home *** CD-ROM | disk | FTP | other *** search
/ PC World 2007 July & August / PCWorld_2007-07-08_cd.bin / v cisle / tcpview / TcpView.exe / Tcpview.exe / BINRES / RCDRIVERNT
Microsoft Windows Dynamic Link Library  |  2006-11-01  |  10.5 KB

open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was processed as: Microsoft Windows Dynamic Link Library (executable/dll).

You can browse this item here: RCDRIVERNT

ConfidenceProgramDetectionMatch TypeSupport
100% dexvert Microsoft Windows Dynamic Link Library (executable/dll) magic Supported
100% dexvert MS-DOS/Windows or OS/2 Executable (executable/exe) magic Supported
100% file PE32 executable for MS Windows 4.00 (native), Intel i386, 4 sections default
99% file data default
34% TrID Win32 Dynamic Link Library (generic) default
23% TrID Win32 Executable (generic) default
10% TrID Windows Icons Library (generic) default (weak)
10% TrID OS/2 Executable (generic) default
10% TrID Generic Win/DOS Executable default
100% siegfried fmt/899 Windows Portable Executable (32 bit) default
100% gt2 Ist eine ausf�hrbare Win32 Datei default
100% binwalkID Microsoft executable, portable (PE) default
100% xdgMime application/vnd.microsoft.portable-executable default (weak)



hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 c0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| ff e6 01 db bb 87 6f 88 | bb 87 6f 88 bb 87 6f 88 |......o.|..o...o.|
|00000090| bb 87 6f 88 9d 87 6f 88 | 7c 81 69 88 ba 87 6f 88 |..o...o.||.i...o.|
|000000a0| bd a4 65 88 ba 87 6f 88 | 52 69 63 68 bb 87 6f 88 |..e...o.|Rich..o.|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 50 45 00 00 4c 01 04 00 | c2 86 f5 41 c0 18 00 00 |PE..L...|...A....|
|000000d0| 66 00 00 00 e0 00 06 01 | 0b 01 06 00 a0 11 00 00 |f.......|........|
|000000e0| a0 04 00 00 00 00 00 00 | c6 0d 00 00 60 02 00 00 |........|....`...|
|000000f0| a0 10 00 00 00 00 00 08 | 20 00 00 00 20 00 00 00 |........| ... ...|
|00000100| 04 00 00 00 04 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000110| a0 18 00 00 60 02 00 00 | 77 6c 00 00 01 00 00 00 |....`...|wl......|
|00000120| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000130| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| a0 10 00 00 3c 00 00 00 | 00 14 00 00 80 03 00 00 |....<...|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 80 17 00 00 d0 00 00 00 | f0 02 00 00 54 00 00 00 |........|....T...|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 60 02 00 00 84 00 00 00 |........|`.......|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001c0| 2c 0e 00 00 60 02 00 00 | 40 0e 00 00 60 02 00 00 |,...`...|@...`...|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|000001e0| 49 4e 49 54 00 00 00 00 | 58 03 00 00 a0 10 00 00 |INIT....|X.......|
|000001f0| 60 03 00 00 a0 10 00 00 | 00 00 00 00 00 00 00 00 |`.......|........|
|00000200| 00 00 00 00 20 00 00 e2 | 2e 72 73 72 63 00 00 00 |.... ...|.rsrc...|
|00000210| 80 03 00 00 00 14 00 00 | 80 03 00 00 00 14 00 00 |........|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000230| 2e 72 65 6c 6f 63 00 00 | 1c 01 00 00 80 17 00 00 |.reloc..|........|
|00000240| 20 01 00 00 80 17 00 00 | 00 00 00 00 00 00 00 00 | .......|........|
|00000250| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000260| d4 13 00 00 e2 13 00 00 | 00 00 00 00 9e 11 00 00 |........|........|
|00000270| b2 11 00 00 bc 11 00 00 | d0 11 00 00 e0 11 00 00 |........|........|
|00000280| f2 11 00 00 0a 12 00 00 | 26 12 00 00 38 12 00 00 |........|&...8...|
|00000290| 56 12 00 00 6a 12 00 00 | 82 12 00 00 9e 12 00 00 |V...j...|........|
|000002a0| 7e 11 00 00 c4 12 00 00 | da 12 00 00 f4 12 00 00 |~.......|........|
|000002b0| 08 13 00 00 1c 13 00 00 | 36 13 00 00 48 13 00 00 |........|6...H...|
|000002c0| 60 13 00 00 78 13 00 00 | 90 13 00 00 a2 13 00 00 |`...x...|........|
|000002d0| c8 13 00 00 74 11 00 00 | ae 12 00 00 60 11 00 00 |....t...|....`...|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 c0 86 f5 41 | 00 00 00 00 01 00 00 00 |.......A|........|
|00000300| 95 0f 00 00 00 00 00 00 | a0 18 00 00 00 00 00 00 |........|........|
|00000310| c0 86 f5 41 00 00 00 00 | 04 00 00 00 10 01 00 00 |...A....|........|
|00000320| 00 00 00 00 38 28 00 00 | 00 00 00 00 c0 86 f5 41 |....8(..|.......A|
|00000330| 00 00 00 00 03 00 00 00 | c0 00 00 00 00 00 00 00 |........|........|
|00000340| 48 29 00 00 00 00 00 00 | ff ff ff ff 29 05 00 08 |H)......|....)...|
|00000350| 2d 05 00 08 00 00 00 00 | ff ff ff ff 00 00 00 00 |-.......|........|
|00000360| ff 05 00 08 ff ff ff ff | 50 07 00 08 54 07 00 08 |........|P...T...|
|00000370| ff ff ff ff 76 07 00 08 | 7a 07 00 08 00 00 00 00 |....v...|z.......|
|00000380| ff ff ff ff 00 00 00 00 | 59 0a 00 08 55 8b ec 6a |........|Y...U..j|
|00000390| ff 68 48 03 00 08 68 bc | 0f 00 08 64 a1 00 00 00 |.hH...h.|...d....|
|000003a0| 00 50 64 89 25 00 00 00 | 00 83 ec 1c 53 56 57 89 |.Pd.%...|....SVW.|
|000003b0| 65 e8 83 65 fc 00 8b 7d | 08 8b 47 04 85 c0 74 58 |e..e...}|..G...tX|
|000003c0| 8d 4d e0 51 68 00 08 00 | 00 8b 75 0c 56 50 ff 15 |.M.Qh...|..u.VP..|
|000003d0| 6c 02 00 08 85 c0 7c 43 | 6a 01 56 8d 45 d8 50 ff |l.....|C|j.V.E.P.|
|000003e0| 15 a0 02 00 08 80 26 00 | 0f b7 45 d8 40 50 ff 75 |......&.|..E.@P.u|
|000003f0| dc 56 ff 15 d4 02 00 08 | 83 c4 0c 0f b7 45 d8 80 |.V......|.....E..|
|00000400| 24 30 00 0f b7 45 d8 03 | f0 89 75 0c 8d 45 d8 50 |$0...E..|..u..E.P|
|00000410| ff 15 dc 02 00 08 eb 03 | 8b 75 0c 0f b7 47 30 d1 |........|.u...G0.|
|00000420| e8 89 45 e0 8b 4f 20 89 | 4d d4 75 08 85 c9 0f 84 |..E..O .|M.u.....|
|00000430| ed 00 00 00 8b 57 34 66 | 83 3a 5c 74 19 85 c9 74 |.....W4f|.:\t...t|
|00000440| 15 0f b7 51 30 d1 ea 8d | 44 10 01 89 45 e0 8b 49 |...Q0...|D...E..I|
|00000450| 20 89 4d d4 eb e7 8d 4f | 30 0f b7 11 d1 ea 2b c2 | .M....O|0.....+.|
|00000460| 03 c6 8b d8 89 5d e4 6a | 01 51 8d 45 d8 50 ff 15 |.....].j|.Q.E.P..|
|00000470| a0 02 00 08 0f b7 45 d8 | 40 50 ff 75 dc 53 ff 15 |......E.|@P.u.S..|
|00000480| d4 02 00 08 83 c4 0c 8d | 45 d8 50 ff 15 dc 02 00 |........|E.P.....|
|00000490| 08 8b 77 20 89 75 d4 8b | 47 34 66 83 38 5c 74 4b |..w .u..|G4f.8\tK|
|000004a0| 85 f6 74 47 c6 43 ff 5c | 8d 46 30 0f b7 08 d1 e9 |..tG.C.\|.F0.....|
|000004b0| 83 ca ff 2b d1 03 da 89 | 5d e4 6a 01 50 8d 45 d8 |...+....|].j.P.E.|
|000004c0| 50 ff 15 a0 02 00 08 0f | b7 45 d8 50 ff 75 dc 53 |P.......|.E.P.u.S|
|000004d0| ff 15 d4 02 00 08 83 c4 | 0c 8d 45 d8 50 ff 15 dc |........|..E.P...|
|000004e0| 02 00 08 8b 76 20 89 75 | d4 eb b5 83 7d e0 03 76 |....v .u|....}..v|
|000004f0| 30 8b 45 0c 8d 50 02 80 | 3a 5c 75 25 8d 78 03 80 |0.E..P..|:\u%.x..|
|00000500| 3f 5c 75 1d 83 c9 ff 33 | c0 f2 ae f7 d1 2b f9 8b |?\u....3|.....+..|
