/ Cracking 2 / Cracking II..iso / Tools / ApiHooks 3.0 / release / ApiHooks.dll

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 40 00 01 00 00 00 | 02 00 04 00 ff ff 02 00 |MZ@.....|........|
|00000010| 40 00 00 00 0e 00 00 00 | 1c 00 00 00 00 00 00 00 |@.......|........|
|00000020| 57 69 6e 33 32 20 6f 6e | 6c 79 21 0d 0a 24 0e b4 |Win32 on|ly!..$..|
|00000030| 09 ba 00 00 1f cd 21 b8 | 01 4c cd 21 40 00 00 00 |......!.|.L.!@...|
|00000040| 50 45 00 00 4c 01 02 00 | 92 06 4e 39 00 00 00 00 |PE..L...|..N9....|
|00000050| 00 00 00 00 e0 00 0e 21 | 0b 01 05 00 00 1a 00 00 |.......!|........|
|00000060| 00 02 00 00 00 00 00 00 | de 19 00 00 00 10 00 00 |........|........|
|00000070| 00 30 00 00 00 00 f0 66 | 00 10 00 00 00 02 00 00 |.0.....f|........|
|00000080| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000090| 00 40 00 00 00 02 00 00 | b8 12 01 00 02 00 00 00 |.@......|........|
|000000a0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000b0| 00 00 00 00 10 00 00 00 | b0 26 00 00 e9 01 00 00 |........|.&......|
|000000c0| 00 10 00 00 50 00 00 00 | 00 00 00 00 00 00 00 00 |....P...|........|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 30 00 00 3c 01 00 00 | 00 00 00 00 00 00 00 00 |.0..<...|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | e4 10 00 00 94 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 20 00 00 00 00 00 00 00 |........| .......|
|00000140| 99 18 00 00 00 10 00 00 | 00 1a 00 00 00 02 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 e0 |........|.... ...|
|00000160| 20 00 00 00 00 00 00 00 | 82 01 00 00 00 30 00 00 | .......|.....0..|
|00000170| 00 02 00 00 00 1c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 40 00 00 42 | 20 20 20 20 20 20 20 20 |....@..B|        |
|00000190| 68 74 74 70 3a 2f 2f 65 | 6c 69 63 7a 2e 63 6a 62 |http://e|licz.cjb|
|000001a0| 2e 6e 65 74 20 20 20 20 | 20 20 20 20 20 20 20 20 |.net    |        |
|000001b0| 68 74 74 70 3a 2f 2f 65 | 6c 69 63 7a 2e 74 73 78 |http://e|licz.tsx|
|000001c0| 2e 6f 72 67 20 20 20 20 | 20 20 20 20 20 20 20 20 |.org    |        |
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 50 10 00 00 00 00 00 00 | 00 00 00 00 84 13 00 00 |P.......|........|
|00000210| e4 10 00 00 cc 10 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000220| a8 13 00 00 60 11 00 00 | d4 10 00 00 00 00 00 00 |....`...|........|
|00000230| 00 00 00 00 f8 13 00 00 | 68 11 00 00 00 00 00 00 |........|h.......|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 78 11 00 00 94 11 00 00 | a8 11 00 00 ba 11 00 00 |x.......|........|
|00000260| ce 11 00 00 dc 11 00 00 | ec 11 00 00 02 12 00 00 |........|........|
|00000270| 12 12 00 00 24 12 00 00 | 01 00 00 80 30 12 00 00 |....$...|....0...|
|00000280| 3e 12 00 00 54 12 00 00 | 62 12 00 00 70 12 00 00 |>...T...|b...p...|
|00000290| 84 12 00 00 9a 12 00 00 | aa 12 00 00 b8 12 00 00 |........|........|
|000002a0| ce 12 00 00 de 12 00 00 | f4 12 00 00 04 13 00 00 |........|........|
|000002b0| 18 13 00 00 2c 13 00 00 | 40 13 00 00 54 13 00 00 |....,...|@...T...|
|000002c0| 68 13 00 00 7c 13 00 00 | 00 00 00 00 92 13 00 00 |h...|...|........|
|000002d0| 00 00 00 00 b4 13 00 00 | c8 13 00 00 e0 13 00 00 |........|........|
|000002e0| 00 00 00 00 78 11 00 00 | 94 11 00 00 a8 11 00 00 |....x...|........|
|000002f0| ba 11 00 00 ce 11 00 00 | dc 11 00 00 ec 11 00 00 |........|........|
|00000300| 02 12 00 00 12 12 00 00 | 24 12 00 00 01 00 00 80 |........|$.......|
|00000310| 30 12 00 00 3e 12 00 00 | 54 12 00 00 62 12 00 00 |0...>...|T...b...|
|00000320| 70 12 00 00 84 12 00 00 | 9a 12 00 00 aa 12 00 00 |p.......|........|
|00000330| b8 12 00 00 ce 12 00 00 | de 12 00 00 f4 12 00 00 |........|........|
|00000340| 04 13 00 00 18 13 00 00 | 2c 13 00 00 40 13 00 00 |........|,...@...|
|00000350| 54 13 00 00 68 13 00 00 | 7c 13 00 00 00 00 00 00 |T...h...||.......|
|00000360| 92 13 00 00 00 00 00 00 | b4 13 00 00 c8 13 00 00 |........|........|
|00000370| e0 13 00 00 00 00 00 00 | 65 00 44 69 73 61 62 6c |........|e.Disabl|
|00000380| 65 54 68 72 65 61 64 4c | 69 62 72 61 72 79 43 61 |eThreadL|ibraryCa|
|00000390| 6c 6c 73 00 3b 01 47 65 | 74 4d 6f 64 75 6c 65 48 |lls.;.Ge|tModuleH|
|000003a0| 61 6e 64 6c 65 41 00 00 | 54 01 47 65 74 50 72 6f |andleA..|T.GetPro|
|000003b0| 63 41 64 64 72 65 73 73 | 00 00 0a 01 47 65 74 43 |cAddress|....GetC|
|000003c0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 1e 00 |urrentPr|ocess...|
