 |PAU_OBJE|CT_ATTRI|
|00004c50| 42 55 54 45 53 40 40 50 | 41 55 5f 49 4f 5f 53 54 |BUTES@@P|AU_IO_ST|
|00004c60| 41 54 55 53 5f 42 4c 4f | 43 4b 40 40 4b 4b 40 5a |ATUS_BLO|CK@@KK@Z|
|00004c70| 2a 00 09 10 00 00 00 00 | 10 15 00 00 01 00 1a 3f |*.......|.......?|
|00004c80| 44 69 73 43 6f 6e 6e 65 | 63 74 4c 50 43 40 40 59 |DisConne|ctLPC@@Y|
|00004c90| 47 4a 50 41 50 41 58 40 | 5a 00 00 00 1e 00 09 10 |GJPAPAX@|Z.......|
|00004ca0| 00 00 00 00 30 00 00 00 | 01 00 0e 5f 5f 69 6d 70 |....0...|...__imp|
|00004cb0| 5f 5f 77 63 73 72 63 68 | 72 00 00 00 22 00 09 10 |__wcsrch|r..."...|
|00004cc0| 00 00 00 00 00 00 00 00 | 02 00 15 3f 67 5f 6e 50 |........|...?g_nP|
|00004cd0| 72 6f 63 65 73 73 43 6f | 75 6e 74 40 40 33 48 41 |rocessCo|unt@@3HA|
|00004ce0| 2a 00 09 10 00 00 00 00 | 88 00 00 00 01 00 1d 5f |*.......|......._|
|00004cf0| 5f 69 6d 70 5f 5f 49 6f | 43 72 65 61 74 65 53 79 |_imp__Io|CreateSy|
|00004d00| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 40 38 22 00 09 10 |mbolicLi|nk@8"...|
|00004d10| 00 00 00 00 14 00 00 00 | 01 00 13 5f 5f 69 6d 70 |........|...__imp|
|00004d20| 5f 5f 45 78 46 72 65 65 | 50 6f 6f 6c 40 34 00 00 |__ExFree|Pool@4..|
|00004d30| 2a 00 09 10 00 00 00 00 | d0 00 00 00 02 00 1a 3f |*.......|.......?|
|00004d40| 67 5f 6e 50 72 6f 63 65 | 73 73 4e 61 6d 65 4f 66 |g_nProce|ssNameOf|
|00004d50| 66 73 65 74 40 40 33 4b | 41 00 00 00 22 00 09 10 |fset@@3K|A..."...|
|00004d60| 00 00 00 00 d0 15 00 00 | 01 00 13 3f 41 64 64 50 |........|...?AddP|
|00004d70| 72 6f 63 65 73 73 40 40 | 59 47 48 48 40 5a 00 00 |rocess@@|YGHH@Z..|
|00004d80| 2e 00 09 10 00 00 00 00 | 04 01 00 00 01 00 20 3f |........|...... ?|
|00004d90| 3f 5f 43 40 5f 30 4e 40 | 47 50 42 42 40 6b 61 76 |?_C@_0N@|GPBB@kav|
|00004da0| 73 76 63 75 69 3f 34 65 | 78 65 3f 24 41 41 40 00 |svcui?4e|xe?$AA@.|
|00004db0| 1a 00 09 10 00 00 00 00 | 28 00 00 00 02 00 0a 5f |........|(......_|
|00004dc0| 53 69 67 6e 61 74 75 72 | 65 00 00 00 1e 00 09 10 |Signatur|e.......|
|00004dd0| 00 00 00 00 0c 00 00 00 | 01 00 0f 5f 5f 69 6d 70 |........|...__imp|
|00004de0| 5f 5f 44 62 67 50 72 69 | 6e 74 00 00 2a 00 09 10 |__DbgPri|nt..*...|
|00004df0| 00 00 00 00 4c 17 00 00 | 01 00 1a 5f 52 65 67 6d |....L...|..._Regm|
|00004e00| 6f 6e 55 6e 6d 61 70 53 | 65 72 76 69 63 65 54 61 |onUnmapS|erviceTa|
|00004e10| 62 6c 65 40 34 00 00 00 | 36 00 09 10 00 00 00 00 |ble@4...|6.......|
|00004e20| 24 00 00 00 01 00 26 5f | 5f 69 6d 70 5f 5f 52 74 |$.....&_|_imp__Rt|
|00004e30| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00004e40| 41 6e 73 69 53 74 72 69 | 6e 67 40 31 32 00 00 00 |AnsiStri|ng@12...|
|00004e50| 16 00 09 10 00 00 00 00 | 0a 17 00 00 01 00 07 5f |........|......._|
|00004e60| 77 63 73 6c 65 6e 00 00 | 26 00 09 10 00 00 00 00 |wcslen..|&.......|
|00004e70| 5c 14 00 00 01 00 17 3f | 43 6f 6e 6e 65 63 74 4c |\......?|ConnectL|
|00004e80| 50 43 40 40 59 47 4a 50 | 41 50 41 58 40 5a 00 00 |PC@@YGJP|APAX@Z..|
|00004e90| 26 00 09 10 00 00 00 00 | 22 17 00 00 01 00 18 5f |&.......|"......_|
|00004ea0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00004eb0| 65 73 73 49 64 40 30 00 | 2e 00 09 10 00 00 00 00 |essId@0.|........|
|00004ec0| 4c 01 00 00 01 00 1e 3f | 3f 5f 43 40 5f 30 4c 40 |L......?|?_C@_0L@|
|00004ed0| 4f 4e 44 4b 40 6b 61 76 | 73 76 63 3f 34 65 78 65 |ONDK@kav|svc?4exe|
|00004ee0| 3f 24 41 41 40 00 00 00 | 42 00 09 10 00 00 00 00 |?$AA@...|B.......|
|00004ef0| 22 08 00 00 01 00 32 3f | 43 68 65 63 6b 46 69 6c |".....2?|CheckFil|
|00004f00| 65 4e 61 6d 65 49 73 4e | 65 74 57 6f 72 6b 40 40 |eNameIsN|etWork@@|
|00004f10| 59 47 48 50 41 55 5f 55 | 4e 49 43 4f 44 45 5f 53 |YGHPAU_U|NICODE_S|
|00004f20| 54 52 49 4e 47 40 40 40 | 5a 00 00 00 16 00 09 10 |TRING@@@|Z.......|
|00004f30| 00 00 00 00 46 17 00 00 | 01 00 08 5f 5f 73 74 72 |....F...|...__str|