|00000510| c1 8b f7 8b fa c1 e9 02 | f3 a5 8b c8 83 e1 03 f3 |........|........|
|00000520| a4 83 4d fc ff 33 c0 eb | 10 6a 01 58 c3 8b 65 e8 |..M..3..|.j.X..e.|
|00000530| 83 4d fc ff b8 05 00 00 | c0 8b 4d f0 64 89 0d 00 |.M......|..M.d...|
|00000540| 00 00 00 5f 5e 5b c9 c2 | 08 00 55 8b ec 6a ff 68 |..._^[..|..U..j.h|
|00000550| 58 03 00 08 68 bc 0f 00 | 08 64 a1 00 00 00 00 50 |X...h...|.d.....P|
|00000560| 64 89 25 00 00 00 00 83 | ec 64 53 56 57 89 65 e8 |d.%.....|.dSVW.e.|
|00000570| 8b 75 10 8b 06 89 45 94 | 33 db 88 5d c4 89 5d 90 |.u....E.|3..]..].|
|00000580| 89 1e 8b 7d 08 8b 87 00 | 01 00 00 83 f8 08 0f 83 |...}....|........|
|00000590| 80 00 00 00 8d 4d d0 51 | 50 ff 15 8c 02 00 08 3b |.....M.Q|P......;|
|000005a0| c3 0f 8c e1 01 00 00 89 | 5d fc ff 75 d0 ff 15 88 |........|]..u....|
|000005b0| 02 00 08 53 8d 45 90 50 | 53 53 68 00 00 00 80 ff |...S.E.P|SSh.....|
|000005c0| b7 08 01 00 00 ff 15 84 | 02 00 08 89 45 8c 3b c3 |........|....E.;.|
|000005d0| 7c 14 8b 4d 90 3b 8f 04 | 01 00 00 74 09 ff 15 80 ||..M.;..|...t....|
|000005e0| 02 00 08 89 5d 90 83 4d | fc ff e8 15 00 00 00 8b |....]..M|........|
|000005f0| 4d 90 3b cb 0f 85 be 00 | 00 00 e9 ac 00 00 00 33 |M.;.....|.......3|
|00000600| db 8b 75 10 ff 15 7c 02 | 00 08 8b 4d d0 ff 15 80 |..u...|.|...M....|
|00000610| 02 00 08 c3 89 5d a8 89 | 45 a4 c7 45 ac 18 00 00 |.....]..|E..E....|
|00000620| 00 89 5d b0 89 5d b8 89 | 5d b4 89 5d bc 89 5d c0 |..]..]..|]..]..].|
|00000630| 8d 45 a4 50 8d 45 ac 50 | 6a 40 8d 45 cc 50 ff 15 |.E.P.E.P|j@.E.P..|
|00000640| 78 02 00 08 85 c0 7c 63 | 6a 02 53 53 8d 45 d4 50 |x.....|c|j.SS.E.P|
|00000650| 6a ff ff b7 08 01 00 00 | ff 75 cc ff 15 74 02 00 |j.......|.u...t..|
|00000660| 08 85 c0 ff 75 cc 7d 08 | ff 15 70 02 00 08 eb 3b |....u.}.|..p....;|
|00000670| 8b 35 70 02 00 08 ff d6 | 53 8d 45 90 50 53 53 68 |.5p.....|S.E.PSSh|
|00000680| 00 00 00 80 ff 75 d4 ff | 15 84 02 00 08 85 c0 ff |.....u..|........|
|00000690| 75 d4 7d 04 ff d6 eb 13 | ff d6 8b 4d 90 3b 8f 04 |u.}.....|...M.;..|
|000006a0| 01 00 00 74 10 ff 15 80 | 02 00 08 b8 22 00 00 c0 |...t....|...."...|
|000006b0| e9 d3 00 00 00 8b 75 10 | c7 45 fc 01 00 00 00 66 |......u.|.E.....f|
|000006c0| 83 39 05 75 1d 66 83 79 | 02 70 75 16 89 4d dc 8b |.9.u.f.y|.pu..M..|
|000006d0| 7d 0c 57 51 e8 b3 fc ff | ff 89 45 8c 3b c3 7c 61 |}.WQ....|..E.;.|a|
|000006e0| eb 54 8d 45 d8 50 ff 75 | 94 8b 7d 0c 57 51 ff 15 |.T.E.P.u|..}.WQ..|
|000006f0| 6c 02 00 08 89 45 8c 3b | c3 7c 46 66 39 1f 74 41 |l....E.;|.|Ff9.tA|
|00000700| 6a 01 57 8d 45 9c 50 ff | 15 a0 02 00 08 85 c0 75 |j.W.E.P.|.......u|
|00000710| 30 88 1f 0f b7 45 9c 50 | ff 75 a0 57 ff 15 d4 02 |0....E.P|.u.W....|
|00000720| 00 08 83 c4 0c 0f b7 45 | 9c 88 1c 38 8d 45 9c 50 |.......E|...8.E.P|
|00000730| ff 15 dc 02 00 08 83 c9 | ff 33 c0 f2 ae f7 d1 89 |........|.3......|
|00000740| 0e 8b 4d 90 ff 15 80 02 | 00 08 c6 45 c4 01 eb 31 |..M.....|...E...1|
|00000750| 6a 01 58 c3 8b 65 e8 c7 | 45 8c 05 00 00 c0 80 7d |j.X..e..|E......}|
|00000760| c4 00 75 1d c7 45 fc 02 | 00 00 00 8b 4d 90 ff 15 |..u..E..|....M...|
|00000770| 80 02 00 08 eb 07 6a 01 | 58 c3 8b 65 e8 83 4d fc |......j.|X..e..M.|
|00000780| ff 83 4d fc ff 8b 45 8c | 8b 4d f0 64 89 0d 00 00 |..M...E.|.M.d....|
|00000790| 00 00 5f 5e 5b c9 c2 0c | 00 cc 33 c0 50 50 68 00 |.._^[...|..3.PPh.|
|000007a0| 00 00 10 ff 74 24 14 50 | 8b 44 24 18 ff b0 08 01 |....t$.P|.D$.....|
|000007b0| 00 00 ff b0 00 01 00 00 | ff 15 74 02 00 08 c2 08 |........|..t.....|
|000007c0| 00 cc 55 8b ec 51 56 8b | 75 08 57 33 ff 8d 45 fc |..U..QV.|u.W3..E.|
|000007d0| 57 50 57 57 57 ff 36 ff | 15 84 02 00 08 3b c7 7d |WPWWW.6.|.....;.}|
|000007e0| 07 8b 4d 10 89 39 eb 79 | b1 02 ff 15 64 02 00 08 |..M..9.y|....d...|
|000007f0| 8b 4d 10 8b 55 fc 88 45 | 0b 8b 46 04 8b 09 8d 34 |.M..U..E|..F....4|
|00000800| 01 3b 72 18 77 34 3b 42 | 1c 72 2f 3b cf 76 3e 8b |.;r.w4;B|.r/;.v>.|
|00000810| 75 0c 53 8b d8 89 4d 10 | 2b de 8d 3c 33 57 ff 15 |u.S...M.|+..<3W..|
|00000820| 90 02 00 08 84 c0 74 06 | 8a 07 88 06 eb 03 80 26 |......t.|.......&|
|00000830| 00 46 ff 4d 10 75 e3 5b | eb 13 8b 7d 0c 8b d1 33 |.F.M.u.[|...}...3|
|00000840| c0 c1 e9 02 f3 ab 8b ca | 83 e1 03 f3 aa 8a 4d 0b |........|......M.|
|00000850| ff 15 60 02 00 08 8b 4d | fc ff 15 80 02 00 08 33 |..`....M|.......3|
|00000860| c0 5f 5e c9 c2 0c 00 cc | 55 8b ec 56 33 f6 8d 45 |._^.....|U..V3..E|
|00000870| 08 56 50 56 56 56 ff 75 | 08 ff 15 84 02 00 08 3b |.VPVVV.u|.......;|
|00000880| c6 7c 38 8b 45 08 8b 40 | 18 3b c6 74 15 ff 75 0c |.|8.E..@|.;.t..u.|
|00000890| 56 56 68 00 00 00 10 56 | 56 50 ff 15 94 02 00 08 |VVh....V|VP......|
|000008a0| eb 05 8b 45 0c 89 30 8b | 4d 08 ff 15 80 02 00 08 |...E..0.|M.......|
|000008b0| 8b 45 10 c7 00 04 00 00 | 00 33 c0 5e 5d c2 0c 00 |.E......|.3.^]...|
|000008c0| 55 8b ec 56 57 8b 7d 0c | 8d 45 0c 6a 00 50 83 0f |U..VW.}.|.E.j.P..|
|000008d0| ff 6a 00 6a 00 68 00 00 | 00 80 ff 75 08 ff 15 84 |.j.j.h..|...u....|
|000008e0| 02 00 08 8b f0 85 f6 7c | 37 ff 75 0c ff 15 88 02 |.......||7.u.....|
|000008f0| 00 08 8d 45 08 50 6a 04 | 57 6a 22 6a ff ff 15 98 |...E.Pj.|Wj"j....|
|00000900| 02 00 08 8b 4d 0c 8b f0 | ff 15 80 02 00 08 ff 15 |....M...|........|
|00000910| 7c 02 00 08 85 f6 7c 08 | 8b 45 10 8b 4d 08 89 08 ||.....|.|.E..M...|
|00000920| 8b c6 5f 5e 5d c2 0c 00 | 55 8b ec 53 56 8b 5d 10 |.._^]...|U..SV.].|
|00000930| 33 f6 57 8d 45 10 56 50 | 56 56 56 89 33 ff 75 08 |3.W.E.VP|VVV.3.u.|
|00000940| ff 15 84 02 00 08 3b c6 | 7c 60 a1 9c 02 00 08 8b |......;.||`......|
|00000950| 00 25 ff ff ff 0f 3d ce | 0e 00 00 8b 45 10 72 05 |.%....=.|....E.r.|
|00000960| 8b 78 20 eb 03 8b 78 28 | 8b 75 0c 8d 47 0c 50 89 |.x ...x(|.u..G.P.|
|00000970| 46 04 ff 15 90 02 00 08 | 84 c0 74 20 8b 46 04 8b |F.......|..t .F..|
|00000980| 4d 10 8b 00 89 46 08 8b | 47 08 89 06 ff 15 80 02 |M....F..|G.......|
|00000990| 00 08 c7 03 0c 00 00 00 | 33 c0 eb 0e 8b 4d 10 ff |........|3....M..|
|000009a0| 15 80 02 00 08 b8 05 00 | 00 c0 5f 5e 5b 5d c2 0c |........|.._^[]..|
|000009b0| 00 cc 55 8b ec 6a ff 68 | 80 03 00 08 68 bc 0f 00 |..U..j.h|....h...|
|000009c0| 08 64 a1 00 00 00 00 50 | 64 89 25 00 00 00 00 83 |.d.....P|d.%.....|
|000009d0| ec 14 53 56 57 8d 45 e4 | 50 8b 75 08 ff b6 00 01 |..SVW.E.|P.u.....|
|000009e0| 00 00 ff 15 8c 02 00 08 | 89 45 e0 33 ff 3b c7 7c |........|.E.3.;.||
|000009f0| 57 89 7d fc ff 75 e4 ff | 15 88 02 00 08 57 8d 45 |W.}..u..|.....W.E|
|00000a00| dc 50 57 57 68 00 00 00 | 80 ff b6 08 01 00 00 ff |.PWWh...|........|
|00000a10| 15 84 02 00 08 89 45 e0 | 3b c7 7c 20 8b 45 dc 3b |......E.|;.| .E.;|
|00000a20| 86 04 01 00 00 75 0c ff | b6 08 01 00 00 ff 15 70 |.....u..|.......p|