|000003d0| 43 6c 6f 73 65 48 61 6e | 64 6c 65 00 f8 02 56 69 |CloseHan|dle...Vi|
|000003e0| 72 74 75 61 6c 51 75 65 | 72 79 00 00 39 01 47 65 |rtualQue|ry..9.Ge|
|000003f0| 74 4d 6f 64 75 6c 65 46 | 69 6c 65 4e 61 6d 65 41 |tModuleF|ileNameA|
|00000400| 00 00 e0 01 4c 6f 61 64 | 4c 69 62 72 61 72 79 41 |....Load|LibraryA|
|00000410| 00 00 f6 02 56 69 72 74 | 75 61 6c 50 72 6f 74 65 |....Virt|ualProte|
|00000420| 63 74 00 00 2e 03 6c 73 | 74 72 63 6d 70 69 41 00 |ct....ls|trcmpiA.|
|00000430| c4 00 46 72 65 65 4c 69 | 62 72 61 72 79 00 0b 01 |..FreeLi|brary...|
|00000440| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000450| 73 49 64 00 8f 01 47 65 | 74 56 65 72 73 69 6f 6e |sId...Ge|tVersion|
|00000460| 00 00 12 02 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |....Open|Process.|
|00000470| 41 02 52 65 61 64 50 72 | 6f 63 65 73 73 4d 65 6d |A.ReadPr|ocessMem|
|00000480| 6f 72 79 00 03 03 57 69 | 64 65 43 68 61 72 54 6f |ory...Wi|deCharTo|
|00000490| 4d 75 6c 74 69 42 79 74 | 65 00 f0 02 56 69 72 74 |MultiByt|e...Virt|
|000004a0| 75 61 6c 41 6c 6c 6f 63 | 00 00 f3 02 56 69 72 74 |ualAlloc|....Virt|
|000004b0| 75 61 6c 46 72 65 65 00 | 19 03 57 72 69 74 65 50 |ualFree.|..WriteP|
|000004c0| 72 6f 63 65 73 73 4d 65 | 6d 6f 72 79 00 00 56 02 |rocessMe|mory..V.|
|000004d0| 52 65 73 75 6d 65 54 68 | 72 65 61 64 00 00 ff 02 |ResumeTh|read....|
|000004e0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|000004f0| 65 63 74 00 c7 02 53 75 | 73 70 65 6e 64 54 68 72 |ect...Su|spendThr|
|00000500| 65 61 64 00 49 01 47 65 | 74 50 72 69 6f 72 69 74 |ead.I.Ge|tPriorit|
|00000510| 79 43 6c 61 73 73 00 00 | a5 02 53 65 74 50 72 69 |yClass..|..SetPri|
|00000520| 6f 72 69 74 79 43 6c 61 | 73 73 00 00 83 01 47 65 |orityCla|ss....Ge|
|00000530| 74 54 68 72 65 61 64 50 | 72 69 6f 72 69 74 79 00 |tThreadP|riority.|
|00000540| b6 02 53 65 74 54 68 72 | 65 61 64 50 72 69 6f 72 |..SetThr|eadPrior|
|00000550| 69 74 79 00 81 01 47 65 | 74 54 68 72 65 61 64 43 |ity...Ge|tThreadC|
|00000560| 6f 6e 74 65 78 74 00 00 | b2 02 53 65 74 54 68 72 |ontext..|..SetThr|
|00000570| 65 61 64 43 6f 6e 74 65 | 78 74 00 00 c5 02 53 6c |eadConte|xt....Sl|
|00000580| 65 65 70 00 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |eep.KERN|EL32.dll|
|00000590| 00 00 e6 01 50 6f 73 74 | 54 68 72 65 61 64 4d 65 |....Post|ThreadMe|
|000005a0| 73 73 61 67 65 41 00 00 | 55 53 45 52 33 32 2e 64 |ssageA..|USER32.d|
|000005b0| 6c 6c 00 00 67 01 4f 70 | 65 6e 50 72 6f 63 65 73 |ll..g.Op|enProces|
|000005c0| 73 54 6f 6b 65 6e 00 00 | 18 01 4c 6f 6f 6b 75 70 |sToken..|..Lookup|
|000005d0| 50 72 69 76 69 6c 65 67 | 65 56 61 6c 75 65 41 00 |Privileg|eValueA.|
|000005e0| 19 00 41 64 6a 75 73 74 | 54 6f 6b 65 6e 50 72 69 |..Adjust|TokenPri|
|000005f0| 76 69 6c 65 67 65 73 00 | 41 44 56 41 50 49 33 32 |vileges.|ADVAPI32|
|00000600| 2e 64 6c 6c 00 00 00 00 | 00 00 00 00 00 00 00 00 |.dll....|........|
|00000610| 50 53 55 56 57 fc e8 00 | 00 00 00 5f 81 c7 29 04 |PSUVW...|..._..).|
|00000620| 00 00 81 ec 1c 02 00 00 | 2b ed e8 39 00 00 00 8b |........|+..9....|
|00000630| 54 24 0c e8 00 00 00 00 | 58 81 c2 b8 00 00 00 05 |T$......|X.......|
|00000640| 01 01 00 00 3b 02 8d 40 | f4 74 18 05 43 01 00 00 |....;..@|.t..C...|
|00000650| 3b 02 8d 40 f2 74 0c 05 | d9 00 00 00 ff 74 24 08 |;..@.t..|.....t$.|
|00000660| 8f 42 0c 89 02 2b c0 c3 | 64 ff 75 00 64 89 65 00 |.B...+..|d.u.d.e.|
|00000670| 8d 74 24 08 8d 9c 24 08 | 02 00 00 89 77 fc 3b f3 |.t$...$.|....w.;.|
|00000680| 73 24 6a 1c 53 55 ff 57 | dc 85 c0 74 19 8b 2b 6a |s$j.SU.W|...t..+j|
|00000690| 02 56 55 ff 57 e0 85 c0 | 74 07 85 ed 74 03 89 2e |.VU.W...|t...t...|
|000006a0| ad 03 6b 0c eb d8 83 26 | 00 8b df 83 67 e0 00 8b |..k....&|....g...|
|000006b0| 73 04 83 3b fe 75 08 ff | 76 10 8f 47 e0 eb 56 53 |s..;.u..|v..G..VS|
|000006c0| ff 57 ec 85 c0 0f 85 70 | 02 00 00 53 ff 57 e4 85 |.W.....p|...S.W..|
|000006d0| c0 74 26 8b d8 8d 4f c9 | 8b 77 e8 51 53 ff d6 85 |.t&...O.|.w.QS...|
|000006e0| c0 74 04 ff d0 eb 18 8d | 4f cc 51 53 ff d6 85 c0 |.t......|O.QS....|
|000006f0| 75 0d 6a 01 53 ff d6 85 | c0 0f 84 3c 02 00 00 96 |u.j.S...|...<....|
|00000700| 83 67 dc 00 8b 1e 83 fb | ff 0f 84 31 02 00 00 53 |.g......|...1...S|
|00000710| ff 57 ec 85 c0 0f 84 18 | 02 00 00 93 f6 46 08 04 |.W......|.....F..|
|00000720| 74 7b ff 76 04 53 ff 57 | e8 85 c0 74 70 50 e8 89 |t{.v.S.W|...tpP..|
|00000730| 02 00 00 85 c0 93 58 74 | 64 8b 53 3c 8b 94 13 80 |......Xt|d.S<....|
|00000740| 00 00 00 2b c9 85 d2 74 | e4 03 d3 eb 03 83 c1 14 |...+...t|........|