|00004f40| 6c 77 72 00 16 00 09 10 | 00 00 00 00 10 17 00 00 |lwr.....|........|
|00004f50| 01 00 08 5f 77 63 73 72 | 63 68 72 00 22 00 09 10 |..._wcsr|chr."...|
|00004f60| 00 00 00 00 64 00 00 00 | 01 00 14 5f 5f 69 6d 70 |....d...|...__imp|
|00004f70| 5f 5f 4b 65 53 65 74 45 | 76 65 6e 74 40 31 32 00 |__KeSetE|vent@12.|
|00004f80| 1e 00 09 10 00 00 00 00 | 50 00 00 00 01 00 10 5f |........|P......_|
|00004f90| 5f 69 6d 70 5f 5f 5a 77 | 43 6c 6f 73 65 40 34 00 |_imp__Zw|Close@4.|
|00004fa0| 22 00 09 10 00 00 00 00 | a0 00 00 00 01 00 15 5f |".......|......._|
|00004fb0| 5f 69 6d 70 5f 5f 4d 6d | 43 72 65 61 74 65 4d 64 |_imp__Mm|CreateMd|
|00004fc0| 6c 40 31 32 26 00 09 10 | 00 00 00 00 80 00 00 00 |l@12&...|........|
|00004fd0| 02 00 18 3f 67 5f 6e 46 | 69 6c 74 65 72 50 72 6f |...?g_nF|ilterPro|
|00004fe0| 63 65 73 73 40 40 33 50 | 41 48 41 00 2e 00 09 10 |cess@@3P|AHA.....|
|00004ff0| 00 00 00 00 54 00 00 00 | 02 00 20 3f 4b 65 53 65 |....T...|.. ?KeSe|
|00005000| 72 76 69 63 65 54 61 62 | 6c 65 50 6f 69 6e 74 65 |rviceTab|lePointe|
|00005010| 72 73 40 40 33 50 41 50 | 41 58 41 00 2e 00 09 10 |rs@@3PAP|AXA.....|
|00005020| 00 00 00 00 a4 00 00 00 | 01 00 1f 5f 5f 69 6d 70 |........|...__imp|
|00005030| 5f 5f 4b 65 53 65 72 76 | 69 63 65 44 65 73 63 72 |__KeServ|iceDescr|
|00005040| 69 70 74 6f 72 54 61 62 | 6c 65 00 00 3a 00 09 10 |iptorTab|le..:...|
|00005050| 00 00 00 00 84 03 00 00 | 01 00 2a 3f 49 6e 73 65 |........|..*?Inse|
|00005060| 72 74 46 69 6c 65 4e 61 | 6d 65 40 40 59 47 48 50 |rtFileNa|me@@YGHP|
|00005070| 41 55 74 61 67 46 69 6c | 65 4c 69 73 74 49 74 65 |AUtagFil|eListIte|
|00005080| 6d 40 40 40 5a 00 00 00 | 26 00 09 10 00 00 00 00 |m@@@Z...|&.......|
|00005090| 44 00 00 00 01 00 16 5f | 5f 69 6d 70 5f 5f 5a 77 |D......_|_imp__Zw|
|000050a0| 43 72 65 61 74 65 46 69 | 6c 65 40 34 34 00 00 00 |CreateFi|le@44...|
|000050b0| 1e 00 09 10 00 00 00 00 | 28 00 00 00 01 00 10 5f |........|(......_|
|000050c0| 5f 69 6d 70 5f 5f 5f 77 | 63 73 6e 69 63 6d 70 00 |_imp___w|csnicmp.|
|000050d0| 16 00 09 10 00 00 00 00 | 1c 17 00 00 01 00 08 5f |........|......._|
|000050e0| 77 63 73 6e 63 6d 70 00 | 16 00 09 10 00 00 00 00 |wcsncmp.|........|
|000050f0| 34 17 00 00 01 00 08 5f | 73 74 72 6e 63 6d 70 00 |4......_|strncmp.|
|00005100| 16 00 09 10 00 00 00 00 | 3a 17 00 00 01 00 08 5f |........|:......_|
|00005110| 73 74 72 6e 63 70 79 00 | 2e 00 09 10 00 00 00 00 |strncpy.|........|
|00005120| 30 01 00 00 01 00 20 3f | 3f 5f 43 40 5f 30 4e 40 |0..... ?|?_C@_0N@|
|00005130| 4b 43 4e 41 40 73 65 72 | 76 69 63 65 73 3f 34 65 |KCNA@ser|vices?4e|
|00005140| 78 65 3f 24 41 41 40 00 | 32 00 09 10 00 00 00 00 |xe?$AA@.|2.......|
|00005150| 68 00 00 00 02 00 23 3f | 67 5f 53 69 6e 67 6c 65 |h.....#?|g_Single|
|00005160| 50 72 6f 63 65 73 73 45 | 76 65 6e 74 40 40 33 55 |ProcessE|vent@@3U|
|00005170| 5f 4b 45 56 45 4e 54 40 | 40 41 00 00 26 00 09 10 |_KEVENT@|@A..&...|
|00005180| 00 00 00 00 14 00 00 00 | 03 00 17 5f 5f 49 4d 50 |........|...__IMP|
|00005190| 4f 52 54 5f 44 45 53 43 | 52 49 50 54 4f 52 5f 48 |ORT_DESC|RIPTOR_H|
|000051a0| 41 4c 00 00 26 00 09 10 | 00 00 00 00 28 00 00 00 |AL..&...|....(...|
|000051b0| 03 00 18 5f 5f 4e 55 4c | 4c 5f 49 4d 50 4f 52 54 |...__NUL|L_IMPORT|
|000051c0| 5f 44 45 53 43 52 49 50 | 54 4f 52 00 2a 00 09 10 |_DESCRIP|TOR.*...|
|000051d0| 00 00 00 00 18 00 00 00 | 01 00 1a 5f 5f 69 6d 70 |........|...__imp|
|000051e0| 5f 5f 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |__RtlFre|eAnsiStr|
|000051f0| 69 6e 67 40 34 00 00 00 | 2a 00 09 10 00 00 00 00 |ing@4...|*.......|
|00005200| 40 01 00 00 01 00 1b 3f | 3f 5f 43 40 5f 30 39 49 |@......?|?_C@_09I|
|00005210| 46 42 40 63 73 72 73 73 | 3f 34 65 78 65 3f 24 41 |FB@csrss|?4exe?$A|
|00005220| 41 40 00 00 26 00 09 10 | 00 00 00 00 4c 00 00 00 |A@..&...|....L...|
|00005230| 01 00 18 5f 5f 69 6d 70 | 5f 5f 49 6f 43 72 65 61 |...__imp|__IoCrea|
