Liren Large Software Subsidy 7

home *** CD-ROM | disk | FTP | other *** search
/ Liren Large Software Subsidy 7 / 07.iso / c / c083 / 14.ddi / WINLIB32.PAK / IMPORT32.LIB < prev next >
Microsoft Visual C/Basic Library | 1993-12-02 | 257.5 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was processed as: Microsoft Visual C/Basic Library (other/visualCLibrary).
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`1%`	dexvert	Microsoft Visual C/Basic Library `(other/visualCLibrary)`	magic	Unsupported
`1%`	dexvert	Sibelius Music / Score `(music/sibeliusMusicScore)`	ext	Unsupported
`1%`	dexvert	IntelliFont Font `(font/intelliFont)`	ext	Unsupported
`1%`	dexvert	Amiga Hunk Library/Object `(other/amigaLibrary)`	ext	Unsupported
`1%`	dexvert	Amiga Shared Library `(other/amigaSharedLibrary)`	ext	Unsupported
`1%`	dexvert	Chess Assistant File `(other/chessAssistant)`	ext	Unsupported
`1%`	dexvert	CODESYS Library `(other/codesysLibrary)`	ext	Unsupported
`1%`	dexvert	COFF Library `(other/coffLibrary)`	ext	Unsupported
`1%`	dexvert	P-CAD binary Library `(other/pCADBinaryLibrary)`	ext	Unsupported
`1%`	dexvert	Maple Library `(other/mapleLibrary)`	ext	Unsupported
`1%`	dexvert	TopSpeed Modula-2 Library `(other/topSpeedModula2Library)`	ext	Unsupported
`1%`	dexvert	ULTIcap Library `(other/ulticapLibrary)`	ext	Unsupported
`100%`	file	Microsoft Visual C/OMF library, page size 16, at 0x23400 dictionary with 233 blocks (FFLAG=full) 1st entry I_ScSetServiceBitsA in page 1, 2nd record "FASTIMPORTLIB", 3rd record COMMENT class=0xa0 OMF extensions IMPDEF ordinal AbortSystemShutdownA exported by ADVAPI32.dll	default
`99%`	file	data	default
`100%`	TrID	Microsoft Visual C Library	default
`100%`	gt2	C++ Bibliotheks Datei	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| f0 0d 00 00 34 02 00 e9 | 00 00 00 00 00 00 00 00 |....4...|........|
|00000010| 80 0f 00 0d 46 41 53 54 | 49 4d 50 4f 52 54 4c 49 |....FAST|IMPORTLI|
|00000020| 42 00 88 29 00 00 a0 01 | 01 14 41 62 6f 72 74 53 |B..)....|..AbortS|
|00000030| 79 73 74 65 6d 53 68 75 | 74 64 6f 77 6e 41 0c 41 |ystemShu|tdownA.A|
|00000040| 44 56 41 50 49 33 32 2e | 64 6c 6c 01 00 ee 88 29 |DVAPI32.|dll....)|
|00000050| 00 00 a0 01 01 14 41 62 | 6f 72 74 53 79 73 74 65 |......Ab|ortSyste|
|00000060| 6d 53 68 75 74 64 6f 77 | 6e 57 0c 41 44 56 41 50 |mShutdow|nW.ADVAP|
|00000070| 49 33 32 2e 64 6c 6c 02 | 00 d7 88 20 00 00 a0 01 |I32.dll.|... ....|
|00000080| 01 0b 41 63 63 65 73 73 | 43 68 65 63 6b 0c 41 44 |..Access|Check.AD|
|00000090| 56 41 50 49 33 32 2e 64 | 6c 6c 03 00 e8 88 2e 00 |VAPI32.d|ll......|
|000000a0| 00 a0 01 01 19 41 63 63 | 65 73 73 43 68 65 63 6b |.....Acc|essCheck|
|000000b0| 41 6e 64 41 75 64 69 74 | 41 6c 61 72 6d 41 0c 41 |AndAudit|AlarmA.A|
|000000c0| 44 56 41 50 49 33 32 2e | 64 6c 6c 04 00 93 88 2e |DVAPI32.|dll.....|
|000000d0| 00 00 a0 01 01 19 41 63 | 63 65 73 73 43 68 65 63 |......Ac|cessChec|
|000000e0| 6b 41 6e 64 41 75 64 69 | 74 41 6c 61 72 6d 57 0c |kAndAudi|tAlarmW.|
|000000f0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 05 00 7c 88 |ADVAPI32|.dll..|.|
|00000100| 28 00 00 a0 01 01 13 41 | 64 64 41 63 63 65 73 73 |(......A|ddAccess|
|00000110| 41 6c 6c 6f 77 65 64 41 | 63 65 0c 41 44 56 41 50 |AllowedA|ce.ADVAP|
|00000120| 49 33 32 2e 64 6c 6c 06 | 00 d9 88 27 00 00 a0 01 |I32.dll.|...'....|
|00000130| 01 12 41 64 64 41 63 63 | 65 73 73 44 65 6e 69 65 |..AddAcc|essDenie|
|00000140| 64 41 63 65 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |dAce.ADV|API32.dl|
|00000150| 6c 07 00 59 88 1b 00 00 | a0 01 01 06 41 64 64 41 |l..Y....|....AddA|
|00000160| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 08 |ce.ADVAP|I32.dll.|
|00000170| 00 0b 88 26 00 00 a0 01 | 01 11 41 64 64 41 75 64 |...&....|..AddAud|
|00000180| 69 74 41 63 63 65 73 73 | 41 63 65 0c 41 44 56 41 |itAccess|Ace.ADVA|
|00000190| 50 49 33 32 2e 64 6c 6c | 09 00 ab 88 26 00 00 a0 |PI32.dll|....&...|
|000001a0| 01 01 11 41 64 6a 75 73 | 74 54 6f 6b 65 6e 47 72 |...Adjus|tTokenGr|
|000001b0| 6f 75 70 73 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |oups.ADV|API32.dl|
|000001c0| 6c 0a 00 19 88 2a 00 00 | a0 01 01 15 41 64 6a 75 |l....*..|....Adju|
|000001d0| 73 74 54 6f 6b 65 6e 50 | 72 69 76 69 6c 65 67 65 |stTokenP|rivilege|
|000001e0| 73 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 0b 00 |s.ADVAPI|32.dll..|
|000001f0| 76 88 2d 00 00 a0 01 01 | 18 41 6c 6c 6f 63 61 74 |v.-.....|.Allocat|
|00000200| 65 41 6e 64 49 6e 69 74 | 69 61 6c 69 7a 65 53 69 |eAndInit|ializeSi|
|00000210| 64 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 0c 00 |d.ADVAPI|32.dll..|
|00000220| 8b 88 2c 00 00 a0 01 01 | 17 41 6c 6c 6f 63 61 74 |..,.....|.Allocat|
|00000230| 65 4c 6f 63 61 6c 6c 79 | 55 6e 69 71 75 65 49 64 |eLocally|UniqueId|
|00000240| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 0d 00 dd |.ADVAPI3|2.dll...|
|00000250| 88 2a 00 00 a0 01 01 15 | 41 72 65 41 6c 6c 41 63 |.*......|AreAllAc|
|00000260| 63 65 73 73 65 73 47 72 | 61 6e 74 65 64 0c 41 44 |cessesGr|anted.AD|
|00000270| 56 41 50 49 33 32 2e 64 | 6c 6c 0e 00 d9 88 2a 00 |VAPI32.d|ll....*.|
|00000280| 00 a0 01 01 15 41 72 65 | 41 6e 79 41 63 63 65 73 |.....Are|AnyAcces|
|00000290| 73 65 73 47 72 61 6e 74 | 65 64 0c 41 44 56 41 50 |sesGrant|ed.ADVAP|
|000002a0| 49 33 32 2e 64 6c 6c 0f | 00 c9 88 24 00 00 a0 01 |I32.dll.|...$....|
|000002b0| 01 0f 42 61 63 6b 75 70 | 45 76 65 6e 74 4c 6f 67 |..Backup|EventLog|
|000002c0| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 10 00 |A.ADVAPI|32.dll..|
|000002d0| 48 88 24 00 00 a0 01 01 | 0f 42 61 63 6b 75 70 45 |H.$.....|.BackupE|
|000002e0| 76 65 6e 74 4c 6f 67 57 | 0c 41 44 56 41 50 49 33 |ventLogW|.ADVAPI3|
|000002f0| 32 2e 64 6c 6c 11 00 31 | 88 29 00 00 a0 01 01 14 |2.dll..1|.)......|
|00000300| 43 68 61 6e 67 65 53 65 | 72 76 69 63 65 43 6f 6e |ChangeSe|rviceCon|
|00000310| 66 69 67 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |figA.ADV|API32.dl|
|00000320| 6c 12 00 49 88 29 00 00 | a0 01 01 14 43 68 61 6e |l..I.)..|....Chan|
|00000330| 67 65 53 65 72 76 69 63 | 65 43 6f 6e 66 69 67 57 |geServic|eConfigW|
|00000340| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 13 00 32 |.ADVAPI3|2.dll..2|
|00000350| 88 23 00 00 a0 01 01 0e | 43 6c 65 61 72 45 76 65 |.#......|ClearEve|
|00000360| 6e 74 4c 6f 67 41 0c 41 | 44 56 41 50 49 33 32 2e |ntLogA.A|DVAPI32.|
|00000370| 64 6c 6c 14 00 b5 88 23 | 00 00 a0 01 01 0e 43 6c |dll....#|......Cl|
|00000380| 65 61 72 45 76 65 6e 74 | 4c 6f 67 57 0c 41 44 56 |earEvent|LogW.ADV|
|00000390| 41 50 49 33 32 2e 64 6c | 6c 15 00 9e 88 22 00 00 |API32.dl|l...."..|
|000003a0| a0 01 01 0d 43 6c 6f 73 | 65 45 76 65 6e 74 4c 6f |....Clos|eEventLo|
|000003b0| 67 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 16 00 |g.ADVAPI|32.dll..|
|000003c0| e7 88 27 00 00 a0 01 01 | 12 43 6c 6f 73 65 53 65 |..'.....|.CloseSe|
|000003d0| 72 76 69 63 65 48 61 6e | 64 6c 65 0c 41 44 56 41 |rviceHan|dle.ADVA|
|000003e0| 50 49 33 32 2e 64 6c 6c | 17 00 e3 88 23 00 00 a0 |PI32.dll|....#...|
|000003f0| 01 01 0e 43 6f 6e 74 72 | 6f 6c 53 65 72 76 69 63 |...Contr|olServic|
|00000400| 65 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 18 00 |e.ADVAPI|32.dll..|
|00000410| 4b 88 1c 00 00 a0 01 01 | 07 43 6f 70 79 53 69 64 |K.......|.CopySid|
|00000420| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 19 00 4f |.ADVAPI3|2.dll..O|
|00000430| 88 30 00 00 a0 01 01 1b | 43 72 65 61 74 65 50 72 |.0......|CreatePr|
|00000440| 69 76 61 74 65 4f 62 6a | 65 63 74 53 65 63 75 72 |ivateObj|ectSecur|
|00000450| 69 74 79 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ity.ADVA|PI32.dll|
|00000460| 1a 00 03 88 23 00 00 a0 | 01 01 0e 43 72 65 61 74 |....#...|...Creat|
|00000470| 65 53 65 72 76 69 63 65 | 41 0c 41 44 56 41 50 49 |eService|A.ADVAPI|
|00000480| 33 32 2e 64 6c 6c 1b 00 | 94 88 23 00 00 a0 01 01 |32.dll..|..#.....|
|00000490| 0e 43 72 65 61 74 65 53 | 65 72 76 69 63 65 57 0c |.CreateS|erviceW.|
|000004a0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 1c 00 7d 88 |ADVAPI32|.dll..}.|
|000004b0| 1e 00 00 a0 01 01 09 44 | 65 6c 65 74 65 41 63 65 |.......D|eleteAce|
|000004c0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 1d 00 a6 |.ADVAPI3|2.dll...|
|000004d0| 88 22 00 00 a0 01 01 0d | 44 65 6c 65 74 65 53 65 |."......|DeleteSe|
|000004e0| 72 76 69 63 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |rvice.AD|VAPI32.d|
|000004f0| 6c 6c 1e 00 d5 88 2a 00 | 00 a0 01 01 15 44 65 72 |ll....*.|.....Der|
|00000500| 65 67 69 73 74 65 72 45 | 76 65 6e 74 53 6f 75 72 |egisterE|ventSour|
|00000510| 63 65 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 1f |ce.ADVAP|I32.dll.|
|00000520| 00 67 88 31 00 00 a0 01 | 01 1c 44 65 73 74 72 6f |.g.1....|..Destro|
|00000530| 79 50 72 69 76 61 74 65 | 4f 62 6a 65 63 74 53 65 |yPrivate|ObjectSe|
|00000540| 63 75 72 69 74 79 0c 41 | 44 56 41 50 49 33 32 2e |curity.A|DVAPI32.|
|00000550| 64 6c 6c 20 00 65 88 23 | 00 00 a0 01 01 0e 44 75 |dll .e.#|......Du|
|00000560| 70 6c 69 63 61 74 65 54 | 6f 6b 65 6e 0c 41 44 56 |plicateT|oken.ADV|
|00000570| 41 50 49 33 32 2e 64 6c | 6c 21 00 58 88 2b 00 00 |API32.dl|l!.X.+..|
|00000580| a0 01 01 16 45 6c 66 42 | 61 63 6b 75 70 45 76 65 |....ElfB|ackupEve|
|00000590| 6e 74 4c 6f 67 46 69 6c | 65 41 0c 41 44 56 41 50 |ntLogFil|eA.ADVAP|
|000005a0| 49 33 32 2e 64 6c 6c 22 | 00 91 88 2b 00 00 a0 01 |I32.dll"|...+....|
|000005b0| 01 16 45 6c 66 42 61 63 | 6b 75 70 45 76 65 6e 74 |..ElfBac|kupEvent|
|000005c0| 4c 6f 67 46 69 6c 65 57 | 0c 41 44 56 41 50 49 33 |LogFileW|.ADVAPI3|
|000005d0| 32 2e 64 6c 6c 23 00 7a | 88 24 00 00 a0 01 01 0f |2.dll#.z|.$......|
|000005e0| 45 6c 66 43 68 61 6e 67 | 65 4e 6f 74 69 66 79 0c |ElfChang|eNotify.|
|000005f0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 24 00 19 88 |ADVAPI32|.dll$...|
|00000600| 2a 00 00 a0 01 01 15 45 | 6c 66 43 6c 65 61 72 45 |*......E|lfClearE|
|00000610| 76 65 6e 74 4c 6f 67 46 | 69 6c 65 41 0c 41 44 56 |ventLogF|ileA.ADV|
|00000620| 41 50 49 33 32 2e 64 6c | 6c 25 00 ff 88 2a 00 00 |API32.dl|l%...*..|
|00000630| a0 01 01 15 45 6c 66 43 | 6c 65 61 72 45 76 65 6e |....ElfC|learEven|
|00000640| 74 4c 6f 67 46 69 6c 65 | 57 0c 41 44 56 41 50 49 |tLogFile|W.ADVAPI|
|00000650| 33 32 2e 64 6c 6c 26 00 | e8 88 25 00 00 a0 01 01 |32.dll&.|..%.....|
|00000660| 10 45 6c 66 43 6c 6f 73 | 65 45 76 65 6e 74 4c 6f |.ElfClos|eEventLo|
|00000670| 67 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 27 00 |g.ADVAPI|32.dll'.|
|00000680| b9 88 2d 00 00 a0 01 01 | 18 45 6c 66 44 65 72 65 |..-.....|.ElfDere|
|00000690| 67 69 73 74 65 72 45 76 | 65 6e 74 53 6f 75 72 63 |gisterEv|entSourc|
|000006a0| 65 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 28 00 |e.ADVAPI|32.dll(.|
|000006b0| 41 88 27 00 00 a0 01 01 | 12 45 6c 66 4e 75 6d 62 |A.'.....|.ElfNumb|
|000006c0| 65 72 4f 66 52 65 63 6f | 72 64 73 0c 41 44 56 41 |erOfReco|rds.ADVA|
|000006d0| 50 49 33 32 2e 64 6c 6c | 29 00 dd 88 24 00 00 a0 |PI32.dll|)...$...|
|000006e0| 01 01 0f 45 6c 66 4f 6c | 64 65 73 74 52 65 63 6f |...ElfOl|destReco|
|000006f0| 72 64 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 2a |rd.ADVAP|I32.dll*|
|00000700| 00 08 88 2b 00 00 a0 01 | 01 16 45 6c 66 4f 70 65 |...+....|..ElfOpe|
|00000710| 6e 42 61 63 6b 75 70 45 | 76 65 6e 74 4c 6f 67 41 |nBackupE|ventLogA|
|00000720| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 2b 00 76 |.ADVAPI3|2.dll+.v|
|00000730| 88 2b 00 00 a0 01 01 16 | 45 6c 66 4f 70 65 6e 42 |.+......|ElfOpenB|
|00000740| 61 63 6b 75 70 45 76 65 | 6e 74 4c 6f 67 57 0c 41 |ackupEve|ntLogW.A|
|00000750| 44 56 41 50 49 33 32 2e | 64 6c 6c 2c 00 5f 88 25 |DVAPI32.|dll,._.%|
|00000760| 00 00 a0 01 01 10 45 6c | 66 4f 70 65 6e 45 76 65 |......El|fOpenEve|
|00000770| 6e 74 4c 6f 67 41 0c 41 | 44 56 41 50 49 33 32 2e |ntLogA.A|DVAPI32.|
|00000780| 64 6c 6c 2d 00 d6 88 25 | 00 00 a0 01 01 10 45 6c |dll-...%|......El|
|00000790| 66 4f 70 65 6e 45 76 65 | 6e 74 4c 6f 67 57 0c 41 |fOpenEve|ntLogW.A|
|000007a0| 44 56 41 50 49 33 32 2e | 64 6c 6c 2e 00 bf 88 25 |DVAPI32.|dll....%|
|000007b0| 00 00 a0 01 01 10 45 6c | 66 52 65 61 64 45 76 65 |......El|fReadEve|
|000007c0| 6e 74 4c 6f 67 41 0c 41 | 44 56 41 50 49 33 32 2e |ntLogA.A|DVAPI32.|
|000007d0| 64 6c 6c 2f 00 ea 88 25 | 00 00 a0 01 01 10 45 6c |dll/...%|......El|
|000007e0| 66 52 65 61 64 45 76 65 | 6e 74 4c 6f 67 57 0c 41 |fReadEve|ntLogW.A|
|000007f0| 44 56 41 50 49 33 32 2e | 64 6c 6c 30 00 d3 88 2c |DVAPI32.|dll0...,|
|00000800| 00 00 a0 01 01 17 45 6c | 66 52 65 67 69 73 74 65 |......El|fRegiste|
|00000810| 72 45 76 65 6e 74 53 6f | 75 72 63 65 41 0c 41 44 |rEventSo|urceA.AD|
|00000820| 56 41 50 49 33 32 2e 64 | 6c 6c 31 00 c2 88 2c 00 |VAPI32.d|ll1...,.|
|00000830| 00 a0 01 01 17 45 6c 66 | 52 65 67 69 73 74 65 72 |.....Elf|Register|
|00000840| 45 76 65 6e 74 53 6f 75 | 72 63 65 57 0c 41 44 56 |EventSou|rceW.ADV|
|00000850| 41 50 49 33 32 2e 64 6c | 6c 32 00 ab 88 24 00 00 |API32.dl|l2...$..|
|00000860| a0 01 01 0f 45 6c 66 52 | 65 70 6f 72 74 45 76 65 |....ElfR|eportEve|
|00000870| 6e 74 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ntA.ADVA|PI32.dll|
|00000880| 33 00 0a 88 24 00 00 a0 | 01 01 0f 45 6c 66 52 65 |3...$...|...ElfRe|
|00000890| 70 6f 72 74 45 76 65 6e | 74 57 0c 41 44 56 41 50 |portEven|tW.ADVAP|
|000008a0| 49 33 32 2e 64 6c 6c 34 | 00 f3 88 2b 00 00 a0 01 |I32.dll4|...+....|
|000008b0| 01 16 45 6e 75 6d 44 65 | 70 65 6e 64 65 6e 74 53 |..EnumDe|pendentS|
|000008c0| 65 72 76 69 63 65 73 41 | 0c 41 44 56 41 50 49 33 |ervicesA|.ADVAPI3|
|000008d0| 32 2e 64 6c 6c 35 00 1f | 88 2b 00 00 a0 01 01 16 |2.dll5..|.+......|
|000008e0| 45 6e 75 6d 44 65 70 65 | 6e 64 65 6e 74 53 65 72 |EnumDepe|ndentSer|
|000008f0| 76 69 63 65 73 57 0c 41 | 44 56 41 50 49 33 32 2e |vicesW.A|DVAPI32.|
|00000900| 64 6c 6c 36 00 08 88 28 | 00 00 a0 01 01 13 45 6e |dll6...(|......En|
|00000910| 75 6d 53 65 72 76 69 63 | 65 73 53 74 61 74 75 73 |umServic|esStatus|
|00000920| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 37 00 |A.ADVAPI|32.dll7.|
|00000930| 36 88 28 00 00 a0 01 01 | 13 45 6e 75 6d 53 65 72 |6.(.....|.EnumSer|
|00000940| 76 69 63 65 73 53 74 61 | 74 75 73 57 0c 41 44 56 |vicesSta|tusW.ADV|
|00000950| 41 50 49 33 32 2e 64 6c | 6c 38 00 1f 88 23 00 00 |API32.dl|l8...#..|
|00000960| a0 01 01 0e 45 71 75 61 | 6c 50 72 65 66 69 78 53 |....Equa|lPrefixS|
|00000970| 69 64 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 39 |id.ADVAP|I32.dll9|
|00000980| 00 56 88 1d 00 00 a0 01 | 01 08 45 71 75 61 6c 53 |.V......|..EqualS|
|00000990| 69 64 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 3a |id.ADVAP|I32.dll:|
|000009a0| 00 cf 88 25 00 00 a0 01 | 01 10 46 69 6e 64 46 69 |...%....|..FindFi|
|000009b0| 72 73 74 46 72 65 65 41 | 63 65 0c 41 44 56 41 50 |rstFreeA|ce.ADVAP|
|000009c0| 49 33 32 2e 64 6c 6c 3b | 00 c2 88 1c 00 00 a0 01 |I32.dll;|........|
|000009d0| 01 07 46 72 65 65 53 69 | 64 0c 41 44 56 41 50 49 |..FreeSi|d.ADVAPI|
|000009e0| 33 32 2e 64 6c 6c 3c 00 | 45 88 1b 00 00 a0 01 01 |32.dll<.|E.......|
|000009f0| 06 47 65 74 41 63 65 0c | 41 44 56 41 50 49 33 32 |.GetAce.|ADVAPI32|
|00000a00| 2e 64 6c 6c 3d 00 bf 88 | 26 00 00 a0 01 01 11 47 |.dll=...|&......G|
|00000a10| 65 74 41 63 6c 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |etAclInf|ormation|
|00000a20| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 3e 00 1b |.ADVAPI3|2.dll>..|
|00000a30| 88 25 00 00 a0 01 01 10 | 47 65 74 46 69 6c 65 53 |.%......|GetFileS|
|00000a40| 65 63 75 72 69 74 79 41 | 0c 41 44 56 41 50 49 33 |ecurityA|.ADVAPI3|
|00000a50| 32 2e 64 6c 6c 3f 00 99 | 88 25 00 00 a0 01 01 10 |2.dll?..|.%......|
|00000a60| 47 65 74 46 69 6c 65 53 | 65 63 75 72 69 74 79 57 |GetFileS|ecurityW|
|00000a70| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 40 00 82 |.ADVAPI3|2.dll@..|
|00000a80| 88 2c 00 00 a0 01 01 17 | 47 65 74 4b 65 72 6e 65 |.,......|GetKerne|
|00000a90| 6c 4f 62 6a 65 63 74 53 | 65 63 75 72 69 74 79 0c |lObjectS|ecurity.|
|00000aa0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 41 00 92 88 |ADVAPI32|.dllA...|
|00000ab0| 21 00 00 a0 01 01 0c 47 | 65 74 4c 65 6e 67 74 68 |!......G|etLength|
|00000ac0| 53 69 64 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |Sid.ADVA|PI32.dll|
|00000ad0| 42 00 35 88 2f 00 00 a0 | 01 01 1a 47 65 74 4e 75 |B.5./...|...GetNu|
|00000ae0| 6d 62 65 72 4f 66 45 76 | 65 6e 74 4c 6f 67 52 65 |mberOfEv|entLogRe|
|00000af0| 63 6f 72 64 73 0c 41 44 | 56 41 50 49 33 32 2e 64 |cords.AD|VAPI32.d|
|00000b00| 6c 6c 43 00 86 88 2c 00 | 00 a0 01 01 17 47 65 74 |llC...,.|.....Get|
|00000b10| 4f 6c 64 65 73 74 45 76 | 65 6e 74 4c 6f 67 52 65 |OldestEv|entLogRe|
|00000b20| 63 6f 72 64 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |cord.ADV|API32.dl|
|00000b30| 6c 44 00 b1 88 2d 00 00 | a0 01 01 18 47 65 74 50 |lD...-..|....GetP|
|00000b40| 72 69 76 61 74 65 4f 62 | 6a 65 63 74 53 65 63 75 |rivateOb|jectSecu|