|00000750| 83 7c 11 0c 00 74 d6 8b | 6c 11 10 8d 6c 2b fc 83 |.|...t..|l...l+..|
|00000760| 7d 04 00 74 e8 3b 45 04 | 8d 6d 04 75 f2 50 51 52 |}..t.;E.|.m.u.PQR|
|00000770| 52 54 6a 04 6a 04 55 e8 | e4 01 00 00 85 c0 5a 74 |RTj.j.U.|......Zt|
|00000780| 17 e8 17 02 00 00 8b 46 | 14 89 45 00 52 54 52 6a |.......F|..E.RTRj|
|00000790| 04 55 e8 c9 01 00 00 5a | 5a 59 58 eb c2 f6 46 08 |.U.....Z|ZYX...F.|
|000007a0| 01 74 16 ff 36 ff 57 ec | 85 c0 74 0d 93 8b 6e 04 |.t..6.W.|..t...n.|
|000007b0| 8b 53 3c 8b 54 13 78 85 | d2 74 61 03 d3 81 fd 00 |.S<.T.x.|.ta.....|
|000007c0| 00 01 00 73 06 95 2b 42 | 10 eb 3a 53 56 57 8b 4a |...s..+B|..:SVW.J|
|000007d0| 18 8b 72 20 03 f3 52 e3 | 15 ad 2b ff 03 c3 49 8a |..r ..R.|..+...I.|
|000007e0| 14 07 3a 14 2f 75 f0 47 | 84 d2 75 f3 2b c0 5a 5f |..:./u.G|..u.+.Z_|
|000007f0| 5e 5b 85 c0 75 66 2b 4a | 18 8b 42 24 41 f7 d9 03 |^[..uf+J|..B$A...|
|00000800| c3 0f b7 04 48 8b cb 03 | 4a 1c 8d 2c 81 52 54 6a |....H...|J..,.RTj|
|00000810| 04 6a 04 55 e8 47 01 00 | 00 85 c0 5a 74 3e e8 7a |.j.U.G..|...Zt>.z|
|00000820| 01 00 00 8b 46 14 2b c3 | 89 45 00 52 54 52 6a 04 |....F.+.|.E.RTRj.|
|00000830| 55 e8 2a 01 00 00 5a f6 | 46 08 10 eb 1f 64 8b 15 |U.*...Z.|F....d..|
|00000840| 30 00 00 00 8b 4a 0c 83 | c1 0c 8b 01 eb 0a 39 58 |0....J..|......9X|
|00000850| 18 75 03 ff 40 44 8b 00 | 3b c1 75 f2 f6 46 08 02 |.u..@D..|;.u..F..|
|00000860| 74 07 e8 55 01 00 00 85 | c0 0f 84 c4 00 00 00 93 |t..U....|........|
|00000870| 8b 53 3c 8b 94 13 80 00 | 00 00 85 d2 74 e4 2b ff |.S<.....|....t.+.|
|00000880| 03 d3 8b 6c 17 0c 85 ed | 74 d8 03 eb 83 c7 14 52 |...l....|t......R|
|00000890| e8 00 00 00 00 58 05 a3 | 01 00 00 55 ff 36 ff 10 |.....X..|...U.6..|
|000008a0| 85 c0 5a 75 dd 8b 6c 17 | ec 85 ed 74 b5 3b 6c 17 |..Zu..l.|...t.;l.|
|000008b0| fc 74 af 8b 46 04 eb 05 | 5f 5a 83 c5 04 8b 0c 2b |.t..F...|_Z.....+|
|000008c0| e3 c0 52 57 3d 00 00 01 | 00 73 0b 85 c9 79 e9 66 |..RW=...|.s...y.f|
|000008d0| 3b c1 74 18 eb e2 85 c9 | 78 de 03 cb 2b ff 8a 14 |;.t.....|x...+...|
|000008e0| 07 3a 54 0f 02 75 d1 47 | 84 d2 75 f2 5f 5a 8b 44 |.:T..u.G|..u._Z.D|
|000008f0| 17 fc 2b 6c 17 ec 03 e8 | 03 eb e8 00 00 00 00 5f |..+l....|......._|
|00000900| 8d bf 45 01 00 00 52 54 | 6a 04 6a 04 55 e8 4e 00 |..E...RT|j.j.U.N.|
|00000910| 00 00 85 c0 5a 74 17 e8 | 81 00 00 00 8b 46 14 89 |....Zt..|.....F..|
|00000920| 45 00 52 54 52 6a 04 55 | e8 33 00 00 00 5a e9 2f |E.RTRj.U|.3...Z./|
|00000930| ff ff ff 83 c6 18 e9 c5 | fd ff ff 6a 04 58 eb 02 |........|...j.X..|
|00000940| 2b c0 64 8f 05 00 00 00 | 00 81 c4 20 02 00 00 5f |+.d.....|... ..._|
|00000950| 5e 5d 5b 59 00 00 00 00 | 00 00 00 00 00 00 00 00 |^][Y....|........|
|00000960| 55 8b ec 8b 55 08 85 d2 | 79 20 2b c0 f6 46 08 08 |U...U...|y +..F..|
|00000970| 74 27 c1 ea 0c 68 00 00 | 06 20 6a ff 6a 01 52 68 |t'...h..|. j.j.Rh|
|00000980| 0d 00 01 00 ff 57 f8 40 | 74 0f ff 75 14 ff 75 10 |.....W.@|t..u..u.|
|00000990| ff 75 0c ff 75 08 ff 57 | f0 c9 c2 10 00 8b 4e 10 |.u..u..W|......N.|
|000009a0| e3 19 8b 41 04 3b 01 7d | 12 52 ff 41 04 8b 49 08 |...A.;.}|.R.A..I.|
|000009b0| 8b 55 00 89 2c c1 89 54 | c1 04 5a c3 e8 00 00 00 |.U..,..T|..Z.....|
|000009c0| 00 5f 8d bf 83 00 00 00 | 8b 46 0c 8b 4f dc 40 74 |._......|.F..O.@t|
|000009d0| 0b 48 49 91 7d 1b 51 ff | 57 ec eb 06 8b 47 fc 8b |.HI.}.Q.|W....G..|
|000009e0| 04 88 85 c0 74 0b ff 47 | dc e8 07 00 00 00 74 d8 |....t..G|......t.|
|000009f0| c3 21 47 dc c3 8b 57 e0 | 85 d2 74 0e 83 3a 00 74 |.!G...W.|..t..:.t|
|00000a00| 09 3b 02 8d 52 04 75 f4 | 2b c0 85 c0 c3 47 65 74 |.;..R.u.|+....Get|
|00000a10| 41 70 69 48 6f 6f 6b 43 | 68 61 69 6e 00 8d 49 00 |ApiHookC|hain..I.|
|00000a20| 01 00 00 00 00 00 00 00 | 00 00 00 00 02 00 00 00 |........|........|
|00000a30| 54 68 72 65 61 64 33 32 | 4e 65 78 74 00 4e 54 44 |Thread32|Next.NTD|
|00000a40| 4c 4c 2e 44 4c 4c 00 53 | 65 44 65 62 75 67 50 72 |LL.DLL.S|eDebugPr|
|00000a50| 69 76 69 6c 65 67 65 00 | 50 57 e8 00 00 00 00 5f |ivilege.|PW....._|
|00000a60| 81 c7 95 00 00 00 2b c0 | e8 21 00 00 00 8b 54 24 |......+.|.!....T$|
|00000a70| 0c e8 00 00 00 00 58 81 | c2 b8 00 00 00 05 63 00 |......X.|......c.|
|00000a80| 00 00 ff 74 24 08 89 02 | 8f 42 0c 2b c0 c3 64 ff |...t$...|.B.+..d.|
|00000a90| 30 64 89 20 57 ff 57 ec | ff 4f fc 74 26 eb f5 50 |0d. W.W.|.O.t&..P|
|00000aa0| ff 57 f0 eb ef 85 c0 74 | 1a 50 8b 4f f8 85 c9 75 |.W.....t|.P.O...u|
|00000ab0| 06 8d 8f 04 01 00 00 51 | 50 ff 57 f4 8b c8 58 e3 |.......Q|P.W...X.|
