/ PC Advisor 2005 August / PCADVD_121.iso / edit / Utilities / TCPView / tcpvcon.exe / BINRES / RCDRIVERNT

MacOS 8.1

Win98

DOS

browse contents

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 c0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| ff e6 01 db bb 87 6f 88 | bb 87 6f 88 bb 87 6f 88 |......o.|..o...o.|
|00000090| bb 87 6f 88 9e 87 6f 88 | 7c 81 69 88 ba 87 6f 88 |..o...o.||.i...o.|
|000000a0| bd a4 65 88 ba 87 6f 88 | 52 69 63 68 bb 87 6f 88 |..e...o.|Rich..o.|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 50 45 00 00 4c 01 04 00 | 82 d9 ac 40 e0 17 00 00 |PE..L...|...@....|
|000000d0| 64 00 00 00 e0 00 06 01 | 0b 01 06 00 c0 10 00 00 |d.......|........|
|000000e0| a0 04 00 00 00 00 00 00 | 16 0d 00 00 60 02 00 00 |........|....`...|
|000000f0| e0 0f 00 00 00 00 00 08 | 20 00 00 00 20 00 00 00 |........| ... ...|
|00000100| 04 00 00 00 04 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000110| c0 17 00 00 60 02 00 00 | 35 15 01 00 01 00 00 00 |....`...|5.......|
|00000120| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000130| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| e0 0f 00 00 3c 00 00 00 | 20 13 00 00 80 03 00 00 |....<...| .......|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| a0 16 00 00 bc 00 00 00 | e0 02 00 00 54 00 00 00 |........|....T...|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 60 02 00 00 80 00 00 00 |........|`.......|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001c0| 7c 0d 00 00 60 02 00 00 | 80 0d 00 00 60 02 00 00 ||...`...|....`...|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|000001e0| 49 4e 49 54 00 00 00 00 | 38 03 00 00 e0 0f 00 00 |INIT....|8.......|
|000001f0| 40 03 00 00 e0 0f 00 00 | 00 00 00 00 00 00 00 00 |@.......|........|
|00000200| 00 00 00 00 20 00 00 e2 | 2e 72 73 72 63 00 00 00 |.... ...|.rsrc...|
|00000210| 80 03 00 00 20 13 00 00 | 80 03 00 00 20 13 00 00 |.... ...|.... ...|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000230| 2e 72 65 6c 6f 63 00 00 | 10 01 00 00 a0 16 00 00 |.reloc..|........|
|00000240| 20 01 00 00 a0 16 00 00 | 00 00 00 00 00 00 00 00 | .......|........|
|00000250| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000260| f4 12 00 00 02 13 00 00 | 00 00 00 00 da 10 00 00 |........|........|
|00000270| ee 10 00 00 f8 10 00 00 | 0c 11 00 00 1c 11 00 00 |........|........|
|00000280| 2e 11 00 00 46 11 00 00 | 62 11 00 00 74 11 00 00 |....F...|b...t...|
|00000290| 92 11 00 00 a6 11 00 00 | be 11 00 00 ba 10 00 00 |........|........|
|000002a0| e4 11 00 00 fa 11 00 00 | 14 12 00 00 28 12 00 00 |........|....(...|
|000002b0| 3c 12 00 00 56 12 00 00 | 68 12 00 00 80 12 00 00 |<...V...|h.......|
|000002c0| 98 12 00 00 b0 12 00 00 | c2 12 00 00 e8 12 00 00 |........|........|
|000002d0| b0 10 00 00 ce 11 00 00 | 9c 10 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 80 d9 ac 40 | 00 00 00 00 01 00 00 00 |.......@|........|
|000002f0| 1b 0f 00 00 00 00 00 00 | c0 17 00 00 00 00 00 00 |........|........|
|00000300| 80 d9 ac 40 00 00 00 00 | 04 00 00 00 10 01 00 00 |...@....|........|
|00000310| 00 00 00 00 dc 26 00 00 | 00 00 00 00 80 d9 ac 40 |.....&..|.......@|
|00000320| 00 00 00 00 03 00 00 00 | b0 00 00 00 00 00 00 00 |........|........|
|00000330| ec 27 00 00 00 00 00 00 | ff ff ff ff 19 05 00 08 |.'......|........|
|00000340| 1d 05 00 08 00 00 00 00 | ff ff ff ff 00 00 00 00 |........|........|
|00000350| ef 05 00 08 ff ff ff ff | 40 07 00 08 44 07 00 08 |........|@...D...|
|00000360| ff ff ff ff 66 07 00 08 | 6a 07 00 08 00 00 00 00 |....f...|j.......|
|00000370| ff ff ff ff 00 00 00 00 | e1 09 00 08 55 8b ec 6a |........|....U..j|
|00000380| ff 68 38 03 00 08 68 0c | 0f 00 08 64 a1 00 00 00 |.h8...h.|...d....|
|00000390| 00 50 64 89 25 00 00 00 | 00 83 ec 1c 53 56 57 89 |.Pd.%...|....SVW.|
|000003a0| 65 e8 83 65 fc 00 8b 7d | 08 8b 47 04 85 c0 74 58 |e..e...}|..G...tX|
|000003b0| 8d 4d e0 51 68 00 08 00 | 00 8b 75 0c 56 50 ff 15 |.M.Qh...|..u.VP..|
|000003c0| 6c 02 00 08 85 c0 7c 43 | 6a 01 56 8d 45 d8 50 ff |l.....|C|j.V.E.P.|
|000003d0| 15 9c 02 00 08 80 26 00 | 0f b7 45 d8 40 50 ff 75 |......&.|..E.@P.u|
|000003e0| dc 56 ff 15 d0 02 00 08 | 83 c4 0c 0f b7 45 d8 80 |.V......|.....E..|
|000003f0| 24 30 00 0f b7 45 d8 03 | f0 89 75 0c 8d 45 d8 50 |$0...E..|..u..E.P|
|00000400| ff 15 d8 02 00 08 eb 03 | 8b 75 0c 0f b7 47 30 d1 |........|.u...G0.|
|00000410| e8 89 45 e0 8b 4f 20 89 | 4d d4 75 08 85 c9 0f 84 |..E..O .|M.u.....|
|00000420| ed 00 00 00 8b 57 34 66 | 83 3a 5c 74 19 85 c9 74 |.....W4f|.:\t...t|
|00000430| 15 0f b7 51 30 d1 ea 8d | 44 10 01 89 45 e0 8b 49 |...Q0...|D...E..I|
|00000440| 20 89 4d d4 eb e7 8d 4f | 30 0f b7 11 d1 ea 2b c2 | .M....O|0.....+.|
|00000450| 03 c6 8b d8 89 5d e4 6a | 01 51 8d 45 d8 50 ff 15 |.....].j|.Q.E.P..|
|00000460| 9c 02 00 08 0f b7 45 d8 | 40 50 ff 75 dc 53 ff 15 |......E.|@P.u.S..|
|00000470| d0 02 00 08 83 c4 0c 8d | 45 d8 50 ff 15 d8 02 00 |........|E.P.....|
|00000480| 08 8b 77 20 89 75 d4 8b | 47 34 66 83 38 5c 74 4b |..w .u..|G4f.8\tK|
|00000490| 85 f6 74 47 c6 43 ff 5c | 8d 46 30 0f b7 08 d1 e9 |..tG.C.\|.F0.....|
|000004a0| 83 ca ff 2b d1 03 da 89 | 5d e4 6a 01 50 8d 45 d8 |...+....|].j.P.E.|
|000004b0| 50 ff 15 9c 02 00 08 0f | b7 45 d8 50 ff 75 dc 53 |P.......|.E.P.u.S|
|000004c0| ff 15 d0 02 00 08 83 c4 | 0c 8d 45 d8 50 ff 15 d8 |........|..E.P...|
|000004d0| 02 00 08 8b 76 20 89 75 | d4 eb b5 83 7d e0 03 76 |....v .u|....}..v|
|000004e0| 30 8b 45 0c 8d 50 02 80 | 3a 5c 75 25 8d 78 03 80 |0.E..P..|:\u%.x..|
|000004f0| 3f 5c 75 1d 83 c9 ff 33 | c0 f2 ae f7 d1 2b f9 8b |?\u....3|.....+..|
|00000500| c1 8b f7 8b fa c1 e9 02 | f3 a5 8b c8 83 e1 03 f3 |........|........|
|00000510| a4 83 4d fc ff 33 c0 eb | 10 6a 01 58 c3 8b 65 e8 |..M..3..|.j.X..e.|
|00000520| 83 4d fc ff b8 05 00 00 | c0 8b 4d f0 64 89 0d 00 |.M......|..M.d...|
|00000530| 00 00 00 5f 5e 5b c9 c2 | 08 00 55 8b ec 6a ff 68 |..._^[..|..U..j.h|
|00000540| 48 03 00 08 68 0c 0f 00 | 08 64 a1 00 00 00 00 50 |H...h...|.d.....P|
|00000550| 64 89 25 00 00 00 00 83 | ec 64 53 56 57 89 65 e8 |d.%.....|.dSVW.e.|
|00000560| 8b 75 10 8b 06 89 45 94 | 33 db 88 5d c4 89 5d 90 |.u....E.|3..]..].|
|00000570| 89 1e 8b 7d 08 8b 87 00 | 01 00 00 83 f8 08 0f 83 |...}....|........|
