| / Cracking 2
/ Cracking II..iso / Tools / ApiHooks 2.2 / hdk / ApiHooks.lib
| < prev | next > |
| AR Archive | 2000-04-09 | 11.9 KB |
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | AR Archive (archive/arArchive) | magic | Supported |
| 100% | dexvert | PAK/ARC Compressed Archive (archive/arc) | magic | Supported |
| 1% | dexvert | COFF Library (other/coffLibrary) | magic | Unsupported |
| 1% | dexvert | Sibelius Music / Score (music/sibeliusMusicScore) | ext | Unsupported |
| 1% | dexvert | IntelliFont Font (font/intelliFont) | ext | Unsupported |
| 1% | dexvert | Amiga Hunk Library/Object (other/amigaLibrary) | ext | Unsupported |
| 1% | dexvert | Amiga Shared Library (other/amigaSharedLibrary) | ext | Unsupported |
| 1% | dexvert | Chess Assistant File (other/chessAssistant) | ext | Unsupported |
| 1% | dexvert | Maple Library (other/mapleLibrary) | ext | Unsupported |
| 100% | file | current ar archive | default | |
| 99% | file | data | default | |
| 77% | TrID | Common Object File Format (COFF) Library | default | |
| 22% | TrID | ar archive | default | |
| 100% | siegfried | fmt/1835 Archiver Format | default | |
| 100% | lsar | Ar | default | |
| 100% | gt2 | Microsoft C/C++ Bibliothek | default (weak) | |
| 100% | detectItEasy | Format: COFF Library (.LIB)(I386) | default (weak) | |
| 100% | xdgMime | application/x-archive | default |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 21 3c 61 72 63 68 3e 0a | 2f 20 20 20 20 20 20 20 |!<arch>.|/ |
|00000010| 20 20 20 20 20 20 20 20 | 39 35 35 32 37 30 31 36 | |95527016|
|00000020| 38 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |8 | |
|00000030| 30 20 20 20 20 20 20 20 | 39 39 32 20 20 20 20 20 |0 |992 |
|00000040| 20 20 60 0a 00 00 00 23 | 00 00 08 4a 00 00 0a dc | `....#|...J....|
|00000050| 00 00 0b 98 00 00 0c 70 | 00 00 0c 70 00 00 0e a6 |.......p|...p....|
|00000060| 00 00 0e a6 00 00 10 e4 | 00 00 10 e4 00 00 13 26 |........|.......&|
|00000070| 00 00 13 26 00 00 15 68 | 00 00 15 68 00 00 17 a6 |...&...h|...h....|
|00000080| 00 00 17 a6 00 00 19 dc | 00 00 19 dc 00 00 1b fe |........|........|
|00000090| 00 00 1b fe 00 00 1e 20 | 00 00 1e 20 00 00 20 4e |....... |... .. N|
|000000a0| 00 00 20 4e 00 00 22 7c | 00 00 22 7c 00 00 24 a6 |.. N.."||.."|..$.|
|000000b0| 00 00 24 a6 00 00 26 d0 | 00 00 26 d0 00 00 29 04 |..$...&.|..&...).|
|000000c0| 00 00 29 04 00 00 2b 3c | 00 00 2b 3c 00 00 2d 68 |..)...+<|..+<..-h|
|000000d0| 00 00 2d 68 5f 5f 49 4d | 50 4f 52 54 5f 44 45 53 |..-h__IM|PORT_DES|
|000000e0| 43 52 49 50 54 4f 52 5f | 41 70 69 48 6f 6f 6b 73 |CRIPTOR_|ApiHooks|
|000000f0| 00 5f 5f 4e 55 4c 4c 5f | 49 4d 50 4f 52 54 5f 44 |.__NULL_|IMPORT_D|
|00000100| 45 53 43 52 49 50 54 4f | 52 00 7f 41 70 69 48 6f |ESCRIPTO|R..ApiHo|
|00000110| 6f 6b 73 5f 4e 55 4c 4c | 5f 54 48 55 4e 4b 5f 44 |oks_NULL|_THUNK_D|
|00000120| 41 54 41 00 5f 45 73 74 | 61 62 6c 69 73 68 41 70 |ATA._Est|ablishAp|
|00000130| 69 48 6f 6f 6b 73 41 40 | 38 00 5f 5f 69 6d 70 5f |iHooksA@|8.__imp_|
|00000140| 5f 45 73 74 61 62 6c 69 | 73 68 41 70 69 48 6f 6f |_Establi|shApiHoo|
|00000150| 6b 73 41 40 38 00 5f 45 | 73 74 61 62 6c 69 73 68 |ksA@8._E|stablish|
|00000160| 41 70 69 48 6f 6f 6b 73 | 54 69 6d 65 41 40 31 32 |ApiHooks|TimeA@12|
|00000170| 00 5f 5f 69 6d 70 5f 5f | 45 73 74 61 62 6c 69 73 |.__imp__|Establis|
|00000180| 68 41 70 69 48 6f 6f 6b | 73 54 69 6d 65 41 40 31 |hApiHook|sTimeA@1|
|00000190| 32 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |2._Estab|lishApiH|
|000001a0| 6f 6f 6b 73 54 69 6d 65 | 4e 54 41 40 31 32 00 5f |ooksTime|NTA@12._|
|000001b0| 5f 69 6d 70 5f 5f 45 73 | 74 61 62 6c 69 73 68 41 |_imp__Es|tablishA|
|000001c0| 70 69 48 6f 6f 6b 73 54 | 69 6d 65 4e 54 41 40 31 |piHooksT|imeNTA@1|
|000001d0| 32 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |2._Estab|lishApiH|
|000001e0| 6f 6f 6b 73 54 69 6d 65 | 4e 54 57 40 31 32 00 5f |ooksTime|NTW@12._|
|000001f0| 5f 69 6d 70 5f 5f 45 73 | 74 61 62 6c 69 73 68 41 |_imp__Es|tablishA|
|00000200| 70 69 48 6f 6f 6b 73 54 | 69 6d 65 4e 54 57 40 31 |piHooksT|imeNTW@1|
|00000210| 32 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |2._Estab|lishApiH|
|00000220| 6f 6f 6b 73 54 69 6d 65 | 57 40 31 32 00 5f 5f 69 |ooksTime|W@12.__i|
|00000230| 6d 70 5f 5f 45 73 74 61 | 62 6c 69 73 68 41 70 69 |mp__Esta|blishApi|
|00000240| 48 6f 6f 6b 73 54 69 6d | 65 57 40 31 32 00 5f 45 |HooksTim|eW@12._E|
|00000250| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|00000260| 57 40 38 00 5f 5f 69 6d | 70 5f 5f 45 73 74 61 62 |W@8.__im|p__Estab|
|00000270| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 57 40 38 00 |lishApiH|ooksW@8.|
|00000280| 5f 48 6f 6f 6b 41 70 69 | 41 40 32 38 00 5f 5f 69 |_HookApi|A@28.__i|
|00000290| 6d 70 5f 5f 48 6f 6f 6b | 41 70 69 41 40 32 38 00 |mp__Hook|ApiA@28.|
|000002a0| 5f 48 6f 6f 6b 41 70 69 | 57 40 32 38 00 5f 5f 69 |_HookApi|W@28.__i|
|000002b0| 6d 70 5f 5f 48 6f 6f 6b | 41 70 69 57 40 32 38 00 |mp__Hook|ApiW@28.|
|000002c0| 5f 49 73 4d 6f 64 75 6c | 65 4c 6f 61 64 65 64 41 |_IsModul|eLoadedA|
|000002d0| 40 38 00 5f 5f 69 6d 70 | 5f 5f 49 73 4d 6f 64 75 |@8.__imp|__IsModu|
|000002e0| 6c 65 4c 6f 61 64 65 64 | 41 40 38 00 5f 49 73 4d |leLoaded|A@8._IsM|
|000002f0| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 57 40 38 00 5f |oduleLoa|dedW@8._|
|00000300| 5f 69 6d 70 5f 5f 49 73 | 4d 6f 64 75 6c 65 4c 6f |_imp__Is|ModuleLo|
|00000310| 61 64 65 64 57 40 38 00 | 5f 4c 6f 61 64 41 6e 64 |adedW@8.|_LoadAnd|
|00000320| 43 61 6c 6c 41 40 31 36 | 00 5f 5f 69 6d 70 5f 5f |CallA@16|.__imp__|
|00000330| 4c 6f 61 64 41 6e 64 43 | 61 6c 6c 41 40 31 36 00 |LoadAndC|allA@16.|
|00000340| 5f 4c 6f 61 64 41 6e 64 | 43 61 6c 6c 57 40 31 36 |_LoadAnd|CallW@16|
|00000350| 00 5f 5f 69 6d 70 5f 5f | 4c 6f 61 64 41 6e 64 43 |.__imp__|LoadAndC|
|00000360| 61 6c 6c 57 40 31 36 00 | 5f 52 65 6d 6f 74 65 45 |allW@16.|_RemoteE|
|00000370| 78 65 63 75 74 65 54 69 | 6d 65 40 32 30 00 5f 5f |xecuteTi|me@20.__|
|00000380| 69 6d 70 5f 5f 52 65 6d | 6f 74 65 45 78 65 63 75 |imp__Rem|oteExecu|
|00000390| 74 65 54 69 6d 65 40 32 | 30 00 5f 52 65 6d 6f 74 |teTime@2|0._Remot|
|000003a0| 65 45 78 65 63 75 74 65 | 54 69 6d 65 4e 54 40 32 |eExecute|TimeNT@2|
|000003b0| 30 00 5f 5f 69 6d 70 5f | 5f 52 65 6d 6f 74 65 45 |0.__imp_|_RemoteE|
|000003c0| 78 65 63 75 74 65 54 69 | 6d 65 4e 54 40 32 30 00 |xecuteTi|meNT@20.|
|000003d0| 5f 55 6e 6c 6f 61 64 4d | 6f 64 75 6c 65 41 40 31 |_UnloadM|oduleA@1|
|000003e0| 32 00 5f 5f 69 6d 70 5f | 5f 55 6e 6c 6f 61 64 4d |2.__imp_|_UnloadM|
|000003f0| 6f 64 75 6c 65 41 40 31 | 32 00 5f 55 6e 6c 6f 61 |oduleA@1|2._Unloa|
|00000400| 64 4d 6f 64 75 6c 65 57 | 40 31 32 00 5f 5f 69 6d |dModuleW|@12.__im|
|00000410| 70 5f 5f 55 6e 6c 6f 61 | 64 4d 6f 64 75 6c 65 57 |p__Unloa|dModuleW|
|00000420| 40 31 32 00 2f 20 20 20 | 20 20 20 20 20 20 20 20 |@12./ | |
|00000430| 20 20 20 20 39 35 35 32 | 37 30 31 36 38 20 20 20 | 9552|70168 |
|00000440| 20 20 20 20 20 20 20 20 | 20 20 20 20 30 20 20 20 | | 0 |
|00000450| 20 20 20 20 31 30 30 32 | 20 20 20 20 20 20 60 0a | 1002| `.|
|00000460| 13 00 00 00 4a 08 00 00 | dc 0a 00 00 98 0b 00 00 |....J...|........|
|00000470| 70 0c 00 00 a6 0e 00 00 | e4 10 00 00 26 13 00 00 |p.......|....&...|
|00000480| 68 15 00 00 a6 17 00 00 | dc 19 00 00 fe 1b 00 00 |h.......|........|
|00000490| 20 1e 00 00 4e 20 00 00 | 7c 22 00 00 a6 24 00 00 | ...N ..||"...$..|
|000004a0| d0 26 00 00 04 29 00 00 | 3c 2b 00 00 68 2d 00 00 |.&...)..|<+..h-..|
|000004b0| 23 00 00 00 04 00 05 00 | 06 00 07 00 08 00 09 00 |#.......|........|