|00000a30| 02 00 08 8b 4d dc ff 15 | 80 02 00 08 83 4d fc ff |....M...|.....M..|
|00000a40| e8 14 00 00 00 8b 45 e0 | 8b 4d f0 64 89 0d 00 00 |......E.|.M.d....|
|00000a50| 00 00 5f 5e 5b c9 c2 04 | 00 ff 15 7c 02 00 08 8b |.._^[...|...|....|
|00000a60| 4d e4 ff 15 80 02 00 08 | c3 cc 55 8b ec 8b 4d 20 |M.......|..U...M |
|00000a70| 53 8b 5d 24 56 b8 20 00 | 35 83 57 83 23 00 83 63 |S.]$V. .|5.W.#..c|
|00000a80| 04 00 8d 73 04 3b c8 0f | 87 d7 00 00 00 0f 84 97 |...s.;..|........|
|00000a90| 00 00 00 81 f9 00 00 35 | 83 74 79 81 f9 04 00 35 |.......5|.ty....5|
|00000aa0| 83 74 64 81 f9 08 00 35 | 83 74 3e 81 f9 0c 00 35 |.td....5|.t>....5|
|00000ab0| 83 74 24 81 f9 14 00 35 | 83 0f 85 d1 00 00 00 ff |.t$....5|........|
|00000ac0| 75 18 ff 75 10 e8 d0 fc | ff ff 89 03 c7 06 04 00 |u..u....|........|
|00000ad0| 00 00 e9 38 01 00 00 ff | 75 18 8b 45 10 6a 08 ff |...8....|u..E.j..|
|00000ae0| 30 ff 15 d8 02 00 08 eb | e1 8b 4d 10 b8 5d 03 00 |0.......|..M..]..|
|00000af0| 00 39 01 76 0b c7 03 59 | 00 00 c0 e9 0f 01 00 00 |.9.v...Y|........|
|00000b00| 8b 4d 18 89 01 eb c5 ff | 75 10 e8 a3 fe ff ff e9 |.M......|u.......|
|00000b10| f9 00 00 00 8b 45 1c 56 | ff 75 18 89 06 ff 75 10 |.....E.V|.u....u.|
|00000b20| e8 25 fa ff ff e9 e3 00 | 00 00 6a 04 59 39 4d 14 |.%......|..j.Y9M.|
|00000b30| 0f 85 9e 00 00 00 39 4d | 1c 0f 85 95 00 00 00 8b |......9M|........|
|00000b40| 45 10 8b 00 66 83 38 05 | 0f 85 86 00 00 00 66 83 |E...f.8.|......f.|
|00000b50| 78 02 70 75 7f 8b 55 18 | 8b 40 10 89 02 89 0e e9 |x.pu..U.|.@......|
|00000b60| ab 00 00 00 81 f9 24 00 | 35 83 0f 84 8c 00 00 00 |......$.|5.......|
|00000b70| 81 f9 28 00 35 83 74 74 | 81 f9 2c 00 35 83 74 5c |..(.5.tt|..,.5.t\|
|00000b80| 81 f9 30 00 35 83 74 20 | 81 f9 34 00 35 83 74 08 |..0.5.t |..4.5.t.|
|00000b90| c7 03 af 00 00 c0 eb 77 | 8b 45 10 56 ff 75 18 ff |.......w|.E.V.u..|
|00000ba0| 30 e8 1a fd ff ff eb 65 | 8b 7d 10 ff 37 ff 15 90 |0......e|.}..7...|
|00000bb0| 02 00 08 84 c0 74 1d 8b | 4d 1c 89 0e 8b 37 8b 7d |.....t..|M....7.}|
|00000bc0| 18 8b c1 c1 e9 02 f3 a5 | 8b c8 83 e1 03 f3 a4 83 |........|........|
|00000bd0| 23 00 eb 3b c7 03 0d 00 | 00 c0 eb 33 8b 45 10 56 |#..;....|...3.E.V|
|00000be0| ff 75 18 ff 30 e8 7e fc | ff ff eb 21 8b 45 10 56 |.u..0.~.|...!.E.V|
|00000bf0| ff 75 18 ff 30 e8 2e fd | ff ff eb 11 8b 45 1c 56 |.u..0...|.....E.V|
|00000c00| ff 75 18 89 06 ff 75 10 | e8 b5 fb ff ff 89 03 8b |.u....u.|........|
|00000c10| 03 5f 5e 5b 5d c2 24 00 | 55 8b ec 83 ec 28 53 56 |._^[].$.|U....(SV|
|00000c20| 8b 75 0c 83 65 fc 00 57 | 8b 46 60 83 66 1c 00 8b |.u..e..W|.F`.f...|
|00000c30| 4e 0c 8a 10 8b 78 08 8b | 58 04 84 d2 74 2b 80 fa |N....x..|X...t+..|
|00000c40| 0e 74 09 c7 45 fc 10 00 | 00 c0 eb 6a ff 75 08 8d |.t..E...|...j.u..|
|00000c50| 56 18 52 ff 70 0c 53 51 | 57 51 6a 01 ff 70 18 e8 |V.R.p.SQ|WQj..p..|
|00000c60| 06 fe ff ff 89 45 fc eb | 4d 6a 01 58 89 45 d8 89 |.....E..|Mj.X.E..|
|00000c70| 45 dc b8 14 00 00 00 99 | 83 65 e8 00 89 45 e0 8d |E.......|.e...E..|
|00000c80| 45 ec 89 55 e4 50 ff 15 | b4 02 00 08 ff 15 b0 02 |E..U.P..|........|
|00000c90| 00 08 50 8d 45 ec 50 8d | 45 d8 50 ff 15 ac 02 00 |..P.E.P.|E.P.....|
|00000ca0| 08 84 c0 75 07 c7 45 fc | 22 00 00 c0 8d 45 ec 50 |...u..E.|"....E.P|
|00000cb0| ff 15 a8 02 00 08 8b 7d | fc 32 d2 8b ce 89 7e 18 |.......}|.2....~.|
|00000cc0| ff 15 a4 02 00 08 8b c7 | 5f 5e 5b c9 c2 08 00 cc |........|_^[.....|
|00000cd0| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|00000ce0| 63 00 65 00 73 00 5c 00 | 50 00 72 00 6f 00 63 00 |c.e.s.\.|P.r.o.c.|
|00000cf0| 45 00 78 00 70 00 39 00 | 30 00 00 00 55 8b ec 83 |E.x.p.9.|0...U...|
|00000d00| ec 34 56 57 6a 0b 8d 45 | cc 59 be d0 0c 00 08 50 |.4VWj..E|.Y.....P|
|00000d10| 8d 7d cc 8d 45 f8 f3 a5 | 50 ff 15 c0 02 00 08 8d |.}..E...|P.......|
|00000d20| 45 f8 50 ff 15 bc 02 00 | 08 8b 45 08 ff 70 04 ff |E.P.....|..E..p..|
|00000d30| 15 b8 02 00 08 5f 5e c9 | c2 04 00 cc 5c 00 44 00 |....._^.|....\.D.|
|00000d40| 65 00 76 00 69 00 63 00 | 65 00 5c 00 50 00 72 00 |e.v.i.c.|e.\.P.r.|
|00000d50| 6f 00 63 00 45 00 78 00 | 70 00 39 00 30 00 00 00 |o.c.E.x.|p.9.0...|
|00000d60| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|00000d70| 63 00 65 00 73 00 5c 00 | 50 00 72 00 6f 00 63 00 |c.e.s.\.|P.r.o.c.|
|00000d80| 45 00 78 00 70 00 39 00 | 30 00 00 00 5c 00 44 00 |E.x.p.9.|0...\.D.|
|00000d90| 6f 00 73 00 44 00 65 00 | 76 00 69 00 63 00 65 00 |o.s.D.e.|v.i.c.e.|
|00000da0| 73 00 5c 00 47 00 6c 00 | 6f 00 62 00 61 00 6c 00 |s.\.G.l.|o.b.a.l.|
|00000db0| 5c 00 50 00 72 00 6f 00 | 63 00 45 00 78 00 70 00 |\.P.r.o.|c.E.x.p.|
|00000dc0| 39 00 30 00 00 00 55 8b | ec 81 ec a8 00 00 00 53 |9.0...U.|.......S|
|00000dd0| 56 57 6a 09 59 be 3c 0d | 00 08 8d 7d c0 6a 0b f3 |VWj.Y.<.|...}.j..|
|00000de0| a5 59 be 60 0d 00 08 8d | 7d 94 6a 0e f3 a5 59 be |.Y.`....|}.j...Y.|
|00000df0| 8c 0d 00 08 8d bd 58 ff | ff ff 83 7d 0c 00 f3 a5 |......X.|...}....|
|00000e00| 66 a5 bb 18 0c 00 08 75 | 2f 68 44 64 6b 20 68 50 |f......u|/hDdk hP|
|00000e10| 01 00 00 6a 00 ff 15 cc | 02 00 08 8b f0 6a 54 59 |...j....|.....jTY|
|00000e20| 33 c0 8b fe 81 c6 a8 00 | 00 00 f3 ab 6a 1c 8d 7e |3.......|....j..~|
|00000e30| 38 59 8b c3 f3 ab eb 03 | 8b 75 08 8b 3d c0 02 00 |8Y......|.u..=...|
|00000e40| 08 8d 45 c0 50 8d 45 f4 | 50 ff d7 8d 45 fc 8d 4d |..E.P.E.|P...E..M|
|00000e50| f4 50 33 c0 50 50 68 35 | 83 00 00 51 50 56 ff 15 |.P3.PPh5|...QPV..|
|00000e60| c8 02 00 08 89 45 08 8b | 45 fc 80 60 1c 7f 83 7d |.....E..|E..`...}|
|00000e70| 08 00 7c 67 8d 45 94 50 | 8d 45 ec 50 ff d7 83 7d |..|g.E.P|.E.P...}|
|00000e80| 0c 00 75 30 8d 85 58 ff | ff ff 50 8d 45 e4 50 ff |..u0..X.|..P.E.P.|
|00000e90| d7 8b 3d c4 02 00 08 8d | 45 f4 50 8d 45 e4 50 ff |..=.....|E.P.E.P.|
|00000ea0| d7 85 c0 89 45 08 7d 1d | 8d 45 f4 50 8d 45 ec 50 |....E.}.|.E.P.E.P|
|00000eb0| ff d7 eb 0e 8d 45 f4 50 | 8d 45 ec 50 ff 15 c4 02 |.....E.P|.E.P....|
|00000ec0| 00 08 89 45 08 83 7d 08 | 00 89 5e 70 89 5e 40 89 |...E..}.|..^p.^@.|
|00000ed0| 5e 38 c7 46 34 fc 0c 00 | 08 7d 0f 83 7d fc 00 74 |^8.F4...|.}..}..t|
|00000ee0| 09 ff 75 fc ff 15 b8 02 | 00 08 8b 45 08 5f 5e 5b |..u.....|...E._^[|
|00000ef0| c9 c2 08 00 55 8b ec 53 | 56 57 55 6a 00 6a 00 68 |....U..S|VWUj.j.h|
|00000f00| 0c 0f 00 08 ff 75 08 e8 | 7a 01 00 00 5d 5f 5e 5b |.....u..|z...]_^[|
|00000f10| 8b e5 5d c3 8b 4c 24 04 | f7 41 04 06 00 00 00 b8 |..]..L$.|.A......|
|00000f20| 01 00 00 00 74 0f 8b 44 | 24 08 8b 54 24 10 89 02 |....t..D|$..T$...|
|00000f30| b8 03 00 00 00 c3 53 56 | 57 8b 44 24 10 50 6a fe |......SV|W.D$.Pj.|
|00000f40| 68 14 0f 00 08 64 ff 35 | 00 00 00 00 64 89 25 00 |h....d.5|....d.%.|
|00000f50| 00 00 00 8b 44 24 20 8b | 58 08 8b 70 0c 83 fe ff |....D$ .|X..p....|
