Cracking 2

home *** CD-ROM | disk | FTP | other *** search
/ Cracking 2 / Cracking II..iso / Tools / ApiHooks 2.2 / hdk / iApiHooks.lib < prev
AR Archive | 2000-04-09 | 11.7 KB
open in:
MacOS 8.1 extracted |
Win98 extracted |
DOS extracted
view JSON data |
view as text

This file was processed as: AR Archive (archive/arArchive).

You can browse this item here: iApiHooks.lib
Confidence	Program	Detection	Match Type	Support
`100%`	dexvert	AR Archive `(archive/arArchive)`	magic	Supported
`100%`	dexvert	PAK/ARC Compressed Archive `(archive/arc)`	magic	Supported
`1%`	dexvert	COFF Library `(other/coffLibrary)`	magic	Unsupported
`1%`	dexvert	Sibelius Music / Score `(music/sibeliusMusicScore)`	ext	Unsupported
`1%`	dexvert	IntelliFont Font `(font/intelliFont)`	ext	Unsupported
`1%`	dexvert	Amiga Hunk Library/Object `(other/amigaLibrary)`	ext	Unsupported
`1%`	dexvert	Amiga Shared Library `(other/amigaSharedLibrary)`	ext	Unsupported
`1%`	dexvert	Chess Assistant File `(other/chessAssistant)`	ext	Unsupported
`1%`	dexvert	Maple Library `(other/mapleLibrary)`	ext	Unsupported
`100%`	file	current ar archive	default
`99%`	file	data	default
`77%`	TrID	Common Object File Format (COFF) Library	default
`22%`	TrID	ar archive	default
`100%`	siegfried	fmt/1835 Archiver Format	default
`100%`	lsar	Ar	default
`100%`	gt2	Microsoft C/C++ Bibliothek	default (weak)
`100%`	detectItEasy	Format: COFF Library (.LIB)(I386)	default (weak)
`100%`	xdgMime	application/x-archive	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 21 3c 61 72 63 68 3e 0a | 2f 20 20 20 20 20 20 20 |!<arch>.|/       |
|00000010| 20 20 20 20 20 20 20 20 | 39 35 35 32 37 30 31 37 |        |95527017|
|00000020| 30 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |0       |        |
|00000030| 30 20 20 20 20 20 20 20 | 39 30 34 20 20 20 20 20 |0       |904     |
|00000040| 20 20 60 0a 00 00 00 23 | 00 00 07 9a 00 00 0a 2c |  `....#|.......,|
|00000050| 00 00 0a e8 00 00 0b c0 | 00 00 0b c0 00 00 0d f4 |........|........|
|00000060| 00 00 0d f4 00 00 10 30 | 00 00 10 30 00 00 12 70 |.......0|...0...p|
|00000070| 00 00 12 70 00 00 14 b0 | 00 00 14 b0 00 00 16 ec |...p....|........|
|00000080| 00 00 16 ec 00 00 19 20 | 00 00 19 20 00 00 1b 40 |....... |... ...@|
|00000090| 00 00 1b 40 00 00 1d 60 | 00 00 1d 60 00 00 1f 8c |...@...`|...`....|
|000000a0| 00 00 1f 8c 00 00 21 b8 | 00 00 21 b8 00 00 23 e0 |......!.|..!...#.|
|000000b0| 00 00 23 e0 00 00 26 08 | 00 00 26 08 00 00 28 38 |..#...&.|..&...(8|
|000000c0| 00 00 28 38 00 00 2a 6c | 00 00 2a 6c 00 00 2c 94 |..(8..*l|..*l..,.|
|000000d0| 00 00 2c 94 5f 5f 49 4d | 50 4f 52 54 5f 44 45 53 |..,.__IM|PORT_DES|
|000000e0| 43 52 49 50 54 4f 52 5f | 41 70 69 48 6f 6f 6b 73 |CRIPTOR_|ApiHooks|
|000000f0| 00 5f 5f 4e 55 4c 4c 5f | 49 4d 50 4f 52 54 5f 44 |.__NULL_|IMPORT_D|
|00000100| 45 53 43 52 49 50 54 4f | 52 00 7f 41 70 69 48 6f |ESCRIPTO|R..ApiHo|
|00000110| 6f 6b 73 5f 4e 55 4c 4c | 5f 54 48 55 4e 4b 5f 44 |oks_NULL|_THUNK_D|
|00000120| 41 54 41 00 5f 45 73 74 | 61 62 6c 69 73 68 41 70 |ATA._Est|ablishAp|
|00000130| 69 48 6f 6f 6b 73 41 00 | 5f 5f 69 6d 70 5f 5f 45 |iHooksA.|__imp__E|
|00000140| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|00000150| 41 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |A._Estab|lishApiH|
|00000160| 6f 6f 6b 73 54 69 6d 65 | 41 00 5f 5f 69 6d 70 5f |ooksTime|A.__imp_|
|00000170| 5f 45 73 74 61 62 6c 69 | 73 68 41 70 69 48 6f 6f |_Establi|shApiHoo|
|00000180| 6b 73 54 69 6d 65 41 00 | 5f 45 73 74 61 62 6c 69 |ksTimeA.|_Establi|
|00000190| 73 68 41 70 69 48 6f 6f | 6b 73 54 69 6d 65 4e 54 |shApiHoo|ksTimeNT|
|000001a0| 41 00 5f 5f 69 6d 70 5f | 5f 45 73 74 61 62 6c 69 |A.__imp_|_Establi|
|000001b0| 73 68 41 70 69 48 6f 6f | 6b 73 54 69 6d 65 4e 54 |shApiHoo|ksTimeNT|
|000001c0| 41 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |A._Estab|lishApiH|
|000001d0| 6f 6f 6b 73 54 69 6d 65 | 4e 54 57 00 5f 5f 69 6d |ooksTime|NTW.__im|
|000001e0| 70 5f 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |p__Estab|lishApiH|
|000001f0| 6f 6f 6b 73 54 69 6d 65 | 4e 54 57 00 5f 45 73 74 |ooksTime|NTW._Est|
|00000200| 61 62 6c 69 73 68 41 70 | 69 48 6f 6f 6b 73 54 69 |ablishAp|iHooksTi|
|00000210| 6d 65 57 00 5f 5f 69 6d | 70 5f 5f 45 73 74 61 62 |meW.__im|p__Estab|
|00000220| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 54 69 6d 65 |lishApiH|ooksTime|
|00000230| 57 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |W._Estab|lishApiH|
|00000240| 6f 6f 6b 73 57 00 5f 5f | 69 6d 70 5f 5f 45 73 74 |ooksW.__|imp__Est|
|00000250| 61 62 6c 69 73 68 41 70 | 69 48 6f 6f 6b 73 57 00 |ablishAp|iHooksW.|
|00000260| 5f 48 6f 6f 6b 41 70 69 | 41 00 5f 5f 69 6d 70 5f |_HookApi|A.__imp_|
|00000270| 5f 48 6f 6f 6b 41 70 69 | 41 00 5f 48 6f 6f 6b 41 |_HookApi|A._HookA|
|00000280| 70 69 57 00 5f 5f 69 6d | 70 5f 5f 48 6f 6f 6b 41 |piW.__im|p__HookA|
|00000290| 70 69 57 00 5f 49 73 4d | 6f 64 75 6c 65 4c 6f 61 |piW._IsM|oduleLoa|
|000002a0| 64 65 64 41 00 5f 5f 69 | 6d 70 5f 5f 49 73 4d 6f |dedA.__i|mp__IsMo|
|000002b0| 64 75 6c 65 4c 6f 61 64 | 65 64 41 00 5f 49 73 4d |duleLoad|edA._IsM|
|000002c0| 6f 64 75 6c 65 4c 6f 61 | 64 65 64 57 00 5f 5f 69 |oduleLoa|dedW.__i|
|000002d0| 6d 70 5f 5f 49 73 4d 6f | 64 75 6c 65 4c 6f 61 64 |mp__IsMo|duleLoad|
|000002e0| 65 64 57 00 5f 4c 6f 61 | 64 41 6e 64 43 61 6c 6c |edW._Loa|dAndCall|
|000002f0| 41 00 5f 5f 69 6d 70 5f | 5f 4c 6f 61 64 41 6e 64 |A.__imp_|_LoadAnd|
|00000300| 43 61 6c 6c 41 00 5f 4c | 6f 61 64 41 6e 64 43 61 |CallA._L|oadAndCa|
|00000310| 6c 6c 57 00 5f 5f 69 6d | 70 5f 5f 4c 6f 61 64 41 |llW.__im|p__LoadA|
|00000320| 6e 64 43 61 6c 6c 57 00 | 5f 52 65 6d 6f 74 65 45 |ndCallW.|_RemoteE|
|00000330| 78 65 63 75 74 65 54 69 | 6d 65 00 5f 5f 69 6d 70 |xecuteTi|me.__imp|
|00000340| 5f 5f 52 65 6d 6f 74 65 | 45 78 65 63 75 74 65 54 |__Remote|ExecuteT|
|00000350| 69 6d 65 00 5f 52 65 6d | 6f 74 65 45 78 65 63 75 |ime._Rem|oteExecu|
|00000360| 74 65 54 69 6d 65 4e 54 | 00 5f 5f 69 6d 70 5f 5f |teTimeNT|.__imp__|
|00000370| 52 65 6d 6f 74 65 45 78 | 65 63 75 74 65 54 69 6d |RemoteEx|ecuteTim|
|00000380| 65 4e 54 00 5f 55 6e 6c | 6f 61 64 4d 6f 64 75 6c |eNT._Unl|oadModul|
|00000390| 65 41 00 5f 5f 69 6d 70 | 5f 5f 55 6e 6c 6f 61 64 |eA.__imp|__Unload|
|000003a0| 4d 6f 64 75 6c 65 41 00 | 5f 55 6e 6c 6f 61 64 4d |ModuleA.|_UnloadM|
|000003b0| 6f 64 75 6c 65 57 00 5f | 5f 69 6d 70 5f 5f 55 6e |oduleW._|_imp__Un|
|000003c0| 6c 6f 61 64 4d 6f 64 75 | 6c 65 57 00 2f 20 20 20 |loadModu|leW./   |
|000003d0| 20 20 20 20 20 20 20 20 | 20 20 20 20 39 35 35 32 |        |    9552|
|000003e0| 37 30 31 37 30 20 20 20 | 20 20 20 20 20 20 20 20 |70170   |        |
|000003f0| 20 20 20 20 30 20 20 20 | 20 20 20 20 39 31 34 20 |    0   |    914 |
|00000400| 20 20 20 20 20 20 60 0a | 13 00 00 00 9a 07 00 00 |      `.|........|
|00000410| 2c 0a 00 00 e8 0a 00 00 | c0 0b 00 00 f4 0d 00 00 |,.......|........|
|00000420| 30 10 00 00 70 12 00 00 | b0 14 00 00 ec 16 00 00 |0...p...|........|
|00000430| 20 19 00 00 40 1b 00 00 | 60 1d 00 00 8c 1f 00 00 | ...@...|`.......|
|00000440| b8 21 00 00 e0 23 00 00 | 08 26 00 00 38 28 00 00 |.!...#..|.&..8(..|
|00000450| 6c 2a 00 00 94 2c 00 00 | 23 00 00 00 04 00 05 00 |l*...,..|#.......|
|00000460| 06 00 07 00 08 00 09 00 | 0a 00 0b 00 0c 00 0d 00 |........|........|
|00000470| 0e 00 0f 00 10 00 11 00 | 12 00 13 00 01 00 02 00 |........|........|
|00000480| 04 00 05 00 06 00 07 00 | 08 00 09 00 0a 00 0b 00 |........|........|