|000004c0| 0a 00 0b 00 0c 00 0d 00 | 0e 00 0f 00 10 00 11 00 |........|........|
|000004d0| 12 00 13 00 01 00 02 00 | 04 00 05 00 06 00 07 00 |........|........|
|000004e0| 08 00 09 00 0a 00 0b 00 | 0c 00 0d 00 0e 00 0f 00 |........|........|
|000004f0| 10 00 11 00 12 00 13 00 | 03 00 5f 45 73 74 61 62 |........|.._Estab|
|00000500| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 41 40 38 00 |lishApiH|ooksA@8.|
|00000510| 5f 45 73 74 61 62 6c 69 | 73 68 41 70 69 48 6f 6f |_Establi|shApiHoo|
|00000520| 6b 73 54 69 6d 65 41 40 | 31 32 00 5f 45 73 74 61 |ksTimeA@|12._Esta|
|00000530| 62 6c 69 73 68 41 70 69 | 48 6f 6f 6b 73 54 69 6d |blishApi|HooksTim|
|00000540| 65 4e 54 41 40 31 32 00 | 5f 45 73 74 61 62 6c 69 |eNTA@12.|_Establi|
|00000550| 73 68 41 70 69 48 6f 6f | 6b 73 54 69 6d 65 4e 54 |shApiHoo|ksTimeNT|
|00000560| 57 40 31 32 00 5f 45 73 | 74 61 62 6c 69 73 68 41 |W@12._Es|tablishA|
|00000570| 70 69 48 6f 6f 6b 73 54 | 69 6d 65 57 40 31 32 00 |piHooksT|imeW@12.|
|00000580| 5f 45 73 74 61 62 6c 69 | 73 68 41 70 69 48 6f 6f |_Establi|shApiHoo|
|00000590| 6b 73 57 40 38 00 5f 48 | 6f 6f 6b 41 70 69 41 40 |ksW@8._H|ookApiA@|
|000005a0| 32 38 00 5f 48 6f 6f 6b | 41 70 69 57 40 32 38 00 |28._Hook|ApiW@28.|
|000005b0| 5f 49 73 4d 6f 64 75 6c | 65 4c 6f 61 64 65 64 41 |_IsModul|eLoadedA|
|000005c0| 40 38 00 5f 49 73 4d 6f | 64 75 6c 65 4c 6f 61 64 |@8._IsMo|duleLoad|
|000005d0| 65 64 57 40 38 00 5f 4c | 6f 61 64 41 6e 64 43 61 |edW@8._L|oadAndCa|
|000005e0| 6c 6c 41 40 31 36 00 5f | 4c 6f 61 64 41 6e 64 43 |llA@16._|LoadAndC|
|000005f0| 61 6c 6c 57 40 31 36 00 | 5f 52 65 6d 6f 74 65 45 |allW@16.|_RemoteE|
|00000600| 78 65 63 75 74 65 54 69 | 6d 65 40 32 30 00 5f 52 |xecuteTi|me@20._R|
|00000610| 65 6d 6f 74 65 45 78 65 | 63 75 74 65 54 69 6d 65 |emoteExe|cuteTime|
|00000620| 4e 54 40 32 30 00 5f 55 | 6e 6c 6f 61 64 4d 6f 64 |NT@20._U|nloadMod|
|00000630| 75 6c 65 41 40 31 32 00 | 5f 55 6e 6c 6f 61 64 4d |uleA@12.|_UnloadM|
|00000640| 6f 64 75 6c 65 57 40 31 | 32 00 5f 5f 49 4d 50 4f |oduleW@1|2.__IMPO|
|00000650| 52 54 5f 44 45 53 43 52 | 49 50 54 4f 52 5f 41 70 |RT_DESCR|IPTOR_Ap|
|00000660| 69 48 6f 6f 6b 73 00 5f | 5f 4e 55 4c 4c 5f 49 4d |iHooks._|_NULL_IM|
|00000670| 50 4f 52 54 5f 44 45 53 | 43 52 49 50 54 4f 52 00 |PORT_DES|CRIPTOR.|
|00000680| 5f 5f 69 6d 70 5f 5f 45 | 73 74 61 62 6c 69 73 68 |__imp__E|stablish|
|00000690| 41 70 69 48 6f 6f 6b 73 | 41 40 38 00 5f 5f 69 6d |ApiHooks|A@8.__im|
|000006a0| 70 5f 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |p__Estab|lishApiH|
|000006b0| 6f 6f 6b 73 54 69 6d 65 | 41 40 31 32 00 5f 5f 69 |ooksTime|A@12.__i|
|000006c0| 6d 70 5f 5f 45 73 74 61 | 62 6c 69 73 68 41 70 69 |mp__Esta|blishApi|
|000006d0| 48 6f 6f 6b 73 54 69 6d | 65 4e 54 41 40 31 32 00 |HooksTim|eNTA@12.|
|000006e0| 5f 5f 69 6d 70 5f 5f 45 | 73 74 61 62 6c 69 73 68 |__imp__E|stablish|
|000006f0| 41 70 69 48 6f 6f 6b 73 | 54 69 6d 65 4e 54 57 40 |ApiHooks|TimeNTW@|
|00000700| 31 32 00 5f 5f 69 6d 70 | 5f 5f 45 73 74 61 62 6c |12.__imp|__Establ|
|00000710| 69 73 68 41 70 69 48 6f | 6f 6b 73 54 69 6d 65 57 |ishApiHo|oksTimeW|
|00000720| 40 31 32 00 5f 5f 69 6d | 70 5f 5f 45 73 74 61 62 |@12.__im|p__Estab|
|00000730| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 57 40 38 00 |lishApiH|ooksW@8.|
|00000740| 5f 5f 69 6d 70 5f 5f 48 | 6f 6f 6b 41 70 69 41 40 |__imp__H|ookApiA@|
|00000750| 32 38 00 5f 5f 69 6d 70 | 5f 5f 48 6f 6f 6b 41 70 |28.__imp|__HookAp|
|00000760| 69 57 40 32 38 00 5f 5f | 69 6d 70 5f 5f 49 73 4d |iW@28.__|imp__IsM|
|00000770| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 41 40 38 00 5f |oduleLoa|dedA@8._|
|00000780| 5f 69 6d 70 5f 5f 49 73 | 4d 6f 64 75 6c 65 4c 6f |_imp__Is|ModuleLo|
|00000790| 61 64 65 64 57 40 38 00 | 5f 5f 69 6d 70 5f 5f 4c |adedW@8.|__imp__L|
|000007a0| 6f 61 64 41 6e 64 43 61 | 6c 6c 41 40 31 36 00 5f |oadAndCa|llA@16._|
|000007b0| 5f 69 6d 70 5f 5f 4c 6f | 61 64 41 6e 64 43 61 6c |_imp__Lo|adAndCal|
|000007c0| 6c 57 40 31 36 00 5f 5f | 69 6d 70 5f 5f 52 65 6d |lW@16.__|imp__Rem|
|000007d0| 6f 74 65 45 78 65 63 75 | 74 65 54 69 6d 65 40 32 |oteExecu|teTime@2|
|000007e0| 30 00 5f 5f 69 6d 70 5f | 5f 52 65 6d 6f 74 65 45 |0.__imp_|_RemoteE|
|000007f0| 78 65 63 75 74 65 54 69 | 6d 65 4e 54 40 32 30 00 |xecuteTi|meNT@20.|
|00000800| 5f 5f 69 6d 70 5f 5f 55 | 6e 6c 6f 61 64 4d 6f 64 |__imp__U|nloadMod|
|00000810| 75 6c 65 41 40 31 32 00 | 5f 5f 69 6d 70 5f 5f 55 |uleA@12.|__imp__U|
|00000820| 6e 6c 6f 61 64 4d 6f 64 | 75 6c 65 57 40 31 32 00 |nloadMod|uleW@12.|
|00000830| 7f 41 70 69 48 6f 6f 6b | 73 5f 4e 55 4c 4c 5f 54 |.ApiHook|s_NULL_T|
|00000840| 48 55 4e 4b 5f 44 41 54 | 41 00 41 70 69 48 6f 6f |HUNK_DAT|A.ApiHoo|
|00000850| 6b 73 2e 64 6c 6c 2f 20 | 20 20 39 35 35 32 37 30 |ks.dll/ | 955270|
|00000860| 31 36 38 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |168 | |
|00000870| 20 20 30 20 20 20 20 20 | 20 20 35 39 38 20 20 20 | 0 | 598 |
|00000880| 20 20 20 20 60 0a 4c 01 | 02 00 18 44 f0 38 84 01 | `.L.|...D.8..|
|00000890| 00 00 07 00 00 00 e0 00 | 00 01 0b 01 05 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 10 00 00 00 02 |........|........|
|000008c0| 00 00 04 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008e0| 00 00 00 00 10 00 00 10 | 00 00 00 00 10 00 00 10 |........|........|
|000008f0| 00 00 00 00 00 00 10 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 2e 69 64 61 74 61 |........|...idata|
|00000980| 24 32 00 00 00 00 00 00 | 00 00 14 00 00 00 44 01 |$2......|......D.|
|00000990| 00 00 58 01 00 00 00 00 | 00 00 03 00 00 00 40 00 |..X.....|......@.|
|000009a0| 10 c0 2e 69 64 61 74 61 | 24 36 00 00 00 00 00 00 |...idata|$6......|
|000009b0| 00 00 0e 00 00 00 76 01 | 00 00 58 01 00 00 00 00 |......v.|..X.....|
|000009c0| 00 00 00 00 00 00 40 00 | 20 c0 00 00 00 00 00 00 |......@.| .......|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 0c 00 |........|........|
|000009e0| 00 00 02 00 00 00 07 00 | 00 00 00 00 03 00 00 00 |........|........|
|000009f0| 07 00 10 00 00 00 04 00 | 00 00 07 00 41 70 69 48 |........|....ApiH|
|00000a00| 6f 6f 6b 73 2e 64 6c 6c | 00 00 00 00 00 00 04 00 |ooks.dll|........|
|00000a10| 00 00 00 00 00 00 01 00 | 00 00 02 00 2e 69 64 61 |........|.....ida|
|00000a20| 74 61 24 32 40 00 00 c0 | 01 00 00 00 68 00 2e 69 |ta$2@...|....h..i|
|00000a30| 64 61 74 61 24 36 00 00 | 00 00 02 00 00 00 03 00 |data$6..|........|
|00000a40| 2e 69 64 61 74 61 24 34 | 40 00 00 c0 00 00 00 00 |.idata$4|@.......|
|00000a50| 68 00 2e 69 64 61 74 61 | 24 35 40 00 00 c0 00 00 |h..idata|$5@.....|
|00000a60| 00 00 68 00 00 00 00 00 | 21 00 00 00 00 00 00 00 |..h.....|!.......|
|00000a70| 00 00 00 00 02 00 00 00 | 00 00 3a 00 00 00 00 00 |........|..:.....|
|00000a80| 00 00 00 00 00 00 02 00 | 54 00 00 00 5f 5f 49 4d |........|T...__IM|
|00000a90| 50 4f 52 54 5f 44 45 53 | 43 52 49 50 54 4f 52 5f |PORT_DES|CRIPTOR_|
|00000aa0| 41 70 69 48 6f 6f 6b 73 | 00 5f 5f 4e 55 4c 4c 5f |ApiHooks|.__NULL_|
|00000ab0| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|00000ac0| 52 00 7f 41 70 69 48 6f | 6f 6b 73 5f 4e 55 4c 4c |R..ApiHo|oks_NULL|
|00000ad0| 5f 54 48 55 4e 4b 5f 44 | 41 54 41 00 41 70 69 48 |_THUNK_D|ATA.ApiH|
|00000ae0| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/ 9552|
|00000af0| 37 30 31 36 38 20 20 20 | 20 20 20 20 20 20 20 20 |70168 | |
|00000b00| 20 20 20 20 30 20 20 20 | 20 20 20 20 31 32 37 20 | 0 | 127 |
|00000b10| 20 20 20 20 20 20 60 0a | 4c 01 01 00 18 44 f0 38 | `.|L....D.8|
|00000b20| 50 00 00 00 01 00 00 00 | 00 00 00 01 2e 69 64 61 |P.......|.....ida|
|00000b30| 74 61 24 33 00 00 00 00 | 00 00 00 00 14 00 00 00 |ta$3....|........|