|00000f60| 74 20 3b 74 24 24 74 1a | 8d 34 76 8b 0c b3 89 4c |t ;t$$t.|.4v....L|
|00000f70| 24 08 89 48 0c 83 7c b3 | 04 00 75 04 ff 54 b3 08 |$..H..|.|..u..T..|
|00000f80| eb d1 64 8f 05 00 00 00 | 00 83 c4 0c 5f 5e 5b c3 |..d.....|...._^[.|
|00000f90| 33 c0 64 8b 0d 00 00 00 | 00 81 79 04 14 0f 00 08 |3.d.....|..y.....|
|00000fa0| 75 10 8b 51 0c 8b 52 0c | 39 51 08 75 05 b8 01 00 |u..Q..R.|9Q.u....|
|00000fb0| 00 00 c3 cc 56 43 32 30 | 58 43 30 30 55 8b ec 83 |....VC20|XC00U...|
|00000fc0| ec 08 53 56 57 55 fc 8b | 5d 0c 8b 45 08 f7 40 04 |..SVWU..|]..E..@.|
|00000fd0| 06 00 00 00 75 77 89 45 | f8 8b 45 10 89 45 fc 8d |....uw.E|..E..E..|
|00000fe0| 45 f8 89 43 fc 8b 73 0c | 8b 7b 08 83 fe ff 74 56 |E..C..s.|.{....tV|
|00000ff0| 8d 0c 76 83 7c 8f 04 00 | 74 3a 56 55 8d 6b 10 ff |..v.|...|t:VU.k..|
|00001000| 54 8f 04 5d 5e 8b 5d 0c | 0b c0 74 28 78 31 8b 7b |T..]^.].|..t(x1.{|
|00001010| 08 53 e8 dd fe ff ff 83 | c4 04 8d 6b 10 56 53 e8 |.S......|...k.VS.|
|00001020| 12 ff ff ff 83 c4 08 8d | 0c 76 8b 04 8f 89 43 0c |........|.v....C.|
|00001030| ff 54 8f 08 8b 7b 08 8d | 0c 76 8b 34 8f eb ac b8 |.T...{..|.v.4....|
|00001040| 00 00 00 00 eb 1c b8 01 | 00 00 00 eb 15 55 8d 6b |........|.....U.k|
|00001050| 10 6a ff 53 e8 dd fe ff | ff 83 c4 08 5d b8 01 00 |.j.S....|....]...|
|00001060| 00 00 5d 5f 5e 5b 8b e5 | 5d c3 55 8b 4c 24 08 8b |..]_^[..|].U.L$..|
|00001070| 29 8b 41 1c 50 8b 41 18 | 50 e8 b8 fe ff ff 83 c4 |).A.P.A.|P.......|
|00001080| 08 5d c2 04 00 cc ff 25 | d0 02 00 08 00 00 00 00 |.].....%|........|
|00001090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010a0| e8 10 00 00 00 00 00 00 | 00 00 00 00 ba 13 00 00 |........|........|
|000010b0| 6c 02 00 00 dc 10 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|000010c0| f0 13 00 00 60 02 00 00 | 00 00 00 00 00 00 00 00 |....`...|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 d4 13 00 00 |........|........|
|000010e0| e2 13 00 00 00 00 00 00 | 9e 11 00 00 b2 11 00 00 |........|........|
|000010f0| bc 11 00 00 d0 11 00 00 | e0 11 00 00 f2 11 00 00 |........|........|
|00001100| 0a 12 00 00 26 12 00 00 | 38 12 00 00 56 12 00 00 |....&...|8...V...|
|00001110| 6a 12 00 00 82 12 00 00 | 9e 12 00 00 7e 11 00 00 |j.......|....~...|
|00001120| c4 12 00 00 da 12 00 00 | f4 12 00 00 08 13 00 00 |........|........|
|00001130| 1c 13 00 00 36 13 00 00 | 48 13 00 00 60 13 00 00 |....6...|H...`...|
|00001140| 78 13 00 00 90 13 00 00 | a2 13 00 00 c8 13 00 00 |x.......|........|
|00001150| 74 11 00 00 ae 12 00 00 | 60 11 00 00 00 00 00 00 |t.......|`.......|
|00001160| c0 02 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |..RtlFre|eAnsiStr|
|00001170| 69 6e 67 00 db 03 73 74 | 72 6e 63 70 79 00 0f 03 |ing...st|rncpy...|
|00001180| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00001190| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 3d 02 |ToAnsiSt|ring..=.|
|000011a0| 4f 62 51 75 65 72 79 4e | 61 6d 65 53 74 72 69 6e |ObQueryN|ameStrin|
|000011b0| 67 00 5b 03 5a 77 43 6c | 6f 73 65 00 69 03 5a 77 |g.[.ZwCl|ose.i.Zw|
|000011c0| 44 75 70 6c 69 63 61 74 | 65 4f 62 6a 65 63 74 00 |Duplicat|eObject.|
|000011d0| 7a 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |z.ZwOpen|Process.|
|000011e0| 59 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |Y.KeDeta|chProces|
|000011f0| 73 00 44 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |s.D.ObfD|ereferen|
|00001200| 63 65 4f 62 6a 65 63 74 | 00 00 3f 02 4f 62 52 65 |ceObject|..?.ObRe|
|00001210| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00001220| 61 6e 64 6c 65 00 4f 01 | 4b 65 41 74 74 61 63 68 |andle.O.|KeAttach|
|00001230| 50 72 6f 63 65 73 73 00 | 5b 02 50 73 4c 6f 6f 6b |Process.|[.PsLook|
|00001240| 75 70 50 72 6f 63 65 73 | 73 42 79 50 72 6f 63 65 |upProces|sByProce|
|00001250| 73 73 49 64 00 00 df 01 | 4d 6d 49 73 41 64 64 72 |ssId....|MmIsAddr|
|00001260| 65 73 73 56 61 6c 69 64 | 00 00 3c 02 4f 62 4f 70 |essValid|..<.ObOp|
|00001270| 65 6e 4f 62 6a 65 63 74 | 42 79 50 6f 69 6e 74 65 |enObject|ByPointe|
|00001280| 72 00 84 03 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |r...ZwQu|eryInfor|
|00001290| 6d 61 74 69 6f 6e 50 72 | 6f 63 65 73 73 00 07 02 |mationPr|ocess...|
|000012a0| 4e 74 42 75 69 6c 64 4e | 75 6d 62 65 72 00 7b 03 |NtBuildN|umber.{.|
|000012b0| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 54 6f 6b |ZwOpenPr|ocessTok|
|000012c0| 65 6e 00 00 45 01 49 6f | 66 43 6f 6d 70 6c 65 74 |en..E.Io|fComplet|
|000012d0| 65 52 65 71 75 65 73 74 | 00 00 47 03 53 65 52 65 |eRequest|..G.SeRe|
|000012e0| 6c 65 61 73 65 53 75 62 | 6a 65 63 74 43 6f 6e 74 |leaseSub|jectCont|
|000012f0| 65 78 74 00 40 03 53 65 | 50 72 69 76 69 6c 65 67 |ext.@.Se|Privileg|
|00001300| 65 43 68 65 63 6b 00 00 | 45 00 45 78 47 65 74 50 |eCheck..|E.ExGetP|
|00001310| 72 65 76 69 6f 75 73 4d | 6f 64 65 00 32 03 53 65 |reviousM|ode.2.Se|
|00001320| 43 61 70 74 75 72 65 53 | 75 62 6a 65 63 74 43 6f |CaptureS|ubjectCo|
|00001330| 6e 74 65 78 74 00 fb 00 | 49 6f 44 65 6c 65 74 65 |ntext...|IoDelete|
|00001340| 44 65 76 69 63 65 00 00 | fc 00 49 6f 44 65 6c 65 |Device..|..IoDele|
|00001350| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00001360| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00001370| 53 74 72 69 6e 67 00 00 | f7 00 49 6f 43 72 65 61 |String..|..IoCrea|
|00001380| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00001390| f3 00 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|000013a0| 00 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..6.ExAl|locatePo|
|000013b0| 6f 6c 57 69 74 68 54 61 | 67 00 6e 74 6f 73 6b 72 |olWithTa|g.ntoskr|
|000013c0| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|000013d0| 69 6e 64 00 4b 00 4b 66 | 4c 6f 77 65 72 49 72 71 |ind.K.Kf|LowerIrq|
|000013e0| 6c 00 4c 00 4b 66 52 61 | 69 73 65 49 72 71 6c 00 |l.L.KfRa|iseIrql.|
|000013f0| 48 41 4c 2e 64 6c 6c 00 | 00 00 00 00 00 00 00 00 |HAL.dll.|........|
|00001400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001410| 10 00 00 00 18 00 00 80 | 00 00 00 00 00 00 00 00 |........|........|
|00001420| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00001430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001440| 09 04 00 00 48 00 00 00 | 60 14 00 00 1c 03 00 00 |....H...|`.......|
|00001450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001460| 1c 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |..4...V.|S._.V.E.|
|00001470| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00001480| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00001490| 3d 00 08 00 00 00 00 00 | 3d 00 08 00 00 00 00 00 |=.......|=.......|
|000014a0| 3f 00 00 00 00 00 00 00 | 04 00 04 00 03 00 00 00 |?.......|........|
