/ Cracking 2 / Cracking II..iso / Tools / ApiHooks 2.2 / ApiHooks.dll

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 40 00 01 00 00 00 | 02 00 04 00 ff ff 02 00 |MZ@.....|........|
|00000010| 40 00 00 00 0e 00 00 00 | 1c 00 00 00 00 00 00 00 |@.......|........|
|00000020| 57 69 6e 33 32 20 6f 6e | 6c 79 21 0d 0a 24 0e b4 |Win32 on|ly!..$..|
|00000030| 09 ba 00 00 1f cd 21 b8 | 01 4c cd 21 40 00 00 00 |......!.|.L.!@...|
|00000040| 50 45 00 00 4c 01 02 00 | b9 8c f1 38 00 00 00 00 |PE..L...|...8....|
|00000050| 00 00 00 00 e0 00 0e 21 | 0b 01 05 00 00 1a 00 00 |.......!|........|
|00000060| 00 02 00 00 00 00 00 00 | de 19 00 00 00 10 00 00 |........|........|
|00000070| 00 30 00 00 00 00 f0 66 | 00 10 00 00 00 02 00 00 |.0.....f|........|
|00000080| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000090| 00 40 00 00 00 02 00 00 | 19 95 00 00 02 00 00 00 |.@......|........|
|000000a0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000b0| 00 00 00 00 10 00 00 00 | e0 26 00 00 e9 01 00 00 |........|.&......|
|000000c0| 00 10 00 00 50 00 00 00 | 00 00 00 00 00 00 00 00 |....P...|........|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 30 00 00 3c 01 00 00 | 00 00 00 00 00 00 00 00 |.0..<...|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | e4 10 00 00 94 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 20 00 00 00 00 00 00 00 |........| .......|
|00000140| c9 18 00 00 00 10 00 00 | 00 1a 00 00 00 02 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 e0 |........|.... ...|
|00000160| 20 00 00 00 00 00 00 00 | 82 01 00 00 00 30 00 00 | .......|.....0..|
|00000170| 00 02 00 00 00 1c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 40 00 00 42 | 20 20 20 20 20 20 20 20 |....@..B|        |
|00000190| 68 74 74 70 3a 2f 2f 65 | 6c 69 63 7a 2e 63 6a 62 |http://e|licz.cjb|
|000001a0| 2e 6e 65 74 20 20 20 20 | 20 20 20 20 20 20 20 20 |.net    |        |
|000001b0| 68 74 74 70 3a 2f 2f 65 | 6c 69 63 7a 2e 74 73 78 |http://e|licz.tsx|
|000001c0| 2e 6f 72 67 20 20 20 20 | 20 20 20 20 20 20 20 20 |.org    |        |
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| 50 10 00 00 00 00 00 00 | 00 00 00 00 84 13 00 00 |P.......|........|
|00000210| e4 10 00 00 cc 10 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000220| a8 13 00 00 60 11 00 00 | d4 10 00 00 00 00 00 00 |....`...|........|
|00000230| 00 00 00 00 f8 13 00 00 | 68 11 00 00 00 00 00 00 |........|h.......|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 78 11 00 00 94 11 00 00 | a8 11 00 00 ba 11 00 00 |x.......|........|
|00000260| ce 11 00 00 dc 11 00 00 | ec 11 00 00 02 12 00 00 |........|........|
|00000270| 12 12 00 00 24 12 00 00 | 01 00 00 80 30 12 00 00 |....$...|....0...|
|00000280| 3e 12 00 00 54 12 00 00 | 62 12 00 00 70 12 00 00 |>...T...|b...p...|
|00000290| 84 12 00 00 9a 12 00 00 | aa 12 00 00 b8 12 00 00 |........|........|
|000002a0| ce 12 00 00 de 12 00 00 | f4 12 00 00 04 13 00 00 |........|........|
|000002b0| 18 13 00 00 2c 13 00 00 | 40 13 00 00 54 13 00 00 |....,...|@...T...|
|000002c0| 68 13 00 00 7c 13 00 00 | 00 00 00 00 92 13 00 00 |h...|...|........|
|000002d0| 00 00 00 00 b4 13 00 00 | c8 13 00 00 e0 13 00 00 |........|........|
|000002e0| 00 00 00 00 78 11 00 00 | 94 11 00 00 a8 11 00 00 |....x...|........|
|000002f0| ba 11 00 00 ce 11 00 00 | dc 11 00 00 ec 11 00 00 |........|........|
|00000300| 02 12 00 00 12 12 00 00 | 24 12 00 00 01 00 00 80 |........|$.......|
|00000310| 30 12 00 00 3e 12 00 00 | 54 12 00 00 62 12 00 00 |0...>...|T...b...|
|00000320| 70 12 00 00 84 12 00 00 | 9a 12 00 00 aa 12 00 00 |p.......|........|
|00000330| b8 12 00 00 ce 12 00 00 | de 12 00 00 f4 12 00 00 |........|........|
|00000340| 04 13 00 00 18 13 00 00 | 2c 13 00 00 40 13 00 00 |........|,...@...|
|00000350| 54 13 00 00 68 13 00 00 | 7c 13 00 00 00 00 00 00 |T...h...||.......|
|00000360| 92 13 00 00 00 00 00 00 | b4 13 00 00 c8 13 00 00 |........|........|
|00000370| e0 13 00 00 00 00 00 00 | 64 00 44 69 73 61 62 6c |........|d.Disabl|
|00000380| 65 54 68 72 65 61 64 4c | 69 62 72 61 72 79 43 61 |eThreadL|ibraryCa|
|00000390| 6c 6c 73 00 3a 01 47 65 | 74 4d 6f 64 75 6c 65 48 |lls.:.Ge|tModuleH|
|000003a0| 61 6e 64 6c 65 41 00 00 | 53 01 47 65 74 50 72 6f |andleA..|S.GetPro|
|000003b0| 63 41 64 64 72 65 73 73 | 00 00 09 01 47 65 74 43 |cAddress|....GetC|
|000003c0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 1e 00 |urrentPr|ocess...|
|000003d0| 43 6c 6f 73 65 48 61 6e | 64 6c 65 00 f6 02 56 69 |CloseHan|dle...Vi|