|00000490| 0c 00 0d 00 0e 00 0f 00 | 10 00 11 00 12 00 13 00 |........|........|
|000004a0| 03 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |.._Estab|lishApiH|
|000004b0| 6f 6f 6b 73 41 00 5f 45 | 73 74 61 62 6c 69 73 68 |ooksA._E|stablish|
|000004c0| 41 70 69 48 6f 6f 6b 73 | 54 69 6d 65 41 00 5f 45 |ApiHooks|TimeA._E|
|000004d0| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|000004e0| 54 69 6d 65 4e 54 41 00 | 5f 45 73 74 61 62 6c 69 |TimeNTA.|_Establi|
|000004f0| 73 68 41 70 69 48 6f 6f | 6b 73 54 69 6d 65 4e 54 |shApiHoo|ksTimeNT|
|00000500| 57 00 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |W._Estab|lishApiH|
|00000510| 6f 6f 6b 73 54 69 6d 65 | 57 00 5f 45 73 74 61 62 |ooksTime|W._Estab|
|00000520| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 57 00 5f 48 |lishApiH|ooksW._H|
|00000530| 6f 6f 6b 41 70 69 41 00 | 5f 48 6f 6f 6b 41 70 69 |ookApiA.|_HookApi|
|00000540| 57 00 5f 49 73 4d 6f 64 | 75 6c 65 4c 6f 61 64 65 |W._IsMod|uleLoade|
|00000550| 64 41 00 5f 49 73 4d 6f | 64 75 6c 65 4c 6f 61 64 |dA._IsMo|duleLoad|
|00000560| 65 64 57 00 5f 4c 6f 61 | 64 41 6e 64 43 61 6c 6c |edW._Loa|dAndCall|
|00000570| 41 00 5f 4c 6f 61 64 41 | 6e 64 43 61 6c 6c 57 00 |A._LoadA|ndCallW.|
|00000580| 5f 52 65 6d 6f 74 65 45 | 78 65 63 75 74 65 54 69 |_RemoteE|xecuteTi|
|00000590| 6d 65 00 5f 52 65 6d 6f | 74 65 45 78 65 63 75 74 |me._Remo|teExecut|
|000005a0| 65 54 69 6d 65 4e 54 00 | 5f 55 6e 6c 6f 61 64 4d |eTimeNT.|_UnloadM|
|000005b0| 6f 64 75 6c 65 41 00 5f | 55 6e 6c 6f 61 64 4d 6f |oduleA._|UnloadMo|
|000005c0| 64 75 6c 65 57 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |duleW.__|IMPORT_D|
|000005d0| 45 53 43 52 49 50 54 4f | 52 5f 41 70 69 48 6f 6f |ESCRIPTO|R_ApiHoo|
|000005e0| 6b 73 00 5f 5f 4e 55 4c | 4c 5f 49 4d 50 4f 52 54 |ks.__NUL|L_IMPORT|
|000005f0| 5f 44 45 53 43 52 49 50 | 54 4f 52 00 5f 5f 69 6d |_DESCRIP|TOR.__im|
|00000600| 70 5f 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |p__Estab|lishApiH|
|00000610| 6f 6f 6b 73 41 00 5f 5f | 69 6d 70 5f 5f 45 73 74 |ooksA.__|imp__Est|
|00000620| 61 62 6c 69 73 68 41 70 | 69 48 6f 6f 6b 73 54 69 |ablishAp|iHooksTi|
|00000630| 6d 65 41 00 5f 5f 69 6d | 70 5f 5f 45 73 74 61 62 |meA.__im|p__Estab|
|00000640| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 54 69 6d 65 |lishApiH|ooksTime|
|00000650| 4e 54 41 00 5f 5f 69 6d | 70 5f 5f 45 73 74 61 62 |NTA.__im|p__Estab|
|00000660| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 54 69 6d 65 |lishApiH|ooksTime|
|00000670| 4e 54 57 00 5f 5f 69 6d | 70 5f 5f 45 73 74 61 62 |NTW.__im|p__Estab|
|00000680| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 54 69 6d 65 |lishApiH|ooksTime|
|00000690| 57 00 5f 5f 69 6d 70 5f | 5f 45 73 74 61 62 6c 69 |W.__imp_|_Establi|
|000006a0| 73 68 41 70 69 48 6f 6f | 6b 73 57 00 5f 5f 69 6d |shApiHoo|ksW.__im|
|000006b0| 70 5f 5f 48 6f 6f 6b 41 | 70 69 41 00 5f 5f 69 6d |p__HookA|piA.__im|
|000006c0| 70 5f 5f 48 6f 6f 6b 41 | 70 69 57 00 5f 5f 69 6d |p__HookA|piW.__im|
|000006d0| 70 5f 5f 49 73 4d 6f 64 | 75 6c 65 4c 6f 61 64 65 |p__IsMod|uleLoade|
|000006e0| 64 41 00 5f 5f 69 6d 70 | 5f 5f 49 73 4d 6f 64 75 |dA.__imp|__IsModu|
|000006f0| 6c 65 4c 6f 61 64 65 64 | 57 00 5f 5f 69 6d 70 5f |leLoaded|W.__imp_|
|00000700| 5f 4c 6f 61 64 41 6e 64 | 43 61 6c 6c 41 00 5f 5f |_LoadAnd|CallA.__|
|00000710| 69 6d 70 5f 5f 4c 6f 61 | 64 41 6e 64 43 61 6c 6c |imp__Loa|dAndCall|
|00000720| 57 00 5f 5f 69 6d 70 5f | 5f 52 65 6d 6f 74 65 45 |W.__imp_|_RemoteE|
|00000730| 78 65 63 75 74 65 54 69 | 6d 65 00 5f 5f 69 6d 70 |xecuteTi|me.__imp|
|00000740| 5f 5f 52 65 6d 6f 74 65 | 45 78 65 63 75 74 65 54 |__Remote|ExecuteT|
|00000750| 69 6d 65 4e 54 00 5f 5f | 69 6d 70 5f 5f 55 6e 6c |imeNT.__|imp__Unl|
|00000760| 6f 61 64 4d 6f 64 75 6c | 65 41 00 5f 5f 69 6d 70 |oadModul|eA.__imp|
|00000770| 5f 5f 55 6e 6c 6f 61 64 | 4d 6f 64 75 6c 65 57 00 |__Unload|ModuleW.|
|00000780| 7f 41 70 69 48 6f 6f 6b | 73 5f 4e 55 4c 4c 5f 54 |.ApiHook|s_NULL_T|
|00000790| 48 55 4e 4b 5f 44 41 54 | 41 00 41 70 69 48 6f 6f |HUNK_DAT|A.ApiHoo|
|000007a0| 6b 73 2e 64 6c 6c 2f 20 | 20 20 39 35 35 32 37 30 |ks.dll/ |  955270|
|000007b0| 31 37 30 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |170     |        |
|000007c0| 20 20 30 20 20 20 20 20 | 20 20 35 39 38 20 20 20 |  0     |  598   |
|000007d0| 20 20 20 20 60 0a 4c 01 | 02 00 1a 44 f0 38 84 01 |    `.L.|...D.8..|
|000007e0| 00 00 07 00 00 00 e0 00 | 00 01 0b 01 05 00 00 00 |........|........|
|000007f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000800| 00 00 00 00 00 00 00 00 | 00 00 00 10 00 00 00 02 |........|........|
|00000810| 00 00 04 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000820| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000830| 00 00 00 00 10 00 00 10 | 00 00 00 00 10 00 00 10 |........|........|
|00000840| 00 00 00 00 00 00 10 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000870| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000880| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000890| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000008c0| 00 00 00 00 00 00 00 00 | 00 00 2e 69 64 61 74 61 |........|...idata|
|000008d0| 24 32 00 00 00 00 00 00 | 00 00 14 00 00 00 44 01 |$2......|......D.|
|000008e0| 00 00 58 01 00 00 00 00 | 00 00 03 00 00 00 40 00 |..X.....|......@.|
|000008f0| 10 c0 2e 69 64 61 74 61 | 24 36 00 00 00 00 00 00 |...idata|$6......|
|00000900| 00 00 0e 00 00 00 76 01 | 00 00 58 01 00 00 00 00 |......v.|..X.....|
|00000910| 00 00 00 00 00 00 40 00 | 20 c0 00 00 00 00 00 00 |......@.| .......|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 0c 00 |........|........|
|00000930| 00 00 02 00 00 00 07 00 | 00 00 00 00 03 00 00 00 |........|........|
|00000940| 07 00 10 00 00 00 04 00 | 00 00 07 00 41 70 69 48 |........|....ApiH|
|00000950| 6f 6f 6b 73 2e 64 6c 6c | 00 00 00 00 00 00 04 00 |ooks.dll|........|
|00000960| 00 00 00 00 00 00 01 00 | 00 00 02 00 2e 69 64 61 |........|.....ida|
|00000970| 74 61 24 32 40 00 00 c0 | 01 00 00 00 68 00 2e 69 |ta$2@...|....h..i|
|00000980| 64 61 74 61 24 36 00 00 | 00 00 02 00 00 00 03 00 |data$6..|........|
|00000990| 2e 69 64 61 74 61 24 34 | 40 00 00 c0 00 00 00 00 |.idata$4|@.......|
|000009a0| 68 00 2e 69 64 61 74 61 | 24 35 40 00 00 c0 00 00 |h..idata|$5@.....|
|000009b0| 00 00 68 00 00 00 00 00 | 21 00 00 00 00 00 00 00 |..h.....|!.......|
|000009c0| 00 00 00 00 02 00 00 00 | 00 00 3a 00 00 00 00 00 |........|..:.....|
|000009d0| 00 00 00 00 00 00 02 00 | 54 00 00 00 5f 5f 49 4d |........|T...__IM|
|000009e0| 50 4f 52 54 5f 44 45 53 | 43 52 49 50 54 4f 52 5f |PORT_DES|CRIPTOR_|
|000009f0| 41 70 69 48 6f 6f 6b 73 | 00 5f 5f 4e 55 4c 4c 5f |ApiHooks|.__NULL_|
|00000a00| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|00000a10| 52 00 7f 41 70 69 48 6f | 6f 6b 73 5f 4e 55 4c 4c |R..ApiHo|oks_NULL|
|00000a20| 5f 54 48 55 4e 4b 5f 44 | 41 54 41 00 41 70 69 48 |_THUNK_D|ATA.ApiH|
|00000a30| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/   9552|
|00000a40| 37 30 31 37 30 20 20 20 | 20 20 20 20 20 20 20 20 |70170   |        |
|00000a50| 20 20 20 20 30 20 20 20 | 20 20 20 20 31 32 37 20 |    0   |    127 |
|00000a60| 20 20 20 20 20 20 60 0a | 4c 01 01 00 1a 44 f0 38 |      `.|L....D.8|
|00000a70| 50 00 00 00 01 00 00 00 | 00 00 00 01 2e 69 64 61 |P.......|.....ida|
|00000a80| 74 61 24 33 00 00 00 00 | 00 00 00 00 14 00 00 00 |ta$3....|........|