|000014b0| 07 00 00 00 00 00 00 00 | 00 00 00 00 7a 02 00 00 |........|....z...|
|000014c0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|000014d0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|000014e0| 56 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |V.....0.|4.0.9.0.|
|000014f0| 34 00 42 00 30 00 00 00 | 68 00 24 00 01 00 43 00 |4.B.0...|h.$...C.|
|00001500| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00001510| 6d 00 65 00 00 00 00 00 | 53 00 79 00 73 00 69 00 |m.e.....|S.y.s.i.|
|00001520| 6e 00 74 00 65 00 72 00 | 6e 00 61 00 6c 00 73 00 |n.t.e.r.|n.a.l.s.|
|00001530| 20 00 2d 00 20 00 77 00 | 77 00 77 00 2e 00 73 00 | .-. .w.|w.w...s.|
|00001540| 79 00 73 00 69 00 6e 00 | 74 00 65 00 72 00 6e 00 |y.s.i.n.|t.e.r.n.|
|00001550| 61 00 6c 00 73 00 2e 00 | 63 00 6f 00 6d 00 00 00 |a.l.s...|c.o.m...|
|00001560| 4a 00 11 00 01 00 46 00 | 69 00 6c 00 65 00 44 00 |J.....F.|i.l.e.D.|
|00001570| 65 00 73 00 63 00 72 00 | 69 00 70 00 74 00 69 00 |e.s.c.r.|i.p.t.i.|
|00001580| 6f 00 6e 00 00 00 00 00 | 50 00 72 00 6f 00 63 00 |o.n.....|P.r.o.c.|
|00001590| 65 00 73 00 73 00 20 00 | 45 00 78 00 70 00 6c 00 |e.s.s. .|E.x.p.l.|
|000015a0| 6f 00 72 00 65 00 72 00 | 00 00 00 00 2a 00 05 00 |o.r.e.r.|....*...|
|000015b0| 01 00 46 00 69 00 6c 00 | 65 00 56 00 65 00 72 00 |..F.i.l.|e.V.e.r.|
|000015c0| 73 00 69 00 6f 00 6e 00 | 00 00 00 00 38 00 2e 00 |s.i.o.n.|....8...|
|000015d0| 36 00 31 00 00 00 00 00 | 38 00 0c 00 01 00 49 00 |6.1.....|8.....I.|
|000015e0| 6e 00 74 00 65 00 72 00 | 6e 00 61 00 6c 00 4e 00 |n.t.e.r.|n.a.l.N.|
|000015f0| 61 00 6d 00 65 00 00 00 | 70 00 72 00 6f 00 63 00 |a.m.e...|p.r.o.c.|
|00001600| 65 00 78 00 70 00 2e 00 | 73 00 79 00 73 00 00 00 |e.x.p...|s.y.s...|
|00001610| 72 00 27 00 01 00 4c 00 | 65 00 67 00 61 00 6c 00 |r.'...L.|e.g.a.l.|
|00001620| 43 00 6f 00 70 00 79 00 | 72 00 69 00 67 00 68 00 |C.o.p.y.|r.i.g.h.|
|00001630| 74 00 00 00 43 00 6f 00 | 70 00 79 00 72 00 69 00 |t...C.o.|p.y.r.i.|
|00001640| 67 00 68 00 74 00 20 00 | 28 00 43 00 29 00 20 00 |g.h.t. .|(.C.). .|
|00001650| 4d 00 2e 00 20 00 52 00 | 75 00 73 00 73 00 69 00 |M... .R.|u.s.s.i.|
|00001660| 6e 00 6f 00 76 00 69 00 | 63 00 68 00 20 00 31 00 |n.o.v.i.|c.h. .1.|
|00001670| 39 00 39 00 36 00 2d 00 | 32 00 30 00 30 00 34 00 |9.9.6.-.|2.0.0.4.|
|00001680| 00 00 00 00 40 00 0c 00 | 01 00 4f 00 72 00 69 00 |....@...|..O.r.i.|
|00001690| 67 00 69 00 6e 00 61 00 | 6c 00 46 00 69 00 6c 00 |g.i.n.a.|l.F.i.l.|
|000016a0| 65 00 6e 00 61 00 6d 00 | 65 00 00 00 70 00 72 00 |e.n.a.m.|e...p.r.|
|000016b0| 6f 00 63 00 65 00 78 00 | 70 00 2e 00 53 00 79 00 |o.c.e.x.|p...S.y.|
|000016c0| 73 00 00 00 42 00 11 00 | 01 00 50 00 72 00 6f 00 |s...B...|..P.r.o.|
|000016d0| 64 00 75 00 63 00 74 00 | 4e 00 61 00 6d 00 65 00 |d.u.c.t.|N.a.m.e.|
|000016e0| 00 00 00 00 50 00 72 00 | 6f 00 63 00 65 00 73 00 |....P.r.|o.c.e.s.|
|000016f0| 73 00 20 00 45 00 78 00 | 70 00 6c 00 6f 00 72 00 |s. .E.x.|p.l.o.r.|
|00001700| 65 00 72 00 00 00 00 00 | 2e 00 05 00 01 00 50 00 |e.r.....|......P.|
|00001710| 72 00 6f 00 64 00 75 00 | 63 00 74 00 56 00 65 00 |r.o.d.u.|c.t.V.e.|
|00001720| 72 00 73 00 69 00 6f 00 | 6e 00 00 00 38 00 2e 00 |r.s.i.o.|n...8...|
|00001730| 36 00 31 00 00 00 00 00 | 44 00 00 00 01 00 56 00 |6.1.....|D.....V.|
|00001740| 61 00 72 00 46 00 69 00 | 6c 00 65 00 49 00 6e 00 |a.r.F.i.|l.e.I.n.|
|00001750| 66 00 6f 00 00 00 00 00 | 24 00 04 00 00 00 54 00 |f.o.....|$.....T.|
|00001760| 72 00 61 00 6e 00 73 00 | 6c 00 61 00 74 00 69 00 |r.a.n.s.|l.a.t.i.|
|00001770| 6f 00 6e 00 00 00 00 00 | 09 04 b0 04 00 00 00 00 |o.n.....|........|
|00001780| 00 00 00 00 c4 00 00 00 | 4c 33 50 33 60 33 68 33 |........|L3P3`3h3|
|00001790| 6c 33 74 33 78 33 88 33 | 92 33 97 33 d0 33 e1 33 |l3t3x3.3|.3.3.3.3|
|000017a0| f4 33 12 34 70 34 80 34 | 8d 34 c3 34 d2 34 df 34 |.3.4p4.4|.4.4.4.4|
|000017b0| 50 35 55 35 9b 35 af 35 | c7 35 df 35 06 36 0f 36 |P5U5.5.5|.5.5.6.6|
|000017c0| 40 36 5d 36 6a 36 72 36 | 89 36 a7 36 f0 36 09 37 |@6]6j6r6|.6.6.6.7|
|000017d0| 1e 37 32 37 46 37 70 37 | ba 37 d9 37 ec 37 20 38 |.727F7p7|.7.7.7 8|
|000017e0| 52 38 5b 38 7b 38 9c 38 | ac 38 df 38 ee 38 ff 38 |R8[8{8.8|.8.8.8.8|
|000017f0| 0a 39 10 39 42 39 4b 39 | 74 39 8e 39 a1 39 b8 39 |.9.9B9K9|t9.9.9.9|
|00001800| bd 39 e4 39 f9 39 11 3a | 2f 3a 38 3a 5b 3a 64 3a |.9.9.9.:|/:8:[:d:|
|00001810| e3 3a af 3b 88 3c 8e 3c | 9d 3c b2 3c c2 3c 0b 3d |.:.;.<.<|.<.<.<.=|
|00001820| 1b 3d 25 3d 31 3d d6 3d | e3 3d f0 3d 03 3e 17 3e |.=%=1=.=|.=.=.>.>|
|00001830| 3d 3e 60 3e 93 3e be 3e | d5 3e e6 3e 00 3f 41 3f |=>`>.>.>|.>.>.?A?|
|00001840| 9c 3f 00 00 00 10 00 00 | 0c 00 00 00 88 30 00 00 |.?......|.....0..|
|00001850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000018a0| 66 00 00 00 20 00 00 00 | 00 00 00 00 00 00 00 00 |f... ...|........|
|000018b0| 60 02 00 00 00 14 00 00 | a0 10 00 00 00 07 00 00 |`.......|........|
|000018c0| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000018d0| 03 00 24 54 36 39 37 37 | 00 00 48 03 00 00 01 00 |..$T6977|..H.....|
|000018e0| 00 00 03 00 24 54 37 30 | 30 32 00 00 58 03 00 00 |....$T70|02..X...|
|000018f0| 01 00 00 00 03 00 24 54 | 37 30 33 31 00 00 80 03 |......$T|7031....|
|00001900| 00 00 01 00 00 00 03 00 | 24 53 47 36 38 38 31 00 |........|$SG6881.|
|00001910| d0 0c 00 00 01 00 00 00 | 03 00 24 53 47 36 38 39 |........|..$SG689|
|00001920| 37 00 8c 0d 00 00 01 00 | 00 00 03 00 24 53 47 36 |7.......|....$SG6|
|00001930| 38 39 34 00 60 0d 00 00 | 01 00 00 00 03 00 24 53 |894.`...|......$S|
|00001940| 47 36 38 39 31 00 3c 0d | 00 00 01 00 00 00 03 00 |G6891.<.|........|
|00001950| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00001960| 03 00 24 52 30 30 30 30 | 30 30 60 14 00 00 03 00 |..$R0000|00`.....|
|00001970| 00 00 03 00 2e 69 64 61 | 74 61 24 36 ba 13 00 00 |.....ida|ta$6....|
|00001980| 02 00 00 00 03 00 2e 74 | 65 78 74 00 00 00 b4 0f |.......t|ext.....|
|00001990| 00 00 01 00 00 00 03 01 | d1 00 00 00 04 00 47 00 |........|......G.|
|000019a0| 00 00 00 00 00 00 00 00 | 00 00 24 24 24 30 30 30 |........|..$$$000|
|000019b0| 30 31 bc 0f 00 00 01 00 | 20 00 03 01 0e 00 00 00 |01......| .......|
|000019c0| 00 00 00 00 ae 01 00 00 | 13 00 00 00 00 00 24 24 |........|......$$|
|000019d0| 24 30 30 30 30 34 85 10 | 00 00 01 00 20 00 03 01 |$00004..|.... ...|
|000019e0| 23 00 00 00 00 00 00 00 | 52 03 00 00 00 00 00 00 |#.......|R.......|
|000019f0| 00 00 00 00 00 00 d9 07 | 00 00 34 10 00 00 01 00 |........|..4.....|
|00001a00| 00 00 03 00 00 00 00 00 | e6 07 00 00 3f 10 00 00 |........|....?...|
|00001a10| 01 00 00 00 03 00 00 00 | 00 00 f2 07 00 00 62 10 |........|......b.|
|00001a20| 00 00 01 00 00 00 03 00 | 5f 6c 68 5f 74 6f 70 00 |........|_lh_top.|