|00000b50| 72 69 74 79 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |rity.ADV|API32.dl|
|00000b60| 6c 45 00 12 88 31 00 00 | a0 01 01 1c 47 65 74 53 |lE...1..|....GetS|
|00000b70| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000b80| 72 43 6f 6e 74 72 6f 6c | 0c 41 44 56 41 50 49 33 |rControl|.ADVAPI3|
|00000b90| 32 2e 64 6c 6c 46 00 3b | 88 2e 00 00 a0 01 01 19 |2.dllF.;|........|
|00000ba0| 47 65 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |GetSecur|ityDescr|
|00000bb0| 69 70 74 6f 72 44 61 63 | 6c 0c 41 44 56 41 50 49 |iptorDac|l.ADVAPI|
|00000bc0| 33 32 2e 64 6c 6c 47 00 | ad 88 2f 00 00 a0 01 01 |32.dllG.|../.....|
|00000bd0| 1a 47 65 74 53 65 63 75 | 72 69 74 79 44 65 73 63 |.GetSecu|rityDesc|
|00000be0| 72 69 70 74 6f 72 47 72 | 6f 75 70 0c 41 44 56 41 |riptorGr|oup.ADVA|
|00000bf0| 50 49 33 32 2e 64 6c 6c | 48 00 11 88 30 00 00 a0 |PI32.dll|H...0...|
|00000c00| 01 01 1b 47 65 74 53 65 | 63 75 72 69 74 79 44 65 |...GetSe|curityDe|
|00000c10| 73 63 72 69 70 74 6f 72 | 4c 65 6e 67 74 68 0c 41 |scriptor|Length.A|
|00000c20| 44 56 41 50 49 33 32 2e | 64 6c 6c 49 00 b9 88 2f |DVAPI32.|dllI.../|
|00000c30| 00 00 a0 01 01 1a 47 65 | 74 53 65 63 75 72 69 74 |......Ge|tSecurit|
|00000c40| 79 44 65 73 63 72 69 70 | 74 6f 72 4f 77 6e 65 72 |yDescrip|torOwner|
|00000c50| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 4a 00 11 |.ADVAPI3|2.dllJ..|
|00000c60| 88 2e 00 00 a0 01 01 19 | 47 65 74 53 65 63 75 72 |........|GetSecur|
|00000c70| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 53 61 63 |ityDescr|iptorSac|
|00000c80| 6c 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 4b 00 |l.ADVAPI|32.dllK.|
|00000c90| 9a 88 2b 00 00 a0 01 01 | 16 47 65 74 53 65 72 76 |..+.....|.GetServ|
|00000ca0| 69 63 65 44 69 73 70 6c | 61 79 4e 61 6d 65 41 0c |iceDispl|ayNameA.|
|00000cb0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 4c 00 30 88 |ADVAPI32|.dllL.0.|
|00000cc0| 2b 00 00 a0 01 01 16 47 | 65 74 53 65 72 76 69 63 |+......G|etServic|
|00000cd0| 65 44 69 73 70 6c 61 79 | 4e 61 6d 65 57 0c 41 44 |eDisplay|NameW.AD|
|00000ce0| 56 41 50 49 33 32 2e 64 | 6c 6c 4d 00 19 88 27 00 |VAPI32.d|llM...'.|
|00000cf0| 00 a0 01 01 12 47 65 74 | 53 65 72 76 69 63 65 4b |.....Get|ServiceK|
|00000d00| 65 79 4e 61 6d 65 41 0c | 41 44 56 41 50 49 33 32 |eyNameA.|ADVAPI32|
|00000d10| 2e 64 6c 6c 4e 00 e3 88 | 27 00 00 a0 01 01 12 47 |.dllN...|'......G|
|00000d20| 65 74 53 65 72 76 69 63 | 65 4b 65 79 4e 61 6d 65 |etServic|eKeyName|
|00000d30| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 4f 00 |W.ADVAPI|32.dllO.|
|00000d40| cc 88 2e 00 00 a0 01 01 | 19 47 65 74 53 69 64 49 |........|.GetSidI|
|00000d50| 64 65 6e 74 69 66 69 65 | 72 41 75 74 68 6f 72 69 |dentifie|rAuthori|
|00000d60| 74 79 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 50 |ty.ADVAP|I32.dllP|
|00000d70| 00 a3 88 29 00 00 a0 01 | 01 14 47 65 74 53 69 64 |...)....|..GetSid|
|00000d80| 4c 65 6e 67 74 68 52 65 | 71 75 69 72 65 64 0c 41 |LengthRe|quired.A|
|00000d90| 44 56 41 50 49 33 32 2e | 64 6c 6c 51 00 d5 88 27 |DVAPI32.|dllQ...'|
|00000da0| 00 00 a0 01 01 12 47 65 | 74 53 69 64 53 75 62 41 |......Ge|tSidSubA|
|00000db0| 75 74 68 6f 72 69 74 79 | 0c 41 44 56 41 50 49 33 |uthority|.ADVAPI3|
|00000dc0| 32 2e 64 6c 6c 52 00 88 | 88 2c 00 00 a0 01 01 17 |2.dllR..|.,......|
|00000dd0| 47 65 74 53 69 64 53 75 | 62 41 75 74 68 6f 72 69 |GetSidSu|bAuthori|
|00000de0| 74 79 43 6f 75 6e 74 0c | 41 44 56 41 50 49 33 32 |tyCount.|ADVAPI32|
|00000df0| 2e 64 6c 6c 53 00 74 88 | 28 00 00 a0 01 01 13 47 |.dllS.t.|(......G|
|00000e00| 65 74 54 6f 6b 65 6e 49 | 6e 66 6f 72 6d 61 74 69 |etTokenI|nformati|
|00000e10| 6f 6e 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 54 |on.ADVAP|I32.dllT|
|00000e20| 00 10 88 21 00 00 a0 01 | 01 0c 47 65 74 55 73 65 |...!....|..GetUse|
|00000e30| 72 4e 61 6d 65 41 0c 41 | 44 56 41 50 49 33 32 2e |rNameA.A|DVAPI32.|
|00000e40| 64 6c 6c 55 00 43 88 21 | 00 00 a0 01 01 0c 47 65 |dllU.C.!|......Ge|
|00000e50| 74 55 73 65 72 4e 61 6d | 65 57 0c 41 44 56 41 50 |tUserNam|eW.ADVAP|
|00000e60| 49 33 32 2e 64 6c 6c 56 | 00 2c 88 28 00 00 a0 01 |I32.dllV|.,.(....|
|00000e70| 01 13 49 5f 53 63 53 65 | 74 53 65 72 76 69 63 65 |..I_ScSe|tService|
|00000e80| 42 69 74 73 41 0c 41 44 | 56 41 50 49 33 32 2e 64 |BitsA.AD|VAPI32.d|
|00000e90| 6c 6c 57 00 86 88 28 00 | 00 a0 01 01 13 49 5f 53 |llW...(.|.....I_S|
|00000ea0| 63 53 65 74 53 65 72 76 | 69 63 65 42 69 74 73 57 |cSetServ|iceBitsW|
|00000eb0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 58 00 6f |.ADVAPI3|2.dllX.o|
|00000ec0| 88 2f 00 00 a0 01 01 1a | 49 6d 70 65 72 73 6f 6e |./......|Imperson|
|00000ed0| 61 74 65 4e 61 6d 65 64 | 50 69 70 65 43 6c 69 65 |ateNamed|PipeClie|
|00000ee0| 6e 74 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 59 |nt.ADVAP|I32.dllY|
|00000ef0| 00 4b 88 24 00 00 a0 01 | 01 0f 49 6d 70 65 72 73 |.K.$....|..Impers|
|00000f00| 6f 6e 61 74 65 53 65 6c | 66 0c 41 44 56 41 50 49 |onateSel|f.ADVAPI|
|00000f10| 33 32 2e 64 6c 6c 5a 00 | a8 88 22 00 00 a0 01 01 |32.dllZ.|..".....|
|00000f20| 0d 49 6e 69 74 69 61 6c | 69 7a 65 41 63 6c 0c 41 |.Initial|izeAcl.A|
|00000f30| 44 56 41 50 49 33 32 2e | 64 6c 6c 5b 00 9a 88 31 |DVAPI32.|dll[...1|
|00000f40| 00 00 a0 01 01 1c 49 6e | 69 74 69 61 6c 69 7a 65 |......In|itialize|
|00000f50| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00000f60| 6f 72 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 5c |or.ADVAP|I32.dll\|
|00000f70| 00 14 88 22 00 00 a0 01 | 01 0d 49 6e 69 74 69 61 |..."....|..Initia|
|00000f80| 6c 69 7a 65 53 69 64 0c | 41 44 56 41 50 49 33 32 |lizeSid.|ADVAPI32|
|00000f90| 2e 64 6c 6c 5d 00 88 88 | 2c 00 00 a0 01 01 17 49 |.dll]...|,......I|
|00000fa0| 6e 69 74 69 61 74 65 53 | 79 73 74 65 6d 53 68 75 |nitiateS|ystemShu|
|00000fb0| 74 64 6f 77 6e 41 0c 41 | 44 56 41 50 49 33 32 2e |tdownA.A|DVAPI32.|
|00000fc0| 64 6c 6c 5e 00 4c 88 2c | 00 00 a0 01 01 17 49 6e |dll^.L.,|......In|
|00000fd0| 69 74 69 61 74 65 53 79 | 73 74 65 6d 53 68 75 74 |itiateSy|stemShut|
|00000fe0| 64 6f 77 6e 57 0c 41 44 | 56 41 50 49 33 32 2e 64 |downW.AD|VAPI32.d|
|00000ff0| 6c 6c 5f 00 35 88 1f 00 | 00 a0 01 01 0a 49 73 56 |ll_.5...|.....IsV|
|00001000| 61 6c 69 64 41 63 6c 0c | 41 44 56 41 50 49 33 32 |alidAcl.|ADVAPI32|
|00001010| 2e 64 6c 6c 60 00 01 88 | 2e 00 00 a0 01 01 19 49 |.dll`...|.......I|
|00001020| 73 56 61 6c 69 64 53 65 | 63 75 72 69 74 79 44 65 |sValidSe|curityDe|
|00001030| 73 63 72 69 70 74 6f 72 | 0c 41 44 56 41 50 49 33 |scriptor|.ADVAPI3|
|00001040| 32 2e 64 6c 6c 61 00 7b | 88 1f 00 00 a0 01 01 0a |2.dlla.{|........|
|00001050| 49 73 56 61 6c 69 64 53 | 69 64 0c 41 44 56 41 50 |IsValidS|id.ADVAP|
|00001060| 49 33 32 2e 64 6c 6c 62 | 00 ef 88 28 00 00 a0 01 |I32.dllb|...(....|
|00001070| 01 13 4c 6f 63 6b 53 65 | 72 76 69 63 65 44 61 74 |..LockSe|rviceDat|
|00001080| 61 62 61 73 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |abase.AD|VAPI32.d|
|00001090| 6c 6c 63 00 39 88 27 00 | 00 a0 01 01 12 4c 6f 6f |llc.9.'.|.....Loo|
|000010a0| 6b 75 70 41 63 63 6f 75 | 6e 74 4e 61 6d 65 41 0c |kupAccou|ntNameA.|
|000010b0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 64 00 a0 88 |ADVAPI32|.dlld...|
|000010c0| 27 00 00 a0 01 01 12 4c | 6f 6f 6b 75 70 41 63 63 |'......L|ookupAcc|
|000010d0| 6f 75 6e 74 4e 61 6d 65 | 57 0c 41 44 56 41 50 49 |ountName|W.ADVAPI|
|000010e0| 33 32 2e 64 6c 6c 65 00 | 89 88 26 00 00 a0 01 01 |32.dlle.|..&.....|
|000010f0| 11 4c 6f 6f 6b 75 70 41 | 63 63 6f 75 6e 74 53 69 |.LookupA|ccountSi|
|00001100| 64 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 66 |dA.ADVAP|I32.dllf|
|00001110| 00 01 88 26 00 00 a0 01 | 01 11 4c 6f 6f 6b 75 70 |...&....|..Lookup|
|00001120| 41 63 63 6f 75 6e 74 53 | 69 64 57 0c 41 44 56 41 |AccountS|idW.ADVA|
|00001130| 50 49 33 32 2e 64 6c 6c | 67 00 ea 88 30 00 00 a0 |PI32.dll|g...0...|
|00001140| 01 01 1b 4c 6f 6f 6b 75 | 70 50 72 69 76 69 6c 65 |...Looku|pPrivile|
|00001150| 67 65 44 69 73 70 6c 61 | 79 4e 61 6d 65 41 0c 41 |geDispla|yNameA.A|
|00001160| 44 56 41 50 49 33 32 2e | 64 6c 6c 68 00 da 88 30 |DVAPI32.|dllh...0|
|00001170| 00 00 a0 01 01 1b 4c 6f | 6f 6b 75 70 50 72 69 76 |......Lo|okupPriv|
|00001180| 69 6c 65 67 65 44 69 73 | 70 6c 61 79 4e 61 6d 65 |ilegeDis|playName|
|00001190| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 69 00 |W.ADVAPI|32.dlli.|
|000011a0| c3 88 29 00 00 a0 01 01 | 14 4c 6f 6f 6b 75 70 50 |..).....|.LookupP|
|000011b0| 72 69 76 69 6c 65 67 65 | 4e 61 6d 65 41 0c 41 44 |rivilege|NameA.AD|
|000011c0| 56 41 50 49 33 32 2e 64 | 6c 6c 6a 00 bc 88 29 00 |VAPI32.d|llj...).|
|000011d0| 00 a0 01 01 14 4c 6f 6f | 6b 75 70 50 72 69 76 69 |.....Loo|kupPrivi|
|000011e0| 6c 65 67 65 4e 61 6d 65 | 57 0c 41 44 56 41 50 49 |legeName|W.ADVAPI|
|000011f0| 33 32 2e 64 6c 6c 6b 00 | a5 88 2a 00 00 a0 01 01 |32.dllk.|..*.....|
|00001200| 15 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |.LookupP|rivilege|
|00001210| 56 61 6c 75 65 41 0c 41 | 44 56 41 50 49 33 32 2e |ValueA.A|DVAPI32.|
|00001220| 64 6c 6c 6c 00 3c 88 2a | 00 00 a0 01 01 15 4c 6f |dlll.<.*|......Lo|
|00001230| 6f 6b 75 70 50 72 69 76 | 69 6c 65 67 65 56 61 6c |okupPriv|ilegeVal|
|00001240| 75 65 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ueW.ADVA|PI32.dll|
|00001250| 6d 00 25 88 2e 00 00 a0 | 01 01 19 4c 73 61 41 64 |m.%.....|...LsaAd|
|00001260| 64 50 72 69 76 69 6c 65 | 67 65 73 54 6f 41 63 63 |dPrivile|gesToAcc|
|00001270| 6f 75 6e 74 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ount.ADV|API32.dl|
|00001280| 6c 6e 00 be 88 25 00 00 | a0 01 01 10 4c 73 61 43 |ln...%..|....LsaC|
|00001290| 6c 65 61 72 41 75 64 69 | 74 4c 6f 67 0c 41 44 56 |learAudi|tLog.ADV|
|000012a0| 41 50 49 33 32 2e 64 6c | 6c 6f 00 82 88 1d 00 00 |API32.dl|lo......|
|000012b0| a0 01 01 08 4c 73 61 43 | 6c 6f 73 65 0c 41 44 56 |....LsaC|lose.ADV|
|000012c0| 41 50 49 33 32 2e 64 6c | 6c 70 00 9b 88 25 00 00 |API32.dl|lp...%..|
|000012d0| a0 01 01 10 4c 73 61 43 | 72 65 61 74 65 41 63 63 |....LsaC|reateAcc|
|000012e0| 6f 75 6e 74 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |ount.ADV|API32.dl|
|000012f0| 6c 71 00 5f 88 24 00 00 | a0 01 01 0f 4c 73 61 43 |lq._.$..|....LsaC|
|00001300| 72 65 61 74 65 53 65 63 | 72 65 74 0c 41 44 56 41 |reateSec|ret.ADVA|
|00001310| 50 49 33 32 2e 64 6c 6c | 72 00 c7 88 2b 00 00 a0 |PI32.dll|r...+...|
|00001320| 01 01 16 4c 73 61 43 72 | 65 61 74 65 54 72 75 73 |...LsaCr|eateTrus|
|00001330| 74 65 64 44 6f 6d 61 69 | 6e 0c 41 44 56 41 50 49 |tedDomai|n.ADVAPI|
|00001340| 33 32 2e 64 6c 6c 73 00 | db 88 1e 00 00 a0 01 01 |32.dlls.|........|
|00001350| 09 4c 73 61 44 65 6c 65 | 74 65 0c 41 44 56 41 50 |.LsaDele|te.ADVAP|
|00001360| 49 33 32 2e 64 6c 6c 74 | 00 38 88 29 00 00 a0 01 |I32.dllt|.8.)....|
|00001370| 01 14 4c 73 61 45 6e 75 | 6d 65 72 61 74 65 41 63 |..LsaEnu|merateAc|
|00001380| 63 6f 75 6e 74 73 0c 41 | 44 56 41 50 49 33 32 2e |counts.A|DVAPI32.|
|00001390| 64 6c 6c 75 00 8e 88 2b | 00 00 a0 01 01 16 4c 73 |dllu...+|......Ls|
|000013a0| 61 45 6e 75 6d 65 72 61 | 74 65 50 72 69 76 69 6c |aEnumera|tePrivil|
|000013b0| 65 67 65 73 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |eges.ADV|API32.dl|
|000013c0| 6c 76 00 af 88 34 00 00 | a0 01 01 1f 4c 73 61 45 |lv...4..|....LsaE|
|000013d0| 6e 75 6d 65 72 61 74 65 | 50 72 69 76 69 6c 65 67 |numerate|Privileg|
|000013e0| 65 73 4f 66 41 63 63 6f | 75 6e 74 0c 41 44 56 41 |esOfAcco|unt.ADVA|
|000013f0| 50 49 33 32 2e 64 6c 6c | 77 00 1a 88 2f 00 00 a0 |PI32.dll|w.../...|
|00001400| 01 01 1a 4c 73 61 45 6e | 75 6d 65 72 61 74 65 54 |...LsaEn|umerateT|
|00001410| 72 75 73 74 65 64 44 6f | 6d 61 69 6e 73 0c 41 44 |rustedDo|mains.AD|
|00001420| 56 41 50 49 33 32 2e 64 | 6c 6c 78 00 09 88 22 00 |VAPI32.d|llx...".|
|00001430| 00 a0 01 01 0d 4c 73 61 | 46 72 65 65 4d 65 6d 6f |.....Lsa|FreeMemo|
|00001440| 72 79 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 79 |ry.ADVAP|I32.dlly|
|00001450| 00 83 88 2b 00 00 a0 01 | 01 16 4c 73 61 47 65 74 |...+....|..LsaGet|
|00001460| 51 75 6f 74 61 73 46 6f | 72 41 63 63 6f 75 6e 74 |QuotasFo|rAccount|
|00001470| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 7a 00 da |.ADVAPI3|2.dllz..|
|00001480| 88 2e 00 00 a0 01 01 19 | 4c 73 61 47 65 74 53 79 |........|LsaGetSy|
|00001490| 73 74 65 6d 41 63 63 65 | 73 73 41 63 63 6f 75 6e |stemAcce|ssAccoun|
|000014a0| 74 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 7b 00 |t.ADVAPI|32.dll{.|
|000014b0| a0 88 25 00 00 a0 01 01 | 10 4c 73 61 49 43 4c 6f |..%.....|.LsaICLo|
|000014c0| 6f 6b 75 70 4e 61 6d 65 | 73 0c 41 44 56 41 50 49 |okupName|s.ADVAPI|
|000014d0| 33 32 2e 64 6c 6c 7c 00 | 7b 88 24 00 00 a0 01 01 |32.dll|.|{.$.....|
|000014e0| 0f 4c 73 61 49 43 4c 6f | 6f 6b 75 70 53 69 64 73 |.LsaICLo|okupSids|
|000014f0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 7d 00 dd |.ADVAPI3|2.dll}..|
|00001500| 88 23 00 00 a0 01 01 0e | 4c 73 61 4c 6f 6f 6b 75 |.#......|LsaLooku|
|00001510| 70 4e 61 6d 65 73 0c 41 | 44 56 41 50 49 33 32 2e |pNames.A|DVAPI32.|
|00001520| 64 6c 6c 7e 00 09 88 32 | 00 00 a0 01 01 1d 4c 73 |dll~...2|......Ls|
|00001530| 61 4c 6f 6f 6b 75 70 50 | 72 69 76 69 6c 65 67 65 |aLookupP|rivilege|
|00001540| 44 69 73 70 6c 61 79 4e | 61 6d 65 0c 41 44 56 41 |DisplayN|ame.ADVA|
|00001550| 50 49 33 32 2e 64 6c 6c | 7f 00 e0 88 2b 00 00 a0 |PI32.dll|....+...|
|00001560| 01 01 16 4c 73 61 4c 6f | 6f 6b 75 70 50 72 69 76 |...LsaLo|okupPriv|
|00001570| 69 6c 65 67 65 4e 61 6d | 65 0c 41 44 56 41 50 49 |ilegeNam|e.ADVAPI|
|00001580| 33 32 2e 64 6c 6c 80 00 | c3 88 2c 00 00 a0 01 01 |32.dll..|..,.....|
|00001590| 17 4c 73 61 4c 6f 6f 6b | 75 70 50 72 69 76 69 6c |.LsaLook|upPrivil|
|000015a0| 65 67 65 56 61 6c 75 65 | 0c 41 44 56 41 50 49 33 |egeValue|.ADVAPI3|
|000015b0| 32 2e 64 6c 6c 81 00 44 | 88 22 00 00 a0 01 01 0d |2.dll..D|."......|
|000015c0| 4c 73 61 4c 6f 6f 6b 75 | 70 53 69 64 73 0c 41 44 |LsaLooku|pSids.AD|
|000015d0| 56 41 50 49 33 32 2e 64 | 6c 6c 82 00 68 88 23 00 |VAPI32.d|ll..h.#.|
|000015e0| 00 a0 01 01 0e 4c 73 61 | 4f 70 65 6e 41 63 63 6f |.....Lsa|OpenAcco|
|000015f0| 75 6e 74 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |unt.ADVA|PI32.dll|
|00001600| 83 00 13 88 22 00 00 a0 | 01 01 0d 4c 73 61 4f 70 |...."...|...LsaOp|
|00001610| 65 6e 50 6f 6c 69 63 79 | 0c 41 44 56 41 50 49 33 |enPolicy|.ADVAPI3|
|00001620| 32 2e 64 6c 6c 84 00 71 | 88 22 00 00 a0 01 01 0d |2.dll..q|."......|
|00001630| 4c 73 61 4f 70 65 6e 53 | 65 63 72 65 74 0c 41 44 |LsaOpenS|ecret.AD|
|00001640| 56 41 50 49 33 32 2e 64 | 6c 6c 85 00 7a 88 29 00 |VAPI32.d|ll..z.).|
|00001650| 00 a0 01 01 14 4c 73 61 | 4f 70 65 6e 54 72 75 73 |.....Lsa|OpenTrus|
|00001660| 74 65 64 44 6f 6d 61 69 | 6e 0c 41 44 56 41 50 49 |tedDomai|n.ADVAPI|
|00001670| 33 32 2e 64 6c 6c 86 00 | 8e 88 2e 00 00 a0 01 01 |32.dll..|........|
|00001680| 19 4c 73 61 51 75 65 72 | 79 49 6e 66 6f 54 72 75 |.LsaQuer|yInfoTru|
|00001690| 73 74 65 64 44 6f 6d 61 | 69 6e 0c 41 44 56 41 50 |stedDoma|in.ADVAP|
|000016a0| 49 33 32 2e 64 6c 6c 87 | 00 73 88 2e 00 00 a0 01 |I32.dll.|.s......|
|000016b0| 01 19 4c 73 61 51 75 65 | 72 79 49 6e 66 6f 72 6d |..LsaQue|ryInform|
|000016c0| 61 74 69 6f 6e 50 6f 6c | 69 63 79 0c 41 44 56 41 |ationPol|icy.ADVA|
|000016d0| 50 49 33 32 2e 64 6c 6c | 88 00 4b 88 23 00 00 a0 |PI32.dll|..K.#...|
|000016e0| 01 01 0e 4c 73 61 51 75 | 65 72 79 53 65 63 72 65 |...LsaQu|erySecre|
|000016f0| 74 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 89 00 |t.ADVAPI|32.dll..|
|00001700| f0 88 2b 00 00 a0 01 01 | 16 4c 73 61 51 75 65 72 |..+.....|.LsaQuer|
|00001710| 79 53 65 63 75 72 69 74 | 79 4f 62 6a 65 63 74 0c |ySecurit|yObject.|
|00001720| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 8a 00 96 88 |ADVAPI32|.dll....|
|00001730| 33 00 00 a0 01 01 1e 4c | 73 61 52 65 6d 6f 76 65 |3......L|saRemove|
|00001740| 50 72 69 76 69 6c 65 67 | 65 73 46 72 6f 6d 41 63 |Privileg|esFromAc|
|00001750| 63 6f 75 6e 74 0c 41 44 | 56 41 50 49 33 32 2e 64 |count.AD|VAPI32.d|
|00001760| 6c 6c 8b 00 61 88 2c 00 | 00 a0 01 01 17 4c 73 61 |ll..a.,.|.....Lsa|
|00001770| 53 65 74 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 6f |SetInfor|mationPo|
|00001780| 6c 69 63 79 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |licy.ADV|API32.dl|
|00001790| 6c 8c 00 35 88 33 00 00 | a0 01 01 1e 4c 73 61 53 |l..5.3..|....LsaS|
|000017a0| 65 74 49 6e 66 6f 72 6d | 61 74 69 6f 6e 54 72 75 |etInform|ationTru|
|000017b0| 73 74 65 64 44 6f 6d 61 | 69 6e 0c 41 44 56 41 50 |stedDoma|in.ADVAP|
|000017c0| 49 33 32 2e 64 6c 6c 8d | 00 53 88 2b 00 00 a0 01 |I32.dll.|.S.+....|
|000017d0| 01 16 4c 73 61 53 65 74 | 51 75 6f 74 61 73 46 6f |..LsaSet|QuotasFo|
|000017e0| 72 41 63 63 6f 75 6e 74 | 0c 41 44 56 41 50 49 33 |rAccount|.ADVAPI3|
|000017f0| 32 2e 64 6c 6c 8e 00 ba | 88 21 00 00 a0 01 01 0c |2.dll...|.!......|
|00001800| 4c 73 61 53 65 74 53 65 | 63 72 65 74 0c 41 44 56 |LsaSetSe|cret.ADV|