|00005240| 74 65 44 65 76 69 63 65 | 40 32 38 00 12 00 02 04 |teDevice|@28.....|
|00005250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00005260| 2a 00 09 10 00 00 00 00 | 00 00 00 00 03 00 1c 5f |*.......|......._|
|00005270| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00005280| 4f 52 5f 6e 74 6f 73 6b | 72 6e 6c 00 1e 00 09 10 |OR_ntosk|rnl.....|
|00005290| 00 00 00 00 38 00 00 00 | 02 00 0e 3f 67 5f 6e 44 |....8...|...?g_nD|
|000052a0| 65 62 75 67 40 40 33 48 | 41 00 00 00 26 00 09 10 |ebug@@3H|A...&...|
|000052b0| 00 00 00 00 3f 15 00 00 | 01 00 17 3f 49 6e 69 74 |....?...|...?Init|
|000052c0| 50 72 6f 63 65 73 73 4e | 61 6d 65 40 40 59 47 58 |ProcessN|ame@@YGX|
|000052d0| 58 5a 00 00 1e 00 09 10 | 00 00 00 00 74 00 00 00 |XZ......|....t...|
|000052e0| 01 00 0e 5f 5f 69 6d 70 | 5f 5f 73 74 72 6e 63 6d |...__imp|__strncm|
|000052f0| 70 00 00 00 2a 00 09 10 | 00 00 00 00 58 00 00 00 |p...*...|....X...|
|00005300| 01 00 1b 5f 5f 69 6d 70 | 5f 5f 4b 65 49 6e 69 74 |...__imp|__KeInit|
|00005310| 69 61 6c 69 7a 65 45 76 | 65 6e 74 40 31 32 00 00 |ializeEv|ent@12..|
|00005320| 26 00 09 10 00 00 00 00 | 8c 00 00 00 01 00 17 5f |&.......|......._|
|00005330| 5f 69 6d 70 5f 5f 49 6f | 44 65 6c 65 74 65 44 65 |_imp__Io|DeleteDe|
|00005340| 76 69 63 65 40 34 00 00 | 3e 00 09 10 00 00 00 00 |vice@4..|>.......|
|00005350| c9 04 00 00 01 00 2f 3f | 47 65 74 4e 6f 55 73 65 |....../?|GetNoUse|
|00005360| 46 69 6c 65 4c 69 73 74 | 49 74 65 6d 40 40 59 47 |FileList|Item@@YG|
|00005370| 50 41 55 74 61 67 46 69 | 6c 65 4c 69 73 74 49 74 |PAUtagFi|leListIt|
|00005380| 65 6d 40 40 58 5a 00 00 | 32 00 09 10 00 00 00 00 |em@@XZ..|2.......|
|00005390| dc 08 00 00 01 00 24 3f | 44 65 62 75 67 50 72 6f |......$?|DebugPro|
|000053a0| 63 65 73 73 46 69 6c 65 | 40 40 59 47 58 50 41 55 |cessFile|@@YGXPAU|
|000053b0| 5f 53 54 52 49 4e 47 40 | 40 40 5a 00 22 00 09 10 |_STRING@|@@Z."...|
|000053c0| 00 00 00 00 20 02 00 00 | 01 00 14 3f 49 6e 69 74 |.... ...|...?Init|
|000053d0| 46 69 6c 65 4c 69 73 74 | 40 40 59 47 48 58 5a 00 |FileList|@@YGHXZ.|
|000053e0| 1e 00 09 10 00 00 00 00 | 38 00 00 00 01 00 0e 5f |........|8......_|
|000053f0| 5f 69 6d 70 5f 5f 77 63 | 73 6e 63 6d 70 00 00 00 |_imp__wc|sncmp...|
|00005400| 1e 00 09 10 00 00 00 00 | 10 00 00 00 01 00 11 5f |........|......._|
|00005410| 5f 69 6d 70 5f 5f 5f 76 | 73 6e 70 72 69 6e 74 66 |_imp___v|snprintf|
|00005420| 22 00 09 10 00 00 00 00 | 08 00 00 00 01 00 14 7f |".......|........|
|00005430| 48 41 4c 5f 4e 55 4c 4c | 5f 54 48 55 4e 4b 5f 44 |HAL_NULL|_THUNK_D|
|00005440| 41 54 41 00 26 00 09 10 | 00 00 00 00 a8 00 00 00 |ATA.&...|........|
|00005450| 01 00 19 7f 6e 74 6f 73 | 6b 72 6e 6c 5f 4e 55 4c |....ntos|krnl_NUL|
|00005460| 4c 5f 54 48 55 4e 4b 5f | 44 41 54 41 2a 00 09 10 |L_THUNK_|DATA*...|
|00005470| 00 00 00 00 20 00 00 00 | 01 00 1d 5f 5f 69 6d 70 |.... ...|...__imp|
|00005480| 5f 5f 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |__RtlIni|tUnicode|
|00005490| 53 74 72 69 6e 67 40 38 | 16 00 09 10 00 00 00 00 |String@8|........|
|000054a0| f2 16 00 00 01 00 09 5f | 44 62 67 50 72 69 6e 74 |......._|DbgPrint|
|000054b0| 2e 00 09 10 00 00 00 00 | f0 07 00 00 01 00 20 3f |........|...... ?|
|000054c0| 43 68 65 63 6b 46 69 6c | 65 54 79 70 65 49 6e 56 |CheckFil|eTypeInV|
|000054d0| 61 6c 69 64 61 74 65 40 | 40 59 47 48 4b 40 5a 00 |alidate@|@YGHK@Z.|
|000054e0| 1a 00 09 10 00 00 00 00 | 2c 00 00 00 01 00 0d 5f |........|,......_|
|000054f0| 5f 69 6d 70 5f 5f 77 63 | 73 6c 65 6e 2e 00 09 10 |_imp__wc|slen....|
|00005500| 00 00 00 00 5c 00 00 00 | 01 00 1e 5f 5f 69 6d 70 |....\...|...__imp|
|00005510| 5f 5f 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |__PsGetC|urrentPr|
|00005520| 6f 63 65 73 73 49 64 40 | 30 00 00 00 2a 00 09 10 |ocessId@|0...*...|
|00005530| 00 00 00 00 78 00 00 00 | 01 00 1c 5f 5f 69 6d 70 |....x...|...__imp|