|000003e0| 72 74 75 61 6c 51 75 65 | 72 79 00 00 38 01 47 65 |rtualQue|ry..8.Ge|
|000003f0| 74 4d 6f 64 75 6c 65 46 | 69 6c 65 4e 61 6d 65 41 |tModuleF|ileNameA|
|00000400| 00 00 df 01 4c 6f 61 64 | 4c 69 62 72 61 72 79 41 |....Load|LibraryA|
|00000410| 00 00 f4 02 56 69 72 74 | 75 61 6c 50 72 6f 74 65 |....Virt|ualProte|
|00000420| 63 74 00 00 2c 03 6c 73 | 74 72 63 6d 70 69 41 00 |ct..,.ls|trcmpiA.|
|00000430| c3 00 46 72 65 65 4c 69 | 62 72 61 72 79 00 0a 01 |..FreeLi|brary...|
|00000440| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000450| 73 49 64 00 8e 01 47 65 | 74 56 65 72 73 69 6f 6e |sId...Ge|tVersion|
|00000460| 00 00 11 02 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |....Open|Process.|
|00000470| 40 02 52 65 61 64 50 72 | 6f 63 65 73 73 4d 65 6d |@.ReadPr|ocessMem|
|00000480| 6f 72 79 00 01 03 57 69 | 64 65 43 68 61 72 54 6f |ory...Wi|deCharTo|
|00000490| 4d 75 6c 74 69 42 79 74 | 65 00 ee 02 56 69 72 74 |MultiByt|e...Virt|
|000004a0| 75 61 6c 41 6c 6c 6f 63 | 00 00 f1 02 56 69 72 74 |ualAlloc|....Virt|
|000004b0| 75 61 6c 46 72 65 65 00 | 17 03 57 72 69 74 65 50 |ualFree.|..WriteP|
|000004c0| 72 6f 63 65 73 73 4d 65 | 6d 6f 72 79 00 00 54 02 |rocessMe|mory..T.|
|000004d0| 52 65 73 75 6d 65 54 68 | 72 65 61 64 00 00 fd 02 |ResumeTh|read....|
|000004e0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|000004f0| 65 63 74 00 c5 02 53 75 | 73 70 65 6e 64 54 68 72 |ect...Su|spendThr|
|00000500| 65 61 64 00 48 01 47 65 | 74 50 72 69 6f 72 69 74 |ead.H.Ge|tPriorit|
|00000510| 79 43 6c 61 73 73 00 00 | a3 02 53 65 74 50 72 69 |yClass..|..SetPri|
|00000520| 6f 72 69 74 79 43 6c 61 | 73 73 00 00 82 01 47 65 |orityCla|ss....Ge|
|00000530| 74 54 68 72 65 61 64 50 | 72 69 6f 72 69 74 79 00 |tThreadP|riority.|
|00000540| b4 02 53 65 74 54 68 72 | 65 61 64 50 72 69 6f 72 |..SetThr|eadPrior|
|00000550| 69 74 79 00 80 01 47 65 | 74 54 68 72 65 61 64 43 |ity...Ge|tThreadC|
|00000560| 6f 6e 74 65 78 74 00 00 | b0 02 53 65 74 54 68 72 |ontext..|..SetThr|
|00000570| 65 61 64 43 6f 6e 74 65 | 78 74 00 00 c3 02 53 6c |eadConte|xt....Sl|
|00000580| 65 65 70 00 4b 45 52 4e | 45 4c 33 32 2e 64 6c 6c |eep.KERN|EL32.dll|
|00000590| 00 00 e6 01 50 6f 73 74 | 54 68 72 65 61 64 4d 65 |....Post|ThreadMe|
|000005a0| 73 73 61 67 65 41 00 00 | 55 53 45 52 33 32 2e 64 |ssageA..|USER32.d|
|000005b0| 6c 6c 00 00 67 01 4f 70 | 65 6e 50 72 6f 63 65 73 |ll..g.Op|enProces|
|000005c0| 73 54 6f 6b 65 6e 00 00 | 18 01 4c 6f 6f 6b 75 70 |sToken..|..Lookup|
|000005d0| 50 72 69 76 69 6c 65 67 | 65 56 61 6c 75 65 41 00 |Privileg|eValueA.|
|000005e0| 19 00 41 64 6a 75 73 74 | 54 6f 6b 65 6e 50 72 69 |..Adjust|TokenPri|
|000005f0| 76 69 6c 65 67 65 73 00 | 41 44 56 41 50 49 33 32 |vileges.|ADVAPI32|
|00000600| 2e 64 6c 6c 00 00 00 00 | 00 00 00 00 00 00 00 00 |.dll....|........|
|00000610| 50 53 55 56 57 fc e8 00 | 00 00 00 5f 81 c7 29 04 |PSUVW...|..._..).|
|00000620| 00 00 81 ec 5c 01 00 00 | 2b ed e8 39 00 00 00 8b |....\...|+..9....|
|00000630| 54 24 0c e8 00 00 00 00 | 58 81 c2 b8 00 00 00 05 |T$......|X.......|
|00000640| 01 01 00 00 3b 02 8d 40 | f4 74 18 05 46 01 00 00 |....;..@|.t..F...|
|00000650| 3b 02 8d 40 f2 74 0c 05 | d9 00 00 00 ff 74 24 08 |;..@.t..|.....t$.|
|00000660| 8f 42 0c 89 02 2b c0 c3 | 64 ff 75 00 64 89 65 00 |.B...+..|d.u.d.e.|
|00000670| 8d 74 24 08 8d 9c 24 48 | 01 00 00 89 77 fc 3b f3 |.t$...$H|....w.;.|
|00000680| 73 24 6a 1c 53 55 ff 57 | dc 85 c0 74 19 8b 2b 6a |s$j.SU.W|...t..+j|
|00000690| 02 56 55 ff 57 e0 85 c0 | 74 07 85 ed 74 03 89 2e |.VU.W...|t...t...|
|000006a0| ad 03 6b 0c eb d8 83 26 | 00 8b df 83 67 e0 00 8b |..k....&|....g...|
|000006b0| 73 04 83 3b fe 75 08 ff | 76 10 8f 47 e0 eb 56 53 |s..;.u..|v..G..VS|
|000006c0| ff 57 ec 85 c0 0f 85 73 | 02 00 00 53 ff 57 e4 85 |.W.....s|...S.W..|
|000006d0| c0 74 26 8b d8 8d 4f cc | 8b 77 e8 51 53 ff d6 85 |.t&...O.|.w.QS...|
|000006e0| c0 74 04 ff d0 eb 18 8d | 4f cf 51 53 ff d6 85 c0 |.t......|O.QS....|
|000006f0| 75 0d 6a 01 53 ff d6 85 | c0 0f 84 3f 02 00 00 96 |u.j.S...|...?....|
|00000700| 83 67 dc 00 8b 1e 83 fb | ff 0f 84 34 02 00 00 53 |.g......|...4...S|
|00000710| ff 57 ec 85 c0 0f 84 1b | 02 00 00 93 f6 46 08 04 |.W......|.....F..|
|00000720| 74 7b ff 76 04 53 ff 57 | e8 85 c0 74 70 50 e8 8c |t{.v.S.W|...tpP..|
|00000730| 02 00 00 85 c0 93 58 74 | 64 8b 53 3c 8b 94 13 80 |......Xt|d.S<....|
|00000740| 00 00 00 2b c9 85 d2 74 | e4 03 d3 eb 03 83 c1 14 |...+...t|........|
|00000750| 83 7c 11 0c 00 74 d6 8b | 6c 11 10 8d 6c 2b fc 83 |.|...t..|l...l+..|