|00000580| 80 00 00 00 8d 4d d0 51 | 50 ff 15 8c 02 00 08 3b |.....M.Q|P......;|
|00000590| c3 0f 8c e1 01 00 00 89 | 5d fc ff 75 d0 ff 15 88 |........|]..u....|
|000005a0| 02 00 08 53 8d 45 90 50 | 53 53 68 00 00 00 80 ff |...S.E.P|SSh.....|
|000005b0| b7 08 01 00 00 ff 15 84 | 02 00 08 89 45 8c 3b c3 |........|....E.;.|
|000005c0| 7c 14 8b 4d 90 3b 8f 04 | 01 00 00 74 09 ff 15 80 ||..M.;..|...t....|
|000005d0| 02 00 08 89 5d 90 83 4d | fc ff e8 15 00 00 00 8b |....]..M|........|
|000005e0| 4d 90 3b cb 0f 85 be 00 | 00 00 e9 ac 00 00 00 33 |M.;.....|.......3|
|000005f0| db 8b 75 10 ff 15 7c 02 | 00 08 8b 4d d0 ff 15 80 |..u...|.|...M....|
|00000600| 02 00 08 c3 89 5d a8 89 | 45 a4 c7 45 ac 18 00 00 |.....]..|E..E....|
|00000610| 00 89 5d b0 89 5d b8 89 | 5d b4 89 5d bc 89 5d c0 |..]..]..|]..]..].|
|00000620| 8d 45 a4 50 8d 45 ac 50 | 6a 40 8d 45 cc 50 ff 15 |.E.P.E.P|j@.E.P..|
|00000630| 78 02 00 08 85 c0 7c 63 | 6a 02 53 53 8d 45 d4 50 |x.....|c|j.SS.E.P|
|00000640| 6a ff ff b7 08 01 00 00 | ff 75 cc ff 15 74 02 00 |j.......|.u...t..|
|00000650| 08 85 c0 ff 75 cc 7d 08 | ff 15 70 02 00 08 eb 3b |....u.}.|..p....;|
|00000660| 8b 35 70 02 00 08 ff d6 | 53 8d 45 90 50 53 53 68 |.5p.....|S.E.PSSh|
|00000670| 00 00 00 80 ff 75 d4 ff | 15 84 02 00 08 85 c0 ff |.....u..|........|
|00000680| 75 d4 7d 04 ff d6 eb 13 | ff d6 8b 4d 90 3b 8f 04 |u.}.....|...M.;..|
|00000690| 01 00 00 74 10 ff 15 80 | 02 00 08 b8 22 00 00 c0 |...t....|...."...|
|000006a0| e9 d3 00 00 00 8b 75 10 | c7 45 fc 01 00 00 00 66 |......u.|.E.....f|
|000006b0| 83 39 05 75 1d 66 83 79 | 02 70 75 16 89 4d dc 8b |.9.u.f.y|.pu..M..|
|000006c0| 7d 0c 57 51 e8 b3 fc ff | ff 89 45 8c 3b c3 7c 61 |}.WQ....|..E.;.|a|
|000006d0| eb 54 8d 45 d8 50 ff 75 | 94 8b 7d 0c 57 51 ff 15 |.T.E.P.u|..}.WQ..|
|000006e0| 6c 02 00 08 89 45 8c 3b | c3 7c 46 66 39 1f 74 41 |l....E.;|.|Ff9.tA|
|000006f0| 6a 01 57 8d 45 9c 50 ff | 15 9c 02 00 08 85 c0 75 |j.W.E.P.|.......u|
|00000700| 30 88 1f 0f b7 45 9c 50 | ff 75 a0 57 ff 15 d0 02 |0....E.P|.u.W....|
|00000710| 00 08 83 c4 0c 0f b7 45 | 9c 88 1c 38 8d 45 9c 50 |.......E|...8.E.P|
|00000720| ff 15 d8 02 00 08 83 c9 | ff 33 c0 f2 ae f7 d1 89 |........|.3......|
|00000730| 0e 8b 4d 90 ff 15 80 02 | 00 08 c6 45 c4 01 eb 31 |..M.....|...E...1|
|00000740| 6a 01 58 c3 8b 65 e8 c7 | 45 8c 05 00 00 c0 80 7d |j.X..e..|E......}|
|00000750| c4 00 75 1d c7 45 fc 02 | 00 00 00 8b 4d 90 ff 15 |..u..E..|....M...|
|00000760| 80 02 00 08 eb 07 6a 01 | 58 c3 8b 65 e8 83 4d fc |......j.|X..e..M.|
|00000770| ff 83 4d fc ff 8b 45 8c | 8b 4d f0 64 89 0d 00 00 |..M...E.|.M.d....|
|00000780| 00 00 5f 5e 5b c9 c2 0c | 00 cc 33 c0 50 50 68 00 |.._^[...|..3.PPh.|
|00000790| 00 00 10 ff 74 24 14 50 | 8b 44 24 18 ff b0 08 01 |....t$.P|.D$.....|
|000007a0| 00 00 ff b0 00 01 00 00 | ff 15 74 02 00 08 c2 08 |........|..t.....|
|000007b0| 00 cc 55 8b ec 51 56 8b | 75 08 57 33 ff 8d 45 fc |..U..QV.|u.W3..E.|
|000007c0| 57 50 57 57 57 ff 36 ff | 15 84 02 00 08 3b c7 7d |WPWWW.6.|.....;.}|
|000007d0| 07 8b 4d 10 89 39 eb 79 | b1 02 ff 15 64 02 00 08 |..M..9.y|....d...|
|000007e0| 8b 4d 10 8b 55 fc 88 45 | 0b 8b 46 04 8b 09 8d 34 |.M..U..E|..F....4|
|000007f0| 01 3b 72 18 77 34 3b 42 | 1c 72 2f 3b cf 76 3e 8b |.;r.w4;B|.r/;.v>.|
|00000800| 75 0c 53 8b d8 89 4d 10 | 2b de 8d 3c 33 57 ff 15 |u.S...M.|+..<3W..|
|00000810| 90 02 00 08 84 c0 74 06 | 8a 07 88 06 eb 03 80 26 |......t.|.......&|
|00000820| 00 46 ff 4d 10 75 e3 5b | eb 13 8b 7d 0c 8b d1 33 |.F.M.u.[|...}...3|
|00000830| c0 c1 e9 02 f3 ab 8b ca | 83 e1 03 f3 aa 8a 4d 0b |........|......M.|
|00000840| ff 15 60 02 00 08 8b 4d | fc ff 15 80 02 00 08 33 |..`....M|.......3|
|00000850| c0 5f 5e c9 c2 0c 00 cc | 55 8b ec 56 33 f6 8d 45 |._^.....|U..V3..E|
|00000860| 08 56 50 56 56 56 ff 75 | 08 ff 15 84 02 00 08 3b |.VPVVV.u|.......;|
|00000870| c6 7c 38 8b 45 08 8b 40 | 18 3b c6 74 15 ff 75 0c |.|8.E..@|.;.t..u.|
|00000880| 56 56 68 00 00 00 10 56 | 56 50 ff 15 94 02 00 08 |VVh....V|VP......|
|00000890| eb 05 8b 45 0c 89 30 8b | 4d 08 ff 15 80 02 00 08 |...E..0.|M.......|
|000008a0| 8b 45 10 c7 00 04 00 00 | 00 33 c0 5e 5d c2 0c 00 |.E......|.3.^]...|
|000008b0| 55 8b ec 53 56 8b 5d 10 | 33 f6 57 8d 45 10 56 50 |U..SV.].|3.W.E.VP|
|000008c0| 56 56 56 89 33 ff 75 08 | ff 15 84 02 00 08 3b c6 |VVV.3.u.|......;.|
|000008d0| 7c 60 a1 98 02 00 08 8b | 00 25 ff ff ff 0f 3d ce ||`......|.%....=.|
|000008e0| 0e 00 00 8b 45 10 72 05 | 8b 78 20 eb 03 8b 78 28 |....E.r.|.x ...x(|
|000008f0| 8b 75 0c 8d 47 0c 50 89 | 46 04 ff 15 90 02 00 08 |.u..G.P.|F.......|
|00000900| 84 c0 74 20 8b 46 04 8b | 4d 10 8b 00 89 46 08 8b |..t .F..|M....F..|
|00000910| 47 08 89 06 ff 15 80 02 | 00 08 c7 03 0c 00 00 00 |G.......|........|
|00000920| 33 c0 eb 0e 8b 4d 10 ff | 15 80 02 00 08 b8 05 00 |3....M..|........|
|00000930| 00 c0 5f 5e 5b 5d c2 0c | 00 cc 55 8b ec 6a ff 68 |.._^[]..|..U..j.h|
|00000940| 70 03 00 08 68 0c 0f 00 | 08 64 a1 00 00 00 00 50 |p...h...|.d.....P|
|00000950| 64 89 25 00 00 00 00 83 | ec 14 53 56 57 8d 45 e4 |d.%.....|..SVW.E.|
|00000960| 50 8b 75 08 ff b6 00 01 | 00 00 ff 15 8c 02 00 08 |P.u.....|........|
|00000970| 89 45 e0 33 ff 3b c7 7c | 57 89 7d fc ff 75 e4 ff |.E.3.;.||W.}..u..|
|00000980| 15 88 02 00 08 57 8d 45 | dc 50 57 57 68 00 00 00 |.....W.E|.PWWh...|
|00000990| 80 ff b6 08 01 00 00 ff | 15 84 02 00 08 89 45 e0 |........|......E.|
|000009a0| 3b c7 7c 20 8b 45 dc 3b | 86 04 01 00 00 75 0c ff |;.| .E.;|.....u..|
|000009b0| b6 08 01 00 00 ff 15 70 | 02 00 08 8b 4d dc ff 15 |.......p|....M...|
|000009c0| 80 02 00 08 83 4d fc ff | e8 14 00 00 00 8b 45 e0 |.....M..|......E.|
|000009d0| 8b 4d f0 64 89 0d 00 00 | 00 00 5f 5e 5b c9 c2 04 |.M.d....|.._^[...|
|000009e0| 00 ff 15 7c 02 00 08 8b | 4d e4 ff 15 80 02 00 08 |...|....|M.......|
|000009f0| c3 cc 55 8b ec 8b 4d 20 | 53 8b 5d 24 56 b8 20 00 |..U...M |S.]$V. .|
|00000a00| 35 83 57 83 23 00 83 63 | 04 00 8d 73 04 3b c8 0f |5.W.#..c|...s.;..|
|00000a10| 87 cb 00 00 00 0f 84 97 | 00 00 00 81 f9 00 00 35 |........|.......5|
|00000a20| 83 74 79 81 f9 04 00 35 | 83 74 64 81 f9 08 00 35 |.ty....5|.td....5|
|00000a30| 83 74 3e 81 f9 0c 00 35 | 83 74 24 81 f9 14 00 35 |.t>....5|.t$....5|
|00000a40| 83 0f 85 b9 00 00 00 ff | 75 18 ff 75 10 e8 38 fd |........|u..u..8.|
|00000a50| ff ff 89 03 c7 06 04 00 | 00 00 e9 10 01 00 00 ff |........|........|