|00005540| 5f 5f 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |__IoGetC|urrentPr|
|00005550| 6f 63 65 73 73 40 30 00 | 2a 00 09 10 00 00 00 00 |ocess@0.|*.......|
|00005560| 5c 00 00 00 02 00 1c 3f | 67 5f 70 66 6e 4f 6c 64 |\......?|g_pfnOld|
|00005570| 4e 74 43 72 65 61 74 65 | 46 69 6c 65 40 40 33 50 |NtCreate|File@@3P|
|00005580| 41 4a 41 00 1e 00 09 10 | 00 00 00 00 1c 00 00 00 |AJA.....|........|
|00005590| 01 00 10 5f 5f 69 6d 70 | 5f 5f 5f 73 74 72 6e 69 |...__imp|___strni|
|000055a0| 63 6d 70 00 26 00 09 10 | 00 00 00 00 50 00 00 00 |cmp.&...|....P...|
|000055b0| 02 00 17 3f 53 65 72 76 | 69 63 65 49 73 48 6f 6f |...?Serv|iceIsHoo|
|000055c0| 6b 65 64 40 40 33 50 41 | 45 41 00 00 32 00 09 10 |ked@@3PA|EA..2...|
|000055d0| 00 00 00 00 58 01 00 00 | 01 00 25 3f 3f 5f 43 40 |....X...|..%??_C@|
|000055e0| 5f 30 42 42 40 4c 43 45 | 4a 40 6b 77 61 74 63 68 |_0BB@LCE|J@kwatch|
|000055f0| 66 6e 74 65 73 74 3f 34 | 65 78 65 3f 24 41 41 40 |fntest?4|exe?$AA@|
|00005600| 2a 00 09 10 00 00 00 00 | 00 00 00 00 01 00 1a 5f |*.......|......._|
|00005610| 5f 69 6d 70 5f 40 4b 66 | 41 63 71 75 69 72 65 53 |_imp_@Kf|AcquireS|
|00005620| 70 69 6e 4c 6f 63 6b 40 | 34 00 00 00 2a 00 09 10 |pinLock@|4...*...|
|00005630| 00 00 00 00 44 00 00 00 | 02 00 1b 3f 67 5f 6e 46 |....D...|...?g_nF|
|00005640| 69 6c 65 4c 69 73 74 4d | 65 6d 6f 72 79 53 69 7a |ileListM|emorySiz|
|00005650| 65 40 40 33 48 41 00 00 | 22 00 09 10 00 00 00 00 |e@@3HA..|".......|
|00005660| 58 00 00 00 02 00 14 3f | 67 5f 62 48 6f 6f 6b 53 |X......?|g_bHookS|
|00005670| 79 73 43 61 6c 6c 40 40 | 33 45 41 00 06 00 02 04 |ysCall@@|3EA.....|
|00005680| ff ff ff ff 0c 00 00 00 | 00 00 00 00 48 00 00 00 |........|....H...|
|00005690| b0 00 00 00 e0 00 00 00 | 40 01 00 00 78 01 00 00 |........|@...x...|
|000056a0| c0 01 00 00 18 02 00 00 | 50 02 00 00 a0 02 00 00 |........|P.......|
|000056b0| f8 02 00 00 40 03 00 00 | 09 00 00 00 0d 00 00 00 |....@...|........|
|000056c0| 06 00 00 00 0c 00 00 00 | 07 00 00 00 09 00 00 00 |........|........|
|000056d0| 0b 00 00 00 07 00 00 00 | 0a 00 00 00 0b 00 00 00 |........|........|
|000056e0| 09 00 00 00 11 00 00 00 | 28 00 00 00 50 c0 7f 33 |........|(...P..3|
|000056f0| cc 00 00 00 84 d0 4b ef | f0 03 00 00 a4 24 dc 7e |......K.|.....$.~|
|00005700| 38 06 00 00 90 c6 c3 87 | 58 0c 00 00 38 2a 16 30 |8.......|X...8*.0|
|00005710| 8c 0d 00 00 24 2b 48 b9 | 6c 0f 00 00 78 ec f1 d5 |....$+H.|l...x...|
|00005720| 98 0f 00 00 a8 fc 95 9d | 28 11 00 00 80 cd d6 53 |........|(......S|
|00005730| a0 02 00 00 d9 d2 11 4f | e4 02 00 00 1d 13 52 57 |.......O|......RW|
|00005740| 38 03 00 00 6d a3 ea da | 8c 03 00 00 c1 e3 63 5e |8...m...|......c^|
|00005750| 18 04 00 00 b5 c4 26 ae | 54 09 00 00 1d 48 8a 2f |......&.|T....H./|
|00005760| 6c 0b 00 00 b5 99 e0 bb | 08 0c 00 00 fd 79 a3 49 |l.......|.....y.I|
|00005770| 00 10 00 00 b5 8c 72 1c | 2c 10 00 00 c1 fc 71 82 |......r.|,.....q.|
|00005780| a0 11 00 00 c9 cd 1d a0 | 0c 12 00 00 e9 4d 98 91 |........|.....M..|
|00005790| 50 12 00 00 a1 6e 87 90 | b0 03 00 00 c2 d3 9f 8f |P....n..|........|
|000057a0| c0 06 00 00 ca 86 1f fa | b8 09 00 00 42 98 c9 1b |........|....B...|
|000057b0| 8c 0b 00 00 d2 59 1a d3 | 70 0e 00 00 b6 6b 83 47 |.....Y..|p....k.G|
|000057c0| c4 0f 00 00 ae cc 30 74 | 54 00 00 00 63 60 69 69 |......0t|T...c`ii|
|000057d0| 90 01 00 00 7f 01 e3 4a | a0 06 00 00 bf b6 dd 0f |.......J|........|
|000057e0| 38 08 00 00 83 f7 c6 66 | 80 0a 00 00 e7 e8 00 a7 |8......f|........|
|000057f0| 30 0c 00 00 17 0a 04 3b | 40 0d 00 00 93 da c0 df |0......;|@.......|
|00005800| a0 0e 00 00 b7 6b 57 c1 | b8 0e 00 00 c7 4b ce e1 |.....kW.|.....K..|
|00005810| 74 10 00 00 c3 cc 1f fe | e4 11 00 00 df 6d b2 4b |t.......|.....m.K|
|00005820| 24 13 00 00 67 2f 2a fc | 74 02 00 00 c0 02 67 31 |$...g/*.|t.....g1|