|00001810| 41 50 49 33 32 2e 64 6c | 6c 8f 00 d8 88 29 00 00 |API32.dl|l....)..|
|00001820| a0 01 01 14 4c 73 61 53 | 65 74 53 65 63 75 72 69 |....LsaS|etSecuri|
|00001830| 74 79 4f 62 6a 65 63 74 | 0c 41 44 56 41 50 49 33 |tyObject|.ADVAPI3|
|00001840| 32 2e 64 6c 6c 90 00 7e | 88 2e 00 00 a0 01 01 19 |2.dll..~|........|
|00001850| 4c 73 61 53 65 74 53 79 | 73 74 65 6d 41 63 63 65 |LsaSetSy|stemAcce|
|00001860| 73 73 41 63 63 6f 75 6e | 74 0c 41 44 56 41 50 49 |ssAccoun|t.ADVAPI|
|00001870| 33 32 2e 64 6c 6c 91 00 | 7e 88 23 00 00 a0 01 01 |32.dll..|~.#.....|
|00001880| 0e 4d 61 6b 65 41 62 73 | 6f 6c 75 74 65 53 44 0c |.MakeAbs|oluteSD.|
|00001890| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 92 00 2f 88 |ADVAPI32|.dll../.|
|000018a0| 27 00 00 a0 01 01 12 4d | 61 6b 65 53 65 6c 66 52 |'......M|akeSelfR|
|000018b0| 65 6c 61 74 69 76 65 53 | 44 0c 41 44 56 41 50 49 |elativeS|D.ADVAPI|
|000018c0| 33 32 2e 64 6c 6c 93 00 | 9f 88 23 00 00 a0 01 01 |32.dll..|..#.....|
|000018d0| 0e 4d 61 70 47 65 6e 65 | 72 69 63 4d 61 73 6b 0c |.MapGene|ricMask.|
|000018e0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 94 00 1a 88 |ADVAPI32|.dll....|
|000018f0| 2b 00 00 a0 01 01 16 4e | 6f 74 69 66 79 42 6f 6f |+......N|otifyBoo|
|00001900| 74 43 6f 6e 66 69 67 53 | 74 61 74 75 73 0c 41 44 |tConfigS|tatus.AD|
|00001910| 56 41 50 49 33 32 2e 64 | 6c 6c 95 00 89 88 2b 00 |VAPI32.d|ll....+.|
|00001920| 00 a0 01 01 16 4f 62 6a | 65 63 74 43 6c 6f 73 65 |.....Obj|ectClose|
|00001930| 41 75 64 69 74 41 6c 61 | 72 6d 41 0c 41 44 56 41 |AuditAla|rmA.ADVA|
|00001940| 50 49 33 32 2e 64 6c 6c | 96 00 fd 88 2b 00 00 a0 |PI32.dll|....+...|
|00001950| 01 01 16 4f 62 6a 65 63 | 74 43 6c 6f 73 65 41 75 |...Objec|tCloseAu|
|00001960| 64 69 74 41 6c 61 72 6d | 57 0c 41 44 56 41 50 49 |ditAlarm|W.ADVAPI|
|00001970| 33 32 2e 64 6c 6c 97 00 | e6 88 2a 00 00 a0 01 01 |32.dll..|..*.....|
|00001980| 15 4f 62 6a 65 63 74 4f | 70 65 6e 41 75 64 69 74 |.ObjectO|penAudit|
|00001990| 41 6c 61 72 6d 41 0c 41 | 44 56 41 50 49 33 32 2e |AlarmA.A|DVAPI32.|
|000019a0| 64 6c 6c 98 00 61 88 2a | 00 00 a0 01 01 15 4f 62 |dll..a.*|......Ob|
|000019b0| 6a 65 63 74 4f 70 65 6e | 41 75 64 69 74 41 6c 61 |jectOpen|AuditAla|
|000019c0| 72 6d 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |rmW.ADVA|PI32.dll|
|000019d0| 99 00 4a 88 2f 00 00 a0 | 01 01 1a 4f 62 6a 65 63 |..J./...|...Objec|
|000019e0| 74 50 72 69 76 69 6c 65 | 67 65 41 75 64 69 74 41 |tPrivile|geAuditA|
|000019f0| 6c 61 72 6d 41 0c 41 44 | 56 41 50 49 33 32 2e 64 |larmA.AD|VAPI32.d|
|00001a00| 6c 6c 9a 00 40 88 2f 00 | 00 a0 01 01 1a 4f 62 6a |ll..@./.|.....Obj|
|00001a10| 65 63 74 50 72 69 76 69 | 6c 65 67 65 41 75 64 69 |ectPrivi|legeAudi|
|00001a20| 74 41 6c 61 72 6d 57 0c | 41 44 56 41 50 49 33 32 |tAlarmW.|ADVAPI32|
|00001a30| 2e 64 6c 6c 9b 00 29 88 | 28 00 00 a0 01 01 13 4f |.dll..).|(......O|
|00001a40| 70 65 6e 42 61 63 6b 75 | 70 45 76 65 6e 74 4c 6f |penBacku|pEventLo|
|00001a50| 67 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 9c |gA.ADVAP|I32.dll.|
|00001a60| 00 22 88 28 00 00 a0 01 | 01 13 4f 70 65 6e 42 61 |.".(....|..OpenBa|
|00001a70| 63 6b 75 70 45 76 65 6e | 74 4c 6f 67 57 0c 41 44 |ckupEven|tLogW.AD|
|00001a80| 56 41 50 49 33 32 2e 64 | 6c 6c 9d 00 0b 88 22 00 |VAPI32.d|ll....".|
|00001a90| 00 a0 01 01 0d 4f 70 65 | 6e 45 76 65 6e 74 4c 6f |.....Ope|nEventLo|
|00001aa0| 67 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 9e |gA.ADVAP|I32.dll.|
|00001ab0| 00 82 88 22 00 00 a0 01 | 01 0d 4f 70 65 6e 45 76 |..."....|..OpenEv|
|00001ac0| 65 6e 74 4c 6f 67 57 0c | 41 44 56 41 50 49 33 32 |entLogW.|ADVAPI32|
|00001ad0| 2e 64 6c 6c 9f 00 6b 88 | 25 00 00 a0 01 01 10 4f |.dll..k.|%......O|
|00001ae0| 70 65 6e 50 72 6f 63 65 | 73 73 54 6f 6b 65 6e 0c |penProce|ssToken.|
|00001af0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c a0 00 ff 88 |ADVAPI32|.dll....|
|00001b00| 23 00 00 a0 01 01 0e 4f | 70 65 6e 53 43 4d 61 6e |#......O|penSCMan|
|00001b10| 61 67 65 72 41 0c 41 44 | 56 41 50 49 33 32 2e 64 |agerA.AD|VAPI32.d|
|00001b20| 6c 6c a1 00 50 88 23 00 | 00 a0 01 01 0e 4f 70 65 |ll..P.#.|.....Ope|
|00001b30| 6e 53 43 4d 61 6e 61 67 | 65 72 57 0c 41 44 56 41 |nSCManag|erW.ADVA|
|00001b40| 50 49 33 32 2e 64 6c 6c | a2 00 39 88 21 00 00 a0 |PI32.dll|..9.!...|
|00001b50| 01 01 0c 4f 70 65 6e 53 | 65 72 76 69 63 65 41 0c |...OpenS|erviceA.|
|00001b60| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c a3 00 d2 88 |ADVAPI32|.dll....|
|00001b70| 21 00 00 a0 01 01 0c 4f | 70 65 6e 53 65 72 76 69 |!......O|penServi|
|00001b80| 63 65 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ceW.ADVA|PI32.dll|
|00001b90| a4 00 bb 88 24 00 00 a0 | 01 01 0f 4f 70 65 6e 54 |....$...|...OpenT|
|00001ba0| 68 72 65 61 64 54 6f 6b | 65 6e 0c 41 44 56 41 50 |hreadTok|en.ADVAP|
|00001bb0| 49 33 32 2e 64 6c 6c a5 | 00 83 88 23 00 00 a0 01 |I32.dll.|...#....|
|00001bc0| 01 0e 50 72 69 76 69 6c | 65 67 65 43 68 65 63 6b |..Privil|egeCheck|
|00001bd0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c a6 00 ea |.ADVAPI3|2.dll...|
|00001be0| 88 31 00 00 a0 01 01 1c | 50 72 69 76 69 6c 65 67 |.1......|Privileg|
|00001bf0| 65 64 53 65 72 76 69 63 | 65 41 75 64 69 74 41 6c |edServic|eAuditAl|
|00001c00| 61 72 6d 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |armA.ADV|API32.dl|
|00001c10| 6c a7 00 51 88 31 00 00 | a0 01 01 1c 50 72 69 76 |l..Q.1..|....Priv|
|00001c20| 69 6c 65 67 65 64 53 65 | 72 76 69 63 65 41 75 64 |ilegedSe|rviceAud|
|00001c30| 69 74 41 6c 61 72 6d 57 | 0c 41 44 56 41 50 49 33 |itAlarmW|.ADVAPI3|
|00001c40| 32 2e 64 6c 6c a8 00 3a | 88 28 00 00 a0 01 01 13 |2.dll..:|.(......|
|00001c50| 51 75 65 72 79 53 65 72 | 76 69 63 65 43 6f 6e 66 |QuerySer|viceConf|
|00001c60| 69 67 41 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |igA.ADVA|PI32.dll|
|00001c70| a9 00 e4 88 28 00 00 a0 | 01 01 13 51 75 65 72 79 |....(...|...Query|
|00001c80| 53 65 72 76 69 63 65 43 | 6f 6e 66 69 67 57 0c 41 |ServiceC|onfigW.A|
|00001c90| 44 56 41 50 49 33 32 2e | 64 6c 6c aa 00 cd 88 2c |DVAPI32.|dll....,|
|00001ca0| 00 00 a0 01 01 17 51 75 | 65 72 79 53 65 72 76 69 |......Qu|eryServi|
|00001cb0| 63 65 4c 6f 63 6b 53 74 | 61 74 75 73 41 0c 41 44 |ceLockSt|atusA.AD|
|00001cc0| 56 41 50 49 33 32 2e 64 | 6c 6c ab 00 23 88 2c 00 |VAPI32.d|ll..#.,.|
|00001cd0| 00 a0 01 01 17 51 75 65 | 72 79 53 65 72 76 69 63 |.....Que|ryServic|
|00001ce0| 65 4c 6f 63 6b 53 74 61 | 74 75 73 57 0c 41 44 56 |eLockSta|tusW.ADV|
|00001cf0| 41 50 49 33 32 2e 64 6c | 6c ac 00 0c 88 2f 00 00 |API32.dl|l..../..|
|00001d00| a0 01 01 1a 51 75 65 72 | 79 53 65 72 76 69 63 65 |....Quer|yService|
|00001d10| 4f 62 6a 65 63 74 53 65 | 63 75 72 69 74 79 0c 41 |ObjectSe|curity.A|
|00001d20| 44 56 41 50 49 33 32 2e | 64 6c 6c ad 00 ba 88 27 |DVAPI32.|dll....'|
|00001d30| 00 00 a0 01 01 12 51 75 | 65 72 79 53 65 72 76 69 |......Qu|eryServi|
|00001d40| 63 65 53 74 61 74 75 73 | 0c 41 44 56 41 50 49 33 |ceStatus|.ADVAPI3|
|00001d50| 32 2e 64 6c 6c ae 00 f4 | 88 31 00 00 a0 01 01 1c |2.dll...|.1......|
|00001d60| 51 75 65 72 79 57 69 6e | 64 6f 77 73 33 31 46 69 |QueryWin|dows31Fi|
|00001d70| 6c 65 73 4d 69 67 72 61 | 74 69 6f 6e 0c 41 44 56 |lesMigra|tion.ADV|
|00001d80| 41 50 49 33 32 2e 64 6c | 6c af 00 48 88 22 00 00 |API32.dl|l..H."..|
|00001d90| a0 01 01 0d 52 65 61 64 | 45 76 65 6e 74 4c 6f 67 |....Read|EventLog|
|00001da0| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c b0 00 |A.ADVAPI|32.dll..|
|00001db0| 86 88 22 00 00 a0 01 01 | 0d 52 65 61 64 45 76 65 |..".....|.ReadEve|
|00001dc0| 6e 74 4c 6f 67 57 0c 41 | 44 56 41 50 49 33 32 2e |ntLogW.A|DVAPI32.|
|00001dd0| 64 6c 6c b1 00 6f 88 20 | 00 00 a0 01 01 0b 52 65 |dll..o. |......Re|
|00001de0| 67 43 6c 6f 73 65 4b 65 | 79 0c 41 44 56 41 50 49 |gCloseKe|y.ADVAPI|
|00001df0| 33 32 2e 64 6c 6c b2 00 | 2c 88 28 00 00 a0 01 01 |32.dll..|,.(.....|
|00001e00| 13 52 65 67 43 6f 6e 6e | 65 63 74 52 65 67 69 73 |.RegConn|ectRegis|
|00001e10| 74 72 79 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |tryA.ADV|API32.dl|
|00001e20| 6c b3 00 d6 88 28 00 00 | a0 01 01 13 52 65 67 43 |l....(..|....RegC|
|00001e30| 6f 6e 6e 65 63 74 52 65 | 67 69 73 74 72 79 57 0c |onnectRe|gistryW.|
|00001e40| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c b4 00 bf 88 |ADVAPI32|.dll....|
|00001e50| 22 00 00 a0 01 01 0d 52 | 65 67 43 72 65 61 74 65 |"......R|egCreate|
|00001e60| 4b 65 79 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyA.ADV|API32.dl|
|00001e70| 6c b5 00 86 88 24 00 00 | a0 01 01 0f 52 65 67 43 |l....$..|....RegC|
|00001e80| 72 65 61 74 65 4b 65 79 | 45 78 41 0c 41 44 56 41 |reateKey|ExA.ADVA|
|00001e90| 50 49 33 32 2e 64 6c 6c | b6 00 c4 88 24 00 00 a0 |PI32.dll|....$...|
|00001ea0| 01 01 0f 52 65 67 43 72 | 65 61 74 65 4b 65 79 45 |...RegCr|eateKeyE|
|00001eb0| 78 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c b7 |xW.ADVAP|I32.dll.|
|00001ec0| 00 ad 88 22 00 00 a0 01 | 01 0d 52 65 67 43 72 65 |..."....|..RegCre|
|00001ed0| 61 74 65 4b 65 79 57 0c | 41 44 56 41 50 49 33 32 |ateKeyW.|ADVAPI32|
|00001ee0| 2e 64 6c 6c b8 00 6d 88 | 22 00 00 a0 01 01 0d 52 |.dll..m.|"......R|
|00001ef0| 65 67 44 65 6c 65 74 65 | 4b 65 79 41 0c 41 44 56 |egDelete|KeyA.ADV|
|00001f00| 41 50 49 33 32 2e 64 6c | 6c b9 00 83 88 22 00 00 |API32.dl|l...."..|
|00001f10| a0 01 01 0d 52 65 67 44 | 65 6c 65 74 65 4b 65 79 |....RegD|eleteKey|
|00001f20| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c ba 00 |W.ADVAPI|32.dll..|
|00001f30| 6c 88 24 00 00 a0 01 01 | 0f 52 65 67 44 65 6c 65 |l.$.....|.RegDele|
|00001f40| 74 65 56 61 6c 75 65 41 | 0c 41 44 56 41 50 49 33 |teValueA|.ADVAPI3|
|00001f50| 32 2e 64 6c 6c bb 00 a9 | 88 24 00 00 a0 01 01 0f |2.dll...|.$......|
|00001f60| 52 65 67 44 65 6c 65 74 | 65 56 61 6c 75 65 57 0c |RegDelet|eValueW.|
|00001f70| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c bc 00 92 88 |ADVAPI32|.dll....|
|00001f80| 20 00 00 a0 01 01 0b 52 | 65 67 45 6e 75 6d 4b 65 | ......R|egEnumKe|
|00001f90| 79 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c bd |yA.ADVAP|I32.dll.|
|00001fa0| 00 41 88 22 00 00 a0 01 | 01 0d 52 65 67 45 6e 75 |.A."....|..RegEnu|
|00001fb0| 6d 4b 65 79 45 78 41 0c | 41 44 56 41 50 49 33 32 |mKeyExA.|ADVAPI32|
|00001fc0| 2e 64 6c 6c be 00 7f 88 | 22 00 00 a0 01 01 0d 52 |.dll....|"......R|
|00001fd0| 65 67 45 6e 75 6d 4b 65 | 79 45 78 57 0c 41 44 56 |egEnumKe|yExW.ADV|
|00001fe0| 41 50 49 33 32 2e 64 6c | 6c bf 00 68 88 20 00 00 |API32.dl|l..h. ..|
|00001ff0| a0 01 01 0b 52 65 67 45 | 6e 75 6d 4b 65 79 57 0c |....RegE|numKeyW.|
|00002000| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c c0 00 28 88 |ADVAPI32|.dll..(.|
|00002010| 22 00 00 a0 01 01 0d 52 | 65 67 45 6e 75 6d 56 61 |"......R|egEnumVa|
|00002020| 6c 75 65 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |lueA.ADV|API32.dl|
|00002030| 6c c1 00 65 88 22 00 00 | a0 01 01 0d 52 65 67 45 |l..e."..|....RegE|
|00002040| 6e 75 6d 56 61 6c 75 65 | 57 0c 41 44 56 41 50 49 |numValue|W.ADVAPI|
|00002050| 33 32 2e 64 6c 6c c2 00 | 4e 88 20 00 00 a0 01 01 |32.dll..|N. .....|
|00002060| 0b 52 65 67 46 6c 75 73 | 68 4b 65 79 0c 41 44 56 |.RegFlus|hKey.ADV|
|00002070| 41 50 49 33 32 2e 64 6c | 6c c3 00 0f 88 26 00 00 |API32.dl|l....&..|
|00002080| a0 01 01 11 52 65 67 47 | 65 74 4b 65 79 53 65 63 |....RegG|etKeySec|
|00002090| 75 72 69 74 79 0c 41 44 | 56 41 50 49 33 32 2e 64 |urity.AD|VAPI32.d|
|000020a0| 6c 6c c4 00 8c 88 20 00 | 00 a0 01 01 0b 52 65 67 |ll.... .|.....Reg|
|000020b0| 4c 6f 61 64 4b 65 79 41 | 0c 41 44 56 41 50 49 33 |LoadKeyA|.ADVAPI3|
|000020c0| 32 2e 64 6c 6c c5 00 4e | 88 20 00 00 a0 01 01 0b |2.dll..N|. ......|
|000020d0| 52 65 67 4c 6f 61 64 4b | 65 79 57 0c 41 44 56 41 |RegLoadK|eyW.ADVA|
|000020e0| 50 49 33 32 2e 64 6c 6c | c6 00 37 88 2c 00 00 a0 |PI32.dll|..7.,...|
|000020f0| 01 01 17 52 65 67 4e 6f | 74 69 66 79 43 68 61 6e |...RegNo|tifyChan|
|00002100| 67 65 4b 65 79 56 61 6c | 75 65 0c 41 44 56 41 50 |geKeyVal|ue.ADVAP|
|00002110| 49 33 32 2e 64 6c 6c c7 | 00 39 88 20 00 00 a0 01 |I32.dll.|.9. ....|
|00002120| 01 0b 52 65 67 4f 70 65 | 6e 4b 65 79 41 0c 41 44 |..RegOpe|nKeyA.AD|
|00002130| 56 41 50 49 33 32 2e 64 | 6c 6c c8 00 39 88 22 00 |VAPI32.d|ll..9.".|
|00002140| 00 a0 01 01 0d 52 65 67 | 4f 70 65 6e 4b 65 79 45 |.....Reg|OpenKeyE|
|00002150| 78 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c c9 |xA.ADVAP|I32.dll.|
|00002160| 00 77 88 22 00 00 a0 01 | 01 0d 52 65 67 4f 70 65 |.w."....|..RegOpe|
|00002170| 6e 4b 65 79 45 78 57 0c | 41 44 56 41 50 49 33 32 |nKeyExW.|ADVAPI32|
|00002180| 2e 64 6c 6c ca 00 60 88 | 20 00 00 a0 01 01 0b 52 |.dll..`.| ......R|
|00002190| 65 67 4f 70 65 6e 4b 65 | 79 57 0c 41 44 56 41 50 |egOpenKe|yW.ADVAP|
|000021a0| 49 33 32 2e 64 6c 6c cb | 00 20 88 25 00 00 a0 01 |I32.dll.|. .%....|
|000021b0| 01 10 52 65 67 51 75 65 | 72 79 49 6e 66 6f 4b 65 |..RegQue|ryInfoKe|
|000021c0| 79 41 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c cc |yA.ADVAP|I32.dll.|
|000021d0| 00 1b 88 25 00 00 a0 01 | 01 10 52 65 67 51 75 65 |...%....|..RegQue|
|000021e0| 72 79 49 6e 66 6f 4b 65 | 79 57 0c 41 44 56 41 50 |ryInfoKe|yW.ADVAP|
|000021f0| 49 33 32 2e 64 6c 6c cd | 00 04 88 23 00 00 a0 01 |I32.dll.|...#....|
|00002200| 01 0e 52 65 67 51 75 65 | 72 79 56 61 6c 75 65 41 |..RegQue|ryValueA|
|00002210| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c ce 00 d5 |.ADVAPI3|2.dll...|
|00002220| 88 25 00 00 a0 01 01 10 | 52 65 67 51 75 65 72 79 |.%......|RegQuery|
|00002230| 56 61 6c 75 65 45 78 41 | 0c 41 44 56 41 50 49 33 |ValueExA|.ADVAPI3|
|00002240| 32 2e 64 6c 6c cf 00 13 | 88 25 00 00 a0 01 01 10 |2.dll...|.%......|
|00002250| 52 65 67 51 75 65 72 79 | 56 61 6c 75 65 45 78 57 |RegQuery|ValueExW|
|00002260| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c d0 00 fc |.ADVAPI3|2.dll...|
|00002270| 88 23 00 00 a0 01 01 0e | 52 65 67 51 75 65 72 79 |.#......|RegQuery|
|00002280| 56 61 6c 75 65 57 0c 41 | 44 56 41 50 49 33 32 2e |ValueW.A|DVAPI32.|
|00002290| 64 6c 6c d1 00 bc 88 23 | 00 00 a0 01 01 0e 52 65 |dll....#|......Re|
|000022a0| 67 52 65 70 6c 61 63 65 | 4b 65 79 41 0c 41 44 56 |gReplace|KeyA.ADV|
|000022b0| 41 50 49 33 32 2e 64 6c | 6c d2 00 ff 88 23 00 00 |API32.dl|l....#..|
|000022c0| a0 01 01 0e 52 65 67 52 | 65 70 6c 61 63 65 4b 65 |....RegR|eplaceKe|
|000022d0| 79 57 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c d3 |yW.ADVAP|I32.dll.|
|000022e0| 00 e8 88 23 00 00 a0 01 | 01 0e 52 65 67 52 65 73 |...#....|..RegRes|
|000022f0| 74 6f 72 65 4b 65 79 41 | 0c 41 44 56 41 50 49 33 |toreKeyA|.ADVAPI3|
|00002300| 32 2e 64 6c 6c d4 00 d5 | 88 23 00 00 a0 01 01 0e |2.dll...|.#......|
|00002310| 52 65 67 52 65 73 74 6f | 72 65 4b 65 79 57 0c 41 |RegResto|reKeyW.A|
|00002320| 44 56 41 50 49 33 32 2e | 64 6c 6c d5 00 be 88 20 |DVAPI32.|dll.... |
|00002330| 00 00 a0 01 01 0b 52 65 | 67 53 61 76 65 4b 65 79 |......Re|gSaveKey|
|00002340| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c d6 00 |A.ADVAPI|32.dll..|
|00002350| 2e 88 20 00 00 a0 01 01 | 0b 52 65 67 53 61 76 65 |.. .....|.RegSave|
|00002360| 4b 65 79 57 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |KeyW.ADV|API32.dl|
|00002370| 6c d7 00 17 88 26 00 00 | a0 01 01 11 52 65 67 53 |l....&..|....RegS|
|00002380| 65 74 4b 65 79 53 65 63 | 75 72 69 74 79 0c 41 44 |etKeySec|urity.AD|
|00002390| 56 41 50 49 33 32 2e 64 | 6c 6c d8 00 6c 88 21 00 |VAPI32.d|ll..l.!.|
|000023a0| 00 a0 01 01 0c 52 65 67 | 53 65 74 56 61 6c 75 65 |.....Reg|SetValue|
|000023b0| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c d9 00 |A.ADVAPI|32.dll..|
|000023c0| b8 88 23 00 00 a0 01 01 | 0e 52 65 67 53 65 74 56 |..#.....|.RegSetV|
|000023d0| 61 6c 75 65 45 78 41 0c | 41 44 56 41 50 49 33 32 |alueExA.|ADVAPI32|
|000023e0| 2e 64 6c 6c da 00 f6 88 | 23 00 00 a0 01 01 0e 52 |.dll....|#......R|
|000023f0| 65 67 53 65 74 56 61 6c | 75 65 45 78 57 0c 41 44 |egSetVal|ueExW.AD|
|00002400| 56 41 50 49 33 32 2e 64 | 6c 6c db 00 df 88 21 00 |VAPI32.d|ll....!.|
|00002410| 00 a0 01 01 0c 52 65 67 | 53 65 74 56 61 6c 75 65 |.....Reg|SetValue|
|00002420| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c dc 00 |W.ADVAPI|32.dll..|
|00002430| 9f 88 22 00 00 a0 01 01 | 0d 52 65 67 55 6e 4c 6f |..".....|.RegUnLo|
|00002440| 61 64 4b 65 79 41 0c 41 | 44 56 41 50 49 33 32 2e |adKeyA.A|DVAPI32.|
|00002450| 64 6c 6c dd 00 6f 88 22 | 00 00 a0 01 01 0d 52 65 |dll..o."|......Re|
|00002460| 67 55 6e 4c 6f 61 64 4b | 65 79 57 0c 41 44 56 41 |gUnLoadK|eyW.ADVA|
|00002470| 50 49 33 32 2e 64 6c 6c | de 00 58 88 29 00 00 a0 |PI32.dll|..X.)...|
|00002480| 01 01 14 52 65 67 69 73 | 74 65 72 45 76 65 6e 74 |...Regis|terEvent|
|00002490| 53 6f 75 72 63 65 41 0c | 41 44 56 41 50 49 33 32 |SourceA.|ADVAPI32|
|000024a0| 2e 64 6c 6c df 00 31 88 | 29 00 00 a0 01 01 14 52 |.dll..1.|)......R|
|000024b0| 65 67 69 73 74 65 72 45 | 76 65 6e 74 53 6f 75 72 |egisterE|ventSour|
|000024c0| 63 65 57 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ceW.ADVA|PI32.dll|