|00000760| 7d 04 00 74 e8 3b 45 04 | 8d 6d 04 75 f2 50 51 52 |}..t.;E.|.m.u.PQR|
|00000770| 52 54 6a 04 6a 04 55 e8 | e7 01 00 00 85 c0 5a 74 |RTj.j.U.|......Zt|
|00000780| 17 e8 1a 02 00 00 8b 46 | 14 89 45 00 52 54 52 6a |.......F|..E.RTRj|
|00000790| 04 55 e8 cc 01 00 00 5a | 5a 59 58 eb c2 f6 46 08 |.U.....Z|ZYX...F.|
|000007a0| 01 74 16 ff 36 ff 57 ec | 85 c0 74 0d 93 8b 6e 04 |.t..6.W.|..t...n.|
|000007b0| 8b 53 3c 8b 54 13 78 85 | d2 74 61 03 d3 81 fd 00 |.S<.T.x.|.ta.....|
|000007c0| 00 01 00 73 06 95 2b 42 | 10 eb 3a 53 56 57 8b 4a |...s..+B|..:SVW.J|
|000007d0| 18 8b 72 20 03 f3 52 e3 | 15 ad 2b ff 03 c3 49 8a |..r ..R.|..+...I.|
|000007e0| 14 07 3a 14 2f 75 f0 47 | 84 d2 75 f3 2b c0 5a 5f |..:./u.G|..u.+.Z_|
|000007f0| 5e 5b 85 c0 75 69 2b 4a | 18 8b 42 24 41 f7 d9 03 |^[..ui+J|..B$A...|
|00000800| c3 0f b7 04 48 8b cb 03 | 4a 1c 8d 2c 81 52 54 6a |....H...|J..,.RTj|
|00000810| 04 6a 04 55 e8 4a 01 00 | 00 85 c0 5a 74 41 e8 7d |.j.U.J..|...ZtA.}|
|00000820| 01 00 00 8b 46 14 2b c3 | 89 45 00 52 54 52 6a 04 |....F.+.|.E.RTRj.|
|00000830| 55 e8 2d 01 00 00 5a f6 | 46 08 10 eb 22 64 8b 0d |U.-...Z.|F..."d..|
|00000840| 18 00 00 00 8b 51 30 8b | 4a 0c 83 c1 0c 8b 01 eb |.....Q0.|J.......|
|00000850| 0a 39 58 18 75 03 ff 40 | 44 8b 00 3b c1 75 f2 f6 |.9X.u..@|D..;.u..|
|00000860| 46 08 02 74 07 e8 55 01 | 00 00 85 c0 0f 84 c4 00 |F..t..U.|........|
|00000870| 00 00 93 8b 53 3c 8b 94 | 13 80 00 00 00 85 d2 74 |....S<..|.......t|
|00000880| e4 2b ff 03 d3 8b 6c 17 | 0c 85 ed 74 d8 03 eb 83 |.+....l.|...t....|
|00000890| c7 14 52 e8 00 00 00 00 | 58 05 a0 01 00 00 55 ff |..R.....|X.....U.|
|000008a0| 36 ff 10 85 c0 5a 75 dd | 8b 6c 17 ec 85 ed 74 b5 |6....Zu.|.l....t.|
|000008b0| 3b 6c 17 fc 74 af 8b 46 | 04 eb 05 5f 5a 83 c5 04 |;l..t..F|..._Z...|
|000008c0| 8b 0c 2b e3 c0 52 57 3d | 00 00 01 00 73 0b 85 c9 |..+..RW=|....s...|
|000008d0| 79 e9 66 3b c1 74 18 eb | e2 85 c9 78 de 03 cb 2b |y.f;.t..|...x...+|
|000008e0| ff 8a 14 07 3a 54 0f 02 | 75 d1 47 84 d2 75 f2 5f |....:T..|u.G..u._|
|000008f0| 5a 8b 44 17 fc 2b 6c 17 | ec 03 e8 03 eb e8 00 00 |Z.D..+l.|........|
|00000900| 00 00 5f 8d bf 42 01 00 | 00 52 54 6a 04 6a 04 55 |.._..B..|.RTj.j.U|
|00000910| e8 4e 00 00 00 85 c0 5a | 74 17 e8 81 00 00 00 8b |.N.....Z|t.......|
|00000920| 46 14 89 45 00 52 54 52 | 6a 04 55 e8 33 00 00 00 |F..E.RTR|j.U.3...|
|00000930| 5a e9 2f ff ff ff 83 c6 | 18 e9 c2 fd ff ff 6a 04 |Z./.....|......j.|
|00000940| 58 eb 02 2b c0 64 8f 05 | 00 00 00 00 81 c4 60 01 |X..+.d..|......`.|
|00000950| 00 00 5f 5e 5d 5b 59 00 | 00 00 00 00 00 00 00 00 |.._^][Y.|........|
|00000960| 00 00 00 55 8b ec 8b 55 | 08 85 d2 79 20 2b c0 f6 |...U...U|...y +..|
|00000970| 46 08 08 74 27 c1 ea 0c | 68 00 00 06 20 6a ff 6a |F..t'...|h... j.j|
|00000980| 01 52 68 0d 00 01 00 ff | 57 f8 40 74 0f ff 75 14 |.Rh.....|W.@t..u.|
|00000990| ff 75 10 ff 75 0c ff 75 | 08 ff 57 f0 c9 c2 10 00 |.u..u..u|..W.....|
|000009a0| 8b 4e 10 e3 19 8b 41 04 | 3b 01 7d 12 52 ff 41 04 |.N....A.|;.}.R.A.|
|000009b0| 8b 49 08 8b 55 00 89 2c | c1 89 54 c1 04 5a c3 e8 |.I..U..,|..T..Z..|
|000009c0| 00 00 00 00 5f 8d bf 80 | 00 00 00 8b 46 0c 8b 4f |...._...|....F..O|
|000009d0| dc 40 74 0b 48 49 91 7d | 1b 51 ff 57 ec eb 06 8b |.@t.HI.}|.Q.W....|
|000009e0| 47 fc 8b 04 88 85 c0 74 | 0b ff 47 dc e8 07 00 00 |G......t|..G.....|
|000009f0| 00 74 d8 c3 21 47 dc c3 | 8b 57 e0 85 d2 74 0e 83 |.t..!G..|.W...t..|
|00000a00| 3a 00 74 09 3b 02 8d 52 | 04 75 f4 2b c0 85 c0 c3 |:.t.;..R|.u.+....|
|00000a10| 47 65 74 41 70 69 48 6f | 6f 6b 43 68 61 69 6e 00 |GetApiHo|okChain.|
|00000a20| 01 00 00 00 00 00 00 00 | 00 00 00 00 02 00 00 00 |........|........|
|00000a30| 54 68 72 65 61 64 33 32 | 4e 65 78 74 00 4e 54 44 |Thread32|Next.NTD|
|00000a40| 4c 4c 2e 44 4c 4c 00 53 | 65 44 65 62 75 67 50 72 |LL.DLL.S|eDebugPr|
|00000a50| 69 76 69 6c 65 67 65 00 | 50 57 e8 00 00 00 00 5f |ivilege.|PW....._|
|00000a60| 81 c7 95 00 00 00 2b c0 | e8 21 00 00 00 8b 54 24 |......+.|.!....T$|
|00000a70| 0c e8 00 00 00 00 58 81 | c2 b8 00 00 00 05 63 00 |......X.|......c.|
|00000a80| 00 00 ff 74 24 08 89 02 | 8f 42 0c 2b c0 c3 64 ff |...t$...|.B.+..d.|
|00000a90| 30 64 89 20 57 ff 57 ec | ff 4f fc 74 26 eb f5 50 |0d. W.W.|.O.t&..P|
|00000aa0| ff 57 f0 eb ef 85 c0 74 | 1a 50 8b 4f f8 85 c9 75 |.W.....t|.P.O...u|
|00000ab0| 06 8d 8f 04 01 00 00 51 | 50 ff 57 f4 8b c8 58 e3 |.......Q|P.W...X.|