|00000ac0| 02 ff d1 64 8f 05 00 00 | 00 00 5a 5f 59 00 00 00 |...d....|..Z_Y...|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 6a 04 58 eb e5 8b ff |........|.j.X....|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 4b 45 52 4e | 45 4c 33 32 2e 44 4c 4c |....KERN|EL32.DLL|
|00000b00| 00 43 72 65 61 74 65 54 | 6f 6f 6c 68 65 6c 70 33 |.CreateT|oolhelp3|
|00000b10| 32 53 6e 61 70 73 68 6f | 74 00 54 68 72 65 61 64 |2Snapsho|t.Thread|
|00000b20| 33 32 46 69 72 73 74 00 | 4e 1e f0 66 bc 1f f0 66 |32First.|N..f...f|
|00000b30| 80 1e f0 66 7a 22 f0 66 | 50 6a fe 50 68 00 00 00 |...fz".f|Pj.Ph...|
|00000b40| 00 c3 56 69 72 74 75 61 | 6c 41 6c 6c 6f 63 45 78 |..Virtua|lAllocEx|
|00000b50| 00 56 69 72 74 75 61 6c | 46 72 65 65 45 78 00 4e |.Virtual|FreeEx.N|
|00000b60| 74 4f 70 65 6e 54 68 72 | 65 61 64 00 4e 74 51 75 |tOpenThr|ead.NtQu|
|00000b70| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 72 |eryInfor|mationPr|
|00000b80| 6f 63 65 73 73 00 4e 74 | 51 75 65 72 79 53 79 73 |ocess.Nt|QuerySys|
|00000b90| 74 65 6d 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 52 |temInfor|mation.R|
|00000ba0| 74 6c 43 72 65 61 74 65 | 55 73 65 72 54 68 72 65 |tlCreate|UserThre|
|00000bb0| 61 64 00 4e 74 54 65 72 | 6d 69 6e 61 74 65 54 68 |ad.NtTer|minateTh|
|00000bc0| 72 65 61 64 00 4e 74 51 | 75 65 72 79 49 6e 66 6f |read.NtQ|ueryInfo|
|00000bd0| 72 6d 61 74 69 6f 6e 54 | 68 72 65 61 64 00 83 7c |rmationT|hread..||
|00000be0| 24 08 01 0f 85 d7 01 00 | 00 ff 74 24 04 ff 15 e4 |$.......|..t$....|
|00000bf0| 10 f0 66 56 57 68 f4 18 | f0 66 ff 15 e8 10 f0 66 |..fVWh..|.f.....f|
|00000c00| 8b 35 ec 10 f0 66 8b f8 | 68 42 19 f0 66 57 ff d6 |.5...f..|hB..fW..|
|00000c10| a3 f4 18 f0 66 68 51 19 | f0 66 57 ff d6 a3 f8 18 |....fhQ.|.fW.....|
|00000c20| f0 66 68 01 19 f0 66 57 | ff d6 a3 fc 18 f0 66 68 |.fh...fW|......fh|
|00000c30| 1a 19 f0 66 57 ff d6 a3 | 10 19 f0 66 68 30 18 f0 |...fW...|...fh0..|
|00000c40| 66 57 ff d6 a3 14 19 f0 | 66 68 3d 18 f0 66 ff 15 |fW......|fh=..f..|
|00000c50| e8 10 f0 66 8b f8 68 5f | 19 f0 66 57 ff d6 a3 18 |...f..h_|..fW....|
|00000c60| 19 f0 66 68 6c 19 f0 66 | 57 ff d6 a3 00 19 f0 66 |..fhl..f|W......f|
|00000c70| 68 86 19 f0 66 57 ff d6 | a3 04 19 f0 66 68 9f 19 |h...fW..|....fh..|
|00000c80| f0 66 57 ff d6 a3 08 19 | f0 66 68 b3 19 f0 66 57 |.fW.....|.fh...fW|
|00000c90| ff d6 a3 3d 19 f0 66 68 | c5 19 f0 66 57 ff d6 a3 |...=..fh|...fW...|
|00000ca0| 0c 19 f0 66 ff 15 f0 10 | f0 66 51 a3 20 19 f0 66 |...f....|.fQ. ..f|
|00000cb0| 54 6a 28 50 ff 15 68 11 | f0 66 85 c0 5f 74 31 68 |Tj(P..h.|.f.._t1h|
|00000cc0| 24 18 f0 66 68 47 18 f0 | 66 6a 00 ff 15 6c 11 f0 |$..fhG..|fj...l..|
|00000cd0| 66 85 c0 74 14 6a 00 6a | 00 6a 00 68 20 18 f0 66 |f..t.j.j|.j.h ..f|
|00000ce0| 6a 00 57 ff 15 70 11 f0 | 66 57 ff 15 f4 10 f0 66 |j.W..p..|fW.....f|
|00000cf0| a1 f8 10 f0 66 a3 20 18 | f0 66 a1 fc 10 f0 66 a3 |....f. .|.f....f.|
|00000d00| 24 18 f0 66 a1 00 11 f0 | 66 a3 28 18 f0 66 89 35 |$..f....|f.(..f.5|
|00000d10| 2c 18 f0 66 89 35 e8 18 | f0 66 a1 e8 10 f0 66 a3 |,..f.5..|.f....f.|
|00000d20| 30 18 f0 66 a3 e0 18 f0 | 66 a1 04 11 f0 66 a3 34 |0..f....|f....f.4|
|00000d30| 18 f0 66 a1 08 11 f0 66 | a3 38 18 f0 66 a1 0c 11 |..f....f|.8..f...|
|00000d40| f0 66 a3 3c 18 f0 66 a1 | 10 11 f0 66 a3 e4 18 f0 |.f.<..f.|...f....|
|00000d50| 66 ff 15 14 11 f0 66 a3 | 24 19 f0 66 64 33 05 30 |f.....f.|$..fd3.0|
|00000d60| 00 00 00 a3 d1 23 f0 66 | ff 15 18 11 f0 66 a3 1c |.....#.f|.....f..|
|00000d70| 19 f0 66 85 c0 79 17 a1 | 1c 11 f0 66 83 c0 24 81 |..f..y..|...f..$.|
|00000d80| 38 b9 00 00 00 75 37 a3 | c8 23 f0 66 eb 30 c6 05 |8....u7.|.#.f.0..|
|00000d90| 3b 16 f0 66 75 c7 05 28 | 19 f0 66 37 1e f0 66 c7 |;..fu..(|..f7..f.|
|00000da0| 05 30 19 f0 66 6b 1e f0 | 66 c7 05 34 19 f0 66 f6 |.0..fk..|f..4..f.|
|00000db0| 22 f0 66 3c 05 73 07 c6 | 05 52 23 f0 66 ac 5f 5e |".f<.s..|.R#.f._^|
|00000dc0| 33 c0 40 c2 0c 00 8b 54 | 24 0c 81 c2 b0 00 00 00 |3.@....T|$.......|
|00000dd0| 8b 44 24 08 c7 42 08 28 | 1e f0 66 89 42 14 6a 01 |.D$..B.(|..f.B.j.|
|00000de0| 8f 02 33 c0 c3 55 8b ec | 83 c4 e8 a1 1c 19 f0 66 |..3..U..|.......f|
|00000df0| 85 c0 78 4a ff 75 08 6a | 00 68 10 04 00 00 ff 15 |..xJ.u.j|.h......|
|00000e00| 1c 11 f0 66 85 c0 6a 01 | 74 33 8d 4d e8 50 6a 00 |...f..j.|t3.M.Pj.|
|00000e10| 6a 18 51 6a 00 50 ff 15 | 00 19 f0 66 85 c0 7c 17 |j.Qj.P..|...f..|.|
|00000e20| 59 8b 45 ec 8b d4 83 c0 | 0c 51 6a 00 6a 04 52 50 |Y.E.....|.Qj.j.RP|