|00000a90| 3c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |<.......|........|
|00000aa0| 40 00 10 c0 00 00 00 00 | 00 00 00 00 00 00 00 00 |@.......|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 04 00 00 00 |........|........|
|00000ac0| 00 00 00 00 01 00 00 00 | 02 00 1d 00 00 00 5f 5f |........|......__|
|00000ad0| 4e 55 4c 4c 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |NULL_IMP|ORT_DESC|
|00000ae0| 52 49 50 54 4f 52 00 0a | 41 70 69 48 6f 6f 6b 73 |RIPTOR..|ApiHooks|
|00000af0| 2e 64 6c 6c 2f 20 20 20 | 39 35 35 32 37 30 31 37 |.dll/   |95527017|
|00000b00| 30 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |0       |        |
|00000b10| 30 20 20 20 20 20 20 20 | 31 35 36 20 20 20 20 20 |0       |156     |
|00000b20| 20 20 60 0a 4c 01 02 00 | 1a 44 f0 38 6c 00 00 00 |  `.L...|.D.8l...|
|00000b30| 01 00 00 00 00 00 00 01 | 2e 69 64 61 74 61 24 35 |........|.idata$5|
|00000b40| 00 00 00 00 00 00 00 00 | 04 00 00 00 64 00 00 00 |........|....d...|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 30 c0 |........|....@.0.|
|00000b60| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00000b70| 04 00 00 00 68 00 00 00 | 00 00 00 00 00 00 00 00 |....h...|........|
|00000b80| 00 00 00 00 40 00 30 c0 | 00 00 00 00 00 00 00 00 |....@.0.|........|
|00000b90| 00 00 00 00 04 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00000ba0| 02 00 1e 00 00 00 7f 41 | 70 69 48 6f 6f 6b 73 5f |.......A|piHooks_|
|00000bb0| 4e 55 4c 4c 5f 54 48 55 | 4e 4b 5f 44 41 54 41 00 |NULL_THU|NK_DATA.|
|00000bc0| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|00000bd0| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|00000be0| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|00000bf0| 35 30 33 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |503     |  `.L...|
|00000c00| 1a 44 f0 38 f6 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00000c10| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00000c20| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00000c30| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00000c40| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00000c50| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00000c60| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00000c70| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00000c80| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00000c90| 00 00 00 00 00 00 00 00 | 16 00 00 00 e0 00 00 00 |........|........|
|00000ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00000cb0| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00000cc0| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00000cd0| 00 00 00 00 00 00 08 00 | 00 00 07 00 00 00 45 73 |........|......Es|
|00000ce0| 74 61 62 6c 69 73 68 41 | 70 69 48 6f 6f 6b 73 41 |tablishA|piHooksA|
|00000cf0| 00 00 2e 74 65 78 74 00 | 00 00 00 00 00 00 01 00 |...text.|........|
|00000d00| 00 00 03 01 06 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00000d10| 00 00 01 00 e8 70 00 00 | 00 00 0a 00 00 00 00 00 |.....p..|........|
|00000d20| 00 00 01 00 20 00 02 00 | 2e 69 64 61 74 61 24 35 |.... ...|.idata$5|
|00000d30| 00 00 00 00 02 00 00 00 | 03 01 04 00 00 00 01 00 |........|........|
|00000d40| 00 00 00 00 00 00 00 00 | 01 00 e8 70 00 00 00 00 |........|...p....|
|00000d50| 04 00 00 00 00 00 00 00 | 02 00 00 00 02 00 2e 69 |........|.......i|
|00000d60| 64 61 74 61 24 34 00 00 | 00 00 03 00 00 00 03 01 |data$4..|........|
|00000d70| 04 00 00 00 01 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|00000d80| e8 70 2e 69 64 61 74 61 | 24 36 00 00 00 00 04 00 |.p.idata|$6......|
|00000d90| 00 00 03 01 16 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000da0| 02 00 05 00 e8 70 00 00 | 00 00 1e 00 00 00 00 00 |.....p..|........|
|00000db0| 00 00 00 00 00 00 02 00 | 3b 00 00 00 5f 5f 69 6d |........|;...__im|
|00000dc0| 70 5f 5f 45 73 74 61 62 | 6c 69 73 68 41 70 69 48 |p__Estab|lishApiH|
|00000dd0| 6f 6f 6b 73 41 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |ooksA.__|IMPORT_D|
|00000de0| 45 53 43 52 49 50 54 4f | 52 5f 41 70 69 48 6f 6f |ESCRIPTO|R_ApiHoo|
|00000df0| 6b 73 00 0a 41 70 69 48 | 6f 6f 6b 73 2e 64 6c 6c |ks..ApiH|ooks.dll|
|00000e00| 2f 20 20 20 39 35 35 32 | 37 30 31 37 30 20 20 20 |/   9552|70170   |
|00000e10| 20 20 20 20 20 20 20 20 | 20 20 20 20 30 20 20 20 |        |    0   |
|00000e20| 20 20 20 20 35 31 31 20 | 20 20 20 20 20 20 60 0a |    511 |      `.|
|00000e30| 4c 01 04 00 1a 44 f0 38 | fa 00 00 00 0b 00 00 00 |L....D.8|........|
|00000e40| 00 00 00 01 2e 74 65 78 | 74 00 00 00 00 00 00 00 |.....tex|t.......|
|00000e50| 00 00 00 00 06 00 00 00 | b4 00 00 00 ba 00 00 00 |........|........|
|00000e60| 00 00 00 00 01 00 00 00 | 20 10 20 60 2e 69 64 61 |........| . `.ida|
|00000e70| 74 61 24 35 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$5....|........|
|00000e80| c4 00 00 00 c8 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00000e90| 40 10 30 c0 2e 69 64 61 | 74 61 24 34 00 00 00 00 |@.0..ida|ta$4....|
|00000ea0| 00 00 00 00 04 00 00 00 | d2 00 00 00 d6 00 00 00 |........|........|
|00000eb0| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00000ec0| 74 61 24 36 00 00 00 00 | 00 00 00 00 1a 00 00 00 |ta$6....|........|
|00000ed0| e0 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 40 10 20 c0 ff 25 00 00 | 00 00 02 00 00 00 05 00 |@. ..%..|........|
|00000ef0| 00 00 06 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|00000f00| 07 00 00 00 00 00 00 00 | 00 00 08 00 00 00 07 00 |........|........|
|00000f10| 01 00 45 73 74 61 62 6c | 69 73 68 41 70 69 48 6f |..Establ|ishApiHo|
|00000f20| 6f 6b 73 54 69 6d 65 41 | 00 00 2e 74 65 78 74 00 |oksTimeA|...text.|
|00000f30| 00 00 00 00 00 00 01 00 | 00 00 03 01 06 00 00 00 |........|........|
|00000f40| 01 00 00 00 00 00 00 00 | 00 00 01 00 e8 70 00 00 |........|.....p..|
|00000f50| 00 00 0a 00 00 00 00 00 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000f60| 2e 69 64 61 74 61 24 35 | 00 00 00 00 02 00 00 00 |.idata$5|........|
|00000f70| 03 01 04 00 00 00 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 01 00 e8 70 00 00 00 00 | 04 00 00 00 00 00 00 00 |...p....|........|
|00000f90| 02 00 00 00 02 00 2e 69 | 64 61 74 61 24 34 00 00 |.......i|data$4..|
|00000fa0| 00 00 03 00 00 00 03 01 | 04 00 00 00 01 00 00 00 |........|........|
|00000fb0| 00 00 00 00 02 00 05 00 | e8 70 2e 69 64 61 74 61 |........|.p.idata|
|00000fc0| 24 36 00 00 00 00 04 00 | 00 00 03 01 1a 00 00 00 |$6......|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 02 00 05 00 e8 70 00 00 |........|.....p..|
|00000fe0| 00 00 22 00 00 00 00 00 | 00 00 00 00 00 00 02 00 |..".....|........|
|00000ff0| 3f 00 00 00 5f 5f 69 6d | 70 5f 5f 45 73 74 61 62 |?...__im|p__Estab|
|00001000| 6c 69 73 68 41 70 69 48 | 6f 6f 6b 73 54 69 6d 65 |lishApiH|ooksTime|
|00001010| 41 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |A.__IMPO|RT_DESCR|
|00001020| 49 50 54 4f 52 5f 41 70 | 69 48 6f 6f 6b 73 00 0a |IPTOR_Ap|iHooks..|
|00001030| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|00001040| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|00001050| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|00001060| 35 31 35 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |515     |  `.L...|