|00001a30| eb 0f 00 00 01 00 00 00 | 03 00 00 00 00 00 fd 07 |........|........|
|00001a40| 00 00 46 10 00 00 01 00 | 00 00 03 00 00 00 00 00 |..F.....|........|
|00001a50| 07 08 00 00 4d 10 00 00 | 01 00 00 00 03 00 2e 74 |....M...|.......t|
|00001a60| 65 78 74 00 00 00 f4 0e | 00 00 01 00 00 00 03 01 |ext.....|........|
|00001a70| bf 00 00 00 04 00 3d 00 | 00 00 00 00 00 00 00 00 |......=.|........|
|00001a80| 00 00 00 00 00 00 15 08 | 00 00 0c 0f 00 00 01 00 |........|........|
|00001a90| 00 00 03 00 24 24 24 30 | 30 30 30 31 f4 0e 00 00 |....$$$0|0001....|
|00001aa0| 01 00 20 00 03 01 0f 00 | 00 00 00 00 00 00 9c 01 |.. .....|........|
|00001ab0| 00 00 14 00 00 00 00 00 | 24 24 24 30 30 30 30 33 |........|$$$00003|
|00001ac0| 14 0f 00 00 01 00 20 00 | 03 01 1d 00 00 00 00 00 |...... .|........|
|00001ad0| 00 00 cc 01 00 00 22 00 | 00 00 00 00 00 00 00 00 |......".|........|
|00001ae0| 20 08 00 00 14 0f 00 00 | 01 00 20 00 03 01 24 00 | .......|.. ...$.|
|00001af0| 00 00 22 00 00 00 d2 01 | 00 00 29 00 00 00 00 00 |..".....|..).....|
|00001b00| 24 24 24 30 30 30 30 35 | 36 0f 00 00 01 00 20 00 |$$$00005|6..... .|
|00001b10| 03 01 2b 00 00 00 00 00 | 00 00 08 02 00 00 30 00 |..+.....|......0.|
|00001b20| 00 00 00 00 24 24 24 30 | 30 30 30 37 90 0f 00 00 |....$$$0|0007....|
|00001b30| 01 00 20 00 03 01 39 00 | 00 00 00 00 00 00 c2 02 |.. ...9.|........|
|00001b40| 00 00 3e 00 00 00 00 00 | 24 24 24 30 30 30 30 39 |..>.....|$$$00009|
|00001b50| b3 0f 00 00 01 00 20 00 | 03 01 47 00 00 00 00 00 |...... .|..G.....|
|00001b60| 00 00 04 03 00 00 00 00 | 00 00 00 00 5f 6c 75 5f |........|...._lu_|
|00001b70| 64 6f 6e 65 82 0f 00 00 | 01 00 00 00 03 00 00 00 |done....|........|
|00001b80| 00 00 31 08 00 00 35 0f | 00 00 01 00 00 00 03 00 |..1...5.|........|
|00001b90| 00 00 00 00 3c 08 00 00 | 80 0f 00 00 01 00 00 00 |....<...|........|
|00001ba0| 03 00 5f 6c 75 5f 74 6f | 70 00 53 0f 00 00 01 00 |.._lu_to|p.S.....|
|00001bb0| 00 00 03 00 5f 61 74 5f | 64 6f 6e 65 b2 0f 00 00 |...._at_|done....|
|00001bc0| 01 00 00 00 03 00 2e 69 | 64 61 74 61 24 36 f0 13 |.......i|data$6..|
|00001bd0| 00 00 02 00 00 00 03 00 | 68 65 61 64 65 72 00 00 |........|header..|
|00001be0| 00 00 00 00 fe ff 00 00 | 02 00 00 00 00 00 6f 01 |........|......o.|
|00001bf0| 00 00 00 00 00 00 ff ff | 00 00 02 00 00 00 00 00 |........|........|
|00001c00| 6c 02 00 00 60 02 00 00 | 01 00 00 00 02 00 00 00 |l...`...|........|
|00001c10| 00 00 9b 02 00 00 64 02 | 00 00 01 00 00 00 02 00 |......d.|........|
|00001c20| 00 00 00 00 c4 07 00 00 | 68 02 00 00 01 00 00 00 |........|h.......|
|00001c30| 02 00 00 00 00 00 53 01 | 00 00 6c 02 00 00 01 00 |......S.|..l.....|
|00001c40| 00 00 02 00 00 00 00 00 | 8f 01 00 00 70 02 00 00 |........|....p...|
|00001c50| 01 00 00 00 02 00 00 00 | 00 00 a0 01 00 00 74 02 |........|......t.|
|00001c60| 00 00 01 00 00 00 02 00 | 00 00 00 00 bc 01 00 00 |........|........|
|00001c70| 78 02 00 00 01 00 00 00 | 02 00 00 00 00 00 d4 01 |x.......|........|
|00001c80| 00 00 7c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..|.....|........|
|00001c90| ed 01 00 00 80 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001ca0| 00 00 0b 02 00 00 84 02 | 00 00 01 00 00 00 02 00 |........|........|
|00001cb0| 00 00 00 00 2f 02 00 00 | 88 02 00 00 01 00 00 00 |..../...|........|
|00001cc0| 02 00 00 00 00 00 48 02 | 00 00 8c 02 00 00 01 00 |......H.|........|
|00001cd0| 00 00 02 00 00 00 00 00 | 81 02 00 00 90 02 00 00 |........|........|
|00001ce0| 01 00 00 00 02 00 00 00 | 00 00 b0 02 00 00 94 02 |........|........|
|00001cf0| 00 00 01 00 00 00 02 00 | 00 00 00 00 d0 02 00 00 |........|........|
|00001d00| 98 02 00 00 01 00 00 00 | 02 00 00 00 00 00 1e 06 |........|........|
|00001d10| 00 00 9c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001d20| f4 02 00 00 9c 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001d30| 00 00 2c 01 00 00 a0 02 | 00 00 01 00 00 00 02 00 |..,.....|........|
|00001d40| 00 00 00 00 20 03 00 00 | a4 02 00 00 01 00 00 00 |.... ...|........|
|00001d50| 02 00 00 00 00 00 3c 03 | 00 00 a8 02 00 00 01 00 |......<.|........|
|00001d60| 00 00 02 00 00 00 00 00 | 5d 03 00 00 ac 02 00 00 |........|].......|
|00001d70| 01 00 00 00 02 00 00 00 | 00 00 78 03 00 00 b0 02 |........|..x.....|
|00001d80| 00 00 01 00 00 00 02 00 | 00 00 00 00 93 03 00 00 |........|........|
|00001d90| b4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 b4 03 |........|........|
|00001da0| 00 00 b8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001db0| cc 03 00 00 bc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001dc0| 00 00 ea 03 00 00 c0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00001dd0| 00 00 00 00 08 04 00 00 | c4 02 00 00 01 00 00 00 |........|........|
|00001de0| 02 00 00 00 00 00 26 04 | 00 00 c8 02 00 00 01 00 |......&.|........|
|00001df0| 00 00 02 00 00 00 00 00 | 3f 04 00 00 cc 02 00 00 |........|?.......|
|00001e00| 01 00 00 00 02 00 00 00 | 00 00 7a 07 00 00 d0 02 |........|..z.....|
|00001e10| 00 00 01 00 00 00 02 00 | 00 00 00 00 1d 01 00 00 |........|........|
|00001e20| d4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 03 03 |........|........|
|00001e30| 00 00 d8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001e40| 02 01 00 00 dc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001e50| 00 00 60 07 00 00 e0 02 | 00 00 01 00 00 00 02 00 |..`.....|........|
|00001e60| 00 00 00 00 13 00 00 00 | 8c 03 00 00 01 00 20 00 |........|...... .|
|00001e70| 02 00 00 00 00 00 32 00 | 00 00 4a 05 00 00 01 00 |......2.|..J.....|
|00001e80| 20 00 02 00 00 00 00 00 | 4b 00 00 00 9a 07 00 00 | .......|K.......|
|00001e90| 01 00 20 00 02 00 00 00 | 00 00 5a 00 00 00 c2 07 |.. .....|..Z.....|
|00001ea0| 00 00 01 00 20 00 02 00 | 00 00 00 00 70 00 00 00 |.... ...|....p...|
|00001eb0| 68 08 00 00 01 00 20 00 | 02 00 00 00 00 00 8a 00 |h..... .|........|
|00001ec0| 00 00 c0 08 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00001ed0| 9e 00 00 00 28 09 00 00 | 01 00 20 00 02 00 00 00 |....(...|.. .....|
|00001ee0| 00 00 b5 00 00 00 b2 09 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00001ef0| 00 00 00 00 c5 00 00 00 | 6a 0a 00 00 01 00 20 00 |........|j..... .|
|00001f00| 02 00 00 00 00 00 de 00 | 00 00 18 0c 00 00 01 00 |........|........|
|00001f10| 20 00 02 00 00 00 00 00 | f1 00 00 00 fc 0c 00 00 | .......|........|
|00001f20| 01 00 20 00 02 00 00 00 | 00 00 04 00 00 00 c6 0d |.. .....|........|
|00001f30| 00 00 01 00 20 00 02 00 | 00 00 00 00 d6 04 00 00 |.... ...|........|
|00001f40| f4 0e 00 00 01 00 20 00 | 02 00 00 00 00 00 e7 04 |...... .|........|
|00001f50| 00 00 36 0f 00 00 01 00 | 20 00 02 00 00 00 00 00 |..6.....| .......|