|00005830| 3c 04 00 00 cc 24 47 cb | 00 06 00 00 90 36 12 10 |<....$G.|.....6..|
|00005840| 60 06 00 00 94 06 06 4e | fc 0a 00 00 34 d9 5c 39 |`......N|....4.\9|
|00005850| 64 0d 00 00 f0 fa 9e d9 | 6c 13 00 00 b4 0f c3 4c |d.......|l......L|
|00005860| 04 07 00 00 dd 56 cc 97 | 60 07 00 00 f5 26 61 66 |.....V..|`....&af|
|00005870| 90 07 00 00 61 67 85 0b | ac 0a 00 00 0d 59 59 18 |....ag..|.....YY.|
|00005880| d0 0a 00 00 11 39 d8 5a | f0 0b 00 00 f5 39 70 7a |.....9.Z|.....9pz|
|00005890| cc 0c 00 00 71 9a 2b 76 | fc 0c 00 00 81 8a d2 9b |....q.+v|........|
|000058a0| 28 0e 00 00 4d 6b 85 cf | 40 01 00 00 52 e1 e7 6b |(...Mk..|@...R..k|
|000058b0| 68 01 00 00 6a 01 80 86 | b8 01 00 00 b2 c1 e0 2f |h...j...|......./|
|000058c0| 58 02 00 00 b6 c2 9f 8f | b8 04 00 00 32 f5 a6 be |X.......|....2...|
|000058d0| f4 07 00 00 82 e7 6d df | b4 08 00 00 d6 c7 04 15 |......m.|........|
|000058e0| 50 0b 00 00 a2 19 52 1c | e8 0e 00 00 ce 1b 5a ca |P.....R.|......Z.|
|000058f0| a0 13 00 00 c6 1f ea 32 | f8 13 00 00 ca 2f 34 53 |.......2|...../4S|
|00005900| 60 04 00 00 e3 c4 e0 b9 | dc 04 00 00 97 75 04 d7 |`.......|.....u..|
|00005910| 08 05 00 00 b3 25 9b e3 | 88 08 00 00 c7 e7 29 01 |.....%..|......).|
|00005920| 50 0e 00 00 67 2b 3d fd | 88 0e 00 00 b7 6b 87 50 |P...g+=.|.....k.P|
|00005930| c0 11 00 00 df 0d 55 d0 | 00 00 00 00 20 d0 8b 1c |......U.|.... ...|
|00005940| 58 03 00 00 80 43 35 4b | cc 03 00 00 84 74 f0 f3 |X....C5K|.....t..|
|00005950| 40 07 00 00 f4 76 61 20 | bc 07 00 00 70 f7 9b 67 |@....va |....p..g|
|00005960| 20 0b 00 00 54 19 57 e5 | 44 0f 00 00 fc db 9f f8 | ...T.W.|D.......|
|00005970| 94 10 00 00 00 ad 36 e4 | e8 10 00 00 48 4d d5 84 |......6.|....HM..|
|00005980| 9c 12 00 00 d8 ae dc c7 | 04 02 00 00 e9 a1 01 91 |........|........|
|00005990| 2c 02 00 00 a9 b2 0a 66 | 10 03 00 00 31 c3 02 9c |,......f|....1...|
|000059a0| 78 07 00 00 f5 66 11 77 | 10 0a 00 00 b5 f8 1f 62 |x....f.w|.......b|
|000059b0| bc 0d 00 00 29 db 88 ed | ec 0d 00 00 45 6b 1f ea |....)...|....Ek..|
|000059c0| 5c 11 00 00 b5 5d a0 a6 | cc 12 00 00 dd ee 85 86 |\....]..|........|
|000059d0| f8 12 00 00 e9 de df d2 | cc 13 00 00 c9 9f 27 00 |........|......'.|
|000059e0| a8 00 00 00 82 b0 33 a6 | b4 05 00 00 7a 06 6e 2a |......3.|....z.n*|
|000059f0| 5c 0a 00 00 de f8 f1 d9 | b8 0b 00 00 d2 89 56 45 |\.......|......VE|
|00005a00| e4 0c 00 00 76 6a d3 67 | 20 0d 00 00 92 4a ed a2 |....vj.g| ....J..|
|00005a10| 1c 0f 00 00 e6 8b d6 1e | 4c 10 00 00 c2 fc 79 97 |........|L.....y.|
|00005a20| c0 10 00 00 1e 0d 61 9b | 84 00 00 00 6f 20 46 ef |......a.|....o F.|
|00005a30| 18 01 00 00 87 a0 97 2a | e4 01 00 00 c3 d1 16 fe |.......*|........|
|00005a40| 8c 04 00 00 0b c5 28 f6 | 38 05 00 00 b7 15 2e 85 |......(.|8.......|
|00005a50| 54 05 00 00 0b 46 0d 28 | 84 05 00 00 53 86 ae 61 |T....F.(|....S..a|
|00005a60| d8 07 00 00 77 f7 9b 63 | 64 08 00 00 87 87 4c 1f |....w..c|d.....L.|
|00005a70| 28 09 00 00 07 f8 3c 3e | 84 09 00 00 37 f8 0e 63 |(.....<>|....7..c|
|00005a80| 3c 0a 00 00 b7 d8 dd ff | 88 0c 00 00 3f fa 7c e7 |<.......|....?.|.|
|00005a90| 80 11 00 00 b7 dd 1f fe | 38 12 00 00 43 2e d1 a6 |........|8...C...|
|00005aa0| 80 12 00 00 b7 de 6f 9e | 44 13 00 00 a3 ff ad f8 |......o.|D.......|
|00005ab0| 03 00 00 00 00 00 00 00 | 20 03 00 00 b0 03 00 00 |........| .......|
|00005ac0| 64 00 00 00 12 00 00 00 | 03 00 00 00 a0 13 00 00 |d.......|........|
|00005ad0| 00 00 00 00 74 02 00 00 | 04 00 00 00 c0 11 00 00 |....t...|........|
|00005ae0| 08 00 00 00 6c 0b 00 00 | 0c 00 00 00 a0 11 00 00 |....l...|........|
|00005af0| 10 00 00 00 ac 0a 00 00 | 14 00 00 00 6c 0f 00 00 |........|....l...|
|00005b00| 18 00 00 00 24 13 00 00 | 1c 00 00 00 0c 12 00 00 |....$...|........|
|00005b10| 20 00 00 00 b8 0b 00 00 | 24 00 00 00 50 0e 00 00 | .......|$...P...|