|00000b40| 3c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |<.......|........|
|00000b50| 40 00 10 c0 00 00 00 00 | 00 00 00 00 00 00 00 00 |@.......|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 04 00 00 00 |........|........|
|00000b70| 00 00 00 00 01 00 00 00 | 02 00 1d 00 00 00 5f 5f |........|......__|
|00000b80| 4e 55 4c 4c 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |NULL_IMP|ORT_DESC|
|00000b90| 52 49 50 54 4f 52 00 0a | 41 70 69 48 6f 6f 6b 73 |RIPTOR..|ApiHooks|
|00000ba0| 2e 64 6c 6c 2f 20 20 20 | 39 35 35 32 37 30 31 36 |.dll/ |95527016|
|00000bb0| 38 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |8 | |
|00000bc0| 30 20 20 20 20 20 20 20 | 31 35 36 20 20 20 20 20 |0 |156 |
|00000bd0| 20 20 60 0a 4c 01 02 00 | 18 44 f0 38 6c 00 00 00 | `.L...|.D.8l...|
|00000be0| 01 00 00 00 00 00 00 01 | 2e 69 64 61 74 61 24 35 |........|.idata$5|
|00000bf0| 00 00 00 00 00 00 00 00 | 04 00 00 00 64 00 00 00 |........|....d...|
|00000c00| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 30 c0 |........|....@.0.|
|00000c10| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00000c20| 04 00 00 00 68 00 00 00 | 00 00 00 00 00 00 00 00 |....h...|........|
|00000c30| 00 00 00 00 40 00 30 c0 | 00 00 00 00 00 00 00 00 |....@.0.|........|
|00000c40| 00 00 00 00 04 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00000c50| 02 00 1e 00 00 00 7f 41 | 70 69 48 6f 6f 6b 73 5f |.......A|piHooks_|
|00000c60| 4e 55 4c 4c 5f 54 48 55 | 4e 4b 5f 44 41 54 41 00 |NULL_THU|NK_DATA.|
|00000c70| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/ |
|00000c80| 39 35 35 32 37 30 31 36 | 38 20 20 20 20 20 20 20 |95527016|8 |
|00000c90| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 | |0 |
|00000ca0| 35 30 35 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |505 | `.L...|
|00000cb0| 18 44 f0 38 f6 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00000cc0| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00000cd0| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00000ce0| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00000cf0| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00000d00| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00000d10| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00000d20| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00000d30| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00000d40| 00 00 00 00 00 00 00 00 | 16 00 00 00 e0 00 00 00 |........|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00000d60| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00000d70| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00000d80| 00 00 00 00 00 00 08 00 | 00 00 07 00 00 00 45 73 |........|......Es|
|00000d90| 74 61 62 6c 69 73 68 41 | 70 69 48 6f 6f 6b 73 41 |tablishA|piHooksA|
|00000da0| 00 00 2e 74 65 78 74 00 | 00 00 00 00 00 00 01 00 |...text.|........|
|00000db0| 00 00 03 01 06 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 01 00 78 01 00 00 | 00 00 0a 00 00 00 00 00 |....x...|........|
|00000dd0| 00 00 01 00 20 00 02 00 | 2e 69 64 61 74 61 24 35 |.... ...|.idata$5|
|00000de0| 00 00 00 00 02 00 00 00 | 03 01 04 00 00 00 01 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 01 00 78 01 00 00 00 00 |........|..x.....|
|00000e00| 04 00 00 00 00 00 00 00 | 02 00 00 00 02 00 2e 69 |........|.......i|
|00000e10| 64 61 74 61 24 34 00 00 | 00 00 03 00 00 00 03 01 |data$4..|........|
|00000e20| 04 00 00 00 01 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|00000e30| 78 01 2e 69 64 61 74 61 | 24 36 00 00 00 00 04 00 |x..idata|$6......|
|00000e40| 00 00 03 01 16 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e50| 02 00 05 00 78 01 00 00 | 00 00 20 00 00 00 00 00 |....x...|.. .....|
|00000e60| 00 00 00 00 00 00 02 00 | 3d 00 00 00 5f 5f 69 6d |........|=...__im|
|00000e70| 70 5f 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |p__Estab|lishApiH|
|00000e80| 6f 6f 6b 73 41 40 38 00 | 5f 5f 49 4d 50 4f 52 54 |ooksA@8.|__IMPORT|
|00000e90| 5f 44 45 53 43 52 49 50 | 54 4f 52 5f 41 70 69 48 |_DESCRIP|TOR_ApiH|
|00000ea0| 6f 6f 6b 73 00 0a 41 70 | 69 48 6f 6f 6b 73 2e 64 |ooks..Ap|iHooks.d|
|00000eb0| 6c 6c 2f 20 20 20 39 35 | 35 32 37 30 31 36 38 20 |ll/ 95|5270168 |
|00000ec0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 30 20 | | 0 |
|00000ed0| 20 20 20 20 20 20 35 31 | 34 20 20 20 20 20 20 20 | 51|4 |
|00000ee0| 60 0a 4c 01 04 00 18 44 | f0 38 fa 00 00 00 0b 00 |`.L....D|.8......|
|00000ef0| 00 00 00 00 00 01 2e 74 | 65 78 74 00 00 00 00 00 |.......t|ext.....|
|00000f00| 00 00 00 00 00 00 06 00 | 00 00 b4 00 00 00 ba 00 |........|........|
|00000f10| 00 00 00 00 00 00 01 00 | 00 00 20 10 20 60 2e 69 |........|.. . `.i|
|00000f20| 64 61 74 61 24 35 00 00 | 00 00 00 00 00 00 04 00 |data$5..|........|
|00000f30| 00 00 c4 00 00 00 c8 00 | 00 00 00 00 00 00 01 00 |........|........|
|00000f40| 00 00 40 10 30 c0 2e 69 | 64 61 74 61 24 34 00 00 |..@.0..i|data$4..|
|00000f50| 00 00 00 00 00 00 04 00 | 00 00 d2 00 00 00 d6 00 |........|........|
|00000f60| 00 00 00 00 00 00 01 00 | 00 00 40 10 30 c0 2e 69 |........|..@.0..i|
|00000f70| 64 61 74 61 24 36 00 00 | 00 00 00 00 00 00 1a 00 |data$6..|........|
|00000f80| 00 00 e0 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 40 10 20 c0 ff 25 | 00 00 00 00 02 00 00 00 |..@. ..%|........|
|00000fa0| 05 00 00 00 06 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|00000fb0| 00 00 07 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|00000fc0| 07 00 01 00 45 73 74 61 | 62 6c 69 73 68 41 70 69 |....Esta|blishApi|
|00000fd0| 48 6f 6f 6b 73 54 69 6d | 65 41 00 00 2e 74 65 78 |HooksTim|eA...tex|
|00000fe0| 74 00 00 00 00 00 00 00 | 01 00 00 00 03 01 06 00 |t.......|........|
|00000ff0| 00 00 01 00 00 00 00 00 | 00 00 00 00 01 00 78 01 |........|......x.|
|00001000| 00 00 00 00 0a 00 00 00 | 00 00 00 00 01 00 20 00 |........|...... .|
|00001010| 02 00 2e 69 64 61 74 61 | 24 35 00 00 00 00 02 00 |...idata|$5......|
|00001020| 00 00 03 01 04 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00001030| 00 00 01 00 78 01 00 00 | 00 00 04 00 00 00 00 00 |....x...|........|
|00001040| 00 00 02 00 00 00 02 00 | 2e 69 64 61 74 61 24 34 |........|.idata$4|
|00001050| 00 00 00 00 03 00 00 00 | 03 01 04 00 00 00 01 00 |........|........|
|00001060| 00 00 00 00 00 00 02 00 | 05 00 78 01 2e 69 64 61 |........|..x..ida|
|00001070| 74 61 24 36 00 00 00 00 | 04 00 00 00 03 01 1a 00 |ta$6....|........|
|00001080| 00 00 00 00 00 00 00 00 | 00 00 02 00 05 00 78 01 |........|......x.|
|00001090| 00 00 00 00 25 00 00 00 | 00 00 00 00 00 00 00 00 |....%...|........|
|000010a0| 02 00 42 00 00 00 5f 5f | 69 6d 70 5f 5f 45 73 74 |..B...__|imp__Est|
|000010b0| 61 62 6c 69 73 68 41 70 | 69 48 6f 6f 6b 73 54 69 |ablishAp|iHooksTi|
|000010c0| 6d 65 41 40 31 32 00 5f | 5f 49 4d 50 4f 52 54 5f |meA@12._|_IMPORT_|
|000010d0| 44 45 53 43 52 49 50 54 | 4f 52 5f 41 70 69 48 6f |DESCRIPT|OR_ApiHo|
|000010e0| 6f 6b 73 00 41 70 69 48 | 6f 6f 6b 73 2e 64 6c 6c |oks.ApiH|ooks.dll|
|000010f0| 2f 20 20 20 39 35 35 32 | 37 30 31 36 38 20 20 20 |/ 9552|70168 |
|00001100| 20 20 20 20 20 20 20 20 | 20 20 20 20 30 20 20 20 | | 0 |
|00001110| 20 20 20 20 35 31 38 20 | 20 20 20 20 20 20 60 0a | 518 | `.|
|00001120| 4c 01 04 00 18 44 f0 38 | fc 00 00 00 0b 00 00 00 |L....D.8|........|
|00001130| 00 00 00 01 2e 74 65 78 | 74 00 00 00 00 00 00 00 |.....tex|t.......|
|00001140| 00 00 00 00 06 00 00 00 | b4 00 00 00 ba 00 00 00 |........|........|
|00001150| 00 00 00 00 01 00 00 00 | 20 10 20 60 2e 69 64 61 |........| . `.ida|