|000024d0| e0 00 1a 88 30 00 00 a0 | 01 01 1b 52 65 67 69 73 |....0...|...Regis|
|000024e0| 74 65 72 53 65 72 76 69 | 63 65 43 74 72 6c 48 61 |terServi|ceCtrlHa|
|000024f0| 6e 64 6c 65 72 41 0c 41 | 44 56 41 50 49 33 32 2e |ndlerA.A|DVAPI32.|
|00002500| 64 6c 6c e1 00 70 88 30 | 00 00 a0 01 01 1b 52 65 |dll..p.0|......Re|
|00002510| 67 69 73 74 65 72 53 65 | 72 76 69 63 65 43 74 72 |gisterSe|rviceCtr|
|00002520| 6c 48 61 6e 64 6c 65 72 | 57 0c 41 44 56 41 50 49 |lHandler|W.ADVAPI|
|00002530| 33 32 2e 64 6c 6c e2 00 | 59 88 21 00 00 a0 01 01 |32.dll..|Y.!.....|
|00002540| 0c 52 65 70 6f 72 74 45 | 76 65 6e 74 41 0c 41 44 |.ReportE|ventA.AD|
|00002550| 56 41 50 49 33 32 2e 64 | 6c 6c e3 00 77 88 21 00 |VAPI32.d|ll..w.!.|
|00002560| 00 a0 01 01 0c 52 65 70 | 6f 72 74 45 76 65 6e 74 |.....Rep|ortEvent|
|00002570| 57 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c e4 00 |W.ADVAPI|32.dll..|
|00002580| 60 88 21 00 00 a0 01 01 | 0c 52 65 76 65 72 74 54 |`.!.....|.RevertT|
|00002590| 6f 53 65 6c 66 0c 41 44 | 56 41 50 49 33 32 2e 64 |oSelf.AD|VAPI32.d|
|000025a0| 6c 6c e5 00 6f 88 26 00 | 00 a0 01 01 11 53 65 74 |ll..o.&.|.....Set|
|000025b0| 41 63 6c 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 0c 41 |AclInfor|mation.A|
|000025c0| 44 56 41 50 49 33 32 2e | 64 6c 6c e6 00 67 88 25 |DVAPI32.|dll..g.%|
|000025d0| 00 00 a0 01 01 10 53 65 | 74 46 69 6c 65 53 65 63 |......Se|tFileSec|
|000025e0| 75 72 69 74 79 41 0c 41 | 44 56 41 50 49 33 32 2e |urityA.A|DVAPI32.|
|000025f0| 64 6c 6c e7 00 e5 88 25 | 00 00 a0 01 01 10 53 65 |dll....%|......Se|
|00002600| 74 46 69 6c 65 53 65 63 | 75 72 69 74 79 57 0c 41 |tFileSec|urityW.A|
|00002610| 44 56 41 50 49 33 32 2e | 64 6c 6c e8 00 ce 88 2c |DVAPI32.|dll....,|
|00002620| 00 00 a0 01 01 17 53 65 | 74 4b 65 72 6e 65 6c 4f |......Se|tKernelO|
|00002630| 62 6a 65 63 74 53 65 63 | 75 72 69 74 79 0c 41 44 |bjectSec|urity.AD|
|00002640| 56 41 50 49 33 32 2e 64 | 6c 6c e9 00 de 88 2d 00 |VAPI32.d|ll....-.|
|00002650| 00 a0 01 01 18 53 65 74 | 50 72 69 76 61 74 65 4f |.....Set|PrivateO|
|00002660| 62 6a 65 63 74 53 65 63 | 75 72 69 74 79 0c 41 44 |bjectSec|urity.AD|
|00002670| 56 41 50 49 33 32 2e 64 | 6c 6c ea 00 61 88 2e 00 |VAPI32.d|ll..a...|
|00002680| 00 a0 01 01 19 53 65 74 | 53 65 63 75 72 69 74 79 |.....Set|Security|
|00002690| 44 65 73 63 72 69 70 74 | 6f 72 44 61 63 6c 0c 41 |Descript|orDacl.A|
|000026a0| 44 56 41 50 49 33 32 2e | 64 6c 6c eb 00 fd 88 2f |DVAPI32.|dll..../|
|000026b0| 00 00 a0 01 01 1a 53 65 | 74 53 65 63 75 72 69 74 |......Se|tSecurit|
|000026c0| 79 44 65 73 63 72 69 70 | 74 6f 72 47 72 6f 75 70 |yDescrip|torGroup|
|000026d0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c ec 00 61 |.ADVAPI3|2.dll..a|
|000026e0| 88 2f 00 00 a0 01 01 1a | 53 65 74 53 65 63 75 72 |./......|SetSecur|
|000026f0| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 4f 77 6e |ityDescr|iptorOwn|
|00002700| 65 72 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c ed |er.ADVAP|I32.dll.|
|00002710| 00 62 88 2e 00 00 a0 01 | 01 19 53 65 74 53 65 63 |.b......|..SetSec|
|00002720| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 53 |urityDes|criptorS|
|00002730| 61 63 6c 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |acl.ADVA|PI32.dll|
|00002740| ee 00 eb 88 2d 00 00 a0 | 01 01 18 53 65 74 53 65 |....-...|...SetSe|
|00002750| 72 76 69 63 65 4f 62 6a | 65 63 74 53 65 63 75 72 |rviceObj|ectSecur|
|00002760| 69 74 79 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |ity.ADVA|PI32.dll|
|00002770| ef 00 66 88 25 00 00 a0 | 01 01 10 53 65 74 53 65 |..f.%...|...SetSe|
|00002780| 72 76 69 63 65 53 74 61 | 74 75 73 0c 41 44 56 41 |rviceSta|tus.ADVA|
|00002790| 50 49 33 32 2e 64 6c 6c | f0 00 a0 88 23 00 00 a0 |PI32.dll|....#...|
|000027a0| 01 01 0e 53 65 74 54 68 | 72 65 61 64 54 6f 6b 65 |...SetTh|readToke|
|000027b0| 6e 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c f1 00 |n.ADVAPI|32.dll..|
|000027c0| 9f 88 28 00 00 a0 01 01 | 13 53 65 74 54 6f 6b 65 |..(.....|.SetToke|
|000027d0| 6e 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 0c 41 44 56 |nInforma|tion.ADV|
|000027e0| 41 50 49 33 32 2e 64 6c | 6c f2 00 66 88 22 00 00 |API32.dl|l..f."..|
|000027f0| a0 01 01 0d 53 74 61 72 | 74 53 65 72 76 69 63 65 |....Star|tService|
|00002800| 41 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c f3 00 |A.ADVAPI|32.dll..|
|00002810| 04 88 30 00 00 a0 01 01 | 1b 53 74 61 72 74 53 65 |..0.....|.StartSe|
|00002820| 72 76 69 63 65 43 74 72 | 6c 44 69 73 70 61 74 63 |rviceCtr|lDispatc|
|00002830| 68 65 72 41 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |herA.ADV|API32.dl|
|00002840| 6c f4 00 4b 88 30 00 00 | a0 01 01 1b 53 74 61 72 |l..K.0..|....Star|
|00002850| 74 53 65 72 76 69 63 65 | 43 74 72 6c 44 69 73 70 |tService|CtrlDisp|
|00002860| 61 74 63 68 65 72 57 0c | 41 44 56 41 50 49 33 32 |atcherW.|ADVAPI32|
|00002870| 2e 64 6c 6c f5 00 34 88 | 22 00 00 a0 01 01 0d 53 |.dll..4.|"......S|
|00002880| 74 61 72 74 53 65 72 76 | 69 63 65 57 0c 41 44 56 |tartServ|iceW.ADV|
|00002890| 41 50 49 33 32 2e 64 6c | 6c f6 00 eb 88 42 00 00 |API32.dl|l....B..|
|000028a0| a0 01 01 2d 53 79 6e 63 | 68 72 6f 6e 69 7a 65 57 |...-Sync|hronizeW|
|000028b0| 69 6e 64 6f 77 73 33 31 | 46 69 6c 65 73 41 6e 64 |indows31|FilesAnd|
|000028c0| 57 69 6e 64 6f 77 73 4e | 54 52 65 67 69 73 74 72 |WindowsN|TRegistr|
|000028d0| 79 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c f7 00 |y.ADVAPI|32.dll..|
|000028e0| 09 88 26 00 00 a0 01 01 | 11 53 79 73 74 65 6d 46 |..&.....|.SystemF|
|000028f0| 75 6e 63 74 69 6f 6e 30 | 30 31 0c 41 44 56 41 50 |unction0|01.ADVAP|
|00002900| 49 33 32 2e 64 6c 6c f8 | 00 bb 88 26 00 00 a0 01 |I32.dll.|...&....|
|00002910| 01 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00002920| 30 30 32 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |002.ADVA|PI32.dll|
|00002930| f9 00 b9 88 26 00 00 a0 | 01 01 11 53 79 73 74 65 |....&...|...Syste|
|00002940| 6d 46 75 6e 63 74 69 6f | 6e 30 30 33 0c 41 44 56 |mFunctio|n003.ADV|
|00002950| 41 50 49 33 32 2e 64 6c | 6c fa 00 b7 88 26 00 00 |API32.dl|l....&..|
|00002960| a0 01 01 11 53 79 73 74 | 65 6d 46 75 6e 63 74 69 |....Syst|emFuncti|
|00002970| 6f 6e 30 30 34 0c 41 44 | 56 41 50 49 33 32 2e 64 |on004.AD|VAPI32.d|
|00002980| 6c 6c fb 00 b5 88 26 00 | 00 a0 01 01 11 53 79 73 |ll....&.|.....Sys|
|00002990| 74 65 6d 46 75 6e 63 74 | 69 6f 6e 30 30 35 0c 41 |temFunct|ion005.A|
|000029a0| 44 56 41 50 49 33 32 2e | 64 6c 6c fc 00 b3 88 26 |DVAPI32.|dll....&|
|000029b0| 00 00 a0 01 01 11 53 79 | 73 74 65 6d 46 75 6e 63 |......Sy|stemFunc|
|000029c0| 74 69 6f 6e 30 30 36 0c | 41 44 56 41 50 49 33 32 |tion006.|ADVAPI32|
|000029d0| 2e 64 6c 6c fd 00 b1 88 | 26 00 00 a0 01 01 11 53 |.dll....|&......S|
|000029e0| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 30 37 |ystemFun|ction007|
|000029f0| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c fe 00 af |.ADVAPI3|2.dll...|
|00002a00| 88 26 00 00 a0 01 01 11 | 53 79 73 74 65 6d 46 75 |.&......|SystemFu|
|00002a10| 6e 63 74 69 6f 6e 30 30 | 38 0c 41 44 56 41 50 49 |nction00|8.ADVAPI|
|00002a20| 33 32 2e 64 6c 6c ff 00 | ad 88 26 00 00 a0 01 01 |32.dll..|..&.....|
|00002a30| 11 53 79 73 74 65 6d 46 | 75 6e 63 74 69 6f 6e 30 |.SystemF|unction0|
|00002a40| 30 39 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 00 |09.ADVAP|I32.dll.|
|00002a50| 01 aa 88 26 00 00 a0 01 | 01 11 53 79 73 74 65 6d |...&....|..System|
|00002a60| 46 75 6e 63 74 69 6f 6e | 30 31 30 0c 41 44 56 41 |Function|010.ADVA|
|00002a70| 50 49 33 32 2e 64 6c 6c | 01 01 b1 88 26 00 00 a0 |PI32.dll|....&...|
|00002a80| 01 01 11 53 79 73 74 65 | 6d 46 75 6e 63 74 69 6f |...Syste|mFunctio|
|00002a90| 6e 30 31 31 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |n011.ADV|API32.dl|
|00002aa0| 6c 02 01 af 88 26 00 00 | a0 01 01 11 53 79 73 74 |l....&..|....Syst|
|00002ab0| 65 6d 46 75 6e 63 74 69 | 6f 6e 30 31 32 0c 41 44 |emFuncti|on012.AD|
|00002ac0| 56 41 50 49 33 32 2e 64 | 6c 6c 03 01 ad 88 26 00 |VAPI32.d|ll....&.|
|00002ad0| 00 a0 01 01 11 53 79 73 | 74 65 6d 46 75 6e 63 74 |.....Sys|temFunct|
|00002ae0| 69 6f 6e 30 31 33 0c 41 | 44 56 41 50 49 33 32 2e |ion013.A|DVAPI32.|
|00002af0| 64 6c 6c 04 01 ab 88 26 | 00 00 a0 01 01 11 53 79 |dll....&|......Sy|
|00002b00| 73 74 65 6d 46 75 6e 63 | 74 69 6f 6e 30 31 34 0c |stemFunc|tion014.|
|00002b10| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 05 01 a9 88 |ADVAPI32|.dll....|
|00002b20| 26 00 00 a0 01 01 11 53 | 79 73 74 65 6d 46 75 6e |&......S|ystemFun|
|00002b30| 63 74 69 6f 6e 30 31 35 | 0c 41 44 56 41 50 49 33 |ction015|.ADVAPI3|
|00002b40| 32 2e 64 6c 6c 06 01 a7 | 88 26 00 00 a0 01 01 11 |2.dll...|.&......|
|00002b50| 53 79 73 74 65 6d 46 75 | 6e 63 74 69 6f 6e 30 31 |SystemFu|nction01|
|00002b60| 36 0c 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 07 01 |6.ADVAPI|32.dll..|
|00002b70| a5 88 26 00 00 a0 01 01 | 11 53 79 73 74 65 6d 46 |..&.....|.SystemF|
|00002b80| 75 6e 63 74 69 6f 6e 30 | 31 37 0c 41 44 56 41 50 |unction0|17.ADVAP|
|00002b90| 49 33 32 2e 64 6c 6c 08 | 01 a3 88 26 00 00 a0 01 |I32.dll.|...&....|
|00002ba0| 01 11 53 79 73 74 65 6d | 46 75 6e 63 74 69 6f 6e |..System|Function|
|00002bb0| 30 31 38 0c 41 44 56 41 | 50 49 33 32 2e 64 6c 6c |018.ADVA|PI32.dll|
|00002bc0| 09 01 a1 88 26 00 00 a0 | 01 01 11 53 79 73 74 65 |....&...|...Syste|
|00002bd0| 6d 46 75 6e 63 74 69 6f | 6e 30 31 39 0c 41 44 56 |mFunctio|n019.ADV|
|00002be0| 41 50 49 33 32 2e 64 6c | 6c 0a 01 9f 88 26 00 00 |API32.dl|l....&..|
|00002bf0| a0 01 01 11 53 79 73 74 | 65 6d 46 75 6e 63 74 69 |....Syst|emFuncti|
|00002c00| 6f 6e 30 32 30 0c 41 44 | 56 41 50 49 33 32 2e 64 |on020.AD|VAPI32.d|
|00002c10| 6c 6c 0b 01 a6 88 26 00 | 00 a0 01 01 11 53 79 73 |ll....&.|.....Sys|
|00002c20| 74 65 6d 46 75 6e 63 74 | 69 6f 6e 30 32 31 0c 41 |temFunct|ion021.A|
|00002c30| 44 56 41 50 49 33 32 2e | 64 6c 6c 0c 01 a4 88 26 |DVAPI32.|dll....&|
|00002c40| 00 00 a0 01 01 11 53 79 | 73 74 65 6d 46 75 6e 63 |......Sy|stemFunc|
|00002c50| 74 69 6f 6e 30 32 32 0c | 41 44 56 41 50 49 33 32 |tion022.|ADVAPI32|
|00002c60| 2e 64 6c 6c 0d 01 a2 88 | 26 00 00 a0 01 01 11 53 |.dll....|&......S|
|00002c70| 79 73 74 65 6d 46 75 6e | 63 74 69 6f 6e 30 32 33 |ystemFun|ction023|
|00002c80| 0c 41 44 56 41 50 49 33 | 32 2e 64 6c 6c 0e 01 a0 |.ADVAPI3|2.dll...|
|00002c90| 88 26 00 00 a0 01 01 11 | 53 79 73 74 65 6d 46 75 |.&......|SystemFu|
|00002ca0| 6e 63 74 69 6f 6e 30 32 | 34 0c 41 44 56 41 50 49 |nction02|4.ADVAPI|
|00002cb0| 33 32 2e 64 6c 6c 0f 01 | 9e 88 26 00 00 a0 01 01 |32.dll..|..&.....|
|00002cc0| 11 53 79 73 74 65 6d 46 | 75 6e 63 74 69 6f 6e 30 |.SystemF|unction0|
|00002cd0| 32 35 0c 41 44 56 41 50 | 49 33 32 2e 64 6c 6c 10 |25.ADVAP|I32.dll.|
|00002ce0| 01 9c 88 26 00 00 a0 01 | 01 11 53 79 73 74 65 6d |...&....|..System|
|00002cf0| 46 75 6e 63 74 69 6f 6e | 30 32 36 0c 41 44 56 41 |Function|026.ADVA|
|00002d00| 50 49 33 32 2e 64 6c 6c | 11 01 9a 88 26 00 00 a0 |PI32.dll|....&...|
|00002d10| 01 01 11 53 79 73 74 65 | 6d 46 75 6e 63 74 69 6f |...Syste|mFunctio|
|00002d20| 6e 30 32 37 0c 41 44 56 | 41 50 49 33 32 2e 64 6c |n027.ADV|API32.dl|
|00002d30| 6c 12 01 98 88 26 00 00 | a0 01 01 11 53 79 73 74 |l....&..|....Syst|
|00002d40| 65 6d 46 75 6e 63 74 69 | 6f 6e 30 32 38 0c 41 44 |emFuncti|on028.AD|
|00002d50| 56 41 50 49 33 32 2e 64 | 6c 6c 13 01 96 88 26 00 |VAPI32.d|ll....&.|
|00002d60| 00 a0 01 01 11 53 79 73 | 74 65 6d 46 75 6e 63 74 |.....Sys|temFunct|
|00002d70| 69 6f 6e 30 32 39 0c 41 | 44 56 41 50 49 33 32 2e |ion029.A|DVAPI32.|
|00002d80| 64 6c 6c 14 01 94 88 26 | 00 00 a0 01 01 11 53 79 |dll....&|......Sy|
|00002d90| 73 74 65 6d 46 75 6e 63 | 74 69 6f 6e 30 33 30 0c |stemFunc|tion030.|
|00002da0| 41 44 56 41 50 49 33 32 | 2e 64 6c 6c 15 01 9b 88 |ADVAPI32|.dll....|
|00002db0| 26 00 00 a0 01 01 11 53 | 79 73 74 65 6d 46 75 6e |&......S|ystemFun|
|00002dc0| 63 74 69 6f 6e 30 33 31 | 0c 41 44 56 41 50 49 33 |ction031|.ADVAPI3|
|00002dd0| 32 2e 64 6c 6c 16 01 99 | 88 2a 00 00 a0 01 01 15 |2.dll...|.*......|
|00002de0| 55 6e 6c 6f 63 6b 53 65 | 72 76 69 63 65 44 61 74 |UnlockSe|rviceDat|
|00002df0| 61 62 61 73 65 0c 41 44 | 56 41 50 49 33 32 2e 64 |abase.AD|VAPI32.d|
|00002e00| 6c 6c 17 01 9d 8a 02 00 | 00 00 00 00 00 00 00 00 |ll......|........|
|00002e10| 80 0f 00 0d 46 41 53 54 | 49 4d 50 4f 52 54 4c 49 |....FAST|IMPORTLI|
|00002e20| 42 00 88 19 00 00 a0 01 | 01 06 41 63 73 4c 61 6e |B.......|..AcsLan|
|00002e30| 0a 44 4c 43 41 50 49 2e | 64 6c 6c 01 00 63 88 20 |.DLCAPI.|dll..c. |
|00002e40| 00 00 a0 01 01 0d 44 6c | 63 43 61 6c 6c 44 72 69 |......Dl|cCallDri|
|00002e50| 76 65 72 0a 44 4c 43 41 | 50 49 2e 64 6c 6c 02 00 |ver.DLCA|PI.dll..|
|00002e60| 8b 88 1b 00 00 a0 01 01 | 08 4e 74 41 63 73 4c 61 |........|.NtAcsLa|
|00002e70| 6e 0a 44 4c 43 41 50 49 | 2e 64 6c 6c 03 00 9b 8a |n.DLCAPI|.dll....|
|00002e80| 02 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002e90| 80 0f 00 0d 46 41 53 54 | 49 4d 50 4f 52 54 4c 49 |....FAST|IMPORTLI|
|00002ea0| 42 00 88 1d 00 00 a0 01 | 01 08 41 64 64 41 74 6f |B.......|..AddAto|
|00002eb0| 6d 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 01 |mA.KERNE|L32.dll.|
|00002ec0| 00 39 88 1d 00 00 a0 01 | 01 08 41 64 64 41 74 6f |.9......|..AddAto|
|00002ed0| 6d 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 02 |mW.KERNE|L32.dll.|
|00002ee0| 00 22 88 25 00 00 a0 01 | 01 10 41 64 64 43 6f 6e |.".%....|..AddCon|
|00002ef0| 73 6f 6c 65 41 6c 69 61 | 73 41 0c 4b 45 52 4e 45 |soleAlia|sA.KERNE|
|00002f00| 4c 33 32 2e 64 6c 6c 03 | 00 fb 88 25 00 00 a0 01 |L32.dll.|...%....|
|00002f10| 01 10 41 64 64 43 6f 6e | 73 6f 6c 65 41 6c 69 61 |..AddCon|soleAlia|
|00002f20| 73 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 04 |sW.KERNE|L32.dll.|
|00002f30| 00 e4 88 21 00 00 a0 01 | 01 0c 41 6c 6c 6f 63 43 |...!....|..AllocC|
|00002f40| 6f 6e 73 6f 6c 65 0c 4b | 45 52 4e 45 4c 33 32 2e |onsole.K|ERNEL32.|
|00002f50| 64 6c 6c 05 00 4a 88 1f | 00 00 a0 01 01 0a 42 61 |dll..J..|......Ba|
|00002f60| 63 6b 75 70 52 65 61 64 | 0c 4b 45 52 4e 45 4c 33 |ckupRead|.KERNEL3|
|00002f70| 32 2e 64 6c 6c 06 00 39 | 88 1f 00 00 a0 01 01 0a |2.dll..9|........|
|00002f80| 42 61 63 6b 75 70 53 65 | 65 6b 0c 4b 45 52 4e 45 |BackupSe|ek.KERNE|
|00002f90| 4c 33 32 2e 64 6c 6c 07 | 00 2c 88 20 00 00 a0 01 |L32.dll.|.,. ....|
|00002fa0| 01 0b 42 61 63 6b 75 70 | 57 72 69 74 65 0c 4b 45 |..Backup|Write.KE|
|00002fb0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 08 00 a6 88 2c 00 |RNEL32.d|ll....,.|
|00002fc0| 00 a0 01 01 17 42 61 73 | 65 41 74 74 61 63 68 43 |.....Bas|eAttachC|
|00002fd0| 6f 6d 70 6c 65 74 65 54 | 68 75 6e 6b 0c 4b 45 52 |ompleteT|hunk.KER|
|00002fe0| 4e 45 4c 33 32 2e 64 6c | 6c 09 00 db 88 23 00 00 |NEL32.dl|l....#..|
|00002ff0| a0 01 01 0e 42 61 73 65 | 70 44 65 62 75 67 44 75 |....Base|pDebugDu|
|00003000| 6d 70 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 0a |mp.KERNE|L32.dll.|
|00003010| 00 97 88 19 00 00 a0 01 | 01 04 42 65 65 70 0c 4b |........|..Beep.K|
|00003020| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 0b 00 96 88 29 |ERNEL32.|dll....)|
|00003030| 00 00 a0 01 01 14 42 65 | 67 69 6e 55 70 64 61 74 |......Be|ginUpdat|
|00003040| 65 52 65 73 6f 75 72 63 | 65 41 0c 4b 45 52 4e 45 |eResourc|eA.KERNE|
|00003050| 4c 33 32 2e 64 6c 6c 0c | 00 20 88 29 00 00 a0 01 |L32.dll.|. .)....|
|00003060| 01 14 42 65 67 69 6e 55 | 70 64 61 74 65 52 65 73 |..BeginU|pdateRes|
|00003070| 6f 75 72 63 65 57 0c 4b | 45 52 4e 45 4c 33 32 2e |ourceW.K|ERNEL32.|
|00003080| 64 6c 6c 0d 00 09 88 22 | 00 00 a0 01 01 0d 42 75 |dll...."|......Bu|
|00003090| 69 6c 64 43 6f 6d 6d 44 | 43 42 41 0c 4b 45 52 4e |ildCommD|CBA.KERN|
|000030a0| 45 4c 33 32 2e 64 6c 6c | 0e 00 77 88 2d 00 00 a0 |EL32.dll|..w.-...|
|000030b0| 01 01 18 42 75 69 6c 64 | 43 6f 6d 6d 44 43 42 41 |...Build|CommDCBA|
|000030c0| 6e 64 54 69 6d 65 6f 75 | 74 73 41 0c 4b 45 52 4e |ndTimeou|tsA.KERN|
|000030d0| 45 4c 33 32 2e 64 6c 6c | 0f 00 f3 88 2d 00 00 a0 |EL32.dll|....-...|
|000030e0| 01 01 18 42 75 69 6c 64 | 43 6f 6d 6d 44 43 42 41 |...Build|CommDCBA|
|000030f0| 6e 64 54 69 6d 65 6f 75 | 74 73 57 0c 4b 45 52 4e |ndTimeou|tsW.KERN|
|00003100| 45 4c 33 32 2e 64 6c 6c | 10 00 dc 88 22 00 00 a0 |EL32.dll|...."...|
|00003110| 01 01 0d 42 75 69 6c 64 | 43 6f 6d 6d 44 43 42 57 |...Build|CommDCBW|
|00003120| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 11 00 5e |.KERNEL3|2.dll..^|
|00003130| 88 23 00 00 a0 01 01 0e | 43 61 6c 6c 4e 61 6d 65 |.#......|CallName|
|00003140| 64 50 69 70 65 41 0c 4b | 45 52 4e 45 4c 33 32 2e |dPipeA.K|ERNEL32.|
|00003150| 64 6c 6c 12 00 c7 88 23 | 00 00 a0 01 01 0e 43 61 |dll....#|......Ca|
|00003160| 6c 6c 4e 61 6d 65 64 50 | 69 70 65 57 0c 4b 45 52 |llNamedP|ipeW.KER|
|00003170| 4e 45 4c 33 32 2e 64 6c | 6c 13 00 b0 88 23 00 00 |NEL32.dl|l....#..|
|00003180| a0 01 01 0e 43 6c 65 61 | 72 43 6f 6d 6d 42 72 65 |....Clea|rCommBre|