|00000a60| 75 18 8b 45 10 6a 08 ff | 30 ff 15 d4 02 00 08 eb |u..E.j..|0.......|
|00000a70| e1 8b 4d 10 b8 41 03 00 | 00 39 01 76 0b c7 03 59 |..M..A..|.9.v...Y|
|00000a80| 00 00 c0 e9 e7 00 00 00 | 8b 4d 18 89 01 eb c5 ff |........|.M......|
|00000a90| 75 10 e8 a3 fe ff ff e9 | d1 00 00 00 8b 45 1c 56 |u.......|.....E.V|
|00000aa0| ff 75 18 89 06 ff 75 10 | e8 8d fa ff ff e9 bb 00 |.u....u.|........|
|00000ab0| 00 00 6a 04 59 39 4d 14 | 75 7a 39 4d 1c 75 75 8b |..j.Y9M.|uz9M.uu.|
|00000ac0| 45 10 8b 00 66 83 38 05 | 75 6a 66 83 78 02 70 75 |E...f.8.|ujf.x.pu|
|00000ad0| 63 8b 55 18 8b 40 10 89 | 02 89 0e e9 8f 00 00 00 |c.U..@..|........|
|00000ae0| 81 f9 24 00 35 83 74 74 | 81 f9 28 00 35 83 74 5c |..$.5.tt|..(.5.t\|
|00000af0| 81 f9 2c 00 35 83 74 44 | 81 f9 30 00 35 83 74 08 |..,.5.tD|..0.5.t.|
|00000b00| c7 03 af 00 00 c0 eb 67 | 8b 7d 10 ff 37 ff 15 90 |.......g|.}..7...|
|00000b10| 02 00 08 84 c0 74 1d 8b | 4d 1c 89 0e 8b 37 8b 7d |.....t..|M....7.}|
|00000b20| 18 8b c1 c1 e9 02 f3 a5 | 8b c8 83 e1 03 f3 a4 83 |........|........|
|00000b30| 23 00 eb 3b c7 03 0d 00 | 00 c0 eb 33 8b 45 10 56 |#..;....|...3.E.V|
|00000b40| ff 75 18 ff 30 e8 0e fd | ff ff eb 21 8b 45 10 56 |.u..0...|...!.E.V|
|00000b50| ff 75 18 ff 30 e8 56 fd | ff ff eb 11 8b 45 1c 56 |.u..0.V.|.....E.V|
|00000b60| ff 75 18 89 06 ff 75 10 | e8 45 fc ff ff 89 03 8b |.u....u.|.E......|
|00000b70| 03 5f 5e 5b 5d c2 24 00 | 55 8b ec 83 ec 28 53 56 |._^[].$.|U....(SV|
|00000b80| 8b 75 0c 83 65 fc 00 57 | 8b 46 60 83 66 1c 00 8b |.u..e..W|.F`.f...|
|00000b90| 4e 0c 8a 10 8b 78 08 8b | 58 04 84 d2 74 2b 80 fa |N....x..|X...t+..|
|00000ba0| 0e 74 09 c7 45 fc 10 00 | 00 c0 eb 6a ff 75 08 8d |.t..E...|...j.u..|
|00000bb0| 56 18 52 ff 70 0c 53 51 | 57 51 6a 01 ff 70 18 e8 |V.R.p.SQ|WQj..p..|
|00000bc0| 2e fe ff ff 89 45 fc eb | 4d 6a 01 58 89 45 d8 89 |.....E..|Mj.X.E..|
|00000bd0| 45 dc b8 14 00 00 00 99 | 83 65 e8 00 89 45 e0 8d |E.......|.e...E..|
|00000be0| 45 ec 89 55 e4 50 ff 15 | b0 02 00 08 ff 15 ac 02 |E..U.P..|........|
|00000bf0| 00 08 50 8d 45 ec 50 8d | 45 d8 50 ff 15 a8 02 00 |..P.E.P.|E.P.....|
|00000c00| 08 84 c0 75 07 c7 45 fc | 22 00 00 c0 8d 45 ec 50 |...u..E.|"....E.P|
|00000c10| ff 15 a4 02 00 08 8b 7d | fc 32 d2 8b ce 89 7e 18 |.......}|.2....~.|
|00000c20| ff 15 a0 02 00 08 8b c7 | 5f 5e 5b c9 c2 08 00 cc |........|_^[.....|
|00000c30| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|00000c40| 63 00 65 00 73 00 5c 00 | 50 00 72 00 6f 00 63 00 |c.e.s.\.|P.r.o.c.|
|00000c50| 45 00 78 00 70 00 00 00 | 55 8b ec 83 ec 30 56 57 |E.x.p...|U....0VW|
|00000c60| 6a 0a 8d 45 d0 59 be 30 | 0c 00 08 50 8d 7d d0 8d |j..E.Y.0|...P.}..|
|00000c70| 45 f8 f3 a5 50 ff 15 bc | 02 00 08 8d 45 f8 50 ff |E...P...|....E.P.|
|00000c80| 15 b8 02 00 08 8b 45 08 | ff 70 04 ff 15 b4 02 00 |......E.|.p......|
|00000c90| 08 5f 5e c9 c2 04 00 cc | 5c 00 44 00 65 00 76 00 |._^.....|\.D.e.v.|
|00000ca0| 69 00 63 00 65 00 5c 00 | 50 00 72 00 6f 00 63 00 |i.c.e.\.|P.r.o.c.|
|00000cb0| 45 00 78 00 70 00 00 00 | 5c 00 44 00 6f 00 73 00 |E.x.p...|\.D.o.s.|
|00000cc0| 44 00 65 00 76 00 69 00 | 63 00 65 00 73 00 5c 00 |D.e.v.i.|c.e.s.\.|
|00000cd0| 50 00 72 00 6f 00 63 00 | 45 00 78 00 70 00 00 00 |P.r.o.c.|E.x.p...|
|00000ce0| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|00000cf0| 63 00 65 00 73 00 5c 00 | 47 00 6c 00 6f 00 62 00 |c.e.s.\.|G.l.o.b.|
|00000d00| 61 00 6c 00 5c 00 50 00 | 72 00 6f 00 63 00 45 00 |a.l.\.P.|r.o.c.E.|
|00000d10| 78 00 70 00 00 00 55 8b | ec 81 ec 9c 00 00 00 53 |x.p...U.|.......S|
|00000d20| 56 57 6a 08 59 be 98 0c | 00 08 8d 7d c4 6a 0a f3 |VWj.Y...|...}.j..|
|00000d30| a5 59 be b8 0c 00 08 8d | 7d 9c 6a 0d f3 a5 59 be |.Y......|}.j...Y.|
|00000d40| e0 0c 00 08 8d bd 64 ff | ff ff 83 7d 0c 00 f3 a5 |......d.|...}....|
|00000d50| 66 a5 bb 78 0b 00 08 75 | 2f 68 44 64 6b 20 68 50 |f..x...u|/hDdk hP|
|00000d60| 01 00 00 6a 00 ff 15 c8 | 02 00 08 8b f0 6a 54 59 |...j....|.....jTY|
|00000d70| 33 c0 8b fe 81 c6 a8 00 | 00 00 f3 ab 6a 1c 8d 7e |3.......|....j..~|
|00000d80| 38 59 8b c3 f3 ab eb 03 | 8b 75 08 8b 3d bc 02 00 |8Y......|.u..=...|
|00000d90| 08 8d 45 c4 50 8d 45 f4 | 50 ff d7 8d 45 fc 8d 4d |..E.P.E.|P...E..M|
|00000da0| f4 50 33 c0 50 50 68 35 | 83 00 00 51 50 56 ff 15 |.P3.PPh5|...QPV..|
|00000db0| c4 02 00 08 89 45 08 8b | 45 fc 80 60 1c 7f 83 7d |.....E..|E..`...}|
|00000dc0| 08 00 7c 67 8d 45 9c 50 | 8d 45 ec 50 ff d7 83 7d |..|g.E.P|.E.P...}|
|00000dd0| 0c 00 75 30 8d 85 64 ff | ff ff 50 8d 45 e4 50 ff |..u0..d.|..P.E.P.|
|00000de0| d7 8b 3d c0 02 00 08 8d | 45 f4 50 8d 45 e4 50 ff |..=.....|E.P.E.P.|
|00000df0| d7 85 c0 89 45 08 7d 1d | 8d 45 f4 50 8d 45 ec 50 |....E.}.|.E.P.E.P|
|00000e00| ff d7 eb 0e 8d 45 f4 50 | 8d 45 ec 50 ff 15 c0 02 |.....E.P|.E.P....|
|00000e10| 00 08 89 45 08 83 7d 08 | 00 89 5e 70 89 5e 40 89 |...E..}.|..^p.^@.|
|00000e20| 5e 38 c7 46 34 58 0c 00 | 08 7d 0f 83 7d fc 00 74 |^8.F4X..|.}..}..t|
|00000e30| 09 ff 75 fc ff 15 b4 02 | 00 08 8b 45 08 5f 5e 5b |..u.....|...E._^[|
|00000e40| c9 c2 08 00 55 8b ec 53 | 56 57 55 6a 00 6a 00 68 |....U..S|VWUj.j.h|
|00000e50| 5c 0e 00 08 ff 75 08 e8 | 7a 01 00 00 5d 5f 5e 5b |\....u..|z...]_^[|
|00000e60| 8b e5 5d c3 8b 4c 24 04 | f7 41 04 06 00 00 00 b8 |..]..L$.|.A......|
|00000e70| 01 00 00 00 74 0f 8b 44 | 24 08 8b 54 24 10 89 02 |....t..D|$..T$...|
|00000e80| b8 03 00 00 00 c3 53 56 | 57 8b 44 24 10 50 6a fe |......SV|W.D$.Pj.|
|00000e90| 68 64 0e 00 08 64 ff 35 | 00 00 00 00 64 89 25 00 |hd...d.5|....d.%.|
|00000ea0| 00 00 00 8b 44 24 20 8b | 58 08 8b 70 0c 83 fe ff |....D$ .|X..p....|
|00000eb0| 74 20 3b 74 24 24 74 1a | 8d 34 76 8b 0c b3 89 4c |t ;t$$t.|.4v....L|
|00000ec0| 24 08 89 48 0c 83 7c b3 | 04 00 75 04 ff 54 b3 08 |$..H..|.|..u..T..|
|00000ed0| eb d1 64 8f 05 00 00 00 | 00 83 c4 0c 5f 5e 5b c3 |..d.....|...._^[.|
|00000ee0| 33 c0 64 8b 0d 00 00 00 | 00 81 79 04 64 0e 00 08 |3.d.....|..y.d...|
|00000ef0| 75 10 8b 51 0c 8b 52 0c | 39 51 08 75 05 b8 01 00 |u..Q..R.|9Q.u....|
|00000f00| 00 00 c3 cc 56 43 32 30 | 58 43 30 30 55 8b ec 83 |....VC20|XC00U...|
|00000f10| ec 08 53 56 57 55 fc 8b | 5d 0c 8b 45 08 f7 40 04 |..SVWU..|]..E..@.|
|00000f20| 06 00 00 00 75 77 89 45 | f8 8b 45 10 89 45 fc 8d |....uw.E|..E..E..|