|00000e30| 51 ff 15 20 11 f0 66 ff | 15 f4 10 f0 66 58 c9 c2 |Q.. ..f.|....fX..|
|00000e40| 04 00 6a 00 6a 00 eb 04 | 6a 00 6a 01 6a ff ff 74 |..j.j...|j.j.j..t|
|00000e50| 24 14 ff 74 24 14 e8 67 | 00 00 00 c2 08 00 6a 00 |$..t$..g|......j.|
|00000e60| 6a 00 eb 20 6a 00 6a 01 | eb 1a ff 74 24 08 e8 72 |j.. j.j.|...t$..r|
|00000e70| ff ff ff 50 6a 00 eb 0c | ff 74 24 08 e8 64 ff ff |...Pj...|.t$..d..|
|00000e80| ff 50 6a 01 ff 74 24 14 | ff 74 24 14 ff 74 24 14 |.Pj..t$.|.t$..t$.|
|00000e90| e8 2d 00 00 00 c2 0c 00 | 2b c0 eb 09 ff 74 24 04 |.-......|+....t$.|
|00000ea0| e8 40 ff ff ff 50 ff 74 | 24 18 ff 74 24 18 ff 74 |.@...P.t|$..t$..t|
|00000eb0| 24 18 ff 74 24 18 ff 74 | 24 18 e8 9f 00 00 00 c2 |$..t$..t|$.......|
|00000ec0| 14 00 55 8b ec 53 56 57 | 6a 00 68 38 05 00 00 e8 |..U..SVW|j.h8....|
|00000ed0| 7a 01 00 00 85 c0 8b f8 | 6a 01 58 74 72 57 be 10 |z.......|j.XtrW..|
|00000ee0| 14 f0 66 b9 0d 01 00 00 | f3 a5 5b 6a fe 58 8b 75 |..f.....|..[j.X.u|
|00000ef0| 08 39 06 75 06 ab 8b c6 | ab eb 31 39 4d 14 74 1c |.9.u....|..19M.t.|
|00000f00| 51 51 68 04 01 00 00 57 | 6a ff 56 51 51 ff 15 24 |QQh....W|j.VQQ..$|
|00000f10| 11 f0 66 85 c0 6a 01 58 | 74 2d eb 10 b9 04 01 00 |..f..j.X|t-......|
|00000f20| 00 ac aa 84 c0 74 05 49 | 74 eb eb f5 8d 83 44 03 |.....t.I|t.....D.|
|00000f30| 00 00 ff 75 18 50 68 38 | 05 00 00 53 ff 75 10 ff |...u.Ph8|...S.u..|
|00000f40| 75 0c e8 17 00 00 00 50 | 53 e8 32 01 00 00 58 83 |u......P|S.2...X.|
|00000f50| f8 09 76 03 6a 04 58 5f | 5e 5b c9 c2 14 00 55 8b |..v.j.X_|^[....U.|
|00000f60| ec 53 56 57 2b c0 68 c6 | 1b f0 66 64 ff 30 64 89 |.SVW+.h.|..fd.0d.|
|00000f70| 20 50 ff 75 14 e8 d4 00 | 00 00 85 c0 8b f8 6a 03 | P.u....|......j.|
|00000f80| 58 0f 84 a1 00 00 00 57 | 8b 75 10 8b 4d 14 f3 a4 |X......W|.u..M...|
|00000f90| 5e 8b 45 08 3b 05 24 19 | f0 66 75 0e 8b 45 18 2b |^.E.;.$.|.fu..E.+|
|00000fa0| 45 10 c6 04 06 c3 ff d6 | eb 76 a1 1c 19 f0 66 b9 |E.......|.v....f.|
|00000fb0| 38 04 00 00 ba 2c 19 f0 | 66 85 c0 78 15 83 7d 1c |8....,..|f..x..}.|
|00000fc0| 00 c7 02 bc 1f f0 66 74 | 09 c7 02 94 1e f0 66 83 |......ft|......f.|
|00000fd0| c9 02 ff 75 08 6a 00 51 | ff 15 1c 11 f0 66 85 c0 |...u.j.Q|.....f..|
|00000fe0| 8b d8 6a 02 58 74 39 68 | 00 00 00 08 ff 75 14 ff |..j.Xt9h|.....u..|
|00000ff0| 15 28 19 f0 66 85 c0 8b | f8 6a 03 58 74 19 8b 4d |.(..f...|.j.Xt..M|
|00001000| 18 2b 4d 10 03 ce 51 ff | 75 14 56 ff 75 0c ff 75 |.+M...Q.|u.V.u..u|
|00001010| 08 ff 15 2c 19 f0 66 50 | 53 ff 15 f4 10 f0 66 58 |...,..fP|S.....fX|
|00001020| 50 56 e8 59 00 00 00 58 | 64 8f 05 00 00 00 00 59 |PV.Y...X|d......Y|
|00001030| 5f 5e 5b c9 c2 18 00 6a | 40 68 00 10 00 00 ff 74 |_^[....j|@h.....t|
|00001040| 24 0c 6a 00 53 ff 15 f4 | 18 f0 66 c2 08 00 55 8b |$.j.S...|..f...U.|
|00001050| ec 8b 45 0c 0d 00 10 00 | 00 6a 40 50 ff 75 08 6a |..E.....|.j@P.u.j|
|00001060| 00 ff 15 28 11 f0 66 c9 | c2 08 00 68 00 80 00 00 |...(..f.|...h....|
|00001070| 6a 00 ff 74 24 0c 53 ff | 15 f8 18 f0 66 c2 04 00 |j..t$.S.|....f...|
|00001080| 68 00 80 00 00 6a 00 ff | 74 24 0c ff 15 2c 11 f0 |h....j..|t$...,..|
|00001090| 66 c2 04 00 55 8b ec 81 | c4 dc fd ff ff 56 83 65 |f...U...|.....V.e|
|000010a0| fc 00 8d b5 dc fd ff ff | 56 ff 75 08 6a 00 6a 5a |........|V.u.j.jZ|
|000010b0| e8 3e 03 00 00 85 c0 6a | 04 0f 84 c2 00 00 00 57 |.>.....j|.......W|
|000010c0| be 38 19 f0 66 8b 7d 18 | a5 a5 a5 5f 6a 00 ff 75 |.8..f.}.|..._j..u|
|000010d0| 14 ff 75 10 57 53 ff 15 | 30 11 f0 66 85 c0 0f 84 |..u.WS..|0..f....|
|000010e0| 8d 00 00 00 50 8b d4 6a | 00 52 6a 00 57 6a 00 6a |....P..j|.Rj.Wj.j|
|000010f0| 00 6a 00 6a 01 6a 00 53 | ff 15 08 19 f0 66 85 c0 |.j.j.j.S|.....f..|
|00001100| 5e 7c 6e 8d 4d e0 6a 00 | 6a 1c 51 6a 00 56 ff 15 |^|n.M.j.|j.Qj.V..|
|00001110| 0c 19 f0 66 85 c0 7c 1c | 8b 45 e4 85 c0 74 15 8d |...f..|.|.E...t..|
|00001120| 4d fc 05 0c 0e 00 00 6a | 00 6a 04 51 50 53 ff 15 |M......j|.j.QPS..|
|00001130| 20 11 f0 66 56 ff 15 34 | 11 f0 66 ff 75 0c 56 ff | ..fV..4|..f.u.V.|
|00001140| 15 38 11 f0 66 3d 02 01 | 00 00 75 07 6a 09 8f 04 |.8..f=..|..u.j...|
|00001150| 24 eb 17 8d 4d e0 6a 00 | 6a 1c 51 6a 00 56 ff 15 |$...M.j.|j.Qj.V..|
|00001160| 0c 19 f0 66 ff 75 e0 8f | 04 24 56 ff 15 f4 10 f0 |...f.u..|.$V.....|
|00001170| 66 8d b5 dc fd ff ff 56 | 6a ff 56 e8 22 04 00 00 |f......V|j.V."...|
|00001180| 5e ad 85 c0 74 0a 50 ff | 15 f4 10 f0 66 ad eb f1 |^...t.P.|....f...|
|00001190| 83 3c 24 09 74 20 8b 4d | fc e3 06 51 e8 ca fe ff |.<$.t .M|...Q....|