|00003190| 61 6b 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 14 |ak.KERNE|L32.dll.|
|000031a0| 00 9d 88 23 00 00 a0 01 | 01 0e 43 6c 65 61 72 43 |...#....|..ClearC|
|000031b0| 6f 6d 6d 45 72 72 6f 72 | 0c 4b 45 52 4e 45 4c 33 |ommError|.KERNEL3|
|000031c0| 32 2e 64 6c 6c 15 00 77 | 88 27 00 00 a0 01 01 12 |2.dll..w|.'......|
|000031d0| 43 6c 6f 73 65 43 6f 6e | 73 6f 6c 65 48 61 6e 64 |CloseCon|soleHand|
|000031e0| 6c 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 16 |le.KERNE|L32.dll.|
|000031f0| 00 d6 88 20 00 00 a0 01 | 01 0b 43 6c 6f 73 65 48 |... ....|..CloseH|
|00003200| 61 6e 64 6c 65 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |andle.KE|RNEL32.d|
|00003210| 6c 6c 17 00 b6 88 2c 00 | 00 a0 01 01 17 43 6c 6f |ll....,.|.....Clo|
|00003220| 73 65 50 72 6f 66 69 6c | 65 55 73 65 72 4d 61 70 |seProfil|eUserMap|
|00003230| 70 69 6e 67 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ping.KER|NEL32.dl|
|00003240| 6c 18 00 ad 88 27 00 00 | a0 01 01 12 43 6d 64 42 |l....'..|....CmdB|
|00003250| 61 74 4e 6f 74 69 66 69 | 63 61 74 69 6f 6e 0c 4b |atNotifi|cation.K|
|00003260| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 19 00 d6 88 24 |ERNEL32.|dll....$|
|00003270| 00 00 a0 01 01 0f 43 6f | 6d 70 61 72 65 46 69 6c |......Co|mpareFil|
|00003280| 65 54 69 6d 65 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |eTime.KE|RNEL32.d|
|00003290| 6c 6c 1a 00 17 88 23 00 | 00 a0 01 01 0e 43 6f 6d |ll....#.|.....Com|
|000032a0| 70 61 72 65 53 74 72 69 | 6e 67 57 0c 4b 45 52 4e |pareStri|ngW.KERN|
|000032b0| 45 4c 33 32 2e 64 6c 6c | 1b 00 59 88 25 00 00 a0 |EL32.dll|..Y.%...|
|000032c0| 01 01 10 43 6f 6e 6e 65 | 63 74 4e 61 6d 65 64 50 |...Conne|ctNamedP|
|000032d0| 69 70 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ipe.KERN|EL32.dll|
|000032e0| 1c 00 ac 88 27 00 00 a0 | 01 01 12 43 6f 6e 73 6f |....'...|...Conso|
|000032f0| 6c 65 4d 65 6e 75 43 6f | 6e 74 72 6f 6c 0c 4b 45 |leMenuCo|ntrol.KE|
|00003300| 52 4e 45 4c 33 32 2e 64 | 6c 6c 1d 00 9b 88 21 00 |RNEL32.d|ll....!.|
|00003310| 00 a0 01 01 0c 43 6f 6e | 73 6f 6c 65 53 75 62 73 |.....Con|soleSubs|
|00003320| 74 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 1e 00 |t.KERNEL|32.dll..|
|00003330| 0b 88 27 00 00 a0 01 01 | 12 43 6f 6e 74 69 6e 75 |..'.....|.Continu|
|00003340| 65 44 65 62 75 67 45 76 | 65 6e 74 0c 4b 45 52 4e |eDebugEv|ent.KERN|
|00003350| 45 4c 33 32 2e 64 6c 6c | 1f 00 b4 88 1e 00 00 a0 |EL32.dll|........|
|00003360| 01 01 09 43 6f 70 79 46 | 69 6c 65 41 0c 4b 45 52 |...CopyF|ileA.KER|
|00003370| 4e 45 4c 33 32 2e 64 6c | 6c 20 00 97 88 1e 00 00 |NEL32.dl|l ......|
|00003380| a0 01 01 09 43 6f 70 79 | 46 69 6c 65 57 0c 4b 45 |....Copy|FileW.KE|
|00003390| 52 4e 45 4c 33 32 2e 64 | 6c 6c 21 00 80 88 2e 00 |RNEL32.d|ll!.....|
|000033a0| 00 a0 01 01 19 43 72 65 | 61 74 65 43 6f 6e 73 6f |.....Cre|ateConso|
|000033b0| 6c 65 53 63 72 65 65 6e | 42 75 66 66 65 72 0c 4b |leScreen|Buffer.K|
|000033c0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 22 00 f0 88 25 |ERNEL32.|dll"...%|
|000033d0| 00 00 a0 01 01 10 43 72 | 65 61 74 65 44 69 72 65 |......Cr|eateDire|
|000033e0| 63 74 6f 72 79 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ctoryA.K|ERNEL32.|
|000033f0| 64 6c 6c 23 00 98 88 27 | 00 00 a0 01 01 12 43 72 |dll#...'|......Cr|
|00003400| 65 61 74 65 44 69 72 65 | 63 74 6f 72 79 45 78 41 |eateDire|ctoryExA|
|00003410| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 24 00 d6 |.KERNEL3|2.dll$..|
|00003420| 88 27 00 00 a0 01 01 12 | 43 72 65 61 74 65 44 69 |.'......|CreateDi|
|00003430| 72 65 63 74 6f 72 79 45 | 78 57 0c 4b 45 52 4e 45 |rectoryE|xW.KERNE|
|00003440| 4c 33 32 2e 64 6c 6c 25 | 00 bf 88 25 00 00 a0 01 |L32.dll%|...%....|
|00003450| 01 10 43 72 65 61 74 65 | 44 69 72 65 63 74 6f 72 |..Create|Director|
|00003460| 79 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 26 |yW.KERNE|L32.dll&|
|00003470| 00 7f 88 21 00 00 a0 01 | 01 0c 43 72 65 61 74 65 |...!....|..Create|
|00003480| 45 76 65 6e 74 41 0c 4b | 45 52 4e 45 4c 33 32 2e |EventA.K|ERNEL32.|
|00003490| 64 6c 6c 27 00 4f 88 21 | 00 00 a0 01 01 0c 43 72 |dll'.O.!|......Cr|
|000034a0| 65 61 74 65 45 76 65 6e | 74 57 0c 4b 45 52 4e 45 |eateEven|tW.KERNE|
|000034b0| 4c 33 32 2e 64 6c 6c 28 | 00 38 88 20 00 00 a0 01 |L32.dll(|.8. ....|
|000034c0| 01 0b 43 72 65 61 74 65 | 46 69 6c 65 41 0c 4b 45 |..Create|FileA.KE|
|000034d0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 29 00 d1 88 27 00 |RNEL32.d|ll)...'.|
|000034e0| 00 a0 01 01 12 43 72 65 | 61 74 65 46 69 6c 65 4d |.....Cre|ateFileM|
|000034f0| 61 70 70 69 6e 67 41 0c | 4b 45 52 4e 45 4c 33 32 |appingA.|KERNEL32|
|00003500| 2e 64 6c 6c 2a 00 f6 88 | 27 00 00 a0 01 01 12 43 |.dll*...|'......C|
|00003510| 72 65 61 74 65 46 69 6c | 65 4d 61 70 70 69 6e 67 |reateFil|eMapping|
|00003520| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 2b 00 |W.KERNEL|32.dll+.|
|00003530| df 88 20 00 00 a0 01 01 | 0b 43 72 65 61 74 65 46 |.. .....|.CreateF|
|00003540| 69 6c 65 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ileW.KER|NEL32.dl|
|00003550| 6c 2c 00 b8 88 24 00 00 | a0 01 01 0f 43 72 65 61 |l,...$..|....Crea|
|00003560| 74 65 4d 61 69 6c 73 6c | 6f 74 41 0c 4b 45 52 4e |teMailsl|otA.KERN|
|00003570| 45 4c 33 32 2e 64 6c 6c | 2d 00 00 88 24 00 00 a0 |EL32.dll|-...$...|
|00003580| 01 01 0f 43 72 65 61 74 | 65 4d 61 69 6c 73 6c 6f |...Creat|eMailslo|
|00003590| 74 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 2e |tW.KERNE|L32.dll.|
|000035a0| 00 e9 88 21 00 00 a0 01 | 01 0c 43 72 65 61 74 65 |...!....|..Create|
|000035b0| 4d 75 74 65 78 41 0c 4b | 45 52 4e 45 4c 33 32 2e |MutexA.K|ERNEL32.|
|000035c0| 64 6c 6c 2f 00 36 88 21 | 00 00 a0 01 01 0c 43 72 |dll/.6.!|......Cr|
|000035d0| 65 61 74 65 4d 75 74 65 | 78 57 0c 4b 45 52 4e 45 |eateMute|xW.KERNE|
|000035e0| 4c 33 32 2e 64 6c 6c 30 | 00 1f 88 25 00 00 a0 01 |L32.dll0|...%....|
|000035f0| 01 10 43 72 65 61 74 65 | 4e 61 6d 65 64 50 69 70 |..Create|NamedPip|
|00003600| 65 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 31 |eA.KERNE|L32.dll1|
|00003610| 00 cc 88 25 00 00 a0 01 | 01 10 43 72 65 61 74 65 |...%....|..Create|
|00003620| 4e 61 6d 65 64 50 69 70 | 65 57 0c 4b 45 52 4e 45 |NamedPip|eW.KERNE|
|00003630| 4c 33 32 2e 64 6c 6c 32 | 00 b5 88 1f 00 00 a0 01 |L32.dll2|........|
|00003640| 01 0a 43 72 65 61 74 65 | 50 69 70 65 0c 4b 45 52 |..Create|Pipe.KER|
|00003650| 4e 45 4c 33 32 2e 64 6c | 6c 33 00 fc 88 23 00 00 |NEL32.dl|l3...#..|
|00003660| a0 01 01 0e 43 72 65 61 | 74 65 50 72 6f 63 65 73 |....Crea|teProces|
|00003670| 73 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 34 |sA.KERNE|L32.dll4|
|00003680| 00 61 88 23 00 00 a0 01 | 01 0e 43 72 65 61 74 65 |.a.#....|..Create|
|00003690| 50 72 6f 63 65 73 73 57 | 0c 4b 45 52 4e 45 4c 33 |ProcessW|.KERNEL3|
|000036a0| 32 2e 64 6c 6c 35 00 4a | 88 27 00 00 a0 01 01 12 |2.dll5.J|.'......|
|000036b0| 43 72 65 61 74 65 52 65 | 6d 6f 74 65 54 68 72 65 |CreateRe|moteThre|
|000036c0| 61 64 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 36 |ad.KERNE|L32.dll6|
|000036d0| 00 b3 88 25 00 00 a0 01 | 01 10 43 72 65 61 74 65 |...%....|..Create|
|000036e0| 53 65 6d 61 70 68 6f 72 | 65 41 0c 4b 45 52 4e 45 |Semaphor|eA.KERNE|
|000036f0| 4c 33 32 2e 64 6c 6c 37 | 00 95 88 25 00 00 a0 01 |L32.dll7|...%....|
|00003700| 01 10 43 72 65 61 74 65 | 53 65 6d 61 70 68 6f 72 |..Create|Semaphor|
|00003710| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 38 |eW.KERNE|L32.dll8|
|00003720| 00 7e 88 28 00 00 a0 01 | 01 13 43 72 65 61 74 65 |.~.(....|..Create|
|00003730| 54 61 70 65 50 61 72 74 | 69 74 69 6f 6e 0c 4b 45 |TapePart|ition.KE|
|00003740| 52 4e 45 4c 33 32 2e 64 | 6c 6c 39 00 2e 88 21 00 |RNEL32.d|ll9...!.|
|00003750| 00 a0 01 01 0c 43 72 65 | 61 74 65 54 68 72 65 61 |.....Cre|ateThrea|
|00003760| 64 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 3a 00 |d.KERNEL|32.dll:.|
|00003770| 27 88 28 00 00 a0 01 01 | 13 43 72 65 61 74 65 56 |'.(.....|.CreateV|
|00003780| 69 72 74 75 61 6c 42 75 | 66 66 65 72 0c 4b 45 52 |irtualBu|ffer.KER|
|00003790| 4e 45 4c 33 32 2e 64 6c | 6c 3b 00 2f 88 27 00 00 |NEL32.dl|l;./.'..|
|000037a0| a0 01 01 12 44 65 62 75 | 67 41 63 74 69 76 65 50 |....Debu|gActiveP|
|000037b0| 72 6f 63 65 73 73 0c 4b | 45 52 4e 45 4c 33 32 2e |rocess.K|ERNEL32.|
|000037c0| 64 6c 6c 3c 00 a3 88 1f | 00 00 a0 01 01 0a 44 65 |dll<....|......De|
|000037d0| 62 75 67 42 72 65 61 6b | 0c 4b 45 52 4e 45 4c 33 |bugBreak|.KERNEL3|
|000037e0| 32 2e 64 6c 6c 3d 00 08 | 88 25 00 00 a0 01 01 10 |2.dll=..|.%......|
|000037f0| 44 65 66 69 6e 65 44 6f | 73 44 65 76 69 63 65 41 |DefineDo|sDeviceA|
|00003800| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 3e 00 c5 |.KERNEL3|2.dll>..|
|00003810| 88 25 00 00 a0 01 01 10 | 44 65 66 69 6e 65 44 6f |.%......|DefineDo|
|00003820| 73 44 65 76 69 63 65 57 | 0c 4b 45 52 4e 45 4c 33 |sDeviceW|.KERNEL3|
|00003830| 32 2e 64 6c 6c 3f 00 ae | 88 1f 00 00 a0 01 01 0a |2.dll?..|........|
|00003840| 44 65 6c 65 74 65 41 74 | 6f 6d 0c 4b 45 52 4e 45 |DeleteAt|om.KERNE|
|00003850| 4c 33 32 2e 64 6c 6c 40 | 00 ed 88 2a 00 00 a0 01 |L32.dll@|...*....|
|00003860| 01 15 44 65 6c 65 74 65 | 43 72 69 74 69 63 61 6c |..Delete|Critical|
|00003870| 53 65 63 74 69 6f 6e 0c | 4b 45 52 4e 45 4c 33 32 |Section.|KERNEL32|
|00003880| 2e 64 6c 6c 41 00 67 88 | 20 00 00 a0 01 01 0b 44 |.dllA.g.| ......D|
|00003890| 65 6c 65 74 65 46 69 6c | 65 41 0c 4b 45 52 4e 45 |eleteFil|eA.KERNE|
|000038a0| 4c 33 32 2e 64 6c 6c 42 | 00 b9 88 20 00 00 a0 01 |L32.dllB|... ....|
|000038b0| 01 0b 44 65 6c 65 74 65 | 46 69 6c 65 57 0c 4b 45 |..Delete|FileW.KE|
|000038c0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 43 00 a2 88 24 00 |RNEL32.d|llC...$.|
|000038d0| 00 a0 01 01 0f 44 65 76 | 69 63 65 49 6f 43 6f 6e |.....Dev|iceIoCon|
|000038e0| 74 72 6f 6c 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |trol.KER|NEL32.dl|
|000038f0| 6c 44 00 da 88 28 00 00 | a0 01 01 13 44 69 73 63 |lD...(..|....Disc|
|00003900| 6f 6e 6e 65 63 74 4e 61 | 6d 65 64 50 69 70 65 0c |onnectNa|medPipe.|
|00003910| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 45 00 3d 88 |KERNEL32|.dllE.=.|
|00003920| 2a 00 00 a0 01 01 15 44 | 6f 73 44 61 74 65 54 69 |*......D|osDateTi|
|00003930| 6d 65 54 6f 46 69 6c 65 | 54 69 6d 65 0c 4b 45 52 |meToFile|Time.KER|
|00003940| 4e 45 4c 33 32 2e 64 6c | 6c 46 00 b0 88 2b 00 00 |NEL32.dl|lF...+..|
|00003950| a0 01 01 16 44 75 70 6c | 69 63 61 74 65 43 6f 6e |....Dupl|icateCon|
|00003960| 73 6f 6c 65 48 61 6e 64 | 6c 65 0c 4b 45 52 4e 45 |soleHand|le.KERNE|
|00003970| 4c 33 32 2e 64 6c 6c 47 | 00 f8 88 24 00 00 a0 01 |L32.dllG|...$....|
|00003980| 01 0f 44 75 70 6c 69 63 | 61 74 65 48 61 6e 64 6c |..Duplic|ateHandl|
|00003990| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 48 00 |e.KERNEL|32.dllH.|
|000039a0| d8 88 27 00 00 a0 01 01 | 12 45 6e 64 55 70 64 61 |..'.....|.EndUpda|
|000039b0| 74 65 52 65 73 6f 75 72 | 63 65 41 0c 4b 45 52 4e |teResour|ceA.KERN|
|000039c0| 45 4c 33 32 2e 64 6c 6c | 49 00 b5 88 27 00 00 a0 |EL32.dll|I...'...|
|000039d0| 01 01 12 45 6e 64 55 70 | 64 61 74 65 52 65 73 6f |...EndUp|dateReso|
|000039e0| 75 72 63 65 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |urceW.KE|RNEL32.d|
|000039f0| 6c 6c 4a 00 9e 88 29 00 | 00 a0 01 01 14 45 6e 74 |llJ...).|.....Ent|
|00003a00| 65 72 43 72 69 74 69 63 | 61 6c 53 65 63 74 69 6f |erCritic|alSectio|
|00003a10| 6e 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 4b 00 |n.KERNEL|32.dllK.|
|00003a20| b4 88 2b 00 00 a0 01 01 | 16 45 6e 75 6d 52 65 73 |..+.....|.EnumRes|
|00003a30| 6f 75 72 63 65 4c 61 6e | 67 75 61 67 65 73 41 0c |ourceLan|guagesA.|
|00003a40| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 4c 00 f8 88 |KERNEL32|.dllL...|
|00003a50| 2b 00 00 a0 01 01 16 45 | 6e 75 6d 52 65 73 6f 75 |+......E|numResou|
|00003a60| 72 63 65 4c 61 6e 67 75 | 61 67 65 73 57 0c 4b 45 |rceLangu|agesW.KE|
|00003a70| 52 4e 45 4c 33 32 2e 64 | 6c 6c 4d 00 e1 88 27 00 |RNEL32.d|llM...'.|
|00003a80| 00 a0 01 01 12 45 6e 75 | 6d 52 65 73 6f 75 72 63 |.....Enu|mResourc|
|00003a90| 65 4e 61 6d 65 73 41 0c | 4b 45 52 4e 45 4c 33 32 |eNamesA.|KERNEL32|
|00003aa0| 2e 64 6c 6c 4e 00 a1 88 | 27 00 00 a0 01 01 12 45 |.dllN...|'......E|
|00003ab0| 6e 75 6d 52 65 73 6f 75 | 72 63 65 4e 61 6d 65 73 |numResou|rceNames|
|00003ac0| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 4f 00 |W.KERNEL|32.dllO.|
|00003ad0| 8a 88 27 00 00 a0 01 01 | 12 45 6e 75 6d 52 65 73 |..'.....|.EnumRes|
|00003ae0| 6f 75 72 63 65 54 79 70 | 65 73 41 0c 4b 45 52 4e |ourceTyp|esA.KERN|
|00003af0| 45 4c 33 32 2e 64 6c 6c | 50 00 7e 88 27 00 00 a0 |EL32.dll|P.~.'...|
|00003b00| 01 01 12 45 6e 75 6d 52 | 65 73 6f 75 72 63 65 54 |...EnumR|esourceT|
|00003b10| 79 70 65 73 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ypesW.KE|RNEL32.d|
|00003b20| 6c 6c 51 00 67 88 1e 00 | 00 a0 01 01 09 45 72 61 |llQ.g...|.....Era|
|00003b30| 73 65 54 61 70 65 0c 4b | 45 52 4e 45 4c 33 32 2e |seTape.K|ERNEL32.|
|00003b40| 64 6c 6c 52 00 47 88 27 | 00 00 a0 01 01 12 45 73 |dllR.G.'|......Es|
|00003b50| 63 61 70 65 43 6f 6d 6d | 46 75 6e 63 74 69 6f 6e |capeComm|Function|
|00003b60| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 53 00 8b |.KERNEL3|2.dllS..|
|00003b70| 88 20 00 00 a0 01 01 0b | 45 78 69 74 50 72 6f 63 |. ......|ExitProc|
|00003b80| 65 73 73 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ess.KERN|EL32.dll|
|00003b90| 54 00 42 88 1f 00 00 a0 | 01 01 0a 45 78 69 74 54 |T.B.....|...ExitT|
|00003ba0| 68 72 65 61 64 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |hread.KE|RNEL32.d|
|00003bb0| 6c 6c 55 00 ca 88 1c 00 | 00 a0 01 01 07 45 78 69 |llU.....|.....Exi|
|00003bc0| 74 56 44 4d 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |tVDM.KER|NEL32.dl|
|00003bd0| 6c 56 00 40 88 2e 00 00 | a0 01 01 19 45 78 70 61 |lV.@....|....Expa|
|00003be0| 6e 64 45 6e 76 69 72 6f | 6e 6d 65 6e 74 53 74 72 |ndEnviro|nmentStr|
|00003bf0| 69 6e 67 73 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ingsA.KE|RNEL32.d|
|00003c00| 6c 6c 57 00 7c 88 2e 00 | 00 a0 01 01 19 45 78 70 |llW.|...|.....Exp|
|00003c10| 61 6e 64 45 6e 76 69 72 | 6f 6e 6d 65 6e 74 53 74 |andEnvir|onmentSt|
|00003c20| 72 69 6e 67 73 57 0c 4b | 45 52 4e 45 4c 33 32 2e |ringsW.K|ERNEL32.|
|00003c30| 64 6c 6c 58 00 65 88 32 | 00 00 a0 01 01 1d 45 78 |dllX.e.2|......Ex|
|00003c40| 70 75 6e 67 65 43 6f 6e | 73 6f 6c 65 43 6f 6d 6d |pungeCon|soleComm|
|00003c50| 61 6e 64 48 69 73 74 6f | 72 79 41 0c 4b 45 52 4e |andHisto|ryA.KERN|
|00003c60| 45 4c 33 32 2e 64 6c 6c | 59 00 f1 88 32 00 00 a0 |EL32.dll|Y...2...|
|00003c70| 01 01 1d 45 78 70 75 6e | 67 65 43 6f 6e 73 6f 6c |...Expun|geConsol|
|00003c80| 65 43 6f 6d 6d 61 6e 64 | 48 69 73 74 6f 72 79 57 |eCommand|HistoryW|
|00003c90| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 5a 00 da |.KERNEL3|2.dllZ..|
|00003ca0| 88 28 00 00 a0 01 01 13 | 45 78 74 65 6e 64 56 69 |.(......|ExtendVi|
|00003cb0| 72 74 75 61 6c 42 75 66 | 66 65 72 0c 4b 45 52 4e |rtualBuf|fer.KERN|
|00003cc0| 45 4c 33 32 2e 64 6c 6c | 5b 00 fb 88 22 00 00 a0 |EL32.dll|[..."...|
|00003cd0| 01 01 0d 46 61 74 61 6c | 41 70 70 45 78 69 74 41 |...Fatal|AppExitA|
|00003ce0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 5c 00 cb |.KERNEL3|2.dll\..|
|00003cf0| 88 22 00 00 a0 01 01 0d | 46 61 74 61 6c 41 70 70 |."......|FatalApp|
|00003d00| 45 78 69 74 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ExitW.KE|RNEL32.d|
|00003d10| 6c 6c 5d 00 b4 88 1e 00 | 00 a0 01 01 09 46 61 74 |ll].....|.....Fat|
|00003d20| 61 6c 45 78 69 74 0c 4b | 45 52 4e 45 4c 33 32 2e |alExit.K|ERNEL32.|
|00003d30| 64 6c 6c 5e 00 33 88 2a | 00 00 a0 01 01 15 46 69 |dll^.3.*|......Fi|
|00003d40| 6c 65 54 69 6d 65 54 6f | 44 6f 73 44 61 74 65 54 |leTimeTo|DosDateT|
|00003d50| 69 6d 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ime.KERN|EL32.dll|
|00003d60| 5f 00 97 88 2c 00 00 a0 | 01 01 17 46 69 6c 65 54 |_...,...|...FileT|
|00003d70| 69 6d 65 54 6f 4c 6f 63 | 61 6c 46 69 6c 65 54 69 |imeToLoc|alFileTi|
|00003d80| 6d 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 60 |me.KERNE|L32.dll`|
|00003d90| 00 cb 88 29 00 00 a0 01 | 01 14 46 69 6c 65 54 69 |...)....|..FileTi|
|00003da0| 6d 65 54 6f 53 79 73 74 | 65 6d 54 69 6d 65 0c 4b |meToSyst|emTime.K|
|00003db0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 61 00 b6 88 2f |ERNEL32.|dlla.../|
|00003dc0| 00 00 a0 01 01 1a 46 69 | 6c 6c 43 6f 6e 73 6f 6c |......Fi|llConsol|
|00003dd0| 65 4f 75 74 70 75 74 41 | 74 74 72 69 62 75 74 65 |eOutputA|ttribute|
|00003de0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 62 00 f0 |.KERNEL3|2.dllb..|
|00003df0| 88 30 00 00 a0 01 01 1b | 46 69 6c 6c 43 6f 6e 73 |.0......|FillCons|
|00003e00| 6f 6c 65 4f 75 74 70 75 | 74 43 68 61 72 61 63 74 |oleOutpu|tCharact|
|00003e10| 65 72 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |erA.KERN|EL32.dll|