|00000f30| 45 f8 89 43 fc 8b 73 0c | 8b 7b 08 83 fe ff 74 56 |E..C..s.|.{....tV|
|00000f40| 8d 0c 76 83 7c 8f 04 00 | 74 3a 56 55 8d 6b 10 ff |..v.|...|t:VU.k..|
|00000f50| 54 8f 04 5d 5e 8b 5d 0c | 0b c0 74 28 78 31 8b 7b |T..]^.].|..t(x1.{|
|00000f60| 08 53 e8 dd fe ff ff 83 | c4 04 8d 6b 10 56 53 e8 |.S......|...k.VS.|
|00000f70| 12 ff ff ff 83 c4 08 8d | 0c 76 8b 04 8f 89 43 0c |........|.v....C.|
|00000f80| ff 54 8f 08 8b 7b 08 8d | 0c 76 8b 34 8f eb ac b8 |.T...{..|.v.4....|
|00000f90| 00 00 00 00 eb 1c b8 01 | 00 00 00 eb 15 55 8d 6b |........|.....U.k|
|00000fa0| 10 6a ff 53 e8 dd fe ff | ff 83 c4 08 5d b8 01 00 |.j.S....|....]...|
|00000fb0| 00 00 5d 5f 5e 5b 8b e5 | 5d c3 55 8b 4c 24 08 8b |..]_^[..|].U.L$..|
|00000fc0| 29 8b 41 1c 50 8b 41 18 | 50 e8 b8 fe ff ff 83 c4 |).A.P.A.|P.......|
|00000fd0| 08 5d c2 04 00 cc ff 25 | cc 02 00 08 00 00 00 00 |.].....%|........|
|00000fe0| 28 10 00 00 00 00 00 00 | 00 00 00 00 da 12 00 00 |(.......|........|
|00000ff0| 6c 02 00 00 1c 10 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|00001000| 10 13 00 00 60 02 00 00 | 00 00 00 00 00 00 00 00 |....`...|........|
|00001010| 00 00 00 00 00 00 00 00 | 00 00 00 00 f4 12 00 00 |........|........|
|00001020| 02 13 00 00 00 00 00 00 | da 10 00 00 ee 10 00 00 |........|........|
|00001030| f8 10 00 00 0c 11 00 00 | 1c 11 00 00 2e 11 00 00 |........|........|
|00001040| 46 11 00 00 62 11 00 00 | 74 11 00 00 92 11 00 00 |F...b...|t.......|
|00001050| a6 11 00 00 be 11 00 00 | ba 10 00 00 e4 11 00 00 |........|........|
|00001060| fa 11 00 00 14 12 00 00 | 28 12 00 00 3c 12 00 00 |........|(...<...|
|00001070| 56 12 00 00 68 12 00 00 | 80 12 00 00 98 12 00 00 |V...h...|........|
|00001080| b0 12 00 00 c2 12 00 00 | e8 12 00 00 b0 10 00 00 |........|........|
|00001090| ce 11 00 00 9c 10 00 00 | 00 00 00 00 c0 02 52 74 |........|......Rt|
|000010a0| 6c 46 72 65 65 41 6e 73 | 69 53 74 72 69 6e 67 00 |lFreeAns|iString.|
|000010b0| db 03 73 74 72 6e 63 70 | 79 00 0f 03 52 74 6c 55 |..strncp|y...RtlU|
|000010c0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|000010d0| 73 69 53 74 72 69 6e 67 | 00 00 3d 02 4f 62 51 75 |siString|..=.ObQu|
|000010e0| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 5b 03 |eryNameS|tring.[.|
|000010f0| 5a 77 43 6c 6f 73 65 00 | 69 03 5a 77 44 75 70 6c |ZwClose.|i.ZwDupl|
|00001100| 69 63 61 74 65 4f 62 6a | 65 63 74 00 7a 03 5a 77 |icateObj|ect.z.Zw|
|00001110| 4f 70 65 6e 50 72 6f 63 | 65 73 73 00 59 01 4b 65 |OpenProc|ess.Y.Ke|
|00001120| 44 65 74 61 63 68 50 72 | 6f 63 65 73 73 00 44 02 |DetachPr|ocess.D.|
|00001130| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00001140| 6a 65 63 74 00 00 3f 02 | 4f 62 52 65 66 65 72 65 |ject..?.|ObRefere|
|00001150| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|00001160| 65 00 4f 01 4b 65 41 74 | 74 61 63 68 50 72 6f 63 |e.O.KeAt|tachProc|
|00001170| 65 73 73 00 5b 02 50 73 | 4c 6f 6f 6b 75 70 50 72 |ess.[.Ps|LookupPr|
|00001180| 6f 63 65 73 73 42 79 50 | 72 6f 63 65 73 73 49 64 |ocessByP|rocessId|
|00001190| 00 00 df 01 4d 6d 49 73 | 41 64 64 72 65 73 73 56 |....MmIs|AddressV|
|000011a0| 61 6c 69 64 00 00 3c 02 | 4f 62 4f 70 65 6e 4f 62 |alid..<.|ObOpenOb|
|000011b0| 6a 65 63 74 42 79 50 6f | 69 6e 74 65 72 00 07 02 |jectByPo|inter...|
|000011c0| 4e 74 42 75 69 6c 64 4e | 75 6d 62 65 72 00 7b 03 |NtBuildN|umber.{.|
|000011d0| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 54 6f 6b |ZwOpenPr|ocessTok|
|000011e0| 65 6e 00 00 45 01 49 6f | 66 43 6f 6d 70 6c 65 74 |en..E.Io|fComplet|
|000011f0| 65 52 65 71 75 65 73 74 | 00 00 47 03 53 65 52 65 |eRequest|..G.SeRe|
|00001200| 6c 65 61 73 65 53 75 62 | 6a 65 63 74 43 6f 6e 74 |leaseSub|jectCont|
|00001210| 65 78 74 00 40 03 53 65 | 50 72 69 76 69 6c 65 67 |ext.@.Se|Privileg|
|00001220| 65 43 68 65 63 6b 00 00 | 45 00 45 78 47 65 74 50 |eCheck..|E.ExGetP|
|00001230| 72 65 76 69 6f 75 73 4d | 6f 64 65 00 32 03 53 65 |reviousM|ode.2.Se|
|00001240| 43 61 70 74 75 72 65 53 | 75 62 6a 65 63 74 43 6f |CaptureS|ubjectCo|
|00001250| 6e 74 65 78 74 00 fb 00 | 49 6f 44 65 6c 65 74 65 |ntext...|IoDelete|
|00001260| 44 65 76 69 63 65 00 00 | fc 00 49 6f 44 65 6c 65 |Device..|..IoDele|
|00001270| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00001280| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00001290| 53 74 72 69 6e 67 00 00 | f7 00 49 6f 43 72 65 61 |String..|..IoCrea|
|000012a0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|000012b0| f3 00 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|000012c0| 00 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..6.ExAl|locatePo|
|000012d0| 6f 6c 57 69 74 68 54 61 | 67 00 6e 74 6f 73 6b 72 |olWithTa|g.ntoskr|
|000012e0| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|000012f0| 69 6e 64 00 4b 00 4b 66 | 4c 6f 77 65 72 49 72 71 |ind.K.Kf|LowerIrq|
|00001300| 6c 00 4c 00 4b 66 52 61 | 69 73 65 49 72 71 6c 00 |l.L.KfRa|iseIrql.|
|00001310| 48 41 4c 2e 64 6c 6c 00 | 00 00 00 00 00 00 00 00 |HAL.dll.|........|
|00001320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001330| 10 00 00 00 18 00 00 80 | 00 00 00 00 00 00 00 00 |........|........|
|00001340| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00001350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001360| 09 04 00 00 48 00 00 00 | 80 13 00 00 1c 03 00 00 |....H...|........|
|00001370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001380| 1c 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |..4...V.|S._.V.E.|
|00001390| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|000013a0| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|000013b0| 24 00 08 00 00 00 00 00 | 24 00 08 00 00 00 00 00 |$.......|$.......|
|000013c0| 3f 00 00 00 00 00 00 00 | 04 00 04 00 03 00 00 00 |?.......|........|
|000013d0| 07 00 00 00 00 00 00 00 | 00 00 00 00 7a 02 00 00 |........|....z...|
|000013e0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|000013f0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|00001400| 56 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |V.....0.|4.0.9.0.|
|00001410| 34 00 42 00 30 00 00 00 | 68 00 24 00 01 00 43 00 |4.B.0...|h.$...C.|
|00001420| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00001430| 6d 00 65 00 00 00 00 00 | 53 00 79 00 73 00 69 00 |m.e.....|S.y.s.i.|