|00001160| 74 61 24 35 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$5....|........|
|00001170| c4 00 00 00 c8 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00001180| 40 10 30 c0 2e 69 64 61 | 74 61 24 34 00 00 00 00 |@.0..ida|ta$4....|
|00001190| 00 00 00 00 04 00 00 00 | d2 00 00 00 d6 00 00 00 |........|........|
|000011a0| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|000011b0| 74 61 24 36 00 00 00 00 | 00 00 00 00 1c 00 00 00 |ta$6....|........|
|000011c0| e0 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000011d0| 40 10 20 c0 ff 25 00 00 | 00 00 02 00 00 00 05 00 |@. ..%..|........|
|000011e0| 00 00 06 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|000011f0| 07 00 00 00 00 00 00 00 | 00 00 08 00 00 00 07 00 |........|........|
|00001200| 02 00 45 73 74 61 62 6c | 69 73 68 41 70 69 48 6f |..Establ|ishApiHo|
|00001210| 6f 6b 73 54 69 6d 65 4e | 54 41 00 00 2e 74 65 78 |oksTimeN|TA...tex|
|00001220| 74 00 00 00 00 00 00 00 | 01 00 00 00 03 01 06 00 |t.......|........|
|00001230| 00 00 01 00 00 00 00 00 | 00 00 00 00 01 00 78 01 |........|......x.|
|00001240| 00 00 00 00 0a 00 00 00 | 00 00 00 00 01 00 20 00 |........|...... .|
|00001250| 02 00 2e 69 64 61 74 61 | 24 35 00 00 00 00 02 00 |...idata|$5......|
|00001260| 00 00 03 01 04 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00001270| 00 00 01 00 78 01 00 00 | 00 00 04 00 00 00 00 00 |....x...|........|
|00001280| 00 00 02 00 00 00 02 00 | 2e 69 64 61 74 61 24 34 |........|.idata$4|
|00001290| 00 00 00 00 03 00 00 00 | 03 01 04 00 00 00 01 00 |........|........|
|000012a0| 00 00 00 00 00 00 02 00 | 05 00 78 01 2e 69 64 61 |........|..x..ida|
|000012b0| 74 61 24 36 00 00 00 00 | 04 00 00 00 03 01 1c 00 |ta$6....|........|
|000012c0| 00 00 00 00 00 00 00 00 | 00 00 02 00 05 00 78 01 |........|......x.|
|000012d0| 00 00 00 00 27 00 00 00 | 00 00 00 00 00 00 00 00 |....'...|........|
|000012e0| 02 00 44 00 00 00 5f 5f | 69 6d 70 5f 5f 45 73 74 |..D...__|imp__Est|
|000012f0| 61 62 6c 69 73 68 41 70 | 69 48 6f 6f 6b 73 54 69 |ablishAp|iHooksTi|
|00001300| 6d 65 4e 54 41 40 31 32 | 00 5f 5f 49 4d 50 4f 52 |meNTA@12|.__IMPOR|
|00001310| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 5f 41 70 69 |T_DESCRI|PTOR_Api|
|00001320| 48 6f 6f 6b 73 00 41 70 | 69 48 6f 6f 6b 73 2e 64 |Hooks.Ap|iHooks.d|
|00001330| 6c 6c 2f 20 20 20 39 35 | 35 32 37 30 31 36 38 20 |ll/ 95|5270168 |
|00001340| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 30 20 | | 0 |
|00001350| 20 20 20 20 20 20 35 31 | 38 20 20 20 20 20 20 20 | 51|8 |
|00001360| 60 0a 4c 01 04 00 18 44 | f0 38 fc 00 00 00 0b 00 |`.L....D|.8......|
|00001370| 00 00 00 00 00 01 2e 74 | 65 78 74 00 00 00 00 00 |.......t|ext.....|
|00001380| 00 00 00 00 00 00 06 00 | 00 00 b4 00 00 00 ba 00 |........|........|
|00001390| 00 00 00 00 00 00 01 00 | 00 00 20 10 20 60 2e 69 |........|.. . `.i|
|000013a0| 64 61 74 61 24 35 00 00 | 00 00 00 00 00 00 04 00 |data$5..|........|
|000013b0| 00 00 c4 00 00 00 c8 00 | 00 00 00 00 00 00 01 00 |........|........|
|000013c0| 00 00 40 10 30 c0 2e 69 | 64 61 74 61 24 34 00 00 |..@.0..i|data$4..|
|000013d0| 00 00 00 00 00 00 04 00 | 00 00 d2 00 00 00 d6 00 |........|........|
|000013e0| 00 00 00 00 00 00 01 00 | 00 00 40 10 30 c0 2e 69 |........|..@.0..i|
|000013f0| 64 61 74 61 24 36 00 00 | 00 00 00 00 00 00 1c 00 |data$6..|........|
|00001400| 00 00 e0 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001410| 00 00 40 10 20 c0 ff 25 | 00 00 00 00 02 00 00 00 |..@. ..%|........|
|00001420| 05 00 00 00 06 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|00001430| 00 00 07 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|00001440| 07 00 03 00 45 73 74 61 | 62 6c 69 73 68 41 70 69 |....Esta|blishApi|
|00001450| 48 6f 6f 6b 73 54 69 6d | 65 4e 54 57 00 00 2e 74 |HooksTim|eNTW...t|
|00001460| 65 78 74 00 00 00 00 00 | 00 00 01 00 00 00 03 01 |ext.....|........|
|00001470| 06 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001480| 78 01 00 00 00 00 0a 00 | 00 00 00 00 00 00 01 00 |x.......|........|
|00001490| 20 00 02 00 2e 69 64 61 | 74 61 24 35 00 00 00 00 | ....ida|ta$5....|
|000014a0| 02 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|000014b0| 00 00 00 00 01 00 78 01 | 00 00 00 00 04 00 00 00 |......x.|........|
|000014c0| 00 00 00 00 02 00 00 00 | 02 00 2e 69 64 61 74 61 |........|...idata|
|000014d0| 24 34 00 00 00 00 03 00 | 00 00 03 01 04 00 00 00 |$4......|........|
|000014e0| 01 00 00 00 00 00 00 00 | 02 00 05 00 78 01 2e 69 |........|....x..i|
|000014f0| 64 61 74 61 24 36 00 00 | 00 00 04 00 00 00 03 01 |data$6..|........|
|00001500| 1c 00 00 00 00 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|00001510| 78 01 00 00 00 00 27 00 | 00 00 00 00 00 00 00 00 |x.....'.|........|
|00001520| 00 00 02 00 44 00 00 00 | 5f 5f 69 6d 70 5f 5f 45 |....D...|__imp__E|
|00001530| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|00001540| 54 69 6d 65 4e 54 57 40 | 31 32 00 5f 5f 49 4d 50 |TimeNTW@|12.__IMP|
|00001550| 4f 52 54 5f 44 45 53 43 | 52 49 50 54 4f 52 5f 41 |ORT_DESC|RIPTOR_A|
|00001560| 70 69 48 6f 6f 6b 73 00 | 41 70 69 48 6f 6f 6b 73 |piHooks.|ApiHooks|
|00001570| 2e 64 6c 6c 2f 20 20 20 | 39 35 35 32 37 30 31 36 |.dll/ |95527016|
|00001580| 38 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |8 | |
|00001590| 30 20 20 20 20 20 20 20 | 35 31 34 20 20 20 20 20 |0 |514 |
|000015a0| 20 20 60 0a 4c 01 04 00 | 18 44 f0 38 fa 00 00 00 | `.L...|.D.8....|
|000015b0| 0b 00 00 00 00 00 00 01 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000015c0| 00 00 00 00 00 00 00 00 | 06 00 00 00 b4 00 00 00 |........|........|
|000015d0| ba 00 00 00 00 00 00 00 | 01 00 00 00 20 10 20 60 |........|.... . `|
|000015e0| 2e 69 64 61 74 61 24 35 | 00 00 00 00 00 00 00 00 |.idata$5|........|
|000015f0| 04 00 00 00 c4 00 00 00 | c8 00 00 00 00 00 00 00 |........|........|
|00001600| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 34 |....@.0.|.idata$4|
|00001610| 00 00 00 00 00 00 00 00 | 04 00 00 00 d2 00 00 00 |........|........|
|00001620| d6 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00001630| 2e 69 64 61 74 61 24 36 | 00 00 00 00 00 00 00 00 |.idata$6|........|
|00001640| 1a 00 00 00 e0 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001650| 00 00 00 00 40 10 20 c0 | ff 25 00 00 00 00 02 00 |....@. .|.%......|
|00001660| 00 00 05 00 00 00 06 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001670| 08 00 00 00 07 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|00001680| 00 00 07 00 04 00 45 73 | 74 61 62 6c 69 73 68 41 |......Es|tablishA|
|00001690| 70 69 48 6f 6f 6b 73 54 | 69 6d 65 57 00 00 2e 74 |piHooksT|imeW...t|
|000016a0| 65 78 74 00 00 00 00 00 | 00 00 01 00 00 00 03 01 |ext.....|........|
|000016b0| 06 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|000016c0| 78 01 00 00 00 00 0a 00 | 00 00 00 00 00 00 01 00 |x.......|........|
|000016d0| 20 00 02 00 2e 69 64 61 | 74 61 24 35 00 00 00 00 | ....ida|ta$5....|
|000016e0| 02 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|000016f0| 00 00 00 00 01 00 78 01 | 00 00 00 00 04 00 00 00 |......x.|........|
|00001700| 00 00 00 00 02 00 00 00 | 02 00 2e 69 64 61 74 61 |........|...idata|
|00001710| 24 34 00 00 00 00 03 00 | 00 00 03 01 04 00 00 00 |$4......|........|
|00001720| 01 00 00 00 00 00 00 00 | 02 00 05 00 78 01 2e 69 |........|....x..i|
|00001730| 64 61 74 61 24 36 00 00 | 00 00 04 00 00 00 03 01 |data$6..|........|
|00001740| 1a 00 00 00 00 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|00001750| 78 01 00 00 00 00 25 00 | 00 00 00 00 00 00 00 00 |x.....%.|........|