|00003e20| 63 00 d3 88 30 00 00 a0 | 01 01 1b 46 69 6c 6c 43 |c...0...|...FillC|
|00003e30| 6f 6e 73 6f 6c 65 4f 75 | 74 70 75 74 43 68 61 72 |onsoleOu|tputChar|
|00003e40| 61 63 74 65 72 57 0c 4b | 45 52 4e 45 4c 33 32 2e |acterW.K|ERNEL32.|
|00003e50| 64 6c 6c 64 00 bc 88 1e | 00 00 a0 01 01 09 46 69 |dlld....|......Fi|
|00003e60| 6e 64 41 74 6f 6d 41 0c | 4b 45 52 4e 45 4c 33 32 |ndAtomA.|KERNEL32|
|00003e70| 2e 64 6c 6c 65 00 5b 88 | 1e 00 00 a0 01 01 09 46 |.dlle.[.|.......F|
|00003e80| 69 6e 64 41 74 6f 6d 57 | 0c 4b 45 52 4e 45 4c 33 |indAtomW|.KERNEL3|
|00003e90| 32 2e 64 6c 6c 66 00 44 | 88 1e 00 00 a0 01 01 09 |2.dllf.D|........|
|00003ea0| 46 69 6e 64 43 6c 6f 73 | 65 0c 4b 45 52 4e 45 4c |FindClos|e.KERNEL|
|00003eb0| 33 32 2e 64 6c 6c 67 00 | 35 88 30 00 00 a0 01 01 |32.dllg.|5.0.....|
|00003ec0| 1b 46 69 6e 64 43 6c 6f | 73 65 43 68 61 6e 67 65 |.FindClo|seChange|
|00003ed0| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 0c 4b 45 52 |Notifica|tion.KER|
|00003ee0| 4e 45 4c 33 32 2e 64 6c | 6c 68 00 e3 88 31 00 00 |NEL32.dl|lh...1..|
|00003ef0| a0 01 01 1c 46 69 6e 64 | 46 69 72 73 74 43 68 61 |....Find|FirstCha|
|00003f00| 6e 67 65 4e 6f 74 69 66 | 69 63 61 74 69 6f 6e 41 |ngeNotif|icationA|
|00003f10| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 69 00 8d |.KERNEL3|2.dlli..|
|00003f20| 88 31 00 00 a0 01 01 1c | 46 69 6e 64 46 69 72 73 |.1......|FindFirs|
|00003f30| 74 43 68 61 6e 67 65 4e | 6f 74 69 66 69 63 61 74 |tChangeN|otificat|
|00003f40| 69 6f 6e 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ionW.KER|NEL32.dl|
|00003f50| 6c 6a 00 76 88 23 00 00 | a0 01 01 0e 46 69 6e 64 |lj.v.#..|....Find|
|00003f60| 46 69 72 73 74 46 69 6c | 65 41 0c 4b 45 52 4e 45 |FirstFil|eA.KERNE|
|00003f70| 4c 33 32 2e 64 6c 6c 6b | 00 54 88 23 00 00 a0 01 |L32.dllk|.T.#....|
|00003f80| 01 0e 46 69 6e 64 46 69 | 72 73 74 46 69 6c 65 57 |..FindFi|rstFileW|
|00003f90| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 6c 00 3d |.KERNEL3|2.dlll.=|
|00003fa0| 88 2f 00 00 a0 01 01 1a | 46 69 6e 64 4e 65 78 74 |./......|FindNext|
|00003fb0| 43 68 61 6e 67 65 4e 6f | 74 69 66 69 63 61 74 69 |ChangeNo|tificati|
|00003fc0| 6f 6e 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 6d |on.KERNE|L32.dllm|
|00003fd0| 00 37 88 22 00 00 a0 01 | 01 0d 46 69 6e 64 4e 65 |.7."....|..FindNe|
|00003fe0| 78 74 46 69 6c 65 41 0c | 4b 45 52 4e 45 4c 33 32 |xtFileA.|KERNEL32|
|00003ff0| 2e 64 6c 6c 6e 00 bc 88 | 22 00 00 a0 01 01 0d 46 |.dlln...|"......F|
|00004000| 69 6e 64 4e 65 78 74 46 | 69 6c 65 57 0c 4b 45 52 |indNextF|ileW.KER|
|00004010| 4e 45 4c 33 32 2e 64 6c | 6c 6f 00 a5 88 22 00 00 |NEL32.dl|lo..."..|
|00004020| a0 01 01 0d 46 69 6e 64 | 52 65 73 6f 75 72 63 65 |....Find|Resource|
|00004030| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 70 00 |A.KERNEL|32.dllp.|
|00004040| 91 88 24 00 00 a0 01 01 | 0f 46 69 6e 64 52 65 73 |..$.....|.FindRes|
|00004050| 6f 75 72 63 65 45 78 41 | 0c 4b 45 52 4e 45 4c 33 |ourceExA|.KERNEL3|
|00004060| 32 2e 64 6c 6c 71 00 cf | 88 24 00 00 a0 01 01 0f |2.dllq..|.$......|
|00004070| 46 69 6e 64 52 65 73 6f | 75 72 63 65 45 78 57 0c |FindReso|urceExW.|
|00004080| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 72 00 b8 88 |KERNEL32|.dllr...|
|00004090| 22 00 00 a0 01 01 0d 46 | 69 6e 64 52 65 73 6f 75 |"......F|indResou|
|000040a0| 72 63 65 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |rceW.KER|NEL32.dl|
|000040b0| 6c 73 00 78 88 2c 00 00 | a0 01 01 17 46 6c 75 73 |ls.x.,..|....Flus|
|000040c0| 68 43 6f 6e 73 6f 6c 65 | 49 6e 70 75 74 42 75 66 |hConsole|InputBuf|
|000040d0| 66 65 72 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |fer.KERN|EL32.dll|
|000040e0| 74 00 44 88 25 00 00 a0 | 01 01 10 46 6c 75 73 68 |t.D.%...|...Flush|
|000040f0| 46 69 6c 65 42 75 66 66 | 65 72 73 0c 4b 45 52 4e |FileBuff|ers.KERN|
|00004100| 45 4c 33 32 2e 64 6c 6c | 75 00 41 88 2a 00 00 a0 |EL32.dll|u.A.*...|
|00004110| 01 01 15 46 6c 75 73 68 | 49 6e 73 74 72 75 63 74 |...Flush|Instruct|
|00004120| 69 6f 6e 43 61 63 68 65 | 0c 4b 45 52 4e 45 4c 33 |ionCache|.KERNEL3|
|00004130| 32 2e 64 6c 6c 76 00 0d | 88 24 00 00 a0 01 01 0f |2.dllv..|.$......|
|00004140| 46 6c 75 73 68 56 69 65 | 77 4f 66 46 69 6c 65 0c |FlushVie|wOfFile.|
|00004150| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 77 00 be 88 |KERNEL32|.dllw...|
|00004160| 20 00 00 a0 01 01 0b 46 | 6f 6c 64 53 74 72 69 6e | ......F|oldStrin|
|00004170| 67 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 78 |gW.KERNE|L32.dllx|
|00004180| 00 44 88 23 00 00 a0 01 | 01 0e 46 6f 72 6d 61 74 |.D.#....|..Format|
|00004190| 4d 65 73 73 61 67 65 41 | 0c 4b 45 52 4e 45 4c 33 |MessageA|.KERNEL3|
|000041a0| 32 2e 64 6c 6c 79 00 21 | 88 23 00 00 a0 01 01 0e |2.dlly.!|.#......|
|000041b0| 46 6f 72 6d 61 74 4d 65 | 73 73 61 67 65 57 0c 4b |FormatMe|ssageW.K|
|000041c0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 7a 00 0a 88 20 |ERNEL32.|dllz... |
|000041d0| 00 00 a0 01 01 0b 46 72 | 65 65 43 6f 6e 73 6f 6c |......Fr|eeConsol|
|000041e0| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 7b 00 |e.KERNEL|32.dll{.|
|000041f0| 3f 88 20 00 00 a0 01 01 | 0b 46 72 65 65 4c 69 62 |?. .....|.FreeLib|
|00004200| 72 61 72 79 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |rary.KER|NEL32.dl|
|00004210| 6c 7c 00 3c 88 21 00 00 | a0 01 01 0c 46 72 65 65 |l|.<.!..|....Free|
|00004220| 52 65 73 6f 75 72 63 65 | 0c 4b 45 52 4e 45 4c 33 |Resource|.KERNEL3|
|00004230| 32 2e 64 6c 6c 7d 00 c6 | 88 26 00 00 a0 01 01 11 |2.dll}..|.&......|
|00004240| 46 72 65 65 56 69 72 74 | 75 61 6c 42 75 66 66 65 |FreeVirt|ualBuffe|
|00004250| 72 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 7e 00 |r.KERNEL|32.dll~.|
|00004260| c2 88 2d 00 00 a0 01 01 | 18 47 65 6e 65 72 61 74 |..-.....|.Generat|
|00004270| 65 43 6f 6e 73 6f 6c 65 | 43 74 72 6c 45 76 65 6e |eConsole|CtrlEven|
|00004280| 74 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 7f 00 |t.KERNEL|32.dll..|
|00004290| e1 88 1b 00 00 a0 01 01 | 06 47 65 74 41 43 50 0c |........|.GetACP.|
|000042a0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 80 00 a5 88 |KERNEL32|.dll....|
|000042b0| 21 00 00 a0 01 01 0c 47 | 65 74 41 74 6f 6d 4e 61 |!......G|etAtomNa|
|000042c0| 6d 65 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |meA.KERN|EL32.dll|
|000042d0| 81 00 19 88 21 00 00 a0 | 01 01 0c 47 65 74 41 74 |....!...|...GetAt|
|000042e0| 6f 6d 4e 61 6d 65 57 0c | 4b 45 52 4e 45 4c 33 32 |omNameW.|KERNEL32|
|000042f0| 2e 64 6c 6c 82 00 02 88 | 22 00 00 a0 01 01 0d 47 |.dll....|"......G|
|00004300| 65 74 42 69 6e 61 72 79 | 54 79 70 65 0c 4b 45 52 |etBinary|Type.KER|
|00004310| 4e 45 4c 33 32 2e 64 6c | 6c 83 00 61 88 1e 00 00 |NEL32.dl|l..a....|
|00004320| a0 01 01 09 47 65 74 43 | 50 49 6e 66 6f 0c 4b 45 |....GetC|PInfo.KE|
|00004330| 52 4e 45 4c 33 32 2e 64 | 6c 6c 84 00 50 88 20 00 |RNEL32.d|ll..P. .|
|00004340| 00 a0 01 01 0b 47 65 74 | 43 6f 6d 6d 4d 61 73 6b |.....Get|CommMask|
|00004350| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 85 00 52 |.KERNEL3|2.dll..R|
|00004360| 88 27 00 00 a0 01 01 12 | 47 65 74 43 6f 6d 6d 4d |.'......|GetCommM|
|00004370| 6f 64 65 6d 53 74 61 74 | 75 73 0c 4b 45 52 4e 45 |odemStat|us.KERNE|
|00004380| 4c 33 32 2e 64 6c 6c 86 | 00 59 88 26 00 00 a0 01 |L32.dll.|.Y.&....|
|00004390| 01 11 47 65 74 43 6f 6d | 6d 50 72 6f 70 65 72 74 |..GetCom|mPropert|
|000043a0| 69 65 73 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ies.KERN|EL32.dll|
|000043b0| 87 00 a3 88 21 00 00 a0 | 01 01 0c 47 65 74 43 6f |....!...|...GetCo|
|000043c0| 6d 6d 53 74 61 74 65 0c | 4b 45 52 4e 45 4c 33 32 |mmState.|KERNEL32|
|000043d0| 2e 64 6c 6c 88 00 d8 88 | 24 00 00 a0 01 01 0f 47 |.dll....|$......G|
|000043e0| 65 74 43 6f 6d 6d 54 69 | 6d 65 6f 75 74 73 0c 4b |etCommTi|meouts.K|
|000043f0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 89 00 78 88 24 |ERNEL32.|dll..x.$|
|00004400| 00 00 a0 01 01 0f 47 65 | 74 43 6f 6d 6d 61 6e 64 |......Ge|tCommand|
|00004410| 4c 69 6e 65 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |LineA.KE|RNEL32.d|
|00004420| 6c 6c 8a 00 d5 88 24 00 | 00 a0 01 01 0f 47 65 74 |ll....$.|.....Get|
|00004430| 43 6f 6d 6d 61 6e 64 4c | 69 6e 65 57 0c 4b 45 52 |CommandL|ineW.KER|
|00004440| 4e 45 4c 33 32 2e 64 6c | 6c 8b 00 be 88 25 00 00 |NEL32.dl|l....%..|
|00004450| a0 01 01 10 47 65 74 43 | 6f 6d 70 75 74 65 72 4e |....GetC|omputerN|
|00004460| 61 6d 65 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ameA.KER|NEL32.dl|
|00004470| 6c 8c 00 48 88 25 00 00 | a0 01 01 10 47 65 74 43 |l..H.%..|....GetC|
|00004480| 6f 6d 70 75 74 65 72 4e | 61 6d 65 57 0c 4b 45 52 |omputerN|ameW.KER|
|00004490| 4e 45 4c 33 32 2e 64 6c | 6c 8d 00 31 88 25 00 00 |NEL32.dl|l..1.%..|
|000044a0| a0 01 01 10 47 65 74 43 | 6f 6e 73 6f 6c 65 41 6c |....GetC|onsoleAl|
|000044b0| 69 61 73 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |iasA.KER|NEL32.dl|
|000044c0| 6c 8e 00 59 88 29 00 00 | a0 01 01 14 47 65 74 43 |l..Y.)..|....GetC|
|000044d0| 6f 6e 73 6f 6c 65 41 6c | 69 61 73 45 78 65 73 41 |onsoleAl|iasExesA|
|000044e0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 8f 00 bb |.KERNEL3|2.dll...|
|000044f0| 88 2f 00 00 a0 01 01 1a | 47 65 74 43 6f 6e 73 6f |./......|GetConso|
|00004500| 6c 65 41 6c 69 61 73 45 | 78 65 73 4c 65 6e 67 74 |leAliasE|xesLengt|
|00004510| 68 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 90 |hA.KERNE|L32.dll.|
|00004520| 00 4c 88 2f 00 00 a0 01 | 01 1a 47 65 74 43 6f 6e |.L./....|..GetCon|
|00004530| 73 6f 6c 65 41 6c 69 61 | 73 45 78 65 73 4c 65 6e |soleAlia|sExesLen|
|00004540| 67 74 68 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |gthW.KER|NEL32.dl|
|00004550| 6c 91 00 35 88 29 00 00 | a0 01 01 14 47 65 74 43 |l..5.)..|....GetC|
|00004560| 6f 6e 73 6f 6c 65 41 6c | 69 61 73 45 78 65 73 57 |onsoleAl|iasExesW|
|00004570| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 92 00 a2 |.KERNEL3|2.dll...|
|00004580| 88 25 00 00 a0 01 01 10 | 47 65 74 43 6f 6e 73 6f |.%......|GetConso|
|00004590| 6c 65 41 6c 69 61 73 57 | 0c 4b 45 52 4e 45 4c 33 |leAliasW|.KERNEL3|
|000045a0| 32 2e 64 6c 6c 93 00 3e | 88 27 00 00 a0 01 01 12 |2.dll..>|.'......|
|000045b0| 47 65 74 43 6f 6e 73 6f | 6c 65 41 6c 69 61 73 65 |GetConso|leAliase|
|000045c0| 73 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 94 |sA.KERNE|L32.dll.|
|000045d0| 00 77 88 2d 00 00 a0 01 | 01 18 47 65 74 43 6f 6e |.w.-....|..GetCon|
|000045e0| 73 6f 6c 65 41 6c 69 61 | 73 65 73 4c 65 6e 67 74 |soleAlia|sesLengt|
|000045f0| 68 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 95 |hA.KERNE|L32.dll.|
|00004600| 00 08 88 2d 00 00 a0 01 | 01 18 47 65 74 43 6f 6e |...-....|..GetCon|
|00004610| 73 6f 6c 65 41 6c 69 61 | 73 65 73 4c 65 6e 67 74 |soleAlia|sesLengt|
|00004620| 68 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 96 |hW.KERNE|L32.dll.|
|00004630| 00 f1 88 27 00 00 a0 01 | 01 12 47 65 74 43 6f 6e |...'....|..GetCon|
|00004640| 73 6f 6c 65 41 6c 69 61 | 73 65 73 57 0c 4b 45 52 |soleAlia|sesW.KER|
|00004650| 4e 45 4c 33 32 2e 64 6c | 6c 97 00 5e 88 21 00 00 |NEL32.dl|l..^.!..|
|00004660| a0 01 01 0c 47 65 74 43 | 6f 6e 73 6f 6c 65 43 50 |....GetC|onsoleCP|
|00004670| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 98 00 ef |.KERNEL3|2.dll...|
|00004680| 88 2e 00 00 a0 01 01 19 | 47 65 74 43 6f 6e 73 6f |........|GetConso|
|00004690| 6c 65 43 6f 6d 6d 61 6e | 64 48 69 73 74 6f 72 79 |leComman|dHistory|
|000046a0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 99 00 |A.KERNEL|32.dll..|
|000046b0| 75 88 34 00 00 a0 01 01 | 1f 47 65 74 43 6f 6e 73 |u.4.....|.GetCons|
|000046c0| 6f 6c 65 43 6f 6d 6d 61 | 6e 64 48 69 73 74 6f 72 |oleComma|ndHistor|
|000046d0| 79 4c 65 6e 67 74 68 41 | 0c 4b 45 52 4e 45 4c 33 |yLengthA|.KERNEL3|
|000046e0| 32 2e 64 6c 6c 9a 00 06 | 88 34 00 00 a0 01 01 1f |2.dll...|.4......|
|000046f0| 47 65 74 43 6f 6e 73 6f | 6c 65 43 6f 6d 6d 61 6e |GetConso|leComman|
|00004700| 64 48 69 73 74 6f 72 79 | 4c 65 6e 67 74 68 57 0c |dHistory|LengthW.|
|00004710| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 9b 00 ef 88 |KERNEL32|.dll....|
|00004720| 2e 00 00 a0 01 01 19 47 | 65 74 43 6f 6e 73 6f 6c |.......G|etConsol|
|00004730| 65 43 6f 6d 6d 61 6e 64 | 48 69 73 74 6f 72 79 57 |eCommand|HistoryW|
|00004740| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 9c 00 5c |.KERNEL3|2.dll..\|
|00004750| 88 29 00 00 a0 01 01 14 | 47 65 74 43 6f 6e 73 6f |.)......|GetConso|
|00004760| 6c 65 43 75 72 73 6f 72 | 49 6e 66 6f 0c 4b 45 52 |leCursor|Info.KER|
|00004770| 4e 45 4c 33 32 2e 64 6c | 6c 9d 00 63 88 2a 00 00 |NEL32.dl|l..c.*..|
|00004780| a0 01 01 15 47 65 74 43 | 6f 6e 73 6f 6c 65 44 69 |....GetC|onsoleDi|
|00004790| 73 70 6c 61 79 4d 6f 64 | 65 0c 4b 45 52 4e 45 4c |splayMod|e.KERNEL|
|000047a0| 33 32 2e 64 6c 6c 9e 00 | 0f 88 27 00 00 a0 01 01 |32.dll..|..'.....|
|000047b0| 12 47 65 74 43 6f 6e 73 | 6f 6c 65 46 6f 6e 74 49 |.GetCons|oleFontI|
|000047c0| 6e 66 6f 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |nfo.KERN|EL32.dll|
|000047d0| 9f 00 4c 88 27 00 00 a0 | 01 01 12 47 65 74 43 6f |..L.'...|...GetCo|
|000047e0| 6e 73 6f 6c 65 46 6f 6e | 74 53 69 7a 65 0c 4b 45 |nsoleFon|tSize.KE|
|000047f0| 52 4e 45 4c 33 32 2e 64 | 6c 6c a0 00 3c 88 2c 00 |RNEL32.d|ll..<.,.|
|00004800| 00 a0 01 01 17 47 65 74 | 43 6f 6e 73 6f 6c 65 48 |.....Get|ConsoleH|
|00004810| 61 72 64 77 61 72 65 53 | 74 61 74 65 0c 4b 45 52 |ardwareS|tate.KER|
|00004820| 4e 45 4c 33 32 2e 64 6c | 6c a1 00 34 88 2e 00 00 |NEL32.dl|l..4....|
|00004830| a0 01 01 19 47 65 74 43 | 6f 6e 73 6f 6c 65 49 6e |....GetC|onsoleIn|
|00004840| 70 75 74 57 61 69 74 48 | 61 6e 64 6c 65 0c 4b 45 |putWaitH|andle.KE|
|00004850| 52 4e 45 4c 33 32 2e 64 | 6c 6c a2 00 6d 88 23 00 |RNEL32.d|ll..m.#.|
|00004860| 00 a0 01 01 0e 47 65 74 | 43 6f 6e 73 6f 6c 65 4d |.....Get|ConsoleM|
|00004870| 6f 64 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ode.KERN|EL32.dll|
|00004880| a3 00 ee 88 27 00 00 a0 | 01 01 12 47 65 74 43 6f |....'...|...GetCo|
|00004890| 6e 73 6f 6c 65 4f 75 74 | 70 75 74 43 50 0c 4b 45 |nsoleOut|putCP.KE|
|000048a0| 52 4e 45 4c 33 32 2e 64 | 6c 6c a4 00 46 88 2f 00 |RNEL32.d|ll..F./.|
|000048b0| 00 a0 01 01 1a 47 65 74 | 43 6f 6e 73 6f 6c 65 53 |.....Get|ConsoleS|
|000048c0| 63 72 65 65 6e 42 75 66 | 66 65 72 49 6e 66 6f 0c |creenBuf|ferInfo.|
|000048d0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c a5 00 13 88 |KERNEL32|.dll....|
|000048e0| 25 00 00 a0 01 01 10 47 | 65 74 43 6f 6e 73 6f 6c |%......G|etConsol|
|000048f0| 65 54 69 74 6c 65 41 0c | 4b 45 52 4e 45 4c 33 32 |eTitleA.|KERNEL32|
|00004900| 2e 64 6c 6c a6 00 29 88 | 25 00 00 a0 01 01 10 47 |.dll..).|%......G|
|00004910| 65 74 43 6f 6e 73 6f 6c | 65 54 69 74 6c 65 57 0c |etConsol|eTitleW.|
|00004920| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c a7 00 12 88 |KERNEL32|.dll....|
|00004930| 2a 00 00 a0 01 01 15 47 | 65 74 43 75 72 72 65 6e |*......G|etCurren|
|00004940| 74 43 6f 6e 73 6f 6c 65 | 46 6f 6e 74 0c 4b 45 52 |tConsole|Font.KER|
|00004950| 4e 45 4c 33 32 2e 64 6c | 6c a8 00 e6 88 29 00 00 |NEL32.dl|l....)..|
|00004960| a0 01 01 14 47 65 74 43 | 75 72 72 65 6e 74 44 69 |....GetC|urrentDi|
|00004970| 72 65 63 74 6f 72 79 41 | 0c 4b 45 52 4e 45 4c 33 |rectoryA|.KERNEL3|
|00004980| 32 2e 64 6c 6c a9 00 5b | 88 29 00 00 a0 01 01 14 |2.dll..[|.)......|
|00004990| 47 65 74 43 75 72 72 65 | 6e 74 44 69 72 65 63 74 |GetCurre|ntDirect|
|000049a0| 6f 72 79 57 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |oryW.KER|NEL32.dl|
|000049b0| 6c aa 00 44 88 26 00 00 | a0 01 01 11 47 65 74 43 |l..D.&..|....GetC|
|000049c0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 0c 4b 45 |urrentPr|ocess.KE|
|000049d0| 52 4e 45 4c 33 32 2e 64 | 6c 6c ab 00 76 88 28 00 |RNEL32.d|ll..v.(.|
|000049e0| 00 a0 01 01 13 47 65 74 | 43 75 72 72 65 6e 74 50 |.....Get|CurrentP|
|000049f0| 72 6f 63 65 73 73 49 64 | 0c 4b 45 52 4e 45 4c 33 |rocessId|.KERNEL3|
|00004a00| 32 2e 64 6c 6c ac 00 c4 | 88 25 00 00 a0 01 01 10 |2.dll...|.%......|
|00004a10| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00004a20| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c ad 00 fd |.KERNEL3|2.dll...|
|00004a30| 88 27 00 00 a0 01 01 12 | 47 65 74 43 75 72 72 65 |.'......|GetCurre|
|00004a40| 6e 74 54 68 72 65 61 64 | 49 64 0c 4b 45 52 4e 45 |ntThread|Id.KERNE|
|00004a50| 4c 33 32 2e 64 6c 6c ae | 00 4b 88 23 00 00 a0 01 |L32.dll.|.K.#....|
|00004a60| 01 0e 47 65 74 44 61 74 | 65 46 6f 72 6d 61 74 57 |..GetDat|eFormatW|
|00004a70| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c af 00 fc |.KERNEL3|2.dll...|
|00004a80| 88 26 00 00 a0 01 01 11 | 47 65 74 44 69 73 6b 46 |.&......|GetDiskF|
|00004a90| 72 65 65 53 70 61 63 65 | 41 0c 4b 45 52 4e 45 4c |reeSpace|A.KERNEL|
|00004aa0| 33 32 2e 64 6c 6c b0 00 | f9 88 26 00 00 a0 01 01 |32.dll..|..&.....|
|00004ab0| 11 47 65 74 44 69 73 6b | 46 72 65 65 53 70 61 63 |.GetDisk|FreeSpac|