|00005b20| 28 00 00 00 80 12 00 00 | 2c 00 00 00 3c 0a 00 00 |(.......|,...<...|
|00005b30| 30 00 00 00 58 02 00 00 | 34 00 00 00 80 11 00 00 |0...X...|4.......|
|00005b40| 38 00 00 00 a8 00 00 00 | 3c 00 00 00 28 09 00 00 |8.......|<...(...|
|00005b50| 40 00 00 00 28 0e 00 00 | 44 00 00 00 54 05 00 00 |@...(...|D...T...|
|00005b60| 48 00 00 00 c4 0f 00 00 | 4c 00 00 00 20 0d 00 00 |H.......|L... ...|
|00005b70| 50 00 00 00 dc 04 00 00 | 54 00 00 00 94 10 00 00 |P.......|T.......|
|00005b80| 58 00 00 00 9c 12 00 00 | 5c 00 00 00 38 08 00 00 |X.......|\...8...|
|00005b90| 60 00 00 00 fc 0c 00 00 | 64 00 00 00 84 05 00 00 |`.......|d.......|
|00005ba0| 68 00 00 00 54 00 00 00 | 6c 00 00 00 90 01 00 00 |h...T...|l.......|
|00005bb0| 70 00 00 00 74 10 00 00 | 74 00 00 00 cc 12 00 00 |p...t...|t.......|
|00005bc0| 78 00 00 00 e4 01 00 00 | 7c 00 00 00 b0 03 00 00 |x.......||.......|
|00005bd0| 80 00 00 00 a0 06 00 00 | 84 00 00 00 80 0a 00 00 |........|........|
|00005be0| 88 00 00 00 c0 10 00 00 | 8c 00 00 00 e4 02 00 00 |........|........|
|00005bf0| 90 00 00 00 28 00 00 00 | 94 00 00 00 68 01 00 00 |....(...|....h...|
|00005c00| 98 00 00 00 84 09 00 00 | 9c 00 00 00 40 0d 00 00 |........|....@...|
|00005c10| a0 00 00 00 04 02 00 00 | a4 00 00 00 bc 0d 00 00 |........|........|
|00005c20| a4 00 00 00 e4 11 00 00 | a8 00 00 00 20 0b 00 00 |........|.... ...|
|00005c30| 04 01 00 00 54 09 00 00 | 14 01 00 00 90 07 00 00 |....T...|........|
|00005c40| 24 01 00 00 b8 0e 00 00 | 30 01 00 00 98 0f 00 00 |$.......|0.......|
|00005c50| 40 01 00 00 58 0c 00 00 | 4c 01 00 00 6c 13 00 00 |@...X...|L...l...|
|00005c60| 58 01 00 00 60 04 00 00 | 6c 01 00 00 08 05 00 00 |X...`...|l.......|
|00005c70| 78 01 00 00 00 00 00 00 | a4 01 00 00 5c 11 00 00 |x.......|....\...|
|00005c80| 20 02 00 00 10 03 00 00 | 50 02 00 00 60 06 00 00 | .......|P...`...|
|00005c90| a0 02 00 00 ec 0d 00 00 | 84 03 00 00 b8 01 00 00 |........|........|
|00005ca0| 25 04 00 00 e8 10 00 00 | c9 04 00 00 04 07 00 00 |%.......|........|
|00005cb0| 62 05 00 00 a0 02 00 00 | e8 05 00 00 f4 07 00 00 |b.......|........|
|00005cc0| c8 06 00 00 50 12 00 00 | f0 07 00 00 88 0c 00 00 |....P...|........|
|00005cd0| 22 08 00 00 28 11 00 00 | dc 08 00 00 b8 04 00 00 |"...(...|........|
|00005ce0| 50 09 00 00 84 00 00 00 | e0 09 00 00 b4 08 00 00 |P.......|........|
|00005cf0| 90 0a 00 00 b8 09 00 00 | 50 0b 00 00 cc 00 00 00 |........|P.......|
|00005d00| a5 0c 00 00 c0 06 00 00 | b0 0d 00 00 00 06 00 00 |........|........|
|00005d10| 88 0e 00 00 64 08 00 00 | 8b 0f 00 00 cc 03 00 00 |....d...|........|
|00005d20| fc 10 00 00 b4 05 00 00 | 78 12 00 00 08 0c 00 00 |........|x.......|
|00005d30| 5c 14 00 00 10 0a 00 00 | 10 15 00 00 4c 10 00 00 |\.......|....L...|
|00005d40| 3f 15 00 00 f0 03 00 00 | 90 15 00 00 fc 0a 00 00 |?.......|........|
|00005d50| d0 15 00 00 38 06 00 00 | 00 16 00 00 3c 04 00 00 |....8...|....<...|
|00005d60| 41 16 00 00 38 12 00 00 | f2 16 00 00 38 05 00 00 |A...8...|....8...|
|00005d70| f8 16 00 00 bc 07 00 00 | fe 16 00 00 d8 07 00 00 |........|........|
|00005d80| 04 17 00 00 f0 0b 00 00 | 0a 17 00 00 e4 0c 00 00 |........|........|
|00005d90| 10 17 00 00 60 07 00 00 | 16 17 00 00 70 0e 00 00 |....`...|....p...|
|00005da0| 1c 17 00 00 30 0c 00 00 | 22 17 00 00 2c 02 00 00 |....0...|"...,...|
|00005db0| 28 17 00 00 38 03 00 00 | 2e 17 00 00 88 0e 00 00 |(...8...|........|
|00005dc0| 34 17 00 00 a0 0e 00 00 | 3a 17 00 00 78 07 00 00 |4.......|:...x...|
|00005dd0| 40 17 00 00 cc 0c 00 00 | 46 17 00 00 8c 0b 00 00 |@.......|F.......|
|00005de0| 4c 17 00 00 40 01 00 00 | 70 17 00 00 5c 0a 00 00 |L...@...|p...\...|
|00005df0| 00 00 00 00 18 01 00 00 | 04 00 00 00 50 0b 00 00 |........|....P...|
|00005e00| 28 00 00 00 2c 10 00 00 | 38 00 00 00 8c 04 00 00 |(...,...|8.......|
|00005e10| 40 00 00 00 cc 13 00 00 | 44 00 00 00 58 03 00 00 |@.......|D...X...|