|00001440| 6e 00 74 00 65 00 72 00 | 6e 00 61 00 6c 00 73 00 |n.t.e.r.|n.a.l.s.|
|00001450| 20 00 2d 00 20 00 77 00 | 77 00 77 00 2e 00 73 00 | .-. .w.|w.w...s.|
|00001460| 79 00 73 00 69 00 6e 00 | 74 00 65 00 72 00 6e 00 |y.s.i.n.|t.e.r.n.|
|00001470| 61 00 6c 00 73 00 2e 00 | 63 00 6f 00 6d 00 00 00 |a.l.s...|c.o.m...|
|00001480| 4a 00 11 00 01 00 46 00 | 69 00 6c 00 65 00 44 00 |J.....F.|i.l.e.D.|
|00001490| 65 00 73 00 63 00 72 00 | 69 00 70 00 74 00 69 00 |e.s.c.r.|i.p.t.i.|
|000014a0| 6f 00 6e 00 00 00 00 00 | 50 00 72 00 6f 00 63 00 |o.n.....|P.r.o.c.|
|000014b0| 65 00 73 00 73 00 20 00 | 45 00 78 00 70 00 6c 00 |e.s.s. .|E.x.p.l.|
|000014c0| 6f 00 72 00 65 00 72 00 | 00 00 00 00 2a 00 05 00 |o.r.e.r.|....*...|
|000014d0| 01 00 46 00 69 00 6c 00 | 65 00 56 00 65 00 72 00 |..F.i.l.|e.V.e.r.|
|000014e0| 73 00 69 00 6f 00 6e 00 | 00 00 00 00 38 00 2e 00 |s.i.o.n.|....8...|
|000014f0| 33 00 36 00 00 00 00 00 | 38 00 0c 00 01 00 49 00 |3.6.....|8.....I.|
|00001500| 6e 00 74 00 65 00 72 00 | 6e 00 61 00 6c 00 4e 00 |n.t.e.r.|n.a.l.N.|
|00001510| 61 00 6d 00 65 00 00 00 | 70 00 72 00 6f 00 63 00 |a.m.e...|p.r.o.c.|
|00001520| 65 00 78 00 70 00 2e 00 | 73 00 79 00 73 00 00 00 |e.x.p...|s.y.s...|
|00001530| 72 00 27 00 01 00 4c 00 | 65 00 67 00 61 00 6c 00 |r.'...L.|e.g.a.l.|
|00001540| 43 00 6f 00 70 00 79 00 | 72 00 69 00 67 00 68 00 |C.o.p.y.|r.i.g.h.|
|00001550| 74 00 00 00 43 00 6f 00 | 70 00 79 00 72 00 69 00 |t...C.o.|p.y.r.i.|
|00001560| 67 00 68 00 74 00 20 00 | 28 00 43 00 29 00 20 00 |g.h.t. .|(.C.). .|
|00001570| 4d 00 2e 00 20 00 52 00 | 75 00 73 00 73 00 69 00 |M... .R.|u.s.s.i.|
|00001580| 6e 00 6f 00 76 00 69 00 | 63 00 68 00 20 00 31 00 |n.o.v.i.|c.h. .1.|
|00001590| 39 00 39 00 36 00 2d 00 | 32 00 30 00 30 00 33 00 |9.9.6.-.|2.0.0.3.|
|000015a0| 00 00 00 00 40 00 0c 00 | 01 00 4f 00 72 00 69 00 |....@...|..O.r.i.|
|000015b0| 67 00 69 00 6e 00 61 00 | 6c 00 46 00 69 00 6c 00 |g.i.n.a.|l.F.i.l.|
|000015c0| 65 00 6e 00 61 00 6d 00 | 65 00 00 00 70 00 72 00 |e.n.a.m.|e...p.r.|
|000015d0| 6f 00 63 00 65 00 78 00 | 70 00 2e 00 53 00 79 00 |o.c.e.x.|p...S.y.|
|000015e0| 73 00 00 00 42 00 11 00 | 01 00 50 00 72 00 6f 00 |s...B...|..P.r.o.|
|000015f0| 64 00 75 00 63 00 74 00 | 4e 00 61 00 6d 00 65 00 |d.u.c.t.|N.a.m.e.|
|00001600| 00 00 00 00 50 00 72 00 | 6f 00 63 00 65 00 73 00 |....P.r.|o.c.e.s.|
|00001610| 73 00 20 00 45 00 78 00 | 70 00 6c 00 6f 00 72 00 |s. .E.x.|p.l.o.r.|
|00001620| 65 00 72 00 00 00 00 00 | 2e 00 05 00 01 00 50 00 |e.r.....|......P.|
|00001630| 72 00 6f 00 64 00 75 00 | 63 00 74 00 56 00 65 00 |r.o.d.u.|c.t.V.e.|
|00001640| 72 00 73 00 69 00 6f 00 | 6e 00 00 00 38 00 2e 00 |r.s.i.o.|n...8...|
|00001650| 33 00 36 00 00 00 00 00 | 44 00 00 00 01 00 56 00 |3.6.....|D.....V.|
|00001660| 61 00 72 00 46 00 69 00 | 6c 00 65 00 49 00 6e 00 |a.r.F.i.|l.e.I.n.|
|00001670| 66 00 6f 00 00 00 00 00 | 24 00 04 00 00 00 54 00 |f.o.....|$.....T.|
|00001680| 72 00 61 00 6e 00 73 00 | 6c 00 61 00 74 00 69 00 |r.a.n.s.|l.a.t.i.|
|00001690| 6f 00 6e 00 00 00 00 00 | 09 04 b0 04 00 00 00 00 |o.n.....|........|
|000016a0| 00 00 00 00 bc 00 00 00 | 3c 33 40 33 50 33 58 33 |........|<3@3P3X3|
|000016b0| 5c 33 64 33 68 33 78 33 | 82 33 87 33 c0 33 d1 33 |\3d3h3x3|.3.3.3.3|
|000016c0| e4 33 02 34 60 34 70 34 | 7d 34 b3 34 c2 34 cf 34 |.3.4`4p4|}4.4.4.4|
|000016d0| 40 35 45 35 8b 35 9f 35 | b7 35 cf 35 f6 35 ff 35 |@5E5.5.5|.5.5.5.5|
|000016e0| 30 36 4d 36 5a 36 62 36 | 79 36 97 36 e0 36 f9 36 |06M6Z6b6|y6.6.6.6|
|000016f0| 0e 37 22 37 36 37 60 37 | aa 37 c9 37 dc 37 10 38 |.7"767`7|.7.7.7.8|
|00001700| 42 38 4b 38 6b 38 8c 38 | 9c 38 ca 38 d3 38 fc 38 |B8K8k8.8|.8.8.8.8|
|00001710| 16 39 29 39 40 39 45 39 | 6c 39 81 39 99 39 b7 39 |.9)9@9E9|l9.9.9.9|
|00001720| c0 39 e3 39 ec 39 6b 3a | 0f 3b e8 3b ee 3b fd 3b |.9.9.9k:|.;.;.;.;|
|00001730| 12 3c 22 3c 67 3c 77 3c | 81 3c 8d 3c 26 3d 33 3d |.<"<g<w<|.<.<&=3=|
|00001740| 40 3d 53 3d 67 3d 8d 3d | b0 3d e3 3d 0e 3e 25 3e |@=S=g=.=|.=.=.>%>|
|00001750| 36 3e 50 3e 91 3e ec 3e | d8 3f 00 00 00 00 00 00 |6>P>.>.>|.?......|
|00001760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017c0| 64 00 00 00 20 00 00 00 | 00 00 00 00 00 00 00 00 |d... ...|........|
|000017d0| 60 02 00 00 20 13 00 00 | e0 0f 00 00 00 07 00 00 |`... ...|........|
|000017e0| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000017f0| 03 00 24 54 36 39 34 31 | 00 00 38 03 00 00 01 00 |..$T6941|..8.....|
|00001800| 00 00 03 00 24 54 36 39 | 36 36 00 00 48 03 00 00 |....$T69|66..H...|
|00001810| 01 00 00 00 03 00 24 54 | 36 39 39 33 00 00 70 03 |......$T|6993..p.|
|00001820| 00 00 01 00 00 00 03 00 | 24 53 47 36 38 34 37 00 |........|$SG6847.|
|00001830| 30 0c 00 00 01 00 00 00 | 03 00 24 53 47 36 38 36 |0.......|..$SG686|
|00001840| 33 00 e0 0c 00 00 01 00 | 00 00 03 00 24 53 47 36 |3.......|....$SG6|
|00001850| 38 36 30 00 b8 0c 00 00 | 01 00 00 00 03 00 24 53 |860.....|......$S|
|00001860| 47 36 38 35 37 00 98 0c | 00 00 01 00 00 00 03 00 |G6857...|........|
|00001870| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00001880| 03 00 24 52 30 30 30 30 | 30 30 80 13 00 00 03 00 |..$R0000|00......|
|00001890| 00 00 03 00 2e 69 64 61 | 74 61 24 36 da 12 00 00 |.....ida|ta$6....|
|000018a0| 02 00 00 00 03 00 2e 74 | 65 78 74 00 00 00 04 0f |.......t|ext.....|
|000018b0| 00 00 01 00 00 00 03 01 | d1 00 00 00 04 00 47 00 |........|......G.|
|000018c0| 00 00 00 00 00 00 00 00 | 00 00 24 24 24 30 30 30 |........|..$$$000|
|000018d0| 30 31 0c 0f 00 00 01 00 | 20 00 03 01 0e 00 00 00 |01......| .......|
|000018e0| 00 00 00 00 ae 01 00 00 | 13 00 00 00 00 00 24 24 |........|......$$|
|000018f0| 24 30 30 30 30 34 d5 0f | 00 00 01 00 20 00 03 01 |$00004..|.... ...|
|00001900| 23 00 00 00 00 00 00 00 | 52 03 00 00 00 00 00 00 |#.......|R.......|
|00001910| 00 00 00 00 00 00 83 07 | 00 00 84 0f 00 00 01 00 |........|........|
|00001920| 00 00 03 00 00 00 00 00 | 90 07 00 00 8f 0f 00 00 |........|........|
|00001930| 01 00 00 00 03 00 00 00 | 00 00 9c 07 00 00 b2 0f |........|........|
|00001940| 00 00 01 00 00 00 03 00 | 5f 6c 68 5f 74 6f 70 00 |........|_lh_top.|
|00001950| 3b 0f 00 00 01 00 00 00 | 03 00 00 00 00 00 a7 07 |;.......|........|
|00001960| 00 00 96 0f 00 00 01 00 | 00 00 03 00 00 00 00 00 |........|........|