|00000ac0| 02 ff d1 64 8f 05 00 00 | 00 00 5a 5f 59 00 00 00 |...d....|..Z_Y...|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 6a 04 58 eb e5 8b ff |........|.j.X....|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 4b 45 52 4e | 45 4c 33 32 2e 44 4c 4c |....KERN|EL32.DLL|
|00000b00| 00 43 72 65 61 74 65 54 | 6f 6f 6c 68 65 6c 70 33 |.CreateT|oolhelp3|
|00000b10| 32 53 6e 61 70 73 68 6f | 74 00 54 68 72 65 61 64 |2Snapsho|t.Thread|
|00000b20| 33 32 46 69 72 73 74 00 | f0 20 f0 66 58 22 f0 66 |32First.|. .fX".f|
|00000b30| 1d 21 f0 66 17 25 f0 66 | 50 6a fe 50 68 00 00 00 |.!.f.%.f|Pj.Ph...|
|00000b40| 00 c3 56 69 72 74 75 61 | 6c 41 6c 6c 6f 63 45 78 |..Virtua|lAllocEx|
|00000b50| 00 56 69 72 74 75 61 6c | 46 72 65 65 45 78 00 4e |.Virtual|FreeEx.N|
|00000b60| 74 4f 70 65 6e 54 68 72 | 65 61 64 00 4e 74 51 75 |tOpenThr|ead.NtQu|
|00000b70| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 72 |eryInfor|mationPr|
|00000b80| 6f 63 65 73 73 00 4e 74 | 51 75 65 72 79 53 79 73 |ocess.Nt|QuerySys|
|00000b90| 74 65 6d 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 52 |temInfor|mation.R|
|00000ba0| 74 6c 43 72 65 61 74 65 | 55 73 65 72 54 68 72 65 |tlCreate|UserThre|
|00000bb0| 61 64 00 4e 74 54 65 72 | 6d 69 6e 61 74 65 54 68 |ad.NtTer|minateTh|
|00000bc0| 72 65 61 64 00 4e 74 51 | 75 65 72 79 49 6e 66 6f |read.NtQ|ueryInfo|
|00000bd0| 72 6d 61 74 69 6f 6e 54 | 68 72 65 61 64 00 83 7c |rmationT|hread..||
|00000be0| 24 08 01 0f 85 e1 01 00 | 00 ff 74 24 04 ff 15 e4 |$.......|..t$....|
|00000bf0| 10 f0 66 56 57 68 f4 18 | f0 66 ff 15 e8 10 f0 66 |..fVWh..|.f.....f|
|00000c00| 8b 35 ec 10 f0 66 8b f8 | 68 42 19 f0 66 57 ff d6 |.5...f..|hB..fW..|
|00000c10| a3 f4 18 f0 66 68 51 19 | f0 66 57 ff d6 a3 f8 18 |....fhQ.|.fW.....|
|00000c20| f0 66 68 01 19 f0 66 57 | ff d6 a3 fc 18 f0 66 68 |.fh...fW|......fh|
|00000c30| 1a 19 f0 66 57 ff d6 a3 | 10 19 f0 66 68 30 18 f0 |...fW...|...fh0..|
|00000c40| 66 57 ff d6 a3 14 19 f0 | 66 68 3d 18 f0 66 ff 15 |fW......|fh=..f..|
|00000c50| e8 10 f0 66 8b f8 68 5f | 19 f0 66 57 ff d6 a3 18 |...f..h_|..fW....|
|00000c60| 19 f0 66 68 6c 19 f0 66 | 57 ff d6 a3 00 19 f0 66 |..fhl..f|W......f|
|00000c70| 68 86 19 f0 66 57 ff d6 | a3 04 19 f0 66 68 9f 19 |h...fW..|....fh..|
|00000c80| f0 66 57 ff d6 a3 08 19 | f0 66 68 b3 19 f0 66 57 |.fW.....|.fh...fW|
|00000c90| ff d6 a3 3d 19 f0 66 68 | c5 19 f0 66 57 ff d6 a3 |...=..fh|...fW...|
|00000ca0| 0c 19 f0 66 ff 15 f0 10 | f0 66 51 a3 20 19 f0 66 |...f....|.fQ. ..f|
|00000cb0| 54 6a 28 50 ff 15 68 11 | f0 66 85 c0 5f 74 31 68 |Tj(P..h.|.f.._t1h|
|00000cc0| 24 18 f0 66 68 47 18 f0 | 66 6a 00 ff 15 6c 11 f0 |$..fhG..|fj...l..|
|00000cd0| 66 85 c0 74 14 6a 00 6a | 00 6a 00 68 20 18 f0 66 |f..t.j.j|.j.h ..f|
|00000ce0| 6a 00 57 ff 15 70 11 f0 | 66 57 ff 15 f4 10 f0 66 |j.W..p..|fW.....f|
|00000cf0| a1 f8 10 f0 66 a3 20 18 | f0 66 a1 fc 10 f0 66 a3 |....f. .|.f....f.|
|00000d00| 24 18 f0 66 a1 00 11 f0 | 66 a3 28 18 f0 66 89 35 |$..f....|f.(..f.5|
|00000d10| 2c 18 f0 66 89 35 e8 18 | f0 66 a1 e8 10 f0 66 a3 |,..f.5..|.f....f.|
|00000d20| 30 18 f0 66 a3 e0 18 f0 | 66 a1 04 11 f0 66 a3 34 |0..f....|f....f.4|
|00000d30| 18 f0 66 a1 08 11 f0 66 | a3 38 18 f0 66 a1 0c 11 |..f....f|.8..f...|
|00000d40| f0 66 a3 3c 18 f0 66 a1 | 10 11 f0 66 a3 e4 18 f0 |.f.<..f.|...f....|
|00000d50| 66 8b 35 14 11 f0 66 ff | d6 50 a3 24 19 f0 66 ff |f.5...f.|.P.$..f.|
|00000d60| 15 18 11 f0 66 a3 1c 19 | f0 66 85 c0 59 78 32 c6 |....f...|.f..Yx2.|
|00000d70| 05 3b 16 f0 66 75 c7 05 | 28 19 f0 66 d9 20 f0 66 |.;..fu..|(..f. .f|
|00000d80| c7 05 30 19 f0 66 0d 21 | f0 66 c7 05 34 19 f0 66 |..0..f.!|.f..4..f|
|00000d90| 93 25 f0 66 3c 05 73 07 | c6 05 f8 25 f0 66 ac eb |.%.f<.s.|...%.f..|
|00000da0| 27 80 3e a1 75 22 8b 46 | 01 8b 00 33 08 89 0d 77 |'.>.u".F|...3...w|
|00000db0| 26 f0 66 a1 1c 11 f0 66 | 83 c0 24 81 38 b9 00 00 |&.f....f|..$.8...|
|00000dc0| 00 75 05 a3 6e 26 f0 66 | 5f 5e 33 c0 40 c2 0c 00 |.u..n&.f|_^3.@...|
|00000dd0| 6a 00 6a 00 eb 04 6a 00 | 6a 01 6a ff ff 74 24 14 |j.j...j.|j.j..t$.|
|00000de0| ff 74 24 14 e8 77 03 00 | 00 c2 08 00 6a 00 6a 00 |.t$..w..|....j.j.|
|00000df0| eb 20 6a 00 6a 01 eb 1a | ff 74 24 08 e8 4f 00 00 |. j.j...|.t$..O..|
|00000e00| 00 50 6a 00 eb 0c ff 74 | 24 08 e8 41 00 00 00 50 |.Pj....t|$..A...P|
|00000e10| 6a 01 ff 74 24 14 ff 74 | 24 14 ff 74 24 14 e8 3d |j..t$..t|$..t$..=|
|00000e20| 03 00 00 c2 0c 00 2b c0 | eb 09 ff 74 24 04 e8 1d |......+.|...t$...|
|00000e30| 00 00 00 50 ff 74 24 18 | ff 74 24 18 ff 74 24 18 |...P.t$.|.t$..t$.|
|00000e40| ff 74 24 18 ff 74 24 18 | e8 b2 03 00 00 c2 14 00 |.t$..t$.|........|