|00001760| 00 00 02 00 42 00 00 00 | 5f 5f 69 6d 70 5f 5f 45 |....B...|__imp__E|
|00001770| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|00001780| 54 69 6d 65 57 40 31 32 | 00 5f 5f 49 4d 50 4f 52 |TimeW@12|.__IMPOR|
|00001790| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 5f 41 70 69 |T_DESCRI|PTOR_Api|
|000017a0| 48 6f 6f 6b 73 00 41 70 | 69 48 6f 6f 6b 73 2e 64 |Hooks.Ap|iHooks.d|
|000017b0| 6c 6c 2f 20 20 20 39 35 | 35 32 37 30 31 36 38 20 |ll/ 95|5270168 |
|000017c0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 30 20 | | 0 |
|000017d0| 20 20 20 20 20 20 35 30 | 35 20 20 20 20 20 20 20 | 50|5 |
|000017e0| 60 0a 4c 01 04 00 18 44 | f0 38 f6 00 00 00 0b 00 |`.L....D|.8......|
|000017f0| 00 00 00 00 00 01 2e 74 | 65 78 74 00 00 00 00 00 |.......t|ext.....|
|00001800| 00 00 00 00 00 00 06 00 | 00 00 b4 00 00 00 ba 00 |........|........|
|00001810| 00 00 00 00 00 00 01 00 | 00 00 20 10 20 60 2e 69 |........|.. . `.i|
|00001820| 64 61 74 61 24 35 00 00 | 00 00 00 00 00 00 04 00 |data$5..|........|
|00001830| 00 00 c4 00 00 00 c8 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001840| 00 00 40 10 30 c0 2e 69 | 64 61 74 61 24 34 00 00 |..@.0..i|data$4..|
|00001850| 00 00 00 00 00 00 04 00 | 00 00 d2 00 00 00 d6 00 |........|........|
|00001860| 00 00 00 00 00 00 01 00 | 00 00 40 10 30 c0 2e 69 |........|..@.0..i|
|00001870| 64 61 74 61 24 36 00 00 | 00 00 00 00 00 00 16 00 |data$6..|........|
|00001880| 00 00 e0 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001890| 00 00 40 10 20 c0 ff 25 | 00 00 00 00 02 00 00 00 |..@. ..%|........|
|000018a0| 05 00 00 00 06 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|000018b0| 00 00 07 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|000018c0| 07 00 05 00 45 73 74 61 | 62 6c 69 73 68 41 70 69 |....Esta|blishApi|
|000018d0| 48 6f 6f 6b 73 57 00 00 | 2e 74 65 78 74 00 00 00 |HooksW..|.text...|
|000018e0| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|000018f0| 00 00 00 00 00 00 00 00 | 01 00 78 01 00 00 00 00 |........|..x.....|
|00001900| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|00001910| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|00001920| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001930| 78 01 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |x.......|........|
|00001940| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|00001950| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001960| 00 00 02 00 05 00 78 01 | 2e 69 64 61 74 61 24 36 |......x.|.idata$6|
|00001970| 00 00 00 00 04 00 00 00 | 03 01 16 00 00 00 00 00 |........|........|
|00001980| 00 00 00 00 00 00 02 00 | 05 00 78 01 00 00 00 00 |........|..x.....|
|00001990| 20 00 00 00 00 00 00 00 | 00 00 00 00 02 00 3d 00 | .......|......=.|
|000019a0| 00 00 5f 5f 69 6d 70 5f | 5f 45 73 74 61 62 6c 69 |..__imp_|_Establi|
|000019b0| 73 68 41 70 69 48 6f 6f | 6b 73 57 40 38 00 5f 5f |shApiHoo|ksW@8.__|
|000019c0| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|000019d0| 52 5f 41 70 69 48 6f 6f | 6b 73 00 0a 41 70 69 48 |R_ApiHoo|ks..ApiH|
|000019e0| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/ 9552|
|000019f0| 37 30 31 36 38 20 20 20 | 20 20 20 20 20 20 20 20 |70168 | |
|00001a00| 20 20 20 20 30 20 20 20 | 20 20 20 20 34 38 36 20 | 0 | 486 |
|00001a10| 20 20 20 20 20 20 60 0a | 4c 01 04 00 18 44 f0 38 | `.|L....D.8|
|00001a20| ec 00 00 00 0b 00 00 00 | 00 00 00 01 2e 74 65 78 |........|.....tex|
|00001a30| 74 00 00 00 00 00 00 00 | 00 00 00 00 06 00 00 00 |t.......|........|
|00001a40| b4 00 00 00 ba 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00001a50| 20 10 20 60 2e 69 64 61 | 74 61 24 35 00 00 00 00 | . `.ida|ta$5....|
|00001a60| 00 00 00 00 04 00 00 00 | c4 00 00 00 c8 00 00 00 |........|........|
|00001a70| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00001a80| 74 61 24 34 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$4....|........|
|00001a90| d2 00 00 00 d6 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00001aa0| 40 10 30 c0 2e 69 64 61 | 74 61 24 36 00 00 00 00 |@.0..ida|ta$6....|
|00001ab0| 00 00 00 00 0c 00 00 00 | e0 00 00 00 00 00 00 00 |........|........|
|00001ac0| 00 00 00 00 00 00 00 00 | 40 10 20 c0 ff 25 00 00 |........|@. ..%..|
|00001ad0| 00 00 02 00 00 00 05 00 | 00 00 06 00 00 00 00 00 |........|........|
|00001ae0| 00 00 00 00 08 00 00 00 | 07 00 00 00 00 00 00 00 |........|........|
|00001af0| 00 00 08 00 00 00 07 00 | 06 00 48 6f 6f 6b 41 70 |........|..HookAp|
|00001b00| 69 41 00 00 2e 74 65 78 | 74 00 00 00 00 00 00 00 |iA...tex|t.......|
|00001b10| 01 00 00 00 03 01 06 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001b20| 00 00 00 00 01 00 78 01 | 00 00 00 00 0a 00 00 00 |......x.|........|
|00001b30| 00 00 00 00 01 00 20 00 | 02 00 2e 69 64 61 74 61 |...... .|...idata|
|00001b40| 24 35 00 00 00 00 02 00 | 00 00 03 01 04 00 00 00 |$5......|........|
|00001b50| 01 00 00 00 00 00 00 00 | 00 00 01 00 78 01 00 00 |........|....x...|
|00001b60| 00 00 04 00 00 00 00 00 | 00 00 02 00 00 00 02 00 |........|........|
|00001b70| 2e 69 64 61 74 61 24 34 | 00 00 00 00 03 00 00 00 |.idata$4|........|
|00001b80| 03 01 04 00 00 00 01 00 | 00 00 00 00 00 00 02 00 |........|........|
|00001b90| 05 00 78 01 2e 69 64 61 | 74 61 24 36 00 00 00 00 |..x..ida|ta$6....|
|00001ba0| 04 00 00 00 03 01 0c 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 00 00 02 00 05 00 78 01 | 00 00 00 00 17 00 00 00 |......x.|........|
|00001bc0| 00 00 00 00 00 00 00 00 | 02 00 34 00 00 00 5f 5f |........|..4...__|
|00001bd0| 69 6d 70 5f 5f 48 6f 6f | 6b 41 70 69 41 40 32 38 |imp__Hoo|kApiA@28|
|00001be0| 00 5f 5f 49 4d 50 4f 52 | 54 5f 44 45 53 43 52 49 |.__IMPOR|T_DESCRI|
|00001bf0| 50 54 4f 52 5f 41 70 69 | 48 6f 6f 6b 73 00 41 70 |PTOR_Api|Hooks.Ap|
|00001c00| 69 48 6f 6f 6b 73 2e 64 | 6c 6c 2f 20 20 20 39 35 |iHooks.d|ll/ 95|
|00001c10| 35 32 37 30 31 36 38 20 | 20 20 20 20 20 20 20 20 |5270168 | |
|00001c20| 20 20 20 20 20 20 30 20 | 20 20 20 20 20 20 34 38 | 0 | 48|
|00001c30| 36 20 20 20 20 20 20 20 | 60 0a 4c 01 04 00 18 44 |6 |`.L....D|
|00001c40| f0 38 ec 00 00 00 0b 00 | 00 00 00 00 00 01 2e 74 |.8......|.......t|
|00001c50| 65 78 74 00 00 00 00 00 | 00 00 00 00 00 00 06 00 |ext.....|........|
|00001c60| 00 00 b4 00 00 00 ba 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001c70| 00 00 20 10 20 60 2e 69 | 64 61 74 61 24 35 00 00 |.. . `.i|data$5..|
|00001c80| 00 00 00 00 00 00 04 00 | 00 00 c4 00 00 00 c8 00 |........|........|
|00001c90| 00 00 00 00 00 00 01 00 | 00 00 40 10 30 c0 2e 69 |........|..@.0..i|
|00001ca0| 64 61 74 61 24 34 00 00 | 00 00 00 00 00 00 04 00 |data$4..|........|
|00001cb0| 00 00 d2 00 00 00 d6 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001cc0| 00 00 40 10 30 c0 2e 69 | 64 61 74 61 24 36 00 00 |..@.0..i|data$6..|
|00001cd0| 00 00 00 00 00 00 0c 00 | 00 00 e0 00 00 00 00 00 |........|........|
|00001ce0| 00 00 00 00 00 00 00 00 | 00 00 40 10 20 c0 ff 25 |........|..@. ..%|
|00001cf0| 00 00 00 00 02 00 00 00 | 05 00 00 00 06 00 00 00 |........|........|
|00001d00| 00 00 00 00 00 00 08 00 | 00 00 07 00 00 00 00 00 |........|........|
|00001d10| 00 00 00 00 08 00 00 00 | 07 00 07 00 48 6f 6f 6b |........|....Hook|
|00001d20| 41 70 69 57 00 00 2e 74 | 65 78 74 00 00 00 00 00 |ApiW...t|ext.....|
|00001d30| 00 00 01 00 00 00 03 01 | 06 00 00 00 01 00 00 00 |........|........|
|00001d40| 00 00 00 00 00 00 01 00 | 78 01 00 00 00 00 0a 00 |........|x.......|
|00001d50| 00 00 00 00 00 00 01 00 | 20 00 02 00 2e 69 64 61 |........| ....ida|