|00001970| b1 07 00 00 9d 0f 00 00 | 01 00 00 00 03 00 2e 74 |........|.......t|
|00001980| 65 78 74 00 00 00 44 0e | 00 00 01 00 00 00 03 01 |ext...D.|........|
|00001990| bf 00 00 00 04 00 3d 00 | 00 00 00 00 00 00 00 00 |......=.|........|
|000019a0| 00 00 00 00 00 00 bf 07 | 00 00 5c 0e 00 00 01 00 |........|..\.....|
|000019b0| 00 00 03 00 24 24 24 30 | 30 30 30 31 44 0e 00 00 |....$$$0|0001D...|
|000019c0| 01 00 20 00 03 01 0f 00 | 00 00 00 00 00 00 9c 01 |.. .....|........|
|000019d0| 00 00 14 00 00 00 00 00 | 24 24 24 30 30 30 30 33 |........|$$$00003|
|000019e0| 64 0e 00 00 01 00 20 00 | 03 01 1d 00 00 00 00 00 |d..... .|........|
|000019f0| 00 00 cc 01 00 00 22 00 | 00 00 00 00 00 00 00 00 |......".|........|
|00001a00| ca 07 00 00 64 0e 00 00 | 01 00 20 00 03 01 24 00 |....d...|.. ...$.|
|00001a10| 00 00 22 00 00 00 d2 01 | 00 00 29 00 00 00 00 00 |..".....|..).....|
|00001a20| 24 24 24 30 30 30 30 35 | 86 0e 00 00 01 00 20 00 |$$$00005|...... .|
|00001a30| 03 01 2b 00 00 00 00 00 | 00 00 08 02 00 00 30 00 |..+.....|......0.|
|00001a40| 00 00 00 00 24 24 24 30 | 30 30 30 37 e0 0e 00 00 |....$$$0|0007....|
|00001a50| 01 00 20 00 03 01 39 00 | 00 00 00 00 00 00 c2 02 |.. ...9.|........|
|00001a60| 00 00 3e 00 00 00 00 00 | 24 24 24 30 30 30 30 39 |..>.....|$$$00009|
|00001a70| 03 0f 00 00 01 00 20 00 | 03 01 47 00 00 00 00 00 |...... .|..G.....|
|00001a80| 00 00 04 03 00 00 00 00 | 00 00 00 00 5f 6c 75 5f |........|...._lu_|
|00001a90| 64 6f 6e 65 d2 0e 00 00 | 01 00 00 00 03 00 00 00 |done....|........|
|00001aa0| 00 00 db 07 00 00 85 0e | 00 00 01 00 00 00 03 00 |........|........|
|00001ab0| 00 00 00 00 e6 07 00 00 | d0 0e 00 00 01 00 00 00 |........|........|
|00001ac0| 03 00 5f 6c 75 5f 74 6f | 70 00 a3 0e 00 00 01 00 |.._lu_to|p.......|
|00001ad0| 00 00 03 00 5f 61 74 5f | 64 6f 6e 65 02 0f 00 00 |...._at_|done....|
|00001ae0| 01 00 00 00 03 00 2e 69 | 64 61 74 61 24 36 10 13 |.......i|data$6..|
|00001af0| 00 00 02 00 00 00 03 00 | 68 65 61 64 65 72 00 00 |........|header..|
|00001b00| 00 00 00 00 fe ff 00 00 | 02 00 00 00 00 00 5b 01 |........|......[.|
|00001b10| 00 00 00 00 00 00 ff ff | 00 00 02 00 00 00 00 00 |........|........|
|00001b20| 58 02 00 00 60 02 00 00 | 01 00 00 00 02 00 00 00 |X...`...|........|
|00001b30| 00 00 87 02 00 00 64 02 | 00 00 01 00 00 00 02 00 |......d.|........|
|00001b40| 00 00 00 00 6e 07 00 00 | 68 02 00 00 01 00 00 00 |....n...|h.......|
|00001b50| 02 00 00 00 00 00 3f 01 | 00 00 6c 02 00 00 01 00 |......?.|..l.....|
|00001b60| 00 00 02 00 00 00 00 00 | 7b 01 00 00 70 02 00 00 |........|{...p...|
|00001b70| 01 00 00 00 02 00 00 00 | 00 00 8c 01 00 00 74 02 |........|......t.|
|00001b80| 00 00 01 00 00 00 02 00 | 00 00 00 00 a8 01 00 00 |........|........|
|00001b90| 78 02 00 00 01 00 00 00 | 02 00 00 00 00 00 c0 01 |x.......|........|
|00001ba0| 00 00 7c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..|.....|........|
|00001bb0| d9 01 00 00 80 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001bc0| 00 00 f7 01 00 00 84 02 | 00 00 01 00 00 00 02 00 |........|........|
|00001bd0| 00 00 00 00 1b 02 00 00 | 88 02 00 00 01 00 00 00 |........|........|
|00001be0| 02 00 00 00 00 00 34 02 | 00 00 8c 02 00 00 01 00 |......4.|........|
|00001bf0| 00 00 02 00 00 00 00 00 | 6d 02 00 00 90 02 00 00 |........|m.......|
|00001c00| 01 00 00 00 02 00 00 00 | 00 00 9c 02 00 00 94 02 |........|........|
|00001c10| 00 00 01 00 00 00 02 00 | 00 00 00 00 bc 02 00 00 |........|........|
|00001c20| 98 02 00 00 01 00 00 00 | 02 00 00 00 00 00 c8 05 |........|........|
|00001c30| 00 00 98 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001c40| 18 01 00 00 9c 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001c50| 00 00 e8 02 00 00 a0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00001c60| 00 00 00 00 04 03 00 00 | a4 02 00 00 01 00 00 00 |........|........|
|00001c70| 02 00 00 00 00 00 25 03 | 00 00 a8 02 00 00 01 00 |......%.|........|
|00001c80| 00 00 02 00 00 00 00 00 | 40 03 00 00 ac 02 00 00 |........|@.......|
|00001c90| 01 00 00 00 02 00 00 00 | 00 00 5b 03 00 00 b0 02 |........|..[.....|
|00001ca0| 00 00 01 00 00 00 02 00 | 00 00 00 00 7c 03 00 00 |........|....|...|
|00001cb0| b4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 94 03 |........|........|
|00001cc0| 00 00 b8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001cd0| b2 03 00 00 bc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001ce0| 00 00 d0 03 00 00 c0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00001cf0| 00 00 00 00 ee 03 00 00 | c4 02 00 00 01 00 00 00 |........|........|
|00001d00| 02 00 00 00 00 00 07 04 | 00 00 c8 02 00 00 01 00 |........|........|
|00001d10| 00 00 02 00 00 00 00 00 | 24 07 00 00 cc 02 00 00 |........|$.......|
|00001d20| 01 00 00 00 02 00 00 00 | 00 00 09 01 00 00 d0 02 |........|........|
|00001d30| 00 00 01 00 00 00 02 00 | 00 00 00 00 cb 02 00 00 |........|........|
|00001d40| d4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 ee 00 |........|........|
|00001d50| 00 00 d8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001d60| 0a 07 00 00 dc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001d70| 00 00 13 00 00 00 7c 03 | 00 00 01 00 20 00 02 00 |......|.|.... ...|
|00001d80| 00 00 00 00 32 00 00 00 | 3a 05 00 00 01 00 20 00 |....2...|:..... .|
|00001d90| 02 00 00 00 00 00 4b 00 | 00 00 8a 07 00 00 01 00 |......K.|........|
|00001da0| 20 00 02 00 00 00 00 00 | 5a 00 00 00 b2 07 00 00 | .......|Z.......|
|00001db0| 01 00 20 00 02 00 00 00 | 00 00 70 00 00 00 58 08 |.. .....|..p...X.|
|00001dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 8a 00 00 00 |.... ...|........|
|00001dd0| b0 08 00 00 01 00 20 00 | 02 00 00 00 00 00 a1 00 |...... .|........|
|00001de0| 00 00 3a 09 00 00 01 00 | 20 00 02 00 00 00 00 00 |..:.....| .......|
|00001df0| b1 00 00 00 f2 09 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00001e00| 00 00 ca 00 00 00 78 0b | 00 00 01 00 20 00 02 00 |......x.|.... ...|
|00001e10| 00 00 00 00 dd 00 00 00 | 58 0c 00 00 01 00 20 00 |........|X..... .|
|00001e20| 02 00 00 00 00 00 04 00 | 00 00 16 0d 00 00 01 00 |........|........|
|00001e30| 20 00 02 00 00 00 00 00 | 9e 04 00 00 44 0e 00 00 | .......|....D...|
|00001e40| 01 00 20 00 02 00 00 00 | 00 00 af 04 00 00 86 0e |.. .....|........|