|00000e50| 55 8b ec 83 c4 e8 a1 1c | 19 f0 66 85 c0 78 4a ff |U.......|..f..xJ.|
|00000e60| 75 08 6a 00 68 10 04 00 | 00 ff 15 1c 11 f0 66 85 |u.j.h...|......f.|
|00000e70| c0 6a 01 74 33 8d 4d e8 | 50 6a 00 6a 18 51 6a 00 |.j.t3.M.|Pj.j.Qj.|
|00000e80| 50 ff 15 00 19 f0 66 85 | c0 7c 17 59 8b 45 ec 8b |P.....f.|.|.Y.E..|
|00000e90| d4 83 c0 0c 51 6a 00 6a | 04 52 50 51 ff 15 20 11 |....Qj.j|.RPQ.. .|
|00000ea0| f0 66 ff 15 f4 10 f0 66 | 58 c9 c2 04 00 8b 54 24 |.f.....f|X.....T$|
|00000eb0| 0c 81 c2 b0 00 00 00 8b | 44 24 08 c7 42 08 ca 20 |........|D$..B.. |
|00000ec0| f0 66 89 42 14 6a 01 8f | 02 33 c0 c3 55 8b ec 83 |.f.B.j..|.3..U...|
|00000ed0| c4 ac 6a 00 83 7d 08 ff | 58 0f 84 8d 00 00 00 ff |..j..}..|X.......|
|00000ee0| 75 20 c7 45 b8 fe ff ff | ff 8f 45 c8 8b 45 18 85 |u .E....|..E..E..|
|00000ef0| c0 74 31 8b 08 85 c9 75 | 04 8b c1 eb 27 8b 50 08 |.t1....u|....'.P.|
|00000f00| 8b 40 04 83 7a 04 08 75 | 0c 81 7a 0c 00 00 01 00 |.@..z..u|..z.....|
|00000f10| 72 03 8b 52 0c 51 50 52 | 8f 45 b4 8f 45 b0 8f 45 |r..R.QPR|.E..E..E|
|00000f20| ac 8d 45 ac ff 75 08 ff | 75 0c ff 75 10 ff 75 14 |..E..u..|u..u..u.|
|00000f30| 50 ff 75 1c 8d 45 b8 8f | 45 e4 8f 45 e0 8f 45 dc |P.u..E..|E..E..E.|
|00000f40| 8f 45 d8 8f 45 d4 8f 45 | d0 c7 45 e8 ff ff ff ff |.E..E..E|..E.....|
|00000f50| ff 35 24 19 f0 66 50 e8 | 74 fe ff ff 8b 4d 18 e3 |.5$..fP.|t....M..|
|00000f60| 0b 83 39 00 74 06 ff 75 | b0 8f 41 04 c9 c2 1c 00 |..9.t..u|..A.....|
|00000f70| 55 8b ec 81 c4 f4 fc ff | ff 53 56 57 8b 75 08 85 |U.......|.SVW.u..|
|00000f80| f6 74 1f 8b c6 8d b5 fc | fe ff ff 6a 00 6a 00 68 |.t......|...j.j.h|
|00000f90| 04 01 00 00 56 6a ff 50 | 6a 00 6a 00 ff 15 24 11 |....Vj.P|j.j...$.|
|00000fa0| f0 66 8b 7d 0c 81 ff 00 | 00 01 00 72 1f 8b c7 8d |.f.}....|...r....|
|00000fb0| bd f8 fd ff ff 6a 00 6a | 00 68 04 01 00 00 57 6a |.....j.j|.h....Wj|
|00000fc0| ff 50 6a 00 6a 00 ff 15 | 24 11 f0 66 8b 5d 14 85 |.Pj.j...|$..f.]..|
|00000fd0| db 74 24 83 fb ff 74 1f | 8b c3 8d 9d f8 fd ff ff |.t$...t.|........|
|00000fe0| 6a 00 6a 00 68 04 01 00 | 00 53 6a ff 50 6a 00 6a |j.j.h...|.Sj.Pj.j|
|00000ff0| 00 ff 15 24 11 f0 66 ff | 75 20 ff 75 1c ff 75 18 |...$..f.|u .u..u.|
|00001000| 53 ff 75 10 57 56 e8 c1 | fe ff ff 5f 5e 5b c9 c2 |S.u.WV..|..._^[..|
|00001010| 1c 00 6a 00 eb 02 6a 01 | 6a 00 6a 00 6a 01 ff 74 |..j...j.|j.j.j..t|
|00001020| 24 18 ff 74 24 18 e8 41 | 00 00 00 c2 08 00 6a 00 |$..t$..A|......j.|
|00001030| eb 02 6a 01 6a 02 ff 74 | 24 18 ff 74 24 18 ff 74 |..j.j..t|$..t$..t|
|00001040| 24 18 ff 74 24 18 e8 21 | 00 00 00 c2 10 00 6a 00 |$..t$..!|......j.|
|00001050| eb 02 6a 01 6a 01 6a 00 | ff 74 24 18 ff 74 24 18 |..j.j.j.|.t$..t$.|
|00001060| ff 74 24 18 e8 03 00 00 | 00 c2 0c 00 55 8b ec 53 |.t$.....|....U..S|
|00001070| 56 57 6a 00 68 a4 02 00 | 00 e8 72 02 00 00 6a 01 |VWj.h...|..r...j.|
|00001080| 85 c0 8b f8 58 0f 84 ce | 00 00 00 57 be 58 18 f0 |....X...|...W.X..|
|00001090| 66 b9 27 00 00 00 f3 a5 | 5b 8b 75 08 39 4d 1c 74 |f.'.....|[.u.9M.t|
|000010a0| 23 51 51 68 04 01 00 00 | 57 6a ff 56 51 51 ff 15 |#QQh....|Wj.VQQ..|
|000010b0| 24 11 f0 66 85 c0 57 5f | 6a 01 58 0f 84 8f 00 00 |$..f..W_|j.X.....|
|000010c0| 00 57 eb 11 57 b9 04 01 | 00 00 ac aa 84 c0 74 05 |.W..W...|......t.|
|000010d0| 49 74 e4 eb f5 5f 2b c9 | 81 c7 04 01 00 00 8b 75 |It..._+.|.......u|
|000010e0| 14 3b ce 89 4d 14 74 0e | 89 37 81 fe 00 00 01 00 |.;..M.t.|.7......|
|000010f0| 72 04 88 0f eb a6 8b 4d | 18 89 b3 94 00 00 00 8b |r......M|........|
|00001100| 45 10 e3 23 49 75 0a c6 | 43 43 7c c6 43 46 00 eb |E..#Iu..|CC|.CF..|
|00001110| 16 ff 35 28 18 f0 66 8f | 83 88 00 00 00 66 c7 43 |..5(..f.|.....f.C|
|00001120| 43 75 e2 c6 43 46 06 89 | 83 98 00 00 00 ff 75 0c |Cu..CF..|......u.|
|00001130| e8 1b fd ff ff 8d 8b 75 | 00 00 00 50 51 68 a4 02 |.......u|...PQh..|
|00001140| 00 00 53 68 30 75 00 00 | ff 75 0c e8 af 00 00 00 |..Sh0u..|.u......|
|00001150| 50 8b fb e8 c5 01 00 00 | 58 5f 5e 5b c9 c2 18 00 |P.......|X_^[....|
|00001160| 55 8b ec 53 56 57 6a 00 | 68 38 05 00 00 e8 7e 01 |U..SVWj.|h8....~.|
|00001170| 00 00 6a 01 85 c0 8b f8 | 58 74 75 57 be 10 14 f0 |..j.....|XtuW....|
|00001180| 66 b9 0d 01 00 00 f3 a5 | 5b b8 fe ff ff ff 8b 75 |f.......|[......u|
|00001190| 08 39 06 75 06 ab 8b c6 | ab eb 31 39 4d 14 74 1c |.9.u....|..19M.t.|
|000011a0| 51 51 68 04 01 00 00 57 | 6a ff 56 51 51 ff 15 24 |QQh....W|j.VQQ..$|
|000011b0| 11 f0 66 85 c0 6a 01 58 | 74 2d eb 10 b9 04 01 00 |..f..j.X|t-......|