|00001070| 1a 44 f0 38 fc 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00001080| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00001090| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|000010a0| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|000010b0| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|000010c0| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|000010d0| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|000010e0| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|000010f0| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00001100| 00 00 00 00 00 00 00 00 | 1c 00 00 00 e0 00 00 00 |........|........|
|00001110| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00001120| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00001130| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00001140| 00 00 00 00 00 00 08 00 | 00 00 07 00 02 00 45 73 |........|......Es|
|00001150| 74 61 62 6c 69 73 68 41 | 70 69 48 6f 6f 6b 73 54 |tablishA|piHooksT|
|00001160| 69 6d 65 4e 54 41 00 00 | 2e 74 65 78 74 00 00 00 |imeNTA..|.text...|
|00001170| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|00001180| 00 00 00 00 00 00 00 00 | 01 00 e8 70 00 00 00 00 |........|...p....|
|00001190| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|000011a0| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|000011b0| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|000011c0| e8 70 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |.p......|........|
|000011d0| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|000011e0| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|000011f0| 00 00 02 00 05 00 e8 70 | 2e 69 64 61 74 61 24 36 |.......p|.idata$6|
|00001200| 00 00 00 00 04 00 00 00 | 03 01 1c 00 00 00 00 00 |........|........|
|00001210| 00 00 00 00 00 00 02 00 | 05 00 e8 70 00 00 00 00 |........|...p....|
|00001220| 24 00 00 00 00 00 00 00 | 00 00 00 00 02 00 41 00 |$.......|......A.|
|00001230| 00 00 5f 5f 69 6d 70 5f | 5f 45 73 74 61 62 6c 69 |..__imp_|_Establi|
|00001240| 73 68 41 70 69 48 6f 6f | 6b 73 54 69 6d 65 4e 54 |shApiHoo|ksTimeNT|
|00001250| 41 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |A.__IMPO|RT_DESCR|
|00001260| 49 50 54 4f 52 5f 41 70 | 69 48 6f 6f 6b 73 00 0a |IPTOR_Ap|iHooks..|
|00001270| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|00001280| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|00001290| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|000012a0| 35 31 35 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |515     |  `.L...|
|000012b0| 1a 44 f0 38 fc 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|000012c0| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|000012d0| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|000012e0| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|000012f0| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00001300| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00001310| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00001320| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00001330| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00001340| 00 00 00 00 00 00 00 00 | 1c 00 00 00 e0 00 00 00 |........|........|
|00001350| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00001360| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00001370| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00001380| 00 00 00 00 00 00 08 00 | 00 00 07 00 03 00 45 73 |........|......Es|
|00001390| 74 61 62 6c 69 73 68 41 | 70 69 48 6f 6f 6b 73 54 |tablishA|piHooksT|
|000013a0| 69 6d 65 4e 54 57 00 00 | 2e 74 65 78 74 00 00 00 |imeNTW..|.text...|
|000013b0| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 01 00 e8 70 00 00 00 00 |........|...p....|
|000013d0| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|000013e0| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|000013f0| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001400| e8 70 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |.p......|........|
|00001410| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|00001420| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001430| 00 00 02 00 05 00 e8 70 | 2e 69 64 61 74 61 24 36 |.......p|.idata$6|
|00001440| 00 00 00 00 04 00 00 00 | 03 01 1c 00 00 00 00 00 |........|........|
|00001450| 00 00 00 00 00 00 02 00 | 05 00 e8 70 00 00 00 00 |........|...p....|
|00001460| 24 00 00 00 00 00 00 00 | 00 00 00 00 02 00 41 00 |$.......|......A.|
|00001470| 00 00 5f 5f 69 6d 70 5f | 5f 45 73 74 61 62 6c 69 |..__imp_|_Establi|
|00001480| 73 68 41 70 69 48 6f 6f | 6b 73 54 69 6d 65 4e 54 |shApiHoo|ksTimeNT|
|00001490| 57 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |W.__IMPO|RT_DESCR|
|000014a0| 49 50 54 4f 52 5f 41 70 | 69 48 6f 6f 6b 73 00 0a |IPTOR_Ap|iHooks..|
|000014b0| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|000014c0| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|000014d0| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|000014e0| 35 31 31 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |511     |  `.L...|
|000014f0| 1a 44 f0 38 fa 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00001500| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00001510| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00001520| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00001530| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00001540| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00001550| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00001560| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00001570| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00001580| 00 00 00 00 00 00 00 00 | 1a 00 00 00 e0 00 00 00 |........|........|
|00001590| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|000015a0| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|000015b0| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|000015c0| 00 00 00 00 00 00 08 00 | 00 00 07 00 04 00 45 73 |........|......Es|
|000015d0| 74 61 62 6c 69 73 68 41 | 70 69 48 6f 6f 6b 73 54 |tablishA|piHooksT|
|000015e0| 69 6d 65 57 00 00 2e 74 | 65 78 74 00 00 00 00 00 |imeW...t|ext.....|
|000015f0| 00 00 01 00 00 00 03 01 | 06 00 00 00 01 00 00 00 |........|........|
|00001600| 00 00 00 00 00 00 01 00 | e8 70 00 00 00 00 0a 00 |........|.p......|
|00001610| 00 00 00 00 00 00 01 00 | 20 00 02 00 2e 69 64 61 |........| ....ida|
|00001620| 74 61 24 35 00 00 00 00 | 02 00 00 00 03 01 04 00 |ta$5....|........|
|00001630| 00 00 01 00 00 00 00 00 | 00 00 00 00 01 00 e8 70 |........|.......p|
|00001640| 00 00 00 00 04 00 00 00 | 00 00 00 00 02 00 00 00 |........|........|
|00001650| 02 00 2e 69 64 61 74 61 | 24 34 00 00 00 00 03 00 |...idata|$4......|
|00001660| 00 00 03 01 04 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00001670| 02 00 05 00 e8 70 2e 69 | 64 61 74 61 24 36 00 00 |.....p.i|data$6..|
|00001680| 00 00 04 00 00 00 03 01 | 1a 00 00 00 00 00 00 00 |........|........|
|00001690| 00 00 00 00 02 00 05 00 | e8 70 00 00 00 00 22 00 |........|.p....".|
|000016a0| 00 00 00 00 00 00 00 00 | 00 00 02 00 3f 00 00 00 |........|....?...|
|000016b0| 5f 5f 69 6d 70 5f 5f 45 | 73 74 61 62 6c 69 73 68 |__imp__E|stablish|
|000016c0| 41 70 69 48 6f 6f 6b 73 | 54 69 6d 65 57 00 5f 5f |ApiHooks|TimeW.__|
|000016d0| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|000016e0| 52 5f 41 70 69 48 6f 6f | 6b 73 00 0a 41 70 69 48 |R_ApiHoo|ks..ApiH|