|00005e20| 48 00 00 00 44 13 00 00 | 50 00 00 00 8c 0d 00 00 |H...D...|P.......|
|00005e30| 54 00 00 00 f8 13 00 00 | 58 00 00 00 f8 12 00 00 |T.......|X.......|
|00005e40| 5c 00 00 00 88 08 00 00 | 60 00 00 00 e8 0e 00 00 |\.......|`.......|
|00005e50| 68 00 00 00 8c 03 00 00 | 78 00 00 00 40 07 00 00 |h.......|x...@...|
|00005e60| 7c 00 00 00 64 0d 00 00 | 80 00 00 00 d0 0a 00 00 ||...d...|........|
|00005e70| d0 00 00 00 18 04 00 00 | d4 00 00 00 00 10 00 00 |........|........|
|00005e80| 00 00 00 00 1c 0f 00 00 | 14 00 00 00 44 0f 00 00 |........|....D...|
|00005e90| 28 00 00 00 0a 00 0c 00 | f8 00 00 00 ac 00 00 00 |(.......|........|
|00005ea0| 84 00 00 00 0e 00 00 04 | 60 d0 83 85 48 00 00 00 |........|`...H...|
|00005eb0| 19 00 00 00 0e 00 00 04 | 74 70 7a c5 48 00 00 00 |........|tpz.H...|
|00005ec0| 29 00 00 00 0e 00 00 04 | 35 11 77 35 48 00 00 00 |).......|5.w5H...|
|00005ed0| 13 00 00 00 0e 00 00 04 | 75 d1 a6 03 48 00 00 00 |........|u...H...|
|00005ee0| 30 00 00 00 0e 00 00 04 | 75 61 66 35 48 00 00 00 |0.......|uaf5H...|
|00005ef0| 27 00 00 00 0e 00 00 04 | 73 03 62 48 48 00 00 00 |'.......|s.bHH...|
|00005f00| 1c 00 00 00 0e 00 00 04 | 34 06 68 b5 48 00 00 00 |........|4.h.H...|
|00005f10| 16 00 00 00 0e 00 00 04 | 34 06 75 bc 48 00 00 00 |........|4.u.H...|
|00005f20| 14 00 00 00 0e 00 00 04 | 74 76 79 b5 48 00 00 00 |........|tvy.H...|
|00005f30| 26 00 00 00 0e 00 00 04 | 75 76 7c 77 48 00 00 00 |&.......|uv|wH...|
|00005f40| 28 00 00 00 0e 00 00 04 | f5 79 12 77 48 00 00 00 |(.......|.y.wH...|
|00005f50| 12 00 00 00 0e 00 00 04 | b6 9b 67 80 48 00 00 00 |........|..g.H...|
|00005f60| 2c 00 00 00 0e 00 00 04 | b7 9b 63 97 48 00 00 00 |,.......|..c.H...|
|00005f70| 2a 00 00 00 0e 00 00 04 | f2 bb ce 54 48 00 00 00 |*.......|...TH...|
|00005f80| 17 00 00 00 0e 00 00 04 | 4a 2e 85 b7 48 00 00 00 |........|J...H...|
|00005f90| 2f 00 00 00 06 00 02 04 | ff ff ff ff 06 00 00 00 |/.......|........|
|00005fa0| 00 00 00 00 08 00 00 00 | 10 00 00 00 20 00 00 00 |........|.... ...|
|00005fb0| 40 00 00 00 68 00 00 00 | 01 00 00 00 01 00 00 00 |@...h...|........|
|00005fc0| 02 00 00 00 04 00 00 00 | 05 00 00 00 02 00 00 00 |........|........|
|00005fd0| 70 00 00 00 34 06 75 bc | 90 00 00 00 75 76 7c 77 |p...4.u.|....uv|w|
|00005fe0| 80 00 00 00 74 76 79 b5 | d0 00 00 00 f2 bb ce 54 |....tvy.|.......T|
|00005ff0| 30 00 00 00 75 d1 a6 03 | 40 00 00 00 75 61 66 35 |0...u...|@...uaf5|
|00006000| 50 00 00 00 73 03 62 48 | c0 00 00 00 b7 9b 63 97 |P...s.bH|......c.|
|00006010| 00 00 00 00 60 d0 83 85 | 10 00 00 00 74 70 7a c5 |....`...|....tpz.|
|00006020| 60 00 00 00 34 06 68 b5 | b0 00 00 00 b6 9b 67 80 |`...4.h.|......g.|
|00006030| e0 00 00 00 4a 2e 85 b7 | 20 00 00 00 35 11 77 35 |....J...| ...5.w5|
|00006040| a0 00 00 00 f5 79 12 77 | 01 00 00 00 00 00 00 00 |.....y.w|........|
|00006050| 0f 00 00 00 30 00 00 00 | f2 16 00 00 e0 00 00 00 |....0...|........|
|00006060| f8 16 00 00 b0 00 00 00 | fe 16 00 00 c0 00 00 00 |........|........|
|00006070| 04 17 00 00 10 00 00 00 | 0a 17 00 00 90 00 00 00 |........|........|
|00006080| 10 17 00 00 40 00 00 00 | 16 17 00 00 80 00 00 00 |....@...|........|
|00006090| 1c 17 00 00 50 00 00 00 | 22 17 00 00 00 00 00 00 |....P...|".......|
|000060a0| 28 17 00 00 d0 00 00 00 | 2e 17 00 00 60 00 00 00 |(.......|....`...|
|000060b0| 34 17 00 00 70 00 00 00 | 3a 17 00 00 20 00 00 00 |4...p...|:... ...|
|000060c0| 40 17 00 00 a0 00 00 00 | 46 17 00 00 00 00 00 00 |@.......|F.......|
|000060d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 21 64 3a |........|.....!d:|
|000060e0| 5c 4e 54 44 44 4b 5c 6c | 69 62 66 72 65 5c 69 33 |\NTDDK\l|ibfre\i3|
|000060f0| 38 36 5c 6e 74 6f 73 6b | 72 6e 6c 2e 6c 69 62 1c |86\ntosk|rnl.lib.|
|00006100| 64 3a 5c 4e 54 44 44 4b | 5c 6c 69 62 66 72 65 5c |d:\NTDDK|\libfre\|