|00001d60| 74 61 24 35 00 00 00 00 | 02 00 00 00 03 01 04 00 |ta$5....|........|
|00001d70| 00 00 01 00 00 00 00 00 | 00 00 00 00 01 00 78 01 |........|......x.|
|00001d80| 00 00 00 00 04 00 00 00 | 00 00 00 00 02 00 00 00 |........|........|
|00001d90| 02 00 2e 69 64 61 74 61 | 24 34 00 00 00 00 03 00 |...idata|$4......|
|00001da0| 00 00 03 01 04 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00001db0| 02 00 05 00 78 01 2e 69 | 64 61 74 61 24 36 00 00 |....x..i|data$6..|
|00001dc0| 00 00 04 00 00 00 03 01 | 0c 00 00 00 00 00 00 00 |........|........|
|00001dd0| 00 00 00 00 02 00 05 00 | 78 01 00 00 00 00 17 00 |........|x.......|
|00001de0| 00 00 00 00 00 00 00 00 | 00 00 02 00 34 00 00 00 |........|....4...|
|00001df0| 5f 5f 69 6d 70 5f 5f 48 | 6f 6f 6b 41 70 69 57 40 |__imp__H|ookApiW@|
|00001e00| 32 38 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |28.__IMP|ORT_DESC|
|00001e10| 52 49 50 54 4f 52 5f 41 | 70 69 48 6f 6f 6b 73 00 |RIPTOR_A|piHooks.|
|00001e20| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/ |
|00001e30| 39 35 35 32 37 30 31 36 | 38 20 20 20 20 20 20 20 |95527016|8 |
|00001e40| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 | |0 |
|00001e50| 34 39 38 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |498 | `.L...|
|00001e60| 18 44 f0 38 f2 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00001e70| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00001e80| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00001e90| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00001ea0| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00001eb0| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00001ec0| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00001ed0| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00001ee0| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00001ef0| 00 00 00 00 00 00 00 00 | 12 00 00 00 e0 00 00 00 |........|........|
|00001f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00001f10| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00001f20| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00001f30| 00 00 00 00 00 00 08 00 | 00 00 07 00 08 00 49 73 |........|......Is|
|00001f40| 4d 6f 64 75 6c 65 4c 6f | 61 64 65 64 41 00 2e 74 |ModuleLo|adedA..t|
|00001f50| 65 78 74 00 00 00 00 00 | 00 00 01 00 00 00 03 01 |ext.....|........|
|00001f60| 06 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001f70| 78 01 00 00 00 00 0a 00 | 00 00 00 00 00 00 01 00 |x.......|........|
|00001f80| 20 00 02 00 2e 69 64 61 | 74 61 24 35 00 00 00 00 | ....ida|ta$5....|
|00001f90| 02 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001fa0| 00 00 00 00 01 00 78 01 | 00 00 00 00 04 00 00 00 |......x.|........|
|00001fb0| 00 00 00 00 02 00 00 00 | 02 00 2e 69 64 61 74 61 |........|...idata|
|00001fc0| 24 34 00 00 00 00 03 00 | 00 00 03 01 04 00 00 00 |$4......|........|
|00001fd0| 01 00 00 00 00 00 00 00 | 02 00 05 00 78 01 2e 69 |........|....x..i|
|00001fe0| 64 61 74 61 24 36 00 00 | 00 00 04 00 00 00 03 01 |data$6..|........|
|00001ff0| 12 00 00 00 00 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|00002000| 78 01 00 00 00 00 1d 00 | 00 00 00 00 00 00 00 00 |x.......|........|
|00002010| 00 00 02 00 3a 00 00 00 | 5f 5f 69 6d 70 5f 5f 49 |....:...|__imp__I|
|00002020| 73 4d 6f 64 75 6c 65 4c | 6f 61 64 65 64 41 40 38 |sModuleL|oadedA@8|
|00002030| 00 5f 5f 49 4d 50 4f 52 | 54 5f 44 45 53 43 52 49 |.__IMPOR|T_DESCRI|
|00002040| 50 54 4f 52 5f 41 70 69 | 48 6f 6f 6b 73 00 41 70 |PTOR_Api|Hooks.Ap|
|00002050| 69 48 6f 6f 6b 73 2e 64 | 6c 6c 2f 20 20 20 39 35 |iHooks.d|ll/ 95|
|00002060| 35 32 37 30 31 36 38 20 | 20 20 20 20 20 20 20 20 |5270168 | |
|00002070| 20 20 20 20 20 20 30 20 | 20 20 20 20 20 20 34 39 | 0 | 49|
|00002080| 38 20 20 20 20 20 20 20 | 60 0a 4c 01 04 00 18 44 |8 |`.L....D|
|00002090| f0 38 f2 00 00 00 0b 00 | 00 00 00 00 00 01 2e 74 |.8......|.......t|
|000020a0| 65 78 74 00 00 00 00 00 | 00 00 00 00 00 00 06 00 |ext.....|........|
|000020b0| 00 00 b4 00 00 00 ba 00 | 00 00 00 00 00 00 01 00 |........|........|
|000020c0| 00 00 20 10 20 60 2e 69 | 64 61 74 61 24 35 00 00 |.. . `.i|data$5..|
|000020d0| 00 00 00 00 00 00 04 00 | 00 00 c4 00 00 00 c8 00 |........|........|
|000020e0| 00 00 00 00 00 00 01 00 | 00 00 40 10 30 c0 2e 69 |........|..@.0..i|
|000020f0| 64 61 74 61 24 34 00 00 | 00 00 00 00 00 00 04 00 |data$4..|........|
|00002100| 00 00 d2 00 00 00 d6 00 | 00 00 00 00 00 00 01 00 |........|........|
|00002110| 00 00 40 10 30 c0 2e 69 | 64 61 74 61 24 36 00 00 |..@.0..i|data$6..|
|00002120| 00 00 00 00 00 00 12 00 | 00 00 e0 00 00 00 00 00 |........|........|
|00002130| 00 00 00 00 00 00 00 00 | 00 00 40 10 20 c0 ff 25 |........|..@. ..%|
|00002140| 00 00 00 00 02 00 00 00 | 05 00 00 00 06 00 00 00 |........|........|
|00002150| 00 00 00 00 00 00 08 00 | 00 00 07 00 00 00 00 00 |........|........|
|00002160| 00 00 00 00 08 00 00 00 | 07 00 09 00 49 73 4d 6f |........|....IsMo|
|00002170| 64 75 6c 65 4c 6f 61 64 | 65 64 57 00 2e 74 65 78 |duleLoad|edW..tex|
|00002180| 74 00 00 00 00 00 00 00 | 01 00 00 00 03 01 06 00 |t.......|........|
|00002190| 00 00 01 00 00 00 00 00 | 00 00 00 00 01 00 78 01 |........|......x.|
|000021a0| 00 00 00 00 0a 00 00 00 | 00 00 00 00 01 00 20 00 |........|...... .|
|000021b0| 02 00 2e 69 64 61 74 61 | 24 35 00 00 00 00 02 00 |...idata|$5......|
|000021c0| 00 00 03 01 04 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|000021d0| 00 00 01 00 78 01 00 00 | 00 00 04 00 00 00 00 00 |....x...|........|
|000021e0| 00 00 02 00 00 00 02 00 | 2e 69 64 61 74 61 24 34 |........|.idata$4|
|000021f0| 00 00 00 00 03 00 00 00 | 03 01 04 00 00 00 01 00 |........|........|
|00002200| 00 00 00 00 00 00 02 00 | 05 00 78 01 2e 69 64 61 |........|..x..ida|
|00002210| 74 61 24 36 00 00 00 00 | 04 00 00 00 03 01 12 00 |ta$6....|........|
|00002220| 00 00 00 00 00 00 00 00 | 00 00 02 00 05 00 78 01 |........|......x.|
|00002230| 00 00 00 00 1d 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002240| 02 00 3a 00 00 00 5f 5f | 69 6d 70 5f 5f 49 73 4d |..:...__|imp__IsM|
|00002250| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 57 40 38 00 5f |oduleLoa|dedW@8._|
|00002260| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00002270| 4f 52 5f 41 70 69 48 6f | 6f 6b 73 00 41 70 69 48 |OR_ApiHo|oks.ApiH|
|00002280| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/ 9552|
|00002290| 37 30 31 36 38 20 20 20 | 20 20 20 20 20 20 20 20 |70168 | |
|000022a0| 20 20 20 20 30 20 20 20 | 20 20 20 20 34 39 34 20 | 0 | 494 |
|000022b0| 20 20 20 20 20 20 60 0a | 4c 01 04 00 18 44 f0 38 | `.|L....D.8|
|000022c0| f0 00 00 00 0b 00 00 00 | 00 00 00 01 2e 74 65 78 |........|.....tex|
|000022d0| 74 00 00 00 00 00 00 00 | 00 00 00 00 06 00 00 00 |t.......|........|
|000022e0| b4 00 00 00 ba 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|000022f0| 20 10 20 60 2e 69 64 61 | 74 61 24 35 00 00 00 00 | . `.ida|ta$5....|
|00002300| 00 00 00 00 04 00 00 00 | c4 00 00 00 c8 00 00 00 |........|........|
|00002310| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00002320| 74 61 24 34 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$4....|........|
|00002330| d2 00 00 00 d6 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002340| 40 10 30 c0 2e 69 64 61 | 74 61 24 36 00 00 00 00 |@.0..ida|ta$6....|
|00002350| 00 00 00 00 10 00 00 00 | e0 00 00 00 00 00 00 00 |........|........|
|00002360| 00 00 00 00 00 00 00 00 | 40 10 20 c0 ff 25 00 00 |........|@. ..%..|
|00002370| 00 00 02 00 00 00 05 00 | 00 00 06 00 00 00 00 00 |........|........|