|00004ac0| 65 57 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c b1 |eW.KERNE|L32.dll.|
|00004ad0| 00 e2 88 22 00 00 a0 01 | 01 0d 47 65 74 44 72 69 |..."....|..GetDri|
|00004ae0| 76 65 54 79 70 65 41 0c | 4b 45 52 4e 45 4c 33 32 |veTypeA.|KERNEL32|
|00004af0| 2e 64 6c 6c b2 00 5c 88 | 22 00 00 a0 01 01 0d 47 |.dll..\.|"......G|
|00004b00| 65 74 44 72 69 76 65 54 | 79 70 65 57 0c 4b 45 52 |etDriveT|ypeW.KER|
|00004b10| 4e 45 4c 33 32 2e 64 6c | 6c b3 00 45 88 2a 00 00 |NEL32.dl|l..E.*..|
|00004b20| a0 01 01 15 47 65 74 45 | 6e 76 69 72 6f 6e 6d 65 |....GetE|nvironme|
|00004b30| 6e 74 53 74 72 69 6e 67 | 73 0c 4b 45 52 4e 45 4c |ntString|s.KERNEL|
|00004b40| 33 32 2e 64 6c 6c b4 00 | a8 88 2c 00 00 a0 01 01 |32.dll..|..,.....|
|00004b50| 17 47 65 74 45 6e 76 69 | 72 6f 6e 6d 65 6e 74 56 |.GetEnvi|ronmentV|
|00004b60| 61 72 69 61 62 6c 65 41 | 0c 4b 45 52 4e 45 4c 33 |ariableA|.KERNEL3|
|00004b70| 32 2e 64 6c 6c b5 00 26 | 88 2c 00 00 a0 01 01 17 |2.dll..&|.,......|
|00004b80| 47 65 74 45 6e 76 69 72 | 6f 6e 6d 65 6e 74 56 61 |GetEnvir|onmentVa|
|00004b90| 72 69 61 62 6c 65 57 0c | 4b 45 52 4e 45 4c 33 32 |riableW.|KERNEL32|
|00004ba0| 2e 64 6c 6c b6 00 0f 88 | 27 00 00 a0 01 01 12 47 |.dll....|'......G|
|00004bb0| 65 74 45 78 69 74 43 6f | 64 65 50 72 6f 63 65 73 |etExitCo|deProces|
|00004bc0| 73 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c b7 00 |s.KERNEL|32.dll..|
|00004bd0| 36 88 26 00 00 a0 01 01 | 11 47 65 74 45 78 69 74 |6.&.....|.GetExit|
|00004be0| 43 6f 64 65 54 68 72 65 | 61 64 0c 4b 45 52 4e 45 |CodeThre|ad.KERNE|
|00004bf0| 4c 33 32 2e 64 6c 6c b8 | 00 be 88 27 00 00 a0 01 |L32.dll.|...'....|
|00004c00| 01 12 47 65 74 46 69 6c | 65 41 74 74 72 69 62 75 |..GetFil|eAttribu|
|00004c10| 74 65 73 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |tesA.KER|NEL32.dl|
|00004c20| 6c b9 00 40 88 27 00 00 | a0 01 01 12 47 65 74 46 |l..@.'..|....GetF|
|00004c30| 69 6c 65 41 74 74 72 69 | 62 75 74 65 73 57 0c 4b |ileAttri|butesW.K|
|00004c40| 45 52 4e 45 4c 33 32 2e | 64 6c 6c ba 00 29 88 2f |ERNEL32.|dll..)./|
|00004c50| 00 00 a0 01 01 1a 47 65 | 74 46 69 6c 65 49 6e 66 |......Ge|tFileInf|
|00004c60| 6f 72 6d 61 74 69 6f 6e | 42 79 48 61 6e 64 6c 65 |ormation|ByHandle|
|00004c70| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c bb 00 09 |.KERNEL3|2.dll...|
|00004c80| 88 20 00 00 a0 01 01 0b | 47 65 74 46 69 6c 65 53 |. ......|GetFileS|
|00004c90| 69 7a 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ize.KERN|EL32.dll|
|00004ca0| bc 00 18 88 20 00 00 a0 | 01 01 0b 47 65 74 46 69 |.... ...|...GetFi|
|00004cb0| 6c 65 54 69 6d 65 0c 4b | 45 52 4e 45 4c 33 32 2e |leTime.K|ERNEL32.|
|00004cc0| 64 6c 6c bd 00 23 88 20 | 00 00 a0 01 01 0b 47 65 |dll..#. |......Ge|
|00004cd0| 74 46 69 6c 65 54 79 70 | 65 0c 4b 45 52 4e 45 4c |tFileTyp|e.KERNEL|
|00004ce0| 33 32 2e 64 6c 6c be 00 | 0f 88 25 00 00 a0 01 01 |32.dll..|..%.....|
|00004cf0| 10 47 65 74 46 75 6c 6c | 50 61 74 68 4e 61 6d 65 |.GetFull|PathName|
|00004d00| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c bf 00 |A.KERNEL|32.dll..|
|00004d10| 44 88 25 00 00 a0 01 01 | 10 47 65 74 46 75 6c 6c |D.%.....|.GetFull|
|00004d20| 50 61 74 68 4e 61 6d 65 | 57 0c 4b 45 52 4e 45 4c |PathName|W.KERNEL|
|00004d30| 33 32 2e 64 6c 6c c0 00 | 2d 88 30 00 00 a0 01 01 |32.dll..|-.0.....|
|00004d40| 1b 47 65 74 4c 61 72 67 | 65 73 74 43 6f 6e 73 6f |.GetLarg|estConso|
|00004d50| 6c 65 57 69 6e 64 6f 77 | 53 69 7a 65 0c 4b 45 52 |leWindow|Size.KER|
|00004d60| 4e 45 4c 33 32 2e 64 6c | 6c c1 00 56 88 21 00 00 |NEL32.dl|l..V.!..|
|00004d70| a0 01 01 0c 47 65 74 4c | 61 73 74 45 72 72 6f 72 |....GetL|astError|
|00004d80| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c c2 00 8d |.KERNEL3|2.dll...|
|00004d90| 88 21 00 00 a0 01 01 0c | 47 65 74 4c 6f 63 61 6c |.!......|GetLocal|
|00004da0| 54 69 6d 65 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Time.KER|NEL32.dl|
|00004db0| 6c c3 00 b0 88 23 00 00 | a0 01 01 0e 47 65 74 4c |l....#..|....GetL|
|00004dc0| 6f 63 61 6c 65 49 6e 66 | 6f 57 0c 4b 45 52 4e 45 |ocaleInf|oW.KERNE|
|00004dd0| 4c 33 32 2e 64 6c 6c c4 | 00 f2 88 2c 00 00 a0 01 |L32.dll.|...,....|
|00004de0| 01 17 47 65 74 4c 6f 67 | 69 63 61 6c 44 72 69 76 |..GetLog|icalDriv|
|00004df0| 65 53 74 72 69 6e 67 73 | 41 0c 4b 45 52 4e 45 4c |eStrings|A.KERNEL|
|00004e00| 33 32 2e 64 6c 6c c5 00 | 32 88 2c 00 00 a0 01 01 |32.dll..|2.,.....|
|00004e10| 17 47 65 74 4c 6f 67 69 | 63 61 6c 44 72 69 76 65 |.GetLogi|calDrive|
|00004e20| 53 74 72 69 6e 67 73 57 | 0c 4b 45 52 4e 45 4c 33 |StringsW|.KERNEL3|
|00004e30| 32 2e 64 6c 6c c6 00 1b | 88 25 00 00 a0 01 01 10 |2.dll...|.%......|
|00004e40| 47 65 74 4c 6f 67 69 63 | 61 6c 44 72 69 76 65 73 |GetLogic|alDrives|
|00004e50| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c c7 00 f6 |.KERNEL3|2.dll...|
|00004e60| 88 24 00 00 a0 01 01 0f | 47 65 74 4d 61 69 6c 73 |.$......|GetMails|
|00004e70| 6c 6f 74 49 6e 66 6f 0c | 4b 45 52 4e 45 4c 33 32 |lotInfo.|KERNEL32|
|00004e80| 2e 64 6c 6c c8 00 4e 88 | 27 00 00 a0 01 01 12 47 |.dll..N.|'......G|
|00004e90| 65 74 4d 6f 64 75 6c 65 | 46 69 6c 65 4e 61 6d 65 |etModule|FileName|
|00004ea0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c c9 00 |A.KERNEL|32.dll..|
|00004eb0| 70 88 27 00 00 a0 01 01 | 12 47 65 74 4d 6f 64 75 |p.'.....|.GetModu|
|00004ec0| 6c 65 46 69 6c 65 4e 61 | 6d 65 57 0c 4b 45 52 4e |leFileNa|meW.KERN|
|00004ed0| 45 4c 33 32 2e 64 6c 6c | ca 00 59 88 25 00 00 a0 |EL32.dll|..Y.%...|
|00004ee0| 01 01 10 47 65 74 4d 6f | 64 75 6c 65 48 61 6e 64 |...GetMo|duleHand|
|00004ef0| 6c 65 41 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |leA.KERN|EL32.dll|
|00004f00| cb 00 27 88 25 00 00 a0 | 01 01 10 47 65 74 4d 6f |..'.%...|...GetMo|
|00004f10| 64 75 6c 65 48 61 6e 64 | 6c 65 57 0c 4b 45 52 4e |duleHand|leW.KERN|
|00004f20| 45 4c 33 32 2e 64 6c 6c | cc 00 10 88 2d 00 00 a0 |EL32.dll|....-...|
|00004f30| 01 01 18 47 65 74 4e 61 | 6d 65 64 50 69 70 65 48 |...GetNa|medPipeH|
|00004f40| 61 6e 64 6c 65 53 74 61 | 74 65 41 0c 4b 45 52 4e |andleSta|teA.KERN|
|00004f50| 45 4c 33 32 2e 64 6c 6c | cd 00 07 88 2d 00 00 a0 |EL32.dll|....-...|
|00004f60| 01 01 18 47 65 74 4e 61 | 6d 65 64 50 69 70 65 48 |...GetNa|medPipeH|
|00004f70| 61 6e 64 6c 65 53 74 61 | 74 65 57 0c 4b 45 52 4e |andleSta|teW.KERN|
|00004f80| 45 4c 33 32 2e 64 6c 6c | ce 00 f0 88 25 00 00 a0 |EL32.dll|....%...|
|00004f90| 01 01 10 47 65 74 4e 61 | 6d 65 64 50 69 70 65 49 |...GetNa|medPipeI|
|00004fa0| 6e 66 6f 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |nfo.KERN|EL32.dll|
|00004fb0| cf 00 17 88 26 00 00 a0 | 01 01 11 47 65 74 4e 65 |....&...|...GetNe|
|00004fc0| 78 74 56 44 4d 43 6f 6d | 6d 61 6e 64 0c 4b 45 52 |xtVDMCom|mand.KER|
|00004fd0| 4e 45 4c 33 32 2e 64 6c | 6c d0 00 ce 88 2c 00 00 |NEL32.dl|l....,..|
|00004fe0| a0 01 01 17 47 65 74 4e | 75 6d 62 65 72 4f 66 43 |....GetN|umberOfC|
|00004ff0| 6f 6e 73 6f 6c 65 46 6f | 6e 74 73 0c 4b 45 52 4e |onsoleFo|nts.KERN|
|00005000| 45 4c 33 32 2e 64 6c 6c | d1 00 0b 88 32 00 00 a0 |EL32.dll|....2...|
|00005010| 01 01 1d 47 65 74 4e 75 | 6d 62 65 72 4f 66 43 6f |...GetNu|mberOfCo|
|00005020| 6e 73 6f 6c 65 49 6e 70 | 75 74 45 76 65 6e 74 73 |nsoleInp|utEvents|
|00005030| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c d2 00 83 |.KERNEL3|2.dll...|
|00005040| 88 33 00 00 a0 01 01 1e | 47 65 74 4e 75 6d 62 65 |.3......|GetNumbe|
|00005050| 72 4f 66 43 6f 6e 73 6f | 6c 65 4d 6f 75 73 65 42 |rOfConso|leMouseB|
|00005060| 75 74 74 6f 6e 73 0c 4b | 45 52 4e 45 4c 33 32 2e |uttons.K|ERNEL32.|
|00005070| 64 6c 6c d3 00 0d 88 1d | 00 00 a0 01 01 08 47 65 |dll.....|......Ge|
|00005080| 74 4f 45 4d 43 50 0c 4b | 45 52 4e 45 4c 33 32 2e |tOEMCP.K|ERNEL32.|
|00005090| 64 6c 6c d4 00 ad 88 28 | 00 00 a0 01 01 13 47 65 |dll....(|......Ge|
|000050a0| 74 4f 76 65 72 6c 61 70 | 70 65 64 52 65 73 75 6c |tOverlap|pedResul|
|000050b0| 74 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c d5 00 |t.KERNEL|32.dll..|
|000050c0| 79 88 25 00 00 a0 01 01 | 10 47 65 74 50 72 69 6f |y.%.....|.GetPrio|
|000050d0| 72 69 74 79 43 6c 61 73 | 73 0c 4b 45 52 4e 45 4c |rityClas|s.KERNEL|
|000050e0| 33 32 2e 64 6c 6c d6 00 | b7 88 2a 00 00 a0 01 01 |32.dll..|..*.....|
|000050f0| 15 47 65 74 50 72 69 76 | 61 74 65 50 72 6f 66 69 |.GetPriv|ateProfi|
|00005100| 6c 65 49 6e 74 41 0c 4b | 45 52 4e 45 4c 33 32 2e |leIntA.K|ERNEL32.|
|00005110| 64 6c 6c d7 00 ec 88 2a | 00 00 a0 01 01 15 47 65 |dll....*|......Ge|
|00005120| 74 50 72 69 76 61 74 65 | 50 72 6f 66 69 6c 65 49 |tPrivate|ProfileI|
|00005130| 6e 74 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ntW.KERN|EL32.dll|
|00005140| d8 00 d5 88 2e 00 00 a0 | 01 01 19 47 65 74 50 72 |........|...GetPr|
|00005150| 69 76 61 74 65 50 72 6f | 66 69 6c 65 53 65 63 74 |ivatePro|fileSect|
|00005160| 69 6f 6e 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |ionA.KER|NEL32.dl|
|00005170| 6c d9 00 38 88 2e 00 00 | a0 01 01 19 47 65 74 50 |l..8....|....GetP|
|00005180| 72 69 76 61 74 65 50 72 | 6f 66 69 6c 65 53 65 63 |rivatePr|ofileSec|
|00005190| 74 69 6f 6e 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |tionW.KE|RNEL32.d|
|000051a0| 6c 6c da 00 21 88 2d 00 | 00 a0 01 01 18 47 65 74 |ll..!.-.|.....Get|
|000051b0| 50 72 69 76 61 74 65 50 | 72 6f 66 69 6c 65 53 74 |PrivateP|rofileSt|
|000051c0| 72 69 6e 67 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ringA.KE|RNEL32.d|
|000051d0| 6c 6c db 00 96 88 2d 00 | 00 a0 01 01 18 47 65 74 |ll....-.|.....Get|
|000051e0| 50 72 69 76 61 74 65 50 | 72 6f 66 69 6c 65 53 74 |PrivateP|rofileSt|
|000051f0| 72 69 6e 67 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ringW.KE|RNEL32.d|
|00005200| 6c 6c dc 00 7f 88 23 00 | 00 a0 01 01 0e 47 65 74 |ll....#.|.....Get|
|00005210| 50 72 6f 63 41 64 64 72 | 65 73 73 0c 4b 45 52 4e |ProcAddr|ess.KERN|
|00005220| 45 4c 33 32 2e 64 6c 6c | dd 00 b2 88 23 00 00 a0 |EL32.dll|....#...|
|00005230| 01 01 0e 47 65 74 50 72 | 6f 63 65 73 73 48 65 61 |...GetPr|ocessHea|
|00005240| 70 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c de 00 |p.KERNEL|32.dll..|
|00005250| ae 88 31 00 00 a0 01 01 | 1c 47 65 74 50 72 6f 63 |..1.....|.GetProc|
|00005260| 65 73 73 53 68 75 74 64 | 6f 77 6e 50 61 72 61 6d |essShutd|ownParam|
|00005270| 65 74 65 72 73 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |eters.KE|RNEL32.d|
|00005280| 6c 6c df 00 9f 88 24 00 | 00 a0 01 01 0f 47 65 74 |ll....$.|.....Get|
|00005290| 50 72 6f 63 65 73 73 54 | 69 6d 65 73 0c 4b 45 52 |ProcessT|imes.KER|
|000052a0| 4e 45 4c 33 32 2e 64 6c | 6c e0 00 26 88 23 00 00 |NEL32.dl|l..&.#..|
|000052b0| a0 01 01 0e 47 65 74 50 | 72 6f 66 69 6c 65 49 6e |....GetP|rofileIn|
|000052c0| 74 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c e1 |tA.KERNE|L32.dll.|
|000052d0| 00 cb 88 23 00 00 a0 01 | 01 0e 47 65 74 50 72 6f |...#....|..GetPro|
|000052e0| 66 69 6c 65 49 6e 74 57 | 0c 4b 45 52 4e 45 4c 33 |fileIntW|.KERNEL3|
|000052f0| 32 2e 64 6c 6c e2 00 b4 | 88 27 00 00 a0 01 01 12 |2.dll...|.'......|
|00005300| 47 65 74 50 72 6f 66 69 | 6c 65 53 65 63 74 69 6f |GetProfi|leSectio|
|00005310| 6e 41 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c e3 |nA.KERNE|L32.dll.|
|00005320| 00 17 88 27 00 00 a0 01 | 01 12 47 65 74 50 72 6f |...'....|..GetPro|
|00005330| 66 69 6c 65 53 65 63 74 | 69 6f 6e 57 0c 4b 45 52 |fileSect|ionW.KER|
|00005340| 4e 45 4c 33 32 2e 64 6c | 6c e4 00 00 88 26 00 00 |NEL32.dl|l....&..|
|00005350| a0 01 01 11 47 65 74 50 | 72 6f 66 69 6c 65 53 74 |....GetP|rofileSt|
|00005360| 72 69 6e 67 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ringA.KE|RNEL32.d|
|00005370| 6c 6c e5 00 75 88 26 00 | 00 a0 01 01 11 47 65 74 |ll..u.&.|.....Get|
|00005380| 50 72 6f 66 69 6c 65 53 | 74 72 69 6e 67 57 0c 4b |ProfileS|tringW.K|
|00005390| 45 52 4e 45 4c 33 32 2e | 64 6c 6c e6 00 5e 88 24 |ERNEL32.|dll..^.$|
|000053a0| 00 00 a0 01 01 0f 47 65 | 74 53 74 61 72 74 75 70 |......Ge|tStartup|
|000053b0| 49 6e 66 6f 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |InfoA.KE|RNEL32.d|
|000053c0| 6c 6c e7 00 40 88 24 00 | 00 a0 01 01 0f 47 65 74 |ll..@.$.|.....Get|
|000053d0| 53 74 61 72 74 75 70 49 | 6e 66 6f 57 0c 4b 45 52 |StartupI|nfoW.KER|
|000053e0| 4e 45 4c 33 32 2e 64 6c | 6c e8 00 29 88 21 00 00 |NEL32.dl|l..).!..|
|000053f0| a0 01 01 0c 47 65 74 53 | 74 64 48 61 6e 64 6c 65 |....GetS|tdHandle|
|00005400| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c e9 00 8d |.KERNEL3|2.dll...|
|00005410| 88 23 00 00 a0 01 01 0e | 47 65 74 53 74 72 69 6e |.#......|GetStrin|
|00005420| 67 54 79 70 65 57 0c 4b | 45 52 4e 45 4c 33 32 2e |gTypeW.K|ERNEL32.|
|00005430| 64 6c 6c ea 00 8f 88 29 | 00 00 a0 01 01 14 47 65 |dll....)|......Ge|
|00005440| 74 53 79 73 74 65 6d 44 | 65 66 61 75 6c 74 4c 43 |tSystemD|efaultLC|
|00005450| 49 44 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c eb |ID.KERNE|L32.dll.|
|00005460| 00 8c 88 2b 00 00 a0 01 | 01 16 47 65 74 53 79 73 |...+....|..GetSys|
|00005470| 74 65 6d 44 65 66 61 75 | 6c 74 4c 61 6e 67 49 44 |temDefau|ltLangID|
|00005480| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c ec 00 94 |.KERNEL3|2.dll...|
|00005490| 88 28 00 00 a0 01 01 13 | 47 65 74 53 79 73 74 65 |.(......|GetSyste|
|000054a0| 6d 44 69 72 65 63 74 6f | 72 79 41 0c 4b 45 52 4e |mDirecto|ryA.KERN|
|000054b0| 45 4c 33 32 2e 64 6c 6c | ed 00 77 88 28 00 00 a0 |EL32.dll|..w.(...|
|000054c0| 01 01 13 47 65 74 53 79 | 73 74 65 6d 44 69 72 65 |...GetSy|stemDire|
|000054d0| 63 74 6f 72 79 57 0c 4b | 45 52 4e 45 4c 33 32 2e |ctoryW.K|ERNEL32.|
|000054e0| 64 6c 6c ee 00 60 88 22 | 00 00 a0 01 01 0d 47 65 |dll..`."|......Ge|
|000054f0| 74 53 79 73 74 65 6d 49 | 6e 66 6f 0c 4b 45 52 4e |tSystemI|nfo.KERN|
|00005500| 45 4c 33 32 2e 64 6c 6c | ef 00 eb 88 22 00 00 a0 |EL32.dll|...."...|
|00005510| 01 01 0d 47 65 74 53 79 | 73 74 65 6d 54 69 6d 65 |...GetSy|stemTime|
|00005520| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c f0 00 e7 |.KERNEL3|2.dll...|
|00005530| 88 26 00 00 a0 01 01 11 | 47 65 74 54 61 70 65 50 |.&......|GetTapeP|
|00005540| 61 72 61 6d 65 74 65 72 | 73 0c 4b 45 52 4e 45 4c |arameter|s.KERNEL|
|00005550| 33 32 2e 64 6c 6c f1 00 | 54 88 24 00 00 a0 01 01 |32.dll..|T.$.....|
|00005560| 0f 47 65 74 54 61 70 65 | 50 6f 73 69 74 69 6f 6e |.GetTape|Position|
|00005570| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c f2 00 16 |.KERNEL3|2.dll...|
|00005580| 88 22 00 00 a0 01 01 0d | 47 65 74 54 61 70 65 53 |."......|GetTapeS|
|00005590| 74 61 74 75 73 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |tatus.KE|RNEL32.d|
|000055a0| 6c 6c f3 00 ea 88 25 00 | 00 a0 01 01 10 47 65 74 |ll....%.|.....Get|
|000055b0| 54 65 6d 70 46 69 6c 65 | 4e 61 6d 65 41 0c 4b 45 |TempFile|NameA.KE|
|000055c0| 52 4e 45 4c 33 32 2e 64 | 6c 6c f4 00 19 88 25 00 |RNEL32.d|ll....%.|
|000055d0| 00 a0 01 01 10 47 65 74 | 54 65 6d 70 46 69 6c 65 |.....Get|TempFile|
|000055e0| 4e 61 6d 65 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |NameW.KE|RNEL32.d|
|000055f0| 6c 6c f5 00 02 88 21 00 | 00 a0 01 01 0c 47 65 74 |ll....!.|.....Get|
|00005600| 54 65 6d 70 50 61 74 68 | 41 0c 4b 45 52 4e 45 4c |TempPath|A.KERNEL|
|00005610| 33 32 2e 64 6c 6c f6 00 | 93 88 21 00 00 a0 01 01 |32.dll..|..!.....|
|00005620| 0c 47 65 74 54 65 6d 70 | 50 61 74 68 57 0c 4b 45 |.GetTemp|PathW.KE|
|00005630| 52 4e 45 4c 33 32 2e 64 | 6c 6c f7 00 7c 88 25 00 |RNEL32.d|ll..|.%.|
|00005640| 00 a0 01 01 10 47 65 74 | 54 68 72 65 61 64 43 6f |.....Get|ThreadCo|
|00005650| 6e 74 65 78 74 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ntext.KE|RNEL32.d|
|00005660| 6c 6c f8 00 b0 88 24 00 | 00 a0 01 01 0f 47 65 74 |ll....$.|.....Get|
|00005670| 54 68 72 65 61 64 4c 6f | 63 61 6c 65 0c 4b 45 52 |ThreadLo|cale.KER|
|00005680| 4e 45 4c 33 32 2e 64 6c | 6c f9 00 46 88 26 00 00 |NEL32.dl|l..F.&..|
|00005690| a0 01 01 11 47 65 74 54 | 68 72 65 61 64 50 72 69 |....GetT|hreadPri|
|000056a0| 6f 72 69 74 79 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ority.KE|RNEL32.d|
|000056b0| 6c 6c fa 00 2f 88 2b 00 | 00 a0 01 01 16 47 65 74 |ll../.+.|.....Get|
|000056c0| 54 68 72 65 61 64 53 65 | 6c 65 63 74 6f 72 45 6e |ThreadSe|lectorEn|
|000056d0| 74 72 79 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |try.KERN|EL32.dll|
|000056e0| fb 00 33 88 23 00 00 a0 | 01 01 0e 47 65 74 54 68 |..3.#...|...GetTh|
|000056f0| 72 65 61 64 54 69 6d 65 | 73 0c 4b 45 52 4e 45 4c |readTime|s.KERNEL|
|00005700| 33 32 2e 64 6c 6c fc 00 | 93 88 21 00 00 a0 01 01 |32.dll..|..!.....|
|00005710| 0c 47 65 74 54 69 63 6b | 43 6f 75 6e 74 0c 4b 45 |.GetTick|Count.KE|
|00005720| 52 4e 45 4c 33 32 2e 64 | 6c 6c fd 00 5c 88 23 00 |RNEL32.d|ll..\.#.|
|00005730| 00 a0 01 01 0e 47 65 74 | 54 69 6d 65 46 6f 72 6d |.....Get|TimeForm|
|00005740| 61 74 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |atW.KERN|EL32.dll|
|00005750| fe 00 9c 88 2b 00 00 a0 | 01 01 16 47 65 74 54 69 |....+...|...GetTi|
|00005760| 6d 65 5a 6f 6e 65 49 6e | 66 6f 72 6d 61 74 69 6f |meZoneIn|formatio|