|000016f0| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/   9552|
|00001700| 37 30 31 37 30 20 20 20 | 20 20 20 20 20 20 20 20 |70170   |        |
|00001710| 20 20 20 20 30 20 20 20 | 20 20 20 20 35 30 33 20 |    0   |    503 |
|00001720| 20 20 20 20 20 20 60 0a | 4c 01 04 00 1a 44 f0 38 |      `.|L....D.8|
|00001730| f6 00 00 00 0b 00 00 00 | 00 00 00 01 2e 74 65 78 |........|.....tex|
|00001740| 74 00 00 00 00 00 00 00 | 00 00 00 00 06 00 00 00 |t.......|........|
|00001750| b4 00 00 00 ba 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00001760| 20 10 20 60 2e 69 64 61 | 74 61 24 35 00 00 00 00 | . `.ida|ta$5....|
|00001770| 00 00 00 00 04 00 00 00 | c4 00 00 00 c8 00 00 00 |........|........|
|00001780| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00001790| 74 61 24 34 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$4....|........|
|000017a0| d2 00 00 00 d6 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|000017b0| 40 10 30 c0 2e 69 64 61 | 74 61 24 36 00 00 00 00 |@.0..ida|ta$6....|
|000017c0| 00 00 00 00 16 00 00 00 | e0 00 00 00 00 00 00 00 |........|........|
|000017d0| 00 00 00 00 00 00 00 00 | 40 10 20 c0 ff 25 00 00 |........|@. ..%..|
|000017e0| 00 00 02 00 00 00 05 00 | 00 00 06 00 00 00 00 00 |........|........|
|000017f0| 00 00 00 00 08 00 00 00 | 07 00 00 00 00 00 00 00 |........|........|
|00001800| 00 00 08 00 00 00 07 00 | 05 00 45 73 74 61 62 6c |........|..Establ|
|00001810| 69 73 68 41 70 69 48 6f | 6f 6b 73 57 00 00 2e 74 |ishApiHo|oksW...t|
|00001820| 65 78 74 00 00 00 00 00 | 00 00 01 00 00 00 03 01 |ext.....|........|
|00001830| 06 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001840| e8 70 00 00 00 00 0a 00 | 00 00 00 00 00 00 01 00 |.p......|........|
|00001850| 20 00 02 00 2e 69 64 61 | 74 61 24 35 00 00 00 00 | ....ida|ta$5....|
|00001860| 02 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001870| 00 00 00 00 01 00 e8 70 | 00 00 00 00 04 00 00 00 |.......p|........|
|00001880| 00 00 00 00 02 00 00 00 | 02 00 2e 69 64 61 74 61 |........|...idata|
|00001890| 24 34 00 00 00 00 03 00 | 00 00 03 01 04 00 00 00 |$4......|........|
|000018a0| 01 00 00 00 00 00 00 00 | 02 00 05 00 e8 70 2e 69 |........|.....p.i|
|000018b0| 64 61 74 61 24 36 00 00 | 00 00 04 00 00 00 03 01 |data$6..|........|
|000018c0| 16 00 00 00 00 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|000018d0| e8 70 00 00 00 00 1e 00 | 00 00 00 00 00 00 00 00 |.p......|........|
|000018e0| 00 00 02 00 3b 00 00 00 | 5f 5f 69 6d 70 5f 5f 45 |....;...|__imp__E|
|000018f0| 73 74 61 62 6c 69 73 68 | 41 70 69 48 6f 6f 6b 73 |stablish|ApiHooks|
|00001900| 57 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |W.__IMPO|RT_DESCR|
|00001910| 49 50 54 4f 52 5f 41 70 | 69 48 6f 6f 6b 73 00 0a |IPTOR_Ap|iHooks..|
|00001920| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|00001930| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|00001940| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|00001950| 34 38 33 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |483     |  `.L...|
|00001960| 1a 44 f0 38 ec 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00001970| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00001980| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00001990| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|000019a0| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|000019b0| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|000019c0| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|000019d0| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|000019e0| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|000019f0| 00 00 00 00 00 00 00 00 | 0c 00 00 00 e0 00 00 00 |........|........|
|00001a00| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00001a10| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00001a20| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00001a30| 00 00 00 00 00 00 08 00 | 00 00 07 00 06 00 48 6f |........|......Ho|
|00001a40| 6f 6b 41 70 69 41 00 00 | 2e 74 65 78 74 00 00 00 |okApiA..|.text...|
|00001a50| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|00001a60| 00 00 00 00 00 00 00 00 | 01 00 e8 70 00 00 00 00 |........|...p....|
|00001a70| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|00001a80| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|00001a90| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001aa0| e8 70 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |.p......|........|
|00001ab0| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|00001ac0| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001ad0| 00 00 02 00 05 00 e8 70 | 2e 69 64 61 74 61 24 36 |.......p|.idata$6|
|00001ae0| 00 00 00 00 04 00 00 00 | 03 01 0c 00 00 00 00 00 |........|........|
|00001af0| 00 00 00 00 00 00 02 00 | 05 00 e8 70 00 00 00 00 |........|...p....|
|00001b00| 14 00 00 00 00 00 00 00 | 00 00 00 00 02 00 31 00 |........|......1.|
|00001b10| 00 00 5f 5f 69 6d 70 5f | 5f 48 6f 6f 6b 41 70 69 |..__imp_|_HookApi|
|00001b20| 41 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |A.__IMPO|RT_DESCR|
|00001b30| 49 50 54 4f 52 5f 41 70 | 69 48 6f 6f 6b 73 00 0a |IPTOR_Ap|iHooks..|
|00001b40| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|00001b50| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|00001b60| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|00001b70| 34 38 33 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |483     |  `.L...|
|00001b80| 1a 44 f0 38 ec 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00001b90| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00001ba0| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00001bb0| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00001bc0| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00001bd0| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00001be0| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00001bf0| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00001c00| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00001c10| 00 00 00 00 00 00 00 00 | 0c 00 00 00 e0 00 00 00 |........|........|
|00001c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00001c30| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00001c40| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00001c50| 00 00 00 00 00 00 08 00 | 00 00 07 00 07 00 48 6f |........|......Ho|
|00001c60| 6f 6b 41 70 69 57 00 00 | 2e 74 65 78 74 00 00 00 |okApiW..|.text...|
|00001c70| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|00001c80| 00 00 00 00 00 00 00 00 | 01 00 e8 70 00 00 00 00 |........|...p....|
|00001c90| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|00001ca0| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|00001cb0| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001cc0| e8 70 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |.p......|........|
|00001cd0| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|00001ce0| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001cf0| 00 00 02 00 05 00 e8 70 | 2e 69 64 61 74 61 24 36 |.......p|.idata$6|
|00001d00| 00 00 00 00 04 00 00 00 | 03 01 0c 00 00 00 00 00 |........|........|
|00001d10| 00 00 00 00 00 00 02 00 | 05 00 e8 70 00 00 00 00 |........|...p....|
|00001d20| 14 00 00 00 00 00 00 00 | 00 00 00 00 02 00 31 00 |........|......1.|
|00001d30| 00 00 5f 5f 69 6d 70 5f | 5f 48 6f 6f 6b 41 70 69 |..__imp_|_HookApi|