|00006110| 69 33 38 36 5c 68 61 6c | 2e 6c 69 62 1f 64 3a 5c |i386\hal|.lib.d:\|
|00006120| 4e 54 44 44 4b 5c 6c 69 | 62 66 72 65 5c 69 33 38 |NTDDK\li|bfre\i38|
|00006130| 36 5c 77 6d 69 6c 69 62 | 2e 6c 69 62 0b 72 65 67 |6\wmilib|.lib.reg|
|00006140| 6d 6c 69 62 2e 6c 69 62 | 0d 2e 5c 52 45 47 4d 4c |mlib.lib|..\REGML|
|00006150| 49 42 2e 4c 49 42 00 00 | 02 00 00 00 00 00 00 00 |IB.LIB..|........|
|00006160| 05 00 05 00 0d 01 00 00 | 00 00 01 00 ff ff ff ff |........|........|
|00006170| 00 00 00 00 e6 17 00 00 | 0b 01 00 00 00 00 02 00 |........|........|
|00006180| ff ff ff ff 00 00 00 00 | d8 00 00 00 0f 01 00 00 |........|........|
|00006190| 00 00 03 00 ff ff ff ff | 00 00 00 00 dc 03 00 00 |........|........|
|000061a0| 09 01 00 00 00 00 04 00 | ff ff ff ff 00 00 00 00 |........|........|
|000061b0| 0c 02 00 00 08 02 00 00 | 00 00 00 00 ff ff ff ff |........|........|
|000061c0| 00 00 00 00 ff ff ff ff | 10 00 0c 00 70 00 00 00 |........|....p...|
|000061d0| 00 00 00 00 00 00 00 00 | 20 01 01 00 08 00 00 00 |........| .......|
|000061e0| 56 00 00 00 20 01 02 00 | 60 00 00 00 2e 00 00 00 |V... ...|`.......|
|000061f0| 20 01 03 00 90 00 00 00 | 3d 00 00 00 20 01 04 00 | .......|=... ...|
|00006200| d0 00 00 00 2d 00 00 00 | 20 01 05 00 00 01 00 00 |....-...| .......|
|00006210| 3a 00 00 00 20 01 06 00 | 3c 01 00 00 2d 00 00 00 |:... ...|<...-...|
|00006220| 20 01 07 00 6c 01 00 00 | 33 00 00 00 20 01 08 00 | ...l...|3... ...|
|00006230| a0 01 00 00 3f 00 00 00 | 20 01 09 00 e0 01 00 00 |....?...| .......|
|00006240| 3c 00 00 00 20 01 0a 00 | 1c 02 00 00 39 00 00 00 |<... ...|....9...|
|00006250| 20 01 0b 00 58 02 00 00 | 39 00 00 00 20 01 0c 00 | ...X...|9... ...|
|00006260| 94 02 00 00 39 00 00 00 | 20 01 0d 00 d0 02 00 00 |....9...| .......|
|00006270| 39 00 00 00 20 01 0e 00 | 0c 03 00 00 39 00 00 00 |9... ...|....9...|
|00006280| 20 01 0f 00 48 03 00 00 | 2d 00 00 00 20 01 10 00 | ...H...|-... ...|
|00006290| 78 03 00 00 21 00 00 00 | 20 01 11 00 9c 03 00 00 |x...!...| .......|
|000062a0| 2d 00 00 00 20 01 12 00 | cc 03 00 00 45 00 00 00 |-... ...|....E...|
|000062b0| 20 01 13 00 14 04 00 00 | 45 00 00 00 20 01 14 00 | .......|E... ...|
|000062c0| 5c 04 00 00 45 00 00 00 | 20 01 15 00 a4 04 00 00 |\...E...| .......|
|000062d0| 39 00 00 00 20 01 16 00 | e0 04 00 00 45 00 00 00 |9... ...|....E...|
|000062e0| 20 01 17 00 28 05 00 00 | 45 00 00 00 20 01 18 00 | ...(...|E... ...|
|000062f0| 70 05 00 00 39 00 00 00 | 20 01 19 00 ac 05 00 00 |p...9...| .......|
|00006300| 45 00 00 00 20 01 1a 00 | f4 05 00 00 39 00 00 00 |E... ...|....9...|
|00006310| 20 01 1b 00 30 06 00 00 | 39 00 00 00 20 01 1c 00 | ...0...|9... ...|
|00006320| 6c 06 00 00 45 00 00 00 | 20 01 1d 00 b4 06 00 00 |l...E...| .......|
|00006330| 39 00 00 00 20 01 1e 00 | f0 06 00 00 39 00 00 00 |9... ...|....9...|
|00006340| 20 01 1f 00 2c 07 00 00 | 39 00 00 00 20 01 20 00 | ...,...|9... . .|
|00006350| 68 07 00 00 39 00 00 00 | 20 01 21 00 a4 07 00 00 |h...9...| .!.....|
|00006360| 39 00 00 00 20 01 22 00 | e0 07 00 00 39 00 00 00 |9... .".|....9...|
|00006370| 20 01 23 00 1c 08 00 00 | 39 00 00 00 20 01 24 00 | .#.....|9... .$.|
|00006380| 58 08 00 00 39 00 00 00 | 20 01 25 00 94 08 00 00 |X...9...| .%.....|
|00006390| 39 00 00 00 20 01 26 00 | d0 08 00 00 45 00 00 00 |9... .&.|....E...|
|000063a0| 20 01 27 00 18 09 00 00 | 45 00 00 00 20 01 28 00 | .'.....|E... .(.|
|000063b0| 60 09 00 00 45 00 00 00 | 20 01 29 00 a8 09 00 00 |`...E...| .).....|
|000063c0| 45 00 00 00 20 01 2a 00 | f0 09 00 00 45 00 00 00 |E... .*.|....E...|
|000063d0| 20 01 2b 00 38 0a 00 00 | 39 00 00 00 20 01 2c 00 | .+.8...|9... .,.|
|000063e0| 74 0a 00 00 45 00 00 00 | 20 01 2d 00 bc 0a 00 00 |t...E...| .-.....|
|000063f0| 39 00 00 00 20 01 2e 00 | f8 0a 00 00 39 00 00 00 |9... ...|....9...|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.