|00001e50| 00 00 01 00 20 00 02 00 | 00 00 00 00 bf 04 00 00 |.... ...|........|
|00001e60| e0 0e 00 00 01 00 20 00 | 02 00 00 00 00 00 69 01 |...... .|......i.|
|00001e70| 00 00 0c 0f 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00001e80| d6 04 00 00 ba 0f 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00001e90| 00 00 90 04 00 00 d6 0f | 00 00 01 00 20 00 02 00 |........|.... ...|
|00001ea0| 00 00 00 00 3c 04 00 00 | e0 0f 00 00 02 00 00 00 |....<...|........|
|00001eb0| 02 00 00 00 00 00 47 07 | 00 00 f4 0f 00 00 02 00 |......G.|........|
|00001ec0| 00 00 02 00 00 00 00 00 | f1 06 00 00 08 10 00 00 |........|........|
|00001ed0| 02 00 00 00 02 00 65 6e | 64 00 00 00 00 00 c0 17 |......en|d.......|
|00001ee0| 00 00 fe ff 00 00 02 00 | f3 07 00 00 5f 44 72 69 |........|...._Dri|
|00001ef0| 76 65 72 45 6e 74 72 79 | 40 38 00 5f 50 72 6f 63 |verEntry|@8._Proc|
|00001f00| 45 78 70 47 65 74 43 6f | 6d 70 6f 6e 65 6e 74 46 |ExpGetCo|mponentF|
|00001f10| 69 6c 65 4e 61 6d 65 40 | 38 00 5f 50 72 6f 63 45 |ileName@|8._ProcE|
|00001f20| 78 70 47 65 74 4f 62 6a | 65 63 74 4e 61 6d 65 40 |xpGetObj|ectName@|
|00001f30| 31 32 00 5f 50 72 6f 63 | 45 78 70 4f 70 65 6e 40 |12._Proc|ExpOpen@|
|00001f40| 38 00 5f 50 72 6f 63 45 | 78 70 52 65 61 64 4b 73 |8._ProcE|xpReadKs|
|00001f50| 74 61 63 6b 40 31 32 00 | 5f 50 72 6f 63 45 78 70 |tack@12.|_ProcExp|
|00001f60| 47 65 74 4d 75 74 61 6e | 74 4f 77 6e 65 72 40 31 |GetMutan|tOwner@1|
|00001f70| 32 00 5f 50 72 6f 63 45 | 78 70 47 65 74 4b 63 6f |2._ProcE|xpGetKco|
|00001f80| 6e 74 65 78 74 40 31 32 | 00 5f 50 72 6f 63 45 78 |ntext@12|._ProcEx|
|00001f90| 70 43 6c 6f 73 65 40 34 | 00 5f 50 72 6f 63 45 78 |pClose@4|._ProcEx|
|00001fa0| 70 44 65 76 69 63 65 43 | 6f 6e 74 72 6f 6c 40 33 |pDeviceC|ontrol@3|
|00001fb0| 36 00 5f 50 72 6f 63 45 | 78 70 44 69 73 70 61 74 |6._ProcE|xpDispat|
|00001fc0| 63 68 40 38 00 5f 50 72 | 6f 63 45 78 70 55 6e 6c |ch@8._Pr|ocExpUnl|
|00001fd0| 6f 61 64 40 34 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |oad@4.__|imp__Rtl|
|00001fe0| 46 72 65 65 41 6e 73 69 | 53 74 72 69 6e 67 40 34 |FreeAnsi|String@4|
|00001ff0| 00 5f 5f 69 6d 70 5f 5f | 73 74 72 6e 63 70 79 00 |.__imp__|strncpy.|
|00002000| 5f 5f 69 6d 70 5f 5f 52 | 74 6c 55 6e 69 63 6f 64 |__imp__R|tlUnicod|
|00002010| 65 53 74 72 69 6e 67 54 | 6f 41 6e 73 69 53 74 72 |eStringT|oAnsiStr|
|00002020| 69 6e 67 40 31 32 00 5f | 5f 69 6d 70 5f 5f 4f 62 |ing@12._|_imp__Ob|
|00002030| 51 75 65 72 79 4e 61 6d | 65 53 74 72 69 6e 67 40 |QueryNam|eString@|
|00002040| 31 36 00 5f 5f 65 78 63 | 65 70 74 5f 6c 69 73 74 |16.__exc|ept_list|
|00002050| 00 5f 5f 65 78 63 65 70 | 74 5f 68 61 6e 64 6c 65 |.__excep|t_handle|
|00002060| 72 33 00 5f 5f 69 6d 70 | 5f 5f 5a 77 43 6c 6f 73 |r3.__imp|__ZwClos|
|00002070| 65 40 34 00 5f 5f 69 6d | 70 5f 5f 5a 77 44 75 70 |e@4.__im|p__ZwDup|
|00002080| 6c 69 63 61 74 65 4f 62 | 6a 65 63 74 40 32 38 00 |licateOb|ject@28.|
|00002090| 5f 5f 69 6d 70 5f 5f 5a | 77 4f 70 65 6e 50 72 6f |__imp__Z|wOpenPro|
|000020a0| 63 65 73 73 40 31 36 00 | 5f 5f 69 6d 70 5f 5f 4b |cess@16.|__imp__K|
|000020b0| 65 44 65 74 61 63 68 50 | 72 6f 63 65 73 73 40 30 |eDetachP|rocess@0|
|000020c0| 00 5f 5f 69 6d 70 5f 40 | 4f 62 66 44 65 72 65 66 |.__imp_@|ObfDeref|
|000020d0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 40 34 00 5f |erenceOb|ject@4._|
|000020e0| 5f 69 6d 70 5f 5f 4f 62 | 52 65 66 65 72 65 6e 63 |_imp__Ob|Referenc|
|000020f0| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 40 |eObjectB|yHandle@|
|00002100| 32 34 00 5f 5f 69 6d 70 | 5f 5f 4b 65 41 74 74 61 |24.__imp|__KeAtta|
|00002110| 63 68 50 72 6f 63 65 73 | 73 40 34 00 5f 5f 69 6d |chProces|s@4.__im|
|00002120| 70 5f 5f 50 73 4c 6f 6f | 6b 75 70 50 72 6f 63 65 |p__PsLoo|kupProce|
|00002130| 73 73 42 79 50 72 6f 63 | 65 73 73 49 64 40 38 00 |ssByProc|essId@8.|
|00002140| 5f 5f 69 6d 70 5f 40 4b | 66 4c 6f 77 65 72 49 72 |__imp_@K|fLowerIr|
|00002150| 71 6c 40 34 00 5f 5f 69 | 6d 70 5f 5f 4d 6d 49 73 |ql@4.__i|mp__MmIs|
|00002160| 41 64 64 72 65 73 73 56 | 61 6c 69 64 40 34 00 5f |AddressV|alid@4._|
|00002170| 5f 69 6d 70 5f 40 4b 66 | 52 61 69 73 65 49 72 71 |_imp_@Kf|RaiseIrq|
|00002180| 6c 40 34 00 5f 5f 69 6d | 70 5f 5f 4f 62 4f 70 65 |l@4.__im|p__ObOpe|
|00002190| 6e 4f 62 6a 65 63 74 42 | 79 50 6f 69 6e 74 65 72 |nObjectB|yPointer|
|000021a0| 40 32 38 00 5f 4e 74 42 | 75 69 6c 64 4e 75 6d 62 |@28._NtB|uildNumb|
|000021b0| 65 72 00 5f 5f 69 6d 70 | 5f 5f 5a 77 4f 70 65 6e |er.__imp|__ZwOpen|
|000021c0| 50 72 6f 63 65 73 73 54 | 6f 6b 65 6e 40 31 32 00 |ProcessT|oken@12.|
|000021d0| 5f 5f 69 6d 70 5f 40 49 | 6f 66 43 6f 6d 70 6c 65 |__imp_@I|ofComple|
|000021e0| 74 65 52 65 71 75 65 73 | 74 40 38 00 5f 5f 69 6d |teReques|t@8.__im|
|000021f0| 70 5f 5f 53 65 52 65 6c | 65 61 73 65 53 75 62 6a |p__SeRel|easeSubj|
|00002200| 65 63 74 43 6f 6e 74 65 | 78 74 40 34 00 5f 5f 69 |ectConte|xt@4.__i|
|00002210| 6d 70 5f 5f 53 65 50 72 | 69 76 69 6c 65 67 65 43 |mp__SePr|ivilegeC|
|00002220| 68 65 63 6b 40 31 32 00 | 5f 5f 69 6d 70 5f 5f 45 |heck@12.|__imp__E|
|00002230| 78 47 65 74 50 72 65 76 | 69 6f 75 73 4d 6f 64 65 |xGetPrev|iousMode|
|00002240| 40 30 00 5f 5f 69 6d 70 | 5f 5f 53 65 43 61 70 74 |@0.__imp|__SeCapt|
|00002250| 75 72 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |ureSubje|ctContex|
|00002260| 74 40 34 00 5f 5f 69 6d | 70 5f 5f 49 6f 44 65 6c |t@4.__im|p__IoDel|
|00002270| 65 74 65 44 65 76 69 63 | 65 40 34 00 5f 5f 69 6d |eteDevic|e@4.__im|
|00002280| 70 5f 5f 49 6f 44 65 6c | 65 74 65 53 79 6d 62 6f |p__IoDel|eteSymbo|
|00002290| 6c 69 63 4c 69 6e 6b 40 | 34 00 5f 5f 69 6d 70 5f |licLink@|4.__imp_|
|000022a0| 5f 52 74 6c 49 6e 69 74 | 55 6e 69 63 6f 64 65 53 |_RtlInit|UnicodeS|
|000022b0| 74 72 69 6e 67 40 38 00 | 5f 5f 69 6d 70 5f 5f 49 |tring@8.|__imp__I|
|000022c0| 6f 43 72 65 61 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oCreateS|ymbolicL|
|000022d0| 69 6e 6b 40 38 00 5f 5f | 69 6d 70 5f 5f 49 6f 43 |ink@8.__|imp__IoC|
|000022e0| 72 65 61 74 65 44 65 76 | 69 63 65 40 32 38 00 5f |reateDev|ice@28._|
|000022f0| 5f 69 6d 70 5f 5f 45 78 | 41 6c 6c 6f 63 61 74 65 |_imp__Ex|Allocate|
|00002300| 50 6f 6f 6c 57 69 74 68 | 54 61 67 40 31 32 00 5f |PoolWith|Tag@12._|