|00002380| 00 00 00 00 08 00 00 00 | 07 00 00 00 00 00 00 00 |........|........|
|00002390| 00 00 08 00 00 00 07 00 | 0a 00 4c 6f 61 64 41 6e |........|..LoadAn|
|000023a0| 64 43 61 6c 6c 41 00 00 | 2e 74 65 78 74 00 00 00 |dCallA..|.text...|
|000023b0| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|000023c0| 00 00 00 00 00 00 00 00 | 01 00 78 01 00 00 00 00 |........|..x.....|
|000023d0| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|000023e0| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|000023f0| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00002400| 78 01 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |x.......|........|
|00002410| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|00002420| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00002430| 00 00 02 00 05 00 78 01 | 2e 69 64 61 74 61 24 36 |......x.|.idata$6|
|00002440| 00 00 00 00 04 00 00 00 | 03 01 10 00 00 00 00 00 |........|........|
|00002450| 00 00 00 00 00 00 02 00 | 05 00 78 01 00 00 00 00 |........|..x.....|
|00002460| 1b 00 00 00 00 00 00 00 | 00 00 00 00 02 00 38 00 |........|......8.|
|00002470| 00 00 5f 5f 69 6d 70 5f | 5f 4c 6f 61 64 41 6e 64 |..__imp_|_LoadAnd|
|00002480| 43 61 6c 6c 41 40 31 36 | 00 5f 5f 49 4d 50 4f 52 |CallA@16|.__IMPOR|
|00002490| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 5f 41 70 69 |T_DESCRI|PTOR_Api|
|000024a0| 48 6f 6f 6b 73 00 41 70 | 69 48 6f 6f 6b 73 2e 64 |Hooks.Ap|iHooks.d|
|000024b0| 6c 6c 2f 20 20 20 39 35 | 35 32 37 30 31 36 38 20 |ll/ 95|5270168 |
|000024c0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 30 20 | | 0 |
|000024d0| 20 20 20 20 20 20 34 39 | 34 20 20 20 20 20 20 20 | 49|4 |
|000024e0| 60 0a 4c 01 04 00 18 44 | f0 38 f0 00 00 00 0b 00 |`.L....D|.8......|
|000024f0| 00 00 00 00 00 01 2e 74 | 65 78 74 00 00 00 00 00 |.......t|ext.....|
|00002500| 00 00 00 00 00 00 06 00 | 00 00 b4 00 00 00 ba 00 |........|........|
|00002510| 00 00 00 00 00 00 01 00 | 00 00 20 10 20 60 2e 69 |........|.. . `.i|
|00002520| 64 61 74 61 24 35 00 00 | 00 00 00 00 00 00 04 00 |data$5..|........|
|00002530| 00 00 c4 00 00 00 c8 00 | 00 00 00 00 00 00 01 00 |........|........|
|00002540| 00 00 40 10 30 c0 2e 69 | 64 61 74 61 24 34 00 00 |..@.0..i|data$4..|
|00002550| 00 00 00 00 00 00 04 00 | 00 00 d2 00 00 00 d6 00 |........|........|
|00002560| 00 00 00 00 00 00 01 00 | 00 00 40 10 30 c0 2e 69 |........|..@.0..i|
|00002570| 64 61 74 61 24 36 00 00 | 00 00 00 00 00 00 10 00 |data$6..|........|
|00002580| 00 00 e0 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002590| 00 00 40 10 20 c0 ff 25 | 00 00 00 00 02 00 00 00 |..@. ..%|........|
|000025a0| 05 00 00 00 06 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|000025b0| 00 00 07 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|000025c0| 07 00 0b 00 4c 6f 61 64 | 41 6e 64 43 61 6c 6c 57 |....Load|AndCallW|
|000025d0| 00 00 2e 74 65 78 74 00 | 00 00 00 00 00 00 01 00 |...text.|........|
|000025e0| 00 00 03 01 06 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|000025f0| 00 00 01 00 78 01 00 00 | 00 00 0a 00 00 00 00 00 |....x...|........|
|00002600| 00 00 01 00 20 00 02 00 | 2e 69 64 61 74 61 24 35 |.... ...|.idata$5|
|00002610| 00 00 00 00 02 00 00 00 | 03 01 04 00 00 00 01 00 |........|........|
|00002620| 00 00 00 00 00 00 00 00 | 01 00 78 01 00 00 00 00 |........|..x.....|
|00002630| 04 00 00 00 00 00 00 00 | 02 00 00 00 02 00 2e 69 |........|.......i|
|00002640| 64 61 74 61 24 34 00 00 | 00 00 03 00 00 00 03 01 |data$4..|........|
|00002650| 04 00 00 00 01 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|00002660| 78 01 2e 69 64 61 74 61 | 24 36 00 00 00 00 04 00 |x..idata|$6......|
|00002670| 00 00 03 01 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002680| 02 00 05 00 78 01 00 00 | 00 00 1b 00 00 00 00 00 |....x...|........|
|00002690| 00 00 00 00 00 00 02 00 | 38 00 00 00 5f 5f 69 6d |........|8...__im|
|000026a0| 70 5f 5f 4c 6f 61 64 41 | 6e 64 43 61 6c 6c 57 40 |p__LoadA|ndCallW@|
|000026b0| 31 36 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |16.__IMP|ORT_DESC|
|000026c0| 52 49 50 54 4f 52 5f 41 | 70 69 48 6f 6f 6b 73 00 |RIPTOR_A|piHooks.|
|000026d0| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/ |
|000026e0| 39 35 35 32 37 30 31 36 | 38 20 20 20 20 20 20 20 |95527016|8 |
|000026f0| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 | |0 |
|00002700| 35 30 33 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |503 | `.L...|
|00002710| 18 44 f0 38 f4 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00002720| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00002730| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00002740| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00002750| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00002760| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00002770| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00002780| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00002790| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|000027a0| 00 00 00 00 00 00 00 00 | 14 00 00 00 e0 00 00 00 |........|........|
|000027b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|000027c0| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|000027d0| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|000027e0| 00 00 00 00 00 00 08 00 | 00 00 07 00 0c 00 52 65 |........|......Re|
|000027f0| 6d 6f 74 65 45 78 65 63 | 75 74 65 54 69 6d 65 00 |moteExec|uteTime.|
|00002800| 2e 74 65 78 74 00 00 00 | 00 00 00 00 01 00 00 00 |.text...|........|
|00002810| 03 01 06 00 00 00 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002820| 01 00 78 01 00 00 00 00 | 0a 00 00 00 00 00 00 00 |..x.....|........|
|00002830| 01 00 20 00 02 00 2e 69 | 64 61 74 61 24 35 00 00 |.. ....i|data$5..|
|00002840| 00 00 02 00 00 00 03 01 | 04 00 00 00 01 00 00 00 |........|........|
|00002850| 00 00 00 00 00 00 01 00 | 78 01 00 00 00 00 04 00 |........|x.......|
|00002860| 00 00 00 00 00 00 02 00 | 00 00 02 00 2e 69 64 61 |........|.....ida|
|00002870| 74 61 24 34 00 00 00 00 | 03 00 00 00 03 01 04 00 |ta$4....|........|
|00002880| 00 00 01 00 00 00 00 00 | 00 00 02 00 05 00 78 01 |........|......x.|
|00002890| 2e 69 64 61 74 61 24 36 | 00 00 00 00 04 00 00 00 |.idata$6|........|
|000028a0| 03 01 14 00 00 00 00 00 | 00 00 00 00 00 00 02 00 |........|........|
|000028b0| 05 00 78 01 00 00 00 00 | 20 00 00 00 00 00 00 00 |..x.....| .......|
|000028c0| 00 00 00 00 02 00 3d 00 | 00 00 5f 5f 69 6d 70 5f |......=.|..__imp_|
|000028d0| 5f 52 65 6d 6f 74 65 45 | 78 65 63 75 74 65 54 69 |_RemoteE|xecuteTi|
|000028e0| 6d 65 40 32 30 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |me@20.__|IMPORT_D|
|000028f0| 45 53 43 52 49 50 54 4f | 52 5f 41 70 69 48 6f 6f |ESCRIPTO|R_ApiHoo|
|00002900| 6b 73 00 0a 41 70 69 48 | 6f 6f 6b 73 2e 64 6c 6c |ks..ApiH|ooks.dll|
|00002910| 2f 20 20 20 39 35 35 32 | 37 30 31 36 38 20 20 20 |/ 9552|70168 |
|00002920| 20 20 20 20 20 20 20 20 | 20 20 20 20 30 20 20 20 | | 0 |
|00002930| 20 20 20 20 35 30 37 20 | 20 20 20 20 20 20 60 0a | 507 | `.|
|00002940| 4c 01 04 00 18 44 f0 38 | f6 00 00 00 0b 00 00 00 |L....D.8|........|
|00002950| 00 00 00 01 2e 74 65 78 | 74 00 00 00 00 00 00 00 |.....tex|t.......|
|00002960| 00 00 00 00 06 00 00 00 | b4 00 00 00 ba 00 00 00 |........|........|
|00002970| 00 00 00 00 01 00 00 00 | 20 10 20 60 2e 69 64 61 |........| . `.ida|
|00002980| 74 61 24 35 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$5....|........|
|00002990| c4 00 00 00 c8 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|000029a0| 40 10 30 c0 2e 69 64 61 | 74 61 24 34 00 00 00 00 |@.0..ida|ta$4....|