|00001f60| f7 04 00 00 90 0f 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00001f70| 00 00 7d 01 00 00 bc 0f | 00 00 01 00 20 00 02 00 |..}.....|.... ...|
|00001f80| 00 00 00 00 0e 05 00 00 | 6a 10 00 00 01 00 20 00 |........|j..... .|
|00001f90| 02 00 00 00 00 00 c8 04 | 00 00 86 10 00 00 01 00 |........|........|
|00001fa0| 20 00 02 00 00 00 00 00 | 74 04 00 00 a0 10 00 00 | .......|t.......|
|00001fb0| 02 00 00 00 02 00 00 00 | 00 00 9d 07 00 00 b4 10 |........|........|
|00001fc0| 00 00 02 00 00 00 02 00 | 00 00 00 00 47 07 00 00 |........|....G...|
|00001fd0| c8 10 00 00 02 00 00 00 | 02 00 65 6e 64 00 00 00 |........|..end...|
|00001fe0| 00 00 a0 18 00 00 fe ff | 00 00 02 00 49 08 00 00 |........|....I...|
|00001ff0| 5f 44 72 69 76 65 72 45 | 6e 74 72 79 40 38 00 5f |_DriverE|ntry@8._|
|00002000| 50 72 6f 63 45 78 70 47 | 65 74 43 6f 6d 70 6f 6e |ProcExpG|etCompon|
|00002010| 65 6e 74 46 69 6c 65 4e | 61 6d 65 40 38 00 5f 50 |entFileN|ame@8._P|
|00002020| 72 6f 63 45 78 70 47 65 | 74 4f 62 6a 65 63 74 4e |rocExpGe|tObjectN|
|00002030| 61 6d 65 40 31 32 00 5f | 50 72 6f 63 45 78 70 4f |ame@12._|ProcExpO|
|00002040| 70 65 6e 40 38 00 5f 50 | 72 6f 63 45 78 70 52 65 |pen@8._P|rocExpRe|
|00002050| 61 64 4b 73 74 61 63 6b | 40 31 32 00 5f 50 72 6f |adKstack|@12._Pro|
|00002060| 63 45 78 70 47 65 74 4d | 75 74 61 6e 74 4f 77 6e |cExpGetM|utantOwn|
|00002070| 65 72 40 31 32 00 5f 50 | 72 6f 63 45 78 70 51 75 |er@12._P|rocExpQu|
|00002080| 65 72 79 44 65 70 40 31 | 32 00 5f 50 72 6f 63 45 |eryDep@1|2._ProcE|
|00002090| 78 70 47 65 74 4b 63 6f | 6e 74 65 78 74 40 31 32 |xpGetKco|ntext@12|
|000020a0| 00 5f 50 72 6f 63 45 78 | 70 43 6c 6f 73 65 40 34 |._ProcEx|pClose@4|
|000020b0| 00 5f 50 72 6f 63 45 78 | 70 44 65 76 69 63 65 43 |._ProcEx|pDeviceC|
|000020c0| 6f 6e 74 72 6f 6c 40 33 | 36 00 5f 50 72 6f 63 45 |ontrol@3|6._ProcE|
|000020d0| 78 70 44 69 73 70 61 74 | 63 68 40 38 00 5f 50 72 |xpDispat|ch@8._Pr|
|000020e0| 6f 63 45 78 70 55 6e 6c | 6f 61 64 40 34 00 5f 5f |ocExpUnl|oad@4.__|
|000020f0| 69 6d 70 5f 5f 52 74 6c | 46 72 65 65 41 6e 73 69 |imp__Rtl|FreeAnsi|
|00002100| 53 74 72 69 6e 67 40 34 | 00 5f 5f 69 6d 70 5f 5f |String@4|.__imp__|
|00002110| 73 74 72 6e 63 70 79 00 | 5f 5f 69 6d 70 5f 5f 52 |strncpy.|__imp__R|
|00002120| 74 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 54 |tlUnicod|eStringT|
|00002130| 6f 41 6e 73 69 53 74 72 | 69 6e 67 40 31 32 00 5f |oAnsiStr|ing@12._|
|00002140| 5f 69 6d 70 5f 5f 4f 62 | 51 75 65 72 79 4e 61 6d |_imp__Ob|QueryNam|
|00002150| 65 53 74 72 69 6e 67 40 | 31 36 00 5f 5f 65 78 63 |eString@|16.__exc|
|00002160| 65 70 74 5f 6c 69 73 74 | 00 5f 5f 65 78 63 65 70 |ept_list|.__excep|
|00002170| 74 5f 68 61 6e 64 6c 65 | 72 33 00 5f 5f 69 6d 70 |t_handle|r3.__imp|
|00002180| 5f 5f 5a 77 43 6c 6f 73 | 65 40 34 00 5f 5f 69 6d |__ZwClos|e@4.__im|
|00002190| 70 5f 5f 5a 77 44 75 70 | 6c 69 63 61 74 65 4f 62 |p__ZwDup|licateOb|
|000021a0| 6a 65 63 74 40 32 38 00 | 5f 5f 69 6d 70 5f 5f 5a |ject@28.|__imp__Z|
|000021b0| 77 4f 70 65 6e 50 72 6f | 63 65 73 73 40 31 36 00 |wOpenPro|cess@16.|
|000021c0| 5f 5f 69 6d 70 5f 5f 4b | 65 44 65 74 61 63 68 50 |__imp__K|eDetachP|
|000021d0| 72 6f 63 65 73 73 40 30 | 00 5f 5f 69 6d 70 5f 40 |rocess@0|.__imp_@|
|000021e0| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|000021f0| 6a 65 63 74 40 34 00 5f | 5f 69 6d 70 5f 5f 4f 62 |ject@4._|_imp__Ob|
|00002200| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00002210| 79 48 61 6e 64 6c 65 40 | 32 34 00 5f 5f 69 6d 70 |yHandle@|24.__imp|
|00002220| 5f 5f 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |__KeAtta|chProces|
|00002230| 73 40 34 00 5f 5f 69 6d | 70 5f 5f 50 73 4c 6f 6f |s@4.__im|p__PsLoo|
|00002240| 6b 75 70 50 72 6f 63 65 | 73 73 42 79 50 72 6f 63 |kupProce|ssByProc|
|00002250| 65 73 73 49 64 40 38 00 | 5f 5f 69 6d 70 5f 40 4b |essId@8.|__imp_@K|
|00002260| 66 4c 6f 77 65 72 49 72 | 71 6c 40 34 00 5f 5f 69 |fLowerIr|ql@4.__i|
|00002270| 6d 70 5f 5f 4d 6d 49 73 | 41 64 64 72 65 73 73 56 |mp__MmIs|AddressV|
|00002280| 61 6c 69 64 40 34 00 5f | 5f 69 6d 70 5f 40 4b 66 |alid@4._|_imp_@Kf|
|00002290| 52 61 69 73 65 49 72 71 | 6c 40 34 00 5f 5f 69 6d |RaiseIrq|l@4.__im|
|000022a0| 70 5f 5f 4f 62 4f 70 65 | 6e 4f 62 6a 65 63 74 42 |p__ObOpe|nObjectB|
|000022b0| 79 50 6f 69 6e 74 65 72 | 40 32 38 00 5f 5f 69 6d |yPointer|@28.__im|
|000022c0| 70 5f 5f 5a 77 51 75 65 | 72 79 49 6e 66 6f 72 6d |p__ZwQue|ryInform|
|000022d0| 61 74 69 6f 6e 50 72 6f | 63 65 73 73 40 32 30 00 |ationPro|cess@20.|
|000022e0| 5f 4e 74 42 75 69 6c 64 | 4e 75 6d 62 65 72 00 5f |_NtBuild|Number._|
|000022f0| 5f 69 6d 70 5f 5f 5a 77 | 4f 70 65 6e 50 72 6f 63 |_imp__Zw|OpenProc|
|00002300| 65 73 73 54 6f 6b 65 6e | 40 31 32 00 5f 5f 69 6d |essToken|@12.__im|
|00002310| 70 5f 40 49 6f 66 43 6f | 6d 70 6c 65 74 65 52 65 |p_@IofCo|mpleteRe|
|00002320| 71 75 65 73 74 40 38 00 | 5f 5f 69 6d 70 5f 5f 53 |quest@8.|__imp__S|
|00002330| 65 52 65 6c 65 61 73 65 | 53 75 62 6a 65 63 74 43 |eRelease|SubjectC|
|00002340| 6f 6e 74 65 78 74 40 34 | 00 5f 5f 69 6d 70 5f 5f |ontext@4|.__imp__|
|00002350| 53 65 50 72 69 76 69 6c | 65 67 65 43 68 65 63 6b |SePrivil|egeCheck|
|00002360| 40 31 32 00 5f 5f 69 6d | 70 5f 5f 45 78 47 65 74 |@12.__im|p__ExGet|
|00002370| 50 72 65 76 69 6f 75 73 | 4d 6f 64 65 40 30 00 5f |Previous|Mode@0._|
|00002380| 5f 69 6d 70 5f 5f 53 65 | 43 61 70 74 75 72 65 53 |_imp__Se|CaptureS|
|00002390| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 40 34 00 |ubjectCo|ntext@4.|
|000023a0| 5f 5f 69 6d 70 5f 5f 49 | 6f 44 65 6c 65 74 65 44 |__imp__I|oDeleteD|
|000023b0| 65 76 69 63 65 40 34 00 | 5f 5f 69 6d 70 5f 5f 49 |evice@4.|__imp__I|
|000023c0| 6f 44 65 6c 65 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oDeleteS|ymbolicL|
|000023d0| 69 6e 6b 40 34 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |ink@4.__|imp__Rtl|
|000023e0| 49 6e 69 74 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |InitUnic|odeStrin|
|000023f0| 67 40 38 00 5f 5f 69 6d | 70 5f 5f 49 6f 43 72 65 |g@8.__im|p__IoCre|
|00002400| 61 74 65 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 40 |ateSymbo|licLink@|
|00002410| 38 00 5f 5f 69 6d 70 5f | 5f 49 6f 43 72 65 61 74 |8.__imp_|_IoCreat|
|00002420| 65 44 65 76 69 63 65 40 | 32 38 00 5f 5f 69 6d 70 |eDevice@|28.__imp|
|00002430| 5f 5f 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |__ExAllo|catePool|
|00002440| 57 69 74 68 54 61 67 40 | 31 32 00 5f 52 74 6c 46 |WithTag@|12._RtlF|
|00002450| 72 65 65 41 6e 73 69 53 | 74 72 69 6e 67 40 34 00 |reeAnsiS|tring@4.|
|00002460| 5f 5f 49 4d 50 4f 52 54 | 5f 44 45 53 43 52 49 50 |__IMPORT|_DESCRIP|
|00002470| 54 4f 52 5f 6e 74 6f 73 | 6b 72 6e 6c 00 5f 52 74 |TOR_ntos|krnl._Rt|