|000011c0| 00 ac aa 84 c0 74 05 49 | 74 eb eb f5 8d 83 47 03 |.....t.I|t.....G.|
|000011d0| 00 00 ff 75 18 50 68 38 | 05 00 00 53 ff 75 10 ff |...u.Ph8|...S.u..|
|000011e0| 75 0c e8 18 00 00 00 50 | 8b fb e8 2e 01 00 00 58 |u......P|.......X|
|000011f0| 83 f8 09 76 03 6a 04 58 | 5f 5e 5b c9 c2 14 00 55 |...v.j.X|_^[....U|
|00001200| 8b ec 53 56 57 2b c0 68 | ad 1c f0 66 64 ff 30 64 |..SVW+.h|...fd.0d|
|00001210| 89 20 50 ff 75 14 e8 d5 | 00 00 00 85 c0 8b f8 6a |. P.u...|.......j|
|00001220| 03 58 0f 84 a2 00 00 00 | 57 8b 75 10 8b 4d 14 f3 |.X......|W.u..M..|
|00001230| a4 5e 8b 45 08 3b 05 24 | 19 f0 66 75 0e 8b 45 18 |.^.E.;.$|..fu..E.|
|00001240| 2b 45 10 c6 04 06 c3 ff | d6 eb 76 a1 1c 19 f0 66 |+E......|..v....f|
|00001250| b9 38 04 00 00 ba 2c 19 | f0 66 85 c0 78 15 83 7d |.8....,.|.f..x..}|
|00001260| 1c 00 c7 02 58 22 f0 66 | 74 09 c7 02 2c 21 f0 66 |....X".f|t...,!.f|
|00001270| 83 c9 02 ff 75 08 6a 00 | 51 ff 15 1c 11 f0 66 85 |....u.j.|Q.....f.|
|00001280| c0 8b d8 6a 02 58 74 39 | 68 00 00 00 08 ff 75 14 |...j.Xt9|h.....u.|
|00001290| ff 15 28 19 f0 66 85 c0 | 8b f8 6a 03 58 74 19 8b |..(..f..|..j.Xt..|
|000012a0| 4d 18 2b 4d 10 03 ce 51 | ff 75 14 56 ff 75 0c ff |M.+M...Q|.u.V.u..|
|000012b0| 75 08 ff 15 2c 19 f0 66 | 50 53 ff 15 f4 10 f0 66 |u...,..f|PS.....f|
|000012c0| 58 8b fe 50 e8 54 00 00 | 00 58 64 8f 05 00 00 00 |X..P.T..|.Xd.....|
|000012d0| 00 59 5f 5e 5b c9 c2 18 | 00 6a 40 68 00 10 00 00 |.Y_^[...|.j@h....|
|000012e0| ff 74 24 0c 6a 00 53 ff | 15 f4 18 f0 66 c2 08 00 |.t$.j.S.|....f...|
|000012f0| 81 4c 24 08 00 10 00 00 | 6a 40 ff 74 24 0c ff 74 |.L$.....|j@.t$..t|
|00001300| 24 0c 6a 00 ff 15 28 11 | f0 66 c2 08 00 68 00 80 |$.j...(.|.f...h..|
|00001310| 00 00 6a 00 57 53 ff 15 | f8 18 f0 66 c3 68 00 80 |..j.WS..|...f.h..|
|00001320| 00 00 6a 00 57 ff 15 2c | 11 f0 66 c3 55 8b ec 81 |..j.W..,|..f.U...|
|00001330| c4 5c fe ff ff 56 83 65 | fc 00 8d b5 5c fe ff ff |.\...V.e|....\...|
|00001340| 56 ff 75 08 6a 00 6a 5a | e8 43 03 00 00 85 c0 6a |V.u.j.jZ|.C.....j|
|00001350| 04 0f 84 c4 00 00 00 57 | be 38 19 f0 66 8b 7d 18 |.......W|.8..f.}.|
|00001360| a5 a5 a5 5f 6a 00 ff 75 | 14 ff 75 10 57 53 ff 15 |..._j..u|..u.WS..|
|00001370| 30 11 f0 66 85 c0 0f 84 | 8f 00 00 00 50 8b d4 8d |0..f....|....P...|
|00001380| 4d fc 6a 00 52 51 57 6a | 00 6a 00 6a 00 6a 01 6a |M.j.RQWj|.j.j.j.j|
|00001390| 00 53 ff 15 08 19 f0 66 | 85 c0 5e 7c 6e 8d 4d e0 |.S.....f|..^|n.M.|
|000013a0| 6a 00 6a 1c 51 6a 00 56 | ff 15 0c 19 f0 66 85 c0 |j.j.Qj.V|.....f..|
|000013b0| 7c 1c 8b 45 e4 85 c0 74 | 15 8d 4d fc 05 0c 0e 00 ||..E...t|..M.....|
|000013c0| 00 6a 00 6a 04 51 50 53 | ff 15 20 11 f0 66 56 ff |.j.j.QPS|.. ..fV.|
|000013d0| 15 34 11 f0 66 ff 75 0c | 56 ff 15 38 11 f0 66 3d |.4..f.u.|V..8..f=|
|000013e0| 02 01 00 00 75 07 6a 09 | 8f 04 24 eb 17 8d 4d e0 |....u.j.|..$...M.|
|000013f0| 6a 00 6a 1c 51 6a 00 56 | ff 15 0c 19 f0 66 ff 75 |j.j.Qj.V|.....f.u|
|00001400| e0 8f 04 24 56 ff 15 f4 | 10 f0 66 8d b5 5c fe ff |...$V...|..f..\..|
|00001410| ff 56 6a ff 56 e8 31 04 | 00 00 5e ad 85 c0 74 0a |.Vj.V.1.|..^...t.|
|00001420| 50 ff 15 f4 10 f0 66 ad | eb f1 83 3c 24 09 74 22 |P.....f.|...<$.t"|
|00001430| 57 8b 7d fc 85 ff 74 05 | e8 d0 fe ff ff 5f e8 ca |W.}...t.|....._..|
|00001440| fe ff ff 85 c0 75 0b 83 | 3c 24 00 75 05 6a 05 8f |.....u..|<$.u.j..|
|00001450| 04 24 58 5e c9 c2 14 00 | 55 8b ec 81 c4 cc fc ff |.$X^....|U.......|
|00001460| ff 56 2b c0 6a 04 8f 45 | fc 21 45 ec c7 45 e8 ff |.V+.j..E|.!E..E..|
|00001470| ff ff 7f ff 75 0c 8f 45 | f0 8d b5 64 fe ff ff 56 |....u..E|...d...V|
|00001480| ff 75 08 50 6a 5a e8 05 | 02 00 00 85 c0 0f 84 d1 |.u.PjZ..|........|
|00001490| 01 00 00 89 4d f4 8b f0 | 50 ff 15 3c 11 f0 66 89 |....M...|P..<..f.|
|000014a0| 45 f8 40 75 07 c7 45 f8 | 7f 00 00 00 56 ff 15 34 |E.@u..E.|....V..4|
|000014b0| 11 f0 66 8b 45 18 66 c7 | 00 eb fe 6a 00 ff 75 14 |..f.E.f.|...j..u.|
|000014c0| ff 75 10 57 53 ff 15 30 | 11 f0 66 85 c0 74 33 53 |.u.WS..0|..f..t3S|
|000014d0| ff 15 40 11 f0 66 85 c0 | 74 28 50 ff 35 20 19 f0 |..@..f..|t(P.5 ..|
|000014e0| 66 ff 15 40 11 f0 66 85 | c0 5a 74 16 3b c2 74 18 |f..@..f.|.Zt.;.t.|
|000014f0| 89 45 ec 52 ff 35 20 19 | f0 66 ff 15 44 11 f0 66 |.E.R.5 .|.f..D..f|
|00001500| 85 c0 0f 84 31 01 00 00 | 56 ff 15 48 11 f0 66 3b |....1...|V..H..f;|
|00001510| 45 e8 74 21 50 6a fe ff | 15 48 11 f0 66 3b 45 e8 |E.t!Pj..|.H..f;E.|
|00001520| 5a 74 12 3b c2 74 14 89 | 45 e8 52 6a fe ff 15 4c |Zt.;.t..|E.Rj...L|
|00001530| 11 f0 66 85 c0 0f 84 ea | 00 00 00 50 6a 01 68 86 |..f.....|...Pj.h.|