|000029b0| 00 00 00 00 04 00 00 00 | d2 00 00 00 d6 00 00 00 |........|........|
|000029c0| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|000029d0| 74 61 24 36 00 00 00 00 | 00 00 00 00 16 00 00 00 |ta$6....|........|
|000029e0| e0 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029f0| 40 10 20 c0 ff 25 00 00 | 00 00 02 00 00 00 05 00 |@. ..%..|........|
|00002a00| 00 00 06 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|00002a10| 07 00 00 00 00 00 00 00 | 00 00 08 00 00 00 07 00 |........|........|
|00002a20| 0d 00 52 65 6d 6f 74 65 | 45 78 65 63 75 74 65 54 |..Remote|ExecuteT|
|00002a30| 69 6d 65 4e 54 00 2e 74 | 65 78 74 00 00 00 00 00 |imeNT..t|ext.....|
|00002a40| 00 00 01 00 00 00 03 01 | 06 00 00 00 01 00 00 00 |........|........|
|00002a50| 00 00 00 00 00 00 01 00 | 78 01 00 00 00 00 0a 00 |........|x.......|
|00002a60| 00 00 00 00 00 00 01 00 | 20 00 02 00 2e 69 64 61 |........| ....ida|
|00002a70| 74 61 24 35 00 00 00 00 | 02 00 00 00 03 01 04 00 |ta$5....|........|
|00002a80| 00 00 01 00 00 00 00 00 | 00 00 00 00 01 00 78 01 |........|......x.|
|00002a90| 00 00 00 00 04 00 00 00 | 00 00 00 00 02 00 00 00 |........|........|
|00002aa0| 02 00 2e 69 64 61 74 61 | 24 34 00 00 00 00 03 00 |...idata|$4......|
|00002ab0| 00 00 03 01 04 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00002ac0| 02 00 05 00 78 01 2e 69 | 64 61 74 61 24 36 00 00 |....x..i|data$6..|
|00002ad0| 00 00 04 00 00 00 03 01 | 16 00 00 00 00 00 00 00 |........|........|
|00002ae0| 00 00 00 00 02 00 05 00 | 78 01 00 00 00 00 22 00 |........|x.....".|
|00002af0| 00 00 00 00 00 00 00 00 | 00 00 02 00 3f 00 00 00 |........|....?...|
|00002b00| 5f 5f 69 6d 70 5f 5f 52 | 65 6d 6f 74 65 45 78 65 |__imp__R|emoteExe|
|00002b10| 63 75 74 65 54 69 6d 65 | 4e 54 40 32 30 00 5f 5f |cuteTime|NT@20.__|
|00002b20| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|00002b30| 52 5f 41 70 69 48 6f 6f | 6b 73 00 0a 41 70 69 48 |R_ApiHoo|ks..ApiH|
|00002b40| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/ 9552|
|00002b50| 37 30 31 36 38 20 20 20 | 20 20 20 20 20 20 20 20 |70168 | |
|00002b60| 20 20 20 20 30 20 20 20 | 20 20 20 20 34 39 35 20 | 0 | 495 |
|00002b70| 20 20 20 20 20 20 60 0a | 4c 01 04 00 18 44 f0 38 | `.|L....D.8|
|00002b80| f0 00 00 00 0b 00 00 00 | 00 00 00 01 2e 74 65 78 |........|.....tex|
|00002b90| 74 00 00 00 00 00 00 00 | 00 00 00 00 06 00 00 00 |t.......|........|
|00002ba0| b4 00 00 00 ba 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002bb0| 20 10 20 60 2e 69 64 61 | 74 61 24 35 00 00 00 00 | . `.ida|ta$5....|
|00002bc0| 00 00 00 00 04 00 00 00 | c4 00 00 00 c8 00 00 00 |........|........|
|00002bd0| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00002be0| 74 61 24 34 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$4....|........|
|00002bf0| d2 00 00 00 d6 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002c00| 40 10 30 c0 2e 69 64 61 | 74 61 24 36 00 00 00 00 |@.0..ida|ta$6....|
|00002c10| 00 00 00 00 10 00 00 00 | e0 00 00 00 00 00 00 00 |........|........|
|00002c20| 00 00 00 00 00 00 00 00 | 40 10 20 c0 ff 25 00 00 |........|@. ..%..|
|00002c30| 00 00 02 00 00 00 05 00 | 00 00 06 00 00 00 00 00 |........|........|
|00002c40| 00 00 00 00 08 00 00 00 | 07 00 00 00 00 00 00 00 |........|........|
|00002c50| 00 00 08 00 00 00 07 00 | 0e 00 55 6e 6c 6f 61 64 |........|..Unload|
|00002c60| 4d 6f 64 75 6c 65 41 00 | 2e 74 65 78 74 00 00 00 |ModuleA.|.text...|
|00002c70| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|00002c80| 00 00 00 00 00 00 00 00 | 01 00 78 01 00 00 00 00 |........|..x.....|
|00002c90| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|00002ca0| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|00002cb0| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00002cc0| 78 01 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |x.......|........|
|00002cd0| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|00002ce0| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00002cf0| 00 00 02 00 05 00 78 01 | 2e 69 64 61 74 61 24 36 |......x.|.idata$6|
|00002d00| 00 00 00 00 04 00 00 00 | 03 01 10 00 00 00 00 00 |........|........|
|00002d10| 00 00 00 00 00 00 02 00 | 05 00 78 01 00 00 00 00 |........|..x.....|
|00002d20| 1c 00 00 00 00 00 00 00 | 00 00 00 00 02 00 39 00 |........|......9.|
|00002d30| 00 00 5f 5f 69 6d 70 5f | 5f 55 6e 6c 6f 61 64 4d |..__imp_|_UnloadM|
|00002d40| 6f 64 75 6c 65 41 40 31 | 32 00 5f 5f 49 4d 50 4f |oduleA@1|2.__IMPO|
|00002d50| 52 54 5f 44 45 53 43 52 | 49 50 54 4f 52 5f 41 70 |RT_DESCR|IPTOR_Ap|
|00002d60| 69 48 6f 6f 6b 73 00 0a | 41 70 69 48 6f 6f 6b 73 |iHooks..|ApiHooks|
|00002d70| 2e 64 6c 6c 2f 20 20 20 | 39 35 35 32 37 30 31 36 |.dll/ |95527016|
|00002d80| 38 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |8 | |
|00002d90| 30 20 20 20 20 20 20 20 | 34 39 35 20 20 20 20 20 |0 |495 |
|00002da0| 20 20 60 0a 4c 01 04 00 | 18 44 f0 38 f0 00 00 00 | `.L...|.D.8....|
|00002db0| 0b 00 00 00 00 00 00 01 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00002dc0| 00 00 00 00 00 00 00 00 | 06 00 00 00 b4 00 00 00 |........|........|
|00002dd0| ba 00 00 00 00 00 00 00 | 01 00 00 00 20 10 20 60 |........|.... . `|
|00002de0| 2e 69 64 61 74 61 24 35 | 00 00 00 00 00 00 00 00 |.idata$5|........|
|00002df0| 04 00 00 00 c4 00 00 00 | c8 00 00 00 00 00 00 00 |........|........|
|00002e00| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 34 |....@.0.|.idata$4|
|00002e10| 00 00 00 00 00 00 00 00 | 04 00 00 00 d2 00 00 00 |........|........|
|00002e20| d6 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00002e30| 2e 69 64 61 74 61 24 36 | 00 00 00 00 00 00 00 00 |.idata$6|........|
|00002e40| 10 00 00 00 e0 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002e50| 00 00 00 00 40 10 20 c0 | ff 25 00 00 00 00 02 00 |....@. .|.%......|
|00002e60| 00 00 05 00 00 00 06 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002e70| 08 00 00 00 07 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|00002e80| 00 00 07 00 0f 00 55 6e | 6c 6f 61 64 4d 6f 64 75 |......Un|loadModu|
|00002e90| 6c 65 57 00 2e 74 65 78 | 74 00 00 00 00 00 00 00 |leW..tex|t.......|
|00002ea0| 01 00 00 00 03 01 06 00 | 00 00 01 00 00 00 00 00 |........|........|
|00002eb0| 00 00 00 00 01 00 78 01 | 00 00 00 00 0a 00 00 00 |......x.|........|
|00002ec0| 00 00 00 00 01 00 20 00 | 02 00 2e 69 64 61 74 61 |...... .|...idata|
|00002ed0| 24 35 00 00 00 00 02 00 | 00 00 03 01 04 00 00 00 |$5......|........|
|00002ee0| 01 00 00 00 00 00 00 00 | 00 00 01 00 78 01 00 00 |........|....x...|
|00002ef0| 00 00 04 00 00 00 00 00 | 00 00 02 00 00 00 02 00 |........|........|
|00002f00| 2e 69 64 61 74 61 24 34 | 00 00 00 00 03 00 00 00 |.idata$4|........|
|00002f10| 03 01 04 00 00 00 01 00 | 00 00 00 00 00 00 02 00 |........|........|
|00002f20| 05 00 78 01 2e 69 64 61 | 74 61 24 36 00 00 00 00 |..x..ida|ta$6....|
|00002f30| 04 00 00 00 03 01 10 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002f40| 00 00 02 00 05 00 78 01 | 00 00 00 00 1c 00 00 00 |......x.|........|
|00002f50| 00 00 00 00 00 00 00 00 | 02 00 39 00 00 00 5f 5f |........|..9...__|
|00002f60| 69 6d 70 5f 5f 55 6e 6c | 6f 61 64 4d 6f 64 75 6c |imp__Unl|oadModul|
|00002f70| 65 57 40 31 32 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |eW@12.__|IMPORT_D|
|00002f80| 45 53 43 52 49 50 54 4f | 52 5f 41 70 69 48 6f 6f |ESCRIPTO|R_ApiHoo|
|00002f90| 6b 73 00 0a | |ks.. | |
+--------+-------------------------+-------------------------+--------+--------+