|00002480| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00002490| 41 6e 73 69 53 74 72 69 | 6e 67 40 31 32 00 5f 4f |AnsiStri|ng@12._O|
|000024a0| 62 51 75 65 72 79 4e 61 | 6d 65 53 74 72 69 6e 67 |bQueryNa|meString|
|000024b0| 40 31 36 00 5f 52 74 6c | 55 6e 77 69 6e 64 40 31 |@16._Rtl|Unwind@1|
|000024c0| 36 00 5f 5f 67 6c 6f 62 | 61 6c 5f 75 6e 77 69 6e |6.__glob|al_unwin|
|000024d0| 64 32 00 5f 5f 6c 6f 63 | 61 6c 5f 75 6e 77 69 6e |d2.__loc|al_unwin|
|000024e0| 64 32 00 5f 5f 61 62 6e | 6f 72 6d 61 6c 5f 74 65 |d2.__abn|ormal_te|
|000024f0| 72 6d 69 6e 61 74 69 6f | 6e 00 5f 5f 73 65 68 5f |rminatio|n.__seh_|
|00002500| 6c 6f 6e 67 6a 6d 70 5f | 75 6e 77 69 6e 64 40 34 |longjmp_|unwind@4|
|00002510| 00 5f 5a 77 43 6c 6f 73 | 65 40 34 00 5f 5a 77 44 |._ZwClos|e@4._ZwD|
|00002520| 75 70 6c 69 63 61 74 65 | 4f 62 6a 65 63 74 40 32 |uplicate|Object@2|
|00002530| 38 00 5f 5a 77 4f 70 65 | 6e 50 72 6f 63 65 73 73 |8._ZwOpe|nProcess|
|00002540| 40 31 36 00 5f 4b 65 44 | 65 74 61 63 68 50 72 6f |@16._KeD|etachPro|
|00002550| 63 65 73 73 40 30 00 40 | 4f 62 66 44 65 72 65 66 |cess@0.@|ObfDeref|
|00002560| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 40 34 00 5f |erenceOb|ject@4._|
|00002570| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00002580| 74 42 79 48 61 6e 64 6c | 65 40 32 34 00 5f 4b 65 |tByHandl|e@24._Ke|
|00002590| 41 74 74 61 63 68 50 72 | 6f 63 65 73 73 40 34 00 |AttachPr|ocess@4.|
|000025a0| 5f 50 73 4c 6f 6f 6b 75 | 70 50 72 6f 63 65 73 73 |_PsLooku|pProcess|
|000025b0| 42 79 50 72 6f 63 65 73 | 73 49 64 40 38 00 5f 4d |ByProces|sId@8._M|
|000025c0| 6d 49 73 41 64 64 72 65 | 73 73 56 61 6c 69 64 40 |mIsAddre|ssValid@|
|000025d0| 34 00 5f 4f 62 4f 70 65 | 6e 4f 62 6a 65 63 74 42 |4._ObOpe|nObjectB|
|000025e0| 79 50 6f 69 6e 74 65 72 | 40 32 38 00 5f 5a 77 51 |yPointer|@28._ZwQ|
|000025f0| 75 65 72 79 49 6e 66 6f | 72 6d 61 74 69 6f 6e 50 |ueryInfo|rmationP|
|00002600| 72 6f 63 65 73 73 40 32 | 30 00 5f 5f 69 6d 70 5f |rocess@2|0.__imp_|
|00002610| 5f 4e 74 42 75 69 6c 64 | 4e 75 6d 62 65 72 00 5f |_NtBuild|Number._|
|00002620| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 54 6f 6b |ZwOpenPr|ocessTok|
|00002630| 65 6e 40 31 32 00 40 49 | 6f 66 43 6f 6d 70 6c 65 |en@12.@I|ofComple|
|00002640| 74 65 52 65 71 75 65 73 | 74 40 38 00 5f 53 65 52 |teReques|t@8._SeR|
|00002650| 65 6c 65 61 73 65 53 75 | 62 6a 65 63 74 43 6f 6e |eleaseSu|bjectCon|
|00002660| 74 65 78 74 40 34 00 5f | 53 65 50 72 69 76 69 6c |text@4._|SePrivil|
|00002670| 65 67 65 43 68 65 63 6b | 40 31 32 00 5f 45 78 47 |egeCheck|@12._ExG|
|00002680| 65 74 50 72 65 76 69 6f | 75 73 4d 6f 64 65 40 30 |etPrevio|usMode@0|
|00002690| 00 5f 53 65 43 61 70 74 | 75 72 65 53 75 62 6a 65 |._SeCapt|ureSubje|
|000026a0| 63 74 43 6f 6e 74 65 78 | 74 40 34 00 5f 49 6f 44 |ctContex|t@4._IoD|
|000026b0| 65 6c 65 74 65 44 65 76 | 69 63 65 40 34 00 5f 49 |eleteDev|ice@4._I|
|000026c0| 6f 44 65 6c 65 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oDeleteS|ymbolicL|
|000026d0| 69 6e 6b 40 34 00 5f 52 | 74 6c 49 6e 69 74 55 6e |ink@4._R|tlInitUn|
|000026e0| 69 63 6f 64 65 53 74 72 | 69 6e 67 40 38 00 5f 49 |icodeStr|ing@8._I|
|000026f0| 6f 43 72 65 61 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oCreateS|ymbolicL|
|00002700| 69 6e 6b 40 38 00 5f 49 | 6f 43 72 65 61 74 65 44 |ink@8._I|oCreateD|
|00002710| 65 76 69 63 65 40 32 38 | 00 5f 45 78 41 6c 6c 6f |evice@28|._ExAllo|
|00002720| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 40 |catePool|WithTag@|
|00002730| 31 32 00 5f 5f 4e 55 4c | 4c 5f 49 4d 50 4f 52 54 |12.__NUL|L_IMPORT|
|00002740| 5f 44 45 53 43 52 49 50 | 54 4f 52 00 7f 6e 74 6f |_DESCRIP|TOR..nto|
|00002750| 73 6b 72 6e 6c 5f 4e 55 | 4c 4c 5f 54 48 55 4e 4b |skrnl_NU|LL_THUNK|
|00002760| 5f 44 41 54 41 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |_DATA.__|imp__Rtl|
|00002770| 55 6e 77 69 6e 64 40 31 | 36 00 40 4b 66 4c 6f 77 |Unwind@1|6.@KfLow|
|00002780| 65 72 49 72 71 6c 40 34 | 00 5f 5f 49 4d 50 4f 52 |erIrql@4|.__IMPOR|
|00002790| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 5f 48 41 4c |T_DESCRI|PTOR_HAL|
|000027a0| 00 40 4b 66 52 61 69 73 | 65 49 72 71 6c 40 34 00 |.@KfRais|eIrql@4.|
|000027b0| 7f 48 41 4c 5f 4e 55 4c | 4c 5f 54 48 55 4e 4b 5f |.HAL_NUL|L_THUNK_|
|000027c0| 44 41 54 41 00 5f 6c 68 | 5f 63 6f 6e 74 69 6e 75 |DATA._lh|_continu|
|000027d0| 65 00 5f 6c 68 5f 64 69 | 73 6d 69 73 73 00 5f 6c |e._lh_di|smiss._l|
|000027e0| 68 5f 72 65 74 75 72 6e | 00 5f 6c 68 5f 62 61 67 |h_return|._lh_bag|
|000027f0| 69 74 00 5f 6c 68 5f 75 | 6e 77 69 6e 64 69 6e 67 |it._lh_u|nwinding|
|00002800| 00 5f 67 75 5f 72 65 74 | 75 72 6e 00 5f 5f 75 6e |._gu_ret|urn.__un|
|00002810| 77 69 6e 64 5f 68 61 6e | 64 6c 65 72 00 5f 75 68 |wind_han|dler._uh|
|00002820| 5f 72 65 74 75 72 6e 00 | 5f 6c 75 5f 63 6f 6e 74 |_return.|_lu_cont|
|00002830| 69 6e 75 65 00 00 00 00 | 01 00 00 00 10 01 00 00 |inue....|........|
|00002840| 00 00 01 00 64 3a 5c 77 | 69 6e 64 64 6b 5c 31 33 |....d:\w|inddk\13|
|00002850| 38 31 5c 6c 69 62 5c 69 | 33 38 36 5c 66 72 65 65 |81\lib\i|386\free|
|00002860| 5c 70 72 6f 63 65 78 70 | 39 30 2e 73 79 73 00 00 |\procexp|90.sys..|
|00002870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000028a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000028b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000028c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000028d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000028e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000028f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002940| 00 00 00 00 00 00 00 00 | 8c 03 00 00 be 01 00 00 |........|........|
|00002950| 0c 00 00 00 02 00 26 d3 | 4a 05 00 00 4f 02 00 00 |......&.|J...O...|
|00002960| 1e 00 00 00 03 00 26 d3 | 9a 07 00 00 27 00 00 00 |......&.|....'...|
|00002970| 00 00 00 00 02 00 00 00 | c2 07 00 00 a5 00 00 00 |........|........|
|00002980| 02 00 00 00 03 00 09 d3 | 68 08 00 00 58 00 00 00 |........|h...X...|
|00002990| 01 00 00 00 03 00 04 d1 | c0 08 00 00 68 00 00 00 |........|....h...|
|000029a0| 01 00 00 00 03 00 05 d2 | 28 09 00 00 89 00 00 00 |........|(.......|
|000029b0| 01 00 00 00 03 00 0b d3 | b2 09 00 00 b7 00 00 00 |........|........|
|000029c0| 0a 00 00 00 01 00 23 d3 | 6a 0a 00 00 ae 01 00 00 |......#.|j.......|
|000029d0| 01 00 00 00 09 00 11 d3 | 18 0c 00 00 b7 00 00 00 |........|........|
|000029e0| 0b 00 00 00 02 00 10 d3 | fc 0c 00 00 3f 00 00 00 |........|....?...|
|000029f0| 0e 00 00 00 01 00 08 d2 | c6 0d 00 00 2e 01 00 00 |........|........|
|00002a00| 2b 00 00 00 02 00 0c d3 | |+.......| |
+--------+-------------------------+-------------------------+--------+--------+