|000011a0| ff 57 e8 c4 fe ff ff 85 | c0 75 0b 83 3c 24 00 75 |.W......|.u..<$.u|
|000011b0| 05 6a 05 8f 04 24 58 5e | c9 c2 14 00 55 8b ec 81 |.j...$X^|....U...|
|000011c0| c4 4c fc ff ff 56 2b c0 | 6a 04 8f 45 fc 21 45 ec |.L...V+.|j..E.!E.|
|000011d0| c7 45 e8 ff ff ff 7f ff | 75 0c 8f 45 f0 8d b5 e4 |.E......|u..E....|
|000011e0| fd ff ff 56 ff 75 08 50 | 6a 5a e8 04 02 00 00 85 |...V.u.P|jZ......|
|000011f0| c0 0f 84 cf 01 00 00 89 | 4d f4 8b f0 50 ff 15 3c |........|M...P..<|
|00001200| 11 f0 66 89 45 f8 40 75 | 05 6a 7f 8f 45 f8 56 ff |..f.E.@u|.j..E.V.|
|00001210| 15 34 11 f0 66 8b 45 18 | 66 c7 00 eb fe 6a 00 ff |.4..f.E.|f....j..|
|00001220| 75 14 ff 75 10 57 53 ff | 15 30 11 f0 66 85 c0 74 |u..u.WS.|.0..f..t|
|00001230| 33 53 ff 15 40 11 f0 66 | 85 c0 74 28 50 ff 35 20 |3S..@..f|..t(P.5 |
|00001240| 19 f0 66 ff 15 40 11 f0 | 66 85 c0 5a 74 16 3b c2 |..f..@..|f..Zt.;.|
|00001250| 74 18 89 45 ec 52 ff 35 | 20 19 f0 66 ff 15 44 11 |t..E.R.5| ..f..D.|
|00001260| f0 66 85 c0 0f 84 31 01 | 00 00 56 ff 15 48 11 f0 |.f....1.|..V..H..|
|00001270| 66 3b 45 e8 74 21 50 6a | fe ff 15 48 11 f0 66 3b |f;E.t!Pj|...H..f;|
|00001280| 45 e8 5a 74 12 3b c2 74 | 14 89 45 e8 52 6a fe ff |E.Zt.;.t|..E.Rj..|
|00001290| 15 4c 11 f0 66 85 c0 0f | 84 ea 00 00 00 50 6a 01 |.L..f...|.....Pj.|
|000012a0| 68 86 00 00 00 ff 75 f4 | ff 15 60 11 f0 66 8d 85 |h.....u.|..`..f..|
|000012b0| 4c fc ff ff 56 57 c7 00 | 03 00 01 00 50 50 56 ff |L...VW..|....PPV.|
|000012c0| 15 50 11 f0 66 5e 8d bd | 18 fd ff ff 6a 33 59 8b |.P..f^..|....j3Y.|
|000012d0| d7 f3 a5 85 c0 5f 5e 0f | 84 97 00 00 00 83 aa c4 |....._^.|........|
|000012e0| 00 00 00 50 83 32 02 89 | ba b8 00 00 00 52 56 ff |...P.2..|.....RV.|
|000012f0| 15 54 11 f0 66 83 b5 18 | fd ff ff 02 85 c0 74 74 |.T..f...|......tt|
|00001300| 8b 45 10 01 7d 18 29 45 | 18 57 8d bd 18 fd ff ff |.E..}.)E|.W......|
|00001310| 56 ff 15 34 11 f0 66 48 | 7f f6 68 00 01 00 00 ff |V..4..fH|..h.....|
|00001320| 15 58 11 f0 66 56 ff 15 | 3c 11 f0 66 57 56 ff 15 |.X..fV..|<..fWV..|
|00001330| 50 11 f0 66 8b 87 b8 00 | 00 00 3b 45 18 74 11 83 |P..f....|..;E.t..|
|00001340| 7d 0c ff 74 cb 81 6d f0 | 00 01 00 00 7f c2 eb 15 |}..t..m.|........|
|00001350| 8b 87 b0 00 00 00 8b 8f | ac 00 00 00 89 45 fc 89 |........|.....E..|
|00001360| 8d fc fc ff ff 8d 85 4c | fc ff ff 5f 50 56 ff 15 |.......L|..._PV..|
|00001370| 54 11 f0 66 8b 45 e8 3d | ff ff ff 7f 74 09 50 6a |T..f.E.=|....t.Pj|
|00001380| fe ff 15 4c 11 f0 66 8b | 45 ec 85 c0 74 0d 50 ff |...L..f.|E...t.P.|
|00001390| 35 20 19 f0 66 ff 15 44 | 11 f0 66 ff 45 f0 74 0a |5 ..f..D|..f.E.t.|
|000013a0| ff 4d f0 7d 05 6a 09 8f | 45 fc ff 4d f8 7e 09 56 |.M.}.j..|E..M.~.V|
|000013b0| ff 15 3c 11 f0 66 eb f2 | 8d b5 e4 fd ff ff 6a ff |..<..f..|......j.|
|000013c0| 56 e8 dc 01 00 00 ad 85 | c0 74 0a 50 ff 15 f4 10 |V.......|.t.P....|
|000013d0| f0 66 ad eb f1 57 ff 15 | 30 19 f0 66 85 c0 75 0b |.f...W..|0..f..u.|
|000013e0| 83 7d fc 00 75 05 6a 05 | 8f 45 fc 8b 45 fc 5e c9 |.}..u.j.|.E..E.^.|
|000013f0| c2 14 00 55 8b ec 81 c4 | 34 ff ff ff 53 56 57 8b |...U....|4...SVW.|
|00001400| 75 14 8d bd 34 ff ff ff | 56 ff 75 10 ff 75 0c ff |u...4...|V.u..u..|
|00001410| 75 08 ff 15 34 19 f0 66 | 85 c0 75 24 c7 07 05 00 |u...4..f|..u$....|
|00001420| 01 00 ad 85 c0 74 22 8b | d8 ad 53 ff 15 3c 11 f0 |.....t".|..S..<..|
|00001430| 66 40 75 ee 83 ee 08 56 | ff 75 14 e8 62 01 00 00 |f@u....V|.u..b...|
|00001440| 2b c0 eb 2f 83 ce ff eb | ee 8b 75 14 ad 8b d8 85 |+../....|..u.....|
|00001450| c0 74 f1 ad 50 57 53 ff | 15 50 11 f0 66 85 c0 59 |.t..PWS.|.P..f..Y|
|00001460| 74 ea 8c ca 66 83 7d c4 | 00 74 e1 66 3b 55 f0 75 |t...f.}.|.t.f;U.u|
|00001470| db 8b c3 5f 5e 5b c9 c2 | 10 00 55 8b ec 83 c4 e0 |..._^[..|..U.....|
|00001480| 53 56 57 8b 7d 14 ff 75 | 10 6a 04 ff 15 fc 18 f0 |SVW.}..u|.j......|
|00001490| 66 8b d8 83 f8 ff 74 54 | 6a 40 8f 45 fc 8d 75 e0 |f.....tT|j@.E..u.|
|000014a0| 6a 1c 8f 06 56 53 ff 15 | 10 19 f0 66 85 c0 74 33 |j...VS..|...f..t3|
|000014b0| 8b 46 0c 3b 45 10 75 1e | ff 76 08 ff 75 0c ff 75 |.F.;E.u.|.v..u..u|
|000014c0| 08 e8 fc 00 00 00 85 c0 | 74 16 ab 8b 46 08 ab 2b |........|t...F..+|
|000014d0| c0 ff 4d fc 7e 0d 56 53 | ff 15 14 19 f0 66 eb cc |..M.~.VS|.....f..|
|000014e0| 83 c8 ff 50 53 ff 15 f4 | 10 f0 66 58 83 27 00 5f |...PS...|..fX.'._|
|000014f0| 5e 5b c9 c2 10 00 55 8b | ec 83 c4 fc 53 56 57 6a |^[....U.|....SVWj|
|00001500| 40 8f 45 fc bb 00 50 00 | 00 8b 7d 14 6a 00 53 e8 |@.E...P.|..}.j.S.|