|00001d40| 57 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |W.__IMPO|RT_DESCR|
|00001d50| 49 50 54 4f 52 5f 41 70 | 69 48 6f 6f 6b 73 00 0a |IPTOR_Ap|iHooks..|
|00001d60| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|00001d70| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|00001d80| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|00001d90| 34 39 36 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |496     |  `.L...|
|00001da0| 1a 44 f0 38 f2 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00001db0| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00001dc0| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00001dd0| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00001de0| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00001df0| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00001e00| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00001e10| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|00001e20| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|00001e30| 00 00 00 00 00 00 00 00 | 12 00 00 00 e0 00 00 00 |........|........|
|00001e40| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|00001e50| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|00001e60| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|00001e70| 00 00 00 00 00 00 08 00 | 00 00 07 00 08 00 49 73 |........|......Is|
|00001e80| 4d 6f 64 75 6c 65 4c 6f | 61 64 65 64 41 00 2e 74 |ModuleLo|adedA..t|
|00001e90| 65 78 74 00 00 00 00 00 | 00 00 01 00 00 00 03 01 |ext.....|........|
|00001ea0| 06 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001eb0| e8 70 00 00 00 00 0a 00 | 00 00 00 00 00 00 01 00 |.p......|........|
|00001ec0| 20 00 02 00 2e 69 64 61 | 74 61 24 35 00 00 00 00 | ....ida|ta$5....|
|00001ed0| 02 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00001ee0| 00 00 00 00 01 00 e8 70 | 00 00 00 00 04 00 00 00 |.......p|........|
|00001ef0| 00 00 00 00 02 00 00 00 | 02 00 2e 69 64 61 74 61 |........|...idata|
|00001f00| 24 34 00 00 00 00 03 00 | 00 00 03 01 04 00 00 00 |$4......|........|
|00001f10| 01 00 00 00 00 00 00 00 | 02 00 05 00 e8 70 2e 69 |........|.....p.i|
|00001f20| 64 61 74 61 24 36 00 00 | 00 00 04 00 00 00 03 01 |data$6..|........|
|00001f30| 12 00 00 00 00 00 00 00 | 00 00 00 00 02 00 05 00 |........|........|
|00001f40| e8 70 00 00 00 00 1b 00 | 00 00 00 00 00 00 00 00 |.p......|........|
|00001f50| 00 00 02 00 38 00 00 00 | 5f 5f 69 6d 70 5f 5f 49 |....8...|__imp__I|
|00001f60| 73 4d 6f 64 75 6c 65 4c | 6f 61 64 65 64 41 00 5f |sModuleL|oadedA._|
|00001f70| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00001f80| 4f 52 5f 41 70 69 48 6f | 6f 6b 73 00 41 70 69 48 |OR_ApiHo|oks.ApiH|
|00001f90| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/   9552|
|00001fa0| 37 30 31 37 30 20 20 20 | 20 20 20 20 20 20 20 20 |70170   |        |
|00001fb0| 20 20 20 20 30 20 20 20 | 20 20 20 20 34 39 36 20 |    0   |    496 |
|00001fc0| 20 20 20 20 20 20 60 0a | 4c 01 04 00 1a 44 f0 38 |      `.|L....D.8|
|00001fd0| f2 00 00 00 0b 00 00 00 | 00 00 00 01 2e 74 65 78 |........|.....tex|
|00001fe0| 74 00 00 00 00 00 00 00 | 00 00 00 00 06 00 00 00 |t.......|........|
|00001ff0| b4 00 00 00 ba 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002000| 20 10 20 60 2e 69 64 61 | 74 61 24 35 00 00 00 00 | . `.ida|ta$5....|
|00002010| 00 00 00 00 04 00 00 00 | c4 00 00 00 c8 00 00 00 |........|........|
|00002020| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00002030| 74 61 24 34 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$4....|........|
|00002040| d2 00 00 00 d6 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002050| 40 10 30 c0 2e 69 64 61 | 74 61 24 36 00 00 00 00 |@.0..ida|ta$6....|
|00002060| 00 00 00 00 12 00 00 00 | e0 00 00 00 00 00 00 00 |........|........|
|00002070| 00 00 00 00 00 00 00 00 | 40 10 20 c0 ff 25 00 00 |........|@. ..%..|
|00002080| 00 00 02 00 00 00 05 00 | 00 00 06 00 00 00 00 00 |........|........|
|00002090| 00 00 00 00 08 00 00 00 | 07 00 00 00 00 00 00 00 |........|........|
|000020a0| 00 00 08 00 00 00 07 00 | 09 00 49 73 4d 6f 64 75 |........|..IsModu|
|000020b0| 6c 65 4c 6f 61 64 65 64 | 57 00 2e 74 65 78 74 00 |leLoaded|W..text.|
|000020c0| 00 00 00 00 00 00 01 00 | 00 00 03 01 06 00 00 00 |........|........|
|000020d0| 01 00 00 00 00 00 00 00 | 00 00 01 00 e8 70 00 00 |........|.....p..|
|000020e0| 00 00 0a 00 00 00 00 00 | 00 00 01 00 20 00 02 00 |........|.... ...|
|000020f0| 2e 69 64 61 74 61 24 35 | 00 00 00 00 02 00 00 00 |.idata$5|........|
|00002100| 03 01 04 00 00 00 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002110| 01 00 e8 70 00 00 00 00 | 04 00 00 00 00 00 00 00 |...p....|........|
|00002120| 02 00 00 00 02 00 2e 69 | 64 61 74 61 24 34 00 00 |.......i|data$4..|
|00002130| 00 00 03 00 00 00 03 01 | 04 00 00 00 01 00 00 00 |........|........|
|00002140| 00 00 00 00 02 00 05 00 | e8 70 2e 69 64 61 74 61 |........|.p.idata|
|00002150| 24 36 00 00 00 00 04 00 | 00 00 03 01 12 00 00 00 |$6......|........|
|00002160| 00 00 00 00 00 00 00 00 | 02 00 05 00 e8 70 00 00 |........|.....p..|
|00002170| 00 00 1b 00 00 00 00 00 | 00 00 00 00 00 00 02 00 |........|........|
|00002180| 38 00 00 00 5f 5f 69 6d | 70 5f 5f 49 73 4d 6f 64 |8...__im|p__IsMod|
|00002190| 75 6c 65 4c 6f 61 64 65 | 64 57 00 5f 5f 49 4d 50 |uleLoade|dW.__IMP|
|000021a0| 4f 52 54 5f 44 45 53 43 | 52 49 50 54 4f 52 5f 41 |ORT_DESC|RIPTOR_A|
|000021b0| 70 69 48 6f 6f 6b 73 00 | 41 70 69 48 6f 6f 6b 73 |piHooks.|ApiHooks|
|000021c0| 2e 64 6c 6c 2f 20 20 20 | 39 35 35 32 37 30 31 37 |.dll/   |95527017|
|000021d0| 30 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |0       |        |
|000021e0| 30 20 20 20 20 20 20 20 | 34 39 31 20 20 20 20 20 |0       |491     |
|000021f0| 20 20 60 0a 4c 01 04 00 | 1a 44 f0 38 f0 00 00 00 |  `.L...|.D.8....|
|00002200| 0b 00 00 00 00 00 00 01 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00002210| 00 00 00 00 00 00 00 00 | 06 00 00 00 b4 00 00 00 |........|........|
|00002220| ba 00 00 00 00 00 00 00 | 01 00 00 00 20 10 20 60 |........|.... . `|
|00002230| 2e 69 64 61 74 61 24 35 | 00 00 00 00 00 00 00 00 |.idata$5|........|
|00002240| 04 00 00 00 c4 00 00 00 | c8 00 00 00 00 00 00 00 |........|........|
|00002250| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 34 |....@.0.|.idata$4|
|00002260| 00 00 00 00 00 00 00 00 | 04 00 00 00 d2 00 00 00 |........|........|
|00002270| d6 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00002280| 2e 69 64 61 74 61 24 36 | 00 00 00 00 00 00 00 00 |.idata$6|........|
|00002290| 10 00 00 00 e0 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022a0| 00 00 00 00 40 10 20 c0 | ff 25 00 00 00 00 02 00 |....@. .|.%......|
|000022b0| 00 00 05 00 00 00 06 00 | 00 00 00 00 00 00 00 00 |........|........|
|000022c0| 08 00 00 00 07 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|000022d0| 00 00 07 00 0a 00 4c 6f | 61 64 41 6e 64 43 61 6c |......Lo|adAndCal|
|000022e0| 6c 41 00 00 2e 74 65 78 | 74 00 00 00 00 00 00 00 |lA...tex|t.......|
|000022f0| 01 00 00 00 03 01 06 00 | 00 00 01 00 00 00 00 00 |........|........|
|00002300| 00 00 00 00 01 00 e8 70 | 00 00 00 00 0a 00 00 00 |.......p|........|
|00002310| 00 00 00 00 01 00 20 00 | 02 00 2e 69 64 61 74 61 |...... .|...idata|
|00002320| 24 35 00 00 00 00 02 00 | 00 00 03 01 04 00 00 00 |$5......|........|
|00002330| 01 00 00 00 00 00 00 00 | 00 00 01 00 e8 70 00 00 |........|.....p..|