|00001540| 00 00 00 ff 75 f4 ff 15 | 60 11 f0 66 56 57 8d 85 |....u...|`..fVW..|
|00001550| cc fc ff ff c7 00 03 00 | 01 00 50 50 56 ff 15 50 |........|..PPV..P|
|00001560| 11 f0 66 5e 8d bd 98 fd | ff ff 6a 33 8b d7 59 f3 |..f^....|..j3..Y.|
|00001570| a5 85 c0 5f 5e 0f 84 97 | 00 00 00 83 aa c4 00 00 |..._^...|........|
|00001580| 00 50 83 32 02 89 ba b8 | 00 00 00 52 56 ff 15 54 |.P.2....|...RV..T|
|00001590| 11 f0 66 83 b5 98 fd ff | ff 02 85 c0 74 74 8b 45 |..f.....|....tt.E|
|000015a0| 10 01 7d 18 29 45 18 57 | 8d bd 98 fd ff ff 56 ff |..}.)E.W|......V.|
|000015b0| 15 34 11 f0 66 48 7f f6 | 68 00 01 00 00 ff 15 58 |.4..fH..|h......X|
|000015c0| 11 f0 66 56 ff 15 3c 11 | f0 66 57 56 ff 15 50 11 |..fV..<.|.fWV..P.|
|000015d0| f0 66 8b 87 b8 00 00 00 | 3b 45 18 74 11 83 7d 0c |.f......|;E.t..}.|
|000015e0| ff 74 cb 81 6d f0 00 01 | 00 00 7f c2 eb 15 8b 87 |.t..m...|........|
|000015f0| b0 00 00 00 8b 8f ac 00 | 00 00 89 45 fc 89 8d 7c |........|...E...||
|00001600| fd ff ff 8d 85 cc fc ff | ff 5f 50 56 ff 15 54 11 |........|._PV..T.|
|00001610| f0 66 8b 45 e8 3d ff ff | ff 7f 74 09 50 6a fe ff |.f.E.=..|..t.Pj..|
|00001620| 15 4c 11 f0 66 8b 45 ec | 85 c0 74 0d 50 ff 35 20 |.L..f.E.|..t.P.5 |
|00001630| 19 f0 66 ff 15 44 11 f0 | 66 ff 45 f0 74 0a ff 4d |..f..D..|f.E.t..M|
|00001640| f0 7d 05 6a 09 8f 45 fc | ff 4d f8 7e 09 56 ff 15 |.}.j..E.|.M.~.V..|
|00001650| 3c 11 f0 66 eb f2 8d b5 | 64 fe ff ff 6a ff 56 e8 |<..f....|d...j.V.|
|00001660| e7 01 00 00 ad 85 c0 74 | 0a 50 ff 15 f4 10 f0 66 |.......t|.P.....f|
|00001670| ad eb f1 ff 15 30 19 f0 | 66 85 c0 75 0b 83 7d fc |.....0..|f..u..}.|
|00001680| 00 75 05 6a 05 8f 45 fc | 8b 45 fc 5e c9 c2 14 00 |.u.j..E.|.E.^....|
|00001690| 55 8b ec 81 c4 34 ff ff | ff 53 56 57 8b 75 14 8d |U....4..|.SVW.u..|
|000016a0| bd 34 ff ff ff 56 ff 75 | 10 ff 75 0c ff 75 08 ff |.4...V.u|..u..u..|
|000016b0| 15 34 19 f0 66 85 c0 75 | 24 c7 07 05 00 01 00 ad |.4..f..u|$.......|
|000016c0| 85 c0 74 22 8b d8 ad 53 | ff 15 3c 11 f0 66 40 75 |..t"...S|..<..f@u|
|000016d0| ee 83 ee 08 56 ff 75 14 | e8 6e 01 00 00 2b c0 eb |....V.u.|.n...+..|
|000016e0| 2f 83 ce ff eb ee 8b 75 | 14 ad 8b d8 85 c0 74 f1 |/......u|......t.|
|000016f0| ad 50 57 53 ff 15 50 11 | f0 66 85 c0 59 74 ea 8c |.PWS..P.|.f..Yt..|
|00001700| ca 66 83 7d c4 00 74 e1 | 66 3b 55 f0 75 db 8b c3 |.f.}..t.|f;U.u...|
|00001710| 5f 5e 5b c9 c2 10 00 55 | 8b ec 83 c4 e4 53 56 57 |_^[....U|.....SVW|
|00001720| 8b 7d 14 ff 75 10 6a 04 | ff 15 fc 18 f0 66 8b d8 |.}..u.j.|.....f..|
|00001730| 40 74 56 6a 30 8f 45 14 | 8d 75 e4 c7 06 1c 00 00 |@tVj0.E.|.u......|
|00001740| 00 56 53 ff 15 10 19 f0 | 66 85 c0 74 33 8b 46 0c |.VS.....|f..t3.F.|
|00001750| 3b 45 10 75 1e ff 76 08 | ff 75 0c ff 75 08 e8 08 |;E.u..v.|.u..u...|
|00001760| 01 00 00 85 c0 74 16 ab | 8b 46 08 ab 2b c0 ff 4d |.....t..|.F..+..M|
|00001770| 14 7c 0d 56 53 ff 15 14 | 19 f0 66 eb cc 83 c8 ff |.|.VS...|..f.....|
|00001780| 50 53 ff 15 f4 10 f0 66 | 58 83 27 00 5f 5e 5b c9 |PS.....f|X.'._^[.|
|00001790| c2 10 00 55 8b ec 83 c4 | fc 53 56 57 6a 30 8f 45 |...U....|.SVWj0.E|
|000017a0| fc bb 00 50 00 00 8b 7d | 14 6a 00 53 e8 3f fb ff |...P...}|.j.S.?..|
|000017b0| ff 85 c0 8b f0 8d 40 ff | 0f 84 83 00 00 00 6a 00 |......@.|......j.|
|000017c0| 53 56 6a 05 ff 15 04 19 | f0 66 3d 04 00 00 c0 75 |SVj.....|.f=....u|
|000017d0| 0f 8b fe e8 45 fb ff ff | 81 c3 00 10 00 00 eb c6 |....E...|........|
|000017e0| 85 c0 7c 52 8b ce 8b 5d | 10 eb 07 83 39 00 74 20 |..|R...]|....9.t |
|000017f0| 03 09 3b 59 44 75 f4 ba | dc 00 00 00 ff 49 04 7c |..;YDu..|.....I.||
|00001800| 0f 8b 04 0a ab ab ff 4d | fc 7e 05 83 c2 40 eb ec |.......M|.~...@..|
|00001810| 2b c0 ab 8b 7d 14 8b 07 | 85 c0 74 1a 50 53 ff 75 |+...}...|..t.PS.u|
|00001820| 0c ff 75 08 e8 6b 00 00 | 00 85 c0 74 06 ab 83 c7 |..u..k..|...t....|
|00001830| 04 eb e3 83 c8 ff 50 57 | 8b fe e8 de fa ff ff 5f |......PW|......._|
|00001840| 58 83 27 00 5f 5e 5b c9 | c2 10 00 55 8b ec 56 8b |X.'._^[.|...U..V.|
|00001850| 75 08 3b 75 0c 73 0f ad | 85 c0 74 0a 50 ff 15 34 |u.;u.s..|..t.P..4|
|00001860| 11 f0 66 ad eb ec 5e c9 | c2 08 00 2b c0 ba 78 56 |..f...^.|...+..xV|
|00001870| 34 12 85 d2 74 1b b8 78 | 56 34 12 85 c0 74 12 33 |4...t..x|V4...t.3|
|00001880| 44 24 0c ff 74 24 0c ff | 74 24 0c ff 74 24 0c ff |D$..t$..|t$..t$..|
|00001890| d2 c2 0c 00 55 8b ec 83 | c4 e8 8b 45 0c f7 d8 1b |....U...|...E....|
|000018a0| c0 83 e0 02 89 45 f4 8d | 55 10 2b c0 c7 45 e8 18 |.....E..|U.+..E..|