|00001510| 3a fb ff ff 8b f0 48 7c | 7f 6a 00 53 56 6a 05 ff |:.....H||.j.SVj..|
|00001520| 15 04 19 f0 66 3d 04 00 | 00 c0 75 0e 56 e8 4e fb |....f=..|..u.V.N.|
|00001530| ff ff 81 c3 00 10 00 00 | eb cf 85 c0 7c 52 8b ce |........|....|R..|
|00001540| 8b 5d 10 eb 07 83 39 00 | 74 20 03 09 3b 59 44 75 |.]....9.|t ..;YDu|
|00001550| f4 ba dc 00 00 00 ff 49 | 04 7c 0f 8b 04 0a ab ab |.......I|.|......|
|00001560| ff 4d fc 7e 05 83 c2 40 | eb ec 2b c0 ab 8b 7d 14 |.M.~...@|..+...}.|
|00001570| 8b 07 85 c0 74 1a 50 53 | ff 75 0c ff 75 08 e8 64 |....t.PS|.u..u..d|
|00001580| 00 00 00 85 c0 74 06 ab | 83 c7 04 eb e3 83 c8 ff |.....t..|........|
|00001590| 50 56 e8 e9 fa ff ff 58 | 83 27 00 5f 5e 5b c9 c2 |PV.....X|.'._^[..|
|000015a0| 10 00 55 8b ec 56 8b 75 | 08 3b 75 0c 73 0f ad 85 |..U..V.u|.;u.s...|
|000015b0| c0 74 0a 50 ff 15 34 11 | f0 66 ad eb ec 5e c9 c2 |.t.P..4.|.f...^..|
|000015c0| 08 00 55 8b ec 2b c0 ba | 00 00 00 00 85 d2 74 13 |..U..+..|......t.|
|000015d0| b8 00 00 00 00 33 45 10 | ff 75 10 ff 75 0c ff 75 |.....3E.|.u..u..u|
|000015e0| 08 ff d2 c9 c2 0c 00 55 | 8b ec 83 c4 e4 57 8d 55 |.......U|.....W.U|
|000015f0| 10 8d 7d e4 52 57 ff 75 | 08 6a 18 58 ab 2b c0 6a |..}.RW.u|.j.X.+.j|
|00001600| 05 59 f3 ab 57 ab ff 15 | 18 19 f0 66 8b 45 fc 5f |.Y..W...|...f.E._|
|00001610| c9 c2 10 00 55 8b ec 83 | c4 ac 83 7d 08 ff 6a 00 |....U...|...}..j.|
|00001620| 58 0f 84 89 00 00 00 6a | fe 8f 45 b8 ff 75 20 8f |X......j|..E..u .|
|00001630| 45 c8 8b 45 18 85 c0 74 | 31 8b 08 85 c9 75 04 8b |E..E...t|1....u..|
|00001640| c1 eb 27 8b 50 08 8b 40 | 04 83 7a 04 08 75 0c 81 |..'.P..@|..z..u..|
|00001650| 7a 0c 00 00 01 00 72 03 | 8b 52 0c 51 50 52 8f 45 |z.....r.|.R.QPR.E|
|00001660| b4 8f 45 b0 8f 45 ac 8d | 45 ac ff 75 08 ff 75 0c |..E..E..|E..u..u.|
|00001670| ff 75 10 ff 75 14 50 ff | 75 1c 8d 45 b8 8f 45 e4 |.u..u.P.|u..E..E.|
|00001680| 8f 45 e0 8f 45 dc 8f 45 | d8 8f 45 d4 8f 45 d0 6a |.E..E..E|..E..E.j|
|00001690| ff 8f 45 e8 ff 35 24 19 | f0 66 50 e8 a2 f7 ff ff |..E..5$.|.fP.....|
|000016a0| 8b 4d 18 e3 0b 83 39 00 | 74 06 ff 75 b0 8f 41 04 |.M....9.|t..u..A.|
|000016b0| c9 c2 1c 00 55 8b ec 81 | c4 f4 fc ff ff 53 56 57 |....U...|.....SVW|
|000016c0| 8b 75 08 85 f6 74 1f 8b | c6 8d b5 fc fe ff ff 6a |.u...t..|.......j|
|000016d0| 00 6a 00 68 04 01 00 00 | 56 6a ff 50 6a 00 6a 00 |.j.h....|Vj.Pj.j.|
|000016e0| ff 15 24 11 f0 66 8b 7d | 0c 81 ff 00 00 01 00 72 |..$..f.}|.......r|
|000016f0| 1f 8b c7 8d bd f8 fd ff | ff 6a 00 6a 00 68 04 01 |........|.j.j.h..|
|00001700| 00 00 57 6a ff 50 6a 00 | 6a 00 ff 15 24 11 f0 66 |..Wj.Pj.|j...$..f|
|00001710| 8b 5d 14 85 db 74 24 83 | fb ff 74 1f 8b c3 8d 9d |.]...t$.|..t.....|
|00001720| f8 fd ff ff 6a 00 6a 00 | 68 04 01 00 00 53 6a ff |....j.j.|h....Sj.|
|00001730| 50 6a 00 6a 00 ff 15 24 | 11 f0 66 ff 75 20 ff 75 |Pj.j...$|..f.u .u|
|00001740| 1c ff 75 18 53 ff 75 10 | 57 56 e8 c5 fe ff ff 5f |..u.S.u.|WV....._|
|00001750| 5e 5b c9 c2 1c 00 6a 00 | eb 02 6a 01 6a 00 6a 00 |^[....j.|..j.j.j.|
|00001760| 6a 01 ff 74 24 18 ff 74 | 24 18 e8 41 00 00 00 c2 |j..t$..t|$..A....|
|00001770| 08 00 6a 00 eb 02 6a 01 | 6a 02 ff 74 24 18 ff 74 |..j...j.|j..t$..t|
|00001780| 24 18 ff 74 24 18 ff 74 | 24 18 e8 21 00 00 00 c2 |$..t$..t|$..!....|
|00001790| 10 00 6a 00 eb 02 6a 01 | 6a 01 6a 00 ff 74 24 18 |..j...j.|j.j..t$.|
|000017a0| ff 74 24 18 ff 74 24 18 | e8 03 00 00 00 c2 0c 00 |.t$..t$.|........|
|000017b0| 55 8b ec 53 56 57 6a 00 | 68 a4 02 00 00 e8 8c f8 |U..SVWj.|h.......|
|000017c0| ff ff 85 c0 8b f8 6a 01 | 58 0f 84 ce 00 00 00 57 |......j.|X......W|
|000017d0| be 58 18 f0 66 68 27 00 | 00 00 59 f3 a5 5b 8b 75 |.X..fh'.|..Y..[.u|
|000017e0| 08 39 4d 1c 74 23 51 51 | 68 04 01 00 00 57 6a ff |.9M.t#QQ|h....Wj.|
|000017f0| 56 51 51 ff 15 24 11 f0 | 66 85 c0 57 5f 6a 01 58 |VQQ..$..|f..W_j.X|
|00001800| 0f 84 8f 00 00 00 57 eb | 11 57 b9 04 01 00 00 ac |......W.|.W......|
|00001810| aa 84 c0 74 05 49 74 e4 | eb f5 5f 2b c9 81 c7 04 |...t.It.|.._+....|
|00001820| 01 00 00 8b 75 14 3b ce | 89 4d 14 74 0e 89 37 81 |....u.;.|.M.t..7.|
|00001830| fe 00 00 01 00 72 04 88 | 0f eb a6 8b 4d 18 89 b3 |.....r..|....M...|
|00001840| 94 00 00 00 8b 45 10 e3 | 23 49 75 0a c6 43 43 7c |.....E..|#Iu..CC||
|00001850| c6 43 46 00 eb 16 ff 35 | 28 18 f0 66 8f 83 88 00 |.CF....5|(..f....|
|00001860| 00 00 66 c7 43 43 75 f7 | c6 43 46 06 89 83 98 00 |..f.CCu.|.CF.....|
|00001870| 00 00 ff 75 0c e8 6b f5 | ff ff 8d 8b 75 00 00 00 |...u..k.|....u...|