|00002340| 00 00 04 00 00 00 00 00 | 00 00 02 00 00 00 02 00 |........|........|
|00002350| 2e 69 64 61 74 61 24 34 | 00 00 00 00 03 00 00 00 |.idata$4|........|
|00002360| 03 01 04 00 00 00 01 00 | 00 00 00 00 00 00 02 00 |........|........|
|00002370| 05 00 e8 70 2e 69 64 61 | 74 61 24 36 00 00 00 00 |...p.ida|ta$6....|
|00002380| 04 00 00 00 03 01 10 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002390| 00 00 02 00 05 00 e8 70 | 00 00 00 00 18 00 00 00 |.......p|........|
|000023a0| 00 00 00 00 00 00 00 00 | 02 00 35 00 00 00 5f 5f |........|..5...__|
|000023b0| 69 6d 70 5f 5f 4c 6f 61 | 64 41 6e 64 43 61 6c 6c |imp__Loa|dAndCall|
|000023c0| 41 00 5f 5f 49 4d 50 4f | 52 54 5f 44 45 53 43 52 |A.__IMPO|RT_DESCR|
|000023d0| 49 50 54 4f 52 5f 41 70 | 69 48 6f 6f 6b 73 00 0a |IPTOR_Ap|iHooks..|
|000023e0| 41 70 69 48 6f 6f 6b 73 | 2e 64 6c 6c 2f 20 20 20 |ApiHooks|.dll/   |
|000023f0| 39 35 35 32 37 30 31 37 | 30 20 20 20 20 20 20 20 |95527017|0       |
|00002400| 20 20 20 20 20 20 20 20 | 30 20 20 20 20 20 20 20 |        |0       |
|00002410| 34 39 31 20 20 20 20 20 | 20 20 60 0a 4c 01 04 00 |491     |  `.L...|
|00002420| 1a 44 f0 38 f0 00 00 00 | 0b 00 00 00 00 00 00 01 |.D.8....|........|
|00002430| 2e 74 65 78 74 00 00 00 | 00 00 00 00 00 00 00 00 |.text...|........|
|00002440| 06 00 00 00 b4 00 00 00 | ba 00 00 00 00 00 00 00 |........|........|
|00002450| 01 00 00 00 20 10 20 60 | 2e 69 64 61 74 61 24 35 |.... . `|.idata$5|
|00002460| 00 00 00 00 00 00 00 00 | 04 00 00 00 c4 00 00 00 |........|........|
|00002470| c8 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00002480| 2e 69 64 61 74 61 24 34 | 00 00 00 00 00 00 00 00 |.idata$4|........|
|00002490| 04 00 00 00 d2 00 00 00 | d6 00 00 00 00 00 00 00 |........|........|
|000024a0| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 36 |....@.0.|.idata$6|
|000024b0| 00 00 00 00 00 00 00 00 | 10 00 00 00 e0 00 00 00 |........|........|
|000024c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 10 20 c0 |........|....@. .|
|000024d0| ff 25 00 00 00 00 02 00 | 00 00 05 00 00 00 06 00 |.%......|........|
|000024e0| 00 00 00 00 00 00 00 00 | 08 00 00 00 07 00 00 00 |........|........|
|000024f0| 00 00 00 00 00 00 08 00 | 00 00 07 00 0b 00 4c 6f |........|......Lo|
|00002500| 61 64 41 6e 64 43 61 6c | 6c 57 00 00 2e 74 65 78 |adAndCal|lW...tex|
|00002510| 74 00 00 00 00 00 00 00 | 01 00 00 00 03 01 06 00 |t.......|........|
|00002520| 00 00 01 00 00 00 00 00 | 00 00 00 00 01 00 e8 70 |........|.......p|
|00002530| 00 00 00 00 0a 00 00 00 | 00 00 00 00 01 00 20 00 |........|...... .|
|00002540| 02 00 2e 69 64 61 74 61 | 24 35 00 00 00 00 02 00 |...idata|$5......|
|00002550| 00 00 03 01 04 00 00 00 | 01 00 00 00 00 00 00 00 |........|........|
|00002560| 00 00 01 00 e8 70 00 00 | 00 00 04 00 00 00 00 00 |.....p..|........|
|00002570| 00 00 02 00 00 00 02 00 | 2e 69 64 61 74 61 24 34 |........|.idata$4|
|00002580| 00 00 00 00 03 00 00 00 | 03 01 04 00 00 00 01 00 |........|........|
|00002590| 00 00 00 00 00 00 02 00 | 05 00 e8 70 2e 69 64 61 |........|...p.ida|
|000025a0| 74 61 24 36 00 00 00 00 | 04 00 00 00 03 01 10 00 |ta$6....|........|
|000025b0| 00 00 00 00 00 00 00 00 | 00 00 02 00 05 00 e8 70 |........|.......p|
|000025c0| 00 00 00 00 18 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000025d0| 02 00 35 00 00 00 5f 5f | 69 6d 70 5f 5f 4c 6f 61 |..5...__|imp__Loa|
|000025e0| 64 41 6e 64 43 61 6c 6c | 57 00 5f 5f 49 4d 50 4f |dAndCall|W.__IMPO|
|000025f0| 52 54 5f 44 45 53 43 52 | 49 50 54 4f 52 5f 41 70 |RT_DESCR|IPTOR_Ap|
|00002600| 69 48 6f 6f 6b 73 00 0a | 41 70 69 48 6f 6f 6b 73 |iHooks..|ApiHooks|
|00002610| 2e 64 6c 6c 2f 20 20 20 | 39 35 35 32 37 30 31 37 |.dll/   |95527017|
|00002620| 30 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |0       |        |
|00002630| 30 20 20 20 20 20 20 20 | 35 30 30 20 20 20 20 20 |0       |500     |
|00002640| 20 20 60 0a 4c 01 04 00 | 1a 44 f0 38 f4 00 00 00 |  `.L...|.D.8....|
|00002650| 0b 00 00 00 00 00 00 01 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00002660| 00 00 00 00 00 00 00 00 | 06 00 00 00 b4 00 00 00 |........|........|
|00002670| ba 00 00 00 00 00 00 00 | 01 00 00 00 20 10 20 60 |........|.... . `|
|00002680| 2e 69 64 61 74 61 24 35 | 00 00 00 00 00 00 00 00 |.idata$5|........|
|00002690| 04 00 00 00 c4 00 00 00 | c8 00 00 00 00 00 00 00 |........|........|
|000026a0| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 34 |....@.0.|.idata$4|
|000026b0| 00 00 00 00 00 00 00 00 | 04 00 00 00 d2 00 00 00 |........|........|
|000026c0| d6 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|000026d0| 2e 69 64 61 74 61 24 36 | 00 00 00 00 00 00 00 00 |.idata$6|........|
|000026e0| 14 00 00 00 e0 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000026f0| 00 00 00 00 40 10 20 c0 | ff 25 00 00 00 00 02 00 |....@. .|.%......|
|00002700| 00 00 05 00 00 00 06 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002710| 08 00 00 00 07 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|00002720| 00 00 07 00 0c 00 52 65 | 6d 6f 74 65 45 78 65 63 |......Re|moteExec|
|00002730| 75 74 65 54 69 6d 65 00 | 2e 74 65 78 74 00 00 00 |uteTime.|.text...|
|00002740| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|00002750| 00 00 00 00 00 00 00 00 | 01 00 e8 70 00 00 00 00 |........|...p....|
|00002760| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|00002770| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|00002780| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00002790| e8 70 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |.p......|........|
|000027a0| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|000027b0| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|000027c0| 00 00 02 00 05 00 e8 70 | 2e 69 64 61 74 61 24 36 |.......p|.idata$6|
|000027d0| 00 00 00 00 04 00 00 00 | 03 01 14 00 00 00 00 00 |........|........|
|000027e0| 00 00 00 00 00 00 02 00 | 05 00 e8 70 00 00 00 00 |........|...p....|
|000027f0| 1d 00 00 00 00 00 00 00 | 00 00 00 00 02 00 3a 00 |........|......:.|
|00002800| 00 00 5f 5f 69 6d 70 5f | 5f 52 65 6d 6f 74 65 45 |..__imp_|_RemoteE|
|00002810| 78 65 63 75 74 65 54 69 | 6d 65 00 5f 5f 49 4d 50 |xecuteTi|me.__IMP|
|00002820| 4f 52 54 5f 44 45 53 43 | 52 49 50 54 4f 52 5f 41 |ORT_DESC|RIPTOR_A|
|00002830| 70 69 48 6f 6f 6b 73 00 | 41 70 69 48 6f 6f 6b 73 |piHooks.|ApiHooks|
|00002840| 2e 64 6c 6c 2f 20 20 20 | 39 35 35 32 37 30 31 37 |.dll/   |95527017|
|00002850| 30 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |0       |        |
|00002860| 30 20 20 20 20 20 20 20 | 35 30 34 20 20 20 20 20 |0       |504     |
|00002870| 20 20 60 0a 4c 01 04 00 | 1a 44 f0 38 f6 00 00 00 |  `.L...|.D.8....|
|00002880| 0b 00 00 00 00 00 00 01 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00002890| 00 00 00 00 00 00 00 00 | 06 00 00 00 b4 00 00 00 |........|........|
|000028a0| ba 00 00 00 00 00 00 00 | 01 00 00 00 20 10 20 60 |........|.... . `|
|000028b0| 2e 69 64 61 74 61 24 35 | 00 00 00 00 00 00 00 00 |.idata$5|........|
|000028c0| 04 00 00 00 c4 00 00 00 | c8 00 00 00 00 00 00 00 |........|........|
|000028d0| 01 00 00 00 40 10 30 c0 | 2e 69 64 61 74 61 24 34 |....@.0.|.idata$4|
|000028e0| 00 00 00 00 00 00 00 00 | 04 00 00 00 d2 00 00 00 |........|........|
|000028f0| d6 00 00 00 00 00 00 00 | 01 00 00 00 40 10 30 c0 |........|....@.0.|