|000018b0| 00 00 00 89 45 ec 89 45 | f0 89 45 f8 89 45 fc 8d |....E..E|..E..E..|
|000018c0| 4d e8 8d 45 08 52 51 ff | 75 08 50 ff 15 18 19 f0 |M..E.RQ.|u.P.....|
|000018d0| 66 85 c0 7d 04 83 65 08 | 00 8b 45 08 c9 c2 10 00 |f..}..e.|..E.....|
|000018e0| 00 00 00 00 b9 8c f1 38 | 00 00 00 00 a8 27 00 00 |.......8|.....'..|
|000018f0| 01 00 00 00 10 00 00 00 | 10 00 00 00 08 27 00 00 |........|.....'..|
|00001900| 48 27 00 00 88 27 00 00 | d0 1b 00 00 ec 1b 00 00 |H'...'..|........|
|00001910| f8 1b 00 00 06 1c 00 00 | f2 1b 00 00 d6 1b 00 00 |........|........|
|00001920| cc 1c 00 00 70 1d 00 00 | 12 1e 00 00 16 1e 00 00 |....p...|........|
|00001930| 2e 1e 00 00 32 1e 00 00 | 26 1c 00 00 2a 1c 00 00 |....2...|&...*...|
|00001940| 4e 1e 00 00 52 1e 00 00 | b5 27 00 00 c8 27 00 00 |N...R...|.'...'..|
|00001950| df 27 00 00 f8 27 00 00 | 11 28 00 00 28 28 00 00 |.'...'..|.(..((..|
|00001960| 3b 28 00 00 44 28 00 00 | 4d 28 00 00 5d 28 00 00 |;(..D(..|M(..](..|
|00001970| 6d 28 00 00 7a 28 00 00 | 87 28 00 00 99 28 00 00 |m(..z(..|.(...(..|
|00001980| ad 28 00 00 bb 28 00 00 | 00 00 01 00 02 00 03 00 |.(...(..|........|
|00001990| 04 00 05 00 06 00 07 00 | 08 00 09 00 0a 00 0b 00 |........|........|
|000019a0| 0c 00 0d 00 0e 00 0f 00 | 41 70 69 48 6f 6f 6b 73 |........|ApiHooks|
|000019b0| 2e 64 6c 6c 00 45 73 74 | 61 62 6c 69 73 68 41 70 |.dll.Est|ablishAp|
|000019c0| 69 48 6f 6f 6b 73 41 00 | 45 73 74 61 62 6c 69 73 |iHooksA.|Establis|
|000019d0| 68 41 70 69 48 6f 6f 6b | 73 54 69 6d 65 41 00 45 |hApiHook|sTimeA.E|
|000019e0| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|000019f0| 54 69 6d 65 4e 54 41 00 | 45 73 74 61 62 6c 69 73 |TimeNTA.|Establis|
|00001a00| 68 41 70 69 48 6f 6f 6b | 73 54 69 6d 65 4e 54 57 |hApiHook|sTimeNTW|
|00001a10| 00 45 73 74 61 62 6c 69 | 73 68 41 70 69 48 6f 6f |.Establi|shApiHoo|
|00001a20| 6b 73 54 69 6d 65 57 00 | 45 73 74 61 62 6c 69 73 |ksTimeW.|Establis|
|00001a30| 68 41 70 69 48 6f 6f 6b | 73 57 00 48 6f 6f 6b 41 |hApiHook|sW.HookA|
|00001a40| 70 69 41 00 48 6f 6f 6b | 41 70 69 57 00 49 73 4d |piA.Hook|ApiW.IsM|
|00001a50| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 41 00 49 73 4d |oduleLoa|dedA.IsM|
|00001a60| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 57 00 4c 6f 61 |oduleLoa|dedW.Loa|
|00001a70| 64 41 6e 64 43 61 6c 6c | 41 00 4c 6f 61 64 41 6e |dAndCall|A.LoadAn|
|00001a80| 64 43 61 6c 6c 57 00 52 | 65 6d 6f 74 65 45 78 65 |dCallW.R|emoteExe|
|00001a90| 63 75 74 65 54 69 6d 65 | 00 52 65 6d 6f 74 65 45 |cuteTime|.RemoteE|
|00001aa0| 78 65 63 75 74 65 54 69 | 6d 65 4e 54 00 55 6e 6c |xecuteTi|meNT.Unl|
|00001ab0| 6f 61 64 4d 6f 64 75 6c | 65 41 00 55 6e 6c 6f 61 |oadModul|eA.Unloa|
|00001ac0| 64 4d 6f 64 75 6c 65 57 | 00 00 00 00 00 00 00 00 |dModuleW|........|
|00001ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001c00| 00 10 00 00 bc 00 00 00 | 28 39 2c 39 30 39 34 39 |........|(9,90949|
|00001c10| ef 39 f6 39 fc 39 02 3a | 09 3a 11 3a 16 3a 1e 3a |.9.9.9.:|.:.:.:.:|
|00001c20| 23 3a 2b 3a 30 3a 38 3a | 3d 3a 45 3a 4a 3a 50 3a |#:+:0:8:|=:E:J:P:|
|00001c30| 57 3a 5f 3a 64 3a 6c 3a | 71 3a 79 3a 7e 3a 86 3a |W:_:d:l:|q:y:~:.:|
|00001c40| 8b 3a 93 3a 98 3a a0 3a | a6 3a ac 3a b6 3a c0 3a |.:.:.:.:|.:.:.:.:|
|00001c50| c5 3a cd 3a dc 3a e5 3a | ec 3a f1 3a f6 3a fb 3a |.:.:.:.:|.:.:.:.:|
|00001c60| 00 3b 05 3b 0a 3b 10 3b | 16 3b 1b 3b 20 3b 25 3b |.;.;.;.;|.;.; ;%;|
|00001c70| 2a 3b 2f 3b 34 3b 39 3b | 3e 3b 43 3b 48 3b 4d 3b |*;/;4;9;|>;C;H;M;|
|00001c80| 53 3b 5b 3b 61 3b 66 3b | 71 3b 78 3b 7c 3b 82 3b |S;[;a;f;|q;x;|;.;|
|00001c90| 86 3b 8c 3b 90 3b 9a 3b | af 3b b4 3b c4 3b 57 3c |.;.;.;.;|.;.;.;W<|
|00001ca0| 6b 3c 83 3c 9e 3c a4 3c | be 3c 52 3d 9e 3d c8 3d |k<.<.<.<|.<R=.=.=|
|00001cb0| f3 3d 8d 3e b0 3e 13 3f | 7d 3f af 3f 00 20 00 00 |.=.>.>.?|}?.?. ..|
|00001cc0| 80 00 00 00 08 30 37 30 | 4c 30 56 30 64 30 6c 30 |.....070|L0V0d0l0|
|00001cd0| 7b 30 92 30 b4 30 bc 30 | e9 30 06 31 18 31 27 31 |{0.0.0.0|.0.1.1'1|
|00001ce0| 59 31 70 31 94 31 aa 31 | ca 31 d1 31 db 31 fa 31 |Y1p1.1.1|.1.1.1.1|
|00001cf0| 07 32 23 32 9b 32 af 32 | c7 32 d2 32 dd 32 e3 32 |.2#2.2.2|.2.2.2.2|
|00001d00| f6 32 fc 32 0b 33 19 33 | 2f 33 48 33 5f 33 8f 33 |.2.2.3.3|/3H3_3.3|
|00001d10| b1 33 bf 33 c6 33 ce 33 | 0e 34 21 34 2f 34 35 34 |.3.3.3.3|.4!4/454|
|00001d20| 50 34 6c 34 75 34 b1 34 | ca 34 f6 34 2a 35 45 35 |P4l4u4.4|.4.4*5E5|
|00001d30| 77 35 84 35 c6 35 5f 36 | cd 36 00 00 00 00 00 00 |w5.5.5_6|.6......|
|00001d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+