|00005770| 6e 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c ff 00 |n.KERNEL|32.dll..|
|00005780| 29 88 27 00 00 a0 01 01 | 12 47 65 74 55 73 65 72 |).'.....|.GetUser|
|00005790| 44 65 66 61 75 6c 74 4c | 43 49 44 0c 4b 45 52 4e |DefaultL|CID.KERN|
|000057a0| 45 4c 33 32 2e 64 6c 6c | 00 01 60 88 29 00 00 a0 |EL32.dll|..`.)...|
|000057b0| 01 01 14 47 65 74 55 73 | 65 72 44 65 66 61 75 6c |...GetUs|erDefaul|
|000057c0| 74 4c 61 6e 67 49 44 0c | 4b 45 52 4e 45 4c 33 32 |tLangID.|KERNEL32|
|000057d0| 2e 64 6c 6c 01 01 68 88 | 2d 00 00 a0 01 01 18 47 |.dll..h.|-......G|
|000057e0| 65 74 56 44 4d 43 75 72 | 72 65 6e 74 44 69 72 65 |etVDMCur|rentDire|
|000057f0| 63 74 6f 72 69 65 73 0c | 4b 45 52 4e 45 4c 33 32 |ctories.|KERNEL32|
|00005800| 2e 64 6c 6c 02 01 8b 88 | 1f 00 00 a0 01 01 0a 47 |.dll....|.......G|
|00005810| 65 74 56 65 72 73 69 6f | 6e 0c 4b 45 52 4e 45 4c |etVersio|n.KERNEL|
|00005820| 33 32 2e 64 6c 6c 03 01 | 07 88 2a 00 00 a0 01 01 |32.dll..|..*.....|
|00005830| 15 47 65 74 56 6f 6c 75 | 6d 65 49 6e 66 6f 72 6d |.GetVolu|meInform|
|00005840| 61 74 69 6f 6e 41 0c 4b | 45 52 4e 45 4c 33 32 2e |ationA.K|ERNEL32.|
|00005850| 64 6c 6c 04 01 97 88 2a | 00 00 a0 01 01 15 47 65 |dll....*|......Ge|
|00005860| 74 56 6f 6c 75 6d 65 49 | 6e 66 6f 72 6d 61 74 69 |tVolumeI|nformati|
|00005870| 6f 6e 57 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |onW.KERN|EL32.dll|
|00005880| 05 01 80 88 29 00 00 a0 | 01 01 14 47 65 74 57 69 |....)...|...GetWi|
|00005890| 6e 64 6f 77 73 44 69 72 | 65 63 74 6f 72 79 41 0c |ndowsDir|ectoryA.|
|000058a0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 06 01 f5 88 |KERNEL32|.dll....|
|000058b0| 29 00 00 a0 01 01 14 47 | 65 74 57 69 6e 64 6f 77 |)......G|etWindow|
|000058c0| 73 44 69 72 65 63 74 6f | 72 79 57 0c 4b 45 52 4e |sDirecto|ryW.KERN|
|000058d0| 45 4c 33 32 2e 64 6c 6c | 07 01 de 88 23 00 00 a0 |EL32.dll|....#...|
|000058e0| 01 01 0e 47 6c 6f 62 61 | 6c 41 64 64 41 74 6f 6d |...Globa|lAddAtom|
|000058f0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 08 01 |A.KERNEL|32.dll..|
|00005900| d4 88 23 00 00 a0 01 01 | 0e 47 6c 6f 62 61 6c 41 |..#.....|.GlobalA|
|00005910| 64 64 41 74 6f 6d 57 0c | 4b 45 52 4e 45 4c 33 32 |ddAtomW.|KERNEL32|
|00005920| 2e 64 6c 6c 09 01 bd 88 | 20 00 00 a0 01 01 0b 47 |.dll....| ......G|
|00005930| 6c 6f 62 61 6c 41 6c 6c | 6f 63 0c 4b 45 52 4e 45 |lobalAll|oc.KERNE|
|00005940| 4c 33 32 2e 64 6c 6c 0a | 01 c8 88 22 00 00 a0 01 |L32.dll.|..."....|
|00005950| 01 0d 47 6c 6f 62 61 6c | 43 6f 6d 70 61 63 74 0c |..Global|Compact.|
|00005960| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 0b 01 e7 88 |KERNEL32|.dll....|
|00005970| 25 00 00 a0 01 01 10 47 | 6c 6f 62 61 6c 44 65 6c |%......G|lobalDel|
|00005980| 65 74 65 41 74 6f 6d 0c | 4b 45 52 4e 45 4c 33 32 |eteAtom.|KERNEL32|
|00005990| 2e 64 6c 6c 0c 01 c3 88 | 24 00 00 a0 01 01 0f 47 |.dll....|$......G|
|000059a0| 6c 6f 62 61 6c 46 69 6e | 64 41 74 6f 6d 41 0c 4b |lobalFin|dAtomA.K|
|000059b0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 0d 01 55 88 24 |ERNEL32.|dll..U.$|
|000059c0| 00 00 a0 01 01 0f 47 6c | 6f 62 61 6c 46 69 6e 64 |......Gl|obalFind|
|000059d0| 41 74 6f 6d 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |AtomW.KE|RNEL32.d|
|000059e0| 6c 6c 0e 01 3e 88 1e 00 | 00 a0 01 01 09 47 6c 6f |ll..>...|.....Glo|
|000059f0| 62 61 6c 46 69 78 0c 4b | 45 52 4e 45 4c 33 32 2e |balFix.K|ERNEL32.|
|00005a00| 64 6c 6c 0f 01 8b 88 20 | 00 00 a0 01 01 0b 47 6c |dll.... |......Gl|
|00005a10| 6f 62 61 6c 46 6c 61 67 | 73 0c 4b 45 52 4e 45 4c |obalFlag|s.KERNEL|
|00005a20| 33 32 2e 64 6c 6c 10 01 | c0 88 1f 00 00 a0 01 01 |32.dll..|........|
|00005a30| 0a 47 6c 6f 62 61 6c 46 | 72 65 65 0c 4b 45 52 4e |.GlobalF|ree.KERN|
|00005a40| 45 4c 33 32 2e 64 6c 6c | 11 01 2c 88 27 00 00 a0 |EL32.dll|..,.'...|
|00005a50| 01 01 12 47 6c 6f 62 61 | 6c 47 65 74 41 74 6f 6d |...Globa|lGetAtom|
|00005a60| 4e 61 6d 65 41 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |NameA.KE|RNEL32.d|
|00005a70| 6c 6c 12 01 2a 88 27 00 | 00 a0 01 01 12 47 6c 6f |ll..*.'.|.....Glo|
|00005a80| 62 61 6c 47 65 74 41 74 | 6f 6d 4e 61 6d 65 57 0c |balGetAt|omNameW.|
|00005a90| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 13 01 13 88 |KERNEL32|.dll....|
|00005aa0| 21 00 00 a0 01 01 0c 47 | 6c 6f 62 61 6c 48 61 6e |!......G|lobalHan|
|00005ab0| 64 6c 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |dle.KERN|EL32.dll|
|00005ac0| 14 01 5b 88 1f 00 00 a0 | 01 01 0a 47 6c 6f 62 61 |..[.....|...Globa|
|00005ad0| 6c 4c 6f 63 6b 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |lLock.KE|RNEL32.d|
|00005ae0| 6c 6c 15 01 21 88 27 00 | 00 a0 01 01 12 47 6c 6f |ll..!.'.|.....Glo|
|00005af0| 62 61 6c 4d 65 6d 6f 72 | 79 53 74 61 74 75 73 0c |balMemor|yStatus.|
|00005b00| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 16 01 9c 88 |KERNEL32|.dll....|
|00005b10| 22 00 00 a0 01 01 0d 47 | 6c 6f 62 61 6c 52 65 41 |"......G|lobalReA|
|00005b20| 6c 6c 6f 63 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |lloc.KER|NEL32.dl|
|00005b30| 6c 17 01 00 88 1f 00 00 | a0 01 01 0a 47 6c 6f 62 |l.......|....Glob|
|00005b40| 61 6c 53 69 7a 65 0c 4b | 45 52 4e 45 4c 33 32 2e |alSize.K|ERNEL32.|
|00005b50| 64 6c 6c 18 01 0c 88 21 | 00 00 a0 01 01 0c 47 6c |dll....!|......Gl|
|00005b60| 6f 62 61 6c 55 6e 57 69 | 72 65 0c 4b 45 52 4e 45 |obalUnWi|re.KERNE|
|00005b70| 4c 33 32 2e 64 6c 6c 19 | 01 48 88 20 00 00 a0 01 |L32.dll.|.H. ....|
|00005b80| 01 0b 47 6c 6f 62 61 6c | 55 6e 66 69 78 0c 4b 45 |..Global|Unfix.KE|
|00005b90| 52 4e 45 4c 33 32 2e 64 | 6c 6c 1a 01 99 88 21 00 |RNEL32.d|ll....!.|
|00005ba0| 00 a0 01 01 0c 47 6c 6f | 62 61 6c 55 6e 6c 6f 63 |.....Glo|balUnloc|
|00005bb0| 6b 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 1b 01 |k.KERNEL|32.dll..|
|00005bc0| 34 88 1f 00 00 a0 01 01 | 0a 47 6c 6f 62 61 6c 57 |4.......|.GlobalW|
|00005bd0| 69 72 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ire.KERN|EL32.dll|
|00005be0| 1c 01 0c 88 1e 00 00 a0 | 01 01 09 48 65 61 70 41 |........|...HeapA|
|00005bf0| 6c 6c 6f 63 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |lloc.KER|NEL32.dl|
|00005c00| 6c 1d 01 8c 88 1f 00 00 | a0 01 01 0a 48 65 61 70 |l.......|....Heap|
|00005c10| 43 72 65 61 74 65 0c 4b | 45 52 4e 45 4c 33 32 2e |Create.K|ERNEL32.|
|00005c20| 64 6c 6c 1e 01 20 88 20 | 00 00 a0 01 01 0b 48 65 |dll.. . |......He|
|00005c30| 61 70 44 65 73 74 72 6f | 79 0c 4b 45 52 4e 45 4c |apDestro|y.KERNEL|
|00005c40| 33 32 2e 64 6c 6c 1f 01 | 87 88 1d 00 00 a0 01 01 |32.dll..|........|
|00005c50| 08 48 65 61 70 46 72 65 | 65 0c 4b 45 52 4e 45 4c |.HeapFre|e.KERNEL|
|00005c60| 33 32 2e 64 6c 6c 20 01 | f4 88 20 00 00 a0 01 01 |32.dll .|.. .....|
|00005c70| 0b 48 65 61 70 52 65 41 | 6c 6c 6f 63 0c 4b 45 52 |.HeapReA|lloc.KER|
|00005c80| 4e 45 4c 33 32 2e 64 6c | 6c 21 01 cd 88 1d 00 00 |NEL32.dl|l!......|
|00005c90| a0 01 01 08 48 65 61 70 | 53 69 7a 65 0c 4b 45 52 |....Heap|Size.KER|
|00005ca0| 4e 45 4c 33 32 2e 64 6c | 6c 22 01 d9 88 22 00 00 |NEL32.dl|l"..."..|
|00005cb0| a0 01 01 0d 49 6e 69 74 | 41 74 6f 6d 54 61 62 6c |....Init|AtomTabl|
|00005cc0| 65 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 23 01 |e.KERNEL|32.dll#.|
|00005cd0| da 88 2e 00 00 a0 01 01 | 19 49 6e 69 74 69 61 6c |........|.Initial|
|00005ce0| 69 7a 65 43 72 69 74 69 | 63 61 6c 53 65 63 74 69 |izeCriti|calSecti|
|00005cf0| 6f 6e 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 24 |on.KERNE|L32.dll$|
|00005d00| 01 bc 88 29 00 00 a0 01 | 01 14 49 6e 74 65 72 6c |...)....|..Interl|
|00005d10| 6f 63 6b 65 64 44 65 63 | 72 65 6d 65 6e 74 0c 4b |ockedDec|rement.K|
|00005d20| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 25 01 cc 88 28 |ERNEL32.|dll%...(|
|00005d30| 00 00 a0 01 01 13 49 6e | 74 65 72 6c 6f 63 6b 65 |......In|terlocke|
|00005d40| 64 45 78 63 68 61 6e 67 | 65 0c 4b 45 52 4e 45 4c |dExchang|e.KERNEL|
|00005d50| 33 32 2e 64 6c 6c 26 01 | 41 88 29 00 00 a0 01 01 |32.dll&.|A.).....|
|00005d60| 14 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 63 72 |.Interlo|ckedIncr|
|00005d70| 65 6d 65 6e 74 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |ement.KE|RNEL32.d|
|00005d80| 6c 6c 27 01 bc 88 2c 00 | 00 a0 01 01 17 49 6e 76 |ll'...,.|.....Inv|
|00005d90| 61 6c 69 64 61 74 65 43 | 6f 6e 73 6f 6c 65 44 49 |alidateC|onsoleDI|
|00005da0| 42 69 74 73 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |Bits.KER|NEL32.dl|
|00005db0| 6c 28 01 db 88 21 00 00 | a0 01 01 0c 49 73 42 61 |l(...!..|....IsBa|
|00005dc0| 64 43 6f 64 65 50 74 72 | 0c 4b 45 52 4e 45 4c 33 |dCodePtr|.KERNEL3|
|00005dd0| 32 2e 64 6c 6c 29 01 6f | 88 25 00 00 a0 01 01 10 |2.dll).o|.%......|
|00005de0| 49 73 42 61 64 48 75 67 | 65 52 65 61 64 50 74 72 |IsBadHug|eReadPtr|
|00005df0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 2a 01 dc |.KERNEL3|2.dll*..|
|00005e00| 88 26 00 00 a0 01 01 11 | 49 73 42 61 64 48 75 67 |.&......|IsBadHug|
|00005e10| 65 57 72 69 74 65 50 74 | 72 0c 4b 45 52 4e 45 4c |eWritePt|r.KERNEL|
|00005e20| 33 32 2e 64 6c 6c 2b 01 | 4a 88 21 00 00 a0 01 01 |32.dll+.|J.!.....|
|00005e30| 0c 49 73 42 61 64 52 65 | 61 64 50 74 72 0c 4b 45 |.IsBadRe|adPtr.KE|
|00005e40| 52 4e 45 4c 33 32 2e 64 | 6c 6c 2c 01 6b 88 24 00 |RNEL32.d|ll,.k.$.|
|00005e50| 00 a0 01 01 0f 49 73 42 | 61 64 53 74 72 69 6e 67 |.....IsB|adString|
|00005e60| 50 74 72 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |PtrA.KER|NEL32.dl|
|00005e70| 6c 2d 01 28 88 24 00 00 | a0 01 01 0f 49 73 42 61 |l-.(.$..|....IsBa|
|00005e80| 64 53 74 72 69 6e 67 50 | 74 72 57 0c 4b 45 52 4e |dStringP|trW.KERN|
|00005e90| 45 4c 33 32 2e 64 6c 6c | 2e 01 11 88 22 00 00 a0 |EL32.dll|...."...|
|00005ea0| 01 01 0d 49 73 42 61 64 | 57 72 69 74 65 50 74 72 |...IsBad|WritePtr|
|00005eb0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 2f 01 d7 |.KERNEL3|2.dll/..|
|00005ec0| 88 23 00 00 a0 01 01 0e | 49 73 44 42 43 53 4c 65 |.#......|IsDBCSLe|
|00005ed0| 61 64 42 79 74 65 0c 4b | 45 52 4e 45 4c 33 32 2e |adByte.K|ERNEL32.|
|00005ee0| 64 6c 6c 30 01 f6 88 24 | 00 00 a0 01 01 0f 49 73 |dll0...$|......Is|
|00005ef0| 56 61 6c 69 64 43 6f 64 | 65 50 61 67 65 0c 4b 45 |ValidCod|ePage.KE|
|00005f00| 52 4e 45 4c 33 32 2e 64 | 6c 6c 31 01 31 88 21 00 |RNEL32.d|ll1.1.!.|
|00005f10| 00 a0 01 01 0c 4c 43 4d | 61 70 53 74 72 69 6e 67 |.....LCM|apString|
|00005f20| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 32 01 |W.KERNEL|32.dll2.|
|00005f30| 5f 88 29 00 00 a0 01 01 | 14 4c 65 61 76 65 43 72 |_.).....|.LeaveCr|
|00005f40| 69 74 69 63 61 6c 53 65 | 63 74 69 6f 6e 0c 4b 45 |iticalSe|ction.KE|
|00005f50| 52 4e 45 4c 33 32 2e 64 | 6c 6c 33 01 dc 88 21 00 |RNEL32.d|ll3...!.|
|00005f60| 00 a0 01 01 0c 4c 6f 61 | 64 4c 69 62 72 61 72 79 |.....Loa|dLibrary|
|00005f70| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 34 01 |A.KERNEL|32.dll4.|
|00005f80| 42 88 23 00 00 a0 01 01 | 0e 4c 6f 61 64 4c 69 62 |B.#.....|.LoadLib|
|00005f90| 72 61 72 79 45 78 41 0c | 4b 45 52 4e 45 4c 33 32 |raryExA.|KERNEL32|
|00005fa0| 2e 64 6c 6c 35 01 80 88 | 23 00 00 a0 01 01 0e 4c |.dll5...|#......L|
|00005fb0| 6f 61 64 4c 69 62 72 61 | 72 79 45 78 57 0c 4b 45 |oadLibra|ryExW.KE|
|00005fc0| 52 4e 45 4c 33 32 2e 64 | 6c 6c 36 01 69 88 21 00 |RNEL32.d|ll6.i.!.|
|00005fd0| 00 a0 01 01 0c 4c 6f 61 | 64 4c 69 62 72 61 72 79 |.....Loa|dLibrary|
|00005fe0| 57 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 37 01 |W.KERNEL|32.dll7.|
|00005ff0| 29 88 1f 00 00 a0 01 01 | 0a 4c 6f 61 64 4d 6f 64 |).......|.LoadMod|
|00006000| 75 6c 65 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ule.KERN|EL32.dll|
|00006010| 38 01 f2 88 21 00 00 a0 | 01 01 0c 4c 6f 61 64 52 |8...!...|...LoadR|
|00006020| 65 73 6f 75 72 63 65 0c | 4b 45 52 4e 45 4c 33 32 |esource.|KERNEL32|
|00006030| 2e 64 6c 6c 39 01 0b 88 | 1f 00 00 a0 01 01 0a 4c |.dll9...|.......L|
|00006040| 6f 63 61 6c 41 6c 6c 6f | 63 0c 4b 45 52 4e 45 4c |ocalAllo|c.KERNEL|
|00006050| 33 32 2e 64 6c 6c 3a 01 | 00 88 21 00 00 a0 01 01 |32.dll:.|..!.....|
|00006060| 0c 4c 6f 63 61 6c 43 6f | 6d 70 61 63 74 0c 4b 45 |.LocalCo|mpact.KE|
|00006070| 52 4e 45 4c 33 32 2e 64 | 6c 6c 3b 01 1f 88 2c 00 |RNEL32.d|ll;...,.|
|00006080| 00 a0 01 01 17 4c 6f 63 | 61 6c 46 69 6c 65 54 69 |.....Loc|alFileTi|
|00006090| 6d 65 54 6f 46 69 6c 65 | 54 69 6d 65 0c 4b 45 52 |meToFile|Time.KER|
|000060a0| 4e 45 4c 33 32 2e 64 6c | 6c 3c 01 ee 88 1f 00 00 |NEL32.dl|l<......|
|000060b0| a0 01 01 0a 4c 6f 63 61 | 6c 46 6c 61 67 73 0c 4b |....Loca|lFlags.K|
|000060c0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 3d 01 fb 88 1e |ERNEL32.|dll=....|
|000060d0| 00 00 a0 01 01 09 4c 6f | 63 61 6c 46 72 65 65 0c |......Lo|calFree.|
|000060e0| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 3e 01 67 88 |KERNEL32|.dll>.g.|
|000060f0| 20 00 00 a0 01 01 0b 4c | 6f 63 61 6c 48 61 6e 64 | ......L|ocalHand|
|00006100| 6c 65 0c 4b 45 52 4e 45 | 4c 33 32 2e 64 6c 6c 3f |le.KERNE|L32.dll?|
|00006110| 01 98 88 1e 00 00 a0 01 | 01 09 4c 6f 63 61 6c 4c |........|..LocalL|
|00006120| 6f 63 6b 0c 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |ock.KERN|EL32.dll|
|00006130| 40 01 5e 88 21 00 00 a0 | 01 01 0c 4c 6f 63 61 6c |@.^.!...|...Local|
|00006140| 52 65 41 6c 6c 6f 63 0c | 4b 45 52 4e 45 4c 33 32 |ReAlloc.|KERNEL32|
|00006150| 2e 64 6c 6c 41 01 3e 88 | 20 00 00 a0 01 01 0b 4c |.dllA.>.| ......L|
|00006160| 6f 63 61 6c 53 68 72 69 | 6e 6b 0c 4b 45 52 4e 45 |ocalShri|nk.KERNE|
|00006170| 4c 33 32 2e 64 6c 6c 42 | 01 72 88 1e 00 00 a0 01 |L32.dllB|.r......|
|00006180| 01 09 4c 6f 63 61 6c 53 | 69 7a 65 0c 4b 45 52 4e |..LocalS|ize.KERN|
|00006190| 45 4c 33 32 2e 64 6c 6c | 43 01 49 88 20 00 00 a0 |EL32.dll|C.I. ...|
|000061a0| 01 01 0b 4c 6f 63 61 6c | 55 6e 6c 6f 63 6b 0c 4b |...Local|Unlock.K|
|000061b0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 44 01 73 88 1d |ERNEL32.|dllD.s..|
|000061c0| 00 00 a0 01 01 08 4c 6f | 63 6b 46 69 6c 65 0c 4b |......Lo|ckFile.K|
|000061d0| 45 52 4e 45 4c 33 32 2e | 64 6c 6c 45 01 c6 88 1f |ERNEL32.|dllE....|
|000061e0| 00 00 a0 01 01 0a 4c 6f | 63 6b 46 69 6c 65 45 78 |......Lo|ckFileEx|
|000061f0| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 46 01 04 |.KERNEL3|2.dllF..|
|00006200| 88 21 00 00 a0 01 01 0c | 4c 6f 63 6b 52 65 73 6f |.!......|LockReso|
|00006210| 75 72 63 65 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |urce.KER|NEL32.dl|
|00006220| 6c 47 01 f4 88 22 00 00 | a0 01 01 0d 4d 61 70 56 |lG..."..|....MapV|
|00006230| 69 65 77 4f 66 46 69 6c | 65 0c 4b 45 52 4e 45 4c |iewOfFil|e.KERNEL|
|00006240| 33 32 2e 64 6c 6c 48 01 | d4 88 24 00 00 a0 01 01 |32.dllH.|..$.....|
|00006250| 0f 4d 61 70 56 69 65 77 | 4f 66 46 69 6c 65 45 78 |.MapView|OfFileEx|
|00006260| 0c 4b 45 52 4e 45 4c 33 | 32 2e 64 6c 6c 49 01 12 |.KERNEL3|2.dllI..|
|00006270| 88 1e 00 00 a0 01 01 09 | 4d 6f 76 65 46 69 6c 65 |........|MoveFile|
|00006280| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 4a 01 |A.KERNEL|32.dllJ.|
|00006290| 70 88 20 00 00 a0 01 01 | 0b 4d 6f 76 65 46 69 6c |p. .....|.MoveFil|
|000062a0| 65 45 78 41 0c 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |eExA.KER|NEL32.dl|
|000062b0| 6c 4b 01 ae 88 20 00 00 | a0 01 01 0b 4d 6f 76 65 |lK... ..|....Move|
|000062c0| 46 69 6c 65 45 78 57 0c | 4b 45 52 4e 45 4c 33 32 |FileExW.|KERNEL32|
|000062d0| 2e 64 6c 6c 4c 01 97 88 | 1e 00 00 a0 01 01 09 4d |.dllL...|.......M|
|000062e0| 6f 76 65 46 69 6c 65 57 | 0c 4b 45 52 4e 45 4c 33 |oveFileW|.KERNEL3|
|000062f0| 32 2e 64 6c 6c 4d 01 57 | 88 1b 00 00 a0 01 01 06 |2.dllM.W|........|
|00006300| 4d 75 6c 44 69 76 0c 4b | 45 52 4e 45 4c 33 32 2e |MulDiv.K|ERNEL32.|
|00006310| 64 6c 6c 4e 01 79 88 28 | 00 00 a0 01 01 13 4d 75 |dllN.y.(|......Mu|
|00006320| 6c 74 69 42 79 74 65 54 | 6f 57 69 64 65 43 68 61 |ltiByteT|oWideCha|
|00006330| 72 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 4f 01 |r.KERNEL|32.dllO.|
|00006340| 46 88 21 00 00 a0 01 01 | 0c 4f 70 65 6e 43 6f 6e |F.!.....|.OpenCon|
|00006350| 73 6f 6c 65 57 0c 4b 45 | 52 4e 45 4c 33 32 2e 64 |soleW.KE|RNEL32.d|
|00006360| 6c 6c 50 01 00 88 1f 00 | 00 a0 01 01 0a 4f 70 65 |llP.....|.....Ope|
|00006370| 6e 45 76 65 6e 74 41 0c | 4b 45 52 4e 45 4c 33 32 |nEventA.|KERNEL32|
|00006380| 2e 64 6c 6c 51 01 ea 88 | 1f 00 00 a0 01 01 0a 4f |.dllQ...|.......O|
|00006390| 70 65 6e 45 76 65 6e 74 | 57 0c 4b 45 52 4e 45 4c |penEvent|W.KERNEL|
|000063a0| 33 32 2e 64 6c 6c 52 01 | d3 88 1d 00 00 a0 01 01 |32.dllR.|........|
|000063b0| 08 4f 70 65 6e 46 69 6c | 65 0c 4b 45 52 4e 45 4c |.OpenFil|e.KERNEL|
|000063c0| 33 32 2e 64 6c 6c 53 01 | af 88 25 00 00 a0 01 01 |32.dllS.|..%.....|
|000063d0| 10 4f 70 65 6e 46 69 6c | 65 4d 61 70 70 69 6e 67 |.OpenFil|eMapping|
|000063e0| 41 0c 4b 45 52 4e 45 4c | 33 32 2e 64 6c 6c 54 01 |A.KERNEL|32.dllT.|
|000063f0| 91 88 25 00 00 a0 01 01 | 10 4f 70 65 6e 46 69 6c |..%.....|.OpenFil|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.