|00001880| 50 51 68 a4 02 00 00 53 | 68 30 75 00 00 ff 75 0c |PQh....S|h0u...u.|
|00001890| e8 c9 f6 ff ff 50 53 e8 | e4 f7 ff ff 58 5f 5e 5b |.....PS.|....X_^[|
|000018a0| c9 c2 18 00 cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000018b0| 00 00 00 00 92 06 4e 39 | 00 00 00 00 78 27 00 00 |......N9|....x'..|
|000018c0| 01 00 00 00 10 00 00 00 | 10 00 00 00 d8 26 00 00 |........|.....&..|
|000018d0| 18 27 00 00 58 27 00 00 | 42 1c 00 00 5e 1c 00 00 |.'..X'..|B...^...|
|000018e0| 6a 1c 00 00 78 1c 00 00 | 64 1c 00 00 48 1c 00 00 |j...x...|d...H...|
|000018f0| 14 24 00 00 b4 24 00 00 | 56 25 00 00 5a 25 00 00 |.$...$..|V%..Z%..|
|00001900| 72 25 00 00 76 25 00 00 | 98 1c 00 00 9c 1c 00 00 |r%..v%..|........|
|00001910| 92 25 00 00 96 25 00 00 | 85 27 00 00 98 27 00 00 |.%...%..|.'...'..|
|00001920| af 27 00 00 c8 27 00 00 | e1 27 00 00 f8 27 00 00 |.'...'..|.'...'..|
|00001930| 0b 28 00 00 14 28 00 00 | 1d 28 00 00 2d 28 00 00 |.(...(..|.(..-(..|
|00001940| 3d 28 00 00 4a 28 00 00 | 57 28 00 00 69 28 00 00 |=(..J(..|W(..i(..|
|00001950| 7d 28 00 00 8b 28 00 00 | 00 00 01 00 02 00 03 00 |}(...(..|........|
|00001960| 04 00 05 00 06 00 07 00 | 08 00 09 00 0a 00 0b 00 |........|........|
|00001970| 0c 00 0d 00 0e 00 0f 00 | 41 70 69 48 6f 6f 6b 73 |........|ApiHooks|
|00001980| 2e 64 6c 6c 00 45 73 74 | 61 62 6c 69 73 68 41 70 |.dll.Est|ablishAp|
|00001990| 69 48 6f 6f 6b 73 41 00 | 45 73 74 61 62 6c 69 73 |iHooksA.|Establis|
|000019a0| 68 41 70 69 48 6f 6f 6b | 73 54 69 6d 65 41 00 45 |hApiHook|sTimeA.E|
|000019b0| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|000019c0| 54 69 6d 65 4e 54 41 00 | 45 73 74 61 62 6c 69 73 |TimeNTA.|Establis|
|000019d0| 68 41 70 69 48 6f 6f 6b | 73 54 69 6d 65 4e 54 57 |hApiHook|sTimeNTW|
|000019e0| 00 45 73 74 61 62 6c 69 | 73 68 41 70 69 48 6f 6f |.Establi|shApiHoo|
|000019f0| 6b 73 54 69 6d 65 57 00 | 45 73 74 61 62 6c 69 73 |ksTimeW.|Establis|
|00001a00| 68 41 70 69 48 6f 6f 6b | 73 57 00 48 6f 6f 6b 41 |hApiHook|sW.HookA|
|00001a10| 70 69 41 00 48 6f 6f 6b | 41 70 69 57 00 49 73 4d |piA.Hook|ApiW.IsM|
|00001a20| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 41 00 49 73 4d |oduleLoa|dedA.IsM|
|00001a30| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 57 00 4c 6f 61 |oduleLoa|dedW.Loa|
|00001a40| 64 41 6e 64 43 61 6c 6c | 41 00 4c 6f 61 64 41 6e |dAndCall|A.LoadAn|
|00001a50| 64 43 61 6c 6c 57 00 52 | 65 6d 6f 74 65 45 78 65 |dCallW.R|emoteExe|
|00001a60| 63 75 74 65 54 69 6d 65 | 00 52 65 6d 6f 74 65 45 |cuteTime|.RemoteE|
|00001a70| 78 65 63 75 74 65 54 69 | 6d 65 4e 54 00 55 6e 6c |xecuteTi|meNT.Unl|
|00001a80| 6f 61 64 4d 6f 64 75 6c | 65 41 00 55 6e 6c 6f 61 |oadModul|eA.Unloa|
|00001a90| 64 4d 6f 64 75 6c 65 57 | 00 00 00 00 00 00 00 00 |dModuleW|........|
|00001aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c00| 00 10 00 00 e0 00 00 00 | 28 39 2c 39 30 39 34 39 |........|(9,90949|
|00001c10| ef 39 f6 39 fc 39 02 3a | 09 3a 11 3a 16 3a 1e 3a |.9.9.9.:|.:.:.:.:|
|00001c20| 23 3a 2b 3a 30 3a 38 3a | 3d 3a 45 3a 4a 3a 50 3a |#:+:0:8:|=:E:J:P:|
|00001c30| 57 3a 5f 3a 64 3a 6c 3a | 71 3a 79 3a 7e 3a 86 3a |W:_:d:l:|q:y:~:.:|
|00001c40| 8b 3a 93 3a 98 3a a0 3a | a6 3a ac 3a b6 3a c0 3a |.:.:.:.:|.:.:.:.:|
|00001c50| c5 3a cd 3a dc 3a e5 3a | ec 3a f1 3a f6 3a fb 3a |.:.:.:.:|.:.:.:.:|
|00001c60| 00 3b 05 3b 0a 3b 10 3b | 16 3b 1b 3b 20 3b 25 3b |.;.;.;.;|.;.; ;%;|
|00001c70| 2a 3b 2f 3b 34 3b 39 3b | 3e 3b 43 3b 48 3b 4d 3b |*;/;4;9;|>;C;H;M;|
|00001c80| 53 3b 58 3b 64 3b 6a 3b | 6f 3b 78 3b 88 3b 90 3b |S;X;d;j;|o;x;.;.;|
|00001c90| 97 3b 9b 3b a1 3b a5 3b | ab 3b af 3b b9 3b d7 3b |.;.;.;.;|.;.;.;.;|
|00001ca0| ec 3b 00 3c 18 3c 33 3c | 39 3c df 3c 0f 3d 67 3d |.;.<.<3<|9<.<.=g=|
|00001cb0| 96 3d ab 3d b5 3d c3 3d | cb 3d da 3d f1 3d 13 3e |.=.=.=.=|.=.=.=.>|
|00001cc0| 1b 3e 47 3e 63 3e 79 3e | 8d 3e c1 3e d8 3e fa 3e |.>G>c>y>|.>.>.>.>|
|00001cd0| 10 3f 30 3f 37 3f 41 3f | 60 3f 6d 3f 89 3f ff 3f |.?0?7?A?|`?m?.?.?|
|00001ce0| 00 20 00 00 5c 00 00 00 | 11 30 29 30 34 30 3f 30 |. ..\...|.0)040?0|
|00001cf0| 45 30 58 30 5e 30 6d 30 | 7b 30 91 30 aa 30 c1 30 |E0X0^0m0|{0.0.0.0|
|00001d00| f1 30 13 31 21 31 28 31 | 30 31 70 31 83 31 91 31 |.0.1!1(1|01p1.1.1|
|00001d10| 97 31 b2 31 ce 31 d8 31 | 14 32 2d 32 59 32 8d 32 |.1.1.1.1|.2-2Y2.2|
|00001d20| a8 32 da 32 e7 32 21 33 | b6 33 08 34 96 34 e2 34 |.2.2.2!3|.3.4.4.4|
|00001d30| 0c 35 37 35 d1 35 f5 35 | 58 36 00 00 00 00 00 00 |.575.5.5|X6......|
|00001d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+