|00002900| 2e 69 64 61 74 61 24 36 | 00 00 00 00 00 00 00 00 |.idata$6|........|
|00002910| 16 00 00 00 e0 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002920| 00 00 00 00 40 10 20 c0 | ff 25 00 00 00 00 02 00 |....@. .|.%......|
|00002930| 00 00 05 00 00 00 06 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002940| 08 00 00 00 07 00 00 00 | 00 00 00 00 00 00 08 00 |........|........|
|00002950| 00 00 07 00 0d 00 52 65 | 6d 6f 74 65 45 78 65 63 |......Re|moteExec|
|00002960| 75 74 65 54 69 6d 65 4e | 54 00 2e 74 65 78 74 00 |uteTimeN|T..text.|
|00002970| 00 00 00 00 00 00 01 00 | 00 00 03 01 06 00 00 00 |........|........|
|00002980| 01 00 00 00 00 00 00 00 | 00 00 01 00 e8 70 00 00 |........|.....p..|
|00002990| 00 00 0a 00 00 00 00 00 | 00 00 01 00 20 00 02 00 |........|.... ...|
|000029a0| 2e 69 64 61 74 61 24 35 | 00 00 00 00 02 00 00 00 |.idata$5|........|
|000029b0| 03 01 04 00 00 00 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029c0| 01 00 e8 70 00 00 00 00 | 04 00 00 00 00 00 00 00 |...p....|........|
|000029d0| 02 00 00 00 02 00 2e 69 | 64 61 74 61 24 34 00 00 |.......i|data$4..|
|000029e0| 00 00 03 00 00 00 03 01 | 04 00 00 00 01 00 00 00 |........|........|
|000029f0| 00 00 00 00 02 00 05 00 | e8 70 2e 69 64 61 74 61 |........|.p.idata|
|00002a00| 24 36 00 00 00 00 04 00 | 00 00 03 01 16 00 00 00 |$6......|........|
|00002a10| 00 00 00 00 00 00 00 00 | 02 00 05 00 e8 70 00 00 |........|.....p..|
|00002a20| 00 00 1f 00 00 00 00 00 | 00 00 00 00 00 00 02 00 |........|........|
|00002a30| 3c 00 00 00 5f 5f 69 6d | 70 5f 5f 52 65 6d 6f 74 |<...__im|p__Remot|
|00002a40| 65 45 78 65 63 75 74 65 | 54 69 6d 65 4e 54 00 5f |eExecute|TimeNT._|
|00002a50| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00002a60| 4f 52 5f 41 70 69 48 6f | 6f 6b 73 00 41 70 69 48 |OR_ApiHo|oks.ApiH|
|00002a70| 6f 6f 6b 73 2e 64 6c 6c | 2f 20 20 20 39 35 35 32 |ooks.dll|/   9552|
|00002a80| 37 30 31 37 30 20 20 20 | 20 20 20 20 20 20 20 20 |70170   |        |
|00002a90| 20 20 20 20 30 20 20 20 | 20 20 20 20 34 39 32 20 |    0   |    492 |
|00002aa0| 20 20 20 20 20 20 60 0a | 4c 01 04 00 1a 44 f0 38 |      `.|L....D.8|
|00002ab0| f0 00 00 00 0b 00 00 00 | 00 00 00 01 2e 74 65 78 |........|.....tex|
|00002ac0| 74 00 00 00 00 00 00 00 | 00 00 00 00 06 00 00 00 |t.......|........|
|00002ad0| b4 00 00 00 ba 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002ae0| 20 10 20 60 2e 69 64 61 | 74 61 24 35 00 00 00 00 | . `.ida|ta$5....|
|00002af0| 00 00 00 00 04 00 00 00 | c4 00 00 00 c8 00 00 00 |........|........|
|00002b00| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00002b10| 74 61 24 34 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$4....|........|
|00002b20| d2 00 00 00 d6 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002b30| 40 10 30 c0 2e 69 64 61 | 74 61 24 36 00 00 00 00 |@.0..ida|ta$6....|
|00002b40| 00 00 00 00 10 00 00 00 | e0 00 00 00 00 00 00 00 |........|........|
|00002b50| 00 00 00 00 00 00 00 00 | 40 10 20 c0 ff 25 00 00 |........|@. ..%..|
|00002b60| 00 00 02 00 00 00 05 00 | 00 00 06 00 00 00 00 00 |........|........|
|00002b70| 00 00 00 00 08 00 00 00 | 07 00 00 00 00 00 00 00 |........|........|
|00002b80| 00 00 08 00 00 00 07 00 | 0e 00 55 6e 6c 6f 61 64 |........|..Unload|
|00002b90| 4d 6f 64 75 6c 65 41 00 | 2e 74 65 78 74 00 00 00 |ModuleA.|.text...|
|00002ba0| 00 00 00 00 01 00 00 00 | 03 01 06 00 00 00 01 00 |........|........|
|00002bb0| 00 00 00 00 00 00 00 00 | 01 00 e8 70 00 00 00 00 |........|...p....|
|00002bc0| 0a 00 00 00 00 00 00 00 | 01 00 20 00 02 00 2e 69 |........|.. ....i|
|00002bd0| 64 61 74 61 24 35 00 00 | 00 00 02 00 00 00 03 01 |data$5..|........|
|00002be0| 04 00 00 00 01 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00002bf0| e8 70 00 00 00 00 04 00 | 00 00 00 00 00 00 02 00 |.p......|........|
|00002c00| 00 00 02 00 2e 69 64 61 | 74 61 24 34 00 00 00 00 |.....ida|ta$4....|
|00002c10| 03 00 00 00 03 01 04 00 | 00 00 01 00 00 00 00 00 |........|........|
|00002c20| 00 00 02 00 05 00 e8 70 | 2e 69 64 61 74 61 24 36 |.......p|.idata$6|
|00002c30| 00 00 00 00 04 00 00 00 | 03 01 10 00 00 00 00 00 |........|........|
|00002c40| 00 00 00 00 00 00 02 00 | 05 00 e8 70 00 00 00 00 |........|...p....|
|00002c50| 19 00 00 00 00 00 00 00 | 00 00 00 00 02 00 36 00 |........|......6.|
|00002c60| 00 00 5f 5f 69 6d 70 5f | 5f 55 6e 6c 6f 61 64 4d |..__imp_|_UnloadM|
|00002c70| 6f 64 75 6c 65 41 00 5f | 5f 49 4d 50 4f 52 54 5f |oduleA._|_IMPORT_|
|00002c80| 44 45 53 43 52 49 50 54 | 4f 52 5f 41 70 69 48 6f |DESCRIPT|OR_ApiHo|
|00002c90| 6f 6b 73 00 41 70 69 48 | 6f 6f 6b 73 2e 64 6c 6c |oks.ApiH|ooks.dll|
|00002ca0| 2f 20 20 20 39 35 35 32 | 37 30 31 37 30 20 20 20 |/   9552|70170   |
|00002cb0| 20 20 20 20 20 20 20 20 | 20 20 20 20 30 20 20 20 |        |    0   |
|00002cc0| 20 20 20 20 34 39 32 20 | 20 20 20 20 20 20 60 0a |    492 |      `.|
|00002cd0| 4c 01 04 00 1a 44 f0 38 | f0 00 00 00 0b 00 00 00 |L....D.8|........|
|00002ce0| 00 00 00 01 2e 74 65 78 | 74 00 00 00 00 00 00 00 |.....tex|t.......|
|00002cf0| 00 00 00 00 06 00 00 00 | b4 00 00 00 ba 00 00 00 |........|........|
|00002d00| 00 00 00 00 01 00 00 00 | 20 10 20 60 2e 69 64 61 |........| . `.ida|
|00002d10| 74 61 24 35 00 00 00 00 | 00 00 00 00 04 00 00 00 |ta$5....|........|
|00002d20| c4 00 00 00 c8 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002d30| 40 10 30 c0 2e 69 64 61 | 74 61 24 34 00 00 00 00 |@.0..ida|ta$4....|
|00002d40| 00 00 00 00 04 00 00 00 | d2 00 00 00 d6 00 00 00 |........|........|
|00002d50| 00 00 00 00 01 00 00 00 | 40 10 30 c0 2e 69 64 61 |........|@.0..ida|
|00002d60| 74 61 24 36 00 00 00 00 | 00 00 00 00 10 00 00 00 |ta$6....|........|
|00002d70| e0 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002d80| 40 10 20 c0 ff 25 00 00 | 00 00 02 00 00 00 05 00 |@. ..%..|........|
|00002d90| 00 00 06 00 00 00 00 00 | 00 00 00 00 08 00 00 00 |........|........|
|00002da0| 07 00 00 00 00 00 00 00 | 00 00 08 00 00 00 07 00 |........|........|
|00002db0| 0f 00 55 6e 6c 6f 61 64 | 4d 6f 64 75 6c 65 57 00 |..Unload|ModuleW.|
|00002dc0| 2e 74 65 78 74 00 00 00 | 00 00 00 00 01 00 00 00 |.text...|........|
|00002dd0| 03 01 06 00 00 00 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002de0| 01 00 e8 70 00 00 00 00 | 0a 00 00 00 00 00 00 00 |...p....|........|
|00002df0| 01 00 20 00 02 00 2e 69 | 64 61 74 61 24 35 00 00 |.. ....i|data$5..|
|00002e00| 00 00 02 00 00 00 03 01 | 04 00 00 00 01 00 00 00 |........|........|
|00002e10| 00 00 00 00 00 00 01 00 | e8 70 00 00 00 00 04 00 |........|.p......|
|00002e20| 00 00 00 00 00 00 02 00 | 00 00 02 00 2e 69 64 61 |........|.....ida|
|00002e30| 74 61 24 34 00 00 00 00 | 03 00 00 00 03 01 04 00 |ta$4....|........|
|00002e40| 00 00 01 00 00 00 00 00 | 00 00 02 00 05 00 e8 70 |........|.......p|
|00002e50| 2e 69 64 61 74 61 24 36 | 00 00 00 00 04 00 00 00 |.idata$6|........|
|00002e60| 03 01 10 00 00 00 00 00 | 00 00 00 00 00 00 02 00 |........|........|
|00002e70| 05 00 e8 70 00 00 00 00 | 19 00 00 00 00 00 00 00 |...p....|........|
|00002e80| 00 00 00 00 02 00 36 00 | 00 00 5f 5f 69 6d 70 5f |......6.|..__imp_|
|00002e90| 5f 55 6e 6c 6f 61 64 4d | 6f 64 75 6c 65 57 00 5f |_UnloadM|oduleW._|
|00002ea0| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00002eb0| 4f 52 5f 41 70 69 48 6f | 6f 6b 73 00             |OR_ApiHo|oks.    |
+--------+-------------------------+-------------------------+--------+--------+