|00002310| 52 74 6c 46 72 65 65 41 | 6e 73 69 53 74 72 69 6e |RtlFreeA|nsiStrin|
|00002320| 67 40 34 00 5f 5f 49 4d | 50 4f 52 54 5f 44 45 53 |g@4.__IM|PORT_DES|
|00002330| 43 52 49 50 54 4f 52 5f | 6e 74 6f 73 6b 72 6e 6c |CRIPTOR_|ntoskrnl|
|00002340| 00 5f 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |._RtlUni|codeStri|
|00002350| 6e 67 54 6f 41 6e 73 69 | 53 74 72 69 6e 67 40 31 |ngToAnsi|String@1|
|00002360| 32 00 5f 4f 62 51 75 65 | 72 79 4e 61 6d 65 53 74 |2._ObQue|ryNameSt|
|00002370| 72 69 6e 67 40 31 36 00 | 5f 52 74 6c 55 6e 77 69 |ring@16.|_RtlUnwi|
|00002380| 6e 64 40 31 36 00 5f 5f | 67 6c 6f 62 61 6c 5f 75 |nd@16.__|global_u|
|00002390| 6e 77 69 6e 64 32 00 5f | 5f 6c 6f 63 61 6c 5f 75 |nwind2._|_local_u|
|000023a0| 6e 77 69 6e 64 32 00 5f | 5f 61 62 6e 6f 72 6d 61 |nwind2._|_abnorma|
|000023b0| 6c 5f 74 65 72 6d 69 6e | 61 74 69 6f 6e 00 5f 5f |l_termin|ation.__|
|000023c0| 73 65 68 5f 6c 6f 6e 67 | 6a 6d 70 5f 75 6e 77 69 |seh_long|jmp_unwi|
|000023d0| 6e 64 40 34 00 5f 5a 77 | 43 6c 6f 73 65 40 34 00 |nd@4._Zw|Close@4.|
|000023e0| 5f 5a 77 44 75 70 6c 69 | 63 61 74 65 4f 62 6a 65 |_ZwDupli|cateObje|
|000023f0| 63 74 40 32 38 00 5f 5a | 77 4f 70 65 6e 50 72 6f |ct@28._Z|wOpenPro|
|00002400| 63 65 73 73 40 31 36 00 | 5f 4b 65 44 65 74 61 63 |cess@16.|_KeDetac|
|00002410| 68 50 72 6f 63 65 73 73 | 40 30 00 40 4f 62 66 44 |hProcess|@0.@ObfD|
|00002420| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00002430| 40 34 00 5f 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |@4._ObRe|ferenceO|
|00002440| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 40 32 34 |bjectByH|andle@24|
|00002450| 00 5f 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |._KeAtta|chProces|
|00002460| 73 40 34 00 5f 50 73 4c | 6f 6f 6b 75 70 50 72 6f |s@4._PsL|ookupPro|
|00002470| 63 65 73 73 42 79 50 72 | 6f 63 65 73 73 49 64 40 |cessByPr|ocessId@|
|00002480| 38 00 5f 4d 6d 49 73 41 | 64 64 72 65 73 73 56 61 |8._MmIsA|ddressVa|
|00002490| 6c 69 64 40 34 00 5f 4f | 62 4f 70 65 6e 4f 62 6a |lid@4._O|bOpenObj|
|000024a0| 65 63 74 42 79 50 6f 69 | 6e 74 65 72 40 32 38 00 |ectByPoi|nter@28.|
|000024b0| 5f 5f 69 6d 70 5f 5f 4e | 74 42 75 69 6c 64 4e 75 |__imp__N|tBuildNu|
|000024c0| 6d 62 65 72 00 5f 5a 77 | 4f 70 65 6e 50 72 6f 63 |mber._Zw|OpenProc|
|000024d0| 65 73 73 54 6f 6b 65 6e | 40 31 32 00 40 49 6f 66 |essToken|@12.@Iof|
|000024e0| 43 6f 6d 70 6c 65 74 65 | 52 65 71 75 65 73 74 40 |Complete|Request@|
|000024f0| 38 00 5f 53 65 52 65 6c | 65 61 73 65 53 75 62 6a |8._SeRel|easeSubj|
|00002500| 65 63 74 43 6f 6e 74 65 | 78 74 40 34 00 5f 53 65 |ectConte|xt@4._Se|
|00002510| 50 72 69 76 69 6c 65 67 | 65 43 68 65 63 6b 40 31 |Privileg|eCheck@1|
|00002520| 32 00 5f 45 78 47 65 74 | 50 72 65 76 69 6f 75 73 |2._ExGet|Previous|
|00002530| 4d 6f 64 65 40 30 00 5f | 53 65 43 61 70 74 75 72 |Mode@0._|SeCaptur|
|00002540| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 40 |eSubject|Context@|
|00002550| 34 00 5f 49 6f 44 65 6c | 65 74 65 44 65 76 69 63 |4._IoDel|eteDevic|
|00002560| 65 40 34 00 5f 49 6f 44 | 65 6c 65 74 65 53 79 6d |e@4._IoD|eleteSym|
|00002570| 62 6f 6c 69 63 4c 69 6e | 6b 40 34 00 5f 52 74 6c |bolicLin|k@4._Rtl|
|00002580| 49 6e 69 74 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |InitUnic|odeStrin|
|00002590| 67 40 38 00 5f 49 6f 43 | 72 65 61 74 65 53 79 6d |g@8._IoC|reateSym|
|000025a0| 62 6f 6c 69 63 4c 69 6e | 6b 40 38 00 5f 49 6f 43 |bolicLin|k@8._IoC|
|000025b0| 72 65 61 74 65 44 65 76 | 69 63 65 40 32 38 00 5f |reateDev|ice@28._|
|000025c0| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|000025d0| 74 68 54 61 67 40 31 32 | 00 5f 5f 4e 55 4c 4c 5f |thTag@12|.__NULL_|
|000025e0| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|000025f0| 52 00 7f 6e 74 6f 73 6b | 72 6e 6c 5f 4e 55 4c 4c |R..ntosk|rnl_NULL|
|00002600| 5f 54 48 55 4e 4b 5f 44 | 41 54 41 00 5f 5f 69 6d |_THUNK_D|ATA.__im|
|00002610| 70 5f 5f 52 74 6c 55 6e | 77 69 6e 64 40 31 36 00 |p__RtlUn|wind@16.|
|00002620| 40 4b 66 4c 6f 77 65 72 | 49 72 71 6c 40 34 00 5f |@KfLower|Irql@4._|
|00002630| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00002640| 4f 52 5f 48 41 4c 00 40 | 4b 66 52 61 69 73 65 49 |OR_HAL.@|KfRaiseI|
|00002650| 72 71 6c 40 34 00 7f 48 | 41 4c 5f 4e 55 4c 4c 5f |rql@4..H|AL_NULL_|
|00002660| 54 48 55 4e 4b 5f 44 41 | 54 41 00 5f 6c 68 5f 63 |THUNK_DA|TA._lh_c|
|00002670| 6f 6e 74 69 6e 75 65 00 | 5f 6c 68 5f 64 69 73 6d |ontinue.|_lh_dism|
|00002680| 69 73 73 00 5f 6c 68 5f | 72 65 74 75 72 6e 00 5f |iss._lh_|return._|
|00002690| 6c 68 5f 62 61 67 69 74 | 00 5f 6c 68 5f 75 6e 77 |lh_bagit|._lh_unw|
|000026a0| 69 6e 64 69 6e 67 00 5f | 67 75 5f 72 65 74 75 72 |inding._|gu_retur|
|000026b0| 6e 00 5f 5f 75 6e 77 69 | 6e 64 5f 68 61 6e 64 6c |n.__unwi|nd_handl|
|000026c0| 65 72 00 5f 75 68 5f 72 | 65 74 75 72 6e 00 5f 6c |er._uh_r|eturn._l|
|000026d0| 75 5f 63 6f 6e 74 69 6e | 75 65 00 00 01 00 00 00 |u_contin|ue......|
|000026e0| 10 01 00 00 00 00 00 00 | 64 3a 5c 77 69 6e 64 64 |........|d:\windd|
|000026f0| 6b 5c 31 33 38 31 5c 6c | 69 62 5c 69 33 38 36 5c |k\1381\l|ib\i386\|
|00002700| 66 72 65 65 5c 70 72 6f | 63 65 78 70 2e 73 79 73 |free\pro|cexp.sys|
|00002710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000027e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 7c 03 00 00 |........|....|...|
|000027f0| be 01 00 00 0c 00 00 00 | 02 00 26 d3 3a 05 00 00 |........|..&.:...|
|00002800| 4f 02 00 00 1e 00 00 00 | 03 00 26 d3 8a 07 00 00 |O.......|..&.....|
|00002810| 27 00 00 00 00 00 00 00 | 02 00 00 00 b2 07 00 00 |'.......|........|
|00002820| a5 00 00 00 02 00 00 00 | 03 00 09 d3 58 08 00 00 |........|....X...|
|00002830| 58 00 00 00 01 00 00 00 | 03 00 04 d1 b0 08 00 00 |X.......|........|
|00002840| 89 00 00 00 01 00 00 00 | 03 00 0b d3 3a 09 00 00 |........|....:...|
|00002850| b7 00 00 00 0a 00 00 00 | 01 00 23 d3 f2 09 00 00 |........|..#.....|
|00002860| 86 01 00 00 01 00 00 00 | 09 00 11 d3 78 0b 00 00 |........|....x...|
|00002870| b7 00 00 00 0b 00 00 00 | 02 00 10 d3 58 0c 00 00 |........|....X...|
|00002880| 3f 00 00 00 0d 00 00 00 | 01 00 08 d2 16 0d 00 00 |?.......|........|
|00002890| 2e 01 00 00 28 00 00 00 | 02 00 0c d3             |....(...|....    |
+--------+-------------------------+-------------------------